last executing test programs: 53.190335175s ago: executing program 1 (id=171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000001500000008000300", @ANYRES32=r2], 0x54}}, 0x0) 51.936737774s ago: executing program 1 (id=178): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r0, 0x0) 51.696574078s ago: executing program 1 (id=183): r0 = epoll_create1(0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 51.58480399s ago: executing program 1 (id=186): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x11, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x1}) 51.299976534s ago: executing program 1 (id=191): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000000280), 0x45, 0x786, &(0x7f00000007c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000740000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r0}, 0x10) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 50.833652832s ago: executing program 1 (id=199): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0xff}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)="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", 0x6fa}], 0x1}}], 0x2, 0x0) 50.585858676s ago: executing program 32 (id=199): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0xff}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)="1ed34bfa8883b33181afc6942d3d846b33336ad9b9365b383cc5521831800e450d84fdf02054e433a3d5c9c5111c58c743ea773b5815a5e494fe2131bf9fa4cf156956ca618618ae27cf83fc6296b531dda86ebf6baf7ecf490924d1b4646fd3204c6be713cb10954001fc0e0744f0bc738a95ec9b5035cdac377b1dc0ac83ee3c0c9422099f897ea2f9d6e253920432ca42a13dc7950db8bfebf8d8d96b83dd9fbaa7ad6b88feb5ce9f75fd0a6bb422cfd8ad1a26a80a81caa2e4a2939a9f8c76d45c6b342cb810e1300f29f8142cecaa7588feb011cd42ffc80e92b977be7ff3f481952e0ef9390e9631f2fa1e4431184a6fd85c44b0ea66b30c37bd17bc12488f5458963bf2cade9093428a52b6356f25895136dc7c3e2d7abbe66acdd6ae516baf4e2c8b5296c459b747ab71aa3618d545fb3984749e40850c75773697e702b2d1dcf5103f9c00edca67d5e7779f6f057e90272edb57191a0d30e3df6cef134a70fdd5bc145971eab20d640543f03ddecfb5c3463004a3628552c2041a0a1cf4f1f1de3c8049d5823b8b7ae449313b87ee729d4254caf2e2528c1e1a89a9d6ac5e32dbc52f7d710894b67df2666f79b73196a439ee03413553464d9f551b8d010f20e4cd264b7d4e8ba5e6c501205daff07c8245c1502bb34f0f3d610ce8b9a7ade1995b0d08b331fdcd5755130093e284e16b70c7907a77d75d6ff9a28bdcbaf6da2cb2c60ad6ad62ce678954e018f37de4e1e69df7ce5575d13e12d35c3d3fd1d26a0f07d4f835d756e35c9664e4b504a7f8b2f44d3e6ac6d8c190367afc4da787c66bbd1bfd1d336fdba7e9d5fac4adbe239a9a8496de9ca89df9cb9673ba000614da5f5c06dfaf3a6e684b9f237e232a3330f4501fc402e38d724a50753acfef09a77ad4da6c27966f1acb5ef4932f4a0783211547f7b4fb2b1fb35f9b92514ff9b6f17c9975deb523d44c6751446ccae15994788795da491bedc587bbe59e4562b5ce2f043d445b8b3d5cc9a523eeaa711a9ad283f86c4b526ab33d2df2d2f91c0cc464490296a2a14194d62a5ae57476a713ccf4ac0ad639da32b2ba3a8ff0696a26952fef75e2c9241c71638ad51d83373490adba4ff6690615cab5745eb2119af67e27de7f6de66afe7dd1c63e82e43752069c06c791cda1dc8a59654a32b5f2ec03e36f5cc1f605c24fc56b2604cb775523cf0954f08697b932644e1d44fa15647914292027fb532f3abbfd0c37e390188dd7c2c6190844169d0bd2cc50b586c6b9aad60bae5438a96325ba3508737e46ba59e6e29fcd0602ce11c670255a47202103115e89e3a3bf23651923787dd40d0a96a6a6c2958fc35fb1c1414186f5b2066239a33e4f5edd03668a9a628b93b971918a8f075fa54879bd9614cce7f1637054be84e62f9c9cefc41b65703c70d6b7469b8fb5bd2bea6a83898dc03aa62584d4896288c8a049ac6aecd13429576d67cb8335c2821f3fa97373aabaeaa982b1df386036bb6a27737aa5f1e1f8d2ea223277edbccff253b8247fa7d8def13f06389ad41ee6e0a16f6cde46b6a37d82667abbcdccbb99919f09bc4652b792812cd131d8bc7ada77d125e232ff2a970c33ce89fb5e3aceb06d7a8dcf7646ea6411c2af18a9769fa8fb52107ac502aad3052370afcd3e8bb2a5b1cd42fc74309a43d78c56bd46b6dcfc92be8593bff5ccb6009fbafb83ae3932dd66203752dd3114ea46e1142be02fe6ddd4eb75727b46d2ca651c30b09aae523d357aa409056793deb921ff212b043d0dede01c4f0807aa6709baaf06e3fb3781156b5e262ded702c2551b28909923cafef546f19cf1ead1aafd27d758e270591093134e9f88772a410dec000dfe9e4cd611e1bd4857b06aa4b84b3a06fa855654d9e0dedbc363325c8198ffd63c97d1309f41e80f2be33b243700ef818935baafccfaf20c912b256ef9d96f0d70bf429dfdac989eb232fe7202741c28fa52c4684954399211634114ef7e1c9394b8233b80fb4ad99f101188940e64a522901609c4330b7eeadb7748032a6d301da7711d7d10d73c954694d2c7ddd55ffe8404bb0027fa9236ee0df20c7b64fb2e8f52fea9d03c86b6a09d6b060ea58427e3ab9aa25a1fc3935f0a9d61371695afdd40d733eed234fc0c17ac059ee0624f915037d123b646f2a0abcc6929d52c5066150a58ee93234388317d3e8e6424c6843fef130db65ccd581e6bded22dc53918d902c6bbcc7a26a19fc34173e664858a67be22d050d37f6d0c42e32b44f3c5e6d71cabddb7dc4737dcfb47dd6bae8ce4c07a0c92ec4a57693bd15cb39ae42c5fe477b30f9078d31de358bb120b630817e67d499c5720c9c03684756e3acea0220d237668d16844349abff0ac6d31cf16f01db90eea5ed9f299beca827c7ecc296e0a752e6ad3a552772414dee4064a0e434582989a0f4f6259b25e8f7b8cdd10e237daf2d17b6573d69da7f018400206283ff60e4ee2d7c2db8ef5ad68a013dd04a336f274bcf3e586158", 0x6fa}], 0x1}}], 0x2, 0x0) 3.373580758s ago: executing program 2 (id=608): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4445, &(0x7f0000000380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x22) 3.357398428s ago: executing program 3 (id=609): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) read(r1, &(0x7f00000001c0)=""/140, 0x8c) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 3.141543332s ago: executing program 3 (id=610): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x3}}) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) 2.965172824s ago: executing program 3 (id=612): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x3}, 0x2) 2.647949889s ago: executing program 2 (id=615): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x7, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x3}, &(0x7f0000000280), 0x0) 2.517493621s ago: executing program 3 (id=617): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x40, 0x101) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r0], 0x0) 1.92626529s ago: executing program 4 (id=623): r0 = syz_mount_image$nilfs2(&(0x7f00000008c0), &(0x7f0000000e00)='./file0\x00', 0x10000, &(0x7f0000000940)=ANY=[], 0x0, 0xdab, &(0x7f0000000e80)="$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") fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r1, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000001f00000000000080"]) 1.553773375s ago: executing program 2 (id=624): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000000000910000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x0, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) 1.497448537s ago: executing program 2 (id=625): syz_open_dev$usbmon(&(0x7f0000000200), 0x800, 0x8001) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 1.443069218s ago: executing program 4 (id=626): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x9, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x48}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 1.2816435s ago: executing program 0 (id=627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 1.28149123s ago: executing program 2 (id=628): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000001c0)={r2, 0x1, r0, 0x0, 0x80000}) 1.245796501s ago: executing program 4 (id=629): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x101, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x4, 0x3ff, 0x101, 0x0, 0xe}) 1.186053342s ago: executing program 4 (id=630): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2b35048, 0x0, 0x1, 0x0, &(0x7f0000000100)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 1.183597022s ago: executing program 0 (id=631): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_tgsigqueueinfo(r0, r0, 0x8, &(0x7f0000000140)={0x24, 0x5, 0xfffffff9}) tkill(r0, 0xa) ptrace$peeksig(0x4209, r0, &(0x7f0000000600)={0x1, 0x0, 0x2}, &(0x7f00000002c0)=[{}, {}]) 1.090243383s ago: executing program 4 (id=632): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd2) fcntl$notify(r0, 0x402, 0x8000001f) creat(&(0x7f0000000040)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0) 1.089600473s ago: executing program 0 (id=640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x48000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000006f02"]) 985.705955ms ago: executing program 3 (id=633): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0x1, 0x6014, &(0x7f000000a280)="$eJzs3U9vHGcdB/Df/vHacdo0qlAVIg5uyp+W0vxPoPxrygEJOICEeiaR61YpKaAkIFpFxJUPiAvwEuDSC4e+BV5AXwPiBRAp6akHyqCxn8cZb9Zeu4ln1n4+H2kz85tnx/tMvjueWc/MTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8eMf/vxcLyKu/i5NOB7xVAwi+hFH6nop6pEr+fnDiDgR683xXEQM5iPq+df/eSbiYkR8fCzi/oM7y/Xk87vsx6Wzt29+9pMf/OuPf1k78c6bv/hwvP1nX7jw0Z/uRhz/6asffXb3ySw7AAAAlKKqqqqXPuafTJ/v+113CgBoRd7+V0merla3Vv9oxvqjVu9P/ef+Xp7/1NGu+6s+pHVTNdndZhERq8156n0Gh+MB4IBZjU+77gIdkn/RhhFxtOtOADOt13UH2Bf3H9xZ7qV8e83twdJGe/475Zb8V3ub13dsN5xm/ByTtt5fazGIZ7fpz5GW+jBLcv798fyvbrSP0vP2O/+2bJf/aOPSp+Lk/Afj+Y/Zkv9fI+LA5t+fmH+pcv7DveS/OjjA67/8AQAAAAA4/PLf/493fPx3/vEXZVd2Ov671FIfAAAAAAAAAOBJe9z7/21y/z8AAACYWfVn9drfjj2ctt13sdXT3+hFPD32fKAwS40vBwQAAAAAAAAAAAAA2jGMWEzn9c9FxNOLi1VV1Y+m8XqvHnf+g6705YeSdf1LHgAANnx8bOxa/l7EQkS8kb7rb25xcbGq5iJisToyn/dnR/ML1ZHG59o8rKfNj3axQzwcVfUPW2jM1zTt8/K09vGfV7/WqBrsomPt6DBwAIiIja3RfVukQ6aqnomu93I4GKz/h4/1n93o+n0KAAAA7L+qqqpe+jrvk+mYf7/rTgEArcjb//HjAmq1Wl1M/cnGxJnpj1q9j3VTNdndZhERq8156n0Gt+MHgANmNT7tugt0SP5FG0bEia47Acy0XtcdYF/cf3BnuZfy7TW3B0sb7flckC35r/bW58vzTxpOM36OSVvvr7UYxLPb9Oe5lvowS3L+/fH8r26051v8b+azsD/5t2W7/OvlPN5Bf7qW8x+M5z9mv9f/tqxFf2L+pcr5D/eU/0D+AAAAAAAww/Lf/487/psXGQAAAAAAAAAOnPsP7izn617z8f8vTXherznm+s9DI+ff23X+rv89THL+/fH8x07IGTTG773+MP9PHtxZ/vD2f76YhzOf/9xgVL/2XK8/GKZzfqq5t+J63IiVOPvI84db2s890j63pf38lPYLj7SP6vYjuf10LMev40a8udk+P+XEqIUp7dWU9pz/wPpfpJz/sPGo819M7b2xYe3eB/1H1vvmcNLrXPnHf7/66NrVhuGWai0Gm8vWcKz+51RrfXpo/f/k6Ch+e2vl5unfX7t9++a5SIMtU89HGjxhOf+59Mj5v/jCRnv+vd9cX+99MNpz/rNiLYaT8l9/f7/QGK+X96WW+9aFnP8oPXL+eQs0ef0/yPlPXP/Xl+/lDvoDAAAAAAAAAAAAAAAAO6mqav0S0SsRcTld/9PVtZkAQLvy9r9K8nS1Wq1Wq9WHr26qJnutWUTEP5vz1PsMf5j0wwCAWfa/iPh3152gM/IvWP6+v3r45a47A7Tq1nvv//LajRsrN2913RMAAAAAAAAA4PPK9/9catz/ef08oLH7Rm+5/+vrsXRg7//ZHw3W73WeFuj52Pn+36di5/t/D6e83tyU9tGU9vkp7QtT2ide6NGQ838+ZZzzP5kWrKT7v77YQX+6lvM/le71nPP/2tjzmvlXfz/I+fe35H/m9ru/OXPrvfdfuf7utbdX3l751bmzly9euHTxwqVLZ966fmPl7Ma/HfZ4f+X8872vnQdalpx/zlz+Zcn5fyXV8i9Lyn9zN1T+Zcnrf97fk39Zcv75s4/8y5LzfynV8i9Lzv/rqZZ/WXL+L6da/mXJ+X8j1fIvS87/lVTLvyw5/9Opln9Zcv5nUi3/suT88xEu+Zcl55/PbJB/WXL+51Mt/7Lk/C+kWv5lyflfTLX8y5Lzv5Rq+Zcl53851fIvS87/m6mWf1ly/t9KtfzLkvN/NdXyL0vO/9upln9Zcv7fSbX8y5Lz/26qd8r/nRb7RTty/t9LtfW/LDn/76da/mXJ+b+WavmX5eH3/xvZ88jibHTDiJEnP9L1byYAAAAAAAAAAAAAYFwbpxN3vYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuNkau87wd+9uq1IcH/cCcO2OZmYGF3fQOHGEwS8qekF0pC2rSkxrHXZhPf6l0ngFDZFNoSBalI7Qv6omkSJVGktgJVkZpKNEIqUvumal41QpWiVopUV4LKQUmlVIGtzpzneXZmdnZm195dz5zz+SD75505M/PMmTOz+130nQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB6Wz4y+Ud9WZblf2p/bcyyi/N/r8/25V/O7r7QKwQAAADO1zu1v//qknTCviVcqG6bf7z2X747Nzc3l3327TPv/sncXDpjc5YNrMuy2nnRP/38Z3P12wTPZiN9/XVf93e4+YEO5w92OH+ow/nDHc5f1+H8kQ7nL9gBC6wvfh9Tu7Ibav/cWOzS7LJsqHbeDS0u9Wzfuv7++Lucmr7aZeaGDmdT2dFsMhtfcJm+2n9Z9uqW/LYeyOJt9dfd1qYsy87+5OmDcQ19YR/fkDXcWE39Y/fWfdnmt3/y9MFvz7x5davZcTcsWGmWbduar/O5LJv/dVXWl61L+ySus79unZtarHOgYZ19tcvl/25e59klrjPe75Gwzh+0WeemcNoT12dZNpstuk2zZ7P+bEPTrab9PVIcEfl15A/l+7LBZR0nW5ZwnOSX+fH1jcdJ8zEZ9/+WsE8GF1lD/cPx1peGF+z3cz1O8nvdDcdqft0P5Tc6MlL/q9WGYzXf5ukbFz8GWj52LY6BdCzXHQNbOx0D/cMDtWOgf37NWxuOgYkFl+nP+mq3debG9sfA2Myxk2PTTz51+9SxA0cmj0wenxjfvXPHrp07du0aOzx1dHK8+Ht5u7SHbMj60zG4NbzWxGPw5qZt6w/Jua+v3PNgpEueB/l9/+RN+YIu7s8WOcbzbZ7bdv7Pg/R9v+55MFj3PGj5mtrieTC4hOdBvs3ZbUv7njlY96fVGlbrtXBj3TFwIb8f5rf56C2LvxZuCut6/tblfj8cWHAMxLvVF557+Snp572Ru8J+WXhcXJOfcdFwdnp68tQdTxyYmTk1kYWxJi6te6yaj5cNdfcpW3C89C/7eNn3l7+46ZoWp28M+2rktvnHarjF45Bvs3O0/WNVe3VvvT8bTt2ehbHC1np/tvpulu/PlCXaHPv5Ns/dfv4/C6ZcUvf6N9Tp9W9gaLB4/RtIe2Oo4fVv4UMzUFtZlp29fWmvf0Phz1q//l3WJa9/+b569I72x0C+zfNjyz0GBtu+/l0fZl9Yzy0hMYzU5f53a+fPFodp3WPZ8bgZHBwKx81gvMXG42bHgsvk15bf9rbxcztutl3f+Fg1/NxSwuMm31d/Ot7+uMm3eW3i/F871sd/1r12DHc6BoYGhvP1DqWDoHi9m1sfj4E7soPZiexodihdJn+U89sa3b60Y2A4/Fnr146ruuQYyPfVS9vbHwP5Nq/vWNmfnbaFU9I2dT87Nf9+YbHMf83g/PU177aVzvz5Oj+6s/3vhvJt3ty53JzRfj/dFk65qMV+an7+LHZMH8rWZj9dFdZ5dFf7303l21y2e4nH074sy96YeKP2+67w+92/Of2v3234vW+r3ym/MfHGg2MP/3A56wcA4Ny9W/t7drj4WbPu/1gv5f//AwAAAD0h5v7+MBP5HwAAAEoj5v6BMBP5HwAAAEoj5v7BMJOK5P/H79rz8jvPZOndAOeCeH7cDQ/dU2wXO96z4evNc/Py0z/8zaGXv/zM0m67P8uyXzz4/pbbP35PXFfhZFznBxtPX+Cq65Z0+489Mr9d/fsnnN1TXH+8P0s9DGJX+dWx7bXr3fzkRG2+9mBWmw/PPv9scf3F13H7MzuK7f88vGnJvsN9DZffFtZzQ5ibw3vKPLRvfj/kM17u5U3X/sOln5q/vXi5vq3vrd3Nl36vuN74HlEvXlpsH+/3Yuv/+6985+V8+ydubL3+Z/pbr/9MuN4fh/nzvcX29fv8y3Xr/4Ow/nh78XJ3fOP7Ldf/ypXF9q+E4+JrYTav/74//sA7rR6veDv77i4uF29//H921i4Xry9ef/P6R56ZaNgfzdf/2tvF9ez9wk8H6rePp8fbiR67u/H47guPb0OPPMuy7/xh1rCfsw8Vl/u7pvXH6zt5d+v139a0zpN919UuP39/Njbcr69+a3vL+xvXs++vNzbcnxfvD/vv7bHX8+s983A4HsP5//uD4vqa38v0lfsbX2/i9l/bWDxv4/WNNa3/xab1z16X77vO63/g7WL9r9y7rmH9+z4WjqcHitlp/Uf+4pKGy3/928XjceqLo8dPTJ+eOhTuzMam5/G6kfUbLrr4Pe+9JLyWNn+9/8TM45OnNo9vHs+yzT34loGrvf5vhPnfxZhd+Vso/PCnxXH3wseL71s3/6z4+sVw+mPh8YzfH7/6Z0MNx2vz4z57bzHPd/23hnUs1ZVf+Y/rWpz8nwve8/fMZ149/be//2bzzwXx/py8fKR2/17ackXtvL7XivObX69am0tP+3+/vPF5/aPB8dr8Xtivc+GdmbdeUdxe8/XH9yZ54RPF8zf+JBcvnzW9n8jGgcb7cW7rn/ej8HPM969qfP2Lx8f3nml6N+eNWV++hNnw+pDNFufHreL+fuHsFS1vL74PTzZ79XKWuajpJ6fHjk4dP/3E2Mzk9MzY9JNP7T924vTxmf219y7d/7lOl59/fm+oPb8PTe7emdWe7SeKscou9PpPPnLw0J3jNx2aPHzg9OGZR05OnjpycHr64OSh6ZsOHD48+cVOl586tHdi+54dd24fPTJ1aO9de/bs2DM6dfxEvoxiUR3sHv/86PFT+2sXmd67c8/Erl07x0ePnTg0uffO8fHR050uX/veNJpf+gujpyaPHpiZOjY5Oj311OTeiT27d2/v+O6Px04ent48dur08bHT05Onxor7snmmdnL+va/T5amG6RPh9a5JX/jp/NO37U7vj5v75pcWvapik8YfT7O3wntBxe9vnb6OuX8ozKQi+R8AAACqIOb+8Mb/82fI/wAAAFAaMfevCzOR/wEAAKA0Yu4fCTOpSP7X/9f/1//X/9f/X8P+f6b/v9L0/1ek/7/Qqvb/5+n/6//38vr1//X/6azb+v8x96/PskrmfwAAAKiCmPs3hJnI/wAAAFAaMfdfFGYi/wMAAEBpxNx/cZhJNfL/UPM/9f/1//X/6/v/cVv9/0z/X///HOn/6/+3o/+v/9/L6+/C/v96/X+6Tbf1/2Puf0+YSTXyPwAAAFRCzP3vDTNZTv7vX+lVAQAAACsp5v5Lwkz8/38AAAAojZj7N4aZVCT/+/x//X/9f5//r/+v/7+a9P/1/9vR/9f/7+X1d2H/3+f/03W6rf8fc///CzOpSP4HAACAKoi5/31hJvI/AAAAlEbM/ZeGmcj/AAAAUBox918WZlKR/K//r/+v/6//r/+v/7+a9P/1/9vR/9f/7+X16//r/9NZt/X/Y+6/PMykIvkfAAAAqiDm/ivCTOR/AAAAKI2Y+68MM5H/AQAAoDRi7r8qzKQi+V//X/9f/1//X/9f/3816f/r/7ej/6//38vr1//X/6ezbuv/x9x/dZhJRfI/AAAAVEHM/deEmcj/AAAAUBox978/zET+BwAAgNKIuX9TmElF8r/+v/5/1/f/+/X/9f8L+v/6/62sbP+/f9Fz9P8L+v+N9P/1//X/9f9pr9v6/zH3fyDMpCL5HwAAAKog5v5rw0zkfwAAACiNmPuvCzOR/wEAAKA0Yu7fHGZSkfyv/6//3/X9f5//r/8fZuX6/zN9+v9L4PP/9f8z/f9zdqH7872+fv1//X+arV9wSrf1/2Pu3xJmUpH8DwAAAFUQc//WMBP5HwAAAEoj5v7rw0zkfwAAACiNmPtvCDOpSP7X/z/H/n9TtUX/v/X69f/1//X/ff6//r/+fzv6//r/vbx+/f+l9f+HO10RpdZt/f+Y+28MM6lI/gcAAIAqiLn/pjAT+R8AAABKI+b+m8NM5H8AAAAojZj7t4WZVCT/6//7/H/9f/1//X/9/9Wk/7/k/v/CD01eAv3/gv7/ubnQ/fleX38v9f9HWlze5/+zFrqt/x9z/y1hJhXJ/wAAAFAFMfffGmYi/wMAAEBpxNx/W5iJ/A8AAAClEXP/aJhJRfK//r/+v/5/tfv/6/T/9f9XWVn7/+l11Of/6//r/+v/r3L//1uLXL5XPv+fauu2/n/M/beHmVQk/wMAAEAVxNx/R5iJ/A8AAAClEXP/WJiJ/A8AAAClEXP/eJhJRfK//r/+v/5/tfv/mf6//v8qK2v/v/nz/7Ms0//X/0/0//X/u+3z/1vR/2ctdFv/P+b+iTCTiuR/AAAAqIKY+7eHmcj/AAAAUBox9+8IM5H/AQAAoDRi7t8ZZlKR/K//r/+v/6//r/+v/7+aqtL/9/n/xfn6/wX9f/1//X/9/yrqb3Fat/X/Y+7fFWZSkfwPAAAAVRBz/+4wE/kfAAAASiPm/jvDTOR/AAAAKI2Y++8KM6lI/tf/1//X/9f/797+f+Ptr17//7/0/1eR/v/Y64MtHnf9/4L+v/5/L69f/1//n85Wtv9/yXn3/2Pu3xNmUpH8DwAAAFUQc/8Hw0zkfwAAACiNmPvvDjOR/wEAAKCntPocwijm/g+FmVQk/+v/l73/P7dO/1//v3f7/4370+f/6/+3El4+u7r/7/P/F7e6/f/1C25P/7/Rhe7P9/r69f/1/+lsZfv/C348XXb/P+b+vWEmFcn/AAAAUAUx998TZiL/AwAAQGnE3H9vmIn8DwAAAKURc/++MJOK5H/9/7L3/7vv8//7Mv1//f+C/r/+/0rohc//1/9fnM//783+f3zfDf3/7un/58eQ/j/dqNv6/zH33xdmUpH8DwAAAFUQc/+Hw0zkfwAAACiNmPs/EmYi/wMAAEBpxNz/0TCTiuR//X/9f5//r/+v/6//v5r0//X/29H/783+f6T/3z39f5//T7fqtv5/zP33h5lUJP8DAABAFcTc/7EwE/kfAAAASiPm/v8fZiL/AwAAQGnE3P9AmElF8r/+v/6//r/+v/6//v9q0v/X/29nbfv/w1nz/dD/1//X/9f/Z3WtRf9/3TL6/zH3/1KYSUXyPwAAAFRBzP0PhpnI/wAAAFAaMfd/PMxE/gcAAIDSiLn/l8NMKpL/9f/Xpv/fn65f/1//X/9f/1//fyX1aP9/RP+/4PP/9f97ef36//r/dLYW/f9sGf3/mPt/JcykIvkfAAAAqiDm/l8NM5H/AQAAoDRi7v+1MBP5HwAAAEoj5v6Hwkwqkv/1/33+v/6//n/X9v8HG/en/r/+fys92v/3+f+B/r/+fy+vX/9f/5/Ouq3/H3P/r4eZVCT/AwAAQBXE3P9wmIn8DwAAAKURc/8nwkzkfwAAACiNmPs/GWZSkfyv/6//r/+v/9+1/f+m/an/3639/39re67+v/5/O/r/+v+9vH79f/1/Ouu2/n/M/Y+EmVQk/wMAAEAVxNz/qTAT+R8AAABKI+b+3wgzkf8BAACgNGLu/80wk97M//3LvYD+v/6//r/+v/6//v9q0v9f2P/PX8MuZP9/eCkb6v8vif6//r/+v/4/7XVb/z/m/k+HmfRm/gcAAABaiLn/t8JM5H8AAAAojZj7fzvMRP4HAACA0oi5/9Ewk4rkf/1//X/9f/1//X/9/9Wk/+/z/9vR/9f/7+X16//r/9NZt/X/Y+7/TJhJRfI/AAAAVEHM/b8TZiL/AwAAQGnE3L8/zET+BwAAgNKIuf+xMJOK5H/9f/1//X/9/5Xp/8/p/+v/t6T/r//fjv6//n8vr1//X/+fzrqt/x9z/4Ewk4rkfwAAAKiCmPs/G2Yi/wMAAEBpxNx/MMxE/gcAAIDSiLn/UJhJRfK//r/+v/6//r/P/9f/X036//r/7ej/6//38vr1//X/6azb+v8x90+GmVQk/wMAAEAVxNx/OMxE/gcAAIDSiLn/SJiJ/A8AAAClEXP/42EmFcn/+v/6//r/+v/6//r/q0n/X/+/Hf1//f9eXr/+v/4/na1c//+fV6T/H3P/VJhJRfI/AAAAVEHM/Z8LM5H/AQAAoDRi7v98mIn8DwAAAKURc//RMJOK5H/9f/1//f8S9v8H9f8z/f+uof+v/9+O/r/+fy+vX/9f/5/OVq7/n61I/z/m/mNhJhXJ/wAAAFAFMfcfDzOR/wEAAKA0Yu4/EWYi/wMAAEBpxNx/MsykIvlf/1//X/+/hP1/n/9fo//fHfT/9f/b0f/X/+/l9ev/6//TWbf1/2Pu/90wk4rkfwAAAKiCmPtPhZnI/wAAAFAaMfdPh5nI/wAAAPwfe/fRo9ddxXH8MYljWxFixZ63wI4dvIO8BjZsERK9dwgQeu+9915D772X0HsLhA4BKSiZc05i5/G94/E8fu79n89nkZNxJvaNR3L00+iryzBy9983bmmy//X/+n/9v/5f/6//3yX9v/5/iv5/Pf3/yS3/vv5f/6//Z87S+v/c/feLW5rsfwAAAOggd//94xb7HwAAAIaRu/8BcYv9DwAAAMPI3f/AuKXJ/tf/6//1/4vp/w86P/2//l//f0H0//r/zb77/zPxweD9/zb6f/2//p85S+v/c/c/KG5psv8BAACgg9z9D45b7H8AAAAYRu7+h8Qt9j8AAAAMI3f/Q+OWJvtf/6//H7f/P7W2/t/7//PrOmL/f+LWX1b/f7z0//r/zb77/ybv/99G/6//1/8zZ2n9f+7+h8UtTfY/AAAAdJC7/+Fxi/0PAAAAw8jd/4i4xf4HAACAYeTuf2Tc0mT/6//1/+P2/6t7/7/+P7+uQ/T/Z+rn8f5//b/+//z0//r/NT+//l//z7yl9f+5+x8VtzTZ/wAAANBB7v5Hxy32PwAAAAwjd/9j4hb7HwAAAIaRu/+xcUuT/a//1//r//X/+v9L8P5//b/+X/+/lf5f/7/m59f/6/+Zt7T+P3f/4+KWJvsfAAAAOsjd//i4xf4HAACAYeTuf0LcYv8DAADAMHL3PzFuabL/9f/6f/2//l//r//fJf2//n+K/l//v+bn1//r/5m38/7/qqtvuYft/3P3Xx23NNn/AAAA0EHu/ifFLfY/AAAADCN3/5PjFvsfAAAAhpG7/ylxS5P9v6X/v2yj/2/a/990Qv+v/19m/39j/Cmj/9f/3966+//T+n/9/y0/vLz+/3C/E/p//b/+nzk77/9nev9zP87df03c0mT/AwAAQAe5+58at9j/AAAAMIzc/U+LW+x/AAAAGEbu/qfHLU32v/f/6/+P8/3/+fPq/w/o/73/X/+v/z/u9/+fOedj/f+BLf3/vfI3U/9/fvvu59f+/FP9/90P8fz6fzpYWv+fu/8ZcUuT/Q8AAAAd5O5/Ztxi/wMAAMAwcvc/K26x/wEAAGAYufufHbc02P+X6//rOZL+3/v/D9X/R4Cr/z/7efT/+v9t9P/H2/+fS/9/wPv/j2bf/fzan9/7/+f7/yvnfhKGt7T+P3f/c+KWBvsfAAAAusjd/9y4xf4HAACAYeTuf17cYv8DAADAMHL3Pz9uabL/9f/6f/2/9/9fVP9/mf5f/z9N/6//n6L/1/+v+fn1/97/z7yl9f+5+18Qt9Twu/wI/5UAAADAkuTuf2Hc0uT7/wAAANBB7v4XxS32PwAAAAwjd/+L45Ym+1//r//X/+v/vf9f/79L+v/h+v8T+v9b6f/1//p//T/Tltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/9f+7pP8frv/3/v/b0P/r//X/+n+mLa3/z93/irilyf4HAACADnL3vzJusf8BAABgGLn7XxW32P8AAAAwjNz9r45bmux//b/+X/+v/9f/6/93afn9/8lDfZb+/4D+/2y76v9Pn+fX0/8v6/mPp//Pr77+nzEtoP+/x20/zt3/mrilyf4HAACADnL3vzZusf8BAABgGLn7Xxe32P8AAAAwjNz9r49bmuz/8/X/N1x58M9n+v/8DZvo/8+c99fW/+v/N/p//b/+X/9/kbz/X/+/GbD/9/7/dTy/9//r/5m3gP7/rI9z978hbmmy/wEAAKCD3P1vjFvsfwAAABhG7v43xS32PwAAAAwjd/+b45Ym+9/7//X/+n/9v/5f/79L+n/9/5QV9f+ntv2g/l//r//X/zNtaf1/7v63xC1N9j8AAAB0kLv/rXGL/Q8AAADDyN3/trjF/gcAAIBh5O5/e9zSZP/r//X/e+//76D/T/r/+Lrq//X/F0D/r//feP//ke27n1/78+v/9f/MW1r/n7v/HXFLk/0PAAAAHeTuf2fcYv8DAADAMHL3vytusf8BAABgGLn73x23NNn/+n/9/977f+//L/r/+Lrq//X/F0D/r//f6P+PbN/9/NqfX/+v/2fe0vr/3P3viVua7H8AAADoIHf/e+MW+x8AAACGkbv/fXGL/Q8AAADDyN3//rilyf7X/+v/9f/6f/2//n+X9P/6/ymXtv+/5gb9/9n23c+v/fn1//p/5i2t/8/d/4G4pcn+BwAAgA5y938wbrH/AQAAYBi5+z8Ut9j/AAAAMIzc/R+OW5rsf/3/2vv/e14fT7C0/j8/Rf+v/9f/6//1//r/81ru+//P/ZNiO/2//l//r/9n2iXr/+991X3udvPfzPT/ufs/Erc02f8AAADQQe7+a+MW+x8AAACGkbv/o3GL/Q8AAADDyN3/sbilyf7v0f+fvN2njdP/e/+//n/R/X/+oar/1//r//X/Wy23/z8c/b/+X/+v/2fa0t7/n7v/43FLk/0PAAAAHeTu/0TcYv8DAADAMHL3fzJusf8BAABgGLn7PxW3NNn/Pfr/29P/Hzj2/v+mO+n/9f/F+//1/xv9v/5/hv5f/7/m5x+6/z+x0f9zLJbW/+fu/3Tc0mT/AwAAQAe5+z8Tt9j/AAAAMIzc/Z+NW+x/AAAAGEbu/s/FDXe94/4e6ZLS/+v/vf9f/6//1//vkv7/CP3/icsP/Vz6/wP6/6PZdz+/9ucfuv/3/n+OydL6/9z9n49bfP8fAAAAhpG7/wtxi/0PAAAAw8jd/8W4xf4HAACAARz07rn7vxS3NNn/+n/9v/5f/6//1//vkv7f+/+n6P/1/2t+fv2//p95S+v/c/d/OW5psv8BAACgg9z9X4lb7H8AAAAYRu7+r8Yt9j8AAAAMI3f/1+KWJvtf/6//1//r/5fd/5/S/+v/J+n/9f8b/f+R7bufX/vz6//1/8xbWv+fu//rcUuT/Q8AAAAd5O7/Rtxi/wMAAMAwcvd/M26x/wEAAGAYufu/Fbc02f/6f/2//l//v+z+v8X7/09u9P9Hpv/X/2/0/0e2735+7c+v/9f/M29p/X/u/m/HLU32PwAAAHSQu/87cYv9DwAAAMPI3f/duMX+BwAAgGHk7v9e3NJk/4/c/099mv7/gP5f/7/R/y+h//f+/4ug/9f/b/T/R7bvfn7tz6//1/8zb2n9f+7+78ctTfY/AAAAdJC7/wdxi/0PAAAAw8jdf91mc639DwAAAGO67pa/nt78MG5psv9H7v+n6P8P6P/1/xv9v/5/x/T/+v8p+n/9/5qfX/+v/2fe0vr/3P0/ilua7H8AAADoIHf/j+MW+x8AAACGkbv/J3GL/Q8AAADDyN3/07ilyf7X/+v/9f/6f/2//n+X9P/6/yn6f/3/mp9f/6//Z97S+v/c/T+LW5rsfwAAAOggd//P4xb7HwAAAIaRu/8XcYv9DwAAAMPI3f/LuKXJ/tf/6//1//p//b/+f5f0//r/Kfp//f+an1//r/9n3tL6/9z9v4pbmux/AAAA6CB3/6/jFvsfAAAAhpG7/zdxi/0PAAAAw8jd/9u4pcn+1//r//X/+n/9v/5/l9r2/zf/b1X/P0v/r/9f8/Pr//X/zFta/5+7/3dxS5P9DwAAAB3k7v993GL/AwAAwDBy9/8hbrH/AQAAYBi5+/8YtzTZ//p//b/+X/+/jv7/Cv2//n+rxfb/3v9/KPp//f+an1//r/9n3tL6/9z918ctTfY/AAAAdJC7/09xi/0PAAAAw8jd/+e4xf4HAACAYeTuvyFuabL/9f/6/yH7/1P6//H6f+//X2X/fxf9v/5/mv5f/7/m59f/6/+Zt7T+P3f/X+KWJvsfAAAAOsjd/9e4xf4HAACAYeTu/1vcYv8DAADAMHL3/z1uabL/9f/6/yH7f+//1//r/xdD/6//n6L/1/+v+fn1//p/5i2t/8/d/4+4pcn+BwAAgA5y9/8zbrH/AQAAYBi5+/8Vt9j/AAAAMIzc/f+OW5rsf/2//l//r//X/+v/d0n/v97+/4qN/n+O/l//r//X/zNtaf1/7v7/xC1N9j8AAAB0kLv/xrhl6/6/8yV6KgAAAOA45e7/b9zi+/8AAAAwjNz9/4tbmux//b/+X/9/Qf3/af2//l//f2H0/+vt/73/f57+X/+v/9f/M21p/X/u/v8HAAD//8+aFhM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) 406.613934ms ago: executing program 2 (id=634): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={r2, 0x5, 0x30, 0x3, 0x4}, &(0x7f0000000040)=0x18) 405.880584ms ago: executing program 0 (id=635): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) 262.008246ms ago: executing program 4 (id=636): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) read$FUSE(r1, 0x0, 0x4e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 251.711326ms ago: executing program 0 (id=645): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffff42f, 0x8) 9.37274ms ago: executing program 3 (id=637): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x4810, &(0x7f0000000580)={[{@nossd_spread}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x4}}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@usebackuproot}, {@ref_verify}, {@thread_pool={'thread_pool', 0x3d, 0x1}}, {@enospc_debug}, {@notreelog}]}, 0x3, 0x5145, &(0x7f0000005140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 0 (id=647): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): =4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5862 comm="syz.2.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2bf518e52b code=0x7ffc0000 [ 70.716528][ T5863] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 70.743190][ T5863] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.5: Failed to acquire dquot type 1 [ 70.810201][ T5863] EXT4-fs (loop2): 1 truncate cleaned up [ 70.851763][ T5863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.881727][ T5777] Bluetooth: hci0: command tx timeout [ 70.926510][ T5874] overlayfs: invalid origin (0000) [ 70.963085][ T5777] Bluetooth: hci1: command tx timeout [ 70.965571][ T5772] Bluetooth: hci2: command tx timeout [ 70.968511][ T5777] Bluetooth: hci3: command tx timeout [ 71.085540][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.340795][ T5882] loop2: detected capacity change from 0 to 1024 [ 71.379070][ T5882] EXT4-fs: Ignoring removed orlov option [ 71.451632][ T5882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.518966][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.525728][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.619956][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.634034][ T5891] loop8: detected capacity change from 0 to 8 [ 71.683472][ T5891] Dev loop8: unable to read RDB block 8 [ 71.730959][ T5891] loop8: unable to read partition table [ 71.773711][ T5891] loop8: partition table beyond EOD, truncated [ 71.797897][ T5891] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 71.889112][ T5900] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 71.904284][ T5899] IPVS: stopping master sync thread 5900 ... [ 72.473810][ T5821] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 72.552449][ T5895] loop0: detected capacity change from 0 to 32768 [ 72.573065][ T5902] loop2: detected capacity change from 0 to 32768 [ 72.589346][ T5895] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.16 (5895) [ 72.630587][ T5902] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.18 (5902) [ 72.672069][ T5895] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.686879][ T5821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 72.698495][ T5895] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 72.722797][ T5895] BTRFS info (device loop0): turning on sync discard [ 72.722854][ T5902] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 72.739974][ T5895] BTRFS info (device loop0): setting nodatacow, compression disabled [ 72.739997][ T5895] BTRFS info (device loop0): turning off barriers [ 72.740174][ T5895] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 72.740191][ T5895] BTRFS info (device loop0): trying to use backup root at mount time [ 72.740211][ T5895] BTRFS info (device loop0): metadata ratio 3 [ 72.740236][ T5895] BTRFS info (device loop0): enabling auto defrag [ 72.766945][ T5821] usb 4-1: not running at top speed; connect to a high speed hub [ 72.812643][ T5895] BTRFS info (device loop0): max_inline at 0 [ 72.826297][ T5902] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 72.839124][ T5895] BTRFS info (device loop0): using free space tree [ 72.846922][ T5821] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 72.862985][ T5902] BTRFS info (device loop2): force zlib compression, level 3 [ 72.878871][ T5821] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.898096][ T5902] BTRFS info (device loop2): force clearing of disk cache [ 72.943363][ T5902] BTRFS info (device loop2): setting nodatasum [ 72.950087][ T5821] usb 4-1: config 1 interface 0 has no altsetting 0 [ 72.964153][ T5902] BTRFS info (device loop2): allowing degraded mounts [ 72.964225][ T5777] Bluetooth: hci0: command tx timeout [ 72.970971][ T5902] BTRFS info (device loop2): enabling disk space caching [ 72.970988][ T5902] BTRFS info (device loop2): disk space caching is enabled [ 73.030184][ T58] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 73.047251][ T5777] Bluetooth: hci2: command tx timeout [ 73.053206][ T5772] Bluetooth: hci1: command tx timeout [ 73.053238][ T5778] Bluetooth: hci3: command tx timeout [ 73.070531][ T5821] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 73.090482][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.108315][ T5821] usb 4-1: Product: syz [ 73.109727][ T5895] BTRFS error (device loop0): failed to load root extent [ 73.114339][ T5821] usb 4-1: Manufacturer: syz [ 73.121166][ T5895] BTRFS warning (device loop0): try to load backup roots slot 1 [ 73.141933][ T5821] usb 4-1: SerialNumber: syz [ 73.175883][ T1132] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 73.208631][ T5906] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 73.239590][ T5895] BTRFS warning (device loop0): couldn't read tree root [ 73.292658][ T5895] BTRFS warning (device loop0): try to load backup roots slot 2 [ 73.300804][ T1132] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 73.313475][ T5902] BTRFS info (device loop2): auto enabling async discard [ 73.334955][ T5902] BTRFS info (device loop2): rebuilding free space tree [ 73.342408][ T5895] BTRFS warning (device loop0): couldn't read tree root [ 73.418111][ T5895] BTRFS warning (device loop0): try to load backup roots slot 3 [ 73.457088][ T5902] BTRFS info (device loop2): disabling free space tree [ 73.467852][ T5902] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 73.479297][ T5902] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 73.496057][ T5895] BTRFS info (device loop0): enabling ssd optimizations [ 73.545901][ T5895] BTRFS info (device loop0): rebuilding free space tree [ 73.649486][ T5895] BTRFS info (device loop0): checking UUID tree [ 73.655181][ T5821] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 73.757483][ T5902] BTRFS info (device loop2): balance: start -susage=0..1048576,devid=0,limit=351830835986432,limit=0..81917,stripes=0..32767 [ 73.803554][ T5902] BTRFS info (device loop2): balance: ended with status: 0 [ 73.952061][ T5774] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 73.976699][ T5766] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.180920][ T5952] loop1: detected capacity change from 0 to 128 [ 74.204107][ T5952] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.236401][ T5126] bcm5974 4-1:1.0: could not read from device [ 74.335431][ T5126] bcm5974 4-1:1.0: could not read from device [ 74.356349][ T5821] usb 4-1: USB disconnect, device number 2 [ 74.988822][ T5962] syzkaller1: entered promiscuous mode [ 74.998452][ T5962] syzkaller1: entered allmulticast mode [ 75.053128][ T5967] loop0: detected capacity change from 0 to 256 [ 75.392602][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.417596][ T5973] loop1: detected capacity change from 0 to 1024 [ 75.582653][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 75.621572][ T5973] hfsplus: catalog searching failed [ 75.623006][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.664170][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.670833][ T23] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 75.681335][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.717005][ T23] usb 1-1: config 0 descriptor?? [ 75.728839][ T58] hfsplus: b-tree write err: -5, ino 3 [ 75.752399][ T5764] hfsplus: node 4:3 still has 1 user(s)! [ 75.932871][ T5967] process 'syz.0.30' launched '' with NULL argv: empty string added [ 75.979371][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 75.993721][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 76.015584][ T23] usb 1-1: USB disconnect, device number 2 [ 76.529245][ T5994] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.832668][ T5821] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.842168][ T5988] loop1: detected capacity change from 0 to 32768 [ 76.906940][ T5988] [ 76.906940][ T5988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.906940][ T5988] [ 77.089769][ T5988] [ 77.089769][ T5988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.089769][ T5988] [ 77.123718][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.133617][ T5988] [ 77.133617][ T5988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.133617][ T5988] [ 77.135595][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.160329][ T5988] [ 77.160329][ T5988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.160329][ T5988] [ 77.182169][ T5988] [ 77.182169][ T5988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.182169][ T5988] [ 77.186288][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.217318][ T5988] [ 77.217318][ T5988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.217318][ T5988] [ 77.254421][ T113] [ 77.254421][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.254421][ T113] [ 77.272765][ T5821] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.302159][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.331582][ T5821] usb 4-1: config 0 descriptor?? [ 77.388957][ T5813] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.403620][ T11] [ 77.403620][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.403620][ T11] [ 77.441577][ T11] [ 77.441577][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.441577][ T11] [ 77.465220][ T5764] [ 77.465220][ T5764] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.465220][ T5764] [ 77.485828][ T112] [ 77.485828][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.485828][ T112] [ 77.514279][ T5764] [ 77.514279][ T5764] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.514279][ T5764] [ 77.632634][ T5813] usb 1-1: Using ep0 maxpacket: 8 [ 77.645798][ T5813] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 77.667068][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.690884][ T5813] usb 1-1: Product: syz [ 77.703060][ T5813] usb 1-1: Manufacturer: syz [ 77.718383][ T5813] usb 1-1: SerialNumber: syz [ 77.733692][ T5813] usb 1-1: config 0 descriptor?? [ 77.757649][ T5813] gspca_main: sq930x-2.14.0 probing 2770:930c [ 77.855946][ T5821] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 77.866029][ T6011] loop2: detected capacity change from 0 to 8192 [ 77.930930][ T5821] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 77.948118][ T6013] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 78.214645][ T6017] syz.1.52 uses obsolete (PF_INET,SOCK_PACKET) [ 78.272873][ T5821] usb 4-1: USB disconnect, device number 3 [ 78.517990][ T6025] loop1: detected capacity change from 0 to 8 [ 78.534863][ T6027] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 78.573816][ T6025] SQUASHFS error: zlib decompression failed, data probably corrupt [ 78.596814][ T6025] SQUASHFS error: Failed to read block 0x9b: -5 [ 78.625888][ T6025] SQUASHFS error: Unable to read metadata cache entry [99] [ 78.655593][ T6025] SQUASHFS error: Unable to read inode 0x127 [ 78.842762][ T5813] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 79.082681][ T5813] gspca_sq930x: Sensor ov9630 not yet treated [ 79.098127][ T5813] sq930x: probe of 1-1:0.0 failed with error -22 [ 79.105345][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'. [ 79.130928][ T5813] usb 1-1: USB disconnect, device number 3 [ 79.153238][ T6041] bond_slave_0: entered promiscuous mode [ 79.159197][ T6041] bond_slave_1: entered promiscuous mode [ 79.214142][ T6041] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 79.532803][ T6035] loop3: detected capacity change from 0 to 32768 [ 79.578703][ T6035] (syz.3.61,6035,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 