last executing test programs: 1m39.605661233s ago: executing program 2 (id=3): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) lseek(r0, 0x8000, 0x3) 1m38.914883604s ago: executing program 2 (id=7): socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m38.249214237s ago: executing program 2 (id=11): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000200)='./file1\x00', 0xee00, 0xffffffffffffffff, 0x0) 1m37.965526756s ago: executing program 2 (id=12): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0xf8}, @val={0x2, 0x3, 0x6, 0x68, 0x7ffc, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e22, 0x8}}}, 0x2a) 1m22.890158419s ago: executing program 32 (id=12): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0xf8}, @val={0x2, 0x3, 0x6, 0x68, 0x7ffc, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e22, 0x8}}}, 0x2a) 49.992248887s ago: executing program 0 (id=170): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa10100000009b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad7c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af801034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 49.715571454s ago: executing program 0 (id=173): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB], 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00"/90], 0xf8}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x2}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7ee643bd1282d893}}}, 0xf8}}, 0x0) sendto$inet(r3, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r3}, 0x20) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) 48.812421813s ago: executing program 0 (id=176): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 48.649892217s ago: executing program 0 (id=178): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@gid}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@keep_last_dots}, {@utf8}, {@keep_last_dots}]}, 0x1, 0x152c, &(0x7f0000001f80)="$eJzs3AuYTtUaOPD3XWvtMSS+JrkMa6138yWXZZIklyS5JEklSXJLSJrkSEJiCEkakpBchiSGkFwmJo37/X5JSJImSUJyS9b/mfB3OnX+dc7pn/OceX/Ps59Z76y91n73936Xtfcz833TZUitxrWrNyQi+I/g+R9JABALAAMAIC8ABABQPq58XFZ/TolJ/9lB2J/rgdTLnQG7nLj+2RvXP3vj+mdvXP/sjeufvXH9szeuf/bG9WcsO9s4tdBVvGXfje//Z2f8+f8/JLPMmC9Wl7mmK0DMHx3C9c/euP7/s4I/shPXP3vj+mdXsZc7AfZfgF//2UGOf9rD9c/euP6MZWeX+/7z5d4g8l/2GBzOeb4wf9X5M8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjf4FT/hIFABfblzsvxhhjjDHGGGOM/Xl8jsudAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBAFdCHsgLEbgK4uBqyAfXQH4oAAWhEMRDYSgCGgxYIAihKBSDKFwLxeE6KAEloRSUBgdlIAGuh7JwA5SDG6E83AQV4GaoCJWgMlSBW6Aq3ArV4DaoDrdDDagJtaA23AF14E6oC3dBPbgb6sM9cC/cBw3gfmgID0AjeBAaw0PQBB6GptAMmkMLaPlvjX8OesDz0BN6QRL0hj7wAvSFftAfXoQB8BIMhJdhELwCyTAYhsCrMBReg2HwOgyHETAS3oBR8CaMhjEwFsZBCoyHCfAWTIS3YRK8A5NhCqTCVJgG78J0mAEz4T2YBe/DbJgDc2EepMEHMB8WQDp8CAvhI8iARbAYlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtvhY9gBn8BO2AW74VPYA5/9i+NP/sP4rggIKFCgQoUxGIOxGIu5MBfmxtyYB/NgBCMYh3GYD/NhfsyPBbEgxmM8FsEiaNAgIWFRLIpRjGJxLI4lsASWwlLo0GECJmBZvAHLYTksj+WxAlbAilgJK2EVrIJVsSpWw2pYHatjDayBtbAW3oF3YG+si3WxHtbD+lj/4u0pbIgNsRE2wsbYGJtgE2yKTbE5NseW2BJbYStsja2xLbbFdtgO22N7TMRE7IAdsCN2xE7YCTtjZ+yCXbArdsNumc/lAHwen8deWEP0xj7YB/tico7++CK+iC/hQHwZX8ZXMBkH4xB8FV/F13AYnsDhOAJH4kisKt7E0TgGSYzDFEzBCTgBJ+JEzEr0HZyCqTgVp+E0nI4zcAa+h7PwfXwf5+AcnIdpmIbzcQGmYzouxJOYgYtwMS7BpbgMl+IKXIkrcDWuwdW4DtfhBtyAm3ATbsEtuA234ceoAPAT3IW7MBn34B7ci3txH+7D/bgfMzETD+ABPIgH8RAewsN4GI/gUTyGR/E4HscTeBJP4Sk8g2fwLD4T/1Wjj0uuSgaRRQklYkSMiBWxIpfIJXKL3CKPyCMiIiLiRJzIJ/KJ/CK/KCgKingRL4qIIsIII0iEMQAgoiIqioviooQoIUqJUsIJJxJEgigryopyopwoL24SFcTNoqKoJNq4KqKKqCraumriNlFdVBc1RE1RS9QWtUUdUUfUFXVFPVFP1Bf1xb3iPtFA9Mb++IDIqkxjMRibiCHYVDQT8sI7WCsxDFuLNqKteEyMwOHYXrRyieJJ0UGMxo7ib2IMPi06i3HYRTwruopuort4TvQQrV1P0UtMwt6ij5iCfUU/0V+8KKZjTfEezspZS7wiksVgMUS8Kubha2KYeF0MFyPESPGGGCXeFKPFGDFWjBMpYryYIN4SE8XbYpJ4R0wWU0SqmCqmiXfFdDFDzBTviVnifTFbzBFzxTyRJj4Q88UCkS4+FAvFRyJDLBKLxRKxVCwTy8UKsVKsEqvFGrFWrBPrxQaxUWwSm0UsbBXbxHbxsdghPhE7xS6xW3wq9ojPxF7xudgnvhD7xZciU3wlDoivxUHxjTgkvhWHxXfiiDgqjonvxXHxgzghTopT4rQ4I34UZ8VP4pzwAiRKIaVUMpAxMoeMlTllLnmFzC2DC4/uVTJOXi3zyWtkfllAFpSFZLwsLItILY20kmQoi8piMiqvlcXldbKELClLydLSyTIyQV4vy8obZDl5oywvb5IV5M2yoqwkK8sq8hZZVd4qIXL+GDVkTVlL1pZ3yCS4U9aVd8l68m5ZX94j75X3yQbyftlQPiAbyQdlY/mQbCIflk1lM9lctpAt5SOylXxUtpZtZFv5mGwnH5ft5RMyUT4pO0h/4SnytOwsn5Fd5LOyq+wmu8uf5DnpZU/ZS0JvkH3kC7Kv7Cf7xwKAfEkOlC/LQfIVmSwHyyHyVTlUviaHydflcDlCjpRvyFHyTTlajpFj5TiZIsfLCfItOVG+LSfJd+RkOUWmyqmyvxzw80wzpfzd8W/9xvhBPx99g9woN8nNcovcKrfJ7fJjuUPukDvlTrlb7pZ75B65V+6V++Q+uV/ul5kyUx6QB+RBeVAekofkYXlYHpFH5Wn5vTwuf5An5El5Up6WZ+QZefbCYwAKlVBSKRWoGJVDxaqcKpe6QuVWV6o8Kq+KqKtUnLpa5VPXqPyqgCqoCql4VVgVUVoZZRWpUBVVxVRUXYsXnjCqlCqtnCqjEtT1/8p4VVxdp0qokr8YfzG/pH+SX0vVUrVSrVRr1Vq1VW1VO9VOtVftVaJKVB1UB9VRdVSdVCfVWXVWXVSXrOeD6q66qx6qh+qpeqoklaT6qBdUX9VP9VcvqgHqJTVQDVSD1CCVrJLVEDVEDVVD1TA1TA1Xw9VINVKNUqPUaDVajVVjVYpKURPUBDVRTVST1CQ1WU1WqSpVTVPT1HQ1Xc1UM9UsNUvNVrPVXDVXpak0NV/NV+kqXS1UC1WGWqQWqSVqiVqmlqkVaoVapVapNWqNWqfWqQy1UW1Um9VmtVVtVdvVdrVD7VA7xU61W+1We9QetVftVfvUPrVf7VeZKlMdUAfUQXVQHVKH1GF1WB1RR9QxdUwdV8fVCXVCnVKn1Bl1Rp1VZ9U5dS5r2ReIQAQqUEFMEBPEBrFBriBXkDvIHeQJ8gSRIBLEBXFBvuCaIH9QICgYFArig8JBkUAHJrCBuFD0aHBtUDy4LigRlAxKBaUDF5QJEoLrg7LBDUG54MagfHBTUCG4OagYVAoqB1WCW4Kqwa1BteC2oHpwe1AjqBnUCmoHdwR1gjuDusFdQb3g7qB+cE9wb3Bf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmQbOgedAiaPmnzu/9iQKPup66l07SvXUf/YLuq/vp/vpFPUC/pAfql/Ug/YpO1oP1EP2qHqpf08P063q4HqFH6jf0KP2mHq3H6LF6nE7R4/UE/ZaeqN/Wk/Q7erKeolP1VD1Nv6un6xl6pn5Pz9Lv69l6jp6r5+k0/YGerxfodP2hXqg/0hl6kV6sl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q4/1jv0J3qn3qV360/1Hv2Z3qs/1/v0F3q//lJn6q/0Af21Pqi/0Yf0t/qw/k4f0Uf1Mf29Pq5/0Cf0SX1Kn9Zn9I/6rP5Jn9M+a3Gf9fFulFEmxsSYWBNrcplcJrfJbfKYPCZiIibOxJl8Jp/Jb/KbgqagiTfxpogpYrKQIVPUFDVREzXFTXFTwpQwpUwp44wzCSbBlDVlTTlTzpQ35U0FU8FUNBVNZVPZ3GJuMbeaW81t5jZzu7nd1DQ1TW1T29QxdUxdU9fUM/VMfVPf3GvuNQ1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1Nc9PStDStTCvT2rQ2bU1b0860M+1Ne5NoEk0H08F0NB1NJ9PJdDadTRfTxXQ1XU130930MD1MT9PTJJkk08f0MX1NX9Pf9DcDzAAz0Aw0g8wgk2ySzRAzxAw1Q80wM8wMNyPMyKyFqnnTjDZjzFgzzqSYFDPBTDATzUQzyUwyk81kk2pSzTQzzUw3081MM9PMMrPMbDPbzDVzTZpJM/PNfJNu0s1Cs9BkmAyz2Cw2S81Ss9wsNyvNSrParDZrYa1Zb9abjWaj2Ww2m61mq9lutpsdZofZaXaa3Wa32WP2mL1mr9ln9pn9Zr/JNJnmgDlgDpqD5pA5ZA6bw+aIOWKOmWPmuDluTpgT5pQ5Zc6YAhc+L72JtTltLnuFzW2vtHlsXvuPcUFbyMbbwraI1Ta/LfCL2FhrS9iStpQtbZ0tYxPs9b+KK9pKtrKtYm+xVe2tttqv4jr2TlvX3mXr2bttbXvHL+L69h6btTppgAhgm9lGtoVtbB+yTezDtqltZpvbFradfdy2t0/YRPuk7WCf+lU83y6wK+0qu9qusTvtLnvKnrYH7Tf2jP3R9rS97AD7kh1oX7aD7Cs22Q7+VTzSvmFH2TftaDvGjrXjfhVPtlNsqp1qp9l37XQ741dxmv3AzrLpdradY+faeT/HWTml2w/tQvuRzbABLLZL7FK7zC63Ky7m6vPadXa93WB32E/sZrvFbrXb7PaLC2G7y+62n9o99jN7wH5t99kv7H57yGbar36Os87vkP3WHrbf2SP2qD1mv7fH7Q/q4uisc//e/mTPWW+BkIAkKQoohnJQLOWkXHQF5aYrKQ/lpQhdRXF0NeWjayg/FaCCVIjiqTAVIU2GLBGFVJSKUZSupYvplaLS5KgMJdD1VJZuoHJ0I5Wnm6gC3UwVqRJVpip0C1WlW6ka3UbV6XaqQTWpFtWmO6gO3Ul16S6qR3dTfbqH7qX7qAHdTw3pAWpED1Jjeoia0MPUlJpRc2pBLekRakWPUmtqQ23pMWpHj1N7eoIS6UnqQE9RR/obdaKnqTM9Q13oWepK3ag7PUc96HnqSb0oiXpTH3qB+lI/6k8v0gB6iQbSyzSIXqFkGkxD6FUaSq/RMHqdhtMIGklv0Ch6k0bTGBpL4yiFxtMEeosm0ts0id6hyTSFUmkqTaN3aTrNoJn0Hs2i92k2zaG5NI/S6AOaTwsonT6khfQRZdAiWkxLaCkto+W0glbSKlpNa2gtraP1tIE20ibaTFtoK22j7fQx7aBPaCftot30Ke2hzwjpc9pHX9B++pIy6Ss6QF/TQfqGDtG3vhd9R0foKB2j7+k4/UAn6CSdotN0hn6ks/QTnSNPEGIoQhmqMAhjwhxhbJgzzBVeEeYOrwzzhHnDSHhVGBdeHeYLrwnzhwXCgmGhMD4sHBYJdWhCG1IYhkXDYmE0vDYsHl4XlghLhqXC0qELy4QJ4fVh2fCGsFx4Y1g+vCmsEN4cVgwrhQ/dXSW8Jawa3hpWC28Lq4e3hzXCmmGtsHZ4R1gnvDOsG94V1gvvDsuF94T3hveFDcL7w4bhA2Gj8MGwcfhQ2CR8OGwaNgubhy3CluEjYavw0bB12CZsGz4WtgsfD9uHT4SJ4ZNhh/Cpn/vvWfDP+5PC3mGf8IXwhdD7u+Tc6LxoWvSD6Pzogmh69MPowuhH0Yzoouji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iao97VzgEMnnHTKBS7G5XCxLqfL5a5wud2VLo/L6yLuKhfnrnb53DUuvyvgCrpCLt4VdkWcdsZZRy50RV0xF3XXuuLuOlfClXSlXGnnXBmX4Fq4lq6la+Ueda1dG9fWPeYec4+7x90T7gn3pOvgnnId3d9cJ/e06+yecc+4Z11X1811d8+5Hm58nvOvySTXx/VxfV1f19/1dwPcADfQDXSD3CCX7JLdEDfEDXVD3TA3zA13w91IN9KNcqPcaDfajXVjXYpLcRPcBDfRTXST3CQ32U12qS7VTXPT3HQ33VWdcf4os91sN9fNdWkuzc13WWvGdLfQLXQZLsMtdovdUrfULXfL3Uq30q12q91at9atd+vdRrfRbXab3Va31W13290Ot8Pt9HnPT+r2uL1ur9vn9rn97kuX6b5yB9zX7qD7xh1y37rD7jt3xB11x9z37rj7wZ1wJ90pd9qdcT+6s+4nd855lxIZH5kQeSsyMfJ2ZFLknaxZI6mRqZFpkXcj0yMzIjMj70VmRd6PzI7MicyNzIukRT6IzI8siKRHPowsjHwUyYgsiiyOLIksjSyLeF94c+iL+mI+6q/1xf11voQv6Uv50t75Mj7BX+/L+ht8OX+jL+9v8hX8zb6ir+Qr+4d9U9/MN/ctfEv/iG/lH/WtfRvf1j/m2/nHfXv/hE/0T/oO/inf0f/Nd/JP+87+Gd/FP+u7+m6+u3/O9/DP+56+l0/yvX0f/4Lv6/v5/v5FP8C/5Af6l/0g/4pP9oP9EP+qH+pf88P86364H+FHxrzhR128RIZxPsWP9xP8W36if9tP8u/4yX6KT/VT/TT/rp/uZ/iZ/j0/y7/vZ/s5fq6f59P8B36+X+DT/Yd+of/IZ/hFF28q++V+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/nt/mO/w3/id/pdfrf/1O/xn/m9/nO/z3/h9/svfab/yh/wX/uD/ht/yH/rD/vv/BF/1B/z3/vj/gd/wp/0p/xpf8b/6M/6n/w5/p81xhhjjLE/ZPylpvhlz/nb+b1/Y4z4u537AMCVWwpl/n1/1opybf7z7X4ivl0EAJ7s1eWBi1uNGklJSRf2zZAQFJuTte6+ND4GLsWLoC08DonQBsr+Zv79RLcz9DvzR28CyPV3Y2LhUnxp/s8BMOk35n/ksZHzK4Sn4v4f888BKFHs0piccCleBG1/vr/SBsr9k/wLtPqd/HN+kQLQ+u/G5IZL8aX8E+BReAoSf7EnY4wxxhhjjDF2Xj9RudPF68+Lf/H5W9fn8erSmBxwKf6963PGGGOMMcYYY4xdfk936/7EI4mJbTr9641qv7+P+mMTxvxWVxP4dxPjxr/V8B7g/xYOAP7DCQGyGvKvPItNf8mxki+8dP6xa+lpH8B/Ryn/jMZlfmNijDHGGGOM/ekuLfp/+Xt1uRJijDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcayof/0O97gD3xL3+U+R8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xy+z8BAAD//9t19x0=") r0 = socket$unix(0x1, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 48.367587391s ago: executing program 0 (id=180): openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_setup(0x4b8e, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000001f6ff000000", @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x2, {0x1}}, 0x18) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x142}, {0xffffffffffffffff, 0x1}], 0x4, &(0x7f0000000400), &(0x7f0000000440), 0x8) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x8, 0xd, 0x7f, @vifc_lcl_ifindex, @private=0xa010100}, 0x10) 47.859770874s ago: executing program 0 (id=183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0xc, 0x4007, @fd=r0, 0x6, 0x0, 0x0, 0xa}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 46.905033101s ago: executing program 33 (id=183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0xc, 0x4007, @fd=r0, 0x6, 0x0, 0x0, 0xa}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 9.000338049s ago: executing program 5 (id=354): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) write$binfmt_elf64(r0, 0x0, 0x478) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 8.599819933s ago: executing program 5 (id=356): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6f050901030206d11d070380fc0930ea56c4f61cab1d07f3ff04"], 0x1a) 7.074617474s ago: executing program 4 (id=367): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r1], 0x398}}, 0x0) 7.043343405s ago: executing program 5 (id=369): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x2}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7ee643bd1282d893}}}, 0xf8}}, 0x0) sendto$inet(r3, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r3}, 0x20) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) 6.835466598s ago: executing program 1 (id=372): syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x4}, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf251b00000010002e800c0004000202aaaaaaaaaaaa0c00060003000000000000000c00060003000000030000000c000600020000000000000008000300", @ANYRES32=r3, @ANYBLOB="10002e"], 0x70}, 0x1, 0x0, 0x0, 0x54}, 0x80) 6.173764192s ago: executing program 4 (id=373): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000980)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20, 0xffff, 0x0, 0x9df}}, 0x120) syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x13380b0, &(0x7f0000000180), 0x0, 0x51e6, &(0x7f000001e780)="$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") r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, 0x0) 6.130552246s ago: executing program 5 (id=374): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) 6.094369376s ago: executing program 1 (id=375): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b30000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x7, 0xc1d5, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7800, 0x8000, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r6 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0xe000202b}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000060000180000001800000004000000ae04"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) unshare(0x22020600) syz_open_procfs(r2, &(0x7f00000006c0)='net/ip_vs_stats_percpu\x00') r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='[:]:/', 0x0) epoll_pwait(r7, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) 4.982623497s ago: executing program 1 (id=379): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x2, 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) writev(r0, &(0x7f00000016c0)=[{&(0x7f00000006c0)='X', 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002880)=[{0x0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2}, 0x120) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) 3.909451334s ago: executing program 3 (id=381): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/cgroup\x00') 3.748395589s ago: executing program 4 (id=382): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7fffffff, 0x6, 0x9}}}}]}, 0x44}}, 0x44080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 2.995838086s ago: executing program 4 (id=384): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000500ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7", 0x85}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], 0xff, 0x27f, &(0x7f00000002c0)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2020) 2.709463601s ago: executing program 6 (id=385): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x2}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7ee643bd1282d893}}}, 0xf8}}, 0x0) sendto$inet(r3, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r3}, 0x20) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) 1.759549938s ago: executing program 6 (id=386): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) accept(r0, &(0x7f0000000080)=@can, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.749288858s ago: executing program 4 (id=387): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x999, 0x4) sendto$inet(r0, &(0x7f00000012c0)='\f&', 0x2, 0x11, 0x0, 0x0) recvmmsg(r0, &(0x7f0000021080)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f000001f9c0)=""/16, 0x10}], 0x1}, 0xfffffffd}, {{0x0, 0x0, &(0x7f000001fa40)=[{&(0x7f000001fe40)=""/4084, 0xff4}], 0x2a}, 0x92d}], 0x2, 0x40000020, 0x0) 1.643856024s ago: executing program 3 (id=388): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) 1.467298695s ago: executing program 6 (id=389): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377a", 0x18, 0x805, 0x0, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)=""/23, 0x17}, {0x0, 0x4000}], 0x2}, 0x80000001}], 0x1, 0x10022, 0x0) 1.446481419s ago: executing program 3 (id=390): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 1.32582419s ago: executing program 6 (id=391): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x7, 0xc1d5, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7800, 0x8000, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r5 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xe000202b}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000060000180000001800000004000000ae04"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) unshare(0x22020600) syz_open_procfs(r1, &(0x7f00000006c0)='net/ip_vs_stats_percpu\x00') r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='[:]:/', 0x0) epoll_pwait(r6, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) 1.113750791s ago: executing program 3 (id=392): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 331.444459ms ago: executing program 4 (id=393): syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) syz_mount_image$adfs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x18, &(0x7f0000000480)=ANY=[@ANYBLOB='othmask=00000000000020000000000,uid=', @ANYRESHEX, @ANYBLOB=',ownmask=00000000000000000000003,uid=', @ANYRESHEX, @ANYBLOB=',ftsuffix=000000000000000000000000000000000046511,ownmask=00000000000020000000003T\t,\x00'/96], 0x1, 0x9de7, &(0x7f0000009f00)="$eJwEwAMAbQUAwNBs27aXbdu2bS/3ro1s27Zt27a/0blvgPcP8IEBPjjAhwb48AAfGeCjA3xsgI8P8IkBPjnApwb49ACfGeCzA3xugM8P8IUBvjjAlwb48gBfGeCrA3xtgK8P8I0BvjnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgEMGOHSAwwY4fIAjBjhygKMGOHqAYwY4doDjBDhugOMFOH6AEwQ4YYATBThxgJMEOGmAkwU4eYBTBDhlgFMFOHWA0wQ4bYDTBTh9gDMEOGOAMwU4c4CzBDhrgLMFOHuAcwQ4Z4BzBTh3gPMEOG+A8wU4f4ALBLhggAsFuHCAiwS4aICLBbh4gEsEuGSASwW4dIDLBEiAywa4XIDLB7hCgCsGuFKAKwe4SoCrBrhagKsHuEaAawa4VoBrB7hOgOsGuF6A6we4QYAbBrhRgBsHuEmAmwa4WYCbB7hFgFsGuFWAWwe4TYDbBrhdgNsHuEOAOwa4U4A7B7hLgLsGuFuAuwe4R4B7BrhXgHsHuE+A+wa4X4D7B3hAgAcGeFCABwd4SICHBnhYgIcHeESARwZ4VIBHB3hMgMcGeFyAxwd4QoAnBnhSgCcHeEqApwZogKcFeHqAZwR4ZoBnBXh2gOcEeG6AgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AM8L8PwALwjwwgAvCvDiAC8J8NIALwvw8gCvCPDKAK8K8OoArwnw2gCvC/D6AG8I8MYAbwrw5gBvCfDWAG8L8PYA7wjwzgDvCvDuAO8J8N4A7wvw/gAfCPDBAB8K8OEAHwnw0QAfC/DxAJ8I8MkAnwrw6QCfCfDZAJ8L8PkAXwjwxQBfCvDlAF8J8NUAXwvw9QDfCPDNAN8K8O0A3wnw3QDfC/D9AD8I8MMAPwrw4wA/CfDTAD8L8PMAvwjwywC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AP8I8M8A/wrw7wD/CfDfAP8LcEiAQwMcFuDwAEcEODLAUQGODnBMgGMDHCfEcUMcL8TxQ5wgxAlDnCjEiUOcJMRJQ5wsxMlDnCLEKUOcKsSpQ5wmxGlDnC7E6UOcIcQZQ5wpxJlDnCXEWUOcLcTZQ5wjxDlDnCvEuUOcJ8R5Q5wvxPlDXCDEBUNcKMSFQ1wkxEVDXCzExUNcIsQlQ1wqxKVDXCZEQlw2xOVCXD7EFUJcMcSVQlw5xFVCXDXE1UJcPcQ1QlwzxLVCXDvEdUJcN8T1Qlw/xA1C3DDEjULcOMRNQtw0xM1C3DzELULcMsStQtw6xG1C3DbE7ULcPsQdQtwxxJ1C3DnEXULcNcTdQtw9xD1C3DPEvULcO8R9Qtw3xP1C3D/EA0I8MMSDQjw4xENCPDTEw0I8PMQjQjwyxKNCPDrEY0I8NsTjQjw+xBNCPDHEk0I8OcRTQjw1REM8LcTTQzwjxDNDPCvEs0M8J8RzQxyEGIQYhhiFGIeYhJiGmIWYh1iEWIZYhViH2ITYhtiF2Id4Xojnh3hBiBeGeFGIF4d4SYiXhnhZiJeHeEWIV4Z4VYhXh3hNiNeGeF2I14d4Q4g3hnhTiDeHeEuIt4Z4W4i3h3hHiHeGeFeId4d4T4j3hnhfiPeH+ECID4b4UIgPh/hIiI+G+FiIj4f4RIhPhvhUiE+H+EyIz4b4XIjPh/hCiC+G+FKIL4f4SoivhvhaiK+H+EaIb4b4Vohvh/hOiO+G+F6I74f4QYgfhvhRiB+H+EmIn4b4WYifh/hFiF+G+FWIX4f4TYjfhvhdiN+H+EOIP4b4U4g/h/hLiL+G+FuIv4f4R4h/hvhXiH+H+E+I/4b4X4hDQhwa4rAQh4c4IsSRIY4KcXSIY0IcG+I4EY4b4XgRjh/hBBFOGOFEEU4c4SQRThrhZBFOHuEUEU4Z4VQRTh3hNBFOG+F0EU4f4QwRzhjhTBHOHOEsEc4a4WwRzh7hHBHOGeFcEc4d4TwRzhvhfBHOH+ECES4Y4UIRLhzhIhEuGuFiES4e4RIRLhnhUhEuHeEyERLhshEuF+HyEa4Q4YoRrhThyhGuEuGqEa4W4eoRrhHhmhGuFeHaEa4T4boRrhfh+hFuEOGGEW4U4cYRbhLhphFuFuHmEW4R4ZYRbhXh1hFuE+G2EW4X4fYR7hDhjhHuFOHOEe4S4a4R7hbh7hHuEeGeEe4V4d4R7hPhvhHuF+H+ER4Q4YERHhThwREeEuGhER4W4eERHhHhkREeFeHRER4T4bERHhfh8RGeEOGJEZ4U4ckRnhLhqREa4WkRnh7hGRGeGeFZEZ4d4TkRnhvhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCayK8NsLrIrw+whsivDHCmyK8OcJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wicifDLCpyJ8OsJnInw2wucifD7CFyJ8McKXInw5wlcifDXC1yJ8PcI3InwzwrcifDvCdyJ8N8L3Inw/wg8i/DDCjyL8OMJPIvw0ws8i/DzCLyL8MsKvIvw6wm8i/DbC7yL8PsIfIvwxwp8i/DnCXyL8NcLfIvw9wj8i/DPCvyL8O8J/Ivw3wv8iHBLh0AiHRTg8whERjoxwVISjIxwT4dgIx4lx3BjHi3H8GCeIccIYJ4px4hgniXHSGCeLcfIYp4hxyhininHqGKeJcdoYp4tx+hhniHHGGGeKceYYZ4lx1hhni3H2GOeIcc4Y54px7hjniXHeGOeLcf4YF4hxwRgXinHhGBeJcdEYF4tx8RiXiHHJGJeKcekYl4mRGJeNcbkYl49xhRhXjHGlGFeOcZUYV41xtRhXj3GNGNeMca0Y145xnRjXjXG9GNePcYMYN4xxoxg3jnGTGDeNcbMYN49xixi3jHGrGLeOcZsYt41xuxi3j3GHGHeMcacYd45xlxh3jXG3GHePcY8Y94xxrxj3jnGfGPeNcb8Y94/xgBgPjPGgGA+O8ZAYD43xsBgPj/GIGI+M8agYj47xmBiPjfG4GI+P8YQYT4zxpBhPjvGUGE+N0RhPi/H0GM+I8cwYz4rx7BjPifHcGAcxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTFeFePVMV4T47UxXhfj9THeEOONMd4U480x3hLjrTHeFuPtMd4R450x3hXj3THeE+O9Md4X4/0xPhDjgzE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQGIfGOCzG4TGOiHFkjKNiHB3jmBjHxjhOguMmOF6C4yc4QYITJjhRghMnOEmCkyY4WYKTJzhFglMmOFWCUyc4TYLTJjhdgtMnOEOCMyY4U4IzJzhLgrMmOFuCsyc4R4JzJjhXgnMnOE+C8yY4X4LzJ7hAggsmuFCCCye4SIKLJrhYgosnuESCSya4VIJLJ7hMgiS4bILLJbh8giskuGKCKyW4coKrJLhqgqsluHqCayS4ZoJrJbh2guskuG6C6yW4foIbJLhhghsluHGCmyS4aYKbJbh5glskuGWCWyW4dYLbJLhtgtsluH2COyS4Y4I7JbhzgrskuGuCuyW4e4J7JLhngnsluHeC+yS4b4L7Jbh/ggckeGCCByV4cIKHJHhogocleHiCRyR4ZIJHJXh0gsckeGyCxyV4fIInJHhigicleHKCpyR4aoImeFqCpyd4RoJnJnhWgmcneE6C5yY4SDBIMEwwSjBOMEkwTTBLME+wSLBMsEqwTrBJsE2wS7BP8LwEz0/wggQvTPCiBC9O8JIEL03wsgQvT/CKBK9M8KoEr07wmgSvTfC6BK9P8IYEb0zwpgRvTvCWBG9N8LYEb0/wjgTvTPCuBO9O8J4E703wvgTvT/CBBB9M8KEEH07wkQQfTfCxBB9P8IkEn0zwqQSfTvCZBJ9N8LkEn0/whQRfTPClBF9O8JUEX03wtQRfT/CNBN9M8K0E307wnQTfTfC9BN9P8IMEP0zwowQ/TvCTBD9N8LMEP0/wiwS/TPCrBL9O8JsEv03wuwS/T/CHBH9M8KcEf07wlwR/TfC3BH9P8I8E/0zwrwT/TvCfBP9N8L8EhyQ4NMFhCQ5PcESCIxMcleDoBMckODbBcVIcN8XxUhw/xQlSnDDFiVKcOMVJUpw0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNcXZUpw9xTlSnDPFuVKcO8V5Upw3xflSnD/FBVJcMMWFUlw4xUVSXDTFxVJcPMUlUlwyxaVSXDrFZVIkxWVTXC7F5VNcIcUVU1wpxZVTXCXFVVNcLcXVU1wjxTVTXCvFtVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCrFo1M8JsVjUzwuxeNTPCHFE1M8KcWTUzwlxVNTNMXTUjw9xTNSPDPFs1I8O8VzUjw3xUGKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYrnpXh+ihekeGGKF6V4cYqXpHhpipeleHmKV6R4ZYpXpXh1itekeG2K16V4fYo3pHhjijeleHOKt6R4a4q3pXh7inekeGeKd6V4d4r3pHhviveleH+KD6T4YIoPpfhwio+k+GiKj6X4eIpPpPhkik+l+HSKz6T4bIrPpfh8ii+k+GKKL6X4coqvpPhqiq+l+HqKb6T4Zopvpfh2iu+k+G6K76X4foofpPhhih+l+HGKn6T4aYqfpfh5il+k+GWKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4p/pPhnin+l+HeK/6T4b4r/pTgkxaEpDktxeIojUhyZ4qgUR6c4JsWxKY6T4bgZjpfh+BlOkOGEGU6U4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDhjBnOlOHMGc6S4awZzpbh7BnOkeGcGc6V4dwZzpPhvBnOl+H8GS6Q4YIZLpThwhkukuGiGS6W4eIZLpHhkhkuleHSGS6TIRkum+FyGS6f4QoZrpjhShmunOEqGa6a4WoZrp7hGhmumeFaGa6d4ToZrpvhehmun+EGGW6Y4UYZbpzhJhlumuFmGW6e4RYZbpnhVhluneE2GW6b4XYZbp/hDhnumOFOGe6c4S4Z7prhbhnunuEeGe6Z4V4Z7p3hPhnum+F+Ge6f4QEZHpjhQRkenOEhGR6a4WEZHp7hERkemeFRGR6d4TEZHpvhcRken+EJGZ6Y4UkZnpzhKRmemqEZnpbh6RmekeGZGZ6V4dkZnpPhuRkOMgwyDDOMMowzTDJMM8wyzDMsMiwzrDKsM2wybDPsMuwzPC/D8zO8IMMLM7wow4szvCTDSzO8LMPLM7wiwyszvCrDqzO8JsNrM7wuw+szvCHDGzO8KcObM7wlw1szvC3D2zO8I8M7M7wrw7szvCfDezO8L8P7M3wgwwczfCjDhzN8JMNHM3wsw8czfCLDJzN8KsOnM3wmw2czfC7D5zN8IcMXM3wpw5czfCXDVzN8LcPXM3wjwzczfCvDtzN8J8N3M3wvw/cz/CDDDzP8KMOPM/wkw08z/CzDzzP8IsMvM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98z/CPDPzP8K8O/M/wnw38z/C/DIRkOzXBYhsMzHJHhyAxHZTg6wzEZjs1wnBzHzXG8HMfPcYIcJ8xxohwnznGSHCfNcbIcJ89xihynzHGqHKfOcZocp81xuhynz3GGHGfMcaYcZ85xlhxnzXG2HGfPcY4c58xxrhznznGeHOfNcb4c589xgRwXzHGhHBfOcZEcF81xsRwXz3GJHJfMcakcl85xmRzJcdkcl8tx+RxXyHHFHFfKceUcV8lx1RxXy3H1HNfIcc0c18px7RzXyXHdHNfLcf0cN8hxwxw3ynHjHDfJcdMcN8tx8xy3yHHLHLfKcesct8lx2xy3y3H7HHfIccccd8px5xx3yXHXHHfLcfcc98hxzxz3ynHvHPfJcd8c98tx/xwPyPHAHA/K8eAcD8nx0BwPy/HwHI/I8cgcj8rx6ByPyfHYHI/L8fgcT8jxxBxPyvHkHE/J8dQczfG0HE/P8Ywcz8zxrBzPzvGcHM/NcZBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzk+mONDOT6c4yM5PprjYzk+nuMTOT6Z41M5Pp3jMzk+m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e4xc5fpnjVzl+neM3OX6b43c5fp/jDzn+mONPOf6c4y85/prjbzn+nuMfOf6Z4185/p3jPzn+m+N/OQ7JcWiOw3IcnuOIHEfmOCrH0TmOyXFsjuMUOG6B4xU4foETFDhhgRMVOHGBkxQ4aYGTFTh5gVMUOGWBUxU4dYHTFDhtgdMVOH2BMxQ4Y4EzFThzgbMUOGuBsxU4e4FzFDhngXMVOHeB8xQ4b4HzFTh/gQsUuGCBCxW4cIGLFLhogYsVuHiBSxS4ZIFLFbh0gcsUSIHLFrhcgcsXuEKBKxa4UoErF7hKgasWuFqBqxe4RoFrFrhWgWsXuE6B6xa4XoHrF7hBgRsWuFGBGxe4SYGbFrhZgZsXuEWBWxa4VYFbF7hNgdsWuF2B2xe4Q4E7FrhTgTsXuEuBuxa4W4G7F7hHgXsWuFeBexe4T4H7FrhfgfsXeECBBxZ4UIEHF3hIgYcWeFiBhxd4RIFHFnhUgUcXeEyBxxZ4XIHHF3hCgScWeFKBJxd4SoGnFmiBpxV4eoFnFHhmgWcVeHaB5xR4boGDAoMCwwKjAuMCkwLTArMC8wKLAssCqwLrApsC2wK7AvsCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8q8O4C7ynw3gLvK/D+Ah8o8MECHyrw4QIfKfDRAh8r8PECnyjwyQKfKvDpAp8p8NkCnyvw+QJfKPDFAl8q8OUCXynw1QJfK/D1At8o8M0C3yrw7QLfKfDdAt8r8P0CPyjwwwI/KvDjAj8p8NMCPyvw8wK/KPDLAr8q8OsCvynw2wK/K/D7An8o8McCfyrw5wJ/KfDXAn8r8PcC/yjwzwL/KvDvAv8p8N8C/ytwSIFDCxxW4PACRxQ4ssBRBY4ucEyBYwscp8RxSxyvxPFLnKDECUucqMSJS5ykxElLnKzEyUucosQpS5yqxKlLnKbEaUucrsTpS5yhxBlLnKnEmUucpcRZS5ytxNlLnKPEOUucq8S5S5ynxHlLnK/E+UtcoMQFS1yoxIVLXKTERUtcrMTFS1yixCVLXKrEpUtcpkRKXLbE5UpcvsQVSlyxxJVKXLnEVUpctcTVSly9xDVKXLPEtUpcu8R1Sly3xPVKXL/EDUrcsMSNSty4xE1K3LTEzUrcvMQtStyyxK1K3LrEbUrctsTtSty+xB1K3LHEnUrcucRdSty1xN1K3L3EPUrcs8S9Sty7xH1K3LfE/Urcv8QDSjywxINKPLjEQ0o8tMTDSjy8xCNKPLLEo0o8usRjSjy2xONKPL7EE0o8scSTSjy5xFNKPLVESzytxNNLPKPEM0s8q8SzSzynxHNLHJQYlBiWGJUYl5iUmJaYlZiXWJRYlliVWJfYlNiW2JXYl3heieeXeEGJF5Z4UYkXl3hJiZeWeFmJl5d4RYlXlnhViVeXeE2J15Z4XYnXl3hDiTeWeFOJN5d4S4m3lnhbibeXeEeJd5Z4V4l3l3hPifeWeF+J95f4QIkPlvhQiQ+X+EiJj5b4WImPl/hEiU+W+FSJT5f4TInPlvhcic+X+EKJL5b4Uokvl/hKia+W+FqJr5f4RolvlvhWiW+X+E6J75b4Xonvl/hBiR+W+FGJH5f4SYmflvhZiZ+X+EWJX5b4VYlfl/hNid+W+F2J35f4Q4k/lvhTiT+X+EuJv5b4W4m/l/hHiX+W+FeJf5f4T4n/lvhfiUNKHFrisBKHlziixJEljipxdIljShxb4jgVjlvheBWOX+EEFU5Y4UQVTlzhJBVOWuFkFU5e4RQVTlnhVBVOXeE0FU5b4XQVTl/hDBXOWOFMFc5c4SwVzlrhbBXOXuEcFc5Z4VwVzl3hPBXOW+F8Fc5f4QIVLljhQhUuXOEiFS5a4WIVLl7hEhUuWeFSFS5d4TIVUuGyFS5X4fIVrlDhihWuVOHKFa5S4aoVrlbh6hWuUeGaFa5V4doVrlPhuhWuV+H6FW5Q4YYVblThxhVuUuGmFW5W4eYVblHhlhVuVeHWFW5T4bYVblfh9hXuUOGOFe5U4c4V7lLhrhXuVuHuFe5R4Z4V7lXh3hXuU+G+Fe5X4f4VHlDhgRUeVOHBFR5S4aEVHlbh4RUeUeGRFR5V4dEVHlPhsRUeV+HxFZ5Q4YkVnlThyRWeUuGpFVrhaRWeXuEZFZ5Z4VkVnl3hORWeW+GgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7C8yo8v8ILKrywwosqvLjCSyq8tMLLKry8wisqvLLCqyq8usJrKry2wusqvL7CGyq8scKbKry5wlsqvLXC2yq8vcI7KryzwrsqvLvCeyq8t8L7Kry/wgcqfLDChyp8uMJHKny0wscqfLzCJyp8ssKnKny6wmcqfLbC5yp8vsIXKnyxwpcqfLnCVyp8tcLXKny9wjcqfLPCtyp8u8J3Kny3wvcqfL/CDyr8sMKPKvy4wk8q/LTCzyr8vMIvKvyywq8q/LrCbyr8tsLvKvy+wh8q/LHCnyr8ucJfKvy1wt8q/L3CPyr8s8K/Kvy7wn8q/LfC/yocUuHQCodVOLzCERWOrHBUhaMrHFPh2ArHqXHcGsercfwaJ6hxwhonqnHiGiepcdIaJ6tx8hqnqHHKGqeqceoap6lx2hqnq3H6GmeoccYaZ6px5hpnqXHWGmercfYa56hxzhrnqnHuGuepcd4a56tx/hoXqHHBGheqceEaF6lx0RoXq3HxGpeocckal6px6RqXqZEal61xuRqXr3GFGlescaUaV65xlRpXrXG1GlevcY0a16xxrRrXrnGdGtetcb0a169xgxo3rHGjGjeucZMaN61xsxo3r3GLGrescasat65xmxq3rXG7GrevcYcad6xxpxp3rnGXGnetcbcad69xjxr3rHGvGveucZ8a961xvxr3r/GAGg+s8aAaD67xkBoPrfGwGg+v8Ygaj6zxqBqPrvGYGo+t8bgaj6/xhBpPrPGkGk+u8ZQaT63RGk+r8fQaz6jxzBrPqvHsGs+p8dwaBzUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NZ5X4/k1XlDjhTVeVOPFNV5S46U1Xlbj5TVeUeOVNV5V49U1XlPjtTVeV+P1Nd5Q44013lTjzTXeUuOtNd5W4+013lHjnTXeVePdNd5T47013lfj/TU+UOODNT5U48M1PlLjozU+VuPjNT5R45M1PlXj0zU+U+OzNT5X4/M1vlDjizW+VOPLNb5S46s1vlbj6zW+UeObNb5V49s1vlPjuzW+V+P7NX5Q44c1flTjxzV+UuOnNX5W4+c1flHjlzV+VePXNX5T47c1flfj9zX+UOOPNf5U4881/lLjrzX+VuPvNf5R4581/lXj3zX+U+O/Nf5X45Aah9Y4rMbhNY6ocWSNo2ocXeOYGsfWOE6D4zY4XoPjNzhBgxM2OFGDEzc4SYOTNjhZg5M3OEWDUzY4VYNTNzhNg9M2OF2D0zc4Q4MzNjhTgzM3OEuDszY4W4OzNzhHg3M2OFeDczc4T4PzNjhfg/M3uECDCza4UIMLN7hIg4s2uFiDize4RINLNrhUg0s3uEyDNLhsg8s1uHyDKzS4YoMrNbhyg6s0uGqDqzW4eoNrNLhmg2s1uHaD6zS4boPrNbh+gxs0uGGDGzW4cYObNLhpg5s1uHmDWzS4ZYNbNbh1g9s0uG2D2zW4fYM7NLhjgzs1uHODuzS4a4O7Nbh7g3s0uGeDezW4d4P7NLhvg/s1uH+DBzR4YIMHNXhwg4c0eGiDhzV4eINHNHhkg0c1eHSDxzR4bIPHNXh8gyc0eGKDJzV4coOnNHhqgzZ4WoOnN3hGg2c2eFaDZzd4ToPnNjhoMGgwbDBqMG4waTBtMGswb7BosGywarBusGmwbbBrsG/wvAbPb/CCBi9s8KIGL27wkgYvbfCyBi9v8IoGr2zwqgavbvCaBq9t8LoGr2/whgZvbPCmBm9u8JYGb23wtgZvb/COBu9s8K4G727wngbvbfC+Bu9v8IEGH2zwoQYfbvCRBh9t8LEGH2/wiQafbPCpBp9u8JkGn23wuQafb/CFBl9s8KUGX27wlQZfbfC1Bl9v8I0G32zwrQbfbvCdBt9t8L0G32/wgwY/bPCjBj9u8JMGP23wswY/b/CLBr9s8KsGv27wmwa/bfC7Br9v8IcGf2zwpwZ/bvCXBn9t8LcGf2/wjwb/bPCvBv9u8J8G/23wvwaHNDi0wWENDm9wRIMjGxzV4OgGxzQ4tsFxWhy3xfFaHL/FCVqcsMWJWpy4xUlanLTFyVqcvMUpWpyyxalanLrFaVqctsXpWpy+xRlanLHFmVqcucVZWpy1xdlanL3FOVqcs8W5Wpy7xXlanLfF+Vqcv8UFWlywxYVaXLjFRVpctMXFWly8xSVaXLLFpVpcusVlWqTFZVtcrsXlW1yhxRVbXKnFlVtcpcVVW1ytxdVbXKPFNVtcq8W1W1ynxXVbXK/F9VvcoMUNW9yoxY1b3KTFTVvcrMXNW9yixS1b3KrFrVvcpsVtW9yuxe1b3KHFHVvcqcWdW9ylxV1b3K3F3Vvco8U9W9yrxb1b3KfFfVvcr8X9WzygxQNbPKjFg1s8pMVDWzysxcNbPKLFI1s8qsWjWzymxWNbPK7F41s8ocUTWzypxZNbPKXFU1u0xdNaPL3FM1o8s8WzWjy7xXNaPLfFQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i+e1eH6LF7R4YYsXtXhxi5e0eGmLl7V4eYtXtHhli1e1eHWL17R4bYvXtXh9ize0eGOLN7V4c4u3tHhri7e1eHuLd7R4Z4t3tXh3i/e0eG+L97V4f4sPtPhgiw+1+HCLj7T4aIuPtfh4i0+0+GSLT7X4dIvPtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi/+1OKTFoS0Oa3F4iyNaHNniqBZHtzimxbEtjtPhuB2O1+H4HU7Q4YQdTtThxB1O0uGkHU7W4eQdTtHhlB1O1eHUHU7T4bQdTtfh9B3O0OGMHc7U4cwdztLhrB3O1uHsHc7R4ZwdztXh3B3O0+G8Hc7X4fwdLtDhgh0u1OHCHS7S4aIdLtbh4h0u0eGSHS7V4dIdLtMhHS7b4XIdLt/hCh2u2OFKHa7c4Sodrtrhah2u3uEaHa7Z4Vodrt3hOh2u2+F6Ha7f4QYdbtjhRh1u3OEmHW7a4WYdbt7hFh1u2eFWHW7d4TYdbtvhdh1u3+EOHe7Y4U4d7tzhLh3u2uFuHe7e4R4d7tnhXh3u3eE+He7b4X4d7t/hAR0e2OFBHR7c4SEdHtrhYR0e3uERHR7Z4VEdHt3hMR0e2+FxHR7f4QkdntjhSR2e3OEpHZ7aoR2e1uHpHZ7R4ZkdntXh2R2e0+G5HQ46DDoMO4w6jDtMOkw7zDrMOyw6LDusOqw7bDpsO+w67Ds8r8PzO7ygwws7vKjDizu8pMNLO7ysw8s7vKLDKzu8qsOrO7ymw2s7vK7D6zu8ocMbO7ypw5s7vKXDWzu8rcPbO7yjwzs7vKvDuzu8p8N7O7yvw/s7fKDDBzt8qMOHO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDfzv8r8MhHQ7tcFiHwzsc0eHIDkd1OLrDMR2O7XCcHsftcbwex+9xgh4n7HGiHifucZIeJ+1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeZ+xxph5n7nGWHmftcbYeZ+9xjh7n7HGuHufucZ4e5+1xvh7n73GBHhfscaEeF+5xkR4X7XGxHhfvcYkel+xxqR6X7nGZHulx2R6X63H5HlfoccUeV+px5R5X6XHVHlfrcfUe1+hxzR7X6nHtHtfpcd0e1+tx/R436HHDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx3x7363H/Hg/o8cAeD+rx4B4P6fHQHg/r8fAej+jxyB6P6vHoHo/p8dgej+vx+B5P6PHEHk/q8eQeT+nx1B7t8bQeT+/xjB7P7PGsHs/u8Zwez+1x0GPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12Pf43k9nt/jBT1e2ONFPV7c4yU9XtrjZT1e3uMVPV7Z41U9Xt3jNT1e2+N1PV7f4w093tjjTT3e3OMtPd7a42093t7jHT3e2eNdPd7d4z093tvj/yzTAxOeB4NA0dRKbdu8tW3btu1b23wfG7WRpLat1LbtBjs78/2GM2fYAIcPcMQA7xngvQO8b4D3D/CBAT44wIcG+PAAHxngowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAY4c4JsDfGuAbw/wnQG+O8D3Bvj+AD8Y4IcD/GiAHw/wkwF+OsDPBvj5AL8Y4JcD/GqAXw/wmwF+O8DvBvj9AH8Y4I8D/GmAPw/wlwH+OsDfBvj7AP8Y4J8D/GuAfw/wnwH+O8D/BjhqgKMHOGaAYwc4JMBxAhw3wPECHD/ACQKcMMCJApw4wEkCnDTAyQIcGuDkAU4R4JQBThXg1AFOE+C0AU4X4PQBzhDgjAHOFODMAc4S4KwBzhbg7AHOEeCcAc4V4NwBzhPgvAHOF+D8AS4Q4IIBLhTgwgEuEuCiAS4W4OIBLhHgkgEuFSABLh3gMgEuG+ByAS4f4AoBrhjgSgGuHOAqAa4a4GoBrh7gGgGuGeBaAa4d4DoBrhvgegGuH+AGAW4Y4EYBbhzgJgFuGuBmAW4e4BYBbhngVgFuHeA2AW4b4HYBbh/gDgHuGOBOAe4c4C4B7hrgbgHuHuAeAe4Z4F4B7h3gPgHuG+B+Ae4f4AEBHhjgQQEeHOAhAR4a4GEBHh7gEQEeGeBRAR4d4DEBHhvgcQEeH+AJAZ4Y4EkBnhygAZ4S4KkBnhbg6QGeEeCZAZ4V4NkBnhPguQGeF+D5AV4Q4IUBXhTgxQFeEuClAV4W4OUBXhHglQFeFeDVAQ4CDAIMA4wCjANMAkwDzALMAywCLAOsAqwDbAJsA+wC7AO8JsBrA7wuwOsDvCHAGwO8KcCbA7wlwFsDvC3A2wO8I8A7A7wrwLsDHBbg8ABHBHhPgPcGeF+A9wf4QIAPBvhQgA8H+EiAjwb4WICPB/hEgE8G+FSATwf4TIDPBvhcgM8H+EKALwb4UoAvB/hKgK8G+FqArwf4RoAjA3wzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAvwL8O8B/Avw3wP8CHBXg6ADHBDg2wCEhjhPiuCGOF+L4IU4Q4oQhThTixCFOEuKkIU4W4tAQJw9xihCnDHGqEKcOcZoQpw1xuhCnD3GGEGcMcaYQZw5xlhBnDXG2EGcPcY4Q5wxxrhDnDnGeEOcNcb4Q5w9xgRAXDHGhEBcOcZEQFw1xsRAXD3GJEJcMcakQCXHpEJcJcdkQlwtx+RBXCHHFEFcKceUQVwlx1RBXC3H1ENcIcc0Q1wpx7RDXCXHdENcLcf0QNwhxwxA3CnHjEDcJcdMQNwtx8xC3CHHLELcKcesQtwlx2xC3C3H7EHcIcccQdwpx5xB3CXHXEHcLcfcQ9whxzxD3CnHvEPcJcd8Q9wtx/xAPCPHAEA8K8eAQDwnx0BAPC/HwEI8I8cgQjwrx6BCPCfHYEI8L8fgQTwjxxBBPCvHkEA3xlBBPDfG0EE8P8YwQzwzxrBDPDvGcEM8N8bwQzw/xghAvDPGiEC8O8ZIQLw3xshAvD/GKEK8M8aoQrw5xEGIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2If4jUhXhvidSFeH+INId4Y4k0h3hziLSHeGuJtId4e4h0h3hniXSHeHeKwEIeHOCLEe0K8N8T7Qrw/xAdCfDDEh0J8OMRHQnw0xMdCfDzEJ0J8MsSnQnw6xGdCfDbE50J8PsQXQnwxxJdCfDnEV0J8NcTXQnw9xDdCHBnimyG+FeLbIb4T4rshvhfi+yF+EOKHIX4U4schfhLipyF+FuLnIX4R4pchfhXi1yF+E+K3IX4X4vch/hDijyH+FOLPIf4S4q8h/hbi7yH+EeKfIf4V4t8h/hPivyH+F+KoEEeHOCbEsSEOiXCcCMeNcLwIx49wgggnjHCiCCeOcJIIJ41wsgiHRjh5hFNEOGWEU0U4dYTTRDhthNNFOH2EM0Q4Y4QzRThzhLNEOGuEs0U4e4RzRDhnhHNFOHeE80Q4b4TzRTh/hAtEuGCEC0W4cISLRLhohItFuHiES0S4ZIRLRUiES0e4TITLRrhchMtHuEKEK0a4UoQrR7hKhKtGuFqEq0e4RoRrRrhWhGtHuE6E60a4XoTrR7hBhBtGuFGEG0e4SYSbRrhZhJtHuEWEW0a4VYRbR7hNhNtGuF2E20e4Q4Q7RrhThDtHuEuEu0a4W4S7R7hHhHtGuFeEe0e4T4T7RrhfhPtHeECEB0Z4UIQHR3hIhIdGeFiEh0d4RIRHRnhUhEdHeEyEx0Z4XITHR3hChCdGeFKEJ0dohKdEeGqEp0V4eoRnRHhmhGdFeHaE50R4boTnRXh+hBdEeGGEF0V4cYSXRHhphJdFeHmEV0R4ZYRXRXh1hIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wivifDaCK+L8PoIb4jwxghvivDmCG+J8NYIb4vw9gjviPDOCO+K8O4Ih0U4PMIREd4T4b0R3hfh/RE+EOGDET4U4cMRPhLhoxE+FuHjET4R4ZMRPhXh0xE+E+GzET4X4fMRvhDhixG+FOHLEb4S4asRvhbh6xG+EeHICN+M8K0I347wnQjfjfC9CN+P8IMIP4zwowg/jvCTCD+N8LMIP4/wiwi/jPCrCL+O8JsIv43wuwi/j/CHCH+M8KcIf47wlwh/jfC3CH+P8I8I/4zwrwj/jvCfCP+N8L8IR0U4OsIxEY6NcEiM48Q4bozjxTh+jBPEOGGME8U4cYyTxDhpjJPFODTGyWOcIsYpY5wqxqljnCbGaWOcLsbpY5whxhljnCnGmWOcJcZZY5wtxtljnCPGOWOcK8a5Y5wnxnljnC/G+WNcIMYFY1woxoVjXCTGRWNcLMbFY1wixiVjXCpGYlw6xmViXDbG5WJcPsYVYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYtwyxq1i3DrGbWLcNsbtYtw+xh1i3DHGnWLcOcZdYtw1xt1i3D3GPWLcM8a9Ytw7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjw2xuNiPD7GE2I8McaTYjw5RmM8JcZTYzwtxtNjPCPGM2M8K8azYzwnxnNjPC/G82O8IMYLY7woxotjvCTGS2O8LMbLY7wixitjvCrGq2McxBjEGMYYxRjHmMSYxpjFmMdYxFjGWMVYx9jE2MbYxdjHeE2M18Z4XYzXx3hDjDfGeFOMN8d4S4y3xnhbjLfHeEeMd8Z4V4x3xzgsxuExjojxnhjvjfG+GO+P8YEYH4zxoRgfjvGRGB+N8bEYH4/xiRifjPGpGJ+O8ZkYn43xuRifj/GFGF+M8aUYX47xlRhfjfG1GF+P8Y0YR8b4Zoxvxfh2jO/E+G6M78X4fowfxPhhjB/F+HGMn8T4aYyfxfh5jF/E+GWMX8X4dYzfxPhtjN/F+H2MP8T4Y4w/xfhzjL/E+GuMv8X4e4x/xPhnjH/F+HeM/8T4b4z/xTgqxtExjolxbIxDEhwnwXETHC/B8ROcIMEJE5wowYkTnCTBSROcLMGhCU6e4BQJTpngVAlOneA0CU6b4HQJTp/gDAnOmOBMCc6c4CwJzprgbAnOnuAcCc6Z4FwJzp3gPAnOm+B8Cc6f4AIJLpjgQgkunOAiCS6a4GIJLp7gEgkumeBSCZLg0gkuk+CyCS6X4PIJrpDgigmulODKCa6S4KoJrpbg6gmukeCaCa6V4NoJrpPgugmul+D6CW6Q4IYJbpTgxglukuCmCW6W4OYJbpHglgluleDWCW6T4LYJbpfg9gnukOCOCe6U4M4J7pLgrgnuluDuCe6R4J4J7pXg3gnuk+C+Ce6X4P4JHpDggQkelODBCR6S4KEJHpbg4QkekeCRCR6V4NEJHpPgsQkel+DxCZ6Q4IkJnpTgyQma4CkJnprgaQmenuAZCZ6Z4FkJnp3gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4CDBIMEwwSjBOMEkwTTBLME8wSLBMsEqwTrBJsE2wS7BPsFrErw2wesSvD7BGxK8McGbErw5wVsSvDXB2xK8PcE7ErwzwbsSvDvBYQkOT3BEgvckeG+C9yV4f4IPJPhggg8l+HCCjyT4aIKPJfh4gk8k+GSCTyX4dILPJPhsgs8l+HyCLyT4YoIvJfhygq8k+GqCryX4eoJvJDgywTcTfCvBtxN8J8F3E3wvwfcT/CDBDxP8KMGPE/wkwU8T/CzBzxP8IsEvE/wqwa8T/CbBbxP8LsHvE/whwR8T/CnBnxP8JcFfE/wtwd8T/CPBPxP8K8G/E/wnwX8T/C/BUQmOTnBMgmMTHJLiOCmOm+J4KY6f4gQpTpjiRClOnOIkKU6a4mQpDk1x8hSnSHHKFKdKceoUp0lx2hSnS3H6FGdIccYUZ0px5hRnSXHWFGdLcfYU50hxzhTnSnHuFOdJcd4U50tx/hQXSHHBFBdKceEUF0lx0RQXS3HxFJdIcckUl0qRFJdOcZkUl01xuRSXT3GFFFdMcaUUV05xlRRXTXG1FFdPcY0U10xxrRTXTnGdFNdNcb0U109xgxQ3THGjFDdOcZMUN01xsxQ3T3GLFLdMcasUt05xmxS3TXG7FLdPcYcUd0xxpxR3TnGXFHdNcbcUd09xjxT3THGvFPdOcZ8U901xvxT3T/GAFA9M8aAUD07xkBQPTfGwFA9P8YgUj0zxqBSPTvGYFI9N8bgUj0/xhBRPTPGkFE9O0RRPSfHUFE9L8fQUz0jxzBTPSvHsFM9J8dwUz0vx/BQvSPHCFC9K8eIUL0nx0hQvS/HyFK9I8coUr0rx6hQHKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYpXpPitSlel+L1Kd6Q4o0p3pTizSnekuKtKd6W4u0p3pHinSneleLdKQ5LcXiKI1K8J8V7U7wvxftTfCDFB1N8KMWHU3wkxUdTfCzFx1N8IsUnU3wqxadTfCbFZ1N8LsXnU3whxRdTfOn/zwzBV1J8NcXXUnw9xTdSHJnimym+leLbKb6T4rspvpfi+yl+kOKHKX6U4scpfpLipyl+luLnKX6R4pcpfpXi1yl+k+K3KX6X4vcp/pDijyn+lOLPKf6S4q8p/pbi7yn+keKfKf6V4t8p/pPivyn+l+KoFEenOCbFsSkOyXCcDMfNcLwMx89wggwnzHCiDCfOcJIMJ81wsgyHZjh5hlNkOGWGU2U4dYbTZDhthtNlOH2GM2Q4Y4YzZThzhrNkOGuGs2U4e4ZzZDhnhnNlOHeG82Q4b4bzZTh/hgtkuGCGC2W4cIaLZLhohotluHiGS2S4ZIZLZUiGS2e4TIbLZrhchstnuEKGK2a4UoYrZ7hKhqtmuFqGq2e4RoZrZrhWhmtnuE6G62a4XobrZ7hBhhtmuFGGG2e4SYabZrhZhptnuEWGW2a4VYZbZ7hNhttmuF2G22e4Q4Y7ZrhThjtnuEuGu2a4W4a7Z7hHhntmuFeGe2e4T4b7ZrhfhvtneECGB2Z4UIYHZ3hIhodmeFiGh2d4RIZHZnhUhkdneEyGx2Z4XIbHZ3hChidmeFKGJ2dohqdkeGqGp2V4eoZnZHhmhmdleHaG52R4bobnZXh+hhdkeGGGF2V4cYaXZHhphpdleHmGV2R4ZYZXZXh1hoMMgwzDDKMM4wyTDNMMswzzDIsMywyrDOsMmwzbDLsM+wyvyfDaDK/L8PoMb8jwxgxvyvDmDG/J8NYMb8vw9gzvyPDODO/K8O4Mh2U4PMMRGd6T4b0Z3pfh/Rk+kOGDGT6U4cMZPpLhoxk+luHjGT6R4ZMZPpXh0xk+k+GzGT6X4fMZvpDhixm+lOHLGb6S4asZvpbh6xm+keHIDN/M8K0M387wnQzfzfC9DN/P8IMMP8zwoww/zvCTDD/N8LMMP8/wiwy/zPCrDL/O8JsMv83wuwy/z/CHDH/M8KcMf87wlwx/zfC3DH/P8I8M/8zwrwz/zvCfDP/N8L8MR2U4OsMxGY7NcEiO4+Q4bo7j5Th+jhPkOGGOE+U4cY6T5DhpjpPlODTHyXOcIscpc5wqx6lznCbHaXOcLsfpc5whxxlznCnHmXOcJcdZc5wtx9lznCPHOXOcK8e5c5wnx3lznC/H+XNcIMcFc1wox4VzXCTHRXNcLMfFc1wixyVzXCpHclw6x2VyXDbH5XJcPscVclwxx5VyXDnHVXJcNcfVclw9xzVyXDPHtXJcO8d1clw3x/VyXD/HDXLcMMeNctw4x01y3DTHzXLcPMctctwyx61y3DrHbXLcNsftctw+xx1y3DHHnXLcOcddctw1x91y3D3HPXLcM8e9ctw7x31y3DfH/XLcP8cDcjwwx4NyPDjHQ3I8NMfDcjw8xyNyPDLHo3I8Osdjcjw2x+NyPD7HE3I8MceTcjw5R3M8JcdTczwtx9NzPCPHM3M8K8ezczwnx3NzPC/H83O8IMcLc7wox4tzvCTHS3O8LMfLc7wixytzvCrHq3Mc5BjkGOYY5RjnmOSY5pjlmOdY5FjmWOVY59jk2ObY5djneE2O1+Z4XY7X53hDjjfmeFOON+d4S4635nhbjrfneEeOd+Z4V4535zgsx+E5jsjxnhzvzfG+HO/P8YEcH8zxoRwfzvGRHB/N8bEcH8/xiRyfzPGpHJ/O8Zkcn83xuRyfz/GFHF/M8aUcX87xlRxfzfG1HF/P8Y0cR+b4Zo5v5fh2ju/k+G6O7+X4fo4f5Phhjh/l+HGOn+T4aY6f5fh5jl/k+GWOX+X4dY7f5Phtjt/l+H2OP+T4Y44/5fhzjr/k+GuOv+X4e45/5Phnjn/l+HeO/+T4b47/5Tgqx9E5jslxbI5DChynwHELHK/A8QucoMAJC5yowIkLnKTASQucrMChBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXOAiBS5a4GIFLl7gEgUuWeBSBVLg0gUuU+CyBS5X4PIFrlDgigWuVODKBa5S4KoFrlbg6gWuUeCaBa5V4NoFrlPgugWuV+D6BW5Q4IYFblTgxgVuUuCmBW5W4OYFblHglgVuVeDWBW5T4LYFblfg9gXuUOCOBe5U4M4F7lLgrgXuVuDuBe5R4J4F7lXg3gXuU+C+Be5X4P4FHlDggQUeVODBBR5S4KEFHlbg4QUeUeCRBR5V4NEFHlPgsQUeV+DxBZ5Q4IkFnlTgyQVa4CkFnlrgaQWeXuAZBZ5Z4FkFnl3gOQWeW+B5BZ5f4AUFXljgRQVeXOAlBV5a4GUFXl7gFQVeWeBVBV5d4KDAoMCwwKjAuMCkwLTArMC8wKLAssCqwLrApsC2wK7AvsBrCry2wOsKvL7AGwq8scCbCry5wFsKvLXA2wq8vcA7CryzwLsKvLvAYQUOL3BEgfcUeG+B9xV4f4EPFPhggQ8V+HCBjxT4aIGPFfh4gU8U+GSBTxX4dIHPFPhsgc8V+HyBLxT4YoEvFfhyga8U+GqBrxX4eoFvFDiywDcLfKvAtwt8p8B3C3yvwPcL/KDADwv8qMCPC/ykwE8L/KzAzwv8osAvC/yqwK8L/KbAbwv8rsDvC/yhwB8L/KnAnwv8pcBfC/ytwN8L/KPAPwv8q8C/C/ynwH8L/K/AUQWOLnBMgWMLHFLiOCWOW+J4JY5f4gQlTljiRCVOXOIkJU5a4mQlDi1x8hKnKHHKEqcqceoSpylx2hKnK3H6EmcoccYSZypx5hJnKXHWEmcrcfYS5yhxzhLnKnHuEucpcd4S5ytx/hIXKHHBEhcqceESFylx0RIXK3HxEpcocckSlyqREpcucZkSly1xuRKXL3GFElcscaUSVy5xlRJXLXG1ElcvcY0S1yxxrRLXLnGdEtctcb0S1y9xgxI3LHGjEjcucZMSNy1xsxI3L3GLErcscasSty5xmxK3LXG7ErcvcYcSdyxxpxJ3LnGXEnctcbcSdy9xjxL3LHGvEvcucZ8S9y1xvxL3L/GAEg8s8aASDy7xkBIPLfGwEg8v8YgSjyzxqBKPLvGYEo8t8bgSjy/xhBJPLPGkEk8u0RJPKfHUEk8r8fQSzyjxzBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hIHJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2JfYlXlPitSVeV+L1Jd5Q4o0l3lTizSXeUuKtJd5W4u0l3lHinSXeVeLdJQ4rcXiJI0q8p8R7S7yvxPtLfKDEB0t8qMSHS3ykxEdLfKzEx0t8osQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEkSW+WeJbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+J/JY4qcXSJY0ocW+KQCsepcNwKx6tw/AonqHDCCieqcOIKJ6lw0gonq3BohZNXOEWFU1Y4VYVTVzhNhdNWOF2F01c4Q4UzVjhThTNXOEuFs1Y4W4WzVzhHhXNWOFeFc1c4T4XzVjhfhfNXuECFC1a4UIULV7hIhYtWuFiFi1e4RIVLVrhUhVS4dIXLVLhshctVuHyFK1S4YoUrVbhyhatUuGqFq1W4eoVrVLhmhWtVuHaF61S4boXrVbh+hRtUuGGFG1W4cYWbVLhphZtVuHmFW1S4ZYVbVbh1hdtUuG2F21W4fYU7VLhjhTtVuHOFu1S4a4W7Vbh7hXtUuGeFe1W4d4X7VLhvhftVuH+FB1R4YIUHVXhwhYdUeGiFh1V4eIVHVHhkhUdVeHSFx1R4bIXHVXh8hSdUeGKFJ1V4coVWeEqFp/7P/PQKz6jwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6goHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYVXlPhtRVeV+H1Fd5Q4Y0V3lThzRXeUuGtFd5W4e0V3lHhnRXeVeHdFQ6rcHiFIyq8p8J7K7yvwvsrfKDCByt8qMKHK3ykwkcrfKzCxyt8osInK3yqwqcrfKbCZyt8rsLnK3yhwhcrfKnClyt8pcJXK3ytwtcrfKPCkRW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4V8V/l3hPxX+W+F/FY6qcHSFYyocW+GQGsepcdwax6tx/BonqHHCGieqceIaJ6lx0honq3FojZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNs9Y4W42z1zhHjXPWOFeNc9c4T43z1jhfjfPXuECNC9a4UI0L17hIjYvWuFiNi9e4RI1L1rhUjdS4dI3L1LhsjcvVuHyNK9S4Yo0r1bhyjavUuGqNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9W4d4371LhvjfvVuH+NB9R4YI0H1XhwjYfUeGiNh9V4eI1H1HhkjUfVeHSNx9R4bI3H1Xh8jSfUeGKNJ9V4co3WeEqNp9Z4Wo2n13hGjWfWeFaNZ9d4To3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1nhVjVfXOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/GaGq+t8boar6/xhhpvrPGmGm+u8ZYab63xthpvr/GOGu+s8a4a765xWI3DaxxR4z013lvjfTXeX+MDNT5Y40M1PlzjIzU+WuNjNT5e4xM1PlnjUzU+XeMzNT5b43M1Pl/jCzW+WONLNb5c4ys1vlrjazW+XuMbNY6s8c0a36rx7RrfqfHdGt+r8f0aP6jxwxo/qvHjGj+p8dMaP6vx8xq/qPHLGr+q8esav6nx2xq/q/H7Gn+o8ccaf6rx5xp/qfHXGn+r8fca/6jxzxr/qvHvGv+p8d8a/6txVI2jaxxT49gahzQ4ToPjNjheg+M3OEGDEzY4UYMTNzhJg5M2OFmDQxucvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLjBRRpctMHFGly8wSUaXLLBpRqkwaUbXKbBZRtcrsHlG1yhwRUbXKnBlRtcpcFVG1ytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHRvcqcGdG9ylwV0b3K3B3Rvco8E9G9yrwb0b3KfBfRvcr8H9GzygwQMbPKjBgxs8pMFDGzyswcMbPKLBIxs8qsGjGzymwWMbPK7B4xs8ocETGzypwZMbtMFTGjy1wdMaPL3BMxo8s8GzGjy7wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxq8usFBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32D1zR4bYPXNXh9gzc0eGODNzV4c4O3NHhrg7c1eHuDdzR4Z4N3NXh3g8MaHN7giAbvafDeBu9r8P4GH2jwwQYfavDhBh9p8NEGH2vw8QafaPDJBp9q8OkGn2nw2Qafa/D5Bl9o8MUGX2rw5QZfafDVBl9r8PUG32hwZINvNvhWg283+E6D7zb4XoPvN/hBgx82+FGDHzf4SYOfNvhZg583+EWDXzb4VYNfN/hNg982+F2D3zf4Q4M/NvhTgz83+EuDvzb4W4O/N/hHg382+FeDfzf4T4P/Nvhfg6MaHN3gmAbHNjikxXFaHLfF8Vocv8UJWpywxYlanLjFSVqctMXJWhza4uQtTtHilC1O1eLULU7T4rQtTtfi9C3O0OKMLc7U4swtztLirC3O1uLsLc7R4pwtztXi3C3O0+K8Lc7X4vwtLtDigi0u1OLCLS7S4qItLtbi4i0u0eKSLS7VIi0u3eIyLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7c4iEtHtriYS0e3uIRLR7Z4lEtHt3iMS0e2+JxLR7f4gktntjiSS2e3KItntLiqS2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7V4tUtDloMWgxbjFqMW0xaTFvMWsxbLFosW6xarFtsWmxb7FrsW7ymxWtbvK7F61u8ocUbW7ypxZtbvKXFW1u8rcXbW7yjxTtbvKvFu1sc1uLwFke0eE+L97Z4X4v3t/hAiw+2+FCLD7f4SIuPtvhYi4+3+ESLT7b4VItPt/hMi8+2+FyLz7f4QosvtvhSiy+3+EqLr7b4Wouvt/hGiyNbfLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxa9a/LrFb1r8tsXvWvy+xR9a/LHFn1r8ucVfWvy1xd9a/L3FP1r8s8W/Wvy7xX9a/LfF/1oc1eLoFse0OLbFIR2O0+G4HY7X4fgdTtDhhB1O1OHEHU7S4aQdTtbh0A4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ7pcOkOl+lw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/o8MAOD+rw4A4P6fDQDg/r8PAOj+jwyA6P6vDoDo/p8NgOj+vw+A5P6PDEDk/q8OQO7fCUDk/t8LQOT+/wjA7P7PCsDs/u8JwOz+3wvA7P7/CCDi/s8KIOL+7wkg4v7fCyDi/v8IoOr+zwqg6v7nDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd/hNR1e2+F1HV7f4Q0d3tjhTR3e3OEtHd7a4W0d3t7hHR3e2eFdHd7d4bAOh3c4osN7Ory3w/s6vL/DBzp8sMOHOny4w0c6fLTDxzp8vMMnOnyyw6c6fLrDZzp8tsPnOny+wxc6fLHDlzp8ucNXOny1w9c6fL3DNzoc2eGbHb7V4dsdvtPhux2+1+H7HX7Q4YcdftThxx1+0uGnHX7W4ecdftHhlx1+1eHXHX7T4bcdftfh9x3+0OGPHf7U4c8d/tLhrx3+1uHvHf7R4Z8d/tXh3x3+0+G/Hf7X4agOR3c4psOxHQ7pcZwex+1xvB7H73GCHifscaIeJ+5xkh4n7XGyHof2OHmPU/Q4ZY9T9Th1j9P0OG2P0/U4fY8z9DhjjzP1OHOPs/Q4a4+z9Th7j3P0OGePc/U4d4/z9DhvP3TkfD3O3+MCPS7Y40I9LtzjIj0u2uNiPS7e4xI9LtnjUj3S49I9LtPjsj0u1+PyPa7Q44o9rtTjyj2u0uOqPa7W4+o9rtHjmj2u1ePaPa7T47o9rtfj+j1u0OOGPW7U48Y9btLjpj1u1uPmPW7R45Y9btXj1j1u0+O2PW7X4/Y97tDjjj3u1OPOPe7S46497tbj7j3u0eOePe7V49497tPjvj3u1+P+PR7Q44E9HtTjwT0e0uOhPR7W4+E9HtHjkT0e1ePRPR7T47E9Htfj8T2e0OOJPZ7U48k92uMpPZ7a42k9nt7jGT2e2eNZPZ7d4zk9ntvjeT2e3+MFPV7Y40U9XtzjJT1e2uNlPV7e4xU9XtnjVT1e3eOgx6DHsMeox7jHpMe0x6zHvMeix7LHqse6x6bHtseux77Ha3q8tsfrery+xxt6vLHHm3q8ucdbery1x9t6vL3HO3q8s8e7ery7x2E9Du9xxP+RRA9cmBeMAsS32rTZtt1k27Zt25Nt23j+NqrdbNu2ba3uec+djzC/AQ4f4IgB3jfA+wf4wAAfHOBDA3x4gI8M8NEBPjbAxwf4xACfHOBTA3x6gM8M8NkBPjfA5wf4wgBfHOBLA3x5gK8M8NUBvjbA1wf4xgDfHOBbA3x7gO8M8N0BvjfA9wf4wQA/HOBHA/x4gJ8M8NMBfjbAzwf4xQC/HOBXA/x6gN8M8NsBfjfA7wf4wwB/HOBPA/x5gL8M8NcB/jbA3wf4xwD/HOBfA/x7gP8M8N8B/jfAkQMcNcDRAxwzwLEDHBLgOAGOG+B4AQ4NcPwAJwhwwgAnCnDiAIcFOEmAkwY4WYCTBzhFgFMGOFWAUwc4TYDTBjhdgNMHOEOAMwY4U4AzBzhLgLMGOFuAswc4R4BzBjhXgHMHOE+A8wY4X4DzB7hAgAsGuFCACwe4SICLBrhYgIsHuESASwZIgEsFuHSAywS4bIDLBbh8gCsEuGKAKwW4coCrBLhqgKsFuHqAawS4ZoBrBbh2gOsEuG6A6wW4foAbBLhhgBsFuHGAmwS4aYCbBbh5gFsEDBsyZIhbBbh1gNsEuG2A2wW4fYA7BLhjgDsFuHOAuwS4a4C7Bbh7gHsEuGeAewW4d4D7BLhvgPsFuH+ABwR4YIAHBXhwgIcEeGiAhwV4eIBHBHhkgEcFeHSAxwR4bIDHBXh8gCcEeGKAJwVogCcHeEqApwZ4WoCnB3hGgGcGeFaAZwd4ToDnBnhegOcHeEGAFwZ4UYAXB3hJgJcGeFmAlwd4RYBXBnhVgFcHeE2A1wZ4XYDXB3hDgDcGeFOANwd4S4C3BnhbgLcHeEeAdwZ4V4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsA7w7wngDvDXB4gCMCvC/A+wN8IMAHA3wowIcDfCTARwN8LMDHA3wiwCcDfCrApwN8JsBnA3wuwOcDfCHAFwN8KcCXA3wlwFcDfC3A1wN8I8A3A3wrwLcDfCfAdwN8L8D3A/wgwA8D/CjAjwP8JMBPA/wswM8D/CLALwP8KsCvA/wmwG8D/C7A7wP8IcAfA/wpwJ8D/CXAXwP8LcDfA/wjwD8D/CvAvwP8J8B/A/wvwJEBjgpwdIBjAhwb4JAQxwlx3BDHC3FoiOOHOEGIE4Y4UYgThzgsxElCnDTEyUKcPMQpQpwyxKlCnDrEaUKcNsTpQpw+xBlCnDHEmUKcOcRZQpw1xNlCnD3EOUKcM8S5Qpw7xHlCnDfE+UKcP8QFQlwwxIVCXDjERUJcNMTFQlw8xCVCXDJEQlwqxKVDXCbEZUNcLsTlQ1whxBVDXCnElUNcJcRVQ1wtxNVDXCPENUNcK8S1Q1wnxHVDXC/E9UPcIMQNQ9woxI1D3CTETUPcLMTNQ9wixC1D3CrErUPcJsRtQ9wuxO1D3CHEHUPcKcSdQ9wlxF1D3C3E3UPcI8Q9Q9wrxL1D3CfEfUPcL8T9QzwgxANDPCjEg0M8JMRDQzwsxMNDPCLEI0M8KsSjQzwmxGNDPC7E40M8IcQTQzwpREM8OcRTQjw1xNNCPD3EM0I8M8SzQjw7xHNCPDfE80I8P8QLQrwwxItCvDjES0K8NMTLQrw8xCtCvDLEq0K8OsRrQrw2xOtCvD7EG0K8McSbQrw5xFtCvDXE20K8PcQ7QrwzxLtCHIQYhBiGGIUYh5iEmIaYhZiHWIRYhliFWIfYhNiG2IXYh3h3iPeEeG+Iw0McEeJ9Id4f4gMhPhjiQyE+HOIjIT4a4mMhPh7iEyE+GeJTIT4d4jMhPhvicyE+H+ILIb4Y4kshvhziKyG+GuJrIb4e4hshvhniWyG+HeI7Ib4b4nshvh/iByF+GOJHIX4c4ichfhriZyF+HuIXIX4Z4lchfh3iNyF+G+J3IX4f4g8h/hjiTyH+HOIvIf4a4m8h/h7iHyH+GeJfIf4d4j8h/hvifyGODHFUiKNDHBPi2BCHRDhOhONGOF6EQyMcP8IJIpwwwokinDjCYRFOEuGkEU4W4eQRThHhlBFOFeHUEU4T4bQRThfh9BHOEOGMEc4U4cwRzhLhrBHOFuHsEc4R4ZwRzhXh3BHOE+G8Ec4X4fwRLhDhghEuFOHCES4S4aIRLhbh4hEuEeGSERLhUhEuHeEyES4b4XIRLh/hChGuGOFKEa4c4SoRrhrhahGuHuEaEa4Z4VoRrh3hOhGuG+F6Ea4f4QYRbhjhRhFuHOEmEW4a4WYRbh7hFhFuGeFWEW4d4TYRbhvhdhFuH+EOEe4Y4U4R7hzhLhHuGuFuEe4e4R4R7hnhXhHuHeE+Ee4b4X4R7h/hAREeGOFBER4c4SERHhrhYREeHuERER4Z4VERHh3hMREeG+FxER4f4QkRnhjhSREa4ckRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+G5EZ4X4fkRXhDhhRFeFOHFEV4S4aURXhbh5RFeEeGVEV4V4dURXhPhtRFeF+H1Ed4Q4Y0R3hThzRHeEuGtEd4W4e0R3hHhnRHeFeEgwiDCMMIowjjCJMI0wizCPMIiwjLCKsI6wibCNsIuwj7CuyO8J8J7Ixwe4YgI74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCJ+I8MkIn4rw6QififDZCJ+L8PkIX4jwxQhfivDlCF+J8NUIX4vw9QjfiPDNCN+K8O0I34nw3Qjfi/D9CD+I8MMIP4rw4wg/ifDTCD+L8PMIv4jwywi/ivDrCL+J8NsIv4vw+wh/iPDHCH+K8OcIf4nw1wh/i/D3CP+I8M8I/4rw7wj/ifDfCP+LcGSEoyIcHeGYCMdGOCTGcWIcN8bxYhwa4/gxThDjhDFOFOPEMQ6LcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF45xkRgXjXGxGBePcYkYl4yRGJeKcekYl4lx2RiXi3H5GFeIccUYV4px5RhXiXHVGFeLcfUY14hxzRjXinHtGNeJcd0Y14tx/Rg3iHHDGDeKceMYN4lx0xg3i3HzGLeIccsYt4px6xi3iXHbGLeLcfsYd4hxxxh3inHnGHeJcdcYd4tx9xj3iHHPGPeKce8Y94lx3/8ZDPn/DojxwBgPivHgGA+J8dAYD4vx8BiPiPHIGI+K8egYj4nx2BiPi/H4GE+I8cQYT4rRGE+O8ZQYT43xtBhPj/GMGM+M8awYz47xnBjPjfG8GM+P8YIYL4zxohgvjvGSGC+N8bIYL4/xihivjPGqGK+O8ZoYr43xuhivj/GGGG+M8aYYb47xlhhvjfG2GG+P8Y4Y74zxrhgHMQYxhjFGMcYxJjGmMWYx5jEWMZYxVjHWMTYxtjF2MfYx3h3jPTHeG+PwGEfEeF+M98f4QIwPxvhQjA/H+EiMj8b4WIyPx/hEjE/G+FSMT8f4TIzPxvhcjM/H+EKML8b4Uowvx/hKjK/G+FqMr8f4RoxvxvhWjG/H+E6M78b4Xozvx/hBjB/G+FGMH8f4SYyfxvhZjJ/H+EWMX8b4VYxfx/hNjN/G+F2M38f4Q4w/xvhTjD/H+EuMv8b4W4y/x/hHjH/G+FeMf8f4T4z/xvhfjCNjHBXj6BjHxDg2xiEJjpPguAmOl+DQBMdPcIIEJ0xwogQnTnBYgpMkOGmCkyU4eYJTJDhlglMlOHWC0yQ4bYLTJTh9gjMkOGOCMyU4c4KzJDhrgrMlOHuCcyQ4Z4JzJTh3gvMkOG+C8yU4f4ILJLhgggsluHCCiyS4aIKLJbh4gkskuGSCJLhUgksnuEyCyya4XILLJ7hCgismuFKCKye4SoKrJrhagqsnuEaCaya4VoJrJ7hOgusmuF6C6ye4QYIbJrhRghsnuEmCmya4WYKbJ7hFglsmuFWCWye4TYLbJrhdgtsnuEOCOya4U4I7J7hLgrsmuFuCuye4R4J7JrhXgnsnuE+C+ya4X4L7J3hAggcmeFCCByd4SIKHJnhYgocneESCRyZ4VIJHJ3hMgscmeFyCxyd4QoInJnhSgiZ4coKnJHhqgqcleHqCZyR4ZoJnJXh2guckeG6C5yV4foIXJHhhghcleHGClyR4aYKXJXh5glckeGWCVyV4dYLXJHhtgtcleH2CNyR4Y4I3JXhzgrckeGuCtyV4e4J3JHhngnclOEgwSDBMMEowTjBJME0wSzBPsEiwTLBKsE6wSbBNsEuwT/DuBO9J8N4Ehyc4IsH7Erw/wQcSfDDBhxJ8OMFHEnw0wccSfDzBJxJ8MsGnEnw6wWcSfDbB5xJ8PsEXEnwxwZcSfDnBVxJ8NcHXEnw9wTcSfDPBtxJ8O8F3Enw3wfcSfD/BDxL8MMGPEvw4wU8S/DTBzxL8PMEvEvwywa8S/DrBbxL8NsHvEvw+wR8S/DHBnxL8OcFfEvw1wd8S/D3BPxL8M8G/Evw7wX8S/DfB/xIcmeCoBEcnOCbBsQkOSXGcFMdNcbwUh6Y4fooTpDhhihOlOHGKw1KcJMVJU5wsxclTnCLFKVOcKsWpU5wmxWlTnC7F6VOcIcUZU5wpxZlTnCXFWVOcLcXZU5wjxTlTnCvFuVOcJ8V5U5wvxflTXCDFBVNcKMWFU1wkxUVTXCzFxVNcIsUlUyTFpVJcOsVlUlw2xeVSXD7FFVJcMcWVUlw5xVVSXDXF1VJcPcU1UlwzxbVSXDvFdVJcN8X1Ulw/xQ1S3DDFjVLcOMVNUtw0xc1S3DzFLVLcMsWtUtw6xW1S3DbF7VLcPsUdUtwxxZ1S3DnFXVLcNcXdUtw9xT1S3DPFvVLcO8V9Utw3xf1S3D/FA1I8MMWDUjw4xUNSPDTFw1I8PMUjUjwyxaNSPDrFY1I8NsXjUjw+xRNSPDHFk1I0xZNTPCXFU1M8LcXTUzwjxTNTPCvFs1M8J8VzUzwvxfNTvCDFC1O8KMWLU7wkxUtTvCzFy1O8IsUrU7wqxatTvCbFa1O8LsXrU7whxRtTvCnFm1O8JcVbU7wtxdtTvCPFO1O8K8VBikGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2Kd6d4T4r3pjg8xREp3pfi/Sk+kOKDKT6U4sMpPpLioyk+luLjKT6R4pMpPpXi0yk+k+KzKT6X4vMpvpDiiym+lOLLKb6S4qspvpbi6ym+keKbKb6V4tspvpPiuym+l+L7KX6Q4ocpfpTixyl+kuKnKX6W4ucpfpHilyl+leLXKX6T4rcpfpfi9yn+kOKPKf6U4s8p/pLiryn+luLvKf6R4p8p/pXi3yn+k+K/Kf6X4sgUR6U4OsUxKY5NcUiG42Q4bobjZTg0w/EznCDDCYcOcaIMJ85wWIaTZDhphpNlOHmGU2Q4ZYZTZTh1htNkOG2G02U4fYYzZDhjhjNlOHOGs2Q4a4azZTh7hnNkOGeGc2U4d4bzZDhvhvNlOH+GC2S4YIYLZbhwhotkuGiGi2W4eIZLZLhkhmS4VIZLZ7hMhstmuFyGy2e4QoYrZrhShitnuEqGq2a4WoarZ7hGhmtmuFaGa2e4TobrZrhehutnuEGGG2a4UYYb/+/FENw0w80y3DzDLTLcMsOtMtw6w20y3DbD7TLcPsMdMtwxw50y3DnDXTLcNcPdMtw9wz0y3DPDvTLcO8N9Mtw3w/0y3D/DAzI8MMODMjw4w0MyPDTDwzI8PMMjMjwyw6MyPDrDYzI8NsPjMjw+wxMyPDHDkzI0w5MzPCXDUzM8LcPTMzwjwzMzPCvDszM8J8NzMzwvw/MzvCDDCzO8KMOLM7wkw0szvCzDyzO8IsMrM7wqw6szvCbDazO8LsPrM7whwxszvCnDmzO8JcNbM7wtw9szvCPDOzO8K8NBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn2Gd2d4T4b3Zjg8wxEZ3pfh/Rk+kOGDGT6U4cMZPpLhoxk+luHjGT6R4ZMZPpXh0xk+k+GzGT6X4fMZvpDhixm+lOHLGb6S4asZvpbh6xm+keGbGb6V4dsZvpPhuxm+l+H7GX6Q4YcZfpThxxl+kuGnGX6W4ecZfpHhlxl+leHXGX6T4bcZfpfh9xn+kOGPGf6U4c8Z/pLhrxn+luHvGf6R4Z8Z/pXh3xn+k+G/Gf6X4cgMR2U4OsMxGY7NcEiO4+Q4bo7j5Tg0x/FznCDHCXOcKMeJcxyW4yQ5TprjZDlOnuMUOU6Z41Q5Tp3jNDlOm+N0OU6f4ww5zpjjTDnOnOMsOc6a42w5zp7jHDnOmeNcOc6d4zw5zpvjfDnOn+MCOS6Y40I5LpzjIjkumuNiOS6e4xI5LpkjOS6V49I5LpPjsjkul+PyOa6Q44o5rpTjyjmukuOqOa6W4+o5rpHjmjmulePaOa6T47o5rpfj+jlukOOGOW6U48Y5bpLjpjluluPmOW6R45Y5bpXj1jluk+O2OW6X4/Y57pDjjjnulOPOOe6S46457pbj7jnukeOeOe6V49457pPjvjnul+P+OR6Q44E5HpTjwTkekuOhOR6W4+E5HpHjkTkelePROR6T47E5Hpfj8TmekOOJOZ6UozmenOMpOZ6a42k5np7jGTmemeNZOZ6d4zk5npvjeTmen+MFOV6Y40U5XpzjJTlemuNlOV6e4xU5XpnjVTleneM1OV6b43U5Xp/jDTnemONNOd6c4y053prjbTnenuMdOd6Z4105DnIMcgxzjHKMc0xyTHPMcsxzLHIsc6xyrHNscmxz7HLsc7w7x3tyvDfH4TmOyPG+HO/P8YEcH8zxoRwfzvGRHB/N8bEcH8/xiRyfzPGpHJ/O8Zkcn83xuRyfz/GFHF/M8aUcX87xlRxfzfG1HF/P8Y0c38zxrRzfzvGdHN/N8b0c38/xgxw/zPGjHD/O8ZMcP83xsxw/z/GLHL/M8ascv87xmxy/zfG7HL/P8Yccf8zxpxx/zvGXHH/N8bccf8/xjxz/zPGvHP/O8Z8c/83xvxxH5jgqx9E5jslxbI5DChynwHELHK/AoQWOX+AEBU5Y4EQFTlzgsAInKXDSAicrcPICpyhwygKnKnDqAqcpcNoCpytw+gJnKHDGAmcqcOYCZylw1gJnK3D2AucocM4C5ypw7gLnKXDeAucrcP4CFyhwwQIXKnDhAhcpcNECFytw8QKXKHDJAilwqQKXLnCZApctcLkCly9whQJXLHClAlcucJUCVy1wtQJXL3CNAtcscK0C1y5wnQLXLXC9AtcvcIMCNyxwowI3LnCTAjctcLMCNy9wiwK3LHCrArcucJsCty1wuwK3L3CHAncscKcCdy5wlwJ3LXC3AncvcI8C9yxwrwL3LnCfAvctcL8C9y/wgAIPLPCgAg8u8JACDy3wsAIPL/CIAo8s8KgCjy7wmAKPLfC4Ao8v8IQCTyzwpAIt8OQCTynw1AJPK/D0As8o8MwCzyrw7ALPKfDcAs8r8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCrynw2gKvK/D6Am8o8MYCbyrw5gJvKfDWAm8r8PYC7yjwzgLvKnBQYFBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF/g3QXeU+C9BQ4vcESB9xV4f4EPFPhggQ8V+HCBjxT4aIGPFfh4gU8U+GSBTxX4dIHPFPhsgc8V+HyBLxT4YoEvFfhyga8U+GqBrxX4eoFvFPhmgW8V+HaB7xT4boHvFfh+gR8U+GGBHxX4cYGfFPhpgZ8V+HmBXxT4ZYFfFfh1gd8U+G2B3xX4fYE/FPhjgT8V+HOBvxT4a4G/Ffh7gX8U+GeBfxX4d4H/FPhvgf8VOLLAUQWOLnBMgWMLHFLiOCWOW+J4JQ4tcfwSJyhxwhInKnHiEoeVOEmJk5Y4WYmTlzhFiVOWOFWJU5c4TYnTljhdidOXOEOJM5Y4U4kzlzhLibOWOFuJs5c4R4lzljhXiXOXOE+J85Y4X4nzl7hAiQuWuFCJC5e4SImLlrhYiYuXuESJS5ZIiUuVuHSJy5S4bInLlbh8iSuUuGKJK5W4comrlLhqiauVuHqJa5S4Zolrlbh2ieuUuG6J65W4fokblLhhiRuVuHGJm5S4aYmblbh5iVuUuGWJW5W4dYnblLhtiduVuH2JO5S4Y4k7lbhzibuUuGuJu5W4e4l7lLhniXuVuHeJ+5S4b4n7lbh/iQeUeGCJB5V4cImHlHhoiYeVeHiJR5R4ZIlHlXh0iceUeGyJx5V4fIknlHhiiSeVaIknl3hKiaeWeFqJp5d4RolnlnhWiWeXeE6J55Z4Xonnl3hBiReWeFGJF5d4SYmXlnhZiZeXeEWJV5Z4VYlXl3hNideWeF2J15d4Q4k3lnhTiTeXeEuJt5Z4W4m3l3hHiXeWeFeJgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7Eu8u8Z4S7y1xeIkjSryvxPtLfKDEB0t8qMSHS3ykxEdLfKzEx0t8osQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixC9L/KrEr0v8psRvS/yuxO9L/KHEH0v8qcSfS/ylxF9L/K3E30v8o8Q/S/yrxL9L/KfEf0v8r8SRJY4qcXSJY0ocW+KQCsepcNwKx6twaIXjVzhBhRNWOFGFE1c4rMJJKpy0wskqnLzCKSqcssKpKpy6wmkqnLbC6SqcvsIZKpyxwpkqnLnCWSqctcLZKpy9wjkqnLPCuSqcu8J5Kpy3wvkqnL/CBSpcsMKFKly4wkUqXLTCxSpcvMIlKlyyQipcqsKlK1ymwmUrXK7C5StcocIVK1ypwpUrXKXCVStcrcLVK1yjwjUrXKvCtStcp8J1K1yvwvUr3KDCDSvcqMKNK9ykwk0r3KzCzSvcosItK9yqwq0r3KbCbSvcrsLtK9yhwh0r3KnCnSvcpcJdK9ytwt0r3KPCPSvcq8K9K9ynwn0r3K/C/Ss8oMIDKzyowoMrPKTCQys8rMLDKzyiwiMrPKrCoys8psJjKzyuwuMrPKHCEys8qUIrPLnCUyo8tcLTKjy9wjMqPLPCsyo8u8JzKjy3wvMqPL/CCyq8sMKLKry4wksqvLTCyyq8vMIrKryywqsqvLrCayq8tsLrKry+whsqvLHCmyq8ucJbKry1wtsqvL3COyq8s8K7KhxUGFQYVhhVGFeYVJhWmFWYV1hUWFZYVVhX2FTYVthV2Fd4d4X3VHhvhcMrHFHhfRXeX+EDFT5Y4UMVPlzhIxU+WuFjFT5e4RMVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeFXFX5d4TcVflvhdxV+X+EPFf5Y4U8V/lzhLxX+WuFvFf5e4R8V/lnhXxX+XeE/Ff5b4X8VjqxwVIWjKxxT4dgKh9Q4To3j1jhejUNrHL/GCWqcsMaJapy4xmE1TlLjpDVOVuPkNU5R45Q1TlXj1DVOU+O0NU5X4/Q1zlDjjDXOVOPMNc5S46w1zlbj7DXOUeOcNc5V49w1zlPjvDXOV+P8NS5Q44I1LlTjwjUuUuOiNS5W4+I1LlHjkjVS41I1Ll3jMjUuW+NyNS5f4wo1rljjSjWuXOMqNa5a42o1rl7jGjWuWeNaNa5d4zo1rlvjejWuX+MGNW5Y40Y1blzjJjVuWuNmNW5e4xY1blnjVjVuXeM2NW5b43Y1bl/jDjXuWONONe5c4y417lrjbjXuXuMeNe5Z41417l3jPjXuW+N+Ne5f4wE1HljjQTUeXOMhNR5a42E1Hl7jETUeWeNRNR5d4zE1HlvjcTUeX+MJNZ5Y40k1WuPJNZ5S46k1nlbj6TWeUeOZNZ5V49k1nlPjuTWeV+P5NV5Q44U1XlTjxTVeUuOlNV5W4+U1XlHjlTVeVePVNV5T47U1Xlfj9TXeUOONNd5U48013lLjrTXeVuPtNd5R45013lXjoMagxrDGqMa4xqTGtMasxrzGosayxqrGusamxrbGrsa+xrtrvKfGe2scXuOIGu+r8f4aH6jxwRofqvHhGh+p8dEaH6vx8RqfqPHJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6nx0xo/q/HzGr+o8csav6rx6xq/qfHbGr+r8fsaf6jxxxp/qvHnGn+p8dcaf6vx9xr/qPHPGv+q8e8a/6nx3xr/q3FkjaNqHF3jmBrH1jikwXEaHLfB8Roc2uD4DU7Q4IQNTtTgxA0Oa3CSBidtcLIGJ29wiganbHCqBqducJoGp21wuganb3CGBmdscKYGZ25wlgZnbXC2BmdvcI4G52xwrgbnbnCeBudtcL4G529wgQYXbHChBhducJEGF21wsQYXb3CJBpdskAaXanDpBpdpcNkGl2tw+QZXaHDFBldqcOUGV2lw1QZXa3D1BtdocM0G12pw7QbXaXDdBtdrcP0GN2hwwwY3anDjBjdpcNMGN2tw8wa3aHDLBrdqcOsGt2lw2wa3a3D7BndocMcGd2pw5wZ3aXDXBndrcPcG92hwzwb3anDvBvdpcN8G92tw/wYPaPDABg9q8OAGD2nw0AYPa/DwBo9o8MgGj2rw6AaPafDYBo9r8PgGT2jwxAZPatAGT27wlAZPbfC0Bk9v8IwGz2zwrAbPbvCcBs9t8LwGz2/wggYvbPCiBi9u8JIGL23wsgYvb/CKBq9s8KoGr27wmgavbfC6Bq9v8IYGb2zwpgZvbvCWBm9t8LYGb2/wjgbvbPCuBgcNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN9g3e3eA9Dd7b4PAGRzR4X4P3N/hAgw82+FCDDzf4SIOPNvhYg483+ESDTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJg582+FmDnzf4RYNfNvhVg183+E2D3zb4XYPfN/hDgz82+FODPzf4S4O/Nvhbg783+EeDfzb4V4N/N/hPg/82+F+DIxsc1eDoBsc0OLbBIS2O0+K4LY7X4tAWx29xghYnbHGiFiducViLk7Q4aYuTtTh5i1O0OGWLU7U4dYvTtDhti9O1OH2LM7Q4Y4sztThzi7O0OGuLs7U4e4tztDhni3O1OHeL87Q4b4vztTh/iwu0uGCLC7W4cIuLtLhoi4u1uHiLS7S4ZIu0uFSLS7e4TIvLtrhci8u3uEKLK7a4Uosrt7hKi6u2uFqLq7e4RotrtrhWi2u3uE6L67a4Xovrt7hBixu2uFGLG7e4SYubtrhZi5u3uEWLW7a4VYtbt7hNi9u2uF2L27e4Q4s7trhTizu3uEuLu7a4W4u7t7hHi3u2uFeLe7e4T4v7trhfi/u3eECLB7Z4UIsHt3hIi4e2eFiLh7d4RItHtnhUi0e3eEyLx7Z4XIvHt3hCiye2eFKLtnhyi6e0eGqLp7V4eotntHhmi2e1eHaL57R4bovntXh+ixe0eGGLF7V4cYuXtHhpi5e1eHmLV7R4ZYtXtXh1i9e0eG2L17V4fYs3tHhjize1eHOLt7R4a4u3tXh7i3e0eGeLd7U4aDFoMWwxajFuMWkxbTFrMW+xaLFssWqxbrFpsW2xa7Fv8e4W72nx3haHtziixftavL/FB1p8sMWHWny4xUdafLTFx1p8vMUnWnyyxadafLrFZ1p8tsXnWny+xRdafLHFl1p8ucVXWny1xddafL3FN1p8s8W3Wny7xXdafLfF91p8v8UPWvywxY9a/LjFT1r8tMXPWvy8xS9a/LLFr1r8usVvWvy2xe9a/L7FH1r8scWfWvy5xV9a/LXF31r8vcU/Wvyzxb9a/LvFf1r8t8X/WhzZ4qgWR7c4psWxLQ7pcJwOx+1wvA6Hdjh+hxN0OGGHE3U4cYfDOpykw0k7nKzDyTucosMpO5yqw6k7nKbDaTucrsPpO5yhwxk7nKnDmTucpcNZO5ytw9k7nKPDOTucq8O5O5ynw3k7nK/D+TtcoMMFO1yow4U7XKTDRTtcrMPFO1yiwyU7pMOlOly6w2U6XLbD5TpcvsMVOlyxw5U6XLnDVTpctcPVOly9wzU6XLPDtTpcu8N1Oly3w/U6XL/DDTrcsMONOty4w0063LTDzTrcvMMtOtyyw6063LrDbTrctsPtOty+wx063LHDnTrcucNdOty1w9063L3DPTrcs8O9Oty7w3063LfD/Trcv8MDOjyww4M6PLjDQzo8tMPDOjy8wyM6PLLDozo8usNjOjy2w+M6PL7DEzo8scOTOrTDkzs8pcNTOzytw9M7PKPDMzs8q8OzOzynw3M7PK/D8zu8oMMLO7yow4s7vKTDSzu8rMPLO7yiwys7vKrDqzu8psNrO7yuw+s7vKHDGzu8qcObO7ylw1s7vK3D2zu8o8M7O7yrw0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12HfYd3d3hPh/d2OLzDER3e1+H9HT7Q4YMdPtThwx0+0uGjHT7W4eMdPtHhkx0+1eHTHT7T4bMdPtfh8x2+0OGLHb7U4csdvtLhqx2+1uHrHb7R4ZsdvtXh2x2+0+G7Hb7X4fsdftDhhx1+1OHHHX7S4acdftbh5x1+0eGXHX7V4dcdftPhtx1+1+H3Hf7Q4Y8d/tThzx3+0uGvHf7W4e8d/tHhnx3+1eHfHf7T4b8d/tfhyA5HdTi6wzEdju1wSI/j9Dhuj+P1OLTH8XucoMcJe5yox4l7HNbjJD1O2uNkPU7e4xQ9TtnjVD1O3eM0PU7b43Q9Tt/jDD3O2ONMPc7c4yw9ztrjbD3O3uMcPc7Z41w9zt3jPD3O2+N8Pc7f4wI9LtjjQj0u3OMiPS7a42I9Lt7jEj0u2SM9LtXj0j0u0+OyPS7X4/I9rtDjij2u1OPKPa7S46o9rtbj6j2u0eOaPa7V49o9rtPjuj2u1+P6PW7Q44Y9btTjxj1u0uOmPW7W4+Y9btHjlj1u1ePWPW7T47Y9btfj9j3u0OOOPe7U48497tLjrj3u1uPuPe7R45497tXj3j3u0+O+Pe7X4/49HtDjgT0e1OPBPR7S46E9Htbj4T0e0eORPR7V49E9HtPjsT0e1+PxPZ7Q44k9ntSjPZ7c4yk9ntrjaT2e3uMZPZ7Z41k9nt3jOT2e2+N5PZ7f4wU9XtjjRT1e3OMlPV7a42U9Xt7jFT1e2eNVPV7d4zU9XtvjdT1e3+MNPd7Y40093tzjLT3e2uNtPd7e4x093tnjXT0Oegx6DHuMeox7THpMe8x6zHsseix7rHqse2x6bHvseux7vLvHe3q8t8fhPY7o8f9YpgclPA9GAcJpmjq1bXNr27Zt21vbtm33e23Utm1b4Zkz81/CzuyTDjAbYD7AYoDlAKsB1gNsBtgOsBtgP8CnBvj0AJ8Z4LMDfG6Azw/whQG+OMCXBvjyAF8Z4KsDfG2Arw/wjQG+OcC3Bvj2AN8Z4LsDfG+A7w/wgwF+OMCPBvjxAD8Z4KcD/GyAnw/wiwF+OcCvBvj1AL8Z4LcD/G6A3w/whwH+OMCfBvjzAH8Z4K8D/G2Avw/wjwH+OcC/Bvj3AP8Z4L8D/G+AIwY4coCjBjh6gGMGOHaAQwIcJ8ChAY4b4LAAxwtw/AAnCHDCACcKcOIAJwlweICTBjhZgJMHOEWAUwY4VYBTBzhNgNMGOF2A0wc4Q4AzBjhTgDMHOEuAswY4W4CzBzhHgHMGOFeAcwc4T4DzBjhfgPMHuECACwa4UIALB7hIgIsGuFiAiwe4RIAEuGSASwW4dIDLBLhsgMsFuHyAKwS4YoArBbhygKsEuGqAqwW4eoBrBLhmgGsFuHaA6wS4boDrBbh+gBsEuGGAGwW4cYCbBLhpgJsFuHmAWwS4ZYBbBbh1gNsEuG2A2wW4fYA7BLhjgDsFuHOAuwS4a4C7Bbh7gHsEuGeAewW4d4D7BLhvgPsFuH+ABwR4YIAHBXhwgIcEeGiAhwV4eIBHBHhkgEcFeHSAxwR4bIDHBXh8gCcEeGKABnhSgCcHeEqApwZ4WoCnB3hGgGcGeFaAZwd4ToDnBnhegOcHeEGAFwZ4UYAXB3hJgJcGeFmAlwd4RYBXBnhVgFcHeE2A1wZ4XYDXB3hDgDcGeFOANwd4S4C3BnhbgLcHeEeAdwZ4V4B3B3hPgPcGeF+A9wf4QIAPBvhQgA8H+EiAjwb4WICPB/hEgE8GOAgwCDAMMAowDjAJMA0wCzAPsAiwDLAKsA6wCbANsAuwD/CpAJ8O8JkAnw3wuQCfD/CFAF8M8KUAXw7wlQBfDfC1AF8P8I0A3wzwrQDfDvCdAN8N8L0A3w/wgwA/DPCjAD8O8JMAPw3wswA/D/CLAL8M8KsAvw7wmwC/DfC7AL8P8IcAfwzwpwB/DvCXAH8N8LcAfw/wjwD/DPCvAP8O8J8A/w3wvwBHBDgywFEBjg5wTIBjAxwS4jghDg1x3BCHhTheiOOHOEGIE4Y4UYgThzhJiMNDnDTEyUKcPMQpQpwyxKlCnDrEaUKcNsTpQpw+xBlCnDHEmUKcOcRZQpw1xNlCnD3EOUKcM8S5Qpw7xHlCnDfE+UKcP8QFQlwwxIVCXDjERUJcNMTFQlw8xCVCJMQlQ1wqxKVDXCbEZUNcLsTlQ1whxBVDXCnElUNcJcRVQ1wtxNVDXCPENUNcK8S1Q1wnxHVDXC/E9UPcIMQNQ9woxI1D3CTETUPcLMTNQ9wixC1D3CrErUPcJsRtQ9wuxO1D3CHEHUPcKcSdQ9wlxF1D3C3E3UPcI8Q9Q9wrxL1D3CfEfUPcL8T9QzwgxANDPCjEg0M8JMRDQzwsxMNDPCLEI0M8KsSjQzwmxGNDPC7E40M8IcQTQzTEk0I8OcRTQjw1xNNCPD3EM0I8M8SzQjw7xHNCPDfE80I8P8QLQrwwxItCvDjES0K8NMTLQrw8xCtCvDLEq0K8OsRrQrw2xOtCvD7EG0K8McSbQrw5xFtCvDXE20K8PcQ7QrwzxLtCvDvEe0K8N8T7Qrw/xAdCfDDEh0J8OMRHQnw0xMdCfDzEJ0J8MsRBiEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2IT4X4dIjPhPhsiM+F+HyIL4T4YogvhfhyiK+E+GqIr4X4eohvhPhmiG+F+HaI74T4bojvhfh+iB+E+GGIH4X4cYifhPhpiJ+F+HmIX4T4ZYhfhfh1iN+E+G2I34X4fYg/hPhjiD+F+HOIv4T4a4i/hfh7iH+E+GeIf4X4d4j/hPhviP+FOCLEkSGOCnF0iGNCHBvikAjHiXBohONGOCzC8SIcP8IJIpwwwokinDjCSSIcHuGkEU4W4eQRThHhlBFOFeHUEU4T4bQRThfh9BHOEOGMEc4U4cwRzhLhrBHOFuHsEc4R4ZwRzhXh3BHOE+G8Ec4X4fwRLhDhghEuFOHCES4S4aIRLhbh4hEuESERLhnhUhEuHeEyES4b4XIRLh/hChGuGOFKEa4c4SoRrhrhahGuHuEaEa4Z4VoRrh3hOhGuG+F6Ea4f4QYRbhjhRhFuHOEmEW4a4WYRbh7hFhFuGeFWEW4d4TYRbhvhdhFuH+EOEe4Y4U4R7hzhLhHuGuFuEe4e4R4R7hnhXhHuHeE+Ee4b4X4R7h/hAREeGOFBER4c4SERHhrhYREeHuERER4Z4VERHh3hMREeG+FxER4f4QkRnhihEZ4U4ckRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+G5EZ4X4fkRXhDhhRFeFOHFEV4S4aURXhbh5RFeEeGVEV4V4dURXhPhtRFeF+H1Ed4Q4Y0R3hThzRHeEuGtEd4W4e0R3hHhnRHeFeHdEd4T4b0R3hfh/RE+EOGDET4U4cMRPhLhoxE+FuHjET4R4ZMRDiIMIgwjjCKMI0wiTCPMIswjLCIsI6wirCNsImwj7CLsI3wqwqcjfCbCZyN8LsLnI3whwhcjfCnClyN8JcJXI3wtwtcjfCPCNyN8K8K3I3wnwncjfC/C9yP8IMIPI/wowo8j/CTCTyP8LMLPI/wiwi8j/CrCryP8JsJvI/wuwu8j/CHCHyP8KcKfI/wlwl8j/C3C3yP8I8I/I/wrwr8j/CfCfyP8L8IREY6McFSEoyMcE+HYCIfEOE6MQ2McN8ZhMY4X4/gxThDjhDFOFOPEMU4S4/AYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF45xkRgXjXGxGBePcYkYiXHJGJeKcekYl4lx2RiXi3H5GFeIccUYV4px5RhXiXHVGFeLcfUY14hxzRjXinHtGNeJcd0Y14tx/Rg3iHHDGDeKceMYN4lx0xg3i3HzGLeIccsYt4px6xi3iXHbGLeLcfsYd4hxxxh3inHnGHeJcdcYd4tx9xj3iHHPGPeKce8Y94lx3xj3i3H/GA+I8cAYD4rx4BgPifHQGA+L8fAYj4jxyBiPivHoGI+J8dgYj4vx+BhPiPHEGI3xpBhPjvGUGE+N8bQYT4/xjBjPjPGsGM+O8ZwYz43xvBjPj/GCGC+M8aIYL47xkhgvjfGyGC+P8YoYr4zxqhivjvGaGK+N8boYr4/xhhhvjPGmGG+O8ZYYb43xthhvj/GOGO+M8a4Y747xnhjvjfG+GO+P8YEYH4zxoRgfjvGRGB+N8bEYH4/xiRifjHEQYxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx/jUzE+HeMzMT4b43MxPh/jCzG+GONLMb4c4ysxvhrjazG+HuMbMb4Z41sxvh3jOzG+G+N7Mb4f4wcxfhjjRzF+HOMnMX4a42cxfh7jFzF+GeNXMX4d4zcxfhvjdzF+H+MPMf4Y408x/hzjLzH+GuNvMf4e4x8x/hnjXzH+HeM/Mf4b438xjohxZIyjYhwd45gYx8Y4JMFxEhya4LgJDktwvATHT3CCBCdMcKIEJ05wkgSHJzhpgpMlOHmCUyQ4ZYJTJTh1gtMkOG2C0yU4fYIzJDhjgjMlOHOCsyQ4a4KzJTh7gnMkOGeCcyU4d4LzJDhvgvMlOH+CCyS4YIILJbhwgoskuGiCiyW4eIJLJEiCSya4VIJLJ7hMgssmuFyCyye4QoIrJrhSgisnuEqCqya4WoKrJ7hGgmsmuFaCaye4ToLrJrhegusnuEGCGya4UYIbJ7hJgpsmuFmCmye4RYJbJrhVglsnuE2C2ya4XYLbJ7hDgjsmuFOCOye4S4K7JrhbgrsnuEeCeya4V4J7J7hPgvsmuF+C+yd4QIIHJnhQggcneEiChyZ4WIKHJ3hEgkcmeFSCRyd4TILHJnhcgscneEKCJyZogicleHKCpyR4aoKnJXh6gmckeGaCZyV4doLnJHhugucleH6CFyR4YYIXJXhxgpckeGmClyV4eYJXJHhlglcleHWC1yR4bYLXJXh9gjckeGOCNyV4c4K3JHhrgrcleHuCdyR4Z4J3JXh3gvckeG+C9yV4f4IPJPhggg8l+HCCjyT4aIKPJfh4gk8k+GSCgwSDBMMEowTjBJME0wSzBPMEiwTLBKsE6wSbBNsEuwT7BJ9K8OkEn0nw2QSfS/D5BF9I8MUEX0rw5QRfSfDVBF9L8PUE30jwzQTfSvDtBN9J8N0E30vw/QQ/SPDDBD9K8OMEP0nw0wQ/S/DzBL9I8MsEv0rw6wS/SfDbBL9L8PsEf0jwxwR/SvDnBH9J8NcEf0vw9wT/SPDPBP9K8O8E/0nw3wT/S3BEgiMTHJXg6ATHJDg2wSEpjpPi0BTHTXFYiuOlOH6KE6Q4YYoTpThxipOkODzFSVOcLMXJU5wixSlTnCrFqVOcJsVpU5wuxelTnCHFGVOcKcWZU5wlxVlTnC3F2VOcI8U5U5wrxblTnCfFeVOcL8X5U1wgxQVTXCjFhVNcJMVFU1wsxcVTXCJFUlwyxaVSXDrFZVJcNsXlUlw+xRVSXDHFlVJcOcVVUlw1xdVSXD3FNVJcM8W1Ulw7xXVSXDfF9VJcP8UNUtwwxY1S3DjFTVLcNMXNUtw8xS1S3DLFrVLcOsVtUtw2xe1S3D7FHVLcMcWdUtw5xV1S3DXF3VLcPcU9Utwzxb1S3DvFfVLcN8X9Utw/xQNSPDDFg1I8OMVDUjw0xcNSPDzFI1I8MsWjUjw6xWNSPDbF41I8PsUTUjwxRVM8KcWTUzwlxVNTPC3F01M8I8UzUzwrxbNTPCfFc1M8L8XzU7wgxQtTvCjFi1O8JMVLU7wsxctTvCLFK1O8KsWrU7wmxWtTvC7F61O8IcUbU7wpxZtTvCXFW1O8LcXbU7wjxTtTvCvFu1O8J8V7U7wvxftTfCDFB1N8KMWHU3wkxUdTfCzFx1N8IsUnUxykGKQYphilGKeYpJimmKWYp1ikWKZYpVin2KTYptil2Kf4VIpPp/hMis+m+FyKz6f4QoovpvhSii+n+EqKr6b4Woqvp/hGim+m+FaKb6f4Torvpvheiu+n+EGKH6b4UYofp/hJip+m+FmKn6f4RYpfpvhVil+n+E2K36b4XYrfp/hDij+m+FOKP6f4S4q/pvhbir//z+qfKf6V4t8p/pPivyn+l+KIFEemOCrF0SmOSXFsikMyHCfDoRmOm+GwDMfLcPwMJ8hwwgwnynDiDCfJcHiGk2Y4WYaTZzhFhlNmOFWGU2c4TYbTZjhdhtNnOEOGM2Y4U4YzZzhLhrNmOFuGs2c4R4ZzZjhXhnNnOE+G82Y4X4bzZ7hAhgtmuFCGC2e4SIaLZrhYhotnuESGZLhkhktluHSGy2S4bIbLZbh8hitkuGKGK2W4coarZLhqhqtluHqGa2S4ZoZrZbh2hutkuG6G62W4foYbZLhhhhtluHGGm2S4aYabZbh5hltkuGWGW2W4dYbbZLhthttluH2GO2S4Y4Y7ZbhzhrtkuGuGu2W4e4Z7ZLhnhntluHeG+2S4b4b7Zbh/hgdkeGCGB2V4cIaHZHhohodleHiGR2R4ZIZHZXh0hsdkeGyGx2V4fIYnZHhihmZ4UoYnZ3hKhqdmeFqGp2d4RoZnZnhWhmdneE6G52Z4XobnZ3hBhhdmeFGGF2d4SYaXZnhZhpdneEWGV2Z4VYZXZ3hNhtdmeF2G12d4Q4Y3ZnhThjdneEuGt2Z4W4a3Z3hHhndmeFeGd2d4T4b3Znhfhvdn+ECGD2b4UIYPZ/hIho9m+FiGj2f4RIZPZjjIMMgwzDDKMM4wyTDNMMswz7DIsMywyrDOsMmwzbDLsM/wqQyfzvCZDJ/N8LkMn8/whQxfzPClDF/O8JUMX83wtQxfz/CNDN/M8K0M387wnQzfzfC9DN/P8IMMP8zwoww/zvCTDD/N8LMMP8/wiwy/zPCrDL/O8JsMv83wuwy/z/CHDH/M8KcMf87wlwx/zfC3DH/P8I8M/8zwrwz/zvCfDP/N8L8MR2Q4MsNRGY7OcEyGYzMckuM4OQ7Ncdwch+U4Xo7j5zhBjhPmOFGOE+c4SY7Dc5w0x8lynDzHKXKcMsepcpw6x2lynDbH6XKcPscZcpwxx5lynDnHWXKcNcfZcpw9xzlynDPHuXKcO8d5cpw3x/lynD/HBXJcMMeFclw4x0VyXDTHxXJcPMclciTHJXNcKselc1wmx2VzXC7H5XNcIccVc1wpx5VzXCXHVXNcLcfVc1wjxzVzXCvHtXNcJ8d1c1wvx/Vz3CDHDXPcKMeNc9wkx01z3CzHzXPcIsctc9wqx61z3CbHbXPcLsftc9whxx1z3CnHnXPcJcddc9wtx91z3CPHPXPcK8e9c9wnx31z3C/H/XM8IMcDczwox4NzPCTHQ3M8LMfDczwixyNzPCrHo3M8Jsdjczwux+NzPCHHE3M0x5NyPDnHU3I8NcfTcjw9xzNyPDPHs3I8O8dzcjw3x/NyPD/HC3K8MMeLcrw4x0tyvDTHy3K8PMcrcrwyx6tyvDrHa3K8Nsfrcrw+xxtyvDHHm3K8Ocdbcrw1x9tyvD3HO3K8M8e7crw7x3tyvDfH+3K8P8cHcnwwx4dyfDjHR3J8NMfHcnw8xydyfDLHQY5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY59jk/l+HSOz+T4bI7P5fh8ji/k+GKOL+X4co6v5Phqjq/l+HqOb+T4Zo5v5fh2ju/k+G6O7+X4fo4f5Phhjh/l+HGOn+T4aY6f5fh5jl/k+GWOX+X4dY7f5Phtjt/l+H2OP+T4Y44/5fhzjr/k+GuOv+X4e45/5Phnjn/l+HeO/+T4b47/5Tgix5E5jspxdI5jchyb45ACxylwaIHjFjiswPEKHL/ACQqcsMCJCpy4wEkKHF7gpAVOVuDkBU5R4JQFTlXg1AVOU+C0BU5X4PQFzlDgjAXOVODMBc5S4KwFzlbg7AXOUeCcBc5V4NwFzlPgvAXOV+D8BS5Q4IIFLlTgwgUuUuCiBS5W4OIFLlEgBS5Z4FIFLl3gMgUuW+ByBS5f4AoFrljgSgWuXOAqBa5a4GoFrl7gGgWuWeBaBa5d4DoFrlvgegWuX+AGBW5Y4EYFblzgJgVuWuBmBW5e4BYFblngVgVuXeA2BW5b4HYFbl/gDgXuWOBOBe5c4C4F7lrgbgXuXuAeBe5Z4F4F7l3gPgXuW+B+Be5f4AEFHljgQQUeXOAhBR5a4GEFHl7gEQUeWeBRBR5d4DEFHlvgcQUeXwwbckKBJxZogScVeHKBpxR4aoGnFXh6gWcUeGaBZxV4doHnFHhugecVeH6BFxR4YYEXFXhxgZcUeGmBlxV4eYFXFHhlgVcVeHWB1xR4bYHXFXh9gTcUeGOBNxV4c4G3FHhrgbcVeHuBdxR4Z4F3FXh3gfcUeG+B9xV4f4EPFPhggQ8V+HCBjxT4aIGPFfh4gU8U+GSBgwKDAsMCowLjApMC0wKzAvMCiwLLAqsC6wKbAtsCuwL7Ap8q8OkCnynw2QKfK/D5Al8o8MUCXyrw5QJfKfDVAl8r8PUC3yjwzQLfKvDtAt8p8N0C3yvw/QI/KPDDAj8q8OMCPynw0wI/K/DzAr8o8MsCvyrw6wK/KfDbAr8r8PsCfyjwxwJ/KvDnAn8p8NcCfyvw9wL/KPDPAv8q8O8C/ynw3wL/K3BEgSMLHFXg6ALHFDi2wCEljlPi0BLHLXFYieOVOH6JE5Q4YYkTlThxiZOUOLzESUucrMTJS5yixClLnKrEqUucpsRpS5yuxOlLnKHEGUucqcSZS5ylxFlLnK3E2Uuco8Q5S5yrxLlLnKfEeUucr8T5S1ygxAVLXKjEhUtcpMRFS1ysxMVLXKJESlyyxKVKXLrEZUpctsTlSly+xBVKXLHElUpcucRVSly1xNVKXL3ENUpcs8S1Sly7xHVKXLfE9Upcv8QNStywxI1K3LjETUrctMTNSty8xC1K3LLErUrcusRtSty2xO1K3L7EHUrcscSdSty5xF1K3LXE3UrcvcQ9StyzxL1K3LvEfUrct8T9Sty/xANKPLDEg0o8uMRDSjy0xMNKPLzEI0o8ssSjSjy6xGNKPLbE40o8vsQTSjyxREs8qcSTSzylxFNLPK3E00s8o8QzSzyrxLNLPKfEc0s8r8TzS7ygxAtLvKjEi0u8pMRLS7ysxMtLvKLEK0u8qsSrS7ymxGtLvK7E60u8ocQbS7ypxJtLvKXEW0u8rcTbS7yjxDtLvKvEu0u8p8R7S7yvxPtLfKDEB0t8qMSHS3ykxEdLfKzEx0t8osQnSxyUGJQYlhiVGJeYlJiWmJWYl1iUWJZYlViX2JTYltiV2Jf4VIlPl/hMic+W+FyJz5f4QokvlvhSiS+X+EqJr5b4Womvl/hGiW+W+FaJb5f4Tonvlvheie+X+EGJH5b4UYkfl/hJiZ+W+FmJn5f4RYlflvhViV+X+E2J35b4XYnfl/hDiT+W+FOJP5f4S4m/lvhbib+X+EeJf5b4V4l/l/hPif+W+F+JI0ocWeKoEkeXOKbEsSUOqXCcCodWOG6Fwyocr8LxK5ygwgkrnKjCiSucpMLhFU5a4WQVTl7hFBVOWeFUFU5d4TQVTlvhdBVOX+EMFc5Y4UwVzlzhLBXOWuFsFc5e4RwVzlnhXBXOXeE8Fc5b4XwVzl/hAhUuWOFCFS5c4SIVLlrhYhUuXuESFVLhkhUuVeHSFS5T4bIVLlfh8hWuUOGKFa5U4coVrlLhqhWuVuHqFa5R4ZoVrlXh2hWuU+G6Fa5X4foVblDhhhVuVOHGFW5S4aYVblbh5hVuUeGWFW5V4dYVblPhthVuV+H2Fe5Q4Y4V7lThzhXuUuGuFe5W4e4V7lHhnhXuVeHeFe5T4b4V7lfh/hUeUOGBFR5U4cEVHlLhoRUeVuHhFR5R4ZEVHlXh0RUeU+GxFR5X4fEVnlDhiRVa4UkVnlzhKRWeWuFpFZ5e4RkVnlnhWRWeXeE5FZ5b4XkVnl/hBRVeWOFFFV5c4SUVXlrhZRVeXuEVFV5Z4VUVXl3hNRVeW+F1FV5f4Q0V3ljhTRXeXOEtFd5a4W0V3l7hHRXeWeFdFd5d4T0V3lvhfRXeX+EDFT5Y4UMVPlzhIxU+WuFjFT5e4RMVPlnhoMKgwrDCqMK4wqTCtMKswrzCosKywqrCusKmwrbCrsK+wqcqfLrCZyp8tsLnKny+whcqfLHClyp8ucJXKny1wtcqfL3CNyp8s8K3Kny7wncqfLfC9yp8v8IPKvywwo8q/LjCTyr8tMLPKvy8wi8q/LLCryr8usJvKvy2wu8q/L7CHyr8scKfKoYOGTLEXyr8tcLfKvy9wj8q/LPCvyr8u8J/Kvy3wv8qHFHhyApHVTi6wjEVjq1wSI3j1Di0xnFrHFbjeDWOX+MENU5Y40Q1TlzjJDUOr3HSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqJEal6xxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zRGk+q8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqvHuGu+p8d4a76vx/hofqPHBGh+q8eEaH6nx0Rofq/HxGp+o8ckaBzUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NT5V49M1PlPjszU+V+PzNb5Q44s1vlTjyzW+UuOrNb5W4+s1vlHjmzW+VePbNb5T47s1vlfj+zV+UOOHNX5U48c1flLjpzV+VuPn/3P3ZY1f1fh1jd/U+G2N39X4fY0/1PhjjT/V+HONv9T4a42/1fh7jX/U+GeNf9X4d43/1Phvjf/VOKLGkTWOqnF0jWNqHFvjkAbHaXBog+M2OKzB8Rocv8EJGpywwYkanLjBSRoc3uCkDU7W4OQNTtHglA1O1eDUDU7T4LQNTtfg9A3O0OCMDc7U4MwNztLgrA3O1uDsDc7R4JwNztXg3A3O0+C8Dc7X4PwNLtDggg0u1ODCDS7S4KINLtbg4g0u0SANLtngUg0u3eAyDS7b4HINLt/gCg2u2OBKDa7c4CoNrtrgag2u3uAaDa7Z4FoNrt3gOg2u2+B6Da7f4AYNbtjgRg1u3OAmDW7a4GYNbt7gFg1u2eBWDW7d4DYNbtvgdg1u3+AODe7Y4E4N7tzgLg3u2uBuDe7e4B4N7tngXg3u3eA+De7b4H4N7t/gAQ0e2OBBDR7c4CENHtrgYQ0e3uARDR7Z4FENHt3gMQ0e2+BxDR7f4AkNntigDZ7U4MkNntLgqQ2e1uDpDZ7R4JkNntXg2Q2e0+C5DZ7X4PkNXtDghQ1e1ODFDV7S4KUNXtbg5Q1e0eCVDV7V4NUNXtPgtQ1e1+D1Dd7Q4I0N3tTgzQ3e0uCtDd7W4O0N3tHgnQ3e1eDdDd7T4L0N3tfg/Q0+0OCDDT7U4MMNPtLgow0+1uDjDT7R4JMNDhoMGgwbjBqMG0waTBvMGswbLBosG6warBtsGmwb7BrsG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwS8b/KrBrxv8psFvG/yuwe8b/KHBHxv8qcGfG/ylwV8b/K3B3xv8o8E/G/yrwb8b/KfBfxv8r8ERDY5scFSDoxsc0+DYBoe0OE6LQ1sct8VhLY7X4vgtTtDihC1O1OLELU7S4vAWJ21xshYnb3GKFqdscaoWp25xmhanbXG6FqdvcYYWZ2xxphZnbnGWFmdtcbYWZ29xjhbnbHGuFuducZ4W521xvhbnb3GBFhdscaEWF25xkRYXbXGxFhdvcYkWaXHJFpdqcekWl2lx2RaXa3H5FldoccUWV2px5RZXaXHVFldrcfUW12hxzRbXanHtFtdpcd0W12tx/RY3aHHDFjdqceMWN2lx0xY3a3HzFrdoccsWt2px6xa3aXHbFrdrcfsWd2hxxxZ3anHnFndpcdcWd2tx9xb3aHHPFvdqce8W92lx3xb3a3H/Fg9o8cAWD2rx4BYPafHQFg9r8fAWj2jxyBaPavHoFo9p8dgWj2vx+BZPaPHEFm3xpBZPbvGUFk9t8bQWT2/xjBbPbPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9s8a4W727xnhbvbfG+Fu9v8YEWH2zxoRYfbvGRFh9t8bEWH2/xiRafbHHQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt/iUy0+3eIzLT7b4nMtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+2eJXLX7d4jctftvidy1+3+IPLf7Y4k8t/tziLy3+2uJvLf7e4h8t/tniXy3+3eI/Lf7b4n8tjmhxZIujWhzd4pgWx7Y4pMNxOhza4bgdDutwvA7H73CCDifscKIOJ+5wkg6Hdzhph5N1OHmHU3Q4ZYdTdTh1h9N0OG2H03U4fYczdDhjhzN1OHOHs3Q4a4ezdTh7h3N0OGeHc3U4d4fzdDhvh/N1OH+HC3S4YIcLdbhwh4t0uGiHi3W4eIdLdEiHS3a4VIdLd7hMh8t2uFyHy3e4QocrdrhShyt3uEqHq3a4Woerd7hGh2t2uFaHa3e4Tofrdrheh+t3uEGHG3a4UYcbd7hJh5t2uFmHm3e4RYdbdrhVh1t3uE2H23a4XYfbd7hDhzt2uFOHO3e4S4djOtytw9073KPDPTvcq8O9O9ynw3073K/D/Ts8oMMDOzyow4M7PKTDQzs8rMPDOzyiwyM7PKrDozs8psNjOzyuw+M7PKHDEzu0w5M6PLnDUzo8tcPTOjy9wzM6PLPDszo8u8NzOjy3w/M6PL/DCzq8sMOLOry4w0s6vLTDyzq8vMMrOryyw6s6vLrDazq8tsPrOry+wxs6vLHDm/6/fzje0uGtHd7W4e0d3tHhnR3e1eHdHd7T4b0d3tfh/R0+0OGDHT7U4cMdPtLhox0+1uHjHT7R4ZMdDjoMOgw7jDqMO0w6TDvMOsw7LDosO6w6rDtsOmw77DrsO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDfzv8r8MRHY7scFSHo//339gOh/Q4To9Dexy3x2E9jtfj+D1O0OOEPU7U48Q9TtLj8B4n7XGyHifvcYoep+xxqh6n7nGaHqftcboep+9xhh5n7HGmHmfucZYeZ+1xth5n73GOHufsca4e5+5xnh7n7XG+HufvcYEeF+xxoR4X7nGRHhftcbEeF+9xiR7pcckel+px6R6X6XHZHpfrcfkeV+hxxR5X6nHlHlfpcdUeV+tx9R7X6HHNHtfqce0e1+lx3R7X63H9HjfoccMeN+px4x436XHTHjfrcfMet+hxyx636nHrHrfpcdset+tx+x536HHHHnfqceced+lx1x5363H3Hvfocc8e9+px7x736XHfHvfrcf8eD+jxwB4P6vHgHg/p8dAeD+vx8B6P6PHIHo/q8egej+nx2B6P6/H4Hk/o8cQe7fGkHk/u8ZQeT+3xtB5P7/GMHs/s8awez+7xnB7P7fG8Hs/v8YIeL+zxoh4v7vGSHi/t8bIeL+/xih6v7PGqHq/u8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+/xgR4f7PGhHh/u8ZEeH+3xsR4f7/GJHp/scdDj/wUAAP//oOnmYg==") ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="001f00000000000000000001"]) 293.060427ms ago: executing program 6 (id=394): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r2, 0x25, 0x8, @void}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 292.033977ms ago: executing program 5 (id=395): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 290.031151ms ago: executing program 1 (id=396): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/11, 0xb}, 0x1}], 0x1, 0x40013120, 0x0) 276.210664ms ago: executing program 3 (id=397): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040184) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x28040000}, 0x4000000) 127.8534ms ago: executing program 6 (id=398): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x6260, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000001fc80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2143, 0x0) 65.043465ms ago: executing program 1 (id=399): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffff5f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002640)="6f48814e3a2d76aaa1658ae738d26c4ec8a3d1664223a4535bd16e4050d27e56b555e185bc9aec8d713ac05254ee68f4a68647", 