last executing test programs: 24.217721971s ago: executing program 1 (id=1344): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4850) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x40, 0x1, 0x40002000}, &(0x7f0000000040), &(0x7f0000000300)) 23.155771339s ago: executing program 1 (id=1347): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000003e0081064e81f782db44b9040a1d08040300000000070aa11800150006f7132603600e1208000f0000810401a80016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x3, 0x0, 0x0, 0x4, 0x0, 0x4000}]}}, 0x0, 0x26, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 22.959438957s ago: executing program 1 (id=1348): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 21.406302209s ago: executing program 1 (id=1350): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x1541, &(0x7f0000000380)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x8000000d) 20.051561623s ago: executing program 1 (id=1354): ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000002680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000088000000b70400000000000085000000030000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x4d, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r2}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x20) fcntl$setstatus(r4, 0x4, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000d9a1aecd4c3b8d13939de79e3bfaacc0acbfa87f0dc428b3ff1831c0f1d4cce451e91e04adb52ec31dfefca60ecbdf4099e83eafe94ee726c54963ce747adc6dec19f7f84ce729ea07ffe7ac35b188ada84aac8fd5a2af2ddbcb52893d03e7bb9cffa6bc8a5e0313c1bbbd8437765222b9e247a2170669b4071f30f74703c51c9c1990935f09f59de906bae885f761539eab038d8e84a5f1c16f29dc859566d1a12be6cb7f7985955ccad85d0269dfca0fd7a6d0064a4581360c906a6982d000ee668e4e626db7fbc79fa6c6faea4c0244c1f7681c4dd19e30532fedd3c9fcbadb47e40ef758079de70e5f54687ffcbd41fc8f6ed15c014c6f3d134376c7bbe284b7b664b68f2f27101de72212c82fe7f05ecb227bcf8a00048f7738257758378b78d01a1385bf0b71cae42afefff05248cc7bc996f9e89b6f2e47658869fa51b86eb8ff749ba72f216217fb1096291949c756de6721adb179774f2201bf8f81bc78c4fc3b76a707129eff68ad343df870181ba2f36be12b59c5ec062be5883351d21900f654dc1e2ddadbc21b800a9d12c0fcf66229c6915e2cbddfc9a8b33a13a3eaa4fcdfa7993f1d7d455e6b7522c39ae4e8e696da7b52dae9bdeda0fae22007d903bff1b216b1d6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) memfd_secret(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r7 = epoll_create1(0x0) r8 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000080)={0xa0028000}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000000)) 19.000040259s ago: executing program 1 (id=1359): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x300000a, &(0x7f0000000180)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@clear_cache}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="f777", 0x2}], 0x1, 0x7fff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) 16.385136619s ago: executing program 4 (id=1367): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/19], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./bus\x00', 0xd000, &(0x7f00000003c0)={[{@init_itable_val={'init_itable', 0x3d, 0xc}}, {@debug}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.)){R'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_user={'obj_user', 0x3d, 'x#('}}]}, 0x1, 0x502, &(0x7f0000002080)="$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") ftruncate(0xffffffffffffffff, 0xc17a) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r0, 0x1d853000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000280)=ANY=[], 0x18}, 0x0) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000000), 0x4) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f00000029c0)={0x2, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 14.434626198s ago: executing program 4 (id=1371): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="3100030007"], 0xd) 13.320860509s ago: executing program 2 (id=1372): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) getrlimit(0xa, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000380)={0x4, {{0xa, 0x4e23, 0x8000, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4c1f}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 13.088322881s ago: executing program 4 (id=1373): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) creat(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 11.934479167s ago: executing program 4 (id=1376): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x300000a, &(0x7f0000000180)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@clear_cache}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="f777", 0x2}], 0x1, 0x7fff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) 9.358127583s ago: executing program 3 (id=1380): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/19], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./bus\x00', 0xd000, &(0x7f00000003c0)={[{@init_itable_val={'init_itable', 0x3d, 0xc}}, {@debug}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.)){R'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_user={'obj_user', 0x3d, 'x#('}}]}, 0x1, 0x502, &(0x7f0000002080)="$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") ftruncate(0xffffffffffffffff, 0xc17a) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r0, 0x1d853000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000280)=ANY=[], 0x18}, 0x0) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000000), 0x4) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f00000029c0)={0x2, {"a2e3ad214fc752f91b450a0787f70e06d038e7ff7fc6e5539b326d078b089b0708385d090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ca4d24ad92f243941ed274f12a29ff962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9b97474a5966a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741258c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a941f0000005f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60a842b09eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f49013a3a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 9.310352417s ago: executing program 0 (id=1381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x36, 0x0, 0x0) 9.000031735s ago: executing program 0 (id=1382): r0 = socket$rxrpc(0x21, 0x2, 0xa) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() io_setup(0x202, &(0x7f0000000200)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0) 6.850974692s ago: executing program 2 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{r0}, &(0x7f00000002c0), 0x0}, 0x20) 6.825153745s ago: executing program 3 (id=1384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 6.637804782s ago: executing program 0 (id=1385): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) creat(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 6.403952653s ago: executing program 3 (id=1386): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000700)='9', 0x1}]) ioctl$TCSETS(r1, 0x40045431, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0xc17a) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r1, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) 6.289274514s ago: executing program 2 (id=1387): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0x4112, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 5.181339635s ago: executing program 0 (id=1388): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x402100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PIE_OFF(r0, 0x7006) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) dup3(r3, r4, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x31, '\x00\x00\x00\x00 #\x00'}) socketpair$unix(0x1, 0x0, 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffd4b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000071103900000000004600000002c1cef0cc0000005aced435c700000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.664133862s ago: executing program 2 (id=1389): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00B\x00', "006e34e400"}, 0x28) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 4.629907636s ago: executing program 4 (id=1390): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)={[{@pqnoenforce}, {@noquota}, {@usrquota}, {@pqnoenforce}, {@ikeep}, {@discard}, {@noikeep}]}, 0x1, 0x9926, &(0x7f000001ca40)="$eJzs3Qe4XHXBaP2TEHrHhgUJHRu9Y6EoiCAgRZpSpEsVUIoFEEFAFJAqKAKKNBGkiSgIIiIgvffee+/ke0ISiXER8bvvffGy1nqek5mzZ8/Of/6/2Ttn2IeZVZdYcbGBgSkGRjTq8vWOfP7Dx2/7/GK7nXj1Mc8tefTSx49cPN6IiyFDR15ON/Jy+oGBgUEjtzNoxLLBQ049bfDABAMDg0ff7iQTTjxokoGB9UZ+u8jIy/lHXEx6xaj1ho0RD3T4MAbtOeJrxF86MDAw4fArTwzMvsro2xk5rjn+5YFKW3XRJZd43eofbsPnb8jI66N/jTfia9KLBwYmvWiAnx+D3tpH9NrfP8X+56+2+ls8jv8nWnXRJZcaw3/4vjjOyGXzD9/Hx9wHjY35PB86/y2jjkGD8MD5/0irLrrEMgNvfJwfWPPVw7Ye9tpxc/BEAwODJx4YGDzJwMDgSQcGBk82MDB48rfapf7PekuffFVVVfWWtOhicy82/PXeGD8PTDDq51r6uXCNV5a7ZWBgYNwR6wyeb9Rrwaqqqqqqqqr672zRxeZeHF7/TzG21/+nnPnirL3+r6qqqqqqqvp/p6UWXWzu4a/jx3j9P/XYXv/vdM+zm4783f/5R9zr1bf2QVRVVVVVVVXVWFvh86+9/p94jNf/Q8f2+v/+hfe4d+R6o/67wSujbXLQaL9P8NJoy8cZbf0XR1s+ZLTlo68/3sDA4CEjl7/8+uLBEw2/7V/XHzzF8HGPXP7CaMvneP3/bx4y42jL5xxt+cyjLZ9r5FiHL59ltOXzjrb+rG9mbquqqqqqqqqqqqqqqqqqqv63evWRM89+/T3fPzgw2vu3/+N93Ef+XsCgk865/PK3bKD/HQ3619+H2OmtHtP/acOdJzhu6MDA5iu/1UOpt6C3+vMa6q0tf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIX9wbn///x/v/THL3eqP9nfv4j9552stHvu/Fo1yf4Xx31W9bb9fz/wMaDBgZG+k4x3HXZRVdYadaBgYHJpt37yHkG/nHbAsNvW3iqcUa+QcKIt0GYaQhveKeRn4q+08hVR27jpNe2v9SwI8YZNMYgRmvK0486aqNVn5tnzMuZ3/hxDB515V0Xbrf4qPeyGDzGSm/0PB21/VGPZUznkWOfdfjYZ99msy1n33r7HT628WbrbLj+hutvvuD88y8w7/zzLTjX7BtsvOn6c4z4843mbOhrf87wZuZs6jHn7JFFR5+zMR/bG83Z0LHP2WtbHH+/tTYZNWdjDu3fzdkMY5+zoRuP/IuGDB13YO3X5mbQwMCQGccd2G74N3OOPzAwZKaR6049fN2PTzV4YGCf1x/o8Gvj/+M5OGin4eususSKi73+sfv/+vH7b/B59uONuBgyckqGTDfycvoRf80UA68/FQcPOfW0wcMf+z9N8yQTTjxokoGB9UZ+u8jIywVH3nrpqPXe4HPWxxjoa2+zsueIr394TDj8ygnLT37d6Nt5A4L/if5//fv/L14LDPrHRA0a+TVynRFeiy651Ot/12vTsMio94QZ/m/LcJP/g4+x/7f9y3iHTvDam9y+0XjH8r64Ix4/PL9mfui8of9T74vLx45lXvtz6Js5dgyM/dgxzutXX1+6/iXTjHnsWPqNh/hP+8WoORp/jJXe6Ngx68GL7vjasWnsx45lNh75QUOvHzsGDwwMmWHUsWP4gWTmcQf2Gf7NXMO/mWXcgWOGfzP3a99MOHDO8G9mW3eLTdcb9Nrb9ozc7hzDt7vIVINee/CXz77o8ePsP2zYjCPHMscYB9aRz4+ho//7uOhUI6Zt1H1pu7dvM+K2mUdud87/YLuj7kvbXWCrEbfNMnK7c42x3XHGst1R9x21Pwxf9bX9YdZB//SLn7D/LjHG/jto1GF9tLuM+hpvxNekF4/6bCjYX/6j4w7tv1OMZbxj+VwrfL4NX7bLspec+T/1uVY03gnGPt43+hzuNxzvJhNut9z/wHgHjTbef3qebbnQiOfKrCOfZ/P+B8/fUfcd8zg27mu3jmCY9c0cxxb5l+PYzuMMHmPwo/VGPwOtB+uPuD71P7a24LHjTD5q7scdY7v/7megWcd+HJti4zHut8ThA4Nozu9/+KiNxv83cz7uwD//rD5qzkfdd2xzPsu/zvmgf5nzBcY+52/2585ZZxhx+zhjmfPBu2+97Kg5H+8/nPNZ/tM5X2RgHJrzfQ4ZMW9jO56+0ZyPuu8/z/mQgc8MDAzMOHLOZ34zz/M5/mee5xPB+iOu3/OPRRdOc9Zeox1jBv0ncz7zfzrnQ//xPJ/xtdumHzww3ngD262zzTZbzTniz1HfzjXiTz4WPX73iHke27+lb2Q06r5j2y9mfDNGQ/9njN435F/XH/WiY9T3K59zwpT/f49FM/5nRoOWGOBj0RkXjJi3sf1c9EZzPuq+9O/g0NHuP+brurG8HyU+puHLDjr4gJtHbXLk3Xo/yjffPz1tR/03vo3HPMjX27X++7+7/N3l7y5/d/mLe4Pz//94///7p1jxoZEvksfdd6EN132rx/sW97Y+/z/S95/O/6+74UL7Dn8pOPK2sZ6fHbHOf+X52flHXEx6xaj1xjw/yAN94/Ozs+w32woD/zvnZ/9/NWpffROv4zv+u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MW9wfn/Ub+jPPTQV+7eaeSJ0HEPPGDdV97q8b7Fva3P/4/0/afz/6+se8CBgwf+cdtYz/+PWMdx/n+5Q/c/beC/+Pz/qH218//1b8rfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MW9wfn/RUb9HsB8a22w56jfB9h8zk/t+laP9y3u7Xr+v8//99bx313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S9u5Pn/gTE+1nH5nhcYnP//f7s38P9C/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8v5g/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/l/KH7P4fzl/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP5fyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/L+aP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/L+WP2bx3yp/zOK/df6YxX+b/DGL/9fzxyz+38gfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/8388cs/t/KH7P4f3tM/1W3/t8d139pFv/vtP9jFv8d88cs/jvlj1n8d84fs/h/N3/M4r9L/pjF/3v5Yxb/XfPHLP675Y9Z/L+fP2bx3z1/zOK/R/6YxX/P/DGL/w/yxyz+e+WPWfx/mD9m8f9R/pjFf+/8MYv/PvljFv9988cs/j/OH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/j/JH7P4H5I/ZvE/NH/M4v/T/DGL/8/yxyz+h+WPWfx/nj9m8T88f8zif0T+mMX/yPwxi/8v8scs/r/MH7P4H5U/ZvH/Vf6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4/zp/zOJ/Qv6Yxf83+WMW/xPzxyz+J+WPWfx/mz9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+v8sfs/ifkT9m8f99/pjF/8z8MYv/H/LHLP5/zB+z+J+VP2bxPzt/zOL/p/wxi/85+WMW/3Pzxyz+f84fs/iflz9m8f9L/pjF//z8MYv/X/PHLP4X5I9Z/P+WP2bxvzB/zOJ/Uf6Yxf/i/DGL/9/zxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n8D+J877H9xXP+lWfxvbP/HLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788fe7v7jjbx+V/7Y291/VHfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8R+WPybxHzSQP2bxH2T1H2fsN1v8B1v9/00W/3Hyxyz+Q/LHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/878scs/u/MH7P4vyt/zOL/7vwxi/978scs/lPnj1n835s/ZvF/X/6Yxf/9+WMW/w/kj1n8p8kfs/h/MH/M4j9t/pjFf2j+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOI/a/6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjF/+P5Yxb/T+SPWfw/mT9m8f9U/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8P50/ZvH/TP6YxX+J/DGL/5L5Yxb/z+aPWfyXyh+z+H8uf8ziv3T+mMV/mfwxi//n88cs/svmj1n8l8sfs/gvnz9m8f9C/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8v5g/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/l/KH7P4fzl/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP5fyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4Zm/2Fv/Mgt/huZ/ceSxX/j/DGL/1fzxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/9fyxyz+W+WPWfy3zh+z+G+TP2bx/3r+mMX/G/ljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9m/pjF/1v5Yxb/b+ePWfy/kz8m8B9+MWjH/DGB//AG7ZQ/ZvHfOX/M4v/d/DGL/y75Yxb/7+WPWfx3zR+z+O+WP2bx/37+mMV/9/wxi/8e+WMW/z3zxyz+P8gfs/jvlT9m8f9h/pjF/0f5Yxb/vfPHLP775I9Z/PfNH7P4/zh/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4/yR/zOJ/SP6Yxf/Q/DGL/0/zxyz+P8sfs/gflj9m8f95/pjF//D8MYv/EfljFv8j88cs/r/IH7P4/zJ/zOJ/VP6Yxf9X+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOL/6/wxi/8J+WMW/9/kj1n8T8wfs/iflD9m8f9t/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/j/Ln/M4n9G/pjF//f5Yxb/M/PHLP5/yB+z+P8xf8zif1b+mMX/7Pwxi/+f8scs/ufkj1n8z80fs/j/OX/M4n9e/pjF/y/5Yxb/8/PHLP5/zR+z+F+QP2bx/1v+mMX/wvwxi/9F+WMW/4vzxyz+f88fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8ziPyx/TOL/2tX8/zWL/6D8MYv/4Pwxi/84+WMW/yH5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/HfljFv935o9Z/N+VP2bxf3f+mMX/PfljFv+p88cs/u/NH7P4vy9/zOL//vwxi/8H8scs/tPkj1n8P5g/ZvGfNn/M4j80f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/ofwxi/+H88cs/h/JH7P4fzR/zOL/sfwxi/9s+WMW/9nz/9eGDdP4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi//H88cs/p/IH7P4fzJ/zOL/qfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+H86f8zi/5n8MYv/EvljFv8l88cs/p/NH7P4L5U/ZvH/XP6YxX/p/DGL/zL5Yxb/z+ePWfyXzR+z+C+XP2bxXz5/zOL/hfwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+H8xf8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfy/lD9m8f9y/pjFf838MYv/WvljFv+188cs/uvkj1n8v5I/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8N88cs/hvlj1n8N84fs/h/NX/M4r9J/pjFf9P8MYv/ZvljFv/NX/Mf8laN6r82i/8W7f+YxX/L/DGL/9fyxyz+W+WPWfy3zh+z+G+TP2bx/3r+mMX/G/ljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9m/pjF/1v5Yxb/b+ePWfy/kz9m8d8xf8ziv1P+mMV/5/wxi/9388cs/rvkj1n8v5c/ZvHfNX/M4r9b/pjF//v5Yxb/3fPHLP575I9Z/PfMH7P4/yB/zOK/V/6Yxf+H+WMW/x/lj1n8984fs/jvkz9m8d83f8zi/+P8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zi/5P8MYv/IfljFv9D88cs/j/NH7P4/yx/zOJ/WP6Yxf/n+WMW/8Pzxyz+R+SPWfyPzB+z+P8if8zi/8v8MYv/UfljFv9f5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/r/PHLP4n5I9Z/H+TP2bxPzF/zOJ/Uv6Yxf+3+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOL/u/wxi/8Z+WMW/9/nj1n8z8wfs/j/IX/M4v/H/DGL/1n5Yxb/s/PHLP5/yh+z+J+TP2bxPzd/zOL/5/wxi/95+WMW/7/kj1n8z88fs/j/NX/M4n9B/pjF/2/5Yxb/C/PHLP4X5Y9Z/C/OH7P4/z1/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/7D8MYn/OAP5Yxb/QfljFv/B+WMW/3Hyxyz+Q/LHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/878scs/u/M/x+9Ouz16xb/d+WPWfzfnT9m8X9P/pjFf+r8MYv/e/PHLP7vyx+z+L8/f8zi/4H8MYv/NPljFv8P5o9Z/KfNH7P4D80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+H8sf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/p/PHLP6fyR+z+C+RP2bxXzJ/zOL/2fwxi/9S+WMW/8/lj1n8l84fs/gvkz9m8f98/pjFf9n8MYv/cvljFv/l88cs/l943f/FYSN6S4b335bFf4X2f8ziv2L+mMV/pfwxi//K+WMW/y/mj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+X8scs/l/OH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/V/LHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv+v5o9Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+v5Y9Z/LfKH7P4b50/ZvHfJn/M4v/1/DGL/zfyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/zfwxi/+38scs/t/OH7P4fyd/zOK/Y/6YxX+n/DGL/875Yxb/7+aPWfx3yR+z+H8vf8ziv2v+mMV/t/wxi//388cs/rvnj1n898gfs/jvmT9m8f9B/pjFf6/8MYv/D/PHLP4/yh+z+O+dP2bx3yd/zOK/b/6Yxf/H+WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf8n+WMW/0Pyxyz+h+aPWfx/mj9m8f9Z/pjF/7D8MYv/z/PHLP6H549Z/I/IH7P4H5k/ZvH/Rf6Yxf+X+WMW/6Pyxyz+v8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/1/nj1n8T8gfs/j/Jn/M4n9i/pjF/6T8MYv/b/PHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/3f5Yxb/M/LHLP6/zx+z+J+ZP2bx/0P+mMX/j/ljFv+z8scs/mfnj1n8/5Q/ZvE/J3/M4n9u/pjF/8/5Yxb/8/LHLP5/yR+z+J+fP2bx/2v+mMX/gvwxi//f8scs/hfmj1n8L8ofs/hfnD9m8f97/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/Eav/hGO/2eL/qNX/32Txfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8R+WPybxHzKQP2bxH5Q/ZvEfnD9m8R8nf8ziPyR/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/i/I3/M4v/O/DGL/7vyxyz+784fs/i/J3/M4j91/pjF/735Yxb/9+WPWfzfnz9m8f9A/pjFf5r8MYv/B/PHLP7T5o9Z/Ifmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfw/lD9m8f9w/pjF/yP5Yxb/j+aPWfw/lj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/D+eP2bx/0T+mMX/k/ljFv9P5Y9Z/BfJH7P4L5o/ZvFfLH/M4r94/pjF/9P5Yxb/z+SPWfyXyB+z+C+ZP2bx/2z+mMV/qfwxi//n8scs/kvnj1n8l8kfs/h/Pn/M4r9s/pjFf7n8MYv/8vljFv8v5I9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjF/4v5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4v+l/DGL/5fzxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOL/lfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOK/cf6Yxf+r+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf9r+WMW/63yxyz+W+ePWfy3yR+z+H89f8zi/438MYv/tvljFv/t8scs/tvnj1n8d8gfs/h/M3/M4v+t/DGL/7fzxyz+38kfs/jvmD9m8d8pf8ziv3P+mMX/u/ljFv9d8scs/t/LH7P475o/ZvHfLX/M4v/9/DGL/+75Yxb/PfLHLP575o9Z/H+QP2bx3yt/zOL/w/wxi/+P8scs/nvnj1n898kfs/jvmz9m8f9x/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8f9J/pjF/5D8MYv/ofljFv+f5o9Z/H+WP2bxPyx/zOL/8/wxi//h+WMW/yPyxyz+R+aPWfx/kT9m8f9l/pjF/6j8MYv/r/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/9f5Yxb/E/LHLP6/yR+z+J+YP2bxPyl/zOL/2/wxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bx/13+mMX/jPwxi//v88cs/mfmj1n8/5A/ZvH/Y/6Yxf+s/DGL/9n5Yxb/P+WPWfzPyR+z+J+bP2bx/3P+mMX/vPwxi/9f8scs/ufnj1n8/5o/ZvG/IH/M4v+3/DGL/4X5Yxb/i/LHLP4X549Z/P+eP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6YxX9Y/pjEf9yB/DGL/6D8MYv/4Pwxi/84+WMW/yH5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/HfljFv935o9Z/N+VP2bxf3f+mMX/PfljFv+p88cs/u/NH7P4vy9/zOL//vwxi/8H8scs/tPkj1n8P5g/ZvGfNn/M4j80f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/ofwxi/+H88cs/h/JH7P4fzR/zOL/sfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4v/x/DGL/yfyxyz+n8wfs/h/Kn/M4r9I/pjFf9H8MYv/YvljFv/F88cs/p/OH7P4fyZ/zOK/RP6YxX/J/DGL/2fzxyz+S+WPWfw/lz9m8V86f8ziv0z+mMX/8/ljFv9l88cs/svlj1n8l88fs/h/IX/M4r9C/pjFf8X8MYv/SvljFv+V88cs/l/MH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8v5Y9Z/L+cP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/r+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP5fzR+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5fyx+z+G+VP2bx3zp/zOK/Tf6Yxf/r+WMW/2/kj1n8t80fs/hvlz9m8d8+f8ziv0P+mMX/m/ljFv9v5Y9Z/L+dP2bx/07+mMV/x/wxi/9O+WMW/53zxyz+380fs/jvkj9m8f9e/pjFf9f8MYv/bvljFv/v549Z/HfPH7P475E/ZvHfM3/M4v+D/DGL/175Yxb/H+aPWfx/lD9m8d87f8ziv0/+mMV/3/wxi/+P88cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/9P8scs/ofkj1n8D80fs/j/NH/M4v+z/DGL/2H5Yxb/n+ePWfwPzx+z+B+RP2bxPzJ/zOL/i/wxi/8v88cs/kflj1n8f5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/r/OH7P4n5A/ZvH/Tf6Yxf/E/DGL/0n5Yxb/3+aPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/+/yxyz+Z+SPWfx/nz9m8T8zf8zi/4f8MYv/H/PHLP5n5Y9Z/M/OH7P4/yl/zOJ/Tv6Yxf/c/DGL/5/zxyz+5+WPWfz/kj9m8T8/f8zi/9f8MYv/BfljFv+/5Y9Z/C/MH7P4X5Q/ZvG/OH/M4v/3/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP7D8sck/uMN5I9Z/Aflj1n8B+ePWfzHyR+z+A/JH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+78gfs/i/M3/M4v+u/DGL/7vzxyz+78kfs/hPnT9m8X9v/pjF/335Yxb/9+ePWfw/kD9m8Z8mf8zi/8H8x+y16bD4T5s/ZvEfmj9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/1D+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvH/eP6Yxf8T+WMW/0/mj1n8P5U/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv9P549Z/D+TP2bxXyJ/zOK/ZP6Yxf+z+WMW/6Xyxyz+n8sfs/gvnT9m8V8mf8zi//n8MYv/svljFv/l8scs/svnj1n8v5A/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv8v5o9Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/l/LHLP5fzh+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/1fyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/r+aPWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/r+WPWfy3yh+z+G+dP2bx3yZ/zOL/9fwxi/838scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/838MYv/t/LHLP7fzh+z+H8nf8ziv2P+mMV/p/wxi//O+WMW/+/mj1n8d8kfs/h/L3/M4r9r/pjFf7f8MYv/9/PHLP67549Z/PfIH7P475k/ZvH/Qf6YxX+v/DGL/w/zxyz+P8ofs/jvnT9m8d8nf8ziv2/+mMX/x/ljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/J/ljFv9D8scs/ofmj1n8f5o/ZvH/Wf6Yxf+w/DGL/8/zxyz+h+ePWfyPyB+z+B+ZP2bx/0X+mMX/l/ljFv+j8scs/r/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv9f549Z/E/IH7P4/yZ/zOJ/Yv6Yxf+k/DGL/2/zxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf93+WMW/zPyxyz+v88fs/ifmT9m8f9D/pjF/4/5Yxb/s/LHLP5n549Z/P+UP2bxPyd/zOJ/bv6Yxf/P+WMW//Pyxyz+f8kfs/ifnz9m8f9r/pjF/4L8MYv/3/LHLP4X5o9Z/C/KH7P4X5w/ZvH/e/6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/YfljEv/xB/LHLP6D8scs/oPzxyz+4+SPWfyH5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/9U+WMW/3fkj1n835k/ZvF/V/6Yxf/d+WMW//fkj1n8p84fs/i/N3/M4v++/DGL//vzxyz+H8gfs/hPkz9m8f9g/pjFf9r8MYv/0Pwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/x/PHLP6fyB+z+H8yf8zi/6n8MYv/IvljFv9F88cs/ovlj1n8F88fs/h/On/M4v+Z/DGL/xL5Yxb/JfPHLP6fzR+z+C+VP2bx/1z+mMV/6fwxi/8y+WMW/8/nj1n8l80fs/gvlz9m8V8+f+xt7v/8sGHDhl8d/wv5Y29z/1GNv0L+mMV/xfwxi/9K+WMW/5Xzxyz+X8wfs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/y/lj1n8v5w/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv+v5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/l/NH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/l/LH7P4b5U/ZvHfOn/M4r9N/pjF/+v5Yxb/b+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6Yxf+b+WMW/2/lj1n8v50/ZvH/Tv7QZye2+O+YP2bx3yl/zOK/c/6Yxf+7+WMW/13yxyz+38sfs/jvmj9m8d8tf8zi//38MYv/7vljFv898scs/nvmj1n8f5A/ZvHfK3/M4v/D/DGL/4/yxyz+e+ePWfz3yR+z+O+bP2bx/3H+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bx/0n+mMX/kPwxi/+h+WMW/5/mj1n8f5Y/ZvE/LH/M4v/z/DGL/+H5Yxb/I/LHLP5H5o9Z/H+RP2bx/2X+mMX/qPwxi/+v8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/1/ljFv8T8scs/r/JH7P4n5g/ZvE/KX/M4v/b/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvH/Xf6Yxf+M/DGL/+/zxyz+Z+aPWfz/kD9m8f9j/pjF/6wx/cf9Xx7Xf2kW/7Pb/zGL/5/yxyz+5+SPWfzPzR+z+P85f8zif17+mMX/L/ljFv/z88cs/n/NH7P4X5A/ZvH/W/6Yxf/C/DGL/0X5Yxb/i/PHLP5/zx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOI/LH9M4j/BQP6YxX9Q/pjFf3D+2D/7jz/wdvUfJ3/Msv8PyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv+p8scs/u/IH7P4vzN/zOL/rvwxi/+788cs/u/JH7P4T50/ZvF/b/6Yxf99+WMW//fnj1n8P5A/ZvGfJn/M4v/B/DGL/7T5Yxb/ofljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/j+ePWfw/kT9m8f9k/pjF/1P5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvH/dP6Yxf8z+WMW/yXyxyz+S+aPWfw/mz9m8V8qf8zi/7n8MYv/0vljFv9l8scs/p/PH7P4L5s/ZvFfLn/M4r98/pjF/wv5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvH/Yv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4fyl/zOL/5fwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+H8lf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+G+cP2bx/2r+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/1r+mMV/q/wxi//W+WMW/23yxyz+X88fs/h/I3/M4r9t/pjFf7v8MYv/9vljFv8d8scs/t/MH7P4fyt/zOL/7fwxi/938scs/jvmj1n8d8ofs/jvnD9m8f9u/pjFf5f8MYv/9/LHLP675o9Z/HfLH7P4fz9/zOK/e/6YxX+P/DGL/575Yxb/H+SPWfz3yh+z+P8wf8zi/6P8MYv/3vljFv998scs/vvmj1n8f5w/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8f5I/ZvE/JH/M4n9o/v/aEI//T/PHLP4/yx97m/oPGhjYafSlExyWP/Y29X+t0ff/n+ePWfwPzx+z+B+RP2bxPzJ/zOL/i/wxi/8v88cs/kflj1n8f5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/r/OH7P4n5A/ZvH/Tf6Yxf/E/DGL/0n5Yxb/3+aPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/+/yxyz+Z+SPWfx/nz9m8T8zf8zi/4f8MYv/H/PHLP5n5Y9Z/M/OH7P4/yl/zOJ/Tv6Yxf/c/DGL/5/zxyz+5+WPWfz/kj9m8T8/f8zi/9f8MYv/BfljFv+/5Y9Z/C/MH7P4X5Q/ZvG/OH/M4v/3/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP7D8sck/hMO5I9Z/Aflj1n8B+ePWfzHyR+z+A/JH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+78gfs/i/M3/M4v+u/DGL/7vzxyz+78kfs/hPnT9m8X9v/pjF/335Yxb/9+ePWfw/kD9m8Z8mf8zi/8H8MYv/tPljFv+h+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/D+WPWfw/nD9m8f9I/pjF/6P5Yxb/j+WPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv+P549Z/D+RP2bx/2T+mMX/U/ljFv9F8scs/ovmj1n8Fxu7/yL/18f1X5rFf/H2f8zi/+n8MYv/Z/LHLP5L5I9Z/JfMH7P4fzZ/zOK/VP6Yxf9zb8Z/8P/Fcf2XZvFfuv0fs/gvkz9m8f98/pjFf9n8MYv/cvljFv/l88cs/l/IH7P4r5A/ZvFfMX/sbew/OveEK+WPvY39/2n/Xzl/zOL/xfwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bx/1L+mMX/y/ljFv8188cs/mvlj1n8184fs/ivkz9m8f9K/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/9X8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8zi/7X8MYv/VvljFv+t88cs/tvkj1n8v54/ZvH/Rv6YxX/b/DGL/3b5Y29T/9eoR/ffPn/sber/WqP775A/ZvH/Zv6Yxf9b+WMW/2/7/N/Up9lY/L/j839TWfx3zB+z+O+UP2bx3zl/zOL/3fwxi/8u+WMW/+/lj1n8d80fs/jvlj9m8f9+/pjFf/f8MYv/HvljFv8988cs/j/IH7P475U/ZvH/Yf6Yxf9H+WMW/73zxyz+++SPWfz3zR+z+P84f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+P9krP7eZ4bF/xC18htn8T80f8zi/9P8MYv/z/LHLP6H5Y9Z/H+eP2bxPzx/zOJ/RP6Yxf/I/DGL/y/yxyz+v8wfs/gflT9m8f9V/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/j/On/M4n9C/pjF/zf5Yxb/E/PHLP4n5Y9Z/H+bP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP6/yx+z+J+RP2bx/33+mMX/zPwxi/8f8scs/n/MH7P4n5U/ZvE/O3/M4v+n/DGL/zn5Yxb/c/PHLP5/zh+z+J+XP2bx/0v+mMX//Pwxi/9f88cs/hfkj1n8/5Y/ZvG/MH/M4n9R/pjF/+L8MYv/3/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u9+k/wT/t8b1X5rF/572f8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMV/WP6YxH+igfwxi/+g/DGL/+D8MYv/OPljFv8h+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/SfPHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF/x35Yxb/d+aPWfzflT9m8X93/pjF/z35Yxb/qfPHLP7vzR+z+L8vf8zi//78MYv/B/LHLP7T5I9Z/D+YP2bxnzZ/zOI/NH/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8Z81f8zi/6H8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOL/8fwxi/8n8scs/p/MH7P4fyp/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP6fzh+z+H8mf8ziv0T+mMV/yfwxi/9n88cs/kvlj1n8P5c/ZvFfOn/M4r9M/pjF//P5Yxb/ZfPHLP7L5Y9Z/JfPH7P4fyF/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP5fzB+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/L+WPWfy/nD9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/6/kj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+X80fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+X8sfs/hvlT9m8d86f8ziv03+mMX/6/ljFv9v5I9Z/LfNH7P4b5c/ZvHfPn/M4r9D/pjF/5v5Yxb/b+WPWfy/nT9m8f9O/pjFf8f8MYv/TvljFv+d88cs/t/NH7P475I/ZvH/Xv6YxX/X/DGL/275Yxb/7+ePWfx3zx+z+O+RP2bx3zN/zOL/g/wxi/9e+WMW/x/mj1n8f5Q/ZvHfO3/M4r9P/pjFf9/8MYv/j/PHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/T/LHLP6H5I9Z/A/NH7P4/zR/zOL/s/wxi/9h+WMW/5/nj1n8D88fs/gfkT9m8T8yf8zi/4v8MYv/L/PHLP5H5Y9Z/H+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP6/zh+z+J+QP2bx/03+mMX/xPwxi/9J+WMW/9/mj1n8T84fs/ifkj9m8T81f+x1/0FD3s7+p0n9hw0b++2W/f90qf+/y+L/u/wxi/8Z+WMW/9/nj1n8z8wfs/j/IX/M4v/H/DGL/1n5Yxb/s/PHLP5/yh+z+J+TP2bxPzd/zOL/5/wxi/95+WMW/7/kj1n8z88fs/j/NX/M4n9B/pjF/2/5Yxb/C/PHLP4X5Y9Z/C/OH7P4/z1/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/7D8MYn/xAP5Yxb/QfljFv/B+WMW/3Hyxyz+Q/LHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/878scs/u/MH7P4vyt/zOL/7vwxi/978scs/lPnj1n835s/ZvF/X/6Yxf/9+WMW/w/kj1n8p8kfs/h/MH/M4j9t/pjFf2j+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOI/a/6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjF/+P5Yxb/T+SPWfw/mT9m8f9U/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8P50/ZvH/TP6YxX+J/DGL/5L5Yxb/z+aPWfyXyh+z+H8uf8ziv3T+mMV/mfwxi//n88cs/svmj1n8l8sfs/gvnz9m8f9C/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8v5g/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/l/KH7P4fzl/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP5fyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/L+aP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/L+WP2bx3yp/zOK/df6YxX+b/DGL/9fzxyz+38gfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/8388cs/t/KH7P4fzt/zOL/nfwxi/+O+WMW/53yxyz+O+ePWfy/mz9m8d8lf8zi/738MYv/rvljFv/d8scs/t/PH7P4754/ZvHfI3/M4r9n/pjF/wf5Yxb/vfLHLP4/zB+z+P8of8ziv3f+mMV/n/wxi/+++WMW/x/nj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/5/kj1n8D8kfs/gfmj9m8f9p/pjF/2f5Yxb/w/LHLP4/zx+z+B+eP2bxPyJ/zOJ/ZP6Yxf8X+WMW/1/mj1n8j8ofs/j/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8f50/ZvE/IX/M4v+b/DGL/4n5Yxb/k/LHLP6/zR+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/3+WPWfzPyB+z+P8+f8zif2b+mMX/D/ljFv8/5o9Z/M/KH7P4n50/ZvH/U/6Yxf+c/DGL/7n5Yxb/P+ePWfzPyx+z+P8lf8zif37+mMX/r/ljFv8L8scs/n/LH7P4X5g/ZvG/KH/M4n9x/pjF/+/5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/Iflj0n8JxnIH7P4D8ofs/gPzh+z+I+TP2bxH5I/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J9f6DcanFfyK9P2fxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/yfPHLP5T5I9Z/KfMH7P4T5U/ZvF/R/6Yxf+d+WMW/3flj1n8350/ZvF/T/6YxX/q/DGL/3vzxyz+78sfs/i/P3/M4v+B/DGL/zT5Yxb/D+aPWfynzR+z+A/NH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/KH/M4v/h/DGL/0fyxyz+H80fs/h/LH/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+H88f8zi/4n8MYv/J/PHLP6fyh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/6fzxyz+n8kfs/gvkT9m8V8yf8zi/9n8MYv/UvljFv/P5Y9Z/JfOH7P4L5M/ZvH/fP6YxX/Z/DGL/3L5Yxb/5fPHLP5fyB+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/xfzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6Yxf9L+WMW/y/nj1n818wfs/ivlT9m8V87f8ziv07+mMX/K/ljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMV/4/wxi/9X88cs/pvkj1n8N80fs/hvlj9m8d88f8ziv4XMf7w3uZ7Ff0uZ/5vN4v+1/DGL/1b5Yxb/rfPHLP7b5I9Z/L+eP2bx/0b+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfy/mT9m8f9W/pjF/9v5Yxb/7+SPWfx3zB+z+O+UP2bx3zl/zOL/3fwxi/8u+WMW/+/lj1n8d80fs/jvlj9m8f9+/pjFf/f8MYv/HvljFv8988cs/j/IH7P475U/ZvH/Yf6Yxf9H+WMW/73zxyz+++SPWfz3zR+z+P84f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+P8kf8zif0j+mMX/0Pwxi/9P88cs/j/LH7P4H5Y/ZvH/ef6Yxf/w/DGL/xH5Yxb/I/PHLP6/yB+z+P8yf8zif1T+mMX/V/ljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zi/+v8MYv/CfljFv/f5I9Z/E/MH7P4n5Q/ZvH/bf6Yxf/k/LHX/ScceDv7n5I/Ztn/T80fs/iflj9m8T89f8zi/7v8MYv/GfljFv/f549Z/M/MH7P4/yF/zOL/x/wxi/9Z+WMW/7Pzxyz+f8ofs/ifkz9m8T83f8zi/+d/6//q/91x/Zdm8T+v/R+z+P8lf8zif37+mMX/r/ljFv8L8scs/n/LH7P4X5g/ZvG/KH/M4n9x/pjF/+/5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf8lkf+Q/2Bdi//LIv//JIv/K/ljFv9X88cs/sPyxyT+kw7kj1n8B+WPWfwH549Z/MfJH7P4D8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP7vyB+z+L8zf8zi/678MYv/u/PHLP7vyR+z+E+dP2bxf2/+2NvUf8Ixlk76vvyxt6n/a42+/78/f8zi/4H8MYv/NPljFv8P5o9Z/KfNH7P4D80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+H8sf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/p/PHLP6fyR+z+C+RP2bxXzJ/zOL/2fwxi/9S+WMW/8/lj1n8l84fs/gvkz9m8f98/pjFf9n8MYv/cvljFv/l88cs/l/IH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/F/PHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjF/0v5Yxb/L+ePWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf8r+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/1fzxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/9fyxyz+W+WPWfy3zh+z+G+TP2bx/3r+mMX/G/ljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9m/pjF/1v5Yxb/b+ePWfy/kz9m8d8xf8ziv1P+mMV/5/wxi/9388cs/rvkj1n8v5c/ZvHfNX/M4r9b/pjF//v5Yxb/3fPHLP575I9Z/PfMH7P4/yB/zOK/V/6Yxf+H+WMW/x/lj1n8984fs/jvkz9m8d83f8zi/+P8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zi/5P8MYv/IfljFv9D88cs/j/NH7P4/yx/zOJ/WP6Yxf/n+WMW/8Pzx96O/oMGBnYaGMP/iPyxt6M/7f9H5o9Z/H+RP2bx/2X+mMX/qPwxi/+v8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/1/ljFv8T8scs/r/JH7P4n5g/ZvE/KX/M4v/b/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvH/Xf6Yxf+M/DGL/+/zxyz+Z+aPWfz/kD9m8f9j/pjF/6z8MYv/2fljFv8/5Y9Z/M/JH7P4n5s/ZvH/c/6Yxf+8/DGL/1/yxyz+5+ePWfz/mj9m8b8gf8zi/7f8MYv/hfljFv+L8scs/hfnj1n8/54/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjFf1j+mMR/soH8MYv/oPwxi//g/DGL/zj5Yxb/IfljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOI/Vf6Yxf8d+WMW/3fmj1n835U/ZvF/d/6Yxf89+WMW/6nzxyz+780fs/i/L3/M4v/+/DGL/wfyxyz+0+SPWfw/mD9m8Z82f8ziPzR/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8zi//H8MYv/J/LHLP6fzB+z+H8qf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+n84fs/h/Jn/M4r9E/pjFf8n8MYv/Z/PHLP5L5Y9Z/D+XP2bxXzp/zOK/TP6Yxf/z+WMW/2Xzxyz+y+WPWfyXzx+z+H8hf8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+X8wfs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/y/lj1n8v5w/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv+v5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/l/NH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/l/LH7P4b5U/ZvHfOn/M4r9N/pjF/+v5Yxb/b+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6Yxf+b+WMW/2/lj1n8v50/ZvH/Tv6YxX/H/DGL/075Yxb/nfPHLP7fzR+z+O+SP2bx/17+mMV/1/wxi/9u+WMW/+/nj1n8d88fs/jvkT9m8d8zf8zi/4P8MYv/XvljFv8f5o9Z/H+UP2bx3zt/zOK/T/6YxX/f/DGL/4/zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/0/yxyz+h+SPWfwPzR+z+P80f8zi/7P8MYv/YfljFv+f549Z/A/PH7P4H5E/ZvE/Mn/M4v+L/DGL/y/zxyz+R+WPWfx/lT9m8T86f8zif0z+2Bj+J79d/Y/NH7Ps/8flj1n8j88fs/j/On/M4n9C/pjF/zf5Yxb/E/PHLP4n5Y9Z/H+bP2bxPzl/zOJ/Sv6Yxf/U/LHR/Ae9nf1Pyx+z7P+n549Z/H+XP2bxPyN/zOL/+/wxi/+Z+WMW/z/kj1n8/5g/ZvE/K3/M4n92/pjF/0/5Yxb/c/LHLP7n5o9Z/P+cP2bxPy9/zOL/l/wxi//5+WMW/7/mj1n8L8gfs/j/LX/M4n9h/pjF/6L8MYv/xfljFv+/549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P430v+4/8vjuu/NIv/fe3/mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X38j//2Pn7uO1rus7jv84fA8gKkfnaqFhBKJoKggqknmDlnoEjnZjKQlKijcTlCkFulKyG2srZ7nKtZXmTepMLZ0113SUc06Xzcpqm825mXOtdFlO3bxhjyPnEOf06Tw8P3/7ufF5Pv+Ac12nzxXyetSb6/A4lpZ+Xf9HZen/tP/9h7L0f0b/UJb+z+ofytL/Of1DWfqv1T+UpH9XpX8oS/8R+oey9O/QP5Sl/0j9Q1n6F/1DWfp36h/K0n+U/qEs/UfrH8rSf4z+oSz9N9E/lKX/WP1DWfpvqn8oS//N9A9l6b+5/qEs/cfpH8rSv0v/UJb+W+gfytJ/S/1DWfr/mv6hLP230j+Upf+v6x/K0v9l+oey9H+5/qEs/X9D/1CW/q/QP5Sl/3j9Q1n6b61/KEv/bfQPZen/Sv1DWfpP0D+Upf+2+oey9H+V/qEs/SfqH8rS/9X6h7L0n6R/KEv/yfqHsvTfTv9Qlv5T9A9l6b+9/qEs/XfQP5Sl/1T9Q1n676h/KEv/nfQPZen/Gv1DWfrvrH8oS/9d9A9l6b+r/qEs/afpH8rSf7r+oSz9d9M/lKX/DP1DG3v/Ues+7Jqpf2hj79+na3f9Q1n676F/KEv/PfUPZek/S/9Qlv576R/K0n+2/qEs/V+rfyhL/731D2Xp/zr9Q1n676N/KEv/ffUPZem/n/6hLP331z+Upf8c/UNZ+h+gfyhL/wP1D2Xp/3r9Q1n6v0H/UJb+B+kfytL/YP1DWfofon8oS/9u/UNZ+h+qfyhL/7n6h7L0n6d/KEv/+fqHsvTv0T+Upf9h+oey9D9c/1CW/m/UP5Sl/5v0D2Xp/2b9Q1n6v0X/UJb+R+gfytL/rfqHsvR/m/6hLP2P1D+Upf9R+oey9F+gfyhL/7frH8rS/2j9Q1n6L9Q/lKX/Iv1DWfofo38oS/9j9Q9l6b9Y/1CW/u/QP5Sl/3H6h7L0P17/UJb+S/QPZel/gv6hLP1P1D+Upf9J+oey9D9Z/1CW/r+pfyhL/1P0D2Xpv1T/UJb+y/QPZel/qv6hLP1P0z+Upf9y/UNZ+v+W/qEs/U/XP5Sl/xn6h7L0X6F/KEv/d+ofytL/XfqHsvRfqX8oS/9V+oey9D9T/1CW/mfpH8rS/7f1D2Xp/279Q1n6v0f/UJb+Z+sfytL/HP1DWfqv1j+Upf979Q9l6X+u/qEs/d+nfyhL//frH8rS/wP6h7L0/6D+oSz9z9M/lKX/h/QPZen/Yf1DWfr/jv6hLP1/V/9Qlv4f0T+Upf9H9Q9l6X++/qEs/X9P/1CW/hfoH8rS/2P6h7L0/7j+oSz9L9Q/lKX/7+sfytL/E/qHsvT/pP6hLP0/pX8oS/+L9A9l6f8H+oey9P+0/qEs/f9Q/1CW/n+kfyhL/8/oH8rS/7P6h7L0v1j/UJb+l+gfytL/c/qHsvS/VP9Qlv6X6R/K0v9y/UNZ+l+hfyhL/8/rH8rS/0r9Q1n6X6V/KEv/q/UPZen/x/qHsvS/Rv9Qlv5f0D+Upf+1+oey9L9O/1CW/tfrH8rS/4v6h7L0/5L+oSz9b9A/lKX/jfqHsvT/E/1DWfrfpH8oS/8v6x/K0v8r+oey9P9T/UNZ+t+sfyhL/z/TP5Sl/1f1D2Xp/+f6h7L0v0X/UJb+t+ofytL/L/QPZem/Rv9Qlv5f0z+Upf/X9Q9l6X+b/qEs/f9S/1CW/rfrH8rS/6/0D2Xpf4f+oSz9/1r/UJb+d+ofytL/Lv1DWfr/jf6hLP2/oX8oS/+79Q9l6f9N/UNZ+v+t/qEs/e/RP5Sl/7f0D2Xp/239Q1n6f0f/UJb+9+ofytL/u/qHsvT/nv6hLP2/r38oS/+/0z+Upf/f6x/K0v8f9A9l6X+f/qEs/X+gfyhL/3/UP5Sl//36h7L0/yf9Q1n6P6B/KEv/f9Y/lKX/v+gfytL/Qf1DWfr/UP9Qlv4P6R/K0v9f9Q9l6f+w/qEs/f9N/1CW/j/SP5Sl/7/rH8rS/8f6h7L0/4n+oSz9H9E/lKX/o/qHsvT/D/1DWfr/VP9Qlv6P6R/K0v9n+oey9P+5/qEs/R/XP5Sl/3/qH8rS/wn9Q1n6P6l/KEv/p/QPZen/X/qHsvT/b/1DWfo/rX8oS/9n9A9l6f+s/qEs/Z/TP5Sl/1r9Q0n6b1HpH8rSf4T+oSz9O/QPZek/Uv9Qlv5F/1CW/p36h7L0H6V/KEv/0fqHsvQfo38oS/9N9A9l6T9W/1CW/pvqH8rSfzP9Q1n6b65/KEv/cfqHsvTv0j+00fUHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKqqu2fOIyNHDHhq5IYPJty95Pmfd3/yyJOuuOLLW/b/3PfpucFLdmz4YO3atWs7Hq++0fdwdFVVvf9tW/Q9HjP4uPf1z5lz0dR1j8rES5/a6ZqVTx3wwevvverJg6+ce03n8892VseecPLSJdM7qqpM7qxW9T7YbURVle07qwt6H8zofbBDZ3VV74OZzz/YpFrT+2DX405benzvE1Nr/54BwP933T2rq5EDFrsa8KeBDff/nDk3ru7/eYiX7H+1UvXt/803bPWuQZ/r9yv2v//1y6sH7/+w/wEBgF8yvP2/bWL/z0O85C+9/59/6ifvjT73q/e///XLJPsPAM0Lvv4/YKMHf91/0Nf/oz8HrL8/5ZgLR/fu/5VPHrGi76nyQr7+/4vXL5MH73/HgK//j6iqsl3/1/9HV1WZ8iJ/OwAghe6e9z4y1Pv/ofe/bD3oZsSG+7/ltWuO6N3/+8de//K+pzqHuf/bDfX+/6BBv1YA4IXp7vnc2kHv/4ex/9X2wUuu3/8DV935st79/9b9P5y4weeGs/9TBu//tBXLlk8748yzdjl52eITl5y45NTZs2bttcesPWfPmPb8VwTW/fgif1MAYCP34t7/V2MH3YyoqofW33/klgl39u7/jE8fclLfU2OGuf/bD/n+f6L3/wAwwKSOatSoatXiFStO323dj/0PZ6z7cd1/LNj/Yfz9/+T+b6Lr/57BEVX1ivX3PWd8qKN3/y+bvPUtfU+NGub+7zDk/u8/8HsVAYAX5kW+/z9+0M2A/e8aefXs3v0/dMqO5/U9Ndy//5865P5f4v0/ANTR3VP9r76J7t3/czd79uJ612VH3/8HAM1rY/8fnfC+SfWuy072HwCa18b+L9lv85vqXZfX2H8AaF4b+39H94UL612Xne0/ADSvjf2fd8qEu+pdl13sPwA0r439n3jWcSvrXZdd7T8ANK+N/b/myEceqHddpg3Y/zH2HwCa0Mb+Hz3m/sfqXZfp3v8DQPPa2P/v73T4CfWuy272HwCa18b+f3XvXe+rd11m2H8AaF4b+z99/CXz6l2XmfYfAJrXxv5//LR9L693XXa3/wDQvDb2f/z8L86sd132sP8A0Lw29v+dR3/z/HrXZU/7DwDNa2P/nzt7//H1rsss+w8AzWtj/9fcse2CetdlL/sPAM1rY//nPnTB3fWuy2z7DwDNa2P/d3j80eX1rstr7T8ANK+N/f/C9459uN512dv+A0Dz2tj/cZc811XvurzO/gNA89rY/w+cu/yietdlH/sPAM1rY/9/dOG4KfWuy772HwCa18b+v+NLq2+od132s/8A0Lw29v/bD86cW++67G//AaB5bez/UV+75Qf1rssc+w8AzWtj//e457bF9a7LAfYfAJrXxv7f+rP5T9S7LgfafwBoXhv7/8r3f2fbetfl9fYfAJrXxv5/6vMLP1zvurzB/gNA89rY/6e/Mnn3etflIPsPAM1rY/+Xf+Lay+pdl4PtPwA0r43979n55w/Uuy6H2H8AaF4b+3/7uPesrHdduu0/ADSvjf2/+lUj76p3XQ61/wDQvDb2f9I+H11Y77rMtf8A0Lw29n/13K1uqndd5tl/AGheG/u/6cmfmVTvusy3/wDQvDb2/8RVD15c77r02H8AaF4b+/+TBcvG1Lsuh9l/AGheG/u/zdhF4+tdl8PtPwA0r439v2DqPefXuy5vtP8A0Lw29v+Z2dfNrHdd3mT/AaB5bez/ym0mXl7vurzZ/gNA89rY/+8uu3VevevyFvsPAM1rY/8XHTb9vnrX5Qj7DwDNa2P/ZyzqOaHedXmr/QeA5rWx/ze/e81j9a7L2+w/ADSvjf0/7/bP3lDvuhxp/wGgeW3s/2YPbzGl3nU5yv4DQPPa2P9jnzj1onrXZYH9B4DmtbH/P773ga561+Xt9h8AmtfG/ndfevbD9a7L0fYfAJrXxv5/ffVPl9e7LgvtPwA0r439v+5j599d77ossv8A0Lw29n/KjdWCetflGPsPAM0748yzTlm8dOmS033gAx/4YP0HL/X/MwEAAE37xR/6X+pfCQAAAAAAAAAAAAAAAAAAAOTVxr9O7KX+ZwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAABAkL/1CgMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcAAAD//9975MI=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x8000c61) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 3.660782544s ago: executing program 2 (id=1391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x36, 0x0, 0x0) 3.348032863s ago: executing program 2 (id=1392): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) getrlimit(0xa, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000380)={0x4, {{0xa, 0x4e23, 0x8000, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4c1f}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 3.175491869s ago: executing program 3 (id=1393): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/19], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./bus\x00', 0xd000, &(0x7f00000003c0)={[{@init_itable_val={'init_itable', 0x3d, 0xc}}, {@debug}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.)){R'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_user={'obj_user', 0x3d, 'x#('}}]}, 0x1, 0x502, &(0x7f0000002080)="$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") ftruncate(0xffffffffffffffff, 0xc17a) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r0, 0x1d853000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000280)=ANY=[], 0x18}, 0x0) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000000), 0x4) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f00000029c0)={0x2, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.277628043s ago: executing program 3 (id=1394): r0 = socket$rxrpc(0x21, 0x2, 0xa) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() io_setup(0x202, &(0x7f0000000200)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0) 935.866554ms ago: executing program 4 (id=1395): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) set_mempolicy_home_node(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0) 840.439613ms ago: executing program 0 (id=1396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{r0}, &(0x7f00000002c0), 0x0}, 0x20) 83.114782ms ago: executing program 0 (id=1397): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) creat(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 0s ago: executing program 3 (id=1398): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0x4112, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) kernel console output (not intermixed with test programs): 9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1176 (9667) [ 626.154065][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 626.169889][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 626.199508][ T3829] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.206673][ T3829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.218952][ T9667] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 626.250522][ T9667] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 626.261835][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 626.281250][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 626.299630][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 626.307070][ T9667] BTRFS info (device loop3): using free space tree [ 626.315392][ T3829] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.322608][ T3829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.339084][ T3661] Bluetooth: hci3: command 0x0406 tx timeout [ 626.339217][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 626.362503][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 626.373361][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 626.411670][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 626.435022][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 626.486059][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 626.527179][ T9672] loop0: detected capacity change from 0 to 32768 [ 626.556544][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 626.624932][ T8201] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 626.641626][ T9672] XFS (loop0): Mounting V5 Filesystem [ 626.647799][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 626.692956][ T9667] BTRFS info (device loop3): enabling ssd optimizations [ 626.761795][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 626.780925][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 626.796295][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 626.805646][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 626.853385][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 627.212245][ T9672] XFS (loop0): Ending clean mount [ 627.278973][ T9672] XFS (loop0): Quotacheck needed: Please wait. [ 627.339345][ T27] audit: type=1800 audit(1727174919.659:63): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1176" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 627.362813][ T9717] loop1: detected capacity change from 0 to 512 [ 627.409941][ T3829] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x336/0xf80, inode 0x1807 dinode [ 627.460780][ T3829] XFS (loop0): Unmount and run xfs_repair [ 627.466582][ T3829] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 627.555711][ T3829] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 627.591639][ T3829] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 627.672473][ T3829] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 627.681788][ T3829] 00000030: 34 f7 58 68 a5 a5 b6 11 7c 0b 00 00 00 00 00 00 4.Xh....