79.643201][ T6035] (syz.3.61,6035,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 79.687468][ T6035] JBD2: Ignoring recovery information on journal [ 79.760109][ T6035] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 79.880607][ T6057] loop0: detected capacity change from 0 to 164 [ 79.902699][ T5821] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 79.930721][ T6057] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 79.976151][ T6057] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 79.994600][ T6057] Symlink component flag not implemented [ 80.000473][ T6057] Symlink component flag not implemented [ 80.006907][ T6057] Symlink component flag not implemented (7) [ 80.018592][ T6057] Symlink component flag not implemented (116) [ 80.068691][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 80.124950][ T5821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.152693][ T5821] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.192769][ T5821] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 80.201853][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.230751][ T6059] loop0: detected capacity change from 0 to 128 [ 80.238860][ T5821] usb 3-1: config 0 descriptor?? [ 80.258188][ T6059] EXT4-fs (loop0): Test dummy encryption mode enabled [ 80.269965][ T5821] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 80.284663][ T6046] loop1: detected capacity change from 0 to 32768 [ 80.312059][ T6046] XFS: ikeep mount option is deprecated. [ 80.316492][ T6059] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.371390][ T6059] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.387173][ T6046] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 80.612700][ T6046] XFS (loop1): Ending clean mount [ 80.645909][ T6046] XFS (loop1): Quotacheck needed: Please wait. [ 80.726981][ T6046] XFS (loop1): Quotacheck: Done. [ 80.769446][ T6059] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 80.908070][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 80.946886][ T5766] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.060470][ T23] usb 3-1: USB disconnect, device number 2 [ 81.111561][ T6085] program syz.3.79 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.402384][ T6098] loop0: detected capacity change from 0 to 256 [ 81.482923][ T6098] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 81.654502][ T6104] Bluetooth: MGMT ver 1.22 [ 81.674976][ T6102] loop2: detected capacity change from 0 to 4096 [ 81.716241][ T6102] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 81.768234][ T787] cfg80211: failed to load regulatory.db [ 81.816675][ T6106] loop0: detected capacity change from 0 to 512 [ 81.921322][ T6106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 82.029745][ T6106] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.032883][ T6111] input: syz1 as /devices/virtual/input/input7 [ 82.104454][ T6096] loop1: detected capacity change from 0 to 40427 [ 82.128595][ T6102] syz.2.84 (6102) used greatest stack depth: 20464 bytes left [ 82.150073][ T6096] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 82.202048][ T6096] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 82.247644][ T6096] F2FS-fs (loop1): invalid crc value [ 82.277490][ T6096] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.357538][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 82.482075][ T6096] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 82.489990][ T6096] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.521450][ T6118] loop3: detected capacity change from 0 to 2048 [ 82.578631][ T6118] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.700774][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 82.700788][ T27] audit: type=1800 audit(1751035345.988:24): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.88" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 82.905626][ T6130] loop0: detected capacity change from 0 to 2048 [ 82.984604][ T6130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 83.204965][ T6130] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 83.225262][ T6130] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 380 with error 28 [ 83.241096][ T6130] EXT4-fs (loop0): This should not happen!! Data will be lost [ 83.241096][ T6130] [ 83.251367][ T6130] EXT4-fs (loop0): Total free blocks count 0 [ 83.262029][ T6130] EXT4-fs (loop0): Free/Dirty block details [ 83.284611][ T6130] EXT4-fs (loop0): free_blocks=2415919104 [ 83.310018][ T6130] EXT4-fs (loop0): dirty_blocks=384 [ 83.328284][ T6130] EXT4-fs (loop0): Block reservation details [ 83.352747][ T6130] EXT4-fs (loop0): i_reserved_data_blocks=24 [ 83.535393][ T6132] loop3: detected capacity change from 0 to 40427 [ 83.577512][ T6132] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 83.608351][ T6132] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 83.661730][ T6132] F2FS-fs (loop3): invalid crc value [ 83.688979][ T6141] binder: 6139:6141 ioctl c018620b 200000000100 returned -14 [ 83.710376][ T6132] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.775409][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 83.867805][ T6132] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 83.877944][ T6132] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 83.990273][ T6132] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 84.145901][ T6157] binder: 6156:6157 ioctl 40046721 200000000040 returned -22 [ 84.668009][ T6170] loop1: detected capacity change from 0 to 512 [ 84.702433][ T6170] EXT4-fs (loop1): orphan cleanup on readonly fs [ 84.803575][ T6170] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.106: bg 0: block 248: padding at end of block bitmap is not set [ 84.859938][ T6170] Quota error (device loop1): write_blk: dquota write failed [ 84.902873][ T6170] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 84.913317][ T6181] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.977479][ T6170] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.106: Failed to acquire dquot type 1 [ 84.995662][ T6170] EXT4-fs (loop1): 1 truncate cleaned up [ 85.010986][ T6170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.264131][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.441269][ T6174] loop0: detected capacity change from 0 to 32768 [ 85.530041][ T27] audit: type=1800 audit(1751035348.818:25): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.107" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 85.722336][ T6183] loop2: detected capacity change from 0 to 32768 [ 85.759099][ T6183] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.111 (6183) [ 85.832373][ T6183] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 85.860775][ T6183] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 85.911438][ T6183] BTRFS info (device loop2): setting nodatacow, compression disabled [ 85.952894][ T6183] BTRFS info (device loop2): max_inline at 0 [ 85.958949][ T6183] BTRFS info (device loop2): enabling disk space caching [ 85.970811][ T6198] loop3: detected capacity change from 0 to 4096 [ 85.977540][ T6183] BTRFS info (device loop2): turning off barriers [ 85.993199][ T6183] BTRFS info (device loop2): turning on flush-on-commit [ 86.025481][ T6183] BTRFS info (device loop2): doing ref verification [ 86.032135][ T6183] BTRFS info (device loop2): force clearing of disk cache [ 86.051512][ T6183] BTRFS info (device loop2): enabling ssd optimizations [ 86.080470][ T6183] BTRFS info (device loop2): max_inline at 4096 [ 86.104003][ T6183] BTRFS info (device loop2): disk space caching is enabled [ 86.361251][ T6216] loop1: detected capacity change from 0 to 1024 [ 86.384027][ T6183] BTRFS info (device loop2): auto enabling async discard [ 86.450571][ T6183] BTRFS info (device loop2): rebuilding free space tree [ 86.540361][ T6183] BTRFS info (device loop2): disabling free space tree [ 86.566209][ T6183] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.605628][ T6183] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.015652][ T5774] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.184260][ T6222] loop0: detected capacity change from 0 to 32768 [ 87.212990][ T6222] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.121 (6222) [ 87.248909][ T6222] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.262943][ T6222] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 87.271680][ T6222] BTRFS info (device loop0): setting nodatacow, compression disabled [ 87.281405][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.290191][ T6222] BTRFS info (device loop0): max_inline at 0 [ 87.300987][ T6222] BTRFS info (device loop0): enabling disk space caching [ 87.310603][ T6222] BTRFS info (device loop0): turning off barriers [ 87.320937][ T6222] BTRFS info (device loop0): turning on flush-on-commit [ 87.330338][ T6222] BTRFS info (device loop0): doing ref verification [ 87.341818][ T6222] BTRFS info (device loop0): force clearing of disk cache [ 87.368567][ T6222] BTRFS info (device loop0): enabling ssd optimizations [ 87.376446][ T6222] BTRFS info (device loop0): max_inline at 4096 [ 87.388194][ T6222] BTRFS info (device loop0): disk space caching is enabled [ 87.458483][ T6222] BTRFS info (device loop0): auto enabling async discard [ 87.472647][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 87.479895][ T8] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.493002][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 87.499649][ T8] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 87.508755][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.522916][ T6222] BTRFS info (device loop0): rebuilding free space tree [ 87.544595][ T8] usb 2-1: config 0 descriptor?? [ 87.575013][ T6222] BTRFS info (device loop0): disabling free space tree [ 87.582002][ T6222] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 87.612736][ T6222] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.890821][ T5766] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.000215][ T8] uclogic 0003:5543:0042.0002: No inputs registered, leaving [ 88.034310][ T8] uclogic 0003:5543:0042.0002: hidraw0: USB HID v0.07 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 88.216602][ T6231] loop2: detected capacity change from 0 to 32768 [ 88.308150][ T5813] usb 2-1: USB disconnect, device number 2 [ 88.338985][ T6231] JBD2: Ignoring recovery information on journal [ 88.569602][ T6231] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 89.030368][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 89.056625][ T6265] loop3: detected capacity change from 0 to 1024 [ 89.075732][ T6269] loop0: detected capacity change from 0 to 256 [ 89.110056][ T6265] EXT4-fs: Ignoring removed oldalloc option [ 89.155343][ T6269] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 89.199035][ T6265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.464000][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.923088][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.926127][ T6302] loop1: detected capacity change from 0 to 512 [ 89.942496][ T6302] EXT4-fs: Ignoring removed bh option [ 89.948162][ T6302] EXT4-fs: quotafile must be on filesystem root [ 90.129439][ T8] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 90.153392][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.159005][ T6310] loop1: detected capacity change from 0 to 2048 [ 90.171635][ T8] usb 3-1: Product: syz [ 90.177373][ T8] usb 3-1: Manufacturer: syz [ 90.182008][ T8] usb 3-1: SerialNumber: syz [ 90.187305][ T6310] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 90.200243][ T6310] UDF-fs: Scanning with blocksize 512 failed [ 90.207542][ T8] usb 3-1: config 0 descriptor?? [ 90.234611][ T6310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.742634][ T5813] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.925543][ T5813] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 90.934063][ T5813] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 90.944378][ T5813] usb 2-1: config 171 has no interface number 0 [ 90.950677][ T5813] usb 2-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 90.961126][ T5813] usb 2-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 768, setting to 64 [ 90.972239][ T5813] usb 2-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 90.989349][ T5813] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 90.998700][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.006861][ T5813] usb 2-1: Product: syz [ 91.011101][ T5813] usb 2-1: Manufacturer: syz [ 91.020637][ T5813] usb 2-1: SerialNumber: syz [ 91.030070][ T6320] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 91.249418][ T5813] ath6kl: Failed to submit usb control message: -71 [ 91.259290][ T8] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 91.260473][ T5813] ath6kl: unable to send the bmi data to the device: -71 [ 91.276543][ T5813] ath6kl: Unable to send get target info: -71 [ 91.283659][ T8] asix: probe of 3-1:0.0 failed with error -71 [ 91.295426][ T5813] ath6kl: Failed to init ath6kl core: -71 [ 91.311469][ T5813] ath6kl_usb: probe of 2-1:171.109 failed with error -71 [ 91.314792][ T8] usb 3-1: USB disconnect, device number 3 [ 91.326099][ T5813] usb 2-1: USB disconnect, device number 3 [ 91.419220][ T6328] loop0: detected capacity change from 0 to 1024 [ 91.772624][ T5821] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.962725][ T5821] usb 1-1: Using ep0 maxpacket: 16 [ 91.977398][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.001511][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.012000][ T5821] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.025075][ T5821] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.038533][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.057864][ T5821] usb 1-1: config 0 descriptor?? [ 92.340531][ T6344] loop3: detected capacity change from 0 to 4096 [ 92.499470][ T5821] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 92.517231][ T5821] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 92.536309][ T5821] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 92.547990][ T5821] microsoft 0003:045E:07DA.0003: no inputs found [ 92.557738][ T5821] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 92.786262][ T5821] usb 1-1: USB disconnect, device number 4 [ 92.915653][ T6355] netlink: 'syz.2.167': attribute type 13 has an invalid length. [ 92.996672][ T6357] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.194647][ T6363] netlink: 56 bytes leftover after parsing attributes in process `syz.1.171'. [ 93.259657][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.268006][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.685778][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.733296][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.098372][ T6355] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.108772][ T6355] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.109839][ T6373] loop3: detected capacity change from 0 to 512 [ 94.117726][ T6355] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.133575][ T6373] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.138418][ T6355] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.159209][ T6373] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.178815][ T6373] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.196305][ T6373] EXT4-fs (loop3): 1 truncate cleaned up [ 94.203292][ T6373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.276680][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.340684][ T6369] netlink: 'syz.0.174': attribute type 1 has an invalid length. [ 94.668462][ T6390] ALSA: mixer_oss: invalid OSS volume ' 1000000) max_states_per_insn 0' [ 94.822303][ T6401] loop1: detected capacity change from 0 to 512 [ 94.847937][ T6401] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 94.867851][ T6401] EXT4-fs (loop1): invalid journal inode [ 94.882888][ T6401] EXT4-fs (loop1): can't get journal size [ 94.903502][ T6401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 94.917516][ T6401] System zones: 1-12, 13-13 [ 94.926259][ T6401] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.936348][ T6401] EXT4-fs (loop1): 1 truncate cleaned up [ 94.945297][ T6401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.028428][ T5764] EXT4-fs error (device loop1): __ext4_iget:5053: inode #11: block 1828716567: comm syz-executor: invalid block [ 95.047821][ T5764] EXT4-fs error (device loop1): __ext4_iget:5053: inode #11: block 1828716567: comm syz-executor: invalid block [ 95.276361][ T6414] loop0: detected capacity change from 0 to 1024 [ 95.316921][ T6414] hfsplus: bad catalog entry type [ 95.355464][ T1132] hfsplus: b-tree write err: -5, ino 4 [ 95.385375][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.449030][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.484136][ T6420] bond0: option arp_validate: invalid value (16) [ 95.566185][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.679850][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.814531][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.072754][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.107957][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.119591][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.132022][ T6437] loop3: detected capacity change from 0 to 512 [ 96.140428][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.153981][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.157530][ T6437] EXT4-fs: Ignoring removed bh option [ 96.171364][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.179636][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.179940][ T6437] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 96.233067][ T6437] EXT4-fs (loop3): 1 truncate cleaned up [ 96.247565][ T6437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.262713][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 96.269918][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.284102][ T8] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 96.293294][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.312249][ T8] usb 3-1: config 0 descriptor?? [ 96.443041][ T6442] syzkaller1: entered promiscuous mode [ 96.449632][ T6442] syzkaller1: entered allmulticast mode [ 96.461279][ T6442] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 6 [ 96.469663][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.710570][ T6435] chnl_net:caif_netlink_parms(): no params data found [ 96.769261][ T8] input: HID 041e:3100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.0004/input/input9 [ 96.870143][ T8] creative-sb0540 0003:041E:3100.0004: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 96.992897][ T5813] usb 3-1: USB disconnect, device number 4 [ 97.149778][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.157717][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.171659][ T6435] bridge_slave_0: entered allmulticast mode [ 97.180274][ T6435] bridge_slave_0: entered promiscuous mode [ 97.194844][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.205902][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.213854][ T6435] bridge_slave_1: entered allmulticast mode [ 97.221112][ T6435] bridge_slave_1: entered promiscuous mode [ 97.269919][ T6435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.368978][ T6435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.429832][ T6435] team0: Port device team_slave_0 added [ 97.451655][ T58] hsr_slave_0: left promiscuous mode [ 97.458130][ T58] hsr_slave_1: left promiscuous mode [ 97.464626][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.472502][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.481510][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.489031][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.496878][ T58] bridge_slave_1: left allmulticast mode [ 97.505651][ T58] bridge_slave_1: left promiscuous mode [ 97.513217][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.526296][ T58] bridge_slave_0: left allmulticast mode [ 97.531981][ T58] bridge_slave_0: left promiscuous mode [ 97.537966][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.579293][ T58] bond_slave_0: left promiscuous mode [ 97.585109][ T58] bond_slave_1: left promiscuous mode [ 97.601053][ T58] veth1_macvtap: left promiscuous mode [ 97.610800][ T58] veth0_macvtap: left promiscuous mode [ 97.622366][ T58] veth1_vlan: left promiscuous mode [ 97.634017][ T58] veth0_vlan: left promiscuous mode [ 97.750520][ T6473] Bluetooth: MGMT ver 1.22 [ 97.759447][ T6473] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 97.950461][ T6477] loop3: detected capacity change from 0 to 512 [ 98.000083][ T6477] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.215: bg 0: block 393: padding at end of block bitmap is not set [ 98.035698][ T6477] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 98.050088][ T6477] EXT4-fs (loop3): 2 truncates cleaned up [ 98.064055][ T6477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.159476][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.247987][ T5772] Bluetooth: hci0: command tx timeout [ 98.594288][ T58] team0 (unregistering): Port device team_slave_1 removed [ 98.604445][ T6490] loop3: detected capacity change from 0 to 2048 [ 98.617507][ T6490] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0) [ 98.649777][ T58] team0 (unregistering): Port device team_slave_0 removed [ 98.704126][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.750038][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.215997][ T58] bond0 (unregistering): Released all slaves [ 99.308884][ T6435] team0: Port device team_slave_1 added [ 99.342699][ T6482] netlink: 104 bytes leftover after parsing attributes in process `syz.0.220'. [ 99.366710][ T6482] netlink: 104 bytes leftover after parsing attributes in process `syz.0.220'. [ 99.390122][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.411858][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.465106][ T6435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.488662][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.506891][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.534068][ T6435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.671703][ T6435] hsr_slave_0: entered promiscuous mode [ 99.690864][ T6435] hsr_slave_1: entered promiscuous mode [ 99.762691][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.965690][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.989610][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.015013][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.024413][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.053131][ T9] usb 1-1: SerialNumber: syz [ 100.058225][ T6508] loop3: detected capacity change from 0 to 4096 [ 100.069655][ T6508] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 100.096268][ T6508] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 100.099895][ T6435] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.118463][ T6508] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 100.119663][ T6435] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.140466][ T6508] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 100.145240][ T6435] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.160128][ T6508] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 100.172803][ T6508] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 100.181515][ T6435] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.185901][ T6508] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 100.205347][ T6508] ntfs: volume version 3.1. [ 100.211917][ T6508] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 100.223961][ T6508] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 100.244928][ T6508] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 100.284008][ T9] usb 1-1: 0:2 : does not exist [ 100.307706][ T9] usb 1-1: USB disconnect, device number 5 [ 100.325273][ T28] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.338605][ T5772] Bluetooth: hci0: command tx timeout [ 100.360118][ T6435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.387623][ T6435] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.423625][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.430865][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.489558][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.496815][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.529360][ T28] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.543833][ T6435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.550785][ T28] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.582721][ T28] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.602753][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.615708][ T6510] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 100.641885][ T28] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 100.814052][ T6435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.973266][ T5813] usb 3-1: USB disconnect, device number 5 [ 101.226200][ T6435] veth0_vlan: entered promiscuous mode [ 101.241151][ T6435] veth1_vlan: entered promiscuous mode [ 101.301955][ T6435] veth0_macvtap: entered promiscuous mode [ 101.325318][ T6435] veth1_macvtap: entered promiscuous mode [ 101.354637][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.368040][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.378062][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.400220][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.412913][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.441953][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.462816][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.482599][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.502569][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.514217][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.536362][ T6435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.552629][ T6435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.571633][ T6435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.620022][ T6435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.661558][ T6544] loop3: detected capacity change from 0 to 32768 [ 101.673527][ T6544] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.239 (6544) [ 101.702420][ T6544] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 101.714981][ T6544] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 101.729136][ T6544] BTRFS info (device loop3): using free space tree [ 101.838021][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.869943][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.883425][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.911769][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.076542][ T6544] BTRFS info (device loop3): enabling ssd optimizations [ 102.115913][ T6544] BTRFS info (device loop3): auto enabling async discard [ 102.430500][ T6546] loop0: detected capacity change from 0 to 32768 [ 102.437290][ T5772] Bluetooth: hci0: command tx timeout [ 102.492413][ T6546] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.240 (6546) [ 102.656323][ T5773] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 102.732536][ C1] sched: RT throttling activated [ 102.746767][ T6546] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 102.791550][ T6546] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 102.836685][ T6546] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 102.886821][ T6546] BTRFS info (device loop0): use zstd compression, level 3 [ 102.918345][ T6546] BTRFS info (device loop0): using free space tree [ 103.359266][ T787] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 103.379462][ T787] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.739615][ T6546] BTRFS info (device loop0): enabling ssd optimizations [ 103.746708][ T6546] BTRFS info (device loop0): auto enabling async discard [ 103.823572][ T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.829974][ T6549] loop2: detected capacity change from 0 to 262144 [ 103.842086][ T6549] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.241 (6549) [ 103.866259][ T6549] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 103.876527][ T6549] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 103.885925][ T6549] BTRFS info (device loop2): using free space tree [ 103.922625][ T6549] BTRFS info (device loop2): enabling ssd optimizations [ 103.929622][ T6549] BTRFS info (device loop2): auto enabling async discard [ 104.012604][ T787] usb 5-1: Using ep0 maxpacket: 32 [ 104.019992][ T787] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.062868][ T787] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 104.087160][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.116856][ T787] usb 5-1: Product: syz [ 104.122685][ T787] usb 5-1: Manufacturer: syz [ 104.141777][ T787] usb 5-1: SerialNumber: syz [ 104.155393][ T787] usb 5-1: config 0 descriptor?? [ 104.238858][ T5774] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 104.473084][ T5772] Bluetooth: hci0: command tx timeout [ 104.616070][ T787] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 104.690744][ T5766] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 105.216501][ T5813] kernel write not supported for file /144/oom_score_adj (pid: 5813 comm: kworker/1:3) [ 105.279045][ T5813] usb 5-1: USB disconnect, device number 2 [ 105.282971][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.352493][ T6637] input: syz0 as /devices/virtual/input/input10 [ 105.408396][ T6639] trusted_key: syz.2.254 sent an empty control message without MSG_MORE. [ 105.492604][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 105.500514][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 105.509691][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.527287][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 105.534385][ T9] pvrusb2: ********** [ 105.538341][ T6643] loop2: detected capacity change from 0 to 2048 [ 105.542959][ T6643] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 105.544952][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 105.552476][ T6643] UDF-fs: Scanning with blocksize 512 failed [ 105.570238][ T9] pvrusb2: Important functionality might not be entirely working. [ 105.575284][ T6643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.578156][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 105.606063][ T9] pvrusb2: ********** [ 105.737216][ T2316] pvrusb2: Invalid write control endpoint [ 105.807279][ T2316] pvrusb2: Invalid write control endpoint [ 105.815883][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 105.842814][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 105.863038][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 105.880688][ T2316] pvrusb2: Device being rendered inoperable [ 105.889493][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 105.899388][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 105.911868][ T2316] pvrusb2: Attached sub-driver cx25840 [ 105.925987][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 105.942667][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 106.016013][ T6629] pvrusb2: Attempted to execute control transfer when device not ok [ 106.027690][ T9] usb 1-1: USB disconnect, device number 6 [ 106.239878][ T6659] loop2: detected capacity change from 0 to 4096 [ 106.274109][ T6655] loop4: detected capacity change from 0 to 32768 [ 106.286398][ T6655] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.261 (6655) [ 106.316653][ T6655] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 106.326980][ T6655] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 106.349707][ T6655] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 106.359196][ T6655] BTRFS info (device loop4): use zstd compression, level 3 [ 106.367109][ T6655] BTRFS info (device loop4): using free space tree [ 106.402475][ T6655] BTRFS info (device loop4): enabling ssd optimizations [ 106.411098][ T6655] BTRFS info (device loop4): auto enabling async discard [ 106.443139][ T5772] Bluetooth: hci2: Malformed LE Event: 0x1b [ 106.650041][ T6435] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 107.738297][ T6709] loop0: detected capacity change from 0 to 164 [ 107.749827][ T6709] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 107.761854][ T6709] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 107.772310][ T6709] Symlink component flag not implemented [ 107.778082][ T6709] Symlink component flag not implemented [ 107.784192][ T6709] Symlink component flag not implemented (7) [ 107.790169][ T6709] Symlink component flag not implemented (116) [ 107.848409][ T6711] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 107.893367][ T6711] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 108.089761][ T6719] syz_tun: entered promiscuous mode [ 108.107050][ T6719] syz_tun: left promiscuous mode [ 108.263101][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 108.464792][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 108.473996][ T9] usb 1-1: config 1 has no interface number 0 [ 108.480078][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.491276][ T9] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 108.500406][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 108.516714][ T5821] kernel read not supported for file /sequencer (pid: 5821 comm: kworker/0:5) [ 