0x33}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002bc0)="4f577f17d9b9fdd73909fe470060176b3866011bc8ac654bfdb0f7b79b6e71d11440b959cd4b2054af784c45eed1d17e0b04c019cd7f9ea309a9d81ba0427bad40f9efaacbc69ad5e4b267b68a2ecaafbe882713a6ef0dc855a291b12b4f9b6c57c498b31a6710e9ab87dcd72e98813ed0b9c12ceaf7b1704aaeda4cd3cc2260285890010f36935b63a856f092226fb6bcd51620f255f59200156d84abdf4f1e13e2114a79b55e05b7a770e42f4b72241aa40f1b3d86c5b587523b58f43523b32958d189d69b2d99943d05e6c2d31b3e83306a1d6844becb57717e3b9ee11c2531c1bb0f504861531b6b23129a04c70a5c4ccb65f56d373b16975a9d4b734ba3a9918e934d7a16178c2b06fcfd7d0c968852b57ab73873a3113678ca0ef540e5d9d50484e58f0f3c1e3e5f8974773cf3ebf7822d32b0f0c7a06be25ec147f2853de52ff8cf18aa97bef88ef662b00132bf754e4d6cb0b707b96f528f7480f2e242649829500060cd8f410dad2a49e901ca729b0d9686f30fd8208d6d74524646bef1d821d10b1dfda442f602337bf7970703d1f8aa402859939a3c6213e2dd2cbc41c94933e22183cb29f346540c446717c7c58c7b7b61796d43833fc43bd45d4d38f38299c20b2e98ea8b60ee039c0bc83f0b18864e6038f849fd2e95cdbcf52b66115b292b51d51e356acb1e0e4ff75dac13965390d49b9adca7ceb11435e1326ea8cf01d443dc547cc874e728fd9e5085ca939fcaadefd4f6f3261eb7b7826360478001115b65f425e70a02b0385de525b08fc0cc9c24505d0b2863ade6e1e20bbbefc411536557529083960990ae463d4e8aeb3c301274f8e4567cb617518a3f8c27076a87f111b7b653f08ceb2a48448060d5b64c5e7e86f9a81b9c1bfe4283cc6958b7daa38724657c3e45d0524b7e0ba5a170af27a67c5d9645af283790f7ad9cbf45150c0bfb51c791de919bb5e354703841aa77265dda1f95f0799c2cb07bdff38b650c00491ab2d7467aa4170f64de7a4b3355dc73365e2d1063c56358411b4e1aa9c4e04e3a9051048379ca418704b11fbe52ea8cb916aa6d2c63da6ff68d4cb2958c430bc1d61a23384f86428ae655c689cb2f90d5bcaa0bdc26f6210ea02ecd63422cdaddb5fa3af53bb3ce7eafc5c0ddb3d7726185eb1fd6691fa03501d8211fb78f746fa62d2ab8432dad70b15dfc4c6afcb2f0dcf7e1ad393fd4d09c040253bc3d7af4e1d4884c9fa340ba44607b0d99278981c5483072c5004dc966efe4f26a9dde106d20588f06f5c4b0ff1a497f7b0f698226c431cb0d377a76dbbd4b086e203573c04747e2e8adde451a4d774dcf7b5e8bc64783c1d3004e0ca571990e39b8330a04687ff1430fc7bd1165e79b3d2d8eb68f041e8d3996ef3036ea9748d797d2756ada24a86bc83551ec5c76743d5f1db14d722f303fba948abbe7d3a28a7bded20e22efd5442a9ffb7208ad2b02cfc64b8612ee81868779c423a861f522b5bbf0c4bf4716a466023a95ef8f065b8b2a097282b62f20a1c52aa7db1695fce8413e7f943a16331533378891acbdba93364221ba620ceab1d67c7285a1d9a1e7c427d705f480fdbf0a687067b2f128b330a113988c0bb0ffeac1bb55bce001bf0f948475808e57eab0dd89328b0842c8a906731b07397212b1b475106daed7cd9fed193055e0124b86056117ed5d7c66048bef765e986c283a064d84d4685e8631b17b5232ae091881aee25bbdf88dc0b2dc26a1847d33c6db3116c8408a2261920af5d5d470d8b7a194d2a799bfee54f568bb19035c396376d2103272828039b1e4422c04cbe6230f05c3fc924ac8e756fd68fe9c8b01f4a67feefe6dba2c4cea7822cc8d939896ec583f6edcb7d195ec1a1ed5230c7afda81d89b09853e7aac5bb5b760630fa6129cadcc799697f88a257e9ecc09df1a30cc0843b263900c6550d5d45f3b2922d3cbcd2380f6d0931bc81d2e2e11b771fceab973ecaf51d0290e69b4d8dc7bf7e7d9a867b336fb774209580a34ceaadf71fb1b5ab514398b6374f339ed34a6620836211725cd7ab89bd7ce4fadd8f20e71c230a636aaa9bf75ae56078c3fd3bace27e67c8916e90e808f7faabc4f7af57e1e79ec64d28956bd01ffc7e308b73f777da4b6047bb998ce4b9cf26a0e2a8532d7d521daf07e023c7b5af02fceb0918a8901f887f41fedfc4772bc6edd7cc3430b4765c0acc03fcf25a66e7efdf9ac9b2b7e4d699aae7ba03797c4159c62a87c72342d7b6b34fa40b57f4427d8fd4af4e94790024d6b2055b132d8aa746ea8fece4b2af6a23e55d5ab07ad8c205c8919e7fc831672908c611db1f4cc6793a0cf25f65342e3122c422814119f98682795a639a26442681480c0369527dae6985a925769d102f58f9b3a029bbba80ffe02fa84362680cd7cef9580a96aabefc3d9df5e8b34cfebe70b19581d97bdb4e2b4f8d8abc54925dcc986e7eed8373fd266d9dd423a9932ea07c8c6d7b3a1be25f346b192acf8ff03e72443b03b8a39d25abedebb80f1e89397afdea2407b32d2f588e943f7b2c6ee4afb62c0e9a6813431ef614f4f0ddc830903fc95e74f7f04de3120f3454988db5d819fbea6523a676fac9802560bc0c79c5f94f50b2317dcc1c99cadb96a507440dc670f79eb6f24a815fc6eb82a40f63e99e4031568d6af995afe044fa330b3b5bc2af1664c3f96e108d7d36eb9376f33f34a7addf5f0f276431cd41ebffc70fdf4056642573842a97e31433792cd04703677970827710924f85ed0f0690b7fa509c8dea59ab230ca0b3e46a9b69d22cdc569dfd483deb38f9702ef720552f7bf1847763f5f2fb1cd6e6cb55b17295edb234bb0cb543f27ac1f419079261084f35fc30b965e7130211e9166b6d6846278da6e20e4e1fc32087bd604890baa846b55ff7c8b3279a4a5263f2fee91623c9ca102eef0bd515f6c286bfa66281c5d0278beb8d55244fd23581d95c5cea045dd5d4972c75d91b1d514529c8e0fa49f033941fef335b85ab496eb67ae376c9cefabdc86ce3a8cf9bdaa0e8462d8183d3db15642e0922c29aae0b0ceb10fe2ffd95c1aa9ff6ff8cac26f56317e0d24d7a6dbb76017409e7d64aa60883f53aa4d266d383d4f4fa23d3bf11e339092c312c5a31f221b66d07fc76", 0x8c2}], 0x1}}], 0x2, 0x400c4) 61.207111ms ago: executing program 5 (id=400): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0x3, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001f40)="fd0ac3831ceb1e735a864365d94023e74aca606ae305def2ba6e07ad3a27d21ca2c8f5027ce33da1957856e8e702b28cf99433f8181a2a7d5c64134e16dd878a894af034b70309c76db1a81f349780ccc1d58ec82239216280628385fd0112ad5d00da1504133b07160d1fd8e6d8eb7195eaa206099576a0fbd9715400a651b71a6054bea1e8ff4ee36ac799a69d", 0x8e}], 0x1}}], 0x1, 0x4004041) 29.374938ms ago: executing program 3 (id=401): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x80000000, 0x1a) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 1 (id=402): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) listen(r0, 0x7ff) accept(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): vsim0: renamed from eth0 [ 40.914231][ T6493] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.918088][ T6493] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.928569][ T6493] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.951199][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.964219][ T6500] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.991819][ T258] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.991937][ T258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.997098][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.997195][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.002373][ T6492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.006155][ T6492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.010298][ T6492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.024411][ T6492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.083927][ T6493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.092290][ T6501] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.097674][ T6501] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.126641][ T6501] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.130305][ T6501] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.158504][ T6493] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.169506][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.171058][ T561] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.171105][ T561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.194981][ T6498] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.196458][ T2623] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.196508][ T2623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.222663][ T6494] Bluetooth: hci4: command tx timeout [ 41.222895][ T6061] Bluetooth: hci3: command tx timeout [ 41.231265][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.231378][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.247211][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.284934][ T2623] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.285016][ T2623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.296523][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.302086][ T6061] Bluetooth: hci1: command tx timeout [ 41.302249][ T6061] Bluetooth: hci2: command tx timeout [ 41.313380][ T6494] Bluetooth: hci0: command tx timeout [ 41.325404][ T6501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.358069][ T6492] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.363794][ T2623] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.363868][ T2623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.366423][ T6500] veth0_vlan: entered promiscuous mode [ 41.378594][ T2623] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.378696][ T2623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.392028][ T6493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.412886][ T6498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.427187][ T6501] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.453311][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.453400][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.454295][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.454372][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.485988][ T6500] veth1_vlan: entered promiscuous mode [ 41.513133][ T6493] veth0_vlan: entered promiscuous mode [ 41.519303][ T6493] veth1_vlan: entered promiscuous mode [ 41.529105][ T6501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.570388][ T6493] veth0_macvtap: entered promiscuous mode [ 41.581225][ T6500] veth0_macvtap: entered promiscuous mode [ 41.589672][ T6500] veth1_macvtap: entered promiscuous mode [ 41.596689][ T6493] veth1_macvtap: entered promiscuous mode [ 41.603499][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.627559][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.649573][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.655004][ T6500] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.655104][ T6500] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.655136][ T6500] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.655166][ T6500] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.669196][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.703192][ T6501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.719244][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.719365][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.720014][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.746158][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.746227][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.751466][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.771219][ T6492] veth0_vlan: entered promiscuous mode [ 41.803652][ T6498] veth0_vlan: entered promiscuous mode [ 41.810930][ T6493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.814589][ T6493] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.817303][ T6493] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.819857][ T6493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.829388][ T6498] veth1_vlan: entered promiscuous mode [ 41.840191][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.844648][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.862659][ T6498] veth0_macvtap: entered promiscuous mode [ 41.866543][ T6492] veth1_vlan: entered promiscuous mode [ 41.882330][ T258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.882393][ T258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.905589][ T6498] veth1_macvtap: entered promiscuous mode [ 41.910751][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.910826][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.910854][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.910881][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.916686][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.929131][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.932801][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.935651][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.938885][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.942402][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.976298][ T6498] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.978971][ T6498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.981492][ T6498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.984212][ T6498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.003604][ T6500] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 42.010658][ T2623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.010723][ T2623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.057781][ T2623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.057848][ T2623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.069150][ T6492] veth0_macvtap: entered promiscuous mode [ 42.124708][ T6492] veth1_macvtap: entered promiscuous mode [ 42.170887][ T6501] veth0_vlan: entered promiscuous mode [ 42.202656][ T561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.202735][ T561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.210052][ T6501] veth1_vlan: entered promiscuous mode [ 42.218015][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.218075][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.218445][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.218468][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.218488][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.218508][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.219236][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.256115][ T6501] veth0_macvtap: entered promiscuous mode [ 42.258024][ T6501] veth1_macvtap: entered promiscuous mode [ 42.296214][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.296292][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.298004][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.298028][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.298049][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.298069][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.299096][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.308882][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.308914][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.316304][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.316342][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.316363][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.316383][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.316403][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.316423][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.316441][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.316462][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.317120][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.318455][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.318484][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.318503][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.318524][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.318542][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.318562][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.318581][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.318601][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.319126][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.320686][ T6501] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.320727][ T6501] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.320757][ T6501] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.320786][ T6501] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.340887][ T6492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.340931][ T6492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.340962][ T6492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.340992][ T6492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.430131][ T6581] loop3: detected capacity change from 0 to 64 [ 42.488634][ T6576] loop2: detected capacity change from 0 to 40427 [ 42.512859][ T6576] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3fffff [ 42.529709][ T6576] F2FS-fs (loop2): invalid crc value [ 42.599881][ T6576] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.621272][ T6587] loop1: detected capacity change from 0 to 512 [ 42.639981][ T6587] EXT4-fs: inline encryption not supported [ 42.674828][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.674900][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.690629][ T6576] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x1f8/0x15c0 [ 42.695111][ T6576] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 42.703320][ T6591] loop3: detected capacity change from 0 to 512 [ 42.731915][ T6587] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.731972][ T6587] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.737094][ T6591] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 42.740830][ T6591] EXT4-fs (loop3): invalid journal inode [ 42.740907][ T6591] EXT4-fs (loop3): can't get journal size [ 42.745885][ T6591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 42.746027][ T6591] System zones: 1-12, 13-13 [ 42.750598][ T6587] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.2: corrupted in-inode xattr: e_value out of bounds [ 42.750908][ T6500] syz-executor: attempt to access beyond end of device [ 42.750908][ T6500] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 42.759368][ T6587] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2: couldn't read orphan inode 15 (err -117) [ 42.763191][ T6591] EXT4-fs (loop3): 1 truncate cleaned up [ 42.764169][ T6591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.776806][ T6500] CPU: 0 UID: 0 PID: 6500 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT [ 42.776833][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.776841][ T6500] Call trace: [ 42.776845][ T6500] show_stack+0x2c/0x3c (C) [ 42.776874][ T6500] __dump_stack+0x30/0x40 [ 42.776886][ T6500] dump_stack_lvl+0xd8/0x12c [ 42.776896][ T6500] dump_stack+0x1c/0x28 [ 42.776907][ T6500] f2fs_handle_critical_error+0x34c/0x4b8 [ 42.776921][ T6500] f2fs_stop_checkpoint+0x58/0x6c [ 42.776932][ T6500] f2fs_write_end_io+0x794/0xadc [ 42.776947][ T6500] bio_endio+0x81c/0x858 [ 42.776960][ T6500] submit_bio_noacct+0x158/0x176c [ 42.776971][ T6500] submit_bio+0x354/0x4d4 [ 42.776981][ T6500] f2fs_submit_write_bio+0x13c/0x324 [ 42.776994][ T6500] __submit_merged_bio+0x254/0x704 [ 42.777007][ T6500] __submit_merged_write_cond+0x23c/0x4ac [ 42.777019][ T6500] f2fs_write_data_pages+0x1e9c/0x27ac [ 42.777033][ T6500] do_writepages+0x2c0/0x6a8 [ 42.777048][ T6500] filemap_fdatawrite+0x144/0x1e8 [ 42.777062][ T6500] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 42.777074][ T6500] f2fs_write_checkpoint+0x684/0x1694 [ 42.777086][ T6500] kill_f2fs_super+0x21c/0x584 [ 42.777099][ T6500] deactivate_locked_super+0xc4/0x12c [ 42.777112][ T6500] deactivate_super+0xe0/0x100 [ 42.777123][ T6500] cleanup_mnt+0x31c/0x3ac [ 42.777135][ T6500] __cleanup_mnt+0x20/0x30 [ 42.777147][ T6500] task_work_run+0x1dc/0x260 [ 42.777159][ T6500] do_notify_resume+0x16c/0x1ec [ 42.777172][ T6500] el0_svc+0xb0/0x150 [ 42.777185][ T6500] el0t_64_sync_handler+0x78/0x108 [ 42.777197][ T6500] el0t_64_sync+0x198/0x19c [ 42.778539][ T6587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.800542][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.800579][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.809027][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.809061][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.822233][ T6500] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 42.822325][ T6500] CPU: 1 UID: 0 PID: 6500 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT [ 42.822339][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.822347][ T6500] Call trace: [ 42.822351][ T6500] show_stack+0x2c/0x3c (C) [ 42.822368][ T6500] __dump_stack+0x30/0x40 [ 42.822380][ T6500] dump_stack_lvl+0xd8/0x12c [ 42.822390][ T6500] dump_stack+0x1c/0x28 [ 42.822400][ T6500] f2fs_handle_critical_error+0x34c/0x4b8 [ 42.822415][ T6500] f2fs_stop_checkpoint+0x58/0x6c [ 42.822427][ T6500] f2fs_write_end_io+0x794/0xadc [ 42.822440][ T6500] bio_endio+0x81c/0x858 [ 42.822453][ T6500] submit_bio_noacct+0x158/0x176c [ 42.822464][ T6500] submit_bio+0x354/0x4d4 [ 42.822474][ T6500] f2fs_submit_write_bio+0x13c/0x324 [ 42.822487][ T6500] __submit_merged_bio+0x254/0x704 [ 42.822500][ T6500] __submit_merged_write_cond+0x23c/0x4ac [ 42.822513][ T6500] f2fs_write_data_pages+0x1e9c/0x27ac [ 42.822526][ T6500] do_writepages+0x2c0/0x6a8 [ 42.822540][ T6500] filemap_fdatawrite+0x144/0x1e8 [ 42.822555][ T6500] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 42.822566][ T6500] f2fs_write_checkpoint+0x684/0x1694 [ 42.822578][ T6500] kill_f2fs_super+0x21c/0x584 [ 42.822591][ T6500] deactivate_locked_super+0xc4/0x12c [ 42.822604][ T6500] deactivate_super+0xe0/0x100 [ 42.822614][ T6500] cleanup_mnt+0x31c/0x3ac [ 42.822627][ T6500] __cleanup_mnt+0x20/0x30 [ 42.822647][ T6500] task_work_run+0x1dc/0x260 [ 42.822659][ T6500] do_notify_resume+0x16c/0x1ec [ 42.822672][ T6500] el0_svc+0xb0/0x150 [ 42.822685][ T6500] el0t_64_sync_handler+0x78/0x108 [ 42.822697][ T6500] el0t_64_sync+0x198/0x19c [ 42.822711][ T6500] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 42.924988][ T561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.925048][ T561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.945839][ T6493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.959099][ T6498] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.293145][ T6609] loop0: detected capacity change from 0 to 2048 [ 43.304610][ T6494] Bluetooth: hci3: command tx timeout [ 43.304684][ T6494] Bluetooth: hci4: command tx timeout [ 43.331358][ T6605] loop4: detected capacity change from 0 to 4096 [ 43.386704][ T6061] Bluetooth: hci0: command tx timeout [ 43.386787][ T6061] Bluetooth: hci2: command tx timeout [ 43.386822][ T6061] Bluetooth: hci1: command tx timeout [ 43.412776][ T6611] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 43.438872][ T6613] loop2: detected capacity change from 0 to 512 [ 43.451876][ T6613] EXT4-fs: Ignoring removed orlov option [ 43.506891][ T6608] loop1: detected capacity change from 0 to 40427 [ 43.507303][ T6613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.514605][ T6608] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3fffff [ 43.517535][ T6608] F2FS-fs (loop1): Image doesn't support compression [ 43.519604][ T6608] F2FS-fs (loop1): heap/no_heap options were deprecated [ 43.521936][ T6608] F2FS-fs (loop1): Image doesn't support compression [ 43.536986][ T6608] F2FS-fs (loop1): invalid crc value [ 43.549896][ T6605] EXT4-fs (loop4): Test dummy encryption mode enabled [ 43.571194][ T6605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.670970][ T6608] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 43.682833][ T6605] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 43.686170][ T6599] loop3: detected capacity change from 0 to 32768 [ 43.709800][ T6599] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8 (6599) [ 43.748668][ T6501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.754558][ T6599] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 43.754715][ T6599] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 43.754762][ T6599] BTRFS info (device loop3): using free-space-tree [ 43.755977][ T6608] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_inode_page+0x34/0x44 [ 43.756055][ T6608] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:14, node_footer[nid:14,ino:14,ofs:0,cpver:0,blkaddr:0] [ 43.761179][ T6608] CPU: 1 UID: 0 PID: 6608 Comm: syz.1.10 Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT [ 43.761202][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 43.761210][ T6608] Call trace: [ 43.761215][ T6608] show_stack+0x2c/0x3c (C) [ 43.761232][ T6608] __dump_stack+0x30/0x40 [ 43.761244][ T6608] dump_stack_lvl+0xd8/0x12c [ 43.761255][ T6608] dump_stack+0x1c/0x28 [ 43.761265][ T6608] f2fs_handle_critical_error+0x34c/0x4b8 [ 43.761295][ T6608] f2fs_stop_checkpoint+0x58/0x6c [ 43.761315][ T6608] f2fs_update_inode_page+0x168/0x184 [ 43.761329][ T6608] f2fs_write_inode+0x36c/0x658 [ 43.761341][ T6608] __writeback_single_inode+0x5ac/0x13e8 [ 43.761353][ T6608] writeback_single_inode+0x18c/0x54c [ 43.761369][ T6608] sync_inode_metadata+0xac/0xf4 [ 43.761383][ T6608] f2fs_write_checkpoint+0x7e0/0x1694 [ 43.761396][ T6608] f2fs_issue_checkpoint+0x280/0x398 [ 43.761408][ T6608] f2fs_sync_fs+0x1e0/0x4f4 [ 43.761421][ T6608] f2fs_do_sync_file+0x974/0x14f0 [ 43.761436][ T6608] __f2fs_ioctl+0x4080/0x95f0 [ 43.761451][ T6608] f2fs_ioctl+0x130/0x208 [ 43.761465][ T6608] __arm64_sys_ioctl+0x14c/0x1c4 [ 43.761480][ T6608] invoke_syscall+0x98/0x2b8 [ 43.761491][ T6608] el0_svc_common+0x130/0x23c [ 43.761501][ T6608] do_el0_svc+0x48/0x58 [ 43.761511][ T6608] el0_svc+0x58/0x150 [ 43.761525][ T6608] el0t_64_sync_handler+0x78/0x108 [ 43.761540][ T6608] el0t_64_sync+0x198/0x19c [ 43.773462][ T6608] F2FS-fs (loop1): Stopped filesystem due to reason: 5 [ 43.815297][ T6607] F2FS-fs (loop1): f2fs_evict_inode: inconsistent node id, ino:14 [ 43.842441][ T6500] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /2/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 44.021045][ T258] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 44.493423][ T13] BTRFS warning (device loop3): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 44.658595][ T45] BTRFS warning (device loop3): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xcc73edc8ee24564a8c6ce1ce085684ad2f9862e56f948f195b5cd36555a6be2f level 0 [ 44.661072][ T45] BTRFS warning (device loop3): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 44.801327][ T6646] syz.4.16 uses obsolete (PF_INET,SOCK_PACKET) [ 44.826291][ T6646] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 60 [ 44.880887][ T6493] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 45.321415][ T6653] loop1: detected capacity change from 0 to 4096 [ 45.384239][ T6061] Bluetooth: hci3: command tx timeout [ 45.385529][ T6494] Bluetooth: hci4: command tx timeout [ 45.480673][ T6494] Bluetooth: hci1: command tx timeout [ 45.482764][ T6494] Bluetooth: hci2: command tx timeout [ 45.484942][ T6494] Bluetooth: hci0: command tx timeout [ 46.529390][ T6651] loop3: detected capacity change from 0 to 40427 [ 46.536623][ T6651] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7 [ 46.545979][ T6651] F2FS-fs (loop3): invalid crc value [ 46.550256][ T6656] loop0: detected capacity change from 0 to 40427 [ 46.561669][ T6656] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 46.561726][ T6656] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 46.561786][ T6656] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x3fffff [ 46.561820][ T6656] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8 [ 46.582365][ T6656] F2FS-fs (loop0): invalid crc value [ 46.640111][ T6651] F2FS-fs (loop3): Start checkpoint disabled! [ 46.671123][ T6651] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 46.695694][ T6656] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 46.695776][ T6656] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 46.782924][ T6661] loop4: detected capacity change from 0 to 32768 [ 46.786753][ T6661] ======================================================= [ 46.786753][ T6661] WARNING: The mand mount option has been deprecated and [ 46.786753][ T6661] and is ignored by this kernel. Remove the mand [ 46.786753][ T6661] option from the mount to silence this warning. [ 46.786753][ T6661] ======================================================= [ 46.786880][ T6661] XFS: ikeep mount option is deprecated. [ 46.786906][ T6661] XFS: noikeep mount option is deprecated. [ 46.801432][ T6656] syz.0.19: attempt to access beyond end of device [ 46.801432][ T6656] loop0: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 46.825026][ T6656] syz.0.19: attempt to access beyond end of device [ 46.825026][ T6656] loop0: rw=2049, sector=53384, nr_sectors = 8 limit=40427 [ 46.834573][ T6656] syz.0.19: attempt to access beyond end of device [ 46.834573][ T6656] loop0: rw=2049, sector=53392, nr_sectors = 8 limit=40427 [ 46.859409][ T6661] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 46.875643][ T6492] syz-executor: attempt to access beyond end of device [ 46.875643][ T6492] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 46.876002][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT [ 46.876021][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.876029][ T6492] Call trace: [ 46.876033][ T6492] show_stack+0x2c/0x3c (C) [ 46.876051][ T6492] __dump_stack+0x30/0x40 [ 46.876063][ T6492] dump_stack_lvl+0xd8/0x12c [ 46.876073][ T6492] dump_stack+0x1c/0x28 [ 46.876083][ T6492] f2fs_handle_critical_error+0x34c/0x4b8 [ 46.876098][ T6492] f2fs_stop_checkpoint+0x58/0x6c [ 46.876109][ T6492] f2fs_write_end_io+0x794/0xadc [ 46.876124][ T6492] bio_endio+0x81c/0x858 [ 46.876137][ T6492] submit_bio_noacct+0x158/0x176c [ 46.876148][ T6492] submit_bio+0x354/0x4d4 [ 46.876158][ T6492] f2fs_submit_write_bio+0x13c/0x324 [ 46.876171][ T6492] __submit_merged_bio+0x254/0x704 [ 46.876184][ T6492] __submit_merged_write_cond+0x23c/0x4ac [ 46.876196][ T6492] f2fs_write_data_pages+0x1e9c/0x27ac [ 46.876210][ T6492] do_writepages+0x2c0/0x6a8 [ 46.876225][ T6492] filemap_fdatawrite+0x144/0x1e8 [ 46.876240][ T6492] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 46.876252][ T6492] f2fs_write_checkpoint+0x684/0x1694 [ 46.876263][ T6492] kill_f2fs_super+0x21c/0x584 [ 46.876290][ T6492] deactivate_locked_super+0xc4/0x12c [ 46.876304][ T6492] deactivate_super+0xe0/0x100 [ 46.876315][ T6492] cleanup_mnt+0x31c/0x3ac [ 46.876387][ T6492] __cleanup_mnt+0x20/0x30 [ 46.876399][ T6492] task_work_run+0x1dc/0x260 [ 46.876411][ T6492] do_notify_resume+0x16c/0x1ec [ 46.876424][ T6492] el0_svc+0xb0/0x150 [ 46.876437][ T6492] el0t_64_sync_handler+0x78/0x108 [ 46.876449][ T6492] el0t_64_sync+0x198/0x19c [ 46.876464][ T6492] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 46.954245][ T6661] XFS (loop4): Ending clean mount [ 46.960077][ T6651] F2FS-fs (loop3): ino:10, start:1, end:8193, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 46.962685][ T6661] XFS (loop4): Quotacheck needed: Please wait. [ 47.009359][ T561] kworker/u8:7: attempt to access beyond end of device [ 47.009359][ T561] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 47.009889][ T561] CPU: 0 UID: 0 PID: 561 Comm: kworker/u8:7 Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT [ 47.009909][ T561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.009916][ T561] Workqueue: writeback wb_workfn (flush-7:3) [ 47.009940][ T561] Call trace: [ 47.009944][ T561] show_stack+0x2c/0x3c (C) [ 47.009958][ T561] __dump_stack+0x30/0x40 [ 47.009970][ T561] dump_stack_lvl+0xd8/0x12c [ 47.009980][ T561] dump_stack+0x1c/0x28 [ 47.009990][ T561] f2fs_handle_critical_error+0x34c/0x4b8 [ 47.010005][ T561] f2fs_stop_checkpoint+0x58/0x6c [ 47.010017][ T561] f2fs_write_end_io+0x794/0xadc [ 47.010031][ T561] bio_endio+0x81c/0x858 [ 47.010044][ T561] submit_bio_noacct+0x158/0x176c [ 47.010055][ T561] submit_bio+0x354/0x4d4 [ 47.010065][ T561] f2fs_submit_write_bio+0x13c/0x324 [ 47.010078][ T561] __submit_merged_bio+0x254/0x704 [ 47.010091][ T561] __submit_merged_write_cond+0x23c/0x4ac [ 47.010104][ T561] f2fs_write_data_pages+0x1e9c/0x27ac [ 47.010118][ T561] do_writepages+0x2c0/0x6a8 [ 47.010132][ T561] __writeback_single_inode+0x15c/0x13e8 [ 47.010143][ T561] writeback_sb_inodes+0x558/0xe38 [ 47.010157][ T561] wb_writeback+0x3cc/0xd70 [ 47.010171][ T561] wb_workfn+0x338/0xdc0 [ 47.010184][ T561] process_one_work+0x7e8/0x156c [ 47.010199][ T561] worker_thread+0x958/0xed8 [ 47.010212][ T561] kthread+0x5fc/0x75c [ 47.010225][ T561] ret_from_fork+0x10/0x20 [ 47.011495][ T561] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 47.059809][ T6661] XFS (loop4): Quotacheck: Done. [ 47.094788][ T6663] loop1: detected capacity change from 0 to 40427 [ 47.116457][ T6663] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3fffff [ 47.117940][ T6663] F2FS-fs (loop1): invalid crc value [ 47.195009][ T6663] F2FS-fs (loop1): Start checkpoint disabled! [ 47.198178][ T6663] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 47.248039][ T6663] F2FS-fs (loop1): inject no more block in inc_valid_block_count of f2fs_map_blocks+0xb10/0x30f8 [ 47.330461][ T6501] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 47.387035][ T13] kworker/u8:1: attempt to access beyond end of device [ 47.387035][ T13] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 47.390982][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT [ 47.391004][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.391013][ T13] Workqueue: writeback wb_workfn (flush-7:1) [ 47.391037][ T13] Call trace: [ 47.391041][ T13] show_stack+0x2c/0x3c (C) [ 47.391055][ T13] __dump_stack+0x30/0x40 [ 47.391066][ T13] dump_stack_lvl+0xd8/0x12c [ 47.391076][ T13] dump_stack+0x1c/0x28 [ 47.391086][ T13] f2fs_handle_critical_error+0x34c/0x4b8 [ 47.391101][ T13] f2fs_stop_checkpoint+0x58/0x6c [ 47.391113][ T13] f2fs_write_end_io+0x794/0xadc [ 47.391127][ T13] bio_endio+0x81c/0x858 [ 47.391141][ T13] submit_bio_noacct+0x158/0x176c [ 47.391152][ T13] submit_bio+0x354/0x4d4 [ 47.391163][ T13] f2fs_submit_write_bio+0x13c/0x324 [ 47.391176][ T13] __submit_merged_bio+0x254/0x704 [ 47.391188][ T13] __submit_merged_write_cond+0x23c/0x4ac [ 47.391201][ T13] f2fs_write_data_pages+0x1e9c/0x27ac [ 47.391215][ T13] do_writepages+0x2c0/0x6a8 [ 47.391230][ T13] __writeback_single_inode+0x15c/0x13e8 [ 47.391241][ T13] writeback_sb_inodes+0x558/0xe38 [ 47.391255][ T13] wb_writeback+0x3cc/0xd70 [ 47.391269][ T13] wb_workfn+0x338/0xdc0 [ 47.391290][ T13] process_one_work+0x7e8/0x156c [ 47.391305][ T13] worker_thread+0x958/0xed8 [ 47.391319][ T13] kthread+0x5fc/0x75c [ 47.391331][ T13] ret_from_fork+0x10/0x20 [ 47.441354][ T13] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 47.473071][ T6061] Bluetooth: hci4: command tx timeout [ 47.473142][ T6061] Bluetooth: hci3: command tx timeout [ 47.597357][ T6682] loop0: detected capacity change from 0 to 4096 [ 47.622155][ T6494] Bluetooth: hci0: command tx timeout [ 47.622180][ T6061] Bluetooth: hci2: command tx timeout [ 47.622232][ T6061] Bluetooth: hci1: command tx timeout [ 47.627809][ T6688] loop3: detected capacity change from 0 to 1024 [ 47.629489][ T6688] EXT4-fs: Ignoring removed nobh option [ 47.629511][ T6688] EXT4-fs: Ignoring removed bh option [ 47.667633][ T6688] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.24: bad orphan inode 32767 [ 47.669293][ T6688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.829356][ T6493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.026418][ T6699] loop3: detected capacity change from 0 to 512 [ 48.053547][ T6699] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.084808][ T6699] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.085191][ T6699] EXT4-fs (loop3): 1 truncate cleaned up [ 48.086090][ T6699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.157008][ T6697] loop0: detected capacity change from 0 to 4096 [ 48.185907][ T6697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.243949][ T6493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.349644][ T6706] loop3: detected capacity change from 0 to 256 [ 48.374127][ T6492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.386747][ T6706] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 48.912786][ T6695] loop1: detected capacity change from 0 to 40427 [ 48.930234][ T6695] F2FS-fs (loop1): invalid crc value [ 49.090168][ T6695] F2FS-fs (loop1): Start checkpoint disabled! [ 49.104049][ T6695] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 49.303422][ T6704] loop4: detected capacity change from 0 to 32768 [ 49.326477][ T13] kworker/u8:1: attempt to access beyond end of device [ 49.326477][ T13] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 49.331358][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT [ 49.331382][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 49.331391][ T13] Workqueue: writeback wb_workfn (flush-7:1) [ 49.331429][ T13] Call trace: [ 49.331434][ T13] show_stack+0x2c/0x3c (C) [ 49.331448][ T13] __dump_stack+0x30/0x40 [ 49.331459][ T13] dump_stack_lvl+0xd8/0x12c [ 49.331470][ T13] dump_stack+0x1c/0x28 [ 49.331480][ T13] f2fs_handle_critical_error+0x34c/0x4b8 [ 49.331494][ T13] f2fs_stop_checkpoint+0x58/0x6c [ 49.331505][ T13] f2fs_write_end_io+0x794/0xadc [ 49.331519][ T13] bio_endio+0x81c/0x858 [ 49.331533][ T13] submit_bio_noacct+0x158/0x176c [ 49.331546][ T13] submit_bio+0x354/0x4d4 [ 49.331556][ T13] f2fs_submit_write_bio+0x13c/0x324 [ 49.331569][ T13] __submit_merged_bio+0x254/0x704 [ 49.331582][ T13] __submit_merged_write_cond+0x23c/0x4ac [ 49.331595][ T13] f2fs_write_data_pages+0x1e9c/0x27ac [ 49.331609][ T13] do_writepages+0x2c0/0x6a8 [ 49.331623][ T13] __writeback_single_inode+0x15c/0x13e8 [ 49.331634][ T13] writeback_sb_inodes+0x558/0xe38 [ 49.331648][ T13] wb_writeback+0x3cc/0xd70 [ 49.331662][ T13] wb_workfn+0x338/0xdc0 [ 49.331675][ T13] process_one_work+0x7e8/0x156c [ 49.331690][ T13] worker_thread+0x958/0xed8 [ 49.331705][ T13] kthread+0x5fc/0x75c [ 49.331718][ T13] ret_from_fork+0x10/0x20 [ 49.364151][ T6704] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 49.388061][ T13] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 49.439454][ T6704] XFS (loop4): Ending clean mount [ 49.476039][ T6704] XFS (loop4): Quotacheck needed: Please wait. [ 49.551270][ T6704] XFS (loop4): Quotacheck: Done. [ 49.585232][ T6719] loop3: detected capacity change from 0 to 32768 [ 49.592120][ T6719] xfs: Unknown parameter 'barrier' [ 49.745300][ T6731] loop1: detected capacity change from 0 to 128 [ 50.045231][ T6501] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 50.193850][ T6735] loop3: detected capacity change from 0 to 4096 [ 50.200169][ T6735] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 50.272018][ T6729] loop0: detected capacity change from 0 to 32768 [ 50.281720][ T6738] loop4: detected capacity change from 0 to 128 [ 50.308900][ T6729] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 50.349137][ T6729] XFS (loop0): Ending clean mount [ 50.357971][ T6733] loop1: detected capacity change from 0 to 32768 [ 50.360656][ T6729] XFS (loop0): Quotacheck needed: Please wait. [ 50.364405][ T6733] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.38 (6733) [ 50.395618][ T12] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0xf0, xfs_rmapbt block 0x14 [ 50.395751][ T12] XFS (loop0): Unmount and run xfs_repair [ 50.395774][ T12] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 50.395797][ T12] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 50.395819][ T12] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 50.395840][ T12] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 50.395860][ T12] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 50.395881][ T12] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 50.395901][ T12] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 50.395922][ T12] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 50.395942][ T12] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 50.396088][ T12] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x14 len 4 error 74 [ 50.397644][ T6733] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 50.397719][ T6733] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 50.397762][ T6733] BTRFS info (device loop1): using free-space-tree [ 50.401140][ T12] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x4c8/0x964 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 50.401191][ T12] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 50.448797][ T6729] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 50.449642][ T6729] XFS (loop0): Error -5 reserving per-AG metadata reserve pool. [ 50.646863][ T6738] syz.4.40: attempt to access beyond end of device [ 50.646863][ T6738] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 50.647087][ T6738] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 50.915897][ T6768] loop4: detected capacity change from 0 to 1024 [ 50.948695][ T6768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 51.002125][ T258] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 51.182203][ T6501] UDF-fs: warning (device loop4): udf_evict_inode: Inode 839 (mode 100755) has inode size 68714 different from extent length 69120. Filesystem need not be standards compliant. [ 51.194966][ T6498] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 52.165152][ T6779] loop0: detected capacity change from 0 to 22 [ 52.216631][ T6779] MTD: Couldn't look up './file0': -15 [ 52.216731][ T6779] ./file0: Can't lookup blockdev [ 52.256228][ T6783] loop3: detected capacity change from 0 to 128 [ 52.293099][ T6783] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.318854][ T6788] loop0: detected capacity change from 0 to 256 [ 52.456700][ T6788] FAT-fs (loop0): Directory bread(block 64) failed [ 52.456850][ T6788] FAT-fs (loop0): Directory bread(block 65) failed [ 52.456921][ T6788] FAT-fs (loop0): Directory bread(block 66) failed [ 52.456958][ T6788] FAT-fs (loop0): Directory bread(block 67) failed [ 52.457027][ T6788] FAT-fs (loop0): Directory bread(block 68) failed [ 52.457064][ T6788] FAT-fs (loop0): Directory bread(block 69) failed [ 52.457125][ T6788] FAT-fs (loop0): Directory bread(block 70) failed [ 52.457161][ T6788] FAT-fs (loop0): Directory bread(block 71) failed [ 52.457221][ T6788] FAT-fs (loop0): Directory bread(block 72) failed [ 52.457257][ T6788] FAT-fs (loop0): Directory bread(block 73) failed [ 52.726969][ T6493] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.857103][ T6799] loop3: detected capacity change from 0 to 1024 [ 52.926785][ T6799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.024412][ T6803] loop0: detected capacity change from 0 to 256 [ 53.280647][ T6493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.390482][ T6797] loop4: detected capacity change from 0 to 32768 [ 53.564986][ T6797] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 54.406935][ T6797] XFS (loop4): Ending clean mount [ 54.480484][ T6806] loop0: detected capacity change from 0 to 32768 [ 54.527659][ T6824] loop3: detected capacity change from 0 to 64 [ 54.673902][ T6501] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 54.757502][ T6806] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 54.806248][ T6806] (syz.0.56,6806,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 54.808339][ T6819] loop1: detected capacity change from 0 to 32768 [ 54.815888][ T6806] (syz.0.56,6806,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 54.889221][ T6819] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 54.948538][ T6492] ocfs2: Unmounting device (7,0) on (node local) [ 54.951883][ T6819] XFS (loop1): Ending clean mount [ 54.969374][ T6819] XFS (loop1): Quotacheck needed: Please wait. [ 55.024925][ T6819] XFS (loop1): Quotacheck: Done. [ 55.084976][ T6837] loop4: detected capacity change from 0 to 64 [ 55.217849][ T6839] loop0: detected capacity change from 0 to 1024 [ 55.253594][ T6839] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.276337][ T6839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.276667][ T6839] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.297392][ T6839] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.62: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 55.300212][ T6839] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.62: couldn't read orphan inode 11 (err -117) [ 55.301474][ T6839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.304056][ T6498] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 55.357832][ T6839] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.62: Invalid block bitmap block 0 in block_group 0 [ 55.359008][ T6839] Quota error (device loop0): write_blk: dquota write failed [ 55.359125][ T6839] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 55.359190][ T6839] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.62: Failed to acquire dquot type 0 [ 55.401709][ T6839] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz.0.62: Invalid inode table block 8589934593 in block_group 0 [ 55.405754][ T6839] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 55.488020][ T258] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm kworker/u8:5: Invalid inode table block 8589934593 in block_group 0 [ 55.490424][ T6492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.988622][ T6854] Injecting memory failure for pfn 0x12089b at process virtual address 0x20000000 [ 56.001632][ T6854] Memory failure: 0x12089b: recovery action for clean LRU page: Recovered [ 56.001837][ T6854] Injecting memory failure for pfn 0x13279b at process virtual address 0x20001000 [ 56.011794][ T6854] Memory failure: 0x13279b: recovery action for clean LRU page: Recovered [ 56.011937][ T6854] Injecting memory failure for pfn 0x13499b at process virtual address 0x20002000 [ 56.039481][ T6854] Memory failure: 0x13499b: Unknown page state [ 56.039548][ T6854] Memory failure: 0x13499b: recovery action for unknown page: Ignored [ 56.166727][ T6845] loop3: detected capacity change from 0 to 32768 [ 56.620262][ T6845] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 57.671351][ T6881] loop1: detected capacity change from 0 to 64 [ 57.675103][ T6845] XFS (loop3): Ending clean mount [ 57.693296][ T6845] XFS (loop3): Quotacheck needed: Please wait. [ 57.897798][ T6845] XFS (loop3): Quotacheck: Done. [ 58.656392][ T6888] loop0: detected capacity change from 0 to 8 [ 58.656760][ T6493] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 58.669176][ T6888] SQUASHFS error: zlib decompression failed, data probably corrupt [ 58.669298][ T6888] SQUASHFS error: Failed to read block 0x9b: -5 [ 58.669320][ T6888] SQUASHFS error: Unable to read metadata cache entry [99] [ 58.669347][ T6888] SQUASHFS error: Unable to read inode 0x127 [ 58.996264][ T6893] bridge0: port 3(syz_tun) entered blocking state [ 58.996649][ T6893] bridge0: port 3(syz_tun) entered disabled state [ 58.996882][ T6893] syz_tun: entered allmulticast mode [ 58.997944][ T6893] syz_tun: entered promiscuous mode [ 58.998425][ T6893] bridge0: port 3(syz_tun) entered blocking state [ 58.998538][ T6893] bridge0: port 3(syz_tun) entered forwarding state [ 59.020012][ T6494] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 59.039716][ T6494] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 59.040903][ T6494] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 59.041714][ T6494] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 59.042164][ T6494] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 59.259142][ T6888] loop0: detected capacity change from 0 to 32768 [ 59.296987][ T6888] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 59.429353][ T6890] loop1: detected capacity change from 0 to 32768 [ 59.440059][ T6500] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.451009][ T6888] XFS (loop0): Ending clean mount [ 59.464668][ T6890] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.76 (6890) [ 59.511492][ T6914] Bluetooth: MGMT ver 1.23 [ 59.520049][ T6890] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 59.520224][ T6890] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 59.520266][ T6890] BTRFS info (device loop1): using free-space-tree [ 59.557694][ T6492] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 59.587953][ T6890] BTRFS info (device loop1): checking UUID tree [ 59.722465][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.82'. [ 59.813479][ T6498] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 59.944463][ T45] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.131656][ T6940] loop4: detected capacity change from 0 to 2048 [ 