|....... [ 627.691776][ T3829] 00000040: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 01 ................ [ 627.701448][ T3829] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 bb 36 00 a5 .............6.. [ 627.710444][ T3829] 00000060: ff ff ff ff 8c da 54 79 00 00 00 00 00 00 00 06 ......Ty........ [ 627.719380][ T3829] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 628.439629][ T9672] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 628.507248][ T9426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.567490][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 628.588915][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 628.638950][ T9163] XFS (loop0): Unmounting Filesystem [ 629.250017][ T5909] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 629.748899][ T5909] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 629.769438][ T5909] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 629.813238][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.844935][ T5909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 629.870657][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.887186][ T8636] bio_check_eod: 242 callbacks suppressed [ 629.887209][ T8636] syz.2.1013: attempt to access beyond end of device [ 629.887209][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 629.945299][ T8206] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 629.969685][ T8636] syz.2.1013: attempt to access beyond end of device [ 629.969685][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 630.091921][ T8636] syz.2.1013: attempt to access beyond end of device [ 630.091921][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 630.175527][ T8636] syz.2.1013: attempt to access beyond end of device [ 630.175527][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 630.197004][ T5909] usb 2-1: string descriptor 0 read error: -22 [ 630.204296][ T5909] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 630.228665][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.244595][ T8636] syz.2.1013: attempt to access beyond end of device [ 630.244595][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 630.269694][ T5909] usb 2-1: config 0 descriptor?? [ 630.328071][ T5909] hub 2-1:0.0: bad descriptor, ignoring hub [ 630.359432][ T5909] hub: probe of 2-1:0.0 failed with error -5 [ 630.368992][ T8636] syz.2.1013: attempt to access beyond end of device [ 630.368992][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 630.380029][ T9245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 630.419752][ T9245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 630.496575][ T8636] syz.2.1013: attempt to access beyond end of device [ 630.496575][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 630.522902][ T9245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 630.555392][ T9245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 630.586708][ T9245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 630.619409][ T8636] syz.2.1013: attempt to access beyond end of device [ 630.619409][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 630.633072][ T9245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 630.645863][ T9426] device veth0_vlan entered promiscuous mode [ 630.684004][ T9426] device veth1_vlan entered promiscuous mode [ 630.758810][ T9245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 630.780296][ T9245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 630.781892][ T8636] syz.2.1013: attempt to access beyond end of device [ 630.781892][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 630.815928][ T9245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 630.838346][ T9245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 630.870501][ T9426] device veth0_macvtap entered promiscuous mode [ 630.908480][ T9426] device veth1_macvtap entered promiscuous mode [ 630.931597][ T8636] syz.2.1013: attempt to access beyond end of device [ 630.931597][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 630.986726][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.036475][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.099715][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.285155][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.429003][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.585746][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.778250][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.810592][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.844043][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.881962][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.909286][ T5910] usb 2-1: USB disconnect, device number 11 [ 631.920401][ T9426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.960207][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.006245][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.067461][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.083827][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.127039][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.145368][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.153885][ T9739] loop3: detected capacity change from 0 to 32768 [ 632.176650][ T9739] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1184 (9739) [ 632.189204][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.224062][ T9739] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 632.236134][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.246590][ T9739] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 632.255684][ T9739] BTRFS info (device loop3): using free space tree [ 632.257214][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.293324][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.338930][ T9426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.395039][ T9426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.494821][ T9426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.505849][ T9739] BTRFS info (device loop3): enabling ssd optimizations [ 632.552141][ T9426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.588506][ T9426] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.634597][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 632.649542][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 632.659789][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 632.675779][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 632.708102][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 632.747787][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 632.772861][ T8206] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 632.784520][ T9747] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1186'. [ 632.999077][ T9771] loop0: detected capacity change from 0 to 2048 [ 633.031628][ T9771] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 633.069311][ T9773] loop1: detected capacity change from 0 to 2048 [ 633.124106][ T6055] udevd[6055]: incorrect nilfs2 checksum on /dev/loop1 [ 633.129448][ T9773] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 633.239469][ T9777] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 633.278822][ T9773] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 633.332419][ T9776] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 633.365023][ T9771] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 633.389706][ T9773] Remounting filesystem read-only [ 634.088797][ T9771] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 634.582574][ T3739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.874120][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.884933][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.895201][ T8636] bio_check_eod: 195 callbacks suppressed [ 634.895862][ T8636] syz.2.1013: attempt to access beyond end of device [ 634.895862][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 634.959518][ T3739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.976437][ T9792] loop1: detected capacity change from 0 to 256 [ 635.002715][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 635.099286][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 635.186072][ T8636] syz.2.1013: attempt to access beyond end of device [ 635.186072][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 635.352701][ T8636] syz.2.1013: attempt to access beyond end of device [ 635.352701][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 635.536488][ T8636] syz.2.1013: attempt to access beyond end of device [ 635.536488][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 635.782441][ T8636] syz.2.1013: attempt to access beyond end of device [ 635.782441][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 635.936694][ T8636] syz.2.1013: attempt to access beyond end of device [ 635.936694][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 636.183382][ T8636] syz.2.1013: attempt to access beyond end of device [ 636.183382][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 636.302827][ T8636] syz.2.1013: attempt to access beyond end of device [ 636.302827][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 636.356923][ T8636] syz.2.1013: attempt to access beyond end of device [ 636.356923][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 636.489732][ T8636] syz.2.1013: attempt to access beyond end of device [ 636.489732][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 638.024053][ T9799] loop1: detected capacity change from 0 to 32768 [ 638.035806][ T9803] loop3: detected capacity change from 0 to 32768 [ 638.054789][ T9803] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1198 (9803) [ 638.103700][ T9799] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1197 (9799) [ 638.132594][ T9803] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 638.158224][ T9803] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 638.209349][ T9803] BTRFS info (device loop3): using free space tree [ 638.217413][ T9799] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 638.266010][ T9799] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 638.295829][ T9799] BTRFS info (device loop1): doing ref verification [ 638.347951][ T9799] BTRFS info (device loop1): use zlib compression, level 3 [ 638.387546][ T9799] BTRFS info (device loop1): using free space tree [ 638.473004][ T9810] loop4: detected capacity change from 0 to 32768 [ 638.528980][ T9810] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1200 (9810) [ 638.541452][ T9803] BTRFS info (device loop3): enabling ssd optimizations [ 638.616242][ T9810] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 638.688814][ T9810] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 638.759871][ T9810] BTRFS info (device loop4): setting nodatacow, compression disabled [ 638.768086][ T9810] BTRFS info (device loop4): setting datacow [ 638.821651][ T9810] BTRFS info (device loop4): doing ref verification [ 638.834647][ T9810] BTRFS info (device loop4): force clearing of disk cache [ 638.844375][ T9810] BTRFS info (device loop4): turning off barriers [ 638.879500][ T9810] BTRFS info (device loop4): enabling ssd optimizations [ 638.886634][ T9810] BTRFS info (device loop4): using spread ssd allocation scheme [ 638.915192][ T9810] BTRFS info (device loop4): not using ssd optimizations [ 638.942159][ T9810] BTRFS info (device loop4): not using spread ssd allocation scheme [ 638.975799][ T9810] BTRFS info (device loop4): using free space tree [ 639.139084][ T9799] BTRFS error (device loop1): open_ctree failed [ 639.161519][ T8206] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 639.328925][ T9810] BTRFS info (device loop4): rebuilding free space tree [ 639.763921][ T9871] loop1: detected capacity change from 0 to 512 [ 639.893294][ T6000] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 640.078758][ T8636] bio_check_eod: 322 callbacks suppressed [ 640.078779][ T8636] syz.2.1013: attempt to access beyond end of device [ 640.078779][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 640.223286][ T8636] syz.2.1013: attempt to access beyond end of device [ 640.223286][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 640.882761][ T9426] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 641.030867][ T8636] syz.2.1013: attempt to access beyond end of device [ 641.030867][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 641.197713][ T9880] loop1: detected capacity change from 0 to 4096 [ 641.215424][ T8636] syz.2.1013: attempt to access beyond end of device [ 641.215424][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 641.284576][ T9880] NILFS (loop1): invalid segment: Checksum error in segment payload [ 641.314695][ T9880] NILFS (loop1): trying rollback from an earlier position [ 641.351089][ T9859] loop0: detected capacity change from 0 to 32768 [ 641.364096][ T8636] syz.2.1013: attempt to access beyond end of device [ 641.364096][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 641.395585][ T9859] XFS: ikeep mount option is deprecated. [ 641.402739][ T9859] XFS: noikeep mount option is deprecated. [ 641.420293][ T9880] NILFS (loop1): recovery complete [ 641.469372][ T9881] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 641.566891][ T8636] syz.2.1013: attempt to access beyond end of device [ 641.566891][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 641.603040][ T8636] syz.2.1013: attempt to access beyond end of device [ 641.603040][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 641.618020][ T8636] syz.2.1013: attempt to access beyond end of device [ 641.618020][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 641.634502][ T8636] syz.2.1013: attempt to access beyond end of device [ 641.634502][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 641.651896][ T8636] syz.2.1013: attempt to access beyond end of device [ 641.651896][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 641.703991][ T9859] XFS (loop0): Mounting V5 Filesystem [ 641.914752][ T9859] XFS (loop0): Ending clean mount [ 641.934445][ T9859] XFS (loop0): Quotacheck needed: Please wait. [ 642.110091][ T9859] XFS (loop0): Quotacheck: Done. [ 642.347613][ T9878] loop3: detected capacity change from 0 to 32768 [ 642.373670][ T9163] XFS (loop0): Unmounting Filesystem [ 643.552182][ T9907] loop1: detected capacity change from 0 to 2048 [ 643.719598][ T9910] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 643.769111][ T27] audit: type=1800 audit(1727174936.089:64): pid=9907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1212" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 643.802594][ T9910] NILFS (loop1): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 643.824758][ T9910] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=2) [ 643.847270][ T9910] Remounting filesystem read-only [ 643.857141][ T3783] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 643.866161][ T3783] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 643.907882][ T3783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.119513][ T3783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.174669][ T3783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.238677][ T3783] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 644.277522][ T3783] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 644.318926][ T3783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.380255][ T3783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.420797][ T3783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.491936][ T9907] NILFS (loop1): mounting fs with errors [ 644.510155][ T9901] loop3: detected capacity change from 0 to 32768 [ 644.559644][ T9910] NILFS (loop1): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 644.582246][ T6000] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (6000) [ 644.598605][ T9910] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=2) [ 644.628155][ T9910] Remounting filesystem read-only [ 644.628202][ T9901] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 644.688777][ T9901] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 644.740071][ T9901] BTRFS info (device loop3): setting nodatacow, compression disabled [ 644.749292][ T9901] BTRFS info (device loop3): setting datacow [ 644.795388][ T9901] BTRFS info (device loop3): doing ref verification [ 644.802691][ T9901] BTRFS info (device loop3): force clearing of disk cache [ 644.834960][ T9901] BTRFS info (device loop3): turning off barriers [ 644.858773][ T9901] BTRFS info (device loop3): enabling ssd optimizations [ 644.870702][ T8201] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 644.880315][ T9901] BTRFS info (device loop3): using spread ssd allocation scheme [ 644.888040][ T9901] BTRFS info (device loop3): not using ssd optimizations [ 644.928634][ T8201] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 644.935430][ T8201] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 644.938670][ T9901] BTRFS info (device loop3): not using spread ssd allocation scheme [ 644.963187][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 644.965596][ T9901] BTRFS info (device loop3): using free space tree [ 645.008641][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 645.017566][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 645.069324][ T8201] NILFS (loop1): discard dirty page: offset=0, ino=19 [ 645.076160][ T8201] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 645.123217][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 645.125172][ T8636] bio_check_eod: 302 callbacks suppressed [ 645.125191][ T8636] syz.2.1013: attempt to access beyond end of device [ 645.125191][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 645.132780][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 645.170181][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 645.182165][ T8201] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 645.189023][ T8201] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 645.196720][ T8201] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 645.204843][ T8201] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 645.212915][ T8201] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 645.220968][ T8201] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 645.228042][ T8201] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 645.235843][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 645.246126][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 645.246892][ T8636] syz.2.1013: attempt to access beyond end of device [ 645.246892][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 645.269151][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 645.297946][ T8201] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 645.320132][ T9901] BTRFS info (device loop3): rebuilding free space tree [ 645.342891][ T8201] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 645.363905][ T8636] syz.2.1013: attempt to access beyond end of device [ 645.363905][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 645.399754][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 645.419864][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 645.449284][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 645.454772][ T9917] loop0: detected capacity change from 0 to 32768 [ 645.459139][ T8636] syz.2.1013: attempt to access beyond end of device [ 645.459139][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 645.489081][ T9917] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1215 (9917) [ 645.517552][ T8201] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 645.536497][ T6000] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (6000) [ 645.599150][ T8201] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 645.613834][ T8201] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 645.639741][ T8201] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 645.651778][ T8636] syz.2.1013: attempt to access beyond end of device [ 645.651778][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 645.667774][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 645.726306][ T8206] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 645.729355][ T8636] syz.2.1013: attempt to access beyond end of device [ 645.729355][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 645.752616][ T8201] NILFS (loop1): discard dirty page: offset=98304, ino=3 [ 645.771383][ T8636] syz.2.1013: attempt to access beyond end of device [ 645.771383][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 645.797327][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 645.827420][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 645.880574][ T8201] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 645.894645][ T8636] syz.2.1013: attempt to access beyond end of device [ 645.894645][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 645.911261][ T8201] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 645.983238][ T8636] syz.2.1013: attempt to access beyond end of device [ 645.983238][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 646.151119][ T8636] syz.2.1013: attempt to access beyond end of device [ 646.151119][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 646.527846][ T27] audit: type=1326 audit(1727174938.839:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 646.612907][ T27] audit: type=1326 audit(1727174938.849:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 646.750432][ T27] audit: type=1326 audit(1727174938.849:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 646.830661][ T9937] loop0: detected capacity change from 0 to 32768 [ 646.856714][ T9937] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1217 (9937) [ 646.883337][ T27] audit: type=1326 audit(1727174938.849:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 646.913684][ T27] audit: type=1326 audit(1727174938.859:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 646.961137][ T9937] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 646.979291][ T9937] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 646.999268][ T9937] BTRFS info (device loop0): using free space tree [ 647.013515][ T27] audit: type=1326 audit(1727174938.859:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 647.226656][ T27] audit: type=1326 audit(1727174938.859:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 647.237444][ T9948] team0: Port device team_slave_1 removed [ 647.290665][ T9937] BTRFS info (device loop0): enabling ssd optimizations [ 647.308909][ T27] audit: type=1326 audit(1727174938.859:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 647.355537][ T27] audit: type=1326 audit(1727174938.979:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 647.403361][ T9937] BTRFS error (device loop0): unable to set label with more than 255 bytes [ 647.503072][ T9163] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 647.676655][ T4601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.340565][ T4601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.386793][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 648.398484][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 648.418924][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 648.432883][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 648.442524][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 648.453584][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 648.521178][ T9975] loop4: detected capacity change from 0 to 32768 [ 648.538461][ T9975] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1229 (9975) [ 648.587222][ T9975] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 648.608003][ T9975] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 648.627970][ T9975] BTRFS info (device loop4): doing ref verification [ 648.645098][ T9975] BTRFS info (device loop4): use zlib compression, level 3 [ 648.668280][ T4601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.690173][ T9975] BTRFS info (device loop4): using free space tree [ 648.772403][ T9974] loop3: detected capacity change from 0 to 32768 [ 648.780703][ T9974] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1228 (9974) [ 648.837056][ T9974] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 648.848227][ T9990] loop0: detected capacity change from 0 to 256 [ 648.897070][ T4601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.920713][ T9975] BTRFS info (device loop4): enabling ssd optimizations [ 648.950130][ T9974] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 648.965170][ T9974] BTRFS info (device loop3): setting nodatacow, compression disabled [ 648.980893][ T9990] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 648.998746][ T9974] BTRFS info (device loop3): setting datacow [ 649.022475][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 649.022494][ T27] audit: type=1800 audit(1727174941.339:82): pid=9975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1229" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 649.025265][ T9974] BTRFS info (device loop3): doing ref verification [ 649.140061][ T9974] BTRFS info (device loop3): force clearing of disk cache [ 649.147270][ T9974] BTRFS info (device loop3): turning off barriers [ 649.208791][ T9974] BTRFS info (device loop3): enabling ssd optimizations [ 649.280177][ T9974] BTRFS info (device loop3): using spread ssd allocation scheme [ 649.287908][ T9974] BTRFS info (device loop3): not using ssd optimizations [ 649.418940][ T9974] BTRFS info (device loop3): not using spread ssd allocation scheme [ 649.475336][ T9974] BTRFS info (device loop3): using free space tree [ 649.669769][ T9978] chnl_net:caif_netlink_parms(): no params data found [ 649.674276][ T9426] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 649.726635][T10012] loop0: detected capacity change from 0 to 4096 [ 649.828219][T10022] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 649.920433][ T9974] BTRFS info (device loop3): rebuilding free space tree [ 650.177640][ T8636] bio_check_eod: 446 callbacks suppressed [ 650.177665][ T8636] syz.2.1013: attempt to access beyond end of device [ 650.177665][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 650.201963][ T8636] syz.2.1013: attempt to access beyond end of device [ 650.201963][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 650.253184][ T8636] syz.2.1013: attempt to access beyond end of device [ 650.253184][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 650.346306][ T8636] syz.2.1013: attempt to access beyond end of device [ 650.346306][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 650.350107][T10012] loop0: detected capacity change from 4096 to 64 [ 650.365203][ T8636] syz.2.1013: attempt to access beyond end of device [ 650.365203][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 650.381996][ T8636] syz.2.1013: attempt to access beyond end of device [ 650.381996][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 650.401057][ T8636] syz.2.1013: attempt to access beyond end of device [ 650.401057][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 650.415797][ T8636] syz.2.1013: attempt to access beyond end of device [ 650.415797][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 650.436345][ T8636] syz.2.1013: attempt to access beyond end of device [ 650.436345][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 650.461403][ T8636] syz.2.1013: attempt to access beyond end of device [ 650.461403][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 650.499142][ T3659] Bluetooth: hci3: command tx timeout [ 650.624781][ T9163] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 650.634558][ T9163] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 650.635140][ T8206] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 650.644358][ T9163] Buffer I/O error on dev loop0, logical block 511, lost sync page write [ 650.664510][ T9163] NILFS (loop0): unable to write superblock: err=-5 [ 650.672371][ T9163] Remounting filesystem read-only [ 650.677457][ T9163] NILFS (loop0): error -5 truncating bmap (ino=12) [ 650.729992][ T9978] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.748740][ T9978] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.768742][ T9978] device bridge_slave_0 entered promiscuous mode [ 650.778100][ T9163] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 650.796490][ T9163] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 650.825346][ T9163] NILFS (loop0): discard dirty block: blocknr=14, size=4096 [ 650.889321][ T9163] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 650.896085][ T9163] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 650.966030][ T9163] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 650.973527][ T9163] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 651.016578][ T9163] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 651.049208][ T9163] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 651.056851][ T9163] NILFS (loop0): discard dirty page: offset=0, ino=19 [ 651.096826][ T9163] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 651.154750][ T9163] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 651.209389][ T9163] NILFS (loop0): discard dirty block: blocknr=28, size=4096 [ 651.217595][ T9163] NILFS (loop0): discard dirty page: offset=4096, ino=3 [ 651.274779][ T9163] NILFS (loop0): discard dirty block: blocknr=29, size=4096 [ 651.306001][ T9163] NILFS (loop0): discard dirty page: offset=401408, ino=3 [ 651.327062][ T9163] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 652.446348][T10064] loop0: detected capacity change from 0 to 128 [ 652.734486][T10064] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 652.968482][ T9978] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.978442][ T9978] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.034833][ T9978] device bridge_slave_1 entered promiscuous mode [ 653.104750][ T3659] Bluetooth: hci3: command tx timeout [ 653.184361][T10047] loop4: detected capacity change from 0 to 32768 [ 653.198728][T10047] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1232 (10047) [ 653.201147][T10047] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 653.201230][T10047] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 653.201268][T10047] BTRFS info (device loop4): setting nodatacow, compression disabled [ 653.201293][T10047] BTRFS info (device loop4): disabling tree log [ 653.201318][T10047] BTRFS info (device loop4): turning on sync discard [ 653.201342][T10047] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 653.201504][T10047] BTRFS info (device loop4): force zstd compression, level 3 [ 653.201538][T10047] BTRFS info (device loop4): using free space tree [ 653.439348][ T9978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.446720][ T9978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.479075][T10047] BTRFS info (device loop4): enabling ssd optimizations [ 653.596177][ T9426] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 653.790000][ T9978] team0: Port device team_slave_0 added [ 654.159292][T10065] tty tty24: ldisc open failed (-12), clearing slot 23 [ 654.416991][ T9978] team0: Port device team_slave_1 added [ 654.700276][ T9978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.707278][ T9978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.856557][ T9978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.989634][ T9978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.999347][ T9978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.058908][ T9978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.138792][ T3659] Bluetooth: hci3: command tx timeout [ 655.204324][T10105] loop4: detected capacity change from 0 to 32768 [ 655.223121][ T8636] bio_check_eod: 255 callbacks suppressed [ 655.223142][ T8636] syz.2.1013: attempt to access beyond end of device [ 655.223142][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 655.301049][T10105] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 655.414441][ T8636] syz.2.1013: attempt to access beyond end of device [ 655.414441][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 655.452009][ T8636] syz.2.1013: attempt to access beyond end of device [ 655.452009][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 655.488489][ T8636] syz.2.1013: attempt to access beyond end of device [ 655.488489][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 655.550203][ T9978] device hsr_slave_0 entered promiscuous mode [ 655.561650][ T8636] syz.2.1013: attempt to access beyond end of device [ 655.561650][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 655.576474][ T9426] ocfs2: Unmounting device (7,4) on (node local) [ 655.617224][ T8636] syz.2.1013: attempt to access beyond end of device [ 655.617224][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 655.633181][ T9978] device hsr_slave_1 entered promiscuous mode [ 655.640078][ T9978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 655.678282][ T9978] Cannot create hsr debugfs directory [ 655.721854][ T8636] syz.2.1013: attempt to access beyond end of device [ 655.721854][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 655.830013][ T8636] syz.2.1013: attempt to access beyond end of device [ 655.830013][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 655.941571][ T8636] syz.2.1013: attempt to access beyond end of device [ 655.941571][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 656.037521][T10114] loop3: detected capacity change from 0 to 32768 [ 656.101631][ T8636] syz.2.1013: attempt to access beyond end of device [ 656.101631][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 656.126232][T10114] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1243 (10114) [ 656.370842][T10114] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 656.398066][T10114] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 656.445854][T10124] loop4: detected capacity change from 0 to 4096 [ 656.452630][T10114] BTRFS info (device loop3): setting nodatacow, compression disabled [ 656.497994][T10114] BTRFS info (device loop3): setting datacow [ 656.539732][T10114] BTRFS info (device loop3): doing ref verification [ 656.591043][T10114] BTRFS info (device loop3): force clearing of disk cache [ 656.640694][T10114] BTRFS info (device loop3): turning off barriers [ 656.647329][T10114] BTRFS info (device loop3): enabling ssd optimizations [ 656.656272][T10114] BTRFS info (device loop3): using spread ssd allocation scheme [ 656.657231][T10127] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 656.671963][T10114] BTRFS info (device loop3): not using ssd optimizations [ 656.728781][T10114] BTRFS info (device loop3): not using spread ssd allocation scheme [ 656.728831][T10124] loop4: detected capacity change from 4096 to 64 [ 656.736856][T10114] BTRFS info (device loop3): using free space tree [ 656.846224][T10122] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 656.871571][T10122] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 656.949004][T10122] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 656.986885][T10143] loop0: detected capacity change from 0 to 256 [ 657.008992][T10122] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 657.034044][T10122] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 657.069302][T10122] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 657.120213][T10114] BTRFS info (device loop3): rebuilding free space tree [ 657.238870][ T3659] Bluetooth: hci3: command tx timeout [ 657.358238][ T4601] device hsr_slave_0 left promiscuous mode [ 657.375329][ T4601] device hsr_slave_1 left promiscuous mode [ 657.401265][ T9426] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 657.429297][ T27] audit: type=1326 audit(1727174949.749:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbb17def9 code=0x7ffc0000 [ 657.479798][ T4601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.487286][ T4601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.507169][ T9426] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 657.517042][ T9426] Buffer I/O error on dev loop4, logical block 511, lost sync page write [ 657.525703][ T9426] NILFS (loop4): unable to write superblock: err=-5 [ 657.542077][ T9426] Remounting filesystem read-only [ 657.547167][ T9426] NILFS (loop4): error -5 truncating bmap (ino=12) [ 657.675324][ T4601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.721379][ T9426] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 657.809493][ T27] audit: type=1326 audit(1727174949.819:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbb17def9 code=0x7ffc0000 [ 657.854644][ T4601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.922391][ T9426] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 657.986003][ T8206] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 658.058941][ T4601] device bridge_slave_1 left promiscuous mode [ 658.083942][ T9426] NILFS (loop4): discard dirty block: blocknr=14, size=4096 [ 658.208805][ T4601] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.229034][ T9426] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 658.235962][ T9426] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 658.254990][ T27] audit: type=1326 audit(1727174949.819:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f9fbb17def9 code=0x7ffc0000 [ 658.368717][ T9426] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 658.379172][ T9426] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 658.411132][ T27] audit: type=1326 audit(1727174949.819:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbb17def9 code=0x7ffc0000 [ 658.441186][ T9426] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 658.448204][ T9426] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 658.521851][ T27] audit: type=1326 audit(1727174949.819:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbb17def9 code=0x7ffc0000 [ 658.638400][ T27] audit: type=1326 audit(1727174949.819:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fbb17def9 code=0x7ffc0000 [ 658.675292][T10167] overlayfs: missing 'lowerdir' [ 658.748648][ T27] audit: type=1326 audit(1727174949.819:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbb17def9 code=0x7ffc0000 [ 658.809133][ T27] audit: type=1326 audit(1727174949.819:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbb17def9 code=0x7ffc0000 [ 658.881274][ T27] audit: type=1326 audit(1727174949.819:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f9fbb17def9 code=0x7ffc0000 [ 658.950252][ T27] audit: type=1326 audit(1727174949.819:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbb17def9 code=0x7ffc0000 [ 658.974444][ T4601] device bridge_slave_0 left promiscuous mode [ 659.018899][ T4601] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.169232][ T4601] device veth1_macvtap left promiscuous mode [ 659.175377][ T4601] device veth0_macvtap left promiscuous mode [ 659.218319][ T4601] device veth1_vlan left promiscuous mode [ 659.258758][ T4601] device veth0_vlan left promiscuous mode [ 660.249230][ T8636] bio_check_eod: 249 callbacks suppressed [ 660.249255][ T8636] syz.2.1013: attempt to access beyond end of device [ 660.249255][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 660.398793][ T8636] syz.2.1013: attempt to access beyond end of device [ 660.398793][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 660.415213][ T8636] syz.2.1013: attempt to access beyond end of device [ 660.415213][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 660.439688][ T8636] syz.2.1013: attempt to access beyond end of device [ 660.439688][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 660.456575][ T8636] syz.2.1013: attempt to access beyond end of device [ 660.456575][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 660.489233][ T8636] syz.2.1013: attempt to access beyond end of device [ 660.489233][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 660.575300][T10174] loop4: detected capacity change from 0 to 32768 [ 660.645518][ T8636] syz.2.1013: attempt to access beyond end of device [ 660.645518][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 660.685099][ T8636] syz.2.1013: attempt to access beyond end of device [ 660.685099][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 660.723277][ T8636] syz.2.1013: attempt to access beyond end of device [ 660.723277][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 660.754795][T10174] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 660.792100][ T8636] syz.2.1013: attempt to access beyond end of device [ 660.792100][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 660.909680][ T9426] ocfs2: Unmounting device (7,4) on (node local) [ 661.332725][T10184] loop3: detected capacity change from 0 to 32768 [ 661.369490][T10184] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1250 (10184) [ 661.497732][T10184] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 661.528244][T10189] loop0: detected capacity change from 0 to 32768 [ 661.544595][T10184] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 661.586464][T10184] BTRFS info (device loop3): setting nodatacow, compression disabled [ 661.597785][T10189] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1256 (10189) [ 661.613342][T10184] BTRFS info (device loop3): disabling tree log [ 661.620787][T10184] BTRFS info (device loop3): turning on sync discard [ 661.627543][T10184] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 661.692068][T10189] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 661.707728][T10196] loop4: detected capacity change from 0 to 4096 [ 661.714348][T10184] BTRFS info (device loop3): force zstd compression, level 3 [ 661.723566][T10189] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 661.754014][T10184] BTRFS info (device loop3): using free space tree [ 661.761280][T10189] BTRFS info (device loop0): setting nodatacow, compression disabled [ 661.771323][T10189] BTRFS info (device loop0): force clearing of disk cache [ 661.788916][T10189] BTRFS info (device loop0): setting datacow [ 661.845608][T10200] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 661.868726][T10189] BTRFS info (device loop0): doing ref verification [ 661.875410][T10189] BTRFS info (device loop0): turning off barriers [ 661.882189][T10189] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 661.892106][T10189] BTRFS info (device loop0): use zstd compression, level 3 [ 661.900910][T10189] BTRFS info (device loop0): enabling ssd optimizations [ 661.907912][T10189] BTRFS info (device loop0): using spread ssd allocation scheme [ 661.916922][T10189] BTRFS info (device loop0): not using ssd optimizations [ 661.924328][T10189] BTRFS info (device loop0): not using spread ssd allocation scheme [ 661.932646][T10189] BTRFS info (device loop0): using free space tree [ 661.944043][T10196] loop4: detected capacity change from 4096 to 64 [ 662.030837][T10195] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 662.040295][T10195] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 662.049313][T10195] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 662.058345][T10195] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 662.068343][T10195] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 662.079405][T10195] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 662.157339][T10184] BTRFS info (device loop3): enabling ssd optimizations [ 662.330217][ T9426] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 662.358673][ T9426] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 662.365228][T10189] BTRFS info (device loop0): rebuilding free space tree [ 662.372805][ T9426] Buffer I/O error on dev loop4, logical block 511, lost sync page write [ 662.388224][ T8206] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 662.393273][ T9426] NILFS (loop4): unable to write superblock: err=-5 [ 662.438095][ T9426] Remounting filesystem read-only [ 662.478662][ T9426] NILFS (loop4): error -5 truncating bmap (ino=12) [ 662.521304][ T9426] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 662.560608][ T9426] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 662.598697][ T9426] NILFS (loop4): discard dirty block: blocknr=14, size=4096 [ 662.630367][ T9426] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 662.637132][ T9426] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 662.678636][ T9426] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 662.708685][ T9426] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 662.719816][ T9426] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 662.726826][ T9426] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 663.220559][ T9163] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 663.659496][T10245] overlayfs: missing 'lowerdir' [ 663.848254][T10237] loop4: detected capacity change from 0 to 32768 [ 663.874057][T10237] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1259 (10237) [ 663.914367][T10237] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 663.958938][T10237] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 663.986902][T10237] BTRFS info (device loop4): setting nodatacow, compression disabled [ 664.041867][T10237] BTRFS info (device loop4): setting datacow [ 664.047927][T10237] BTRFS info (device loop4): doing ref verification [ 664.188749][T10237] BTRFS info (device loop4): force clearing of disk cache [ 664.196052][T10237] BTRFS info (device loop4): turning off barriers [ 664.206259][T10249] loop3: detected capacity change from 0 to 128 [ 664.267348][T10237] BTRFS info (device loop4): enabling ssd optimizations [ 664.275040][T10237] BTRFS info (device loop4): using spread ssd allocation scheme [ 664.282909][T10237] BTRFS info (device loop4): not using ssd optimizations [ 664.290757][T10237] BTRFS info (device loop4): not using spread ssd allocation scheme [ 664.298934][T10237] BTRFS info (device loop4): using free space tree [ 664.518083][T10249] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 664.639027][T10249] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038 (0x7fffffff) [ 664.732654][T10259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1261'. [ 664.749393][ T4601] team0 (unregistering): Port device team_slave_1 removed [ 664.890236][T10237] BTRFS info (device loop4): rebuilding free space tree [ 665.148122][ T8206] EXT4-fs (loop3): unmounting filesystem. [ 665.263447][ T8636] bio_check_eod: 417 callbacks suppressed [ 665.263470][ T8636] syz.2.1013: attempt to access beyond end of device [ 665.263470][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 665.303338][ T9426] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 665.346289][ T4601] team0 (unregistering): Port device team_slave_0 removed [ 665.417231][ T8636] syz.2.1013: attempt to access beyond end of device [ 665.417231][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 665.480457][T10279] loop3: detected capacity change from 0 to 4096 [ 665.522274][ T8636] syz.2.1013: attempt to access beyond end of device [ 665.522274][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 665.538942][T10284] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 665.585777][ T8636] syz.2.1013: attempt to access beyond end of device [ 665.585777][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 665.656555][ T8636] syz.2.1013: attempt to access beyond end of device [ 665.656555][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 665.720341][ T8636] syz.2.1013: attempt to access beyond end of device [ 665.720341][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 665.773660][ T8636] syz.2.1013: attempt to access beyond end of device [ 665.773660][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 665.889722][ T8636] syz.2.1013: attempt to access beyond end of device [ 665.889722][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 665.903576][T10279] loop3: detected capacity change from 4096 to 64 [ 666.019067][ T4601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.046468][ T8636] syz.2.1013: attempt to access beyond end of device [ 666.046468][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 666.080746][ T8206] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 666.100345][ T8206] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 666.115675][T10283] loop0: detected capacity change from 0 to 32768 [ 666.138145][ T8206] syz-executor: attempt to access beyond end of device [ 666.138145][ T8206] loop3: rw=395265, sector=4088, nr_sectors = 8 limit=64 [ 666.164538][T10283] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1271 (10283) [ 666.179191][ T8206] Buffer I/O error on dev loop3, logical block 511, lost sync page write [ 666.197140][ T8206] NILFS (loop3): unable to write superblock: err=-5 [ 666.209115][ T8206] Remounting filesystem read-only [ 666.214287][ T8206] NILFS (loop3): error -5 truncating bmap (ino=12) [ 666.258658][T10283] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 666.299177][T10283] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 666.307932][T10283] BTRFS info (device loop0): setting nodatacow, compression disabled [ 666.308220][ T8206] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 666.349171][ T8206] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 666.356024][ T8206] NILFS (loop3): discard dirty block: blocknr=14, size=4096 [ 666.358866][T10283] BTRFS info (device loop0): force clearing of disk cache [ 666.375434][ T4601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.395514][T10283] BTRFS info (device loop0): setting datacow [ 666.415629][T10283] BTRFS info (device loop0): doing ref verification [ 666.424097][ T8206] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 666.432775][T10283] BTRFS info (device loop0): turning off barriers [ 666.448740][ T8206] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 666.456140][ T8206] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 666.463593][T10283] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 666.492128][ T8206] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 666.493926][T10283] BTRFS info (device loop0): use zstd compression, level 3 [ 666.538689][T10283] BTRFS info (device loop0): enabling ssd optimizations [ 666.545740][T10283] BTRFS info (device loop0): using spread ssd allocation scheme [ 666.548201][ T8206] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 666.578991][T10283] BTRFS info (device loop0): not using ssd optimizations [ 666.588599][ T8206] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 666.596226][ T8206] NILFS (loop3): discard dirty page: offset=0, ino=19 [ 666.622429][T10283] BTRFS info (device loop0): not using spread ssd allocation scheme [ 666.650652][ T8206] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 666.650687][T10283] BTRFS info (device loop0): using free space tree [ 666.691623][ T8206] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 666.698370][ T8206] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 666.739034][ T8206] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 666.748868][ T8206] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 666.766521][ T8206] NILFS (loop3): discard dirty page: offset=401408, ino=3 [ 666.808858][ T8206] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 667.106609][T10291] loop4: detected capacity change from 0 to 32768 [ 667.116230][T10283] BTRFS info (device loop0): rebuilding free space tree [ 667.119159][T10291] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1269 (10291) [ 667.180383][T10291] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 667.218688][T10291] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 667.250000][T10313] overlayfs: missing 'lowerdir' [ 667.259060][T10291] BTRFS info (device loop4): setting nodatacow, compression disabled [ 667.267205][T10291] BTRFS info (device loop4): disabling tree log [ 667.354861][T10291] BTRFS info (device loop4): turning on sync discard [ 667.369839][T10291] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 667.458702][T10291] BTRFS info (device loop4): force zstd compression, level 3 [ 667.466196][T10291] BTRFS info (device loop4): using free space tree [ 667.564059][T10319] loop3: detected capacity change from 0 to 256 [ 667.571530][ T9163] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 667.630656][T10319] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 667.997114][T10291] BTRFS info (device loop4): enabling ssd optimizations [ 668.339528][ T9426] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 668.741081][T10340] loop0: detected capacity change from 0 to 8192 [ 668.775897][T10340] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 670.205959][T10360] overlayfs: missing 'lowerdir' [ 670.216784][T10358] loop4: detected capacity change from 0 to 4096 [ 670.248404][T10346] loop3: detected capacity change from 0 to 512 [ 670.268865][ T8636] bio_check_eod: 325 callbacks suppressed [ 670.268889][ T8636] syz.2.1013: attempt to access beyond end of device [ 670.268889][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 670.380606][T10346] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 670.409353][ T8636] syz.2.1013: attempt to access beyond end of device [ 670.409353][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 670.452366][ T8636] syz.2.1013: attempt to access beyond end of device [ 670.452366][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 670.486348][ T8636] syz.2.1013: attempt to access beyond end of device [ 670.486348][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 670.490943][T10364] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 670.503669][ T8636] syz.2.1013: attempt to access beyond end of device [ 670.503669][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 670.525743][ T8636] syz.2.1013: attempt to access beyond end of device [ 670.525743][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 670.543072][ T8636] syz.2.1013: attempt to access beyond end of device [ 670.543072][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 670.560489][T10358] loop4: detected capacity change from 4096 to 64 [ 670.579931][T10357] syz.4.1282: attempt to access beyond end of device [ 670.579931][T10357] loop4: rw=0, sector=224, nr_sectors = 8 limit=64 [ 670.581077][T10346] EXT4-fs (loop3): 1 orphan inode deleted [ 670.608234][ T8636] syz.2.1013: attempt to access beyond end of device [ 670.608234][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 670.628973][T10357] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 670.640258][ T8636] syz.2.1013: attempt to access beyond end of device [ 670.640258][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 670.679248][T10346] EXT4-fs (loop3): 1 truncate cleaned up [ 670.687997][T10357] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 670.696842][T10346] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 670.732451][T10357] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 670.763660][T10357] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 670.794152][T10346] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 670.812237][T10357] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 670.840572][T10357] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 670.855621][T10346] EXT4-fs (loop3): Remounting filesystem read-only [ 671.092413][ T9426] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 671.108398][ T9426] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 671.136910][ T9426] Buffer I/O error on dev loop4, logical block 511, lost sync page write [ 671.204164][ T9426] NILFS (loop4): unable to write superblock: err=-5 [ 671.232086][ T9426] Remounting filesystem read-only [ 671.237181][ T9426] NILFS (loop4): error -5 truncating bmap (ino=12) [ 671.267856][ T9426] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 671.293153][ T9426] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 671.308977][ T9426] NILFS (loop4): discard dirty block: blocknr=14, size=4096 [ 671.326915][ T9426] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 671.346934][ T9426] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 671.358606][ T9426] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 671.365603][ T9426] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 671.393431][ T9426] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 671.408704][ T9426] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 671.573554][T10370] loop0: detected capacity change from 0 to 32768 [ 671.618503][T10374] loop4: detected capacity change from 0 to 256 [ 671.625203][T10370] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1285 (10370) [ 671.657125][ T4601] bond0 (unregistering): Released all slaves [ 671.683088][T10374] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 671.750272][T10370] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 671.776086][T10370] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 671.818710][T10370] BTRFS info (device loop0): setting nodatacow, compression disabled [ 671.869929][T10370] BTRFS info (device loop0): force clearing of disk cache [ 671.885174][T10370] BTRFS info (device loop0): setting datacow [ 671.896795][T10370] BTRFS info (device loop0): doing ref verification [ 671.907811][T10370] BTRFS info (device loop0): turning off barriers [ 671.925054][T10370] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 671.973298][T10370] BTRFS info (device loop0): use zstd compression, level 3 [ 672.018387][T10370] BTRFS info (device loop0): enabling ssd optimizations [ 672.035183][T10370] BTRFS info (device loop0): using spread ssd allocation scheme [ 672.060472][T10370] BTRFS info (device loop0): not using ssd optimizations [ 672.114762][T10370] BTRFS info (device loop0): not using spread ssd allocation scheme [ 672.143425][T10370] BTRFS info (device loop0): using free space tree [ 672.498840][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 672.530680][T10370] BTRFS info (device loop0): rebuilding free space tree [ 672.774077][ T9163] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 673.259264][T10388] loop4: detected capacity change from 0 to 32768 [ 673.319993][T10388] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1290 (10388) [ 673.604361][T10388] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 673.659509][T10388] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 673.748777][T10388] BTRFS info (device loop4): using free space tree [ 674.668453][T10388] BTRFS info (device loop4): enabling ssd optimizations [ 674.958328][ T9978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 675.011350][ T9978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 675.044956][ T9978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 675.061786][ T9978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 675.221715][T10445] overlayfs: failed to resolve './file0': -2 [ 675.280740][ T8636] bio_check_eod: 429 callbacks suppressed [ 675.280763][ T8636] syz.2.1013: attempt to access beyond end of device [ 675.280763][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 675.644894][ T8636] syz.2.1013: attempt to access beyond end of device [ 675.644894][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 675.824804][ T8636] syz.2.1013: attempt to access beyond end of device [ 675.824804][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 675.904581][ T8636] syz.2.1013: attempt to access beyond end of device [ 675.904581][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 675.921070][ T8636] syz.2.1013: attempt to access beyond end of device [ 675.921070][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 675.935900][ T8636] syz.2.1013: attempt to access beyond end of device [ 675.935900][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 675.955894][ T8636] syz.2.1013: attempt to access beyond end of device [ 675.955894][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 675.969023][ T9978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.976421][ T8636] syz.2.1013: attempt