108.529563][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.539183][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.559262][ T9] usb 1-1: Product: syz [ 108.563601][ T9] usb 1-1: Manufacturer: syz [ 108.568215][ T9] usb 1-1: SerialNumber: syz [ 108.732184][ T6741] loop4: detected capacity change from 0 to 512 [ 108.740575][ T6741] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.747436][ T6741] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.757257][ T6741] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 108.769636][ T6741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 108.783793][ T6741] System zones: 1-12 [ 108.789003][ T6741] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.294: corrupted in-inode xattr: e_value size too large [ 108.805016][ T6741] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.294: couldn't read orphan inode 15 (err -117) [ 108.818806][ T6741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.857134][ T6741] EXT4-fs warning (device loop4): __ext4fs_dirhash:283: invalid/unsupported hash tree version 11 [ 108.891296][ T6435] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.061809][ T24] null_blk: rq ffff888022970000 timed out [ 109.071504][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 109.078436][ T6748] loop4: detected capacity change from 0 to 128 [ 109.083723][ T24] null_blk: rq ffff888022970180 timed out [ 109.094091][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 109.104651][ T24] null_blk: rq ffff888022970300 timed out [ 109.110382][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 109.118704][ T6748] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.121008][ T24] null_blk: rq ffff888022970480 timed out [ 109.135669][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 109.146774][ T24] null_blk: rq ffff888022970600 timed out [ 109.152636][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 109.163469][ T24] null_blk: rq ffff888022970780 timed out [ 109.169440][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 109.179965][ T24] null_blk: rq ffff888022970900 timed out [ 109.185756][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 109.196307][ T24] null_blk: rq ffff888022970a80 timed out [ 109.202044][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 109.213799][ T24] null_blk: rq ffff888022970c00 timed out [ 109.219547][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 109.230089][ T24] null_blk: rq ffff888022970d80 timed out [ 109.235861][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 109.246843][ T24] null_blk: rq ffff888022970f00 timed out [ 109.252698][ T24] null_blk: rq ffff888022971080 timed out [ 109.258444][ T24] null_blk: rq ffff888022971200 timed out [ 109.264231][ T24] null_blk: rq ffff888022971380 timed out [ 109.269981][ T24] null_blk: rq ffff888022971500 timed out [ 109.275805][ T24] null_blk: rq ffff888022971680 timed out [ 109.281653][ T24] null_blk: rq ffff888022971800 timed out [ 109.287456][ T24] null_blk: rq ffff888022971980 timed out [ 109.293253][ T24] null_blk: rq ffff888022971b00 timed out [ 109.299032][ T24] null_blk: rq ffff888022971c80 timed out [ 109.304834][ T24] null_blk: rq ffff888022971e00 timed out [ 109.310579][ T24] null_blk: rq ffff888022971f80 timed out [ 109.318942][ T24] null_blk: rq ffff888022972100 timed out [ 109.324779][ T24] null_blk: rq ffff888022972280 timed out [ 109.330628][ T24] null_blk: rq ffff888022972400 timed out [ 109.337103][ T58] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.338700][ T24] null_blk: rq ffff888022972580 timed out [ 109.352729][ T24] null_blk: rq ffff888022972700 timed out [ 109.358665][ T24] null_blk: rq ffff888022972880 timed out [ 109.364488][ T24] null_blk: rq ffff888022972a00 timed out [ 109.370233][ T24] null_blk: rq ffff888022972b80 timed out [ 109.376035][ T24] null_blk: rq ffff888022972d00 timed out [ 109.382368][ T24] null_blk: rq ffff888022972e80 timed out [ 109.388305][ T24] null_blk: rq ffff888022973000 timed out [ 109.394306][ T24] null_blk: rq ffff888022973180 timed out [ 109.400055][ T24] null_blk: rq ffff888022973300 timed out [ 109.401482][ T9] cdc_ncm 1-1:1.1: bind() failure [ 109.405842][ T24] null_blk: rq ffff888022973480 timed out [ 109.405864][ T24] null_blk: rq ffff888022973600 timed out [ 109.405883][ T24] null_blk: rq ffff888022973780 timed out [ 109.405902][ T24] null_blk: rq ffff888022973900 timed out [ 109.405920][ T24] null_blk: rq ffff888022973a80 timed out [ 109.439693][ T24] null_blk: rq ffff888022973c00 timed out [ 109.452615][ T24] null_blk: rq ffff888022973d80 timed out [ 109.458377][ T24] null_blk: rq ffff888022973f00 timed out [ 109.464190][ T24] null_blk: rq ffff888022974080 timed out [ 109.469933][ T24] null_blk: rq ffff888022974200 timed out [ 109.475742][ T24] null_blk: rq ffff888022974380 timed out [ 109.481501][ T24] null_blk: rq ffff888022974500 timed out [ 109.487296][ T24] null_blk: rq ffff888022974680 timed out [ 109.493083][ T24] null_blk: rq ffff888022974800 timed out [ 109.498835][ T24] null_blk: rq ffff888022974980 timed out [ 109.504675][ T24] null_blk: rq ffff888022974b00 timed out [ 109.510414][ T24] null_blk: rq ffff888022974c80 timed out [ 109.516224][ T24] null_blk: rq ffff888022974e00 timed out [ 109.521958][ T24] null_blk: rq ffff888022974f80 timed out [ 109.527781][ T24] null_blk: rq ffff888022975100 timed out [ 109.533606][ T24] null_blk: rq ffff888022975280 timed out [ 109.644435][ T5820] usb 1-1: USB disconnect, device number 7 [ 109.762812][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 109.930297][ T6760] loop4: detected capacity change from 0 to 32768 [ 109.938574][ T6760] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.302 (6760) [ 109.956315][ T6760] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 109.970099][ T9] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 109.979483][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.987616][ T6760] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 110.007399][ T9] usb 3-1: config 0 descriptor?? [ 110.012624][ T6760] BTRFS info (device loop4): using free space tree [ 110.059633][ T6760] BTRFS info (device loop4): enabling ssd optimizations [ 110.067626][ T6760] BTRFS info (device loop4): auto enabling async discard [ 110.215617][ T6435] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 110.493614][ T6792] warning: `syz.0.311' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.600107][ T6799] loop0: detected capacity change from 0 to 8 [ 110.663542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.672816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.883761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 110.892188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 111.062497][ T9] pegasus: probe of 3-1:0.0 failed with error -71 [ 111.079159][ T9] usb 3-1: USB disconnect, device number 6 [ 111.122698][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 111.133603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.142121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.342704][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 111.354643][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.370787][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.399575][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.422715][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.439940][ T8] usb 1-1: Product: syz [ 111.444242][ T8] usb 1-1: Manufacturer: syz [ 111.448841][ T8] usb 1-1: SerialNumber: syz [ 111.462486][ T8] usb 1-1: selecting invalid altsetting 1 [ 111.700316][ T6816] loop4: detected capacity change from 0 to 128 [ 111.800838][ T6816] EXT4-fs: journaled quota format not specified [ 111.820591][ T6826] netlink: 84 bytes leftover after parsing attributes in process `syz.3.322'. [ 111.992852][ T787] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.084645][ T8] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 112.117773][ T8] usb 1-1: selecting invalid altsetting 1 [ 112.123786][ T8] cdc_ncm 1-1:1.0: bind() failure [ 112.139700][ T8] usb 1-1: USB disconnect, device number 8 [ 112.143584][ T6828] loop4: detected capacity change from 0 to 32768 [ 112.165241][ T6828] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 112.182603][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 112.189914][ T787] usb 3-1: config 0 has no interfaces? [ 112.208424][ T787] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 112.222365][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.223437][ T6828] XFS (loop4): Ending clean mount [ 112.232684][ T787] usb 3-1: config 0 descriptor?? [ 112.369278][ T6435] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 112.496822][ T8] usb 3-1: USB disconnect, device number 7 [ 112.591207][ T6838] loop4: detected capacity change from 0 to 8192 [ 112.600441][ T6838] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.780463][ T6845] loop4: detected capacity change from 0 to 64 [ 113.277965][ T6856] netlink: 'syz.4.332': attribute type 1 has an invalid length. [ 113.295056][ T6856] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.332'. [ 114.228338][ T6880] loop4: detected capacity change from 0 to 512 [ 114.258747][ T6880] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 114.289123][ T6874] loop2: detected capacity change from 0 to 32768 [ 114.326923][ T6874] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 114.483214][ T6874] OCFS2: ERROR (device loop2): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (3, 4, 0) [ 114.536814][ T6874] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 114.553112][ T6874] OCFS2: File system is now read-only. [ 114.558640][ T6874] (syz.2.338,6874,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 114.582854][ T6874] (syz.2.338,6874,1):__ocfs2_move_extents_range:822 ERROR: status = -30 [ 114.593143][ T6874] (syz.2.338,6874,1):ocfs2_move_extents:931 ERROR: status = -30 [ 114.601179][ T6874] (syz.2.338,6874,1):ocfs2_ioctl_move_extents:1055 ERROR: status = -30 [ 114.648489][ T6878] loop3: detected capacity change from 0 to 32768 [ 114.670302][ T6878] XFS: attr2 mount option is deprecated. [ 114.677504][ T6878] XFS: ikeep mount option is deprecated. [ 114.709954][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 114.729525][ T6878] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.742768][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.821609][ T6894] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.918877][ T6878] XFS (loop3): Ending clean mount [ 114.941420][ T6878] XFS (loop3): Quotacheck needed: Please wait. [ 114.944490][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.973459][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.992321][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.006672][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.023485][ T6878] XFS (loop3): Quotacheck: Done. [ 115.024379][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.065890][ T9] usb 5-1: config 0 descriptor?? [ 115.211140][ T6901] loop2: detected capacity change from 0 to 4096 [ 115.229308][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.272743][ T6904] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.493252][ T6901] syz.2.346 (6901) used greatest stack depth: 19824 bytes left [ 115.529223][ T9] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 115.552913][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 115.890058][ T6919] loop0: detected capacity change from 0 to 1024 [ 116.222880][ T5820] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 116.358449][ T6928] loop0: detected capacity change from 0 to 32768 [ 116.366231][ T6928] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.357 (6928) [ 116.380938][ T6928] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.391224][ T6928] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 116.399975][ T6928] BTRFS info (device loop0): metadata ratio 4 [ 116.406102][ T6928] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 116.416232][ T6928] BTRFS info (device loop0): force lzo compression, level 0 [ 116.424534][ T6928] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 116.426237][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.440032][ T6928] BTRFS info (device loop0): trying to use backup root at mount time [ 116.446664][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.454950][ T6928] BTRFS info (device loop0): doing ref verification [ 116.472181][ T6928] BTRFS info (device loop0): disabling tree log [ 116.479196][ T6928] BTRFS info (device loop0): using free space tree [ 116.502699][ T5820] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 116.511781][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.539157][ T5820] usb 3-1: config 0 descriptor?? [ 116.556888][ T58] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 116.584203][ T6928] BTRFS warning (device loop0): couldn't read tree root [ 116.591217][ T6928] BTRFS warning (device loop0): try to load backup roots slot 1 [ 116.602390][ T58] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 116.615800][ T6928] BTRFS warning (device loop0): couldn't read tree root [ 116.634349][ T6928] BTRFS warning (device loop0): try to load backup roots slot 2 [ 116.642507][ T1323] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 116.653332][ T6945] loop3: detected capacity change from 0 to 256 [ 116.666614][ T6928] BTRFS warning (device loop0): couldn't read tree root [ 116.674852][ T6928] BTRFS warning (device loop0): try to load backup roots slot 3 [ 116.677997][ T6945] FAT-fs (loop3): Directory bread(block 64) failed [ 116.690768][ T6945] FAT-fs (loop3): Directory bread(block 65) failed [ 116.700757][ T6945] FAT-fs (loop3): Directory bread(block 66) failed [ 116.707586][ T6945] FAT-fs (loop3): Directory bread(block 67) failed [ 116.716945][ T6945] FAT-fs (loop3): Directory bread(block 68) failed [ 116.716958][ T6928] BTRFS info (device loop0): enabling ssd optimizations [ 116.724324][ T6928] BTRFS info (device loop0): auto enabling async discard [ 116.734312][ T6945] FAT-fs (loop3): Directory bread(block 69) failed [ 116.740102][ T6928] BTRFS info (device loop0): rebuilding free space tree [ 116.745026][ T6945] FAT-fs (loop3): Directory bread(block 70) failed [ 116.758903][ T6945] FAT-fs (loop3): Directory bread(block 71) failed [ 116.767298][ T6945] FAT-fs (loop3): Directory bread(block 72) failed [ 116.775021][ T6945] FAT-fs (loop3): Directory bread(block 73) failed [ 116.789179][ T6928] BTRFS info (device loop0): checking UUID tree [ 116.798428][ C1] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 116.902251][ T58] kworker/u4:4: attempt to access beyond end of device [ 116.902251][ T58] loop3: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 116.934654][ T5766] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.018409][ T5820] savu 0003:1E7D:2D5A.0007: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 117.314937][ T787] usb 3-1: USB disconnect, device number 8 [ 117.504376][ T6963] loop3: detected capacity change from 0 to 128 [ 117.512769][ T6963] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 117.534096][ T6963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.557505][ T6954] loop0: detected capacity change from 0 to 32768 [ 117.570492][ T6954] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.362 (6954) [ 117.587128][ T6954] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.597762][ T6954] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 117.606673][ T6954] BTRFS info (device loop0): force clearing of disk cache [ 117.614187][ T6954] BTRFS info (device loop0): enabling auto defrag [ 117.620680][ T6954] BTRFS info (device loop0): max_inline at 0 [ 117.633967][ T6954] BTRFS info (device loop0): enabling disk space caching [ 117.645749][ T6954] BTRFS info (device loop0): disk space caching is enabled [ 117.659669][ T23] usb 5-1: USB disconnect, device number 3 [ 117.679600][ T6966] loop3: detected capacity change from 0 to 512 [ 117.697914][ T6954] BTRFS info (device loop0): enabling ssd optimizations [ 117.708268][ T6954] BTRFS info (device loop0): rebuilding free space tree [ 117.721041][ T6954] BTRFS info (device loop0): disabling free space tree [ 117.729513][ T6954] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.735139][ T6966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.739203][ T6954] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.756489][ T6966] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.924632][ T1323] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 117.993502][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.078965][ T5766] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.460598][ T7000] loop3: detected capacity change from 0 to 512 [ 118.512374][ T7000] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.375: Parent and EA