60.135961][ T6940] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 60.183727][ T6943] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.363812][ T45] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.558335][ T6953] loop1: detected capacity change from 0 to 64 [ 60.695656][ T45] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.142556][ T6508] Bluetooth: hci5: command tx timeout [ 61.550299][ T45] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.671303][ T6894] chnl_net:caif_netlink_parms(): no params data found [ 63.097096][ T6894] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.101506][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.108101][ T6894] bridge_slave_0: entered allmulticast mode [ 63.113124][ T6894] bridge_slave_0: entered promiscuous mode [ 63.124253][ T6894] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.129850][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.132148][ T6894] bridge_slave_1: entered allmulticast mode [ 63.136222][ T6894] bridge_slave_1: entered promiscuous mode [ 63.316459][ T6508] Bluetooth: hci5: command tx timeout [ 63.360916][ T6894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.774314][ T6894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.249211][ T45] bridge_slave_1: left allmulticast mode [ 64.249351][ T45] bridge_slave_1: left promiscuous mode [ 64.250337][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.210084][ T2395] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.213891][ T2395] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.248640][ T45] bridge_slave_0: left allmulticast mode [ 65.252049][ T45] bridge_slave_0: left promiscuous mode [ 65.254333][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.391769][ T6508] Bluetooth: hci5: command tx timeout [ 65.945496][ T7001] netlink: 'syz.4.93': attribute type 11 has an invalid length. [ 65.945655][ T7001] netlink: 224 bytes leftover after parsing attributes in process `syz.4.93'. [ 67.461647][ T6508] Bluetooth: hci5: command tx timeout [ 69.699945][ T7026] loop0: detected capacity change from 0 to 32768 [ 69.730771][ T7026] non-latin1 character 0x172 found in JFS file name [ 69.733409][ T7026] mount with iocharset=utf8 to access [ 69.734984][ T7026] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 69.734984][ T7026] [ 69.754584][ T7026] ERROR: (device loop0): remounting filesystem as read-only [ 69.757266][ T7026] read_mapping_page failed! [ 69.758631][ T7026] bread failed! [ 69.938040][ T26] cfg80211: failed to load regulatory.db [ 72.835673][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.900640][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.990759][ T45] bond0 (unregistering): Released all slaves [ 73.059594][ T6894] team0: Port device team_slave_0 added [ 73.061406][ T6894] team0: Port device team_slave_1 added [ 74.953902][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.982994][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.983069][ T6894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.298577][ T7072] loop4: detected capacity change from 0 to 256 [ 76.109031][ T7081] loop0: detected capacity change from 0 to 4096 [ 76.120601][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.120661][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.120711][ T6894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.126370][ T9] Process accounting resumed [ 76.127089][ T9] kworker/0:0: attempt to access beyond end of device [ 76.127089][ T9] loop4: rw=0, sector=272, nr_sectors = 4 limit=256 [ 76.127317][ T9] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 76.127351][ T9] FAT-fs (loop4): Filesystem has been set read-only [ 76.266437][ T7081] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 76.342893][ T6894] hsr_slave_0: entered promiscuous mode [ 76.343471][ T6894] hsr_slave_1: entered promiscuous mode [ 76.352704][ T6894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.355019][ T6894] Cannot create hsr debugfs directory [ 76.458885][ T7088] loop4: detected capacity change from 0 to 4096 [ 76.539503][ T6492] ntfs3(loop0): ino=9, ntfs_sync_fs failed, -22. [ 76.546401][ T7088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.594532][ T7088] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 77.500593][ T6501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.689290][ T7103] loop4: detected capacity change from 0 to 256 [ 77.800263][ T7106] loop0: detected capacity change from 0 to 1024 [ 77.800875][ T7106] ext3: Unknown parameter 'noacl' [ 78.506917][ T45] hsr_slave_0: left promiscuous mode [ 78.510919][ T45] hsr_slave_1: left promiscuous mode [ 78.511456][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.511530][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.520256][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.520347][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.606264][ T45] veth1_macvtap: left promiscuous mode [ 78.606482][ T45] veth0_macvtap: left promiscuous mode [ 78.606588][ T45] veth1_vlan: left promiscuous mode [ 78.606687][ T45] veth0_vlan: left promiscuous mode [ 78.723652][ T7115] loop3: detected capacity change from 0 to 2048 [ 78.729146][ T7115] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 78.751101][ T7116] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.645613][ T7124] netlink: 'syz.4.123': attribute type 11 has an invalid length. [ 79.645683][ T7124] netlink: 224 bytes leftover after parsing attributes in process `syz.4.123'. [ 80.801322][ T7131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 81.191772][ T7133] loop0: detected capacity change from 0 to 65536 [ 81.198390][ T7133] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 81.224419][ T7133] XFS (loop0): Ending clean mount [ 81.275058][ T6492] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 81.675841][ T45] team0 (unregistering): Port device team_slave_1 removed [ 81.835764][ T45] team0 (unregistering): Port device team_slave_0 removed [ 84.110592][ T7154] bridge0: entered promiscuous mode [ 84.112551][ T7154] macvlan2: entered promiscuous mode [ 84.135244][ T7154] macvlan3: entered promiscuous mode [ 84.204786][ T7154] Zero length message leads to an empty skb [ 84.377589][ T7159] loop4: detected capacity change from 0 to 4096 [ 84.380681][ T7159] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 84.395512][ T6894] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.410999][ T6894] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.418473][ T7165] loop1: detected capacity change from 0 to 128 [ 84.427424][ T6894] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.442110][ T6894] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.475735][ T7159] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 84.476108][ T7159] ntfs3(loop4): Failed to load $Extend (-22). [ 84.476155][ T7159] ntfs3(loop4): Failed to initialize $Extend. [ 84.531298][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 84.765600][ T6894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.772787][ T7177] loop4: detected capacity change from 0 to 512 [ 84.792154][ T7167] loop0: detected capacity change from 0 to 32768 [ 84.804323][ T6894] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.816517][ T7180] loop1: detected capacity change from 0 to 64 [ 84.855020][ T823] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.855116][ T823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.859657][ T7177] EXT4-fs (loop4): 1 orphan inode deleted [ 84.864743][ T823] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.864815][ T823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.869603][ T7177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.875135][ T44] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 84.875333][ T44] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 84.880395][ T7167] JBD2: Ignoring recovery information on journal [ 84.959646][ T7167] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 85.100051][ T6501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.214401][ T6894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.268356][ T6492] ocfs2: Unmounting device (7,0) on (node local) [ 85.291697][ T7201] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.661964][ T7216] netlink: 'syz.4.144': attribute type 11 has an invalid length. [ 85.662042][ T7216] netlink: 224 bytes leftover after parsing attributes in process `syz.4.144'. [ 86.430745][ T7218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.534395][ T7218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.891471][ T6894] veth0_vlan: entered promiscuous mode [ 86.932544][ T6894] veth1_vlan: entered promiscuous mode [ 87.053382][ T6894] veth0_macvtap: entered promiscuous mode [ 87.069976][ T6894] veth1_macvtap: entered promiscuous mode [ 87.080869][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.100424][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.100484][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.100507][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.100529][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.100549][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.100624][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.100647][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.103225][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.118778][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.118815][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.118836][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.118857][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.118876][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.118896][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.118916][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.118946][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.119561][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.141142][ T6894] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.141188][ T6894] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.141218][ T6894] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.141248][ T6894] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.329402][ T7234] loop1: detected capacity change from 0 to 32768 [ 87.351758][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.351815][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.387349][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.387410][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.516133][ T7234] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 87.516133][ T7234] allowing incompatible features above 0.0: (unknown version) [ 87.520503][ T7261] loop3: detected capacity change from 0 to 128 [ 87.524483][ T7234] bcachefs (loop1): initializing new filesystem [ 87.526515][ T7261] EXT4-fs: Ignoring removed nobh option [ 87.529553][ T7234] bcachefs (loop1): going read-write [ 87.614667][ T7249] loop0: detected capacity change from 0 to 32768 [ 87.619061][ T7261] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.780185][ T7234] bcachefs (loop1): marking superblocks [ 87.805359][ T7249] JBD2: Ignoring recovery information on journal [ 88.523509][ T7249] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 88.545679][ T7249] (syz.0.150,7249,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 88.545813][ T7249] (syz.0.150,7249,1):ocfs2_trim_mainbm:7629 ERROR: status = -12 [ 88.550705][ T6493] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.649182][ T7234] bcachefs (loop1): initializing freespace [ 88.667676][ T7234] bcachefs (loop1): done initializing freespace [ 88.682367][ T7234] bcachefs (loop1): reading snapshots table [ 88.682452][ T7234] bcachefs (loop1): reading snapshots done [ 88.686899][ T6492] ocfs2: Unmounting device (7,0) on (node local) [ 88.716746][ T7234] bcachefs (loop1): done starting filesystem [ 88.853801][ T6498] bcachefs (loop1): shutting down [ 88.853945][ T6498] bcachefs (loop1): going read-only [ 88.854125][ T6498] bcachefs (loop1): finished waiting for writes to stop [ 88.894296][ T6498] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 88.908895][ T7293] bridge0: port 3(syz_tun) entered blocking state [ 88.908981][ T7293] bridge0: port 3(syz_tun) entered disabled state [ 88.909783][ T7293] syz_tun: entered allmulticast mode [ 88.914732][ T7293] syz_tun: entered promiscuous mode [ 88.916197][ T7293] bridge0: port 3(syz_tun) entered blocking state [ 88.916266][ T7293] bridge0: port 3(syz_tun) entered forwarding state [ 88.919812][ T6498] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 88.935454][ T6498] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 89.098684][ T6498] bcachefs (loop1): marking filesystem clean [ 89.303555][ T7313] netlink: 'syz.0.155': attribute type 11 has an invalid length. [ 89.303620][ T7313] netlink: 224 bytes leftover after parsing attributes in process `syz.0.155'. [ 90.188756][ T6498] bcachefs (loop1): shutdown complete [ 90.627616][ T7307] loop4: detected capacity change from 0 to 32768 [ 90.657782][ T7307] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.840210][ T7307] XFS (loop4): Ending clean mount [ 90.845066][ T7307] XFS (loop4): Quotacheck needed: Please wait. [ 91.534695][ T7307] XFS (loop4): Quotacheck: Done. [ 91.623819][ T6501] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 91.735910][ T7359] loop0: detected capacity change from 0 to 128 [ 92.915813][ T7366] loop5: detected capacity change from 0 to 32768 [ 92.935048][ T7366] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.171 (7366) [ 92.980371][ T7366] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.980479][ T7366] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 92.980531][ T7366] BTRFS info (device loop5): using free-space-tree [ 93.103154][ T7408] loop0: detected capacity change from 0 to 256 [ 93.103841][ T7408] exfat: Deprecated parameter 'namecase' [ 93.103935][ T7408] exfat: Deprecated parameter 'utf8' [ 93.120210][ T7408] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 93.198485][ T6894] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.557430][ T7419] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.568862][ T7406] loop4: detected capacity change from 0 to 32768 [ 93.595252][ T7406] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.772881][ T7406] XFS (loop4): Ending clean mount [ 93.774287][ T7406] XFS (loop4): Quotacheck needed: Please wait. [ 93.789533][ T7406] XFS (loop4): Quotacheck: Done. [ 94.561408][ T7412] loop5: detected capacity change from 0 to 32768 [ 94.675439][ T6501] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 94.686846][ T7412] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.704774][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.789756][ T7412] XFS (loop5): Ending clean mount [ 94.798936][ T7412] XFS (loop5): Quotacheck needed: Please wait. [ 94.837978][ T7412] XFS (loop5): Quotacheck: Done. [ 94.853246][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.923352][ T6494] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.926759][ T6494] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.929621][ T6494] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.937126][ T6494] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.940044][ T6494] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.769272][ T6894] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 95.775352][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.952922][ T7479] xt_hashlimit: size too large, truncated to 1048576 [ 96.091705][ T31] audit: type=1326 audit(95.810:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7483 comm="syz.5.189" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef5b728 code=0x0 [ 96.114346][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.170458][ T7477] loop4: detected capacity change from 0 to 32768 [ 96.981697][ T6494] Bluetooth: hci0: command tx timeout [ 97.400563][ T7462] chnl_net:caif_netlink_parms(): no params data found [ 97.551810][ T7517] loop1: detected capacity change from 0 to 1024 [ 97.597849][ T7477] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,compression=lz4,journal_flush_disabled,recovery_pass_last=trans_mark_dev_sbs,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 97.597849][ T7477] allowing incompatible features above 0.0: (unknown version) [ 97.598479][ T7477] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 97.613514][ T7477] bcachefs (loop4): Version upgrade from 1.20: directory_size to 1.7: mi_btree_bitmap incomplete [ 97.613514][ T7477] Doing compatible version upgrade from 1.20: directory_size to 1.25: extent_flags [ 97.613514][ T7477] running recovery passes: check_extents_to_backpointers [ 97.659803][ T7477] bcachefs (loop4): dropping and reconstructing all alloc info [ 97.674101][ T7477] bcachefs (loop4): bcachefs (loop4): error validating btree node on loop4 at btree extents level 0/0 [ 97.677687][ T7477] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 97.703041][ T7477] node offset 8/16 bset u64s 49: bset at wrong sector offset, shutting down [ 97.708329][ T7477] inconsistency detected - emergency read only at journal seq 10 [ 97.718299][ T7477] bcachefs (loop4): flagging btree extents lost data [ 97.721097][ T7477] bcachefs (loop4): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 97.729791][ T7477] bcachefs (loop4): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 97.733645][ T7477] bcachefs (loop4): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 97.744723][ T7477] bcachefs (loop4): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 98.469322][ T7477] bcachefs (loop4): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: [ 98.469384][ T7477] mode=100755 [ 98.469413][ T7477] flags=(15300000) [ 98.469423][ T7477] journal_seq=4 [ 98.469432][ T7477] hash_seed=d483206f1ed95abf [ 98.469442][ T7477] hash_type=siphash [ 98.469451][ T7477] bi_size=100 [ 98.469460][ T7477] bi_sectors=8 [ 98.469469][ T7477] bi_version=1126999418470400 [ 98.469479][ T7477] bi_atime=0 [ 98.469488][ T7477] bi_ctime=0 [ 98.469497][ T7477] bi_mtime=0 [ 98.469506][ T7477] bi_otime=2780562352 [ 98.469515][ T7477] bi_uid=2780562352 [ 98.469525][ T7477] bi_gid=0 [ 98.469534][ T7477] bi_nlink=2780562352 [ 98.469543][ T7477] bi_generation=0 [ 98.469552][ T7477] bi_dev=16 [ 98.469561][ T7477] bi_data_checksum=18 [ 98.469570][ T7477] bi_compression=0 [ 98.469579][ T7477] bi_project=0 [ 98.469588][ T7477] bi_background_compression=0 [ 98.469598][ T7477] bi_data_replicas=0 [ 98.469607][ T7477] bi_promote_target=0 [ 98.469617][ T7477] bi_foreground_target=0 [ 98.469626][ T7477] bi_background_target=0 [ 98.469635][ T7477] bi_erasure_code=0 [ 98.469644][ T7477] bi_fields_set=0 [ 98.469654][ T7477] bi_dir=0 [ 98.469662][ T7477] bi_dir_offset=0 [ 98.469672][ T7477] bi_subvol=0 [ 98.469681][ T7477] bi_parent_subvol=0 [ 98.469690][ T7477] bi_nocow=0 [ 98.469699][ T7477] bi_depth=0 [ 98.469708][ T7477] bi_inodes_32bit=0 [ 98.469717][ T7477] bi_casefold=0 [ 98.469727][ T7477] invalid data checksum type (18 >= 5, deleting [ 98.548226][ T7477] bcachefs (loop4): scan_for_btree_nodes... [ 98.598865][ T7477] bcachefs (loop4): btree node scan found 3 nodes after overwrites [ 98.598938][ T7477] done [ 98.598982][ T7477] bcachefs (loop4): check_topology... [ 98.617033][ T7517] hfsplus: catalog searching failed [ 98.629057][ T45] bridge_slave_1: left allmulticast mode [ 98.629110][ T45] bridge_slave_1: left promiscuous mode [ 98.629236][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.631057][ T7477] bcachefs (loop4): btree root extents unreadable, must recover from scan [ 98.631262][ T7477] bcachefs (loop4): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 98.631393][ T7477] bcachefs (loop4): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 98.640774][ T7477] bcachefs (loop4): Topology repair: unreadable btree node at [ 98.640813][ T7477] btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 98.666918][ T7517] hfsplus: catalog searching failed [ 98.681159][ T7477] bcachefs (loop4): empty interior btree node at btree=extents level=1 [ 98.681192][ T7477] u64s 5 type btree_ptr SPOS_MAX len 0 ver 0, fixing [ 98.681275][ T7477] bcachefs (loop4): empty btree root extents [ 98.681389][ T7477] done [ 98.681419][ T7477] bcachefs (loop4): accounting_read... [ 98.709584][ T7539] loop3: detected capacity change from 0 to 256 [ 98.723627][ T45] bridge_slave_0: left allmulticast mode [ 98.723666][ T45] bridge_slave_0: left promiscuous mode [ 98.723800][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.732582][ T7477] done [ 98.732650][ T7477] bcachefs (loop4): alloc_read... done [ 98.732808][ T7477] bcachefs (loop4): snapshots_read... done [ 98.733098][ T7477] bcachefs (loop4): check_allocations... [ 98.740758][ T7477] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap [ 98.742179][ T7477] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 99.102331][ T6494] Bluetooth: hci0: command tx timeout [ 99.373710][ T44] hfsplus: b-tree write err: -5, ino 4 [ 99.442837][ T7477] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap [ 99.442898][ T7477] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 99.454299][ T7477] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap [ 99.454349][ T7477] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 99.538462][ T7477] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap [ 99.538510][ T7477] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 99.548871][ T7477] done [ 99.576549][ T7477] bcachefs (loop4): going read-write [ 99.587183][ T7477] bcachefs (loop4): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 99.587326][ T7477] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 99.587400][ T7477] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 99.587434][ T7477] bcachefs (loop4): unclean shutdown complete, journal seq 10 [ 99.613732][ T7477] bcachefs (loop4): bch2_fs_start(): error starting filesystem erofs_norecovery [ 99.613805][ T7477] bcachefs (loop4): shutting down [ 99.661305][ T7556] loop1: detected capacity change from 0 to 256 [ 99.714106][ T7477] bcachefs (loop4): shutdown complete [ 100.787945][ T7477] bcachefs: bch2_fs_get_tree() error: erofs_norecovery [ 100.872863][ T7565] netlink: 36 bytes leftover after parsing attributes in process `syz.4.207'. [ 101.094766][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.133997][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.143205][ T6494] Bluetooth: hci0: command tx timeout [ 101.186225][ T45] bond0 (unregistering): Released all slaves [ 101.245156][ T7462] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.245238][ T7462] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.245412][ T7462] bridge_slave_0: entered allmulticast mode [ 101.256047][ T7462] bridge_slave_0: entered promiscuous mode [ 101.257358][ T7462] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.272839][ T7462] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.273054][ T7462] bridge_slave_1: entered allmulticast mode [ 101.273961][ T7462] bridge_slave_1: entered promiscuous mode [ 101.496743][ T7577] loop5: detected capacity change from 0 to 1024 [ 101.497408][ T7577] EXT4-fs: Ignoring removed orlov option [ 101.497837][ T7577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.641781][ T7577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.416998][ T7572] loop4: detected capacity change from 0 to 32768 [ 102.427396][ T7572] XFS: ikeep mount option is deprecated. [ 102.429685][ T7572] XFS: ikeep mount option is deprecated. [ 102.506689][ T7572] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.546653][ T7462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.549421][ T7462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.584857][ T6894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.714027][ T7572] XFS (loop4): Ending clean mount [ 102.805455][ T6501] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.814199][ T7603] netlink: 'syz.1.219': attribute type 3 has an invalid length. [ 102.818423][ T7462] team0: Port device team_slave_0 added [ 102.838839][ T7462] team0: Port device team_slave_1 added [ 103.083595][ T7462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.083653][ T7462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.083697][ T7462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.084858][ T7462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.084883][ T7462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.084910][ T7462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.111263][ T45] hsr_slave_0: left promiscuous mode [ 103.117110][ T45] hsr_slave_1: left promiscuous mode [ 103.117660][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.117724][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.119199][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.119238][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.143096][ T45] veth1_macvtap: left promiscuous mode [ 103.143200][ T45] veth0_macvtap: left promiscuous mode [ 103.143309][ T45] veth1_vlan: left promiscuous mode [ 103.143388][ T45] veth0_vlan: left promiscuous mode [ 103.222016][ T6494] Bluetooth: hci0: command tx timeout [ 103.387155][ T7623] loop4: detected capacity change from 0 to 40427 [ 103.403584][ T7623] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3fffff [ 103.403716][ T7623] F2FS-fs (loop4): Image doesn't support compression [ 103.407621][ T7623] F2FS-fs (loop4): invalid crc value [ 103.423124][ T7640] netlink: 36 bytes leftover after parsing attributes in process `syz.3.223'. [ 103.464794][ T7623] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 103.487405][ T7623] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_mknod+0x11c/0x4b4 [ 103.511491][ T6501] syz-executor: attempt to access beyond end of device [ 103.511491][ T6501] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.521872][ T6501] CPU: 1 UID: 0 PID: 6501 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT [ 103.521902][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.521911][ T6501] Call trace: [ 103.521915][ T6501] show_stack+0x2c/0x3c (C) [ 103.521932][ T6501] __dump_stack+0x30/0x40 [ 103.521944][ T6501] dump_stack_lvl+0xd8/0x12c [ 103.521955][ T6501] dump_stack+0x1c/0x28 [ 103.521965][ T6501] f2fs_handle_critical_error+0x34c/0x4b8 [ 103.521979][ T6501] f2fs_stop_checkpoint+0x58/0x6c [ 103.521991][ T6501] f2fs_write_end_io+0x794/0xadc [ 103.522005][ T6501] bio_endio+0x81c/0x858 [ 103.522018][ T6501] submit_bio_noacct+0x158/0x176c [ 103.522029][ T6501] submit_bio+0x354/0x4d4 [ 103.522039][ T6501] f2fs_submit_write_bio+0x13c/0x324 [ 103.522053][ T6501] __submit_merged_bio+0x254/0x704 [ 103.522065][ T6501] __submit_merged_write_cond+0x23c/0x4ac [ 103.522078][ T6501] f2fs_write_data_pages+0x1e9c/0x27ac [ 103.522092][ T6501] do_writepages+0x2c0/0x6a8 [ 103.522107][ T6501] filemap_fdatawrite+0x144/0x1e8 [ 103.522121][ T6501] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 103.522133][ T6501] f2fs_write_checkpoint+0x684/0x1694 [ 103.522145][ T6501] kill_f2fs_super+0x21c/0x584 [ 103.522159][ T6501] deactivate_locked_super+0xc4/0x12c [ 103.522171][ T6501] deactivate_super+0xe0/0x100 [ 103.522182][ T6501] cleanup_mnt+0x31c/0x3ac [ 103.522195][ T6501] __cleanup_mnt+0x20/0x30 [ 103.522206][ T6501] task_work_run+0x1dc/0x260 [ 103.522218][ T6501] do_notify_resume+0x16c/0x1ec [ 103.522231][ T6501] el0_svc+0xb0/0x150 [ 103.522244][ T6501] el0t_64_sync_handler+0x78/0x108 [ 103.522257][ T6501] el0t_64_sync+0x198/0x19c [ 103.522468][ T6501] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 105.096673][ T45] team0 (unregistering): Port device team_slave_1 removed [ 105.285172][ T45] team0 (unregistering): Port device team_slave_0 removed [ 107.668245][ T7665] netlink: 'syz.1.228': attribute type 1 has an invalid length. [ 107.735492][ T7462] hsr_slave_0: entered promiscuous mode [ 107.738454][ T7462] hsr_slave_1: entered promiscuous mode [ 107.762671][ T7669] loop3: detected capacity change from 0 to 64 [ 107.897849][ T7679] netlink: 596 bytes leftover after parsing attributes in process `syz.1.231'. [ 107.903702][ T7673] netlink: 'syz.1.231': attribute type 29 has an invalid length. [ 107.905031][ T7676] netlink: 'syz.1.231': attribute type 29 has an invalid length. [ 107.926539][ T7678] netlink: 'syz.3.232': attribute type 29 has an invalid length. [ 107.955482][ T7678] netlink: 'syz.3.232': attribute type 29 has an invalid length. [ 107.956639][ T7678] netlink: 500 bytes leftover after parsing attributes in process `syz.3.232'. [ 108.038695][ T7685] loop3: detected capacity change from 0 to 2048 [ 108.057067][ T7685] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 108.069632][ T7688] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.104576][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.108126][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.121267][ T7685] Remounting filesystem read-only [ 108.124537][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.127579][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.136958][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.141706][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.144755][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.147568][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.150584][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.152367][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.153940][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.153989][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.154259][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.154310][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.154590][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.154641][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.154834][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.154872][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.155047][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.155083][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.155262][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.155309][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.157677][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.157721][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.160337][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.160397][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.161445][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.161490][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.169728][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.169775][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.169952][ T7685] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 108.169988][ T7685] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.309991][ T7698] netlink: 360 bytes leftover after parsing attributes in process `syz.1.239'. [ 108.601910][ T7713] loop1: detected capacity change from 0 to 512 [ 108.631266][ T7713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.643459][ T7462] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 108.683663][ T7713] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.242: corrupted xattr block 33: invalid ea_ino [ 108.690655][ T7713] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.242: corrupted xattr block 33: invalid ea_ino [ 108.696115][ T7713] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.242: corrupted xattr block 33: invalid ea_ino [ 108.707075][ T7713] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.242: corrupted xattr block 33: invalid ea_ino [ 108.755536][ T7462] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 108.797774][ T7462] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 108.813128][ T7713] EXT4-fs error (device loop1): ext4_get_inode_usage:884: inode #15: comm syz.1.242: corrupted xattr block 33: invalid ea_ino [ 108.829253][ T7462] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 108.883198][ T6498] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.064059][ T7462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.097721][ T7462] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.106131][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.106220][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.114588][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.114676][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.179920][ T7462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.429030][ T7462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.676589][ T7715] loop4: detected capacity change from 0 to 65536 [ 109.755353][ T7462] veth0_vlan: entered promiscuous mode [ 109.761716][ T7715] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 109.766038][ T7462] veth1_vlan: entered promiscuous mode [ 109.785347][ T7462] veth0_macvtap: entered promiscuous mode [ 109.791116][ T7462] veth1_macvtap: entered promiscuous mode [ 109.799953][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.805216][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.808085][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.811191][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.815712][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.816975][ T7715] XFS (loop4): Ending clean mount [ 109.818338][ T7715] XFS (loop4): Quotacheck needed: Please wait. [ 109.821871][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.824651][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.827527][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.831100][ T7462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.837683][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.840742][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.843725][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.846629][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.849355][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.852437][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.855441][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.858466][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.862902][ T7462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.875988][ T7462] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.878472][ T7462] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.881028][ T7462] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.891652][ T7462] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.907674][ T7715] XFS (loop4): Quotacheck: Done. [ 110.018495][ T7729] loop1: detected capacity change from 0 to 65536 [ 110.033820][ T2623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.037354][ T2623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.055242][ T6501] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 110.076545][ T7729] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 110.165190][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.167691][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.179534][ T7729] XFS (loop1): Ending clean mount [ 110.190255][ T7729] XFS (loop1): Quotacheck needed: Please wait. [ 110.210508][ T7771] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 110.250629][ T7729] XFS (loop1): Quotacheck: Done. [ 110.437040][ T6498] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 110.540265][ T7781] loop5: detected capacity change from 0 to 1024 [ 110.643444][ T823] hfsplus: b-tree write err: -5, ino 4 [ 110.663395][ T7787] loop4: detected capacity change from 0 to 1024 [ 111.304702][ T7784] loop6: detected capacity change from 0 to 32768 [ 111.377698][ T7791] loop3: detected capacity change from 0 to 32768 [ 111.409265][ T7798] loop4: detected capacity change from 0 to 32768 [ 111.439870][ T7791] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.252 (7791) [ 111.469033][ T7791] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 111.469142][ T7791] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 111.469188][ T7791] BTRFS info (device loop3): using free-space-tree [ 111.508035][ T7795] loop5: detected capacity change from 0 to 32768 [ 111.541108][ T7795] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.253 (7795) [ 111.569456][ T7784] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 111.569456][ T7784] allowing incompatible features above 0.0: (unknown version) [ 111.569564][ T7784] bcachefs (loop6): initializing new filesystem [ 111.570194][ T7784] bcachefs (loop6): going read-write [ 111.578268][ T7795] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.578350][ T7795] BTRFS info (device loop5): using crc32c (crc32c-arm64) checksum algorithm [ 111.578387][ T7795] BTRFS info (device loop5): disk space caching is enabled [ 111.578418][ T7795] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 111.633950][ T7798] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 111.635545][ T7802] loop1: detected capacity change from 0 to 32768 [ 111.639603][ T7798] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 111.662199][ T7784] bcachefs (loop6): marking superblocks [ 111.666321][ T7784] bcachefs (loop6): initializing freespace [ 111.667159][ T7784] bcachefs (loop6): done initializing freespace [ 111.668334][ T7784] bcachefs (loop6): reading snapshots table [ 111.668414][ T7784] bcachefs (loop6): reading snapshots done [ 111.724206][ T7802] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.738470][ T7784] bcachefs (loop6): done starting filesystem [ 111.747493][ T7795] BTRFS info (device loop5): rebuilding free space tree [ 111.801072][ T6493] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 111.851913][ T7795] BTRFS info (device loop5): disabling free space tree [ 111.852021][ T7795] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.852144][ T7795] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.937655][ T7798] bcachefs: bch2_fs_get_tree() error: EINVAL [ 111.956016][ T7802] XFS (loop1): Ending clean mount [ 111.963105][ T7802] XFS (loop1): Quotacheck needed: Please wait. [ 112.075425][ T7802] XFS (loop1): Quotacheck: Done. [ 112.086328][ T7462] bcachefs (loop6): shutting down [ 112.086400][ T7462] bcachefs (loop6): going read-only [ 112.086435][ T7462] bcachefs (loop6): finished waiting for writes to stop [ 112.216441][ T7462] bcachefs (loop6): flushing journal and stopping allocators, journal seq 5 [ 112.285599][ T6894] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.296876][ T7885] warning: `syz.3.255' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.328372][ T7462] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 5 [ 112.341524][ T6498] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.357767][ T7462] bcachefs (loop6): clean shutdown complete, journal seq 6 [ 112.422610][ T7462] bcachefs (loop6): marking filesystem clean [ 112.558011][ T7878] loop4: detected capacity change from 0 to 32768 [ 112.569358][ T7878] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.256 (7878) [ 112.575749][ T7462] bcachefs (loop6): shutdown complete [ 112.586538][ T7878] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.586646][ T7878] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 112.586701][ T7878] BTRFS info (device loop4): disk space caching is enabled [ 112.586732][ T7878] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 112.699588][ T7878] BTRFS info (device loop4): rebuilding free space tree [ 112.735629][ T7878] BTRFS info (device loop4): disabling free space tree [ 112.735711][ T7878] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.735761][ T7878] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.461460][ T6501] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.687267][ T7933] loop5: detected capacity change from 0 to 32768 [ 114.730924][ T7931] loop1: detected capacity change from 0 to 32768 [ 114.923948][ T7969] loop4: detected capacity change from 0 to 4096 [ 114.935912][ T7969] NILFS (loop4): invalid segment: Checksum error in segment payload [ 114.936101][ T7969] NILFS (loop4): trying rollback from an earlier position [ 114.968801][ T7969] NILFS (loop4): recovery complete [ 114.972538][ T7978] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.989760][ T7931] Soft offlining pfn 0x139276 at process virtual address 0x20276000 [ 115.389113][ T7933] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 115.389113][ T7933] allowing incompatible features above 0.0: (unknown version) [ 115.390195][ T7933] bcachefs (loop5): invalid bkey in superblock btree=alloc level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key 72057594037927936:0:0 durability: 0 (invalid extent entry 0000000000000000) [ 115.390224][ T7933] invalid extent entry type (got 7, max 7), deleting [ 115.390383][ T7933] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 115.390525][ T7933] bcachefs (loop5): Version upgrade required: [ 115.390525][ T7933] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 115.390525][ T7933] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 115.390525][ T7933] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 115.390713][ T7933] bcachefs (loop5): dropping and reconstructing all alloc info [ 115.413899][ T7933] bcachefs (loop5): accounting_read... done [ 115.447036][ T7933] bcachefs (loop5): alloc_read... done [ 115.447092][ T7933] bcachefs (loop5): snapshots_read... done [ 115.447187][ T7933] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 115.447396][ T7933] bcachefs (loop5): done starting filesystem [ 115.567197][ T6894] bcachefs (loop5): shutting down [ 115.806757][ T6894] bcachefs (loop5): shutdown complete [ 116.675445][ T8018] loop1: detected capacity change from 0 to 512 [ 116.723557][ T8018] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 116.730555][ T8018] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.281: invalid indirect mapped block 2683928664 (level 1) [ 116.762639][ T8018] EXT4-fs (loop1): 1 truncate cleaned up [ 116.765219][ T8018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.604210][ T8018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.731138][ T8036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.285'. [ 117.916092][ T8053] netlink: 6 bytes leftover after parsing attributes in process `syz.1.286'. [ 118.087953][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 118.350197][ T8046] loop6: detected capacity change from 0 to 40427 [ 118.358780][ T8046] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3fffff [ 118.387333][ T8046] F2FS-fs (loop6): invalid crc value [ 118.484381][ T8046] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 119.276117][ T7462] syz-executor: attempt to access beyond end of device [ 119.276117][ T7462] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 119.280497][ T7462] CPU: 1 UID: 0 PID: 7462 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT [ 119.280520][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.280528][ T7462] Call trace: [ 119.280533][ T7462] show_stack+0x2c/0x3c (C) [ 119.280549][ T7462] __dump_stack+0x30/0x40 [ 119.280561][ T7462] dump_stack_lvl+0xd8/0x12c [ 119.280572][ T7462] dump_stack+0x1c/0x28 [ 119.280582][ T7462] f2fs_handle_critical_error+0x34c/0x4b8 [ 119.280597][ T7462] f2fs_stop_checkpoint+0x58/0x6c [ 119.280608][ T7462] f2fs_write_end_io+0x794/0xadc [ 119.280622][ T7462] bio_endio+0x81c/0x858 [ 119.280635][ T7462] submit_bio_noacct+0x158/0x176c [ 119.280646][ T7462] submit_bio+0x354/0x4d4 [ 119.280656][ T7462] f2fs_submit_write_bio+0x13c/0x324 [ 119.280670][ T7462] __submit_merged_bio+0x254/0x704 [ 119.280682][ T7462] __submit_merged_write_cond+0x23c/0x4ac [ 119.280695][ T7462] f2fs_write_data_pages+0x1e9c/0x27ac [ 119.280709][ T7462] do_writepages+0x2c0/0x6a8 [ 119.280723][ T7462] filemap_fdatawrite+0x144/0x1e8 [ 119.280738][ T7462] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 119.280750][ T7462] f2fs_write_checkpoint+0x684/0x1694 [ 119.280762][ T7462] kill_f2fs_super+0x21c/0x584 [ 119.280775][ T7462] deactivate_locked_super+0xc4/0x12c [ 119.280787][ T7462] deactivate_super+0xe0/0x100 [ 119.280798][ T7462] cleanup_mnt+0x31c/0x3ac [ 119.280811][ T7462] __cleanup_mnt+0x20/0x30 [ 119.280822][ T7462] task_work_run+0x1dc/0x260 [ 119.280835][ T7462] do_notify_resume+0x16c/0x1ec [ 119.280848][ T7462] el0_svc+0xb0/0x150 [ 119.280860][ T7462] el0t_64_sync_handler+0x78/0x108 [ 119.280872][ T7462] el0t_64_sync+0x198/0x19c [ 119.310310][ T7462] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 119.350613][ T8061] loop1: detected capacity change from 0 to 32768 [ 119.406586][ T8061] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 119.507807][ T8061] XFS (loop1): Ending clean mount [ 119.626005][ T6498] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.877478][ T8123] syzkaller1: entered promiscuous mode [ 120.879553][ T8123] syzkaller1: entered allmulticast mode [ 121.006683][ T8095] loop3: detected capacity change from 0 to 32768 [ 121.105384][ T8130] loop5: detected capacity change from 0 to 2048 [ 121.152525][ T8130] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.247683][ T8095] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io [ 121.247683][ T8095] allowing incompatible features above 0.0: (unknown version) [ 121.257265][ T8095] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 121.259708][ T8095] bcachefs (loop3): Version upgrade required: [ 121.259708][ T8095] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 121.259708][ T8095] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 121.259708][ T8095] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 121.281007][ T8095] bcachefs (loop3): dropping and reconstructing all alloc info [ 121.340056][ T8095] bcachefs (loop3): accounting_read... done [ 121.471942][ T8095] bcachefs (loop3): alloc_read... done [ 121.472022][ T8095] bcachefs (loop3): snapshots_read... done [ 121.472304][ T8095] bcachefs (loop3): done starting filesystem [ 122.328506][ T6493] bcachefs (loop3): shutting down [ 122.459145][ T6493] bcachefs (loop3): shutdown complete [ 122.749865][ T8155] loop1: detected capacity change from 0 to 32768 [ 123.074622][ T8176] loop5: detected capacity change from 0 to 32768 [ 123.086747][ T8176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.308 (8176) [ 123.126998][ T8176] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.127104][ T8176] BTRFS info (device loop5): using crc32c (crc32c-arm64) checksum algorithm [ 123.127139][ T8176] BTRFS info (device loop5): disk space caching is enabled [ 123.127163][ T8176] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 123.153623][ T8179] loop4: detected capacity change from 0 to 32768 [ 123.215066][ T8176] BTRFS info (device loop5): rebuilding free space tree [ 123.252990][ T8176] BTRFS info (device loop5): disabling