to access beyond end of device [ 675.976421][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 675.979396][ T8636] syz.2.1013: attempt to access beyond end of device [ 675.979396][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 676.007218][ T8636] syz.2.1013: attempt to access beyond end of device [ 676.007218][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 676.046851][ T9426] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 676.103967][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 676.119721][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 676.144774][ T9978] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.186745][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 676.206001][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 676.223613][ T3843] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.230829][ T3843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.325541][T10452] loop0: detected capacity change from 0 to 4096 [ 676.428482][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 676.439620][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 676.457987][T10456] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 676.469626][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 676.928814][ T3783] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.936047][ T3783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.237566][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 677.274714][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 677.336251][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 677.372248][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 677.405538][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 677.448917][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 677.475580][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 677.504868][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 677.533985][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 677.565684][ T9978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 677.592265][ T9978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 677.620459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 677.637333][ T8206] EXT4-fs (loop3): unmounting filesystem. [ 677.638808][T10451] loop0: detected capacity change from 4096 to 64 [ 677.689945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 677.990448][ T9163] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 678.026846][ T9163] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 678.078753][ T9163] Buffer I/O error on dev loop0, logical block 511, lost sync page write [ 678.087246][ T9163] NILFS (loop0): unable to write superblock: err=-5 [ 678.115850][ T9163] Remounting filesystem read-only [ 678.128644][ T9163] NILFS (loop0): error -5 truncating bmap (ino=12) [ 678.172239][ T9163] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 678.191825][ T9163] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 678.217782][T10479] loop3: detected capacity change from 0 to 256 [ 678.222198][ T9163] NILFS (loop0): discard dirty block: blocknr=14, size=4096 [ 678.242674][ T9163] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 678.270068][ T9163] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 678.276849][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 678.304320][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 678.311868][ T9163] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 678.321018][T10479] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 678.335413][ T9163] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 678.351726][ T9978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.358822][ T9163] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 678.383643][ T9163] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 678.401445][ T9163] NILFS (loop0): discard dirty page: offset=0, ino=19 [ 678.415570][ T9163] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 678.505894][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 678.524896][ T9163] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 678.532426][ T9163] NILFS (loop0): discard dirty block: blocknr=28, size=4096 [ 678.540233][ T9163] NILFS (loop0): discard dirty page: offset=4096, ino=3 [ 678.547804][ T9163] NILFS (loop0): discard dirty block: blocknr=29, size=4096 [ 678.555806][ T9163] NILFS (loop0): discard dirty page: offset=401408, ino=3 [ 678.579479][ T9163] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 678.589825][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 678.662632][ T9978] device veth0_vlan entered promiscuous mode [ 678.687626][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 678.708442][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 678.766242][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 678.859783][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 678.935909][ T9978] device veth1_vlan entered promiscuous mode [ 679.646439][ T9978] device veth0_macvtap entered promiscuous mode [ 679.739033][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 679.747438][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 679.800366][T10496] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 679.808845][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 679.859923][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 679.894108][ T9978] device veth1_macvtap entered promiscuous mode [ 679.914290][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 679.973181][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.023363][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.062235][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.083135][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.104066][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.135407][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.155988][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.205944][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.239318][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.255882][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.278862][ T9978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.294220][ T8636] bio_check_eod: 286 callbacks suppressed [ 680.294244][ T8636] syz.2.1013: attempt to access beyond end of device [ 680.294244][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 680.327421][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 680.338406][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 680.370822][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.418752][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.461549][ T8636] syz.2.1013: attempt to access beyond end of device [ 680.461549][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 680.476024][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.477002][ T8636] syz.2.1013: attempt to access beyond end of device [ 680.477002][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 680.519401][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.148774][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.193790][ T8636] syz.2.1013: attempt to access beyond end of device [ 681.193790][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 681.229962][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.270341][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.289467][ T8636] syz.2.1013: attempt to access beyond end of device [ 681.289467][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 681.318698][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.348634][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.362308][ T8636] syz.2.1013: attempt to access beyond end of device [ 681.362308][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 681.379632][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.400015][T10492] loop0: detected capacity change from 0 to 32768 [ 681.411787][ T9978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.421693][T10492] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1300 (10492) [ 681.461503][ T8636] syz.2.1013: attempt to access beyond end of device [ 681.461503][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 681.479782][T10512] netlink: 'syz.3.1308': attribute type 22 has an invalid length. [ 681.489807][T10498] loop4: detected capacity change from 0 to 32768 [ 681.497530][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 681.504703][T10492] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 681.524040][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 681.538737][T10492] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 681.547622][T10492] BTRFS info (device loop0): setting nodatacow, compression disabled [ 681.555991][T10498] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1305 (10498) [ 681.591773][ T9978] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.612673][T10492] BTRFS info (device loop0): force clearing of disk cache [ 681.636135][T10498] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 681.644639][ T9978] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.665447][T10492] BTRFS info (device loop0): setting datacow [ 681.675337][ T8636] syz.2.1013: attempt to access beyond end of device [ 681.675337][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 681.698932][T10498] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 681.705826][T10492] BTRFS info (device loop0): doing ref verification [ 681.707690][T10498] BTRFS info (device loop4): using free space tree [ 681.726183][ T9978] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.767113][T10492] BTRFS info (device loop0): turning off barriers [ 681.776394][ T9978] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.797670][T10492] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 681.839692][T10492] BTRFS info (device loop0): use zstd compression, level 3 [ 681.896384][ T8636] syz.2.1013: attempt to access beyond end of device [ 681.896384][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 681.899461][T10492] BTRFS info (device loop0): enabling ssd optimizations [ 681.937432][T10519] loop3: detected capacity change from 0 to 4096 [ 681.964157][ T8636] syz.2.1013: attempt to access beyond end of device [ 681.964157][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 681.989352][T10492] BTRFS info (device loop0): using spread ssd allocation scheme [ 682.021880][T10492] BTRFS info (device loop0): not using ssd optimizations [ 682.032717][T10531] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 682.048891][T10492] BTRFS info (device loop0): not using spread ssd allocation scheme [ 682.108167][T10492] BTRFS info (device loop0): using free space tree [ 682.128795][T10519] loop3: detected capacity change from 4096 to 64 [ 682.155922][T10498] BTRFS info (device loop4): enabling ssd optimizations [ 682.201037][T10517] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 682.212236][ T3854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.252774][ T3854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.291649][T10517] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 682.319172][T10517] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 682.327977][T10517] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 682.356637][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 682.410798][ T3697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.426727][T10517] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 682.468518][ T3697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.477869][T10517] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 682.711849][ T8206] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 682.754706][ T8206] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 682.781489][ T8206] Buffer I/O error on dev loop3, logical block 511, lost sync page write [ 682.804275][T10492] BTRFS error (device loop0): open_ctree failed [ 682.812321][ T8206] NILFS (loop3): unable to write superblock: err=-5 [ 682.814041][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 682.875576][ T8206] Remounting filesystem read-only [ 682.880967][ T8206] NILFS (loop3): error -5 truncating bmap (ino=12) [ 682.924316][ T8206] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 682.967147][ T8206] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 683.022707][ T8206] NILFS (loop3): discard dirty block: blocknr=14, size=4096 [ 683.080823][ T8206] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 683.087590][ T8206] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 683.123959][ T8206] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 683.148302][ T8206] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 683.182164][ T8206] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 683.208651][ T8206] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 683.371874][ T9426] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 683.408088][T10572] loop0: detected capacity change from 0 to 160 [ 684.708836][ T6000] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 685.301270][ T8636] bio_check_eod: 190 callbacks suppressed [ 685.301294][ T8636] syz.2.1013: attempt to access beyond end of device [ 685.301294][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 685.364758][T10595] netlink: 'syz.0.1319': attribute type 22 has an invalid length. [ 685.468476][ T8636] syz.2.1013: attempt to access beyond end of device [ 685.468476][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 685.882822][ T8636] syz.2.1013: attempt to access beyond end of device [ 685.882822][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 686.049554][ T8636] syz.2.1013: attempt to access beyond end of device [ 686.049554][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 686.168970][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.175350][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.189985][ T8636] syz.2.1013: attempt to access beyond end of device [ 686.189985][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 686.207154][ T8636] syz.2.1013: attempt to access beyond end of device [ 686.207154][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 686.224200][ T8636] syz.2.1013: attempt to access beyond end of device [ 686.224200][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 686.299490][ T8636] syz.2.1013: attempt to access beyond end of device [ 686.299490][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 686.944935][T10613] loop1: detected capacity change from 0 to 1024 [ 687.038322][ T8636] syz.2.1013: attempt to access beyond end of device [ 687.038322][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 687.142421][T10613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 687.159616][T10606] loop3: detected capacity change from 0 to 4096 [ 687.243487][ T8636] syz.2.1013: attempt to access beyond end of device [ 687.243487][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 687.272316][T10617] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 687.294431][T10613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 687.479012][T10606] loop3: detected capacity change from 4096 to 64 [ 687.691526][ T8206] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 687.731455][ T8206] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 687.761428][ T8206] Buffer I/O error on dev loop3, logical block 511, lost sync page write [ 687.828759][ T8206] NILFS (loop3): unable to write superblock: err=-5 [ 687.878433][ T8206] Remounting filesystem read-only [ 687.906388][ T8206] NILFS (loop3): error -5 truncating bmap (ino=12) [ 687.946672][ T8206] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 687.983863][ T8206] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 688.008309][ T8206] NILFS (loop3): discard dirty block: blocknr=14, size=4096 [ 688.027834][ T8206] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 688.046689][ T8206] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 688.066960][ T8206] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 688.098346][ T8206] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 688.128860][ T8206] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 688.154927][ T8206] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 688.192250][ T8206] NILFS (loop3): discard dirty page: offset=0, ino=19 [ 688.200353][T10608] loop0: detected capacity change from 0 to 32768 [ 688.213654][ T8206] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 688.228013][T10608] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1323 (10608) [ 688.266432][ T8206] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 688.300086][ T8206] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 688.316147][T10608] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 688.330957][ T8206] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 688.338322][T10608] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 688.355127][ T8206] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 688.365722][ T8206] NILFS (loop3): discard dirty page: offset=401408, ino=3 [ 688.378368][T10608] BTRFS info (device loop0): setting nodatacow, compression disabled [ 688.396681][ T8206] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 688.404616][T10608] BTRFS info (device loop0): force clearing of disk cache [ 688.432184][T10608] BTRFS info (device loop0): setting datacow [ 688.442648][T10608] BTRFS info (device loop0): doing ref verification [ 688.461271][T10608] BTRFS info (device loop0): turning off barriers [ 688.482845][T10608] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 688.512188][T10608] BTRFS info (device loop0): use zstd compression, level 3 [ 688.528628][T10608] BTRFS info (device loop0): enabling ssd optimizations [ 688.535808][T10608] BTRFS info (device loop0): using spread ssd allocation scheme [ 688.558800][T10608] BTRFS info (device loop0): not using ssd optimizations [ 688.566375][T10608] BTRFS info (device loop0): not using spread ssd allocation scheme [ 688.628720][T10608] BTRFS info (device loop0): using free space tree [ 689.951316][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 689.951332][ T27] audit: type=1326 audit(1727174982.269:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10664 comm="syz.4.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 690.038731][ T27] audit: type=1326 audit(1727174982.299:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10664 comm="syz.4.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 690.137746][ T27] audit: type=1326 audit(1727174982.299:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10664 comm="syz.4.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 690.230653][ T27] audit: type=1326 audit(1727174982.299:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10664 comm="syz.4.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 690.309464][ T8636] bio_check_eod: 201 callbacks suppressed [ 690.309488][ T8636] syz.2.1013: attempt to access beyond end of device [ 690.309488][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 690.345908][ T27] audit: type=1326 audit(1727174982.299:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10664 comm="syz.4.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cf17def9 code=0x7fc00000 [ 690.346605][T10608] BTRFS error (device loop0): open_ctree failed [ 690.433597][ T27] audit: type=1326 audit(1727174982.299:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10664 comm="syz.4.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 690.439374][ T8636] syz.2.1013: attempt to access beyond end of device [ 690.439374][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 690.532837][ T27] audit: type=1326 audit(1727174982.299:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10664 comm="syz.4.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 690.641516][ T8636] syz.2.1013: attempt to access beyond end of device [ 690.641516][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 690.656791][ T27] audit: type=1326 audit(1727174982.959:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10664 comm="syz.4.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9cf17def9 code=0x7fc00000 [ 690.729714][ T8636] syz.2.1013: attempt to access beyond end of device [ 690.729714][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 690.759621][ T27] audit: type=1326 audit(1727174982.959:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10664 comm="syz.4.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cf17def9 code=0x7fc00000 [ 690.838661][ T27] audit: type=1326 audit(1727174982.969:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10664 comm="syz.4.