inode have the same ino 15 [ 118.516511][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 118.545503][ T7000] EXT4-fs (loop3): 1 orphan inode deleted [ 118.552496][ T7000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.599880][ T7000] EXT4-fs (loop3): shut down requested (2) [ 118.638170][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.653046][ T787] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 118.725237][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 118.725249][ T27] audit: type=1326 audit(1751035382.018:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf518e929 code=0x7ffc0000 [ 118.777169][ T27] audit: type=1326 audit(1751035382.048:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf518e929 code=0x7ffc0000 [ 118.819854][ T27] audit: type=1326 audit(1751035382.048:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f2bf518e929 code=0x7ffc0000 [ 118.841968][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.892264][ T27] audit: type=1326 audit(1751035382.048:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf518e929 code=0x7ffc0000 [ 118.916063][ T27] audit: type=1326 audit(1751035382.058:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2bf518e929 code=0x7ffc0000 [ 118.945680][ T787] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 118.956711][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.972641][ T27] audit: type=1326 audit(1751035382.058:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf518e929 code=0x7ffc0000 [ 118.997373][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.007718][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 119.024138][ T27] audit: type=1326 audit(1751035382.058:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf518e929 code=0x7ffc0000 [ 119.046906][ T27] audit: type=1326 audit(1751035382.058:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bf518e929 code=0x7ffc0000 [ 119.082094][ T787] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 119.091371][ T787] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 119.104784][ T787] usb 1-1: Manufacturer: syz [ 119.110895][ T27] audit: type=1326 audit(1751035382.058:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf518e929 code=0x7ffc0000 [ 119.134441][ T787] usb 1-1: config 0 descriptor?? [ 119.139624][ T27] audit: type=1326 audit(1751035382.058:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f2bf518e929 code=0x7ffc0000 [ 119.161584][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.321282][ T7027] loop3: detected capacity change from 0 to 512 [ 119.333965][ T7027] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.380344][ T7027] EXT4-fs (loop3): 1 truncate cleaned up [ 119.394022][ T7027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.455138][ T7027] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 119.495421][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.610450][ T7033] loop3: detected capacity change from 0 to 512 [ 119.619373][ T787] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 119.627316][ T7022] loop4: detected capacity change from 0 to 32768 [ 119.636723][ T787] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 119.637352][ T7033] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 119.647270][ T787] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 119.657373][ T7033] System zones: 1-12 [ 119.666987][ T7022] [ 119.666987][ T7022] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.666987][ T7022] [ 119.683207][ T7033] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.389: corrupted in-inode xattr: invalid ea_ino [ 119.705522][ T7033] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.389: couldn't read orphan inode 15 (err -117) [ 119.725015][ T7022] [ 119.725015][ T7022] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.725015][ T7022] [ 119.726424][ T7033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.749302][ T7022] [ 119.749302][ T7022] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.749302][ T7022] [ 119.781234][ T7022] [ 119.781234][ T7022] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.781234][ T7022] [ 119.802900][ T7022] [ 119.802900][ T7022] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.802900][ T7022] [ 119.814969][ T7022] [ 119.814969][ T7022] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.814969][ T7022] [ 119.828551][ T7033] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.389: invalid indirect mapped block 234881024 (level 0) [ 119.850071][ T113] [ 119.850071][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.850071][ T113] [ 119.910544][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.931270][ T11] [ 119.931270][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.931270][ T11] [ 119.945775][ T28] usb 1-1: USB disconnect, device number 9 [ 119.957030][ T11] [ 119.957030][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.957030][ T11] [ 119.968431][ T6435] [ 119.968431][ T6435] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.968431][ T6435] [ 119.991230][ T113] [ 119.991230][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.991230][ T113] [ 120.009779][ T6435] [ 120.009779][ T6435] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.009779][ T6435] [ 120.245791][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 120.434893][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.445194][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.455469][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.464600][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.472848][ T787] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.480479][ T9] usb 3-1: SerialNumber: syz [ 120.580966][ T7061] loop3: detected capacity change from 0 to 512 [ 120.594789][ T7061] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.614463][ T7061] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.401: invalid block [ 120.631687][ T7061] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.401: invalid indirect mapped block 10 (level 1) [ 120.653197][ T7061] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.401: invalid indirect mapped block 8 (level 1) [ 120.678473][ T7061] EXT4-fs (loop3): 1 truncate cleaned up [ 120.687888][ T787] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 120.703702][ T7061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.722882][ T787] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.735501][ T9] usb 3-1: 0:2 : does not exist [ 120.754168][ T787] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 120.790536][ T787] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 120.808537][ T9] usb 3-1: USB disconnect, device number 9 [ 120.814548][ T787] usb 5-1: Product: syz [ 120.832608][ T787] usb 5-1: Manufacturer: syz [ 120.852906][ T787] usb 5-1: SerialNumber: syz [ 120.883429][ T787] usb 5-1: config 0 descriptor?? [ 120.895357][ T787] usb 5-1: selecting invalid altsetting 0 [ 120.906619][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.167803][ T7079] loop3: detected capacity change from 0 to 2048 [ 121.195996][ T9] usb 5-1: USB disconnect, device number 4 [ 121.219183][ T7079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.282693][ T7079] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.365839][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.499498][ T7087] sctp: [Deprecated]: syz.2.408 (pid 7087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.499498][ T7087] Use struct sctp_sack_info instead [ 122.153882][ T7101] loop4: detected capacity change from 0 to 4096 [ 122.360160][ T7110] loop2: detected capacity change from 0 to 1024 [ 123.010858][ T7114] loop4: detected capacity change from 0 to 32768 [ 123.041849][ T7114] JBD2: Ignoring recovery information on journal [ 123.092226][ T7114] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 123.135163][ T7134] loop2: detected capacity change from 0 to 1024 [ 123.206239][ T1132] hfsplus: b-tree write err: -5, ino 4 [ 123.331703][ T7140] loop3: detected capacity change from 0 to 512 [ 123.337260][ T7125] loop0: detected capacity change from 0 to 32768 [ 123.354106][ T6435] ocfs2: Unmounting device (7,4) on (node local) [ 123.358776][ T7140] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.381259][ T7125] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.425 (7125) [ 123.417632][ T7125] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.418806][ T7140] EXT4-fs (loop3): 1 truncate cleaned up [ 123.435412][ T7140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.448036][ T7125] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 123.492835][ T7125] BTRFS info (device loop0): enabling auto defrag [ 123.529749][ T7125] BTRFS info (device loop0): doing ref verification [ 123.552499][ T7125] BTRFS info (device loop0): use no compression [ 123.562148][ T7125] BTRFS info (device loop0): force clearing of disk cache [ 123.612701][ T7125] BTRFS info (device loop0): max_inline at 4096 [ 123.619532][ T7125] BTRFS info (device loop0): disabling free space tree [ 123.693312][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.721475][ T7125] BTRFS info (device loop0): enabling ssd optimizations [ 123.730802][ T7125] BTRFS info (device loop0): auto enabling async discard [ 123.742418][ T7125] BTRFS info (device loop0): rebuilding free space tree [ 123.785940][ T7125] BTRFS info (device loop0): disabling free space tree [ 123.813787][ T7125] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.872636][ T7125] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.956134][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 123.956149][ T27] audit: type=1800 audit(1751035387.248:38): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.425" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 123.991787][ T7173] loop2: detected capacity change from 0 to 64 [ 124.051265][ T27] audit: type=1800 audit(1751035387.338:39): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.425" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 124.117785][ T5766] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.153315][ T7177] loop2: detected capacity change from 0 to 1024 [ 124.190291][ T7177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.204734][ T7177] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.245079][ T7181] loop8: detected capacity change from 0 to 8 [ 124.254225][ T7181] Dev loop8: unable to read RDB block 8 [ 124.259829][ T7181] loop8: unable to read partition table [ 124.265905][ T7181] loop8: partition table beyond EOD, truncated [ 124.282288][ T7181] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 124.284619][ T7177] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.442: bg 0: block 393: padding at end of block bitmap is not set [ 124.351297][ T7177] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 124.386889][ T7177] EXT4-fs (loop2): This should not happen!! Data will be lost [ 124.386889][ T7177] [ 124.398462][ T7183] loop3: detected capacity change from 0 to 128 [ 124.462214][ T7183] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.476255][ T7183] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.477750][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.539430][ T7183] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 1803188595 (only 1 groups) [ 124.620956][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.301440][ T7204] loop3: detected capacity change from 0 to 4096 [ 125.341953][ T7204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.468754][ T7195] loop2: detected capacity change from 0 to 32768 [ 125.488992][ T7195] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.447 (7195) [ 125.500424][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.520540][ T7195] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 125.531842][ T7195] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 125.540855][ T7195] BTRFS info (device loop2): setting nodatacow, compression disabled [ 125.549611][ T7195] BTRFS info (device loop2): turning on flush-on-commit [ 125.556722][ T7195] BTRFS info (device loop2): using free space tree [ 125.697495][ T27] audit: type=1326 audit(1751035388.988:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035878e929 code=0x7ffc0000 [ 125.721398][ T27] audit: type=1326 audit(1751035388.988:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035878e929 code=0x7ffc0000 [ 125.745516][ T27] audit: type=1326 audit(1751035389.008:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f035878e929 code=0x7ffc0000 [ 125.760127][ T7195] BTRFS info (device loop2): enabling ssd optimizations [ 125.775578][ T27] audit: type=1326 audit(1751035389.008:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035878e929 code=0x7ffc0000 [ 125.797944][ T27] audit: type=1326 audit(1751035389.008:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f035878e929 code=0x7ffc0000 [ 125.815840][ T7195] BTRFS info (device loop2): auto enabling async discard [ 125.829368][ T27] audit: type=1326 audit(1751035389.018:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035878e929 code=0x7ffc0000 [ 125.852570][ T27] audit: type=1326 audit(1751035389.018:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035878e929 code=0x7ffc0000 [ 125.878090][ T27] audit: type=1326 audit(1751035389.028:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f035878e929 code=0x7ffc0000 [ 126.029799][ T7205] loop0: detected capacity change from 0 to 32768 [ 126.086322][ T7205] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.143312][ T5774] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 126.160228][ T7237] loop3: detected capacity change from 0 to 4096 [ 126.186137][ T7205] XFS (loop0): Ending clean mount [ 126.197983][ T7241] netlink: 'syz.4.458': attribute type 33 has an invalid length. [ 126.207761][ T7241] netlink: 152 bytes leftover after parsing attributes in process `syz.4.458'. [ 126.501775][ T5766] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.622321][ T7250] loop4: detected capacity change from 0 to 1024 [ 126.634429][ T7250] ext3: Unknown parameter 'fowner<00000000000000000000' [ 126.845585][ T7257] loop2: detected capacity change from 0 to 512 [ 126.882452][ T7259] loop4: detected capacity change from 0 to 8 [ 126.896732][ T7257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.912191][ T7257] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.955072][ T7257] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.465: corrupted inode contents [ 127.008297][ T7257] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #2: comm syz.2.465: mark_inode_dirty error [ 127.055008][ T7257] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.465: corrupted inode contents [ 127.070952][ T7257] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.465: mark_inode_dirty error [ 127.211196][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.216232][ T7272] loop0: detected capacity change from 0 to 512 [ 127.256577][ T7272] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 127.446963][ T7277] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 127.925329][ T7279] loop4: detected capacity change from 0 to 32768 [ 127.944449][ T7279] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.472 (7279) [ 127.965371][ T7279] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 127.992803][ T7279] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 128.001515][ T7279] BTRFS info (device loop4): enabling auto defrag [ 128.023716][ T7279] BTRFS info (device loop4): doing ref verification [ 128.044897][ T7279] BTRFS info (device loop4): use no compression [ 128.068089][ T7279] BTRFS info (device loop4): force clearing of disk cache [ 128.081131][ T7283] loop0: detected capacity change from 0 to 32768 [ 128.089052][ T7279] BTRFS info (device loop4): max_inline at 4096 [ 128.096820][ T7279] BTRFS info (device loop4): disabling free space tree [ 128.113691][ T7283] JBD2: Ignoring recovery information on journal [ 128.168301][ T7283] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 128.212669][ T7279] BTRFS info (device loop4): enabling ssd optimizations [ 128.219690][ T7279] BTRFS info (device loop4): auto enabling async discard [ 128.245151][ T7279] BTRFS info (device loop4): rebuilding free space tree [ 128.290332][ T7279] BTRFS info (device loop4): disabling free space tree [ 128.312315][ T7279] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.343287][ T7279] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.374592][ T5766] ocfs2: Unmounting device (7,0) on (node local) [ 128.530000][ T7264] loop3: detected capacity change from 0 to 131072 [ 128.552649][ T7264] F2FS-fs (loop3): invalid crc value [ 128.578009][ T7307] loop2: detected capacity change from 0 to 256 [ 128.595746][ T7264] F2FS-fs (loop3): Found nat_bits in checkpoint [ 128.706476][ T7264] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 128.730289][ T6435] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.232471][ T7321] syz.0.483[7321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.232850][ T7321] syz.0.483[7321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.431100][ T7325] loop4: detected capacity change from 0 to 512 [ 129.459053][ T7325] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.485: casefold flag without casefold feature [ 129.469015][ T7313] loop2: detected capacity change from 0 to 32768 [ 129.492709][ T7325] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.485: couldn't read orphan inode 15 (err -117) [ 129.543283][ T7325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.546419][ T7331] loop0: detected capacity change from 0 to 16 [ 129.557125][ T7313] syz.2.479: attempt to access beyond end of device [ 129.557125][ T7313] loop2: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 129.601625][ T7331] erofs: (device loop0): mounted with root inode @ nid 36. [ 129.710339][ T112] blkno = 5002c, nblocks = 1 [ 129.729714][ T6435] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.745208][ T7331] syz.0.487: attempt to access beyond end of device [ 129.745208][ T7331] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 129.763217][ T112] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 129.763217][ T112] [ 129.782927][ T112] ERROR: (device loop2): remounting filesystem as read-only [ 129.807282][ T7331] syz.0.487: attempt to access beyond end of device [ 129.807282][ T7331] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 130.332023][ T7334] loop4: detected capacity change from 0 to 32768 [ 130.351896][ T7334] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.490 (7334) [ 130.374920][ T7334] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.386865][ T7334] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 130.420713][ T7334] BTRFS info (device loop4): force clearing of disk cache [ 130.428672][ T7334] BTRFS info (device loop4): enabling auto defrag [ 130.443115][ T7334] BTRFS info (device loop4): max_inline at 0 [ 130.449188][ T7334] BTRFS info (device loop4): enabling disk space caching [ 130.461787][ T7334] BTRFS info (device loop4): disk space caching is enabled [ 130.550096][ T7334] BTRFS info (device loop4): enabling ssd optimizations [ 130.568600][ T7334] BTRFS info (device loop4): rebuilding free space tree [ 130.595217][ T7334] BTRFS info (device loop4): disabling free space tree [ 130.602274][ T7334] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.629445][ T7334] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.987233][ T6435] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.370097][ T7377] loop2: detected capacity change from 0 to 40427 [ 131.379891][ T7377] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 131.387681][ T7377] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 131.403370][ T7377] F2FS-fs (loop2): invalid crc value [ 131.408868][ T7377] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 131.424456][ T7377] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.488558][ T7377] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 131.495920][ T7377] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.594616][ T7388] loop4: detected capacity change from 0 to 32768 [ 131.603645][ T5774] syz-executor: attempt to access beyond end of device [ 131.603645][ T5774] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.611142][ T7388] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.620632][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 131.681336][ T7388] XFS (loop4): Ending clean mount [ 131.696463][ T7388] XFS (loop4): Quotacheck needed: Please wait. [ 131.718143][ T11] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x2443 dinode [ 131.730249][ T11] XFS (loop4): Unmount and run xfs_repair [ 131.736305][ T11] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 131.744375][ T11] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 131.753361][ T11] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 131.762362][ T11] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 131.771361][ T11] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 131.781013][ T11] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 131.790001][ T11] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 54 01 7a fc ............T.z. [ 131.799121][ T11] 00000060: ff ff ff ff 4c 7b c2 21 00 00 00 00 00 00 00 04 ....L{.!........ [ 131.808332][ T11] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 131.840163][ T7388] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 132.069305][ T6435] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.100063][ T7403] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.262223][ T7403] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.351970][ T7403] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.442579][ T7403] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.580262][ T7403] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.635807][ T7403] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.659477][ T7403] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.688000][ T7403] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.853305][ T7420] capability: warning: `syz.3.515' uses deprecated v2 capabilities in a way that may be insecure [ 132.960707][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.968948][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.973284][ T5821] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 133.011925][ T7422] loop2: detected capacity change from 0 to 128 [ 133.058253][ T7422] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.096163][ T7422] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.157996][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 133.158010][ T27] audit: type=1800 audit(1751035396.448:57): pid=7422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.516" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 133.192852][ T5821] usb 1-1: Using ep0 maxpacket: 32 [ 133.203343][ T5821] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 133.219688][ T5821] usb 1-1: config 0 has no interface number 0 [ 133.230473][ T5821] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.255110][ T5821] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 133.272598][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.289549][ T5821] usb 1-1: Product: syz [ 133.297263][ T5821] usb 1-1: Manufacturer: syz [ 133.301881][ T5821] usb 1-1: SerialNumber: syz [ 133.321353][ T5821] usb 1-1: config 0 descriptor?? [ 133.338623][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.344954][ T5821] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 133.371725][ T5821] em28xx 1-1:0.132: Video interface 132 found: [ 133.589166][ T7438] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 133.623012][ T7438] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.757318][ T5821] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 134.000491][ T7452] loop3: detected capacity change from 0 to 2048 [ 134.025360][ T7452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.121574][ T7459] loop4: detected capacity change from 0 to 16 [ 134.129216][ T7459] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 134.168800][ T5821] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 134.191296][ T5821] em28xx 1-1:0.132: board has no eeprom [ 134.255876][ T7461] loop4: detected capacity change from 0 to 256 [ 134.262661][ T5821] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 134.272417][ T5821] em28xx 1-1:0.132: analog set to bulk mode. [ 134.284137][ T8] em28xx 1-1:0.132: Registering V4L2 extension [ 134.300471][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.301661][ T5821] usb 1-1: USB disconnect, device number 10 [ 134.321986][ T5821] em28xx 1-1:0.132: Disconnecting em28xx [ 134.521072][ T8] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 134.538229][ T8] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 134.545628][ T8] em28xx 1-1:0.132: No AC97 audio processor [ 134.559658][ T8] usb 1-1: Decoder not found [ 134.564483][ T8] em28xx 1-1:0.132: failed to create media graph [ 134.571809][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'. [ 134.580732][ T8] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 134.592063][ T8] em28xx 1-1:0.132: Remote control support is not available for this card. [ 134.601883][ T5821] em28xx 1-1:0.132: Closing input extension [ 134.633881][ T5821] em28xx 1-1:0.132: Freeing device [ 135.285615][ T7487] loop0: detected capacity change from 0 to 40427 [ 135.299506][ T7487] F2FS-fs (loop0): heap/no_heap options were deprecated [ 135.308645][ T7487] F2FS-fs (loop0): invalid crc value [ 135.331098][ T7487] F2FS-fs (loop0): Found nat_bits in checkpoint [ 135.359045][ T7496] loop3: detected capacity change from 0 to 128 [ 135.398408][ T7493] loop4: detected capacity change from 0 to 32768 [ 135.404209][ T7496] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.420747][ T7487] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 135.422475][ T7493] syz.4.544: attempt to access beyond end of device [ 135.422475][ T7493] loop4: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 135.439008][ T7496] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.500211][ T113] blkno = 5002c, nblocks = 1 [ 135.507561][ T113] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 135.507561][ T113] [ 135.517413][ T7487] syz.0.543: attempt to access beyond end of device [ 135.517413][ T7487] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 135.534198][ T7487] syz.0.543: attempt to access beyond end of device [ 135.534198][ T7487] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 135.543683][ T27] audit: type=1800 audit(1751035398.828:58): pid=7496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.545" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 135.569491][ T7487] syz.0.543: attempt to access beyond end of device [ 135.569491][ T7487] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 135.594200][ T113] ERROR: (device loop4): remounting filesystem as read-only [ 135.616750][ T5766] syz-executor: attempt to access beyond end of device [ 135.616750][ T5766] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.631199][ T5766] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 135.653886][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.746295][ T7500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.548'. [ 135.755776][ T7500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.548'. [ 136.031610][ T7509] loop3: detected capacity change from 0 to 128 [ 136.041844][ T7509] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 136.057177][ T7509] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.121525][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.497652][ T7522] loop3: detected capacity change from 0 to 2048 [ 136.509234][ T7522] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.809393][ T7528] syz.3.560[7528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.809526][ T7528] syz.3.560[7528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.113274][ T5821] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 137.314270][ T5821] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.325316][ T5821] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.336488][ T5821] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 137.345667][ T5821] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 137.354092][ T5821] usb 4-1: Product: syz [ 137.358235][ T5821] usb 4-1: Manufacturer: syz [ 137.367453][ T5821] hub 4-1:4.0: USB hub found [ 137.572082][ T5821] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 137.912921][ T28] usb 4-1: USB disconnect, device number 4 [ 138.448979][ T7541] loop0: detected capacity change from 0 to 2048 [ 138.498402][ T7541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.566898][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.567'. [ 138.680912][ T7552] raw_sendmsg: syz.3.570 forgot to set AF_INET. Fix it! [ 138.797140][ T7555] loop3: detected capacity change from 0 to 512 [ 138.817862][ T7530] loop2: detected capacity change from 0 to 32768 [ 138.847868][ T7555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.852881][ T7530] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.561 (7530) [ 138.880757][ T7530] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 138.892915][ T7555] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.934408][ T7530] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 138.945513][ T7530] BTRFS info (device loop2): enabling auto defrag [ 138.952849][ T7530] BTRFS info (device loop2): doing ref verification [ 138.959583][ T7530] BTRFS info (device loop2): use no compression [ 138.966124][ T7530] BTRFS info (device loop2): force clearing of disk cache [ 138.973699][ T7530] BTRFS info (device loop2): max_inline at 4096 [ 138.979021][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.979948][ T7530] BTRFS info (device loop2): disabling free space tree [ 139.082899][ T7530] BTRFS info (device loop2): enabling ssd optimizations [ 139.100121][ T7530] BTRFS info (device loop2): auto enabling async discard [ 139.138071][ T7530] BTRFS info (device loop2): rebuilding free space tree [ 139.204163][ T7530] BTRFS info (device loop2): disabling free space tree [ 139.211122][ T7530] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 139.221179][ T7530] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 139.382657][ T27] audit: type=1800 audit(1751035402.668:59): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.561" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 139.412256][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.474030][ T27] audit: type=1800 audit(1751035402.768:60): pid=7577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.561" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 139.703834][ T5774] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.248889][ T7589] input: syz1 as /devices/virtual/input/input11 [ 140.440301][ T5820] IPVS: starting estimator thread 0... [ 140.464359][ T7595] dvmrp0: entered allmulticast mode [ 140.572925][ T7594] IPVS: using max 20 ests per chain, 48000 per kthread [ 140.617529][ T7601] loop3: detected capacity change from 0 to 512 [ 140.646155][ T7601] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 140.664981][ T7601] System zones: 0-2, 18-18, 34-35 [ 140.676956][ T7601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.695768][ T7601] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.904607][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.914263][ T7550] loop4: detected capacity change from 0 to 131072 [ 140.952997][ T7550] F2FS-fs (loop4): invalid crc value [ 140.975863][ T7550] F2FS-fs (loop4): Found nat_bits in checkpoint [ 140.976197][ T7608] loop3: detected capacity change from 0 to 512 [ 141.003470][ T7608] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.585: Invalid inode bitmap blk 4 in block_group 0 [ 141.018919][ T7608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.050919][ T27] audit: type=1800 audit(1751035404.338:61): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.585" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 141.075117][ T7550] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 141.091680][ T27] audit: type=1804 audit(1751035404.378:62): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.585" name="/newroot/159/file0/file2" dev="loop3" ino=16 res=1 errno=0 [ 141.155291][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.183703][ T27] audit: type=1800 audit(1751035404.478:63): pid=7550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.568" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 141.452985][ T7621] loop0: detected capacity change from 0 to 764 [ 141.510694][ T7621] Symlink component flag not implemented [ 141.543401][ T7621] Symlink component flag not implemented (101) [ 141.716260][ T7630] loop0: detected capacity change from 0 to 128 [ 141.753174][ T7632] kernel read not supported for file /eth0 (pid: 7632 comm: syz.3.595) [ 141.775079][ T7630] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 141.775411][ T27] audit: type=1800 audit(1751035405.068:64): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.595" name="eth0" dev="mqueue" ino=13745 res=0 errno=0 [ 141.833296][ T7630] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.943122][ T5766] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.237112][ T7645] loop3: detected capacity change from 0 to 256 [ 142.274162][ T7645] FAT-fs (loop3): Directory bread(block 64) failed [ 142.285368][ T7645] FAT-fs (loop3): Directory bread(block 65) failed [ 142.303236][ T7645] FAT-fs (loop3): Directory bread(block 66) failed [ 142.322444][ T7645] FAT-fs (loop3): Directory bread(block 67) failed [ 142.334323][ T7645] FAT-fs (loop3): Directory bread(block 68) failed [ 142.348231][ T7645] FAT-fs (loop3): Directory bread(block 69) failed [ 142.355752][ T7645] FAT-fs (loop3): Directory bread(block 70) failed [ 142.362366][ T7645] FAT-fs (loop3): Directory bread(block 71) failed [ 142.369257][ T7645] FAT-fs (loop3): Directory bread(block 72) failed [ 142.376152][ T7645] FAT-fs (loop3): Directory bread(block 73) failed [ 143.425938][ T7664] loop2: detected capacity change from 0 to 32768 [ 143.430435][ T7671] ipvlan2: entered promiscuous mode [ 143.448929][ T7671] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 143.476640][ T7664] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 143.534045][ T7664] (syz.2.608,7664,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 143.583862][ T7664] (syz.2.608,7664,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 143.677083][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 143.689136][ T7641] loop0: detected capacity change from 0 to 131072 [ 143.723688][ T7641] F2FS-fs (loop0): invalid crc value [ 143.765198][ T7641] F2FS-fs (loop0): Found nat_bits in checkpoint [ 143.834209][ T7684] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 143.866066][ T7641] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 143.945502][ T27] audit: type=1800 audit(1751035407.238:65): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.597" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 144.005097][ T7691] [U] [ 144.008191][ T7691] [U] [ 144.010891][ T7691] [U] [ 144.013589][ T7691] [U] [ 144.016467][ T7691] [U] [ 144.019180][ T7691] [U] [ 144.021882][ T7691] [U] [ 144.024589][ T7691] [U] [ 144.043680][ T7691] [U] [ 144.046417][ T7691] [U] [ 144.049117][ T7691] [U] [ 144.051813][ T7691] [U] [ 144.054607][ T7691] [U] [ 144.057312][ T7691] [U] [ 144.060010][ T7691] [U] [ 144.062714][ T7691] [U] [ 144.077524][ T7691] [U] [ 144.080262][ T7691] [U] [ 144.082971][ T7691] [U] [ 144.085677][ T7691] [U] [ 144.089464][ T7691] [U] [ 144.092177][ T7691] [U] [ 144.094857][ T7691] [U] [ 144.097540][ T7691] [U] [ 144.100675][ T7691] [U] [ 144.103389][ T7691] [U] [ 144.106087][ T7691] [U] [ 144.108780][ T7691] [U] [ 144.130086][ T7691] [U] [ 144.132829][ T7691] [U] [ 144.135528][ T7691] [U] [ 144.138222][ T7691] [U] [ 144.162727][ T7691] [U] [ 144.165466][ T7691] [U] [ 144.168171][ T7691] [U] [ 144.170978][ T7691] [U] [ 144.182865][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 144.192666][ T7691] [U] [ 144.195382][ T7691] [U] [ 144.198089][ T7691] [U] [ 144.200784][ T7691] [U] [ 144.203741][ T7691] [U] [ 144.206455][ T7691] [U] [ 144.209151][ T7691] [U] [ 144.211849][ T7691] [U] [ 144.214830][ T7691] [U] [ 144.217529][ T7691] [U] [ 144.220224][ T7691] [U] [ 144.222918][ T7691] [U] [ 144.225932][ T7691] [U] [ 144.228645][ T7691] [U] [ 144.231344][ T7691] [U] [ 144.234041][ T7691] [U] [ 144.241825][ T7691] [U] [ 144.244560][ T7691] [U] [ 144.247253][ T7691] [U] [ 144.249949][ T7691] [U] [ 144.257515][ T7691] [U] [ 144.260228][ T7691] [U] [ 144.262927][ T7691] [U] [ 144.265621][ T7691] [U] [ 144.270205][ T7691] [U] [ 144.272920][ T7691] [U] [ 144.275615][ T7691] [U] [ 144.278305][ T7691] [U] [ 144.289056][ T7691] [U] [ 144.291772][ T7691] [U] [ 144.294467][ T7691] [U] [ 144.297167][ T7691] [U] [ 144.301239][ T7691] [U] [ 144.303954][ T7691] [U] [ 144.306650][ T7691] [U] [ 144.309351][ T7691] [U] [ 144.317983][ T7691] [U] [ 144.320701][ T7691] [U] [ 144.323382][ T7691] [U] [ 144.326057][ T7691] [U] [ 144.354057][ T7691] [U] [ 144.356790][ T7691] [U] [ 144.359489][ T7691] [U] [ 144.362179][ T7691] [U] [ 144.369581][ T7691] [U] [ 144.372301][ T7691] [U] [ 144.374388][ T9] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 144.374979][ T7691] [U] [ 144.385806][ T7691] [U] [ 144.388872][ T9] usb 4-1: config 0 has no interface number 0 [ 144.402652][ T9] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 144.423031][ T9] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 144.427703][ T7691] [U] [ 144.439110][ T7691] [U] [ 144.441806][ T7691] [U] [ 144.444497][ T7691] [U] [ 144.447474][ T9] usb 4-1: config 0 interface 255 has no altsetting 0 [ 144.463049][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 144.483563][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.491815][ T7691] [U] [ 144.494533][ T7691] [U] [ 144.497230][ T7691] [U] [ 144.499921][ T7691] [U] [ 144.503927][ T9] usb 4-1: config 0 descriptor?? [ 144.510939][ T9] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 144.517457][ T7691] [U] [ 144.520758][ T7691] [U] [ 144.523462][ T7691] [U] [ 144.526153][ T7691] [U] [ 144.534560][ T7691] [U] [ 144.537287][ T7691] [U] [ 144.539983][ T7691] [U] [ 144.542689][ T7691] [U] [ 144.548868][ T7691] [U] [ 144.551583][ T7691] [U] [ 144.554282][ T7691] [U] [ 144.556978][ T7691] [U] [ 144.565249][ T7691] [U] [ 144.567975][ T7691] [U] [ 144.570678][ T7691] [U] [ 144.571408][ T7701] loop4: detected capacity change from 0 to 4096 [ 144.573352][ T7691] [U] [ 144.574978][ T7691] [U] [ 144.585781][ T7691] [U] [ 144.588478][ T7691] [U] [ 144.591172][ T7691] [U] [ 144.607164][ T7691] [U] [ 144.609897][ T7691] [U] [ 144.612596][ T7691] [U] [ 144.615313][ T7691] [U] [ 144.623732][ T7691] [U] [ 144.626446][ T7691] [U] [ 144.629144][ T7691] [U] [ 144.631839][ T7691] [U] [ 144.642247][ T7691] [U] [ 144.644970][ T7691] [U] [ 144.647667][ T7691] [U] [ 144.650357][ T7691] [U] [ 144.653719][ T7691] [U] [ 144.656432][ T7691] [U] [ 144.659125][ T7691] [U] [ 144.680760][ T7704] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.697509][ T7690] [U] [ 144.717850][ T9] usb 4-1: USB disconnect, device number 5 [ 144.877865][ T7701] syz.4.623 (7701) used greatest stack depth: 19408 bytes left [ 145.016227][ T7712] netlink: 104 bytes leftover after parsing attributes in process `syz.4.626'. [ 145.030621][ T7712] netlink: 104 bytes leftover after parsing attributes in process `syz.4.626'. [ 145.186016][ T7723] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 145.602637][ T7729] loop4: detected capacity change from 0 to 32768 [ 145.610742][ T7729] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.632 (7729) [ 145.636162][ T7729] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.662718][ T7729] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 145.671453][ T7729] BTRFS info (device loop4): setting nodatacow, compression disabled [ 145.692697][ T7729] BTRFS info (device loop4): max_inline at 0 [ 145.704245][ T7729] BTRFS info (device loop4): enabling disk space caching [ 145.711406][ T7729] BTRFS info (device loop4): turning off barriers [ 145.720253][ T7729] BTRFS info (device loop4): turning on flush-on-commit [ 145.720332][ T7731] loop3: detected capacity change from 0 to 32768 [ 145.729386][ T7729] BTRFS info (device loop4): doing ref verification [ 145.743449][ T7729] BTRFS info (device loop4): force clearing of disk cache [ 145.750636][ T7729] BTRFS info (device loop4): enabling ssd optimizations [ 145.758300][ T7729] BTRFS info (device loop4): max_inline at 4096 [ 145.770476][ T7729] BTRFS info (device loop4): disk space caching is enabled [ 145.772816][ T27] audit: type=1800 audit(1751035409.058:66): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.633" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 145.827525][ T7729] BTRFS info (device loop4): auto enabling async discard [ 145.837372][ T7729] BTRFS info (device loop4): rebuilding free space tree [ 145.858232][ T7729] BTRFS info (device loop4): disabling free space tree [ 145.865467][ T7729] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 145.879280][ T7729] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.995331][ T7751] IPVS: stopping master sync thread 7752 ... [ 146.001532][ T7752] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 146.058285][ T6435] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.362744][ T113] ================================================================== [ 146.370857][ T113] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0x753/0xa60 [ 146.378507][ T113] Read of size 4 at addr ffff8880303ed294 by task jfsCommit/113 [ 146.386144][ T113] [ 146.388480][ T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted 6.6.95-syzkaller #0 [ 146.396291][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.406359][ T113] Call Trace: [ 146.409643][ T113] [ 146.412593][ T113] dump_stack_lvl+0x16c/0x230 [ 146.417285][ T113] ? __lock_acquire+0x7c80/0x7c80 [ 146.422322][ T113] ? show_regs_print_info+0x20/0x20 [ 146.427535][ T113] ? load_image+0x3b0/0x3b0 [ 146.432050][ T113] ? __virt_addr_valid+0x469/0x540 [ 146.437173][ T113] print_report+0xac/0x230 [ 146.441602][ T113] ? jfs_lazycommit+0x753/0xa60 [ 146.446443][ T113] kasan_report+0x117/0x150 [ 146.450934][ T113] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 146.456300][ T113] ? jfs_lazycommit+0x753/0xa60 [ 146.461140][ T113] jfs_lazycommit+0x753/0xa60 [ 146.465802][ T113] ? txFreelock+0x5a0/0x5a0 [ 146.470290][ T113] ? do_task_dead+0xd0/0xd0 [ 146.474779][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 146.479709][ T113] kthread+0x2fa/0x390 [ 146.483763][ T113] ? txFreelock+0x5a0/0x5a0 [ 146.488252][ T113] ? kthread_blkcg+0xd0/0xd0 [ 146.492822][ T113] ret_from_fork+0x48/0x80 [ 146.497221][ T113] ? kthread_blkcg+0xd0/0xd0 [ 146.501793][ T113] ret_from_fork_asm+0x11/0x20 [ 146.506548][ T113] [ 146.509549][ T113] [ 146.511864][ T113] Allocated by task 7731: [ 146.516174][ T113] kasan_set_track+0x4e/0x70 [ 146.520759][ T113] __kasan_kmalloc+0x8f/0xa0 [ 146.525337][ T113] jfs_fill_super+0xd6/0xac0 [ 146.529910][ T113] mount_bdev+0x22b/0x2d0 [ 146.534224][ T113] legacy_get_tree+0xea/0x180 [ 146.538886][ T113] vfs_get_tree+0x8c/0x280 [ 146.543285][ T113] do_new_mount+0x24b/0xa40 [ 146.547768][ T113] __se_sys_mount+0x2da/0x3c0 [ 146.552429][ T113] do_syscall_64+0x55/0xb0 [ 146.556831][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.562710][ T113] [ 146.565030][ T113] Freed by task 5773: [ 146.568986][ T113] kasan_set_track+0x4e/0x70 [ 146.573564][ T113] kasan_save_free_info+0x2e/0x50 [ 146.578578][ T113] ____kasan_slab_free+0x126/0x1e0 [ 146.583673][ T113] slab_free_freelist_hook+0x130/0x1b0 [ 146.589115][ T113] __kmem_cache_free+0xba/0x1f0 [ 146.593947][ T113] generic_shutdown_super+0x134/0x2b0 [ 146.599303][ T113] kill_block_super+0x44/0x90 [ 146.603965][ T113] deactivate_locked_super+0x97/0x100 [ 146.609317][ T113] cleanup_mnt+0x429/0x4c0 [ 146.613725][ T113] task_work_run+0x1ce/0x250 [ 146.618304][ T113] exit_to_user_mode_loop+0xe6/0x110 [ 146.623577][ T113] exit_to_user_mode_prepare+0xb1/0x140 [ 146.629109][ T113] syscall_exit_to_user_mode+0x1a/0x50 [ 146.634554][ T113] do_syscall_64+0x61/0xb0 [ 146.638966][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.644849][ T113] [ 146.647156][ T113] Last potentially related work creation: [ 146.652846][ T113] kasan_save_stack+0x3e/0x60 [ 146.657508][ T113] __kasan_record_aux_stack+0xaf/0xc0 [ 146.662862][ T113] call_rcu+0x14f/0x920 [ 146.667003][ T113] vlan_device_event+0x254/0x1cf0 [ 146.672009][ T113] notifier_call_chain+0x197/0x390 [ 146.677106][ T113] dev_close_many+0x297/0x400 [ 146.681764][ T113] unregister_netdevice_many_notify+0x4c1/0x1810 [ 146.688074][ T113] default_device_exit_batch+0x9cb/0xa60 [ 146.693687][ T113] cleanup_net+0x77f/0xb90 [ 146.698087][ T113] process_scheduled_works+0xa45/0x15b0 [ 146.703614][ T113] worker_thread+0xa55/0xfc0 [ 146.708186][ T113] kthread+0x2fa/0x390 [ 146.712235][ T113] ret_from_fork+0x48/0x80 [ 146.716632][ T113] ret_from_fork_asm+0x11/0x20 [ 146.721377][ T113] [ 146.723686][ T113] The buggy address belongs to the object at ffff8880303ed200 [ 146.723686][ T113] which belongs to the cache kmalloc-256 of size 256 [ 146.737724][ T113] The buggy address is located 148 bytes inside of [ 146.737724][ T113] freed 256-byte region [ffff8880303ed200, ffff8880303ed300) [ 146.751504][ T113] [ 146.753810][ T113] The buggy address belongs to the physical page: [ 146.760212][ T113] page:ffffea0000c0fb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x303ec [ 146.770352][ T113] head:ffffea0000c0fb00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 146.779263][ T113] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 146.787578][ T113] page_type: 0xffffffff() [ 146.791889][ T113] raw: 00fff00000000840 ffff888017841b40 ffffea0001e48600 dead000000000007 [ 146.800452][ T113] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 146.809012][ T113] page dumped because: kasan: bad access detected [ 146.815410][ T113] page_owner tracks the page as allocated [ 146.821101][ T113] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5766, tgid 5766 (syz-executor), ts 67587351397, free_ts 67387217879 [ 146.842447][ T113] post_alloc_hook+0x1cd/0x210 [ 146.847198][ T113] get_page_from_freelist+0x195c/0x19f0 [ 146.852733][ T113] __alloc_pages+0x1e3/0x460 [ 146.857305][ T113] alloc_slab_page+0x5d/0x170 [ 146.861964][ T113] new_slab+0x87/0x2e0 [ 146.866012][ T113] ___slab_alloc+0xc6d/0x12f0 [ 146.870670][ T113] __kmem_cache_alloc_node+0x1a2/0x260 [ 146.876109][ T113] __kmalloc+0xa4/0x240 [ 146.880244][ T113] fib_create_info+0xa61/0x2460 [ 146.885074][ T113] fib_table_insert+0xc7/0x1b50 [ 146.889904][ T113] fib_magic+0x2c5/0x390 [ 146.894128][ T113] fib_add_ifaddr+0x144/0x5e0 [ 146.898782][ T113] fib_inetaddr_event+0x140/0x1d0 [ 146.903785][ T113] notifier_call_chain+0x197/0x390 [ 146.908876][ T113] blocking_notifier_call_chain+0x6a/0x90 [ 146.914576][ T113] __inet_insert_ifa+0x9ae/0xbb0 [ 146.919497][ T113] page last free stack trace: [ 146.924146][ T113] free_unref_page_prepare+0x7ce/0x8e0 [ 146.929591][ T113] free_unref_page+0x32/0x2e0 [ 146.934250][ T113] __slab_free+0x35e/0x410 [ 146.938649][ T113] qlist_free_all+0x75/0xe0 [ 146.943136][ T113] kasan_quarantine_reduce+0x143/0x160 [ 146.948575][ T113] __kasan_slab_alloc+0x22/0x80 [ 146.953407][ T113] slab_post_alloc_hook+0x6e/0x4d0 [ 146.958499][ T113] __kmem_cache_alloc_node+0x13e/0x260 [ 146.963936][ T113] kmalloc_trace+0x2a/0xe0 [ 146.968332][ T113] netdevice_event+0x3a2/0x890 [ 146.973085][ T113] notifier_call_chain+0x197/0x390 [ 146.978269][ T113] __dev_notify_flags+0x18e/0x2e0 [ 146.983281][ T113] dev_change_flags+0xe8/0x1a0 [ 146.988045][ T113] do_setlink+0xc74/0x3fb0 [ 146.992468][ T113] rtnl_newlink+0x175b/0x2020 [ 146.997142][ T113] rtnetlink_rcv_msg+0x7c7/0xf10 [ 147.002066][ T113] [ 147.004372][ T113] Memory state around the buggy address: [ 147.009979][ T113] ffff8880303ed180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.018022][ T113] ffff8880303ed200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.026062][ T113] >ffff8880303ed280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.034103][ T113] ^ [ 147.038671][ T113] ffff8880303ed300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.046710][ T113] ffff8880303ed380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.054755][ T113] ================================================================== [ 147.062804][ T113] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 147.069975][ T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted 6.6.95-syzkaller #0 [ 147.077768][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.087805][ T113] Call Trace: [ 147.091068][ T113] [ 147.093982][ T113] dump_stack_lvl+0x16c/0x230 [ 147.098650][ T113] ? show_regs_print_info+0x20/0x20 [ 147.103833][ T113] ? load_image+0x3b0/0x3b0 [ 147.108322][ T113] panic+0x2c0/0x710 [ 147.112212][ T113] ? bpf_jit_dump+0xd0/0xd0 [ 147.116726][ T113] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 147.122632][ T113] ? _raw_spin_unlock+0x40/0x40 [ 147.127486][ T113] ? print_memory_metadata+0x314/0x400 [ 147.132945][ T113] ? jfs_lazycommit+0x753/0xa60 [ 147.137787][ T113] check_panic_on_warn+0x84/0xa0 [ 147.142711][ T113] ? jfs_lazycommit+0x753/0xa60 [ 147.147549][ T113] end_report+0x6f/0x140 [ 147.151779][ T113] kasan_report+0x128/0x150 [ 147.156266][ T113] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 147.161629][ T113] ? jfs_lazycommit+0x753/0xa60 [ 147.166469][ T113] jfs_lazycommit+0x753/0xa60 [ 147.171133][ T113] ? txFreelock+0x5a0/0x5a0 [ 147.175622][ T113] ? do_task_dead+0xd0/0xd0 [ 147.180107][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 147.185034][ T113] kthread+0x2fa/0x390 [ 147.189082][ T113] ? txFreelock+0x5a0/0x5a0 [ 147.193568][ T113] ? kthread_blkcg+0xd0/0xd0 [ 147.198139][ T113] ret_from_fork+0x48/0x80 [ 147.202540][ T113] ? kthread_blkcg+0xd0/0xd0 [ 147.207111][ T113] ret_from_fork_asm+0x11/0x20 [ 147.211865][ T113] [ 147.215087][ T113] Kernel Offset: disabled [ 147.219395][ T113] Rebooting in 86400 seconds..