free space tree [ 123.253073][ T8176] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.253101][ T8176] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.344133][ T8155] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 123.344133][ T8155] allowing incompatible features above 0.0: (unknown version) [ 123.344369][ T8155] bcachefs (loop1): initializing new filesystem [ 123.345037][ T8155] bcachefs (loop1): going read-write [ 123.412735][ T8155] bcachefs (loop1): marking superblocks [ 123.413152][ T8224] batadv_slave_1: entered promiscuous mode [ 123.417690][ T8155] bcachefs (loop1): initializing freespace [ 123.418519][ T8155] bcachefs (loop1): done initializing freespace [ 123.419472][ T8155] bcachefs (loop1): reading snapshots table [ 123.419541][ T8155] bcachefs (loop1): reading snapshots done [ 123.425687][ T8220] batadv_slave_1: left promiscuous mode [ 123.448988][ T8155] bcachefs (loop1): done starting filesystem [ 123.706469][ T6894] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.808874][ T6498] bcachefs (loop1): shutting down [ 123.813794][ T6498] bcachefs (loop1): going read-only [ 123.815392][ T6498] bcachefs (loop1): finished waiting for writes to stop [ 123.848583][ T6498] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 123.971015][ T6498] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 123.976892][ T6498] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 124.000919][ T8247] loop5: detected capacity change from 0 to 512 [ 124.012781][ T6498] bcachefs (loop1): marking filesystem clean [ 124.109967][ T8247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.143897][ T6498] bcachefs (loop1): shutdown complete [ 124.209677][ T8256] loop6: detected capacity change from 0 to 1024 [ 124.210341][ T8256] EXT4-fs: Ignoring removed orlov option [ 124.210419][ T8256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.289186][ T8256] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.346699][ T8268] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 124.378746][ T8268] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 124.378891][ T8268] EXT4-fs (loop5): This should not happen!! Data will be lost [ 124.378891][ T8268] [ 124.378918][ T8268] EXT4-fs (loop5): Total free blocks count 0 [ 124.378940][ T8268] EXT4-fs (loop5): Free/Dirty block details [ 124.378969][ T8268] EXT4-fs (loop5): free_blocks=65280 [ 124.378998][ T8268] EXT4-fs (loop5): dirty_blocks=31 [ 124.379020][ T8268] EXT4-fs (loop5): Block reservation details [ 124.379041][ T8268] EXT4-fs (loop5): i_reserved_data_blocks=31 [ 124.440974][ T7462] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.492849][ T6894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.514405][ T8238] loop3: detected capacity change from 0 to 32768 [ 124.517854][ T8238] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.306 (8238) [ 124.568270][ T8272] loop6: detected capacity change from 0 to 512 [ 124.585668][ T8238] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.585779][ T8238] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 124.585834][ T8238] BTRFS info (device loop3): disk space caching is enabled [ 124.585865][ T8238] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 124.606613][ T8278] loop5: detected capacity change from 0 to 1024 [ 124.624062][ T8272] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.321: iget: bad extended attribute block 1 [ 124.624960][ T8272] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.321: couldn't read orphan inode 15 (err -117) [ 124.630146][ T8272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.654811][ T8278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.655408][ T8272] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 124.703107][ T8238] BTRFS info (device loop3): rebuilding free space tree [ 124.748507][ T8238] BTRFS info (device loop3): disabling free space tree [ 124.748578][ T8238] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.748624][ T8238] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.809074][ T7462] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.955793][ T8278] evm: overlay not supported [ 125.285608][ T6894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.393593][ T8316] loop5: detected capacity change from 0 to 128 [ 125.425128][ T6493] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.431260][ T8316] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.596792][ T6894] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.650848][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.326'. [ 126.185013][ T2395] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.187317][ T2395] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.238991][ T8355] lo: entered allmulticast mode [ 127.250699][ T8355] lo: left allmulticast mode [ 127.258394][ T8324] loop3: detected capacity change from 0 to 32768 [ 127.961955][ T8324] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.325 (8324) [ 127.970491][ T8324] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.970591][ T8324] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 127.970635][ T8324] BTRFS info (device loop3): using free-space-tree [ 128.004562][ T8330] loop5: detected capacity change from 0 to 40427 [ 128.063374][ T8330] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3fffff [ 128.066584][ T8330] F2FS-fs (loop5): Image doesn't support compression [ 128.077049][ T8330] F2FS-fs (loop5): invalid crc value [ 128.476380][ T8330] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 128.994766][ T6493] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.420943][ T8387] loop6: detected capacity change from 0 to 32768 [ 129.437107][ T8408] netlink: 'syz.1.341': attribute type 12 has an invalid length. [ 129.437178][ T8408] netlink: 'syz.1.341': attribute type 29 has an invalid length. [ 129.441909][ T8408] netlink: 148 bytes leftover after parsing attributes in process `syz.1.341'. [ 129.444885][ T8408] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 129.450811][ T8408] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 130.106989][ T8377] loop4: detected capacity change from 0 to 32768 [ 130.141709][ T8387] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.335 (8387) [ 130.163716][ T8387] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 130.163816][ T8387] BTRFS info (device loop6): using crc32c (crc32c-arm64) checksum algorithm [ 130.163853][ T8387] BTRFS info (device loop6): disk space caching is enabled [ 130.163877][ T8387] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 130.209928][ T8377] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 130.333929][ T8387] BTRFS info (device loop6): rebuilding free space tree [ 130.368757][ T8387] BTRFS info (device loop6): disabling free space tree [ 130.368841][ T8387] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.368870][ T8387] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.340183][ T6501] (syz-executor,6501,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 131.356579][ T6501] ocfs2: Unmounting device (7,4) on (node local) [ 131.469714][ T561] Bluetooth: hci3: Frame reassembly failed (-84) [ 131.502886][ T8454] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 131.546278][ T8452] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.559082][ T8452] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 131.566995][ T7462] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 131.727396][ T8434] loop1: detected capacity change from 0 to 32768 [ 131.744364][ T8434] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.343 (8434) [ 131.933531][ T8434] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.937111][ T8434] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 131.939606][ T8434] BTRFS info (device loop1): disk space caching is enabled [ 131.946455][ T8434] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 132.196486][ T8434] BTRFS info (device loop1): rebuilding free space tree [ 132.215968][ T8434] BTRFS info (device loop1): disabling free space tree [ 132.216057][ T8434] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 132.216085][ T8434] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 132.567181][ T8501] netlink: 24 bytes leftover after parsing attributes in process `syz.5.351'. [ 132.567258][ T8501] netlink: 'syz.5.351': attribute type 1 has an invalid length. [ 132.581957][ T8501] netlink: 36 bytes leftover after parsing attributes in process `syz.5.351'. [ 132.748150][ T8503] netlink: 76 bytes leftover after parsing attributes in process `syz.6.352'. [ 132.772597][ T8507] loop5: detected capacity change from 0 to 1024 [ 132.773269][ T8507] EXT4-fs: Ignoring removed nobh option [ 132.773338][ T8507] EXT4-fs: Ignoring removed bh option [ 132.776995][ T6498] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.822804][ T8507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.913365][ T8507] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.354: Allocating blocks 385-513 which overlap fs metadata [ 132.934402][ T8507] EXT4-fs (loop5): pa 0000000004df5650: logic 16, phys. 129, len 24 [ 132.934579][ T8507] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 132.940629][ T8507] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 132.945126][ T8507] EXT4-fs (loop5): This should not happen!! Data will be lost [ 132.945126][ T8507] [ 132.945197][ T8507] EXT4-fs (loop5): Total free blocks count 0 [ 132.945221][ T8507] EXT4-fs (loop5): Free/Dirty block details [ 132.945249][ T8507] EXT4-fs (loop5): free_blocks=128 [ 132.945276][ T8507] EXT4-fs (loop5): dirty_blocks=0 [ 132.945308][ T8507] EXT4-fs (loop5): Block reservation details [ 132.945330][ T8507] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 133.038955][ T8515] loop3: detected capacity change from 0 to 8 [ 133.203620][ T8521] loop1: detected capacity change from 0 to 512 [ 133.204215][ T8521] EXT4-fs: Ignoring removed nobh option [ 133.210514][ T8521] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 133.214128][ T8521] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 133.214465][ T8521] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.358: casefold flag without casefold feature [ 133.215152][ T8521] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.358: couldn't read orphan inode 13 (err -117) [ 133.216280][ T8521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.253693][ T8521] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 133.293190][ T6498] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.423951][ T698] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 133.542736][ T6494] Bluetooth: hci3: command 0x1003 tx timeout [ 133.542961][ T6508] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 134.627402][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'. [ 134.692793][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 135.528065][ T8585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.372'. [ 135.532740][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.537941][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.544136][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.546488][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.548975][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.560485][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.560566][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.560599][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.560630][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.560662][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.560693][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.560724][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.560754][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.560785][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.560816][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.560846][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.560877][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.560908][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.560939][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.560970][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.561002][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.561032][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.561063][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.561093][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.561124][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.561155][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.561193][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.561223][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.561254][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.561296][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.561327][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.561369][ T6574] hid-generic FFFF:0000:09DF.0001: unknown main item tag 0x0 [ 135.562314][ T8578] tipc: Started in network mode [ 135.562368][ T8578] tipc: Node identity ac1414aa, cluster identity 4711 [ 135.588541][ T8578] tipc: Enabled bearer , priority 10 [ 135.592953][ T8587] netlink: 'syz.3.371': attribute type 29 has an invalid length. [ 135.622335][ T8587] netlink: 'syz.3.371': attribute type 29 has an invalid length. [ 135.623512][ T8587] netlink: 500 bytes leftover after parsing attributes in process `syz.3.371'. [ 135.641809][ T6574] hid-generic FFFF:0000:09DF.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.661701][ T6504] IPVS: starting estimator thread 0... [ 135.854681][ T6508] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 135.871798][ T8589] IPVS: using max 33 ests per chain, 79200 per kthread [ 136.622898][ T8601] team0: Device gtp0 is of different type [ 136.684104][ T2301] tipc: Node number set to 2886997162 [ 136.829945][ T8584] loop4: detected capacity change from 0 to 32768 [ 137.828109][ T8619] loop6: detected capacity change from 0 to 4096 [ 137.839323][ T8619] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 138.951219][ T8643] loop4: detected capacity change from 0 to 256 [ 140.034297][ T8662] loop3: detected capacity change from 0 to 128 [ 140.050149][ T8662] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.206180][ T6493] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.438708][ T8687] loop4: detected capacity change from 0 to 4096 [ 141.457532][ T8687] NILFS (loop4): invalid segment: Checksum error in segment payload [ 141.457613][ T8687] NILFS (loop4): trying rollback from an earlier position [ 141.478360][ T8695] netlink: 40 bytes leftover after parsing attributes in process `syz.5.395'. [ 141.482623][ T8695] netlink: 40 bytes leftover after parsing attributes in process `syz.5.395'. [ 141.483152][ T8695] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 141.528369][ T8687] NILFS (loop4): recovery complete [ 141.536134][ T8699] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.680664][ T8686] [ 141.681299][ T8686] ====================================================== [ 141.683200][ T8686] WARNING: possible circular locking dependency detected [ 141.685132][ T8686] 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 Not tainted [ 141.686890][ T8686] ------------------------------------------------------ [ 141.688855][ T8686] syz.4.393/8686 is trying to acquire lock: [ 141.690406][ T8686] ffff0000d722a610 (sb_internal#6){.+.+}-{0:0}, at: nilfs_page_mkwrite+0x8d0/0xca8 [ 141.692959][ T8686] [ 141.692959][ T8686] but task is already holding lock: [ 141.695027][ T8686] ffff0000d722a518 (sb_pagefaults#3){.+.+}-{0:0}, at: do_page_mkwrite+0x138/0x2b8 [ 141.697665][ T8686] [ 141.697665][ T8686] which lock already depends on the new lock. [ 141.697665][ T8686] [ 141.700439][ T8686] [ 141.700439][ T8686] the existing dependency chain (in reverse order) is: [ 141.702967][ T8686] [ 141.702967][ T8686] -> #6 (sb_pagefaults#3){.+.+}-{0:0}: [ 141.705135][ T8686] nilfs_page_mkwrite+0x1ec/0xca8 [ 141.706657][ T8686] do_page_mkwrite+0x138/0x2b8 [ 141.708170][ T8686] handle_mm_fault+0x1998/0x4cec [ 141.709695][ T8686] do_page_fault+0x598/0x1554 [ 141.711165][ T8686] do_translation_fault+0xc4/0x114 [ 141.712731][ T8686] do_mem_abort+0x70/0x194 [ 141.714096][ T8686] el0_da+0x64/0x160 [ 141.715277][ T8686] el0t_64_sync_handler+0x84/0x108 [ 141.716812][ T8686] el0t_64_sync+0x198/0x19c [ 141.718172][ T8686] [ 141.718172][ T8686] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 141.720299][ T8686] __might_fault+0xc4/0x124 [ 141.721705][ T8686] _copy_to_iter+0xe0/0x1394 [ 141.723051][ T8686] copy_page_to_iter+0x24c/0x348 [ 141.724659][ T8686] filemap_read+0x668/0xf4c [ 141.726061][ T8686] blkdev_read_iter+0x2b0/0x3dc [ 141.727549][ T8686] vfs_read+0x5fc/0x898 [ 141.728815][ T8686] ksys_read+0x120/0x210 [ 141.730085][ T8686] __arm64_sys_read+0x7c/0x90 [ 141.731555][ T8686] invoke_syscall+0x98/0x2b8 [ 141.732963][ T8686] el0_svc_common+0x130/0x23c [ 141.734390][ T8686] do_el0_svc+0x48/0x58 [ 141.735667][ T8686] el0_svc+0x58/0x150 [ 141.736917][ T8686] el0t_64_sync_handler+0x78/0x108 [ 141.738415][ T8686] el0t_64_sync+0x198/0x19c [ 141.739802][ T8686] [ 141.739802][ T8686] -> #4 (&sb->s_type->i_mutex_key#8){++++}-{4:4}: [ 141.742236][ T8686] down_write+0x50/0xc0 [ 141.743481][ T8686] set_blocksize+0x1c4/0x440 [ 141.744845][ T8686] sb_min_blocksize+0x118/0x1fc [ 141.746310][ T8686] init_nilfs+0x4c/0x584 [ 141.747638][ T8686] nilfs_fill_super+0x94/0x568 [ 141.749049][ T8686] nilfs_get_tree+0x378/0x664 [ 141.750475][ T8686] vfs_get_tree+0x90/0x28c [ 141.751752][ T8686] do_new_mount+0x228/0x814 [ 141.753156][ T8686] path_mount+0x5b4/0xde0 [ 141.754485][ T8686] __arm64_sys_mount+0x3e8/0x468 [ 141.755944][ T8686] invoke_syscall+0x98/0x2b8 [ 141.757343][ T8686] el0_svc_common+0x130/0x23c [ 141.758748][ T8686] do_el0_svc+0x48/0x58 [ 141.760013][ T8686] el0_svc+0x58/0x150 [ 141.761327][ T8686] el0t_64_sync_handler+0x78/0x108 [ 141.762891][ T8686] el0t_64_sync+0x198/0x19c [ 141.764259][ T8686] [ 141.764259][ T8686] -> #3 (&nilfs->ns_sem){++++}-{4:4}: [ 141.766412][ T8686] down_write+0x50/0xc0 [ 141.767726][ T8686] __nilfs_error+0x164/0x3bc [ 141.769124][ T8686] nilfs_bmap_lookup_contig+0x114/0x13c [ 141.770735][ T8686] nilfs_get_block+0x1a0/0x7a8 [ 141.772239][ T8686] do_mpage_readpage+0x618/0x16f8 [ 141.773860][ T8686] mpage_readahead+0x2c8/0x530 [ 141.775315][ T8686] nilfs_readahead+0x28/0x38 [ 141.776736][ T8686] read_pages+0x13c/0x4c8 [ 141.778100][ T8686] page_cache_ra_unbounded+0x628/0x71c [ 141.779765][ T8686] page_cache_ra_order+0x938/0xb34 [ 141.781371][ T8686] page_cache_sync_ra+0x570/0x714 [ 141.782868][ T8686] filemap_get_pages+0x2f4/0x19d0 [ 141.784407][ T8686] filemap_read+0x340/0xf4c [ 141.785793][ T8686] generic_file_read_iter+0xa0/0x450 [ 141.787418][ T8686] vfs_read+0x5fc/0x898 [ 141.788779][ T8686] ksys_read+0x120/0x210 [ 141.790088][ T8686] __arm64_sys_read+0x7c/0x90 [ 141.791506][ T8686] invoke_syscall+0x98/0x2b8 [ 141.792958][ T8686] el0_svc_common+0x130/0x23c [ 141.794394][ T8686] do_el0_svc+0x48/0x58 [ 141.795720][ T8686] el0_svc+0x58/0x150 [ 141.796992][ T8686] el0t_64_sync_handler+0x78/0x108 [ 141.798494][ T8686] el0t_64_sync+0x198/0x19c [ 141.799830][ T8686] [ 141.799830][ T8686] -> #2 (&dat_lock_key){.+.+}-{4:4}: [ 141.801979][ T8686] down_read+0x58/0x2f8 [ 141.803239][ T8686] nilfs_get_block+0x170/0x7a8 [ 141.804687][ T8686] __block_write_begin_int+0x53c/0x15e8 [ 141.806419][ T8686] __block_write_begin+0x40/0x54 [ 141.807945][ T8686] nilfs_add_link+0x768/0xc00 [ 141.809402][ T8686] nilfs_create+0x1ac/0x294 [ 141.810815][ T8686] path_openat+0x12d8/0x2c40 [ 141.812296][ T8686] do_filp_open+0x18c/0x36c [ 141.813668][ T8686] do_sys_openat2+0x11c/0x1b4 [ 141.815135][ T8686] __arm64_sys_openat+0x120/0x158 [ 141.816689][ T8686] invoke_syscall+0x98/0x2b8 [ 141.818131][ T8686] el0_svc_common+0x130/0x23c [ 141.819559][ T8686] do_el0_svc+0x48/0x58 [ 141.820886][ T8686] el0_svc+0x58/0x150 [ 141.822161][ T8686] el0t_64_sync_handler+0x78/0x108 [ 141.823737][ T8686] el0t_64_sync+0x198/0x19c [ 141.825051][ T8686] [ 141.825051][ T8686] -> #1 (&nilfs->ns_segctor_sem){++++}-{4:4}: [ 141.827321][ T8686] down_read+0x58/0x2f8 [ 141.828606][ T8686] nilfs_transaction_begin+0x35c/0x6f8 [ 141.830254][ T8686] nilfs_ioctl+0x1d2c/0x215c [ 141.831675][ T8686] __arm64_sys_ioctl+0x14c/0x1c4 [ 141.833214][ T8686] invoke_syscall+0x98/0x2b8 [ 141.834637][ T8686] el0_svc_common+0x130/0x23c [ 141.836080][ T8686] do_el0_svc+0x48/0x58 [ 141.837363][ T8686] el0_svc+0x58/0x150 [ 141.838627][ T8686] el0t_64_sync_handler+0x78/0x108 [ 141.840186][ T8686] el0t_64_sync+0x198/0x19c [ 141.841516][ T8686] [ 141.841516][ T8686] -> #0 (sb_internal#6){.+.+}-{0:0}: [ 141.843551][ T8686] __lock_acquire+0x1728/0x3058 [ 141.845049][ T8686] lock_acquire+0x14c/0x2e0 [ 141.846521][ T8686] nilfs_transaction_begin+0x1f4/0x6f8 [ 141.848239][ T8686] nilfs_page_mkwrite+0x8d0/0xca8 [ 141.849751][ T8686] do_page_mkwrite+0x138/0x2b8 [ 141.851277][ T8686] handle_mm_fault+0x1998/0x4cec [ 141.852906][ T8686] do_page_fault+0x598/0x1554 [ 141.854346][ T8686] do_translation_fault+0xc4/0x114 [ 141.855985][ T8686] do_mem_abort+0x70/0x194 [ 141.857336][ T8686] el0_da+0x64/0x160 [ 141.858527][ T8686] el0t_64_sync_handler+0x84/0x108 [ 141.860089][ T8686] el0t_64_sync+0x198/0x19c [ 141.861464][ T8686] [ 141.861464][ T8686] other info that might help us debug this: [ 141.861464][ T8686] [ 141.864354][ T8686] Chain exists of: [ 141.864354][ T8686] sb_internal#6 --> &mm->mmap_lock --> sb_pagefaults#3 [ 141.864354][ T8686] [ 141.867991][ T8686] Possible unsafe locking scenario: [ 141.867991][ T8686] [ 141.870001][ T8686] CPU0 CPU1 [ 141.871502][ T8686] ---- ---- [ 141.873034][ T8686] rlock(sb_pagefaults#3); [ 141.874244][ T8686] lock(&mm->mmap_lock); [ 141.876205][ T8686] lock(sb_pagefaults#3); [ 141.878120][ T8686] rlock(sb_internal#6); [ 141.879397][ T8686] [ 141.879397][ T8686] *** DEADLOCK *** [ 141.879397][ T8686] [ 141.881570][ T8686] 2 locks held by syz.4.393/8686: [ 141.882999][ T8686] #0: ffff0000d596f8d0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x38/0x2d8 [ 141.885862][ T8686] #1: ffff0000d722a518 (sb_pagefaults#3){.+.+}-{0:0}, at: do_page_mkwrite+0x138/0x2b8 [ 141.888541][ T8686] [ 141.888541][ T8686] stack backtrace: [ 141.890169][ T8686] CPU: 0 UID: 0 PID: 8686 Comm: syz.4.393 Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT [ 141.893152][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.895879][ T8686] Call trace: [ 141.896825][ T8686] show_stack+0x2c/0x3c (C) [ 141.898086][ T8686] __dump_stack+0x30/0x40 [ 141.899267][ T8686] dump_stack_lvl+0xd8/0x12c [ 141.900575][ T8686] dump_stack+0x1c/0x28 [ 141.901769][ T8686] print_circular_bug+0x324/0x32c [ 141.903120][ T8686] check_noncircular+0x154/0x174 [ 141.904474][ T8686] __lock_acquire+0x1728/0x3058 [ 141.905812][ T8686] lock_acquire+0x14c/0x2e0 [ 141.907026][ T8686] nilfs_transaction_begin+0x1f4/0x6f8 [ 141.908538][ T8686] nilfs_page_mkwrite+0x8d0/0xca8 [ 141.909919][ T8686] do_page_mkwrite+0x138/0x2b8 [ 141.911260][ T8686] handle_mm_fault+0x1998/0x4cec [ 141.912623][ T8686] do_page_fault+0x598/0x1554 [ 141.913888][ T8686] do_translation_fault+0xc4/0x114 [ 141.915250][ T8686] do_mem_abort+0x70/0x194 [ 141.916533][ T8686] el0_da+0x64/0x160 [ 141.917621][ T8686] el0t_64_sync_handler+0x84/0x108 [ 141.919064][ T8686] el0t_64_sync+0x198/0x19c