last executing test programs: 8m43.839550577s ago: executing program 1 (id=912): syz_mount_image$minix(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x4000, &(0x7f0000000080)=ANY=[], 0x1, 0x229, &(0x7f0000000140)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x0, 0x0, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x101002) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x40084149, &(0x7f0000000080)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r5 = dup(r4) write(0xffffffffffffffff, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143", 0xa3) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x4b) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c00000400000014000180"], 0x2c}}, 0x0) sendfile(r4, r5, 0x0, 0x80006) 8m42.541378911s ago: executing program 1 (id=915): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x8, 0x377b, 0xf801, 0x800, 0x4}}) unshare(0x6204021f) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x270) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x20000000) 8m41.286864326s ago: executing program 1 (id=918): r0 = socket$kcm(0x10, 0xa, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x3b) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000240)=0x6, 0x4) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x1, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2010, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES32]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r7 = openat(r6, &(0x7f0000000340)='./file0\x00', 0x408c2, 0x185) ioctl$AUTOFS_IOC_CATATONIC(r7, 0xc0049364, 0x1000000000000) connect$inet(r1, &(0x7f0000000500)={0x2, 0x0, @loopback}, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f00000004c0)={0x7, 0x4, &(0x7f00000002c0)=[0xffff, 0x6c2, 0x9, 0x1], &(0x7f0000000380)=[0x7, 0x6, 0x3], &(0x7f0000000400)=[0x6ec, 0x0], &(0x7f0000000480)=[0x80]}) accept4(r1, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 8m39.018463807s ago: executing program 1 (id=924): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@quota}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) socket(0x1e, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007100000000000000029"], 0x30}, 0x0) 8m38.633160135s ago: executing program 1 (id=927): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)={0x69c, 0x12, 0x2, 0x70bd26, 0x25dfdbff, "", [@generic="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"]}, 0x69c}], 0x1, 0x0, 0x0, 0x200080c1}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000140)=ANY=[]) 8m35.322894991s ago: executing program 1 (id=941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x7}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffccdfff, 0x800, 0x0, 0x1}, 0x20) socket$igmp(0x2, 0x3, 0x2) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) socket$inet6_tcp(0xa, 0x1, 0x0) 8m20.205264648s ago: executing program 32 (id=941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x7}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffccdfff, 0x800, 0x0, 0x1}, 0x20) socket$igmp(0x2, 0x3, 0x2) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) socket$inet6_tcp(0xa, 0x1, 0x0) 5m38.210184363s ago: executing program 2 (id=1296): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)}], 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = memfd_create(0x0, 0x3) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xfffb) 5m33.925216556s ago: executing program 2 (id=1306): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)={0x10, 0x12, 0x2, 0x70bd26, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x200080c1}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000140)=ANY=[]) 5m29.565778657s ago: executing program 2 (id=1316): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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") chdir(0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r0, 0x0, r1, 0x0, 0x10000000000016, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) r3 = open(&(0x7f0000000080)='./bus\x00', 0x143042, 0x83) ftruncate(r3, 0x3000000) sendfile(r2, r3, 0x0, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x71042270fb942479, 0x120) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 5m26.004678963s ago: executing program 2 (id=1327): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2004018, &(0x7f00000002c0)=ANY=[@ANYBLOB="6465636f6d706f73652c706172743d3078303030303030303030303030303030382c747970653da78688282c756d61736b3d30303030303030303030303030303030303130303030312c6e6c733d69736f383835392d362c756d61736b3d3030303030303030303031312c706172743d3078303030303030303030303030303030372c63726561746f723d8e4d91372c6e6f6465636f6d706f73652c00"/168], 