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cf17def9 code=0x7fc00000 [ 690.892468][ T8636] syz.2.1013: attempt to access beyond end of device [ 690.892468][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 690.973607][ T8636] syz.2.1013: attempt to access beyond end of device [ 690.973607][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 691.345891][ T8636] syz.2.1013: attempt to access beyond end of device [ 691.345891][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 691.361566][ T8636] syz.2.1013: attempt to access beyond end of device [ 691.361566][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 691.612036][ T8636] syz.2.1013: attempt to access beyond end of device [ 691.612036][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 691.669886][ T8636] syz.2.1013: attempt to access beyond end of device [ 691.669886][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 693.617871][T10711] loop0: detected capacity change from 0 to 1024 [ 693.804425][T10711] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 694.340175][T10705] loop4: detected capacity change from 0 to 4096 [ 694.428644][T10716] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 694.527118][T10705] loop4: detected capacity change from 4096 to 64 [ 694.556829][T10704] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 694.584812][T10704] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 694.628893][T10704] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 694.698937][T10704] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 694.707784][T10704] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 694.734910][ T9163] EXT4-fs (loop0): unmounting filesystem. [ 694.788957][T10704] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 695.031605][ T9426] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 695.073642][ T9426] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 695.108684][ T9426] Buffer I/O error on dev loop4, logical block 511, lost sync page write [ 695.147083][ T9426] NILFS (loop4): unable to write superblock: err=-5 [ 695.174732][ T9426] Remounting filesystem read-only [ 695.191916][ T9426] NILFS (loop4): error -5 truncating bmap (ino=12) [ 695.232729][ T9426] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 695.258656][ T9426] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 695.272752][ T9426] NILFS (loop4): discard dirty block: blocknr=14, size=4096 [ 695.299686][ T9426] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 695.325461][ T9426] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 695.334002][ T8636] bio_check_eod: 147 callbacks suppressed [ 695.334020][ T8636] syz.2.1013: attempt to access beyond end of device [ 695.334020][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 695.368746][ T9426] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 695.405823][ T9426] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 695.420952][ T9426] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 695.441868][ T9426] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 695.489504][ T8636] syz.2.1013: attempt to access beyond end of device [ 695.489504][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 695.525374][T10710] loop3: detected capacity change from 0 to 32768 [ 695.560332][T10710] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1339 (10710) [ 695.611557][ T8636] syz.2.1013: attempt to access beyond end of device [ 695.611557][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 695.664798][ T8636] syz.2.1013: attempt to access beyond end of device [ 695.664798][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 695.718430][ T8636] syz.2.1013: attempt to access beyond end of device [ 695.718430][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 695.822267][ T9978] EXT4-fs (loop1): unmounting filesystem. [ 695.867554][ T8636] syz.2.1013: attempt to access beyond end of device [ 695.867554][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 695.921541][ T8636] syz.2.1013: attempt to access beyond end of device [ 695.921541][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 695.977353][ T8636] syz.2.1013: attempt to access beyond end of device [ 695.977353][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 696.004112][T10733] loop4: detected capacity change from 0 to 512 [ 696.045706][ T8636] syz.2.1013: attempt to access beyond end of device [ 696.045706][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 696.076691][ T8636] syz.2.1013: attempt to access beyond end of device [ 696.076691][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 696.086855][T10724] loop0: detected capacity change from 0 to 32768 [ 696.111297][T10733] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1342: inode #1: comm syz.4.1342: iget: illegal inode # [ 696.194607][T10733] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1342: error while reading EA inode 1 err=-117 [ 696.238279][T10733] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1342: inode #1: comm syz.4.1342: iget: illegal inode # [ 696.319671][T10724] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1341 (10724) [ 696.352377][T10733] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1342: error while reading EA inode 1 err=-117 [ 696.369950][T10710] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 696.405531][T10733] EXT4-fs (loop4): 1 orphan inode deleted [ 696.427185][T10710] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 696.428680][T10733] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 696.448704][T10724] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 696.472789][T10710] BTRFS info (device loop3): using free space tree [ 696.518667][T10724] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 696.527378][T10724] BTRFS info (device loop0): setting nodatacow, compression disabled [ 696.658784][T10724] BTRFS info (device loop0): force clearing of disk cache [ 696.666002][T10724] BTRFS info (device loop0): setting datacow [ 696.699040][T10724] BTRFS info (device loop0): doing ref verification [ 696.729444][T10724] BTRFS info (device loop0): turning off barriers [ 696.736017][T10724] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 696.808711][T10724] BTRFS info (device loop0): use zstd compression, level 3 [ 696.815992][T10724] BTRFS info (device loop0): enabling ssd optimizations [ 696.838972][ T3702] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 696.920250][T10724] BTRFS info (device loop0): using spread ssd allocation scheme [ 696.958666][T10724] BTRFS info (device loop0): not using ssd optimizations [ 696.966905][T10724] BTRFS info (device loop0): not using spread ssd allocation scheme [ 696.995131][T10724] BTRFS info (device loop0): using free space tree [ 697.298727][ T3702] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 697.314345][ T3702] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 697.323604][ T3702] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.329450][T10710] BTRFS error (device loop3): open_ctree failed [ 697.334481][ T3702] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 697.353851][ T3702] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 697.403533][ T9426] EXT4-fs (loop4): unmounting filesystem. [ 697.539903][T10724] BTRFS info (device loop0): rebuilding free space tree [ 697.964846][ T9163] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 699.304765][T10790] loop1: detected capacity change from 0 to 256 [ 699.372755][T10790] exfat: Deprecated parameter 'utf8' [ 699.459128][T10790] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5b52992a, utbl_chksum : 0xe619d30d) [ 699.951908][T10794] loop4: detected capacity change from 0 to 4096 [ 700.396531][ T8636] bio_check_eod: 212 callbacks suppressed [ 700.396555][ T8636] syz.2.1013: attempt to access beyond end of device [ 700.396555][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 700.434903][ T8636] syz.2.1013: attempt to access beyond end of device [ 700.434903][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 700.487642][ T8636] syz.2.1013: attempt to access beyond end of device [ 700.487642][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 700.503338][ T8636] syz.2.1013: attempt to access beyond end of device [ 700.503338][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 700.568714][T10802] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 700.611434][ T8636] syz.2.1013: attempt to access beyond end of device [ 700.611434][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 700.679885][T10801] loop0: detected capacity change from 0 to 4096 [ 700.680072][ T8636] syz.2.1013: attempt to access beyond end of device [ 700.680072][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 700.710288][T10794] loop4: detected capacity change from 4096 to 64 [ 700.731699][T10793] syz.4.1352: attempt to access beyond end of device [ 700.731699][T10793] loop4: rw=0, sector=224, nr_sectors = 8 limit=64 [ 700.751957][T10793] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 700.793063][T10801] NILFS (loop0): invalid segment: Checksum error in segment payload [ 700.815275][T10801] NILFS (loop0): trying rollback from an earlier position [ 700.819225][T10793] syz.4.1352: attempt to access beyond end of device [ 700.819225][T10793] loop4: rw=0, sector=224, nr_sectors = 8 limit=64 [ 700.841741][ T8636] syz.2.1013: attempt to access beyond end of device [ 700.841741][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 700.887264][T10801] NILFS (loop0): recovery complete [ 700.919227][T10793] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 700.926860][ T8636] syz.2.1013: attempt to access beyond end of device [ 700.926860][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 700.929730][T10806] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 700.958909][T10793] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 700.968169][T10793] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 701.021592][T10793] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 701.047585][T10793] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 701.426610][ T9426] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 701.469073][ T9426] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 701.478395][ T9426] Buffer I/O error on dev loop4, logical block 511, lost sync page write [ 701.528622][ T9426] NILFS (loop4): unable to write superblock: err=-5 [ 701.700246][ T9426] Remounting filesystem read-only [ 701.705555][ T9426] NILFS (loop4): error -5 truncating bmap (ino=12) [ 701.758693][ T3702] usb 3-1: string descriptor 0 read error: -71 [ 701.764999][ T3702] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 701.788705][ T3702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.901546][ T3702] usb 3-1: config 0 descriptor?? [ 701.920611][ T3702] usb 3-1: can't set config #0, error -71 [ 701.927048][ T9426] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 701.952375][ T9426] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 701.953780][ T3702] usb 3-1: USB disconnect, device number 10 [ 701.959187][ T9426] NILFS (loop4): discard dirty block: blocknr=14, size=4096 [ 701.959444][ T9426] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 702.038697][ T9426] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 702.058992][ T9426] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 702.066012][ T9426] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 702.103754][ T9426] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 702.182953][T10817] loop3: detected capacity change from 0 to 2048 [ 702.198769][ T9426] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 702.226853][T10817] EXT4-fs: Ignoring removed nomblk_io_submit option [ 702.275881][ T33] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.801159][T10817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 703.106760][ T33] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.138826][ T3648] Bluetooth: hci0: command 0x0406 tx timeout [ 703.312787][ T8206] EXT4-fs (loop3): unmounting filesystem. [ 703.457909][ T33] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.366171][ T3659] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 704.378176][ T3659] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 704.390785][ T3659] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 704.403126][ T3659] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 704.412808][ T3659] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 704.423340][ T3659] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 704.550852][T10842] loop4: detected capacity change from 0 to 512 [ 704.590192][ T33] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.660651][ T6000] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 706.111029][ T8636] bio_check_eod: 265 callbacks suppressed [ 706.111050][ T8636] syz.2.1013: attempt to access beyond end of device [ 706.111050][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 706.185365][T10837] loop3: detected capacity change from 0 to 32768 [ 706.229927][T10837] XFS: ikeep mount option is deprecated. [ 706.281658][ T8636] syz.2.1013: attempt to access beyond end of device [ 706.281658][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 706.299027][T10837] XFS: noikeep mount option is deprecated. [ 706.382422][ T8636] syz.2.1013: attempt to access beyond end of device [ 706.382422][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 706.404441][ T8636] syz.2.1013: attempt to access beyond end of device [ 706.404441][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 706.424701][ T8636] syz.2.1013: attempt to access beyond end of device [ 706.424701][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 706.447074][ T8636] syz.2.1013: attempt to access beyond end of device [ 706.447074][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 706.500789][ T3659] Bluetooth: hci3: command tx timeout [ 706.541634][ T8636] syz.2.1013: attempt to access beyond end of device [ 706.541634][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 707.320137][T10862] Bluetooth: MGMT ver 1.22 [ 707.365187][T10839] chnl_net:caif_netlink_parms(): no params data found [ 707.407257][ T8636] syz.2.1013: attempt to access beyond end of device [ 707.407257][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 707.640860][ T8636] syz.2.1013: attempt to access beyond end of device [ 707.640860][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 707.689632][ T8636] syz.2.1013: attempt to access beyond end of device [ 707.689632][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 708.329162][ T3733] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 708.589112][ T3659] Bluetooth: hci3: command tx timeout [ 708.868940][ T3733] usb 3-1: device descriptor read/all, error -61 [ 709.018641][ T3733] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 709.133572][T10839] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.152030][T10839] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.188069][T10839] device bridge_slave_0 entered promiscuous mode [ 709.258950][ T3733] usb 3-1: device descriptor read/64, error -71 [ 709.690896][T10839] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.721863][T10839] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.944144][T10839] device bridge_slave_1 entered promiscuous mode [ 710.128331][ T3733] usb usb3-port1: attempt power cycle [ 710.414032][T10874] loop0: detected capacity change from 0 to 32768 [ 710.425959][T10839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.474669][T10880] loop4: detected capacity change from 0 to 32768 [ 710.496302][T10874] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1374 (10874) [ 710.548970][ T3733] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 710.661315][ T3648] Bluetooth: hci3: command tx timeout [ 710.884977][T10839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.302980][ T8636] bio_check_eod: 158 callbacks suppressed [ 711.303001][ T8636] syz.2.1013: attempt to access beyond end of device [ 711.303001][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 711.341661][T10880] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1376 (10880) [ 711.397053][T10880] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 711.397382][ T3733] usb 3-1: device descriptor read/8, error -71 [ 711.414377][ T8636] syz.2.1013: attempt to access beyond end of device [ 711.414377][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 711.449697][T10880] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 711.458415][T10880] BTRFS info (device loop4): setting nodatacow, compression disabled [ 711.515534][T10909] loop3: detected capacity change from 0 to 512 [ 711.548199][T10880] BTRFS info (device loop4): force clearing of disk cache [ 711.585511][T10839] team0: Port device team_slave_0 added [ 711.598659][T10880] BTRFS info (device loop4): setting datacow [ 711.601626][ T8636] syz.2.1013: attempt to access beyond end of device [ 711.601626][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 711.604701][T10880] BTRFS info (device loop4): doing ref verification [ 711.684591][T10880] BTRFS info (device loop4): turning off barriers [ 711.718841][T10880] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 711.751417][T10880] BTRFS info (device loop4): use zstd compression, level 3 [ 711.809072][ T8636] syz.2.1013: attempt to access beyond end of device [ 711.809072][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 711.832633][T10839] team0: Port device team_slave_1 added [ 711.946138][T10839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.987242][ T8636] syz.2.1013: attempt to access beyond end of device [ 711.987242][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 712.001678][T10880] BTRFS info (device loop4): enabling ssd optimizations [ 712.187497][T10880] BTRFS info (device loop4): using spread ssd allocation scheme [ 713.602716][ T3648] Bluetooth: hci3: command tx timeout [ 713.645249][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.677361][T10880] BTRFS info (device loop4): not using ssd optimizations [ 713.728671][T10880] BTRFS info (device loop4): not using spread ssd allocation scheme [ 713.777547][T10880] BTRFS info (device loop4): using free space tree [ 713.803256][T10839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.880053][ T8636] syz.2.1013: attempt to access beyond end of device [ 713.880053][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 713.897495][ T8636] syz.2.1013: attempt to access beyond end of device [ 713.897495][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 713.954446][ T8636] syz.2.1013: attempt to access beyond end of device [ 713.954446][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 713.971177][ T8636] syz.2.1013: attempt to access beyond end of device [ 713.971177][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 713.987068][ T8636] syz.2.1013: attempt to access beyond end of device [ 713.987068][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 715.113881][T10943] loop3: detected capacity change from 0 to 4096 [ 715.450749][T10880] BTRFS error (device loop4): open_ctree failed [ 715.989380][T10839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.996956][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.052305][T10951] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 716.108817][T10943] loop3: detected capacity change from 4096 to 64 [ 716.120380][T10839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.459685][ T8636] bio_check_eod: 74 callbacks suppressed [ 716.459707][ T8636] syz.2.1013: attempt to access beyond end of device [ 716.459707][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 716.900938][T10941] syz.3.1386: attempt to access beyond end of device [ 716.900938][T10941] loop3: rw=0, sector=224, nr_sectors = 8 limit=64 [ 716.939433][ T8636] syz.2.1013: attempt to access beyond end of device [ 716.939433][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 716.989685][T10941] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 717.003019][ T8636] syz.2.1013: attempt to access beyond end of device [ 717.003019][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 717.017800][T10941] syz.3.1386: attempt to access beyond end of device [ 717.017800][T10941] loop3: rw=0, sector=224, nr_sectors = 8 limit=64 [ 717.035397][T10941] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 717.055273][T10941] syz.3.1386: attempt to access beyond end of device [ 717.055273][T10941] loop3: rw=0, sector=224, nr_sectors = 8 limit=64 [ 717.071218][ T8636] syz.2.1013: attempt to access beyond end of device [ 717.071218][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 717.097259][T10941] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 717.117968][ T8636] syz.2.1013: attempt to access beyond end of device [ 717.117968][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 717.133073][T10941] syz.3.1386: attempt to access beyond end of device [ 717.133073][T10941] loop3: rw=0, sector=224, nr_sectors = 8 limit=64 [ 717.169982][T10839] device hsr_slave_0 entered promiscuous mode [ 717.176613][T10941] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 717.185995][T10941] syz.3.1386: attempt to access beyond end of device [ 717.185995][T10941] loop3: rw=0, sector=224, nr_sectors = 8 limit=64 [ 717.194732][T10839] device hsr_slave_1 entered promiscuous mode [ 717.228715][T10941] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 717.237633][T10941] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 717.247210][T10839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.296503][T10839] Cannot create hsr debugfs directory [ 717.507449][ T8206] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 717.528658][ T8206] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 717.537926][ T8206] Buffer I/O error on dev loop3, logical block 511, lost sync page write [ 717.598598][ T8206] NILFS (loop3): unable to write superblock: err=-5 [ 717.648712][ T8206] Remounting filesystem read-only [ 717.653863][ T8206] NILFS (loop3): error -5 truncating bmap (ino=12) [ 717.747917][ T8206] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 717.797133][ T8206] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 717.822116][ T8206] NILFS (loop3): discard dirty block: blocknr=14, size=4096 [ 717.868672][ T8206] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 717.897650][ T8206] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 717.924598][ T8206] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 717.938818][ T8206] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 717.968759][ T8206] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 717.986225][ T8206] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 718.200279][T10965] loop4: detected capacity change from 0 to 32768 [ 718.226049][T10976] loop3: detected capacity change from 0 to 512 [ 718.235641][ T33] device hsr_slave_0 left promiscuous mode [ 718.259667][T10965] XFS: ikeep mount option is deprecated. [ 718.282460][T10965] XFS: noikeep mount option is deprecated. [ 718.298721][ T33] device hsr_slave_1 left promiscuous mode [ 718.315029][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.342629][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.371517][ T6055] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 718.511213][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.548230][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.594998][T10965] XFS (loop4): Mounting V5 Filesystem [ 719.321596][T10965] XFS (loop4): Ending clean mount [ 719.359290][T10965] XFS (loop4): Quotacheck needed: Please wait. [ 719.417271][ T33] device bridge_slave_1 left promiscuous mode [ 719.423771][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.489403][ T33] device bridge_slave_0 left promiscuous mode [ 719.495722][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.550365][T10965] XFS (loop4): Quotacheck: Done. [ 719.558628][T10949] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 719.744785][ T9426] XFS (loop4): Unmounting Filesystem [ 719.783353][ T33] device veth1_macvtap left promiscuous mode [ 719.974849][ T33] device veth0_macvtap left promiscuous mode [ 720.108931][ T33] device veth1_vlan left promiscuous mode [ 720.159007][T10949] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 720.211693][T10949] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 720.258955][ T33] device veth0_vlan left promiscuous mode [ 720.436266][T10949] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.485230][T10949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 720.514885][T10949] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 721.485531][ T8636] bio_check_eod: 215 callbacks suppressed [ 721.485645][ T8636] syz.2.1013: attempt to access beyond end of device [ 721.485645][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 721.593412][ T28] INFO: task kworker/u4:8:3774 blocked for more than 143 seconds. [ 721.634781][ T28] Not tainted 6.1.111-syzkaller #0 [ 721.658773][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 721.699779][ T28] task:kworker/u4:8 state:D stack:21152 pid:3774 ppid:2 flags:0x00004000 [ 721.743125][ T28] Workqueue: writeback wb_workfn (flush-7:2) [ 721.771533][ T28] Call Trace: [ 721.780231][ T8636] syz.2.1013: attempt to access beyond end of device [ 721.780231][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 721.825444][ T28] [ 721.832116][ T28] __schedule+0x143f/0x4570 [ 721.865733][ T8636] syz.2.1013: attempt to access beyond end of device [ 721.865733][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 721.883707][ T28] ? release_firmware_map_entry+0x186/0x186 [ 721.893140][ T28] ? blk_check_plugged+0x250/0x250 [ 721.898314][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 721.900325][ T8636] syz.2.1013: attempt to access beyond end of device [ 721.900325][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 721.942883][ T8636] syz.2.1013: attempt to access beyond end of device [ 721.942883][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 721.948584][ T28] ? wq_worker_sleeping+0x5f/0x270 [ 721.990212][ T28] schedule+0xbf/0x180 [ 721.994390][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 722.012292][ T8636] syz.2.1013: attempt to access beyond end of device [ 722.012292][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 722.018583][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 722.049339][ T27] kauditd_printk_skb: 63 callbacks suppressed [ 722.049356][ T27] audit: type=1326 audit(1727175014.369:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 722.068592][ T28] ? down_write_killable_nested+0x90/0x90 [ 722.094623][ T28] ? read_lock_is_recursive+0x10/0x10 [ 722.115016][ T8636] syz.2.1013: attempt to access beyond end of device [ 722.115016][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 722.115139][ T28] ? rwsem_write_trylock+0x166/0x210 [ 722.148326][ T27] audit: type=1326 audit(1727175014.399:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 722.170757][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.173265][ T28] ? clear_nonspinnable+0x60/0x60 [ 722.199624][ T8636] syz.2.1013: attempt to access beyond end of device [ 722.199624][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 722.209857][ T28] ? from_kgid+0x1a3/0x730 [ 722.213384][ T27] audit: type=1326 audit(1727175014.399:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cf17def9 code=0x7ffc0000 [ 722.239919][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.242224][ T28] f2fs_balance_fs+0x4fb/0x6c0 [ 722.260019][ T28] ? f2fs_commit_atomic_write+0x14f0/0x14f0 [ 722.271667][ T28] ? folio_unlock+0x122/0x2f0 [ 722.281912][ T8636] syz.2.1013: attempt to access beyond end of device [ 722.281912][ T8636] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 722.283521][ T28] f2fs_write_inode+0x4c3/0x540 [ 722.317263][ T8636] syz.2.1013: attempt to access beyond end of device [ 722.317263][ T8636] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 722.327274][ T28] __writeback_single_inode+0x67d/0x11e0 [ 722.355656][ T28] writeback_sb_inodes+0xc2b/0x1b20 [ 722.361037][ T28] ? do_raw_spin_lock+0x14a/0x370 [ 722.366128][ T28] ? queue_io+0x630/0x630 [ 722.392068][ T28] ? __writeback_inodes_wb+0x400/0x400 [ 722.404838][ T28] __writeback_inodes_wb+0x114/0x400 [ 722.417085][ T28] wb_writeback+0x4b1/0xe10 [ 722.427526][ T28] ? percpu_ref_tryget+0x260/0x260 [ 722.438650][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 722.466416][ T28] ? _find_next_bit+0x11b/0x120 [ 722.471618][ T28] wb_workfn+0xbec/0x1020 [ 722.476056][ T28] ? inode_wait_for_writeback+0x280/0x280 [ 722.506202][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 722.512597][ T28] ? print_irqtrace_events+0x210/0x210 [ 722.518123][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 722.534509][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 722.543317][ T28] ? process_one_work+0x7a9/0x11d0 [ 722.553064][ T28] process_one_work+0x8a9/0x11d0 [ 722.558107][ T28] ? worker_detach_from_pool+0x260/0x260 [ 722.567232][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 722.600389][ T28] ? kthread_data+0x4e/0xc0 [ 722.605081][ T28] ? wq_worker_running+0x97/0x190 [ 722.616951][ T28] worker_thread+0xa47/0x1200 [ 722.621878][T10949] usb 3-1: string descriptor 0 read error: -71 [ 722.628159][T10949] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 722.645843][ T28] ? _raw_spin_unlock+0x40/0x40 [ 722.658705][ T28] kthread+0x28d/0x320 [ 722.666772][T10949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.667599][ T28] ? worker_clr_flags+0x190/0x190 [ 722.694812][ T28] ? kthread_blkcg+0xd0/0xd0 [ 722.698680][T10949] usb 3-1: config 0 descriptor?? [ 722.711954][ T28] ret_from_fork+0x1f/0x30 [ 722.722220][ T28] [ 722.722529][T10949] usb 3-1: can't set config #0, error -71 [ 722.730228][ T28] [ 722.730228][ T28] Showing all locks held in the system: [ 722.768858][T10949] usb 3-1: USB disconnect, device number 15 [ 722.769196][ T28] 1 lock held by rcu_tasks_kthre/12: [ 722.798609][ T28] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 722.842320][ T28] 1 lock held by rcu_tasks_trace/13: [ 722.855540][ T28] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 722.883572][ T28] 1 lock held by khungtaskd/28: [ 722.895381][ T28] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 722.915567][ T28] 5 locks held by kworker/u4:2/33: [ 722.926503][ T28] #0: ffff888017e1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 722.948226][ T28] #1: ffffc90000aa7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 722.971276][ T28] #2: ffffffff8e4ed450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 722.990921][ T28] #3: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe5/0x9d0 [ 723.068589][ T28] #4: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 723.080009][ T28] 1 lock held by udevd/3092: [ 723.084739][ T28] 1 lock held by dhcpcd/3306: [ 723.098608][ T28] #0: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2a5/0x1b20 [ 723.107879][ T28] 2 locks held by getty/3398: [ 723.114851][ T28] #0: ffff88802e164098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 723.127181][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 723.145542][ T28] 3 locks held by kworker/u5:8/3659: [ 723.151073][ T28] #0: ffff8880728ae938 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 723.168629][ T28] #1: ffffc90004a8fd20 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 723.190822][ T28] #2: ffff888054ebd0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1dc/0x400 [ 723.207419][ T28] 4 locks held by kworker/u4:8/3774: [ 723.215173][ T28] #0: ffff88801ca6f938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 723.234602][ T28] #1: ffffc9000528fd20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 723.254782][ T28] #2: ffff888079aae0e0 (&type->s_umount_key#73){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 723.266205][ T28] #3: ffff888029465140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4fb/0x6c0 [ 723.283876][ T28] 3 locks held by kworker/1:9/5909: [ 723.292236][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 723.312270][ T28] #1: ffffc900033afd20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 723.327269][ T28] #2: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 723.345654][ T28] 2 locks held by kworker/1:18/6699: [ 723.351088][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 723.368588][ T28] #1: ffffc90005497d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 723.388363][ T28] 3 locks held by kworker/1:20/6701: [ 723.393786][ T28] #0: ffff88802dad2538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 723.414928][ T28] #1: ffffc900054d7d20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 723.436745][ T28] #2: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 723.446435][ T28] 5 locks held by syz.2.1013/8636: [ 723.461622][ T28] 3 locks held by kworker/u4:17/9239: [ 723.467075][ T28] #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 723.486138][ T28] #1: ffffc900041c7d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 723.496797][ T28] #2: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 723.514803][ T28] 1 lock held by syz-executor/10839: [ 723.522079][ T28] #0: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 723.538364][ T28] [ 723.542739][ T28] ============================================= [ 723.542739][ T28] [ 723.557727][ T28] NMI backtrace for cpu 0 [ 723.562120][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.111-syzkaller #0 [ 723.570144][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 723.580329][ T28] Call Trace: [ 723.583636][ T28] [ 723.586591][ T28] dump_stack_lvl+0x1e3/0x2cb [ 723.591317][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 723.596818][ T28] ? panic+0x764/0x764 [ 723.600929][ T28] ? vprintk_emit+0x622/0x740 [ 723.605653][ T28] ? printk_sprint+0x490/0x490 [ 723.610469][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 723.615633][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 723.620639][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 723.626839][ T28] ? _printk+0xd1/0x111 [ 723.631027][ T28] ? panic+0x764/0x764 [ 723.635130][ T28] ? __wake_up_klogd+0xcc/0x100 [ 723.640012][ T28] ? panic+0x764/0x764 [ 723.644116][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 723.648893][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 723.650212][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 723.662403][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 723.668442][ T28] watchdog+0xf88/0xfd0 [ 723.672653][ T28] ? watchdog+0x1f8/0xfd0 [ 723.677023][ T28] kthread+0x28d/0x320 [ 723.681120][ T28] ? hungtask_pm_notify+0x50/0x50 [ 723.686180][ T28] ? kthread_blkcg+0xd0/0xd0 [ 723.690803][ T28] ret_from_fork+0x1f/0x30 [ 723.695276][ T28] [ 723.698391][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.705371][ T28] Sending NMI from CPU 0 to CPUs 1: [ 723.710975][ C1] NMI backtrace for cpu 1 [ 723.710987][ C1] CPU: 1 PID: 8636 Comm: syz.2.1013 Not tainted 6.1.111-syzkaller #0 [ 723.711006][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 723.711017][ C1] RIP: 0010:check_preemption_disabled+0x20/0x110 [ 723.711046][ C1] Code: 8b 48 c7 c6 a0 6d 5d 8b eb 00 41 57 41 56 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 1d d0 25 5b 75 <65> 8b 05 71 7b 5b 75 a9 ff ff ff 7f 74 22 65 48 8b 04 25 28 00 00 [ 723.711060][ C1] RSP: 0018:ffffc900053b6988 EFLAGS: 00000086 [ 723.711076][ C1] RAX: 19e1338723b98800 RBX: 0000000000000001 RCX: ffffffff816aaa17 [ 723.711089][ C1] RDX: 0000000000000000 RSI: ffffffff8b0c1020 RDI: ffffffff8b5d6dc0 [ 723.711102][ C1] RBP: ffffc900053b6b00 R08: dffffc0000000000 R09: fffffbfff1d33cae [ 723.711115][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000a76d44 [ 723.711127][ C1] R13: 0000000000000246 R14: ffffc900053b6a70 R15: dffffc0000000000 [ 723.711140][ C1] FS: 00007f3f636526c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 723.711156][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 723.711168][ C1] CR2: 0000000020252030 CR3: 0000000052a02000 CR4: 00000000003506e0 [ 723.711184][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 723.711194][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 723.711205][ C1] Call Trace: [ 723.711211][ C1] [ 723.711217][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 723.711246][ C1] ? read_lock_is_recursive+0x10/0x10 [ 723.711276][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 723.711304][ C1] ? nmi_handle+0x25/0x440 [ 723.711342][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 723.711370][ C1] ? nmi_handle+0x12e/0x440 [ 723.711396][ C1] ? nmi_handle+0x25/0x440 [ 723.711422][ C1] ? check_preemption_disabled+0x20/0x110 [ 723.711443][ C1] ? default_do_nmi+0x62/0x150 [ 723.711462][ C1] ? exc_nmi+0xa8/0x100 [ 723.711478][ C1] ? end_repeat_nmi+0x16/0x31 [ 723.711515][ C1] ? lock_release+0xc7/0xa20 [ 723.711540][ C1] ? check_preemption_disabled+0x20/0x110 [ 723.711563][ C1] ? check_preemption_disabled+0x20/0x110 [ 723.711586][ C1] ? check_preemption_disabled+0x20/0x110 [ 723.711608][ C1] [ 723.711614][ C1] [ 723.711622][ C1] lock_release+0x19e/0xa20 [ 723.711649][ C1] ? do_garbage_collect+0x22d7/0x81f0 [ 723.711669][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 723.711694][ C1] ? __up_read+0x2b9/0x690 [ 723.711717][ C1] ? up_read+0x20/0x20 [ 723.711738][ C1] ? PageHeadHuge+0x8e/0x1c0 [ 723.711762][ C1] up_read+0x12/0x20 [ 723.711783][ C1] do_garbage_collect+0x22d7/0x81f0 [ 723.711838][ C1] ? f2fs_gc+0x32a0/0x32a0 [ 723.711853][ C1] ? get_victim_by_default+0x6893/0x6ff0 [ 723.711878][ C1] ? mark_lock+0x9a/0x340 [ 723.711913][ C1] ? f2fs_gc+0xef4/0x32a0 [ 723.711930][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 723.711964][ C1] ? up_write+0x19d/0x580 [ 723.711985][ C1] ? get_ckpt_valid_blocks+0x2f0/0x2f0 [ 723.712006][ C1] ? __up_read+0x690/0x690 [ 723.712033][ C1] f2fs_gc+0x1169/0x32a0 [ 723.712067][ C1] ? f2fs_start_bidx_of_node+0x370/0x370 [ 723.712096][ C1] ? rwsem_write_trylock+0x166/0x210 [ 723.712130][ C1] f2fs_balance_fs+0x506/0x6c0 [ 723.712157][ C1] ? f2fs_commit_atomic_write+0x14f0/0x14f0 [ 723.712184][ C1] ? __up_read+0x2b9/0x690 [ 723.712208][ C1] ? folio_unlock+0x122/0x2f0 [ 723.712240][ C1] f2fs_map_blocks+0x2871/0x3ab0 [ 723.712282][ C1] ? f2fs_do_map_lock+0x70/0x70 [ 723.712311][ C1] expand_inode_data+0x56d/0xaf0 [ 723.712340][ C1] ? f2fs_insert_range+0x3c0/0x3c0 [ 723.712357][ C1] ? file_modified_flags+0x3e1/0x480 [ 723.712391][ C1] ? rcu_read_lock_any_held+0xb3/0x160 [ 723.712417][ C1] f2fs_fallocate+0x44a/0x9f0 [ 723.712438][ C1] vfs_fallocate+0x547/0x6b0 [ 723.712465][ C1] do_vfs_ioctl+0x222c/0x2a90 [ 723.712485][ C1] ? __x64_compat_sys_ioctl+0x80/0x80 [ 723.712507][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 723.712531][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 723.712554][ C1] ? __kmem_cache_free+0x25c/0x3c0 [ 723.712580][ C1] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 723.712601][ C1] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 723.712621][ C1] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 723.712649][ C1] ? __fget_files+0x28/0x4a0 [ 723.712678][ C1] ? __fget_files+0x28/0x4a0 [ 723.712694][ C1] ? __fget_files+0x435/0x4a0 [ 723.712712][ C1] ? __fget_files+0x28/0x4a0 [ 723.712732][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 723.712750][ C1] ? security_file_ioctl+0x7d/0xa0 [ 723.712771][ C1] __se_sys_ioctl+0x81/0x160 [ 723.712788][ C1] do_syscall_64+0x3b/0xb0 [ 723.712813][ C1] ? clear_bhb_loop+0x45/0xa0 [ 723.712838][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.712862][ C1] RIP: 0033:0x7f3f6277def9 [ 723.712877][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.712891][ C1] RSP: 002b:00007f3f63652038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 723.712908][ C1] RAX: ffffffffffffffda RBX: 00007f3f62935f80 RCX: 00007f3f6277def9 [ 723.712921][ C1] RDX: 0000000020000280 RSI: 0000000040305828 RDI: 0000000000000004 [ 723.712932][ C1] RBP: 00007f3f627f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 723.712943][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.712953][ C1] R13: 0000000000000000 R14: 00007f3f62935f80 R15: 00007ffcbe3d7398 [ 723.712975][ C1] [ 724.033986][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 724.034009][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.111-syzkaller #0 [ 724.034034][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 724.034049][ T28] Call Trace: [ 724.034057][ T28] [ 724.034067][ T28] dump_stack_lvl+0x1e3/0x2cb [ 724.034129][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 724.034184][ T28] ? panic+0x764/0x764 [ 724.034239][ T28] ? vscnprintf+0x59/0x80 [ 724.034292][ T28] panic+0x318/0x764 [ 724.034321][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 724.034360][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 724.034391][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 724.034428][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 724.034475][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 724.034515][ T28] watchdog+0xfc7/0xfd0 [ 724.034553][ T28] ? watchdog+0x1f8/0xfd0 [ 724.034588][ T28] kthread+0x28d/0x320 [ 724.034609][ T28] ? hungtask_pm_notify+0x50/0x50 [ 724.034638][ T28] ? kthread_blkcg+0xd0/0xd0 [ 724.034662][ T28] ret_from_fork+0x1f/0x30 [ 724.034710][ T28] [ 724.036368][ C0] vkms_vblank_simulate: vblank timer overrun [ 724.036662][ T28] Kernel Offset: disabled [ 724.379439][ T28] Rebooting in 86400 seconds..