0x1, 0x6a3, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) 5m22.586914878s ago: executing program 2 (id=1332): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) 5m20.659620561s ago: executing program 2 (id=1336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f00000000c0)=0x8003, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) io_uring_setup(0x1d06, &(0x7f00000003c0)={0x0, 0x24, 0x2, 0x0, 0x145}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00') getdents(r5, &(0x7f0000000040)=""/25, 0x19) 5m20.050334258s ago: executing program 33 (id=1336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f00000000c0)=0x8003, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) io_uring_setup(0x1d06, &(0x7f00000003c0)={0x0, 0x24, 0x2, 0x0, 0x145}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00') getdents(r5, &(0x7f0000000040)=""/25, 0x19) 4m4.241727636s ago: executing program 6 (id=1521): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 4m3.186844362s ago: executing program 6 (id=1528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) close_range(r4, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xffffff80, 0x178, 0x330, 0x178, 0x490, 0x230, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) ioctl$TCSETA(r6, 0x5406, &(0x7f00000000c0)={0x1000, 0x7, 0x7, 0x7f, 0x8, "4db58c95be11ba8d"}) 4m1.157297673s ago: executing program 6 (id=1529): syz_mount_image$minix(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x4000, &(0x7f0000000080)=ANY=[], 0x1, 0x229, &(0x7f0000000140)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x0, 0x0, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x101002) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x40084149, &(0x7f0000000080)) 3m56.776113485s ago: executing program 6 (id=1542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3m55.47664794s ago: executing program 6 (id=1543): syz_mount_image$nilfs2(&(0x7f00000005c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f00000002c0)=ANY=[], 0x1, 0xad4, &(0x7f0000001540)="$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") openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = getpgrp(0x0) get_robust_list(r0, &(0x7f0000000600)=0x0, &(0x7f0000000640)) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x80000000, 0x109100) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000380)={{0xa, 0x4, 0x6, 0x2, 'syz0\x00', 0x9}, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1, 'syz1\x00', 0x0}) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000680)=0x2, 0x4) 3m50.853160211s ago: executing program 6 (id=1549): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) 3m34.899018985s ago: executing program 34 (id=1549): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) 30.251837305s ago: executing program 0 (id=1976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x2f) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x0, 0xffffff80, 0x178, 0x330, 0x178, 0x490, 0x230, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x1000, 0x7, 0x7, 0x7f, 0x8, "4db58c95be11ba8d"}) 29.19183255s ago: executing program 0 (id=1979): socket$inet(0x2, 0x3, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de00000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x0) 28.724028558s ago: executing program 0 (id=1981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x8, 0x377b, 0xf801, 0x800, 0x4}}) unshare(0x6204021f) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x270) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x20000000) 27.125741301s ago: executing program 0 (id=1984): socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 26.502997099s ago: executing program 0 (id=1987): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @timestamp, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 23.733538808s ago: executing program 0 (id=1992): syz_mount_image$minix(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x4000, &(0x7f0000000080)=ANY=[], 0x1, 0x229, &(0x7f0000000140)="$eJzs2z1PFEEcx/HfPtxxoIARtTCaEI1oI+dDZWHUjoo3QEXgVOIaUbSAmAiNWphQ2dlYmZhYWBqDnbHyBViY2GmIFJdYWbBmz32Am3vO3a4e30/D7Pxm2NkNc/eH5QRgz7qqcVmylA8OjhUOrI9ZWS8JQEr88Ou26yfsKATQ324OZ70CANnYuia9OCX9LD+ck5OPyoKgAvi6KWlj4olWFeb2gKRXnyU3rh+21qSjbphbBQ1W1xcvpdPRfGvIqD+C+UNxvm9HMhjnZ05G59+vYY1oNBckBzUW5vPx/CNN6x23reoIAID+ZGmyWd5wgK3rC17pXN08V8nP183zlfxCk/xifDwQt2aeTz9471/eDvLJuTvefKNlAqjB7mD/fzmetJ0m+9+ts/+rf08AkL6l5ZVbs57nP5IqjdK9sCdsRH8RSHocY0xXGtEzhxYGR08ojSj4Hjt6HHP6+oR57d27CjtZ2Kik3tyof7ihGtG3qb/3JO6xe3HndzVO/Pj9ePHZ23etDH7T5ins+KduZqNUrhojW+rhdY0bu2DWK7Q23Vr1/TZPWvPlIvnngEK3X4kApK14//ZicWl55eyCI+lGKRe94U9936xU9sXG9T2A/1fypl8rXTN6/N2H0x8//Spfev20gzNfkfTBfCAIAAAAAAAAAAAAAADadkiHs14CAAAAgJSYn/65O9Ltjy5lfY0AAAAAAAAAAAAAAAAAAPSbPwEAAP//dhAJcA==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x0, 0x0, &(0x7f00000007c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x101002) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) write(0xffffffffffffffff, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143", 0xa3) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x4b) sendfile(r3, r4, 0x0, 0x80006) 12.417428731s ago: executing program 4 (id=2008): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = io_uring_setup(0x3314, &(0x7f0000000340)={0x0, 0x6444, 0x4, 0x3, 0x2b0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pipe(0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) close_range(r0, 0xffffffffffffffff, 0x0) 12.417091371s ago: executing program 7 (id=2009): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@quota}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b"], 0x30}, 0x0) 10.415620613s ago: executing program 5 (id=2010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x8, 0x377b, 0xf801, 0x800, 0x4}}) unshare(0x6204021f) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x270) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x20000000) 9.985142941s ago: executing program 3 (id=2011): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = io_uring_setup(0x3314, &(0x7f0000000340)={0x0, 0x6444, 0x4, 0x3, 0x2b0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pipe(0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) close_range(r0, 0xffffffffffffffff, 0x0) 9.180449247s ago: executing program 5 (id=2012): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setxattr$incfs_size(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 8.994138337s ago: executing program 4 (id=2013): socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 8.899941437s ago: executing program 7 (id=2014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8007fff, 0x0) ioctl$KVM_RUN(r3, 0x8004ae98, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) 8.484406965s ago: executing program 35 (id=1992): syz_mount_image$minix(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x4000, &(0x7f0000000080)=ANY=[], 0x1, 0x229, &(0x7f0000000140)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x0, 0x0, &(0x7f00000007c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x101002) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) write(0xffffffffffffffff, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143", 0xa3) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x4b) sendfile(r3, r4, 0x0, 0x80006) 8.323958294s ago: executing program 3 (id=2016): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @timestamp, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000005c0)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 8.323161894s ago: executing program 4 (id=2017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x2f) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0xffffff80, 0x178, 0x330, 0x178, 0x490, 0x230, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x1000, 0x7, 0x7, 0x7f, 0x8, "4db58c95be11ba8d"}) 7.960753603s ago: executing program 5 (id=2018): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7.3864331s ago: executing program 3 (id=2019): r0 = syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x5, 0x30e, &(0x7f0000000900)="$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") socket(0x1d, 0x2, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x4, 0xf2, 0x8}}}, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) openat(r0, &(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400080, 0x6) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f00000006c0)='./bus\x00', 0x800040, &(0x7f0000000340)=ANY=[], 0x1, 0x2b4, &(0x7f0000000f00)="$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") setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="65786563203a007e142d901405008f51686a1b04e58da1c2aa2dc7674423031ceeaadd809e2f1920f388d3ba4faea17a2cde2d8f4b4e86679be4feae2f90d85e4f868184ab71eb8b3b46e9eec8d1b4510514e7a963283044375bcc42e1599905aeba00c4083184d608b0f09a98853bff9271393aafa2098864c0e5cf4614347d02b9b1857f78e6278c893827656ade3b2b0a31d415f951ac77cf53ed800c6b74eddb7c10bdbef19499e13f10dac7ed5b"], 0xb0) 7.38597225s ago: executing program 7 (id=2020): socket$kcm(0x10, 0xa, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x3b) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000240)=0x6, 0x4) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x1, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2010, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r6 = openat(r5, &(0x7f0000000340)='./file0\x00', 0x408c2, 0x185) ioctl$AUTOFS_IOC_CATATONIC(r6, 0xc0049364, 0x1000000000000) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @loopback}, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f00000004c0)={0x7, 0x3, &(0x7f00000002c0)=[0xffff, 0x9, 0x1], &(0x7f0000000380)=[0x7, 0x6, 0x3], &(0x7f0000000400)=[0x6ec, 0x0], &(0x7f0000000480)=[0x80]}) accept4(r0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 5.362573712s ago: executing program 4 (id=2021): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, r0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) close_range(r5, 0xffffffffffffffff, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x81) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xffffff80, 0x178, 0x330, 0x178, 0x490, 0x230, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x1000, 0x7, 0x7, 0x7f, 0x8, "4db58c95be11ba8d"}) 5.149531441s ago: executing program 7 (id=2022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x8, 0x377b, 0xf801, 0x800, 0x4}}) unshare(0x6204021f) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x270) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x20000000) 2.949406342s ago: executing program 3 (id=2023): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000180)=ANY=[@ANYBLOB="63726561746f723d437c061b2c6465636f6d706f73652c63726561746f723d67fdb8f62c6769643d", @ANYRESHEX=0xee01, @ANYBLOB="3933362c0000eb00"/20], 0x3, 0x6cd, &(0x7f0000001040)="$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") socket$inet6_sctp(0xa, 0x1, 0x84) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f00007d3000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="ba430066b8dfd5ae6066efba2000edba4100ec660fc73655a10fc7ae0f000fc77c3b650f06f30f5bc23e0fc758a50f01cf", 0x31}], 0x1, 0x0, &(0x7f0000000280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x145842, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x32314152, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x0, 0x5}}) 2.60669443s ago: executing program 4 (id=2024): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@quota}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b0000000000000710"], 0x30}, 0x0) 1.998003368s ago: executing program 5 (id=2025): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = io_uring_setup(0x3314, &(0x7f0000000340)={0x0, 0x6444, 0x4, 0x3, 0x2b0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pipe(0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) close_range(r0, 0xffffffffffffffff, 0x0) 1.947430698s ago: executing program 7 (id=2026): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = io_uring_setup(0x3314, &(0x7f0000000340)={0x0, 0x6444, 0x4, 0x3, 0x2b0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pipe(0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) close_range(r0, 0xffffffffffffffff, 0x0) 1.226220165s ago: executing program 3 (id=2027): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setxattr$incfs_size(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 1.038209944s ago: executing program 4 (id=2028): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @timestamp, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 678.984383ms ago: executing program 5 (id=2029): socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 613.652602ms ago: executing program 7 (id=2030): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) accept$inet(r0, 0x0, 0x0) syz_mount_image$sysv(&(0x7f0000000140), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x21, 0x9e86, &(0x7f0000000180)="$eJw8mmP0J8fWcP+TiW3bTnZs27ZteyeZ4Nc2Ytu2bdu2bcy75r33PudTf+hV1bXPPrW6cMsAbx3gbQO8fYB3DPDOAd41wLsHeM8A7x3gfQO8f4APDPDBAT40wIcH+MgAHx3gYwN8fIBPDPDJAT41wKcH+MwAnx3gcwN8foAvDPDFAb40wJcH+MoAXx3gawN8fYBvDPDNAb41wLcH+M4A3x3gewN8f4AfDPDDAX40wI8H+MkAPx3gZwP8fIBfjBzhlwP8aoBfD/CbAX47wO8G+P0AfxjgjwP8aYA/D/CXAf46wN8G+PsA/xjgnwP8a4B/D/CfAf47wJEDHApwWICjBTgywNEDHCPAMQMcK8CxAxwnwHEDHC/A8QOcIMAJA5wowIkDnCTASQOcLMDJA5wiwCkDnCrAqQOcJsBpA5wuwOkDnCHAGQOcKcCZA5wlwFkDnC3A2QOcI8A5A5wrwLkDnCfAeQOcL8D5A1wgwAUDXCjAhQMkYNgiAS4a4GIBLh7gEgEuGeBSAS4d4DIBLhvgcgEuH+AKAa4Y4EoBrhzgKgGuOmJoaBSP1QNcI8A1A1wrwLUDXCfAdQNcL8D1A9wgwA0D3CjAjQPcJMBNA9wswM0D3CLALQPcKsCtA9wmwG0D3C7A7QPcIcAdA9wpwJ0D3CXAXQPcLcDdA9wjwD0D3CvAvQPcJ8B9A9wvwP0DPCDAAwM8KMCDAzwkwEMDPCzAwwM8IsAjAzwqwKMDPCZAAzw2wOMCPD7AEQGeEOCJAZ4U4MmjXBiFIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsBTAjw1wNMCPD3AMwI8M8CzAjw7wHMCPDfA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7ArwzwLsCvDvAewK8N8D7Arw/wAcCfDDAhwJ8OMBHAnw0wMcCfDzAJwJ8MsCnAnw6wGcCfDbA5wJ8PsAXAnwxwJcCfDnAVwJ8NcDXAnw9wDcCfDPAtwJ8O8B3Anw3wPcCfD/ADwL8MMCPAvw4wE8C/DTAzwL8PMAvAvwywK8C/DrAbwL8NsDvAvw+wB8C/DHAnwL8OcBfAvw1wN8C/D3APwL8M8C/Avw7wH8C/Pe/9T4U4rDwBEcLcXiIo4c4RohjhjhWiGOHOE6I44Y4XojjhzhBiBOGOFGIE4c4SYiThjhZiJOHOEWIU4Y4VYhThzhNiNOGOF2I04c4Q4gzhjhTiDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T4jzhjhfiPOHuECIC4a4UIgLh0iIi4S4aIiLhbh4iEuEuGSIS4W4dIjLhLhsiMuFuHyIK4S4YogrhbhyiKuEuGqIq4W4eohrhLhmiGuFuHaI64S4bojrhbh+iBuEuGGIG4W4cYibhLhpiJuFDG0e4hYhbhniViFuHeI2IW4b4nYhbh/iDiHuGOJOIe4c4i4h7hribiHuHuIeIe4Z4l4h7h3iPiHuG+J+Ie4f4gEhHhjiQSEeHOIhIR4a4mEhHh7iESEeGeJRIR4d4jEhGuKxIR4X4vEhjgjxhBBPDPGkEE8e9Q0vDA0FIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2IZ4S4qkhnhbi6SGeEeKZIZ4V4tkhnhPiuSGeF+L5IV4Q4oUhXhTixSFeEuKlIV4W4uUhXhHilSFeFeLVIV4T4rUhXhfi9SHeEOKNo3K3+XxDow0NDd0S4q0h3hbi7SHeEeKdId4V4t0h3hPivSHeF+L9IT4Q4oMhPhTiyLGGhoZWGhp6dFQdDA0NPR7iEyE+GeJTIT4d4jMhPhvicyE+H+ILIb4Y4kujD/lyiK+EjPVqiK+F+HqIb4T4Zohvhfh2iO+E+G6I74X4fogfhPhhiB+F+HGIn4T4aYifhfh5iF+E+GWIX4X4dYjfhPhtiN+F+H2IP4T4Y4g/hfhziL+E+GuIv4X4e4h/hPhniH+F+HeI/4T476ixhjgU4bAIR4tGjRZHj3CMCMeMcKwIx45wnAjHjXC8CMePcIIIJ4xwoggnjnCSCCeNcLIIJ49wiginjHCqCKeOcJoIp41wuginj3CGCGeMcKYIZ45wlghnjXC2CGePcI4I54xwrgjnjnCeCOeNcL4I549wgQgXjHChCBeOkAgXiXDRCBeLcPEIl4hwyQiXinDpCJeJcNkIl4tw+QhXiHDFCFeKcOUIV4lw1QhXi3D1CNeIcM0I14pw7QjXiXDdCNeLcP0IN4hwwwg3inDjCDeJcNMIN4tw8wi3iHDLCLeKcOsIt4lw2wi3i3D7CHeIcMcId4pw5wh3iXDXCHeLcPcI94hwzwj3inDvCPeJcN8I94tw/wgPiPDACA+K8OAID4nw0AgPi/DwCI+I8MgIj4rw6AiPidAIj43wuAiPj3BEhCdEeGKEJ0V4coSDCIMIwwijCOMIkwjTCLMI8wiLCMsIqwjrCJsI2wi7CPsIT4nw1AhPi/D0CM+I8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCIcP4e0R3hHhnRHeFeHdEd4T4b0Rw+6L8P4IH4jwwQgfivDhCB+J8NEIH4vw8QifiPDJCJ+K8OkIn4nw2Qifi/D5CF+I8MUIX4rw5QhfifDVCF+L8PUI34jwzQjfivDtCN+J8N0I34vw/Qg/iPDDCD+K8OMIP4nw0wg/i/DzCL+I8MsIv4rw62icoW8i/DbC7yL8PsIfIvwxwp8i/DnCXyL8NcLfIvw9wj8i/DPCvyL8O8J/Ivw3wpEjcSjGYTGOFuPwGEePcYwYx4xxrBjHjnGcGMeNcbwYx49xghgnjHGiGCeOcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF46RGBeJcdEYF4tx8RiXiHHJGJeKcekYl4lx2RiXi3H5GFeIccUYV4px5RhXiXHVGFeLcfUY14hxzRjXinHtGNeJcd0Y14tx/Rg3iHHDGDeKceMYN4lx0xg3i3HzGLeIccsYt4px6xi3iXHbGLeLcfsYd4hxxxh3inHnGHeJcdcYd4tx9xj3iHHPGPeKce8Y94lx3xj3i3H/GA+I8cAYD4rx4BgPifHQGA+L8fAYj4jxyBiPivHoGI+J0RiPjfG4GI+PcUSMJ8R4YownxXhyjIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xhPifHUGE+L8fQYz4jxzBjPivHsGM+J8dwYz4vx/BgviPHCGC+K8eIYL4nx0hgvi/HyGK+I8coYr4rx6hivifHaGK+L8foYb4jxxhhvivHmGG+J8dYYb4vx9hjviPHOGO+K8e4Y74nx3hjvi/H+GB+I8cEYH4rx4RgfifHRGB+L8fEYn4jxyRifivHpGJ+J8dkYn4vx+RhfiPHFGF+K8eUYX4nx1Rhfi/H1GN+I8c0Y34rx7RjfifHdGN+L8f0YP4iHD/0n8OMYP4nx0xg/i/HzGL+I8csYv4rx6xi/GZW7Ua+fODT0fYw/xPhjjD/F+HOMv8T4a4y/xfh7jH/E+GeMf8X4d4z/xPhvjCNjHEpwWIKjJTg8wdETHCPBMRMcK8GxExwnwXETHC/B8ROcIMEJE5wowYkTnORhnDTByRKcPMEpEpwywakSnDrBaRKcNsHpEpw+wRkSnDHBmRKcOcFZEpw1wdkSnD3BORKcM8G5Epw7wXkSnDfB+RKcP8EFElwwwYUSRvwXnIskuGiCiyW4eIJLJLhkgksluHSCyyS4bILLJbh8giskuGKCKyW4coKrJLhqgqsluHqCaySM87+2105wnQTXTXC9BNdPcIMEN0xwowQ3TnCTBDdNcLMEN09wiwS3THCrBLdOcJsEt01wuwS3T3CHBHdMcKcEd05wlwR3TXC3BHdPcI8E90zGcK8E905wnwT3TXC/BPdP8IAED0zwoAQPTvCQBA9N8LAED0/wiASPTPCoBI9O8JgETfDYBI9L8PgERyR4QoInJnhSgicnOEgwSDBMMEowTjBJME0wSzBPsEiwTLBKsE6wSbBNsEuwT/CUBE9N8LQET0/wjATPTPCsBM9O8JwEz03wvATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTvCaBK9N8LoEr0/whgRvTPCmBG9O8JYEb01waDjenuAdCd6Z4F0J3p3gPQnem+B9Cd6f4AMJPpjgQwk+nOAjCT6a4GMJPp7gE8P+a0KCTyf4TILPJvhcgs8n+EKCLyb4UoIvJ/hKgq8m+FqCryf4RoJvJvhWgm8n+E6C7yb4XoLvJ/hBgh8m+FGCHyf4SYKfJvhZgp8n+EWCXyb4VYJfJ/hNgt8m+F2C3yf4Q4I/JvhTgj8n+EuCvyb4W4K/J/hHgn8m+FeCfyf4T4L/JjuOO2q+GUpxWIqjpTg8xdFTHCPFMVMcKx3LsVMcJ8VxUxwvxfFTnCDFCVOcKMWJU5wkxUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTJMVFUlw0xcVSXDzFJVJcMsWlUlw6xWVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjTFY1M8LsXjUxyR4gkpnpjiSSmenOIgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FU1I8NcXTUjw9xTNSPDPFs1I8O8VzUjw3xfNSPD/FC1K8MMWLUrw4xUtSvDTFy1K8PMUrUrwyxatSvDrFa1K8NsXrUrx+7KGhUQ7fmOJNKd6c4i0p3pribSnenuIdKd6Z4l0p3p3iPSnem+J9Kd6f4gMpPpjiQyk+nOIjKT6a4mMpPp7iEyk+meJTKT6d4jMpPpvicyk+n+ILKb6Y4kspvpziKym+muJrKb6e4hspvpniWym+neI7Kb6b4nspvp/iByl+mOJHKX6c4icpfpriZyl+nuIXKX6Z4lcpfp3iNyl+m+J3KX6f4g8p/pjiTyn+nOIvKf6a4m8p/p7iHyn+meJfKf6d4j8p/pviyBSHMhyW4WgZDs9w9AzHyHDMDMfKcOwMx8lw3AzHy3D8DCfIcMIMJ8pw4gwnyXDSDCfLcPIMp8hwygynynDqDKfJcNoMp8tw+gxnGDlsaFS/M2U4c4azZDhrhrNlOHuGc2Q4Z4ZzZTh3hvNkOG+G82U4f4YLZLhghgtluHCGZLhIhotmuFiGi2e4RIZLZrhUhktnuEyGy2a4XIbLZ7hChitmuFKGK2f/2fdeNcPVMlw9wzUyXDPDtTJcO8N1Mlw3w/UyXD/DDTLcMMONMtw4w00y3DTDzTLcPMMtMtwyw60y3DrDbTLcNsPtMtw+wx0y3DHDnTLcOcNdMtw1w90y3D3DPTLcM8O9Mtw7w30y3DfD/TLcP8MDMjwww4MyPDjDQzI8NMPDMjw8wyMyPDLDozI8OsNjMjTDYzM8LsPjMxyR4QkZnpjhSRmenOEgwyDDMMMowzjDJMM0wyzDPMMiwzLDKsM6wybDNsMu+/j//mNPzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JIML83wsgwvz/CKDK/M8KoMr87wmgyvzfC6DK/P8IYMb8zwpgxvzvCWDG/N8LYMb8/wjgzvzPCuDO/O8J4M783wvgzvz/CBDB/M8KEMH87wkQwfzfCxDB/P8IkMn8zwqQyfzvCZDJ/N8LkMn8/whQxfzPClDF/O8JUMX83wtZn/iyPDNzN8K8O3M3wnw3czfC/D9zP8IMMPM/wow48z/CTDTzP8LMPPM/wiwy8z/CrDr7Ox/o/xdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/Gf6b4cgMh3IcluNoOQ7PcfQcx8hxzBzHynHsHMfJcdwcx8tx/BwnyHHCHCfKceIcJ8lx0hwny3HyHKfIccocp8px6hynyXHaHKfLcfocZ8hxxhxnynHmHGfJcdYcZ8tx9hznyHHOHOfKce4c58lx3hznyxl9/hwXyHHBHBfKceEcyXGRHBfNcbEcF89xiRyXzHGpHJfOcZkcl81xuRyXz3GFHFfMcaUcV85xlRxXzXG1HFfPcY0c18xxrRzXznGdHNfNcb0c189xgxw3zHGj//LbJMdNc9wsx81z3CLHLXPcKsetc9wmx21z3C7H7XPcIccdc9wpx51z3CXHXXPcLcfdc9wjxz1z3CvHvXPcJ8d9c9wvx/1zPCDHA3M8KMeDczwkx0NzPCzHw3M8Iscjczwqx6NzPCZHczw2x+NyPD7HETmekOOJOZ6U48k5DnIMcgxzjHKMc0xyTHPMcsxzLHIsc6xyrHNscmxz7HLsczwlx1NzPC3H03M8I8czczwrx7NzPCfHc3M8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjxztzvCvHu3O8J8d78/+/dvT+HB/I8cEcH8rx4RwfyfHRHB/L8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxz3zY0F85/p3jPzn+m+PIHIcKHFbgaAUOL3D0AscocMwCxypw7ALHKXDcAscrcPwCJyhwwgInKhg1GTlJgZMWOFmBkxc4RYFTFjhVgVMXOE2B0xY4XYHTFzhDgTMWOFOBMxc4S4GzFjhbgbMXOEeBcxY4V4FzFzhPgfMWOF+B8xe4QIELFrhQgQsXSIGLFLhogYsVuHiBSxS4ZIFLFbh0gcsUuGyByxW4fIErFLhigSsVuHKBqxS4aoGrFbh6gWsUuGaBaxW4doHrFLhugesVuH6BGxS4YYEbFbhxgZsUuOnwITcrcPMCtyhwywK3KnDrArcpcNsCtytw+wJ3KHDHAncqcOcCdylw1wJ3K3D3AvcocM8C9ypw7wL3KXDfAvcrcP8CDyjwwAIPKvDgAg8p8NACDyvw8AKPKPDIAo8q8OgCjynQAo8t8LgCjy9wRIEnFHhigScVeHKBgwKDAsMCowLjApMC0wKzAvMCiwLLAqsC6wKbAtsCuwL7Ak8p8NQCTyvw9ALPKPDMAs8q8OwCzynw3ALPK/D8Ai8o8MICLyrw4gIvKfDSAi8r8PICryjwygKvKvDqAq8p8NoCryvw+gJvKPDGAm8q8OYCbynw1gJvK/D2Au8o8M4C7yrw7gLvKfDeAu8r8P6hYT5Q4IMFPlTgwwU+UuCjBT5W4OMFPlHgkwU+VeDTBT5T4LMFPlfg8wW+UOCLBb5U4MsFvlLgqwW+VuDrBb5R4JsFvlXg2wW+U+C7Bb5X4PsFflDghwV+VODHBX5S4KcFflbg5wV+UeCXBX5V4NcFflPgtwV+V+D3Bf5Q4I8F/lTgzwX+UuCvBf5W4O8F/lHgnwX+VeDfBf5T4L8FjixwqMRhJY5W4vASRy9xjBLHLHGsEscucZwSxy1xvBLHL3GCEicscaISJy5xkhInLXGyEicvcYoSpyxxqhKnLnGaEqctcboSpy9xhhJnLHGmEmcucZYSZy1xthJnL3GOEucsca4S5y5xnhLnLXG+Euf/315MiQuVuHCJlLhIiYuWuFiJi5e4RIlLlrhUiUuXuEyJy5a4XInLl7hCiSuWuFKJK5e4SomrlrhaiauXuEaJa5a4Volrl7hOieuWuF6J65e4QYkblrhRiRuXuEmJm5a4WYmbl7hFiVuWuFWJW5e4TYnblrhdiduXuEOJO5a4U4k7l7hLibuWuFuJu5e4R4l7lrhXiXuXuE+J+5a4X4n7l3hAiQeWeFCJB5d4SImHlnhYiYeXeESJR5Z4VIlHl3hMiZZ4bInHlXh8iSNKPKHEE0s8qcSTSxyUGJQYlhiVGJeYlJiWmJWYlwwVJZYlViXWJTYltiV2JfYlnlLiqSWeVuLpJZ5R4pklnlXi2SWeU+K5JZ5X4vklXlDihSVeVOLFJV5S4qUlXlbi5SVeUeKVJV5V4tUlXlPitSVeV+L1Jd5Q4o0l3lTizSXeUuKtJd5W4u0l3lHinSXeVeLdJd5T4r0l3lfi/SU+UOKDJT5U4sMlPjKqDobwsRIfL/GJEp8s8akSny7xmRKfLfG5Ep8v8YUSXyzxpRJfLvGVEl8t8bUSXy/xjRLfLPGtEt8u8Z0S3x057P88/qDED0v8qMSPS/ykxE9L/KzEz0v84reR/4kSvy7xmxK/LfG7Er8v8YcSfyzxpxJ/LvGXEn8t8bcSfy/xjxL/LPGvEv8u8Z8S/y1xVHtDFQ6rcLQKh1c4eoVjVDhmhWNVOHaF41Q4boXjVTh+hRNUOGGFE1U4cYWTVDhphZNVOHmFU1Q4ZYVTVTh1hdNUOG2F01U4fYUzVDjj8KGhUX3PXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlwhFS5S4aIVLlbh4hUuUeGSFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5ToRUeW+FxFR5f4YgKT6jwxApPqvDkCgcVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV9hWeUuGpFZ5W4ekVnlHhmRWeVeHZFZ5zAp5b4XkVnl/hBRVeWOFFFV5c4SUVXlrhZRVeXuEVFV5Z4VUVXl3hNRVeW+F1I4f/f4duqPDGCm+q8OYKb6nw1gpvq/D2Cu+o8M4K76rw7grvqfDeCu+r8P4KH6jwwQofqvDhCh+p8NEKH6vw8QqfqPDJCp+q8OkKn6nw2Qqfq/D5Cl+o8MUKX6rw5QpfqfDVCl+r8PUK36jwzQrfqvDtCt+p8N0K36vw/Qo/qPDDCj+q8OMKP6nw0wo/q/DzCr+o8MsKv6rw6wq/qfDbCr+r8PsKf6jwxwp/qvDnCn+p8NcKf6vw9wr/qPDPCv+q8O8K/6nw3wpHVjhU47AaR6txeI2j1zhGjWPWOFaNY9c4Tj1saNwax6tx/BonqHHCGieqceIaJ6lx0honq3HyGqeoccoap6px6hqnqXHaGqercfoaZ6hxxhpnqnHmGmepcdYafxuJs9c4R41z1jhXjXPXOE+N89Y4X43z17hAjQvWuFCNC9dIjYvUuGiNi9W4eI1L1LhkjUvVuHSNy9S4bI3L1bh8jSvUuGKNK9W4co2r1LhqjavVuHqNa9S4Zo1r1bh2jevUuG6N69W4fo0b1LhhjRvVuHGNm9S4aY2b1bh5jVvUuGWNW9W4dY3b1LhtjdvVuH2NO9S4Y4071bhzjbvUuGuNu9W4e4171LhnjXvVuHeN+9S4b4371bh/jQfUeGCNB9V4cI2H1HhojYfVeHiNR9R4ZI1H1Xh0jcfUaI3H1nhcjcfXOKLGE2o8scaTRnkwNHLkoMagxrDGqMa4xqTGtMasxrzGosayxqrGusamxrbGrsa+xlNqPLXG02o8vcYzajyzxrNqPLvGc2o8t8bzajy/xgtqvLDGi2q8uMZLary0xstqvLzGK2q8ssarary6xmtqvLbG62q8vsYbaryxxptqvLnGW2q8tcbbRvk8NDR0R4131nhXjXfXeE+N99Z4X4331/hAjQ/W+FCND9f4SI2P1vhYjY/X+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/jqqnGn+v8Y8a/6zxrxr/rvGfGv+tcWSNQw0Oa3C0Boc3OHqDYzQ4ZoNjD+HYDY7T4LgNjtfg+A1O0OCEDU7U4MQNTtLgpA1O1uDkDU7R4JQNTtXg1A1O0+C0DU7X4PQNztDgjA3O1ODMDc7S4KwNztbg7A3O0eCcDc7V4NwNztPgvA3O1+D8DS7Q4IINLtTgwg3S4CINLtrgYg0u3uASDS7Z4FINLt3gMg0u2+ByDS7f4AoNrtjgSg2u3OAqDa7a4GoNrt7gGg2u2eBaDa7d4DoNrtvgeg2u3+AGDW7Y4EYNbtzgJg1u2uBmDW7e4BYNbtngVg1u3eA2DW7b4HYNbt/gDg3u2PyH784N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0Ywyn63HHxry6AaPadAGj23wuAaPb3BEgyc0eGKDJzV4coODBoMGwwajBuMGkwbTBrMG8waLBssGqwbrBpsG2wa7BvsGT2nw1AZPa/D0Bs9o8MwGz2rw7AbPafDcBs9r8PwGL2j+U6ej4uIGL2nw0gYva/DyBq9o8MoGr2rw6gavafDaBq9r8PoGb2jwxgZvavDmBm8ZHW9t8LYGb2/wjgbvbPCuBu9u8J4G723wvgbvb/CBBh9s8KEGH27wkQYfbfCxBh9v8IkGn2zwqQafbvCZBp9t8LkGn2/whQZfbPClBl9u8JUGX23wtQZfb/CNBt9s8K0G327wnQbfbfC9Bt9v8IMGP2zwowY/bvCTBj9t8LMGP2/wiwa/bPCrBr9u8JsGv23wuwa/b/CHBn9s8KcGf27wlwZ/bfC3Bn9v8I8G/2zwrwb/bvCfBv9tcGSDQy0Oa3G0Foe3OHqLY/z3eawWx25xnBbHbXG8FsdvcYIWJ2xxohYnbnGSFidtcbIWJ29xihanbHGqFqducZoWp21xuhanb3GGFmdscaYWZ25xlhZnbXG2FmdvcY4W52xxrhbnbnGeFudtcb4W529xgRYXbHGhFhdukRYXaXHRFhdrcfEWl2hxyRaXanHpYbhMi8u2uFyLy7fDXKHFFVtcqcWVW1ylxVVbXK3F1Vtco8U1W1yrxbVbXKfFdVtcr8X1W9ygxQ1b3KjFjVvcpMVNW9ysxc1b3KLFLVvcqsWtW9ymxW1b3K7F7VvcocUdW9ypxZ1b3KXFXVvcrcXdW9yjxT1b3KtlzL1b3KfFfVvcr8X9WzygxQNbPKjFg1s8pMVDWzysxcNH5XToP+vLo1o8usVjWrTFY1s8rsXjWzYY0eIJLZ7Y4kntf1wYtBi0GLYYtRi3mLSYtpi1mLdYtFi2WLVDw+oWmxbbFrsW+xZPafHUFk9r8fQWz2jxzBbPavHsFs9p8dwWz2vx/BYvaPHCFi9q8eIWL2nx0hYva/HyFq9o8coWr2rx6havafHaFq9r8foWb2hxzBZvavHmFm9p8dYWb2vx9hbvaPHOFu9q8e4W72nx3hbva/H+Fh9o8cEWH2rx4RYfafHRFh9r8fEWn2jxyRafavHpFp9p8dkWn2vx+RZfaPHFFl9q8eUWX2nx1RZfa/H1Ft9o8c0W32rx7RbfafHdFt9r8f0WP2jxwxY/avHjFj9p8dOWodGGhlb8vMUvWvyyxa9a/LrFb1r8tsXvWvy+xR9a/LHFn1r8ucVfWvy1xd9a/L3FP1r8s8W/Wvy7xX9a/LfFkaNy3uGwDkfrcHiHo3c4RodjdjhWh2N3OE6H43Y4XofjdzhBhxN2OFGHE3c4SYeTdjhZh5N3OEWHU3Y4VYdTdzhNh9N2OF2H03c4Q4czdjhThzN3OEuHs3Y4W4ezdzhHh3N2OFeHc3c4T4fzdjhfh/N3uECHC3a4UIcLd0iHi3S4aIeLdbh4h0t0uGSHS3W4dIfLdLhsh8t1uHyHK3S4Yocrdbhyh6t0uGqHq3W4ejeOa3S4Zodrdbh2h+t0uG7H/w5f3aDDDTvcqMONO9ykw0073KzDzTvcosMtO9yqw6073KbDbTvcrsPtO9yhwx073KnDnTvcpcNdO9ytw9073KPDPTvcq8O9O9ynw3073K/D/Ts8oMMDOzyow4M7PKTDQzs8rMPDOzyiwyM7PKrDozs8pkM7PLbD4zo8vsMRHZ4wAk/s8KQOT+5w0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4SkdntrhaR2e3uEZHZ7Z4Vkdnt3hOR2e2+F5HZ7f4QUdXtjhRR1e3OElHV7a4WUdXt7hFR1e2eFVHV7d4TUdXtvhdR1e3+ENHd7Y4U0d3tzhLR3e2uFtHd7e4R3dfzy/q8O7O7ynw3s7vK/D+zt8oMMHO3yow4c7fKTDRzt8rMPHO3yiwyc7fKrDpzt8psNnO3yuw+c7fKHDFzt8qcOXO3ylw1c7fK3D1zt8o8M3O3yrw7c7fKfDdzt8r8P3O/ygww87/KjDjzv8pMNPO/ysw887/KLDLzv8qsOvO/ymw287/K7D7zv8ocMfO/ypw587/KXDXzv8rcPfO/yjwz87/KvDvzv8p8N/Oxw5ikuPw3ocrcfhPY7e4xg9jtnjWD2O3eM4PY7b43g9jt/jBD1O2ONEPU7c4yQ9TtrjZD1O3uMUPU7Z41Q9Tt3jND1O2+N0PU7f4ww9ztjjTD3O3P/nLvOsPc7W4+w9ztHjnD3O1ePcPc7T47w9ztfj/D0u0OOCPS7U48I90uMiPS7a42I9Lt7jEj0u2eNSPS7d4zI9Ltvjcj0u3+MKPa7Y40o9rtzjKj2u2uNq/7uK3eOaPa7V49o9rtPjuj2u1+P6PW7Q44Y9btTjxj1u0uOmPW7W4+Y9btHjlj1u1ePWPW7T47Y9btfj9j3u0OOOPe7U48497tLjrj3u1uPuPe7R45497tXj3j3u0+O+Pe7X4/49HtDjgT0e1OPBPR7S46E9Htbj4T0e0eORPR7V49E9HtOjPR7b43E9Hj+Ke48n9Hhijyf1eHKPgx6DHsMeox7jHpMe0x6zHvMeix7LHqse6x6bHtseux77Hk/p8dQeT+vx9B7P6PHMHs/q8ewez+nx3B7P6/H8Hi/o8cIeL+rx4h4v6fHSHi/r8fIer+jxyh6v6vHqHq/p8doer+vx+h5v6PHGHm/q8eYeb+nx1h5v6/H2Hu/o8c4e7+rx7h7v6fHeHu/r8f4eH+jxwR4f6vHhHh/p8dEeH+vx8R6f6PHJHp/q8eken+nx2R6f6/H5Hl/o8cUeX+rx5R5f6fHVHl/r8fUe3+jxzR7f6vHtHt/p8d0e3+vx/R4/6PHDHj/q8eMeP+nx0x4/6/HzHr/o8csev+r5f0S8c9DgR9Ru+04yyUwmtjOxtWJnYtu2baxgYvv92ZjYtm3btq25le9859x/u6qrunetZ9fTu3e3Xw/iN4P47SB+N4jfD+IPg/jjIP40iD8P4i+D+Osg/jaIvw/iH4P45yD+NYh/D+I/g/jvII4dxIEAhwQ4ToDjBjg0wPECHD/AYQEOD3CCAEcEOGGAEwU4cYCTBDhpgJMFOHmAUwQ4ZYBTBTh1gNMEOG2A0wU4fYAzBDhjgDMFOHOAswQ4MsBZA5wtwNkDnCPAOQOcKxgYPXeA8wQ4b4DzBTh/gAsEuGCACwW4cICLBLhogOw1MPDfPhYPcIkAlwxwqQCXDnCZAJcNcLkAlw9whQBXDHClAFcOcFSAqwS4aoCrBbh6gGsEuGaAawW49tAB1wlw3QDXC3D9ADcIcMMANwpw4wA3CXDTADcLcPMAtwhwywC3CnDrALcJcNsAtwtw+wB3CHDHAHcKcOcAdwlw1wB3C3D3APcIcM8A9wpw7wD3CXDfAPcLcP8ADwjwwAAPCvDgAA8J8NAADwvw8ACPCPDIAI8K8OgAjwnw2AAN8LgAjw/whABPDHB0gCcFeHKApwR4aoCnBXh6gGcEeGaAZwV4doDnBHhugOcFeH6AFwR4YYAXBXhxgJcEOBhgEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH+CYAC8N8LIALw/wigCvDPCqAK8O8JoArw3wugCvD/CGAG8M8KYAbw7wlgBvDfC2AG8P8I4A7wzwrgDvDvCeAO8N8L4A7w/wgQAfDPChAB8O8JEAHw3wsQAfD/CJAJ8M8KkAnw7wmQCfDfC5AJ8P8IUAXwzwpQBfDvCVAF8N8LUAXw/wjQDfDPCtAN8O8J0A3w3wvQDfD/CD4P/0830U4McBfhLgpwF+FuDnAX4R4JcBfhXg1wF+E+C3AX4X4PcB/hDgjwH+FODPAf4S4K8B/hbg7wH+EeCfAf4V4N8B/hPg2ElxbIADIQ4JcZwQxw1xaIjjhTh+iMNCHB7iBCGOCHHCECcKceIQJwlx0hAnC3HyEKcIccoQpwpx6hCnCXHaEKcLcfoQZwhxxhBnCnHmEGcJcWSIs4Y4W4izhzhHiHOGOFeIc4c4T4jzhjhfiPOHuECIC4a4UIgLh7hIiIuGSIiLhbh4iEuEuGSIS4W4dIjLhLhsiMuFuHyIK4S4YogrhbhyiKNCXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0MG/u/Z5IgQjwzxqBCPDvGYEI8N0RCPC/H4EE8I8cQQR4d4Uognh3hKiKeGeFqIp4d4RohnhnhWiGeHeE6I54Z4Xojnh3hBiBeGeFGIF4d4SYiDIQYhhiFGIcYhJiGmIWYh5v/xNvr/XGdXIdYhNiG2IXYh9iGOCfHSEC/7XzavCPHKEK8K8eoQrwnx2hCvC/H6EG8I8cYQbwrx5hBvCfHWEG8L8fYQ7wjxzhDvCvHuEO8J8d4Q7wvx/hAfCPHBEB8K8eEQHwnx0RAfC/HxEJ8I8ckQnwrx6RCfCfHZEJ8L8fkQXwjxxRBfCvHlEF8J8dUQXwvx9RDfCPHNEN8K8e0Q3wnx3RDfC/H9ED8I8cMQPwrx4xA/CfHTED8L8fMQvwjxyxC/CvHrEL8J8dsQvwvx+xB/CPHHEH8K8ecQfwnx1xB/C/H3EP8I8c8Q/wrx7xD/CfHfEMeGOBDhkAjHiXDcCIdGOF6E40c4LMLhEU4Q4YgIJ4xwoggnjnCSCCeNcLIIJ49wiginjHCqCKeOcJoIp41wuginj3CGCGeMcKYIZ45wlghHRjhrhLNFOHuEc0Q4Z4RzRTh3hPNEOG+E80U4f4QLRLhghAtFuHCEi0S4aIREuFiEi0e4RIRLRrhUhEtHuEyEy0a4XITLR7hChCtGuFKEK0c4KsJVIlw1wtUiXD3CNSJcM8K1Ilw7wnUiXDfC9SJcP8INItwwwo0i3DjCTSLcNMLNItw8wi0i3DLCrSLcOsJtItw2wu0i3D7CHSLcMcKdItw5wl0i3DXC3SLcPcI9Itwzwr0i3DvCfSLcN8L9Itw/wgMiPDDCgyI8OMJDIjw0wsMiPDzCIyI8MsKjIjw6wmMiPDZCIzwuwuMjPCHCEyMcHeFJEZ4c4SkRnhrhaRGeHuEZEZ4Z4VkRnh3hORGeG+F5EZ4f4QURXhjhRRFeHOElEQ5GGEQYRhhFGEeYRJhGmEWYR1hEWEZYRVhH2ETYRthF2Ec4JsJLI7wswssjvCLCKyO8KsKrI7wmwmsjvC7C6yO8IcIbI7wpwpsjvCXCWyO8LcLbI7wjwjsjvCvCuyO8J8J7I7wvwvsjfCDCByN8KMKHI3wkwkcjfCzCxyN8IsInI3wqwqcjfCbCZyN8LsLnI3whwhcjfCnClyN8JcJXI3wtwtcjfCPCNyN8K8K3I3wnwncjfC/C9yP8IMIPI/wowo8j/CTCTyP8LMLPI/wiwi8j/CrCryP8JsJvI/wuwu8j/CHCHyP8KcKfI/wlwl8j/C3C3yP8I8I/I/wrwr8j/CfCfyMcG+FAjENiHCfGcWMcGuN4MY4f47AYh8c4QYwjYpwwxolinDhmyCQxThrjZDFOHuMUMU4Z41QxTh3jNDFOG+N0MU4f4wwxzhjjTDHOHOMsMY6McdYYZ4tx9hjniHHOGOeKce4Y54lx3hjni3H+GBeIccEYF4px4RgXiXHRGIlxsRgXj3GJGJeMcakYl45xmRiXjXG5GJePcYUYV4xxpRhXjnFUjKvEuGqMq8W4eoxrxLhmjGvFuHaM68S4bozrxbh+jBvEuGGMG8W4cYybxLhpjJvFuHmMW8S4ZYxbxbh1jNvEuG2M28W4fYw7xLhjjDvFuHOMu8S4a4y7xbh7jHvEuGeMe8W4d4z7xLhvjPvFuH+MB8R4YIwHxXhwjIfEeGiMh8V4eIxHxHhkjEfFeHSMx8R4bIzGeFyMx8d4Qownxjg6xpNiPDnGU2I8NcbTYjw9xjNiPDPGs2I8O8ZzYjw3xvNiPD/GC2K8MMaLYrw4xktiHIwxiDGMMYoxjjGJMY0xizGPsYixjLGKsY6xibGNsYuxj3FMjJfGeFmMl8d4RYxXxnhVjFfHeE2M18Z4XYzX/7eGXfHGGG+K8eYYb4nx1hhvi/H2GO+I8c4Y74rx7hjvifHeGO+L8f4YH4jxwRgfivHhGB+J8dEYH4vx8RifiPHJGJ+K8ekYn4nx2Rifi/H5GF+I8cUYX4rx5RhfifHVGF+L8fUY34jxzRjfivHtGN+J8d0Y34vx/Rg/iPHDGD+K8eMYP4nx0xg/i/HzGL+I8csYv4rx6xi/ifHbGL+L8fsYf4jxxxh/ivHnGH+J8dcYf4vx9xj/iPHPGP+K8e8Y/4nx3xjHxjiQ4JAEx0lw3ASHJjheguMnOCzB4QlOkOCIBCdMcKIEJ05wkgQnTXCyBCdPcIoEp0xwqgSnTnCaBKdNcLoEp09whgRnTHCmBGdOcJYERyY4a4KzJTh7gnMkOGeCcyU4d4LzJDhvgvMlOH+CCyS4YIILJbhwgoskuGiCJLhYgosnuESCSya4VIJLJ7hMgssmuFyCA0MHBlZIcMUEV0pw5QRHjRpwlQRXTXC1BFdPcI0E10xwrQTXTnCdBNdNcL0E109wgwQ3THCjBDdOcJMEN01ws4Qhmye4RYJbJrhVglsnuE2C2ya4XYLbJ7hDgjsmuFOCOye4SzL8/73p2j3BPRLcM8G9Etw7wX0S3DfB/RLcP8EDkjEjDkzwoAQPTvCQBA9N8LAED0/wiASPTPCoBI9O8JgEj03QBI9L8PgET0jwxARHJ3hSgicneEqCpyZ4WoKnJ3hGgmcmeFaCZyd4ToLnJnhegucneEGCFyZ4UYIXJ3hJgoMJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9gmOSfDSBC9L8PIEr0jwygSvSvDqBK9J8NoEr0vw+gRvSPDGBG9K8OYEb0nw1gRvS/D2BO9I8M4E70rw7gTvSfDeBO9L8P4EH0jwwQQfSvDhBB9J8NEEH0vw8QSfSPDJBJ9K8OkEn0nw2QSfS/D5BF9I8MUEX0rw5QRfSfDVBF9L8PUE30jwzQTfSvDtBN9J8N0E30vw/QQ/SPDDBD9K8OMEP0nw0wQ/S/DzBL9I8MsEv0rw6wS/SfDbBL9L8PsEf0jwxwR/SvDnBH9J8NcEf0vw9wT/SPDPBP9K8O8E/0nw3wTH/qeJFIekODzFcVMcmuJ4KY6f4rD/HZ8gxREpTpjiRClOnOIkKU6a4mQpTp7iFClOmeJUKU6d4jQpTpvidClOn+IMKc6Y4kwpzpziLCmOTHHWFGdLcfYU50hxzhTnSnHuFOdJcd4U50tx/hQXSHHBFBdKceEUF0lx0RRJcbEUF09xiRSXTHGpFJdOcZkUl01xuRSXT3GFFFdMcaUUV05xVIqrpLhqiquluHqKa6S4Zoprpbh2iuukuG6K66W4foobpLhhihuluHGKm6S4aYqbpbh5ilukuGWKW6W4dYrbpLhtituluH2KO6S4Y4o7pbhzirukuGuKu6W4e4p7pLhninuluHeK+6S4b4r7pbh/igekeGCKB6V4cIqHpHhoioeleHiKR6R4ZIpHpXh0isekeGyKpnhciseneEKKJ6Y4OsWTUjw5xVNSPDXF01I8PcUzUjwzxbNSPDvFc1I8N8XzUjw/xQtSvDDFi1K8OMVLUhxMMUgxTDFKMU4xSTFNMUsxT7FIsUyxSrFOsUmxTbFLsU9xTIqXpnhZipeneEWKV6Z4VYpXp3hNitemeF2K16d4Q4o3pnhTijeneEuKt6Z4W4q3p3hHinemeFeKd6d4T4r3pnhfiven+ECKD6b4UIoPp/hIio+m+FiKj6f4RIpPpvhUik+n+EyKz6b4XIrPp/hCii+m+FKKL6f4Soqvpvhaiq+n+EaKb6b4Vopvp/hOiu+m+F6K76f4QYofpvhRih+n+EmKn6b4WYqfp/hFil+m+FWKX6f4TYrfpvhdit+n+EOKP6b4U4o/p/hLir+m+FuKv6f4R4p/pvhXin+n+E+K/6Y4NsWBDIdkOE6G42Y4NMPxMhw/w2EZDs9wggxHZDhhhhNlOHGGk2Q4aYaTZTh5hlNkOGWGU2U4dYZzPjowMG2G02U4fYYzZDhjhjNlOHOGs2Q4MsNZM5wtw9kznOO/eRnOleHcGc6T4bwZzpfh/BkukOGCGS6U4cIZLpLhohmS4WIZLp7hEhkumeFSGS6d4TIZLpvhchkun+EKGa6Y4UoZrpzhqAxXyXDVDFfLcPUM18hwzQzXynDtDNfJcN0M18tw/Qw3yHDDDDfKcOMMN8lw0ww3y3DzDLfIcMsMt8pw6wy3yXDbDLfLcPsMd8hwxwx3ynDnDHfJcNcMd8tw9wz3yHDPDPfKcO8M98lw3wz3y3D/DA/I8MAMD8rw4AwPyfDQDA/L8PAMj8jwyAyPyvDoDI/J8NgMzfC4DI/P8IQMT8xwdIYnZXhyhqdkeGqGp2V4eoZnZHhmhmdleHaG52R4bobnZXh+hhdkeGGGF2V4cYaXZDiYYZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ/hmAwvzfCyDC/P8IoMr8zwqgyvzvCaDK/N8LoMr8/whgxvzPCmDG/O8JYMb83wtgxvz/CODO/M8K4M787wngzvzfC+DO/P8IEMH8zwoQwfzvCRDB/N8LEMH8/wiQyfzPCpDJ/O8JkMn83wuQyfz/CFDF/M8KUMX87wlQxfzfC1DF/P8I0M38zwrQzfzvCdDN/N8L0M38/wgww/zPCjDD/O8JMMP83wsww/z/CLDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwz/zPCvDP/O8J8M/81wbIYDOQ7JcZwcx81xaI7j5Th+jsNyHJ7jBDmOyHHCHCfKceIcJ8lx0hwny3HyHKfIccocp8px6hynyXHaHKfLcfocZ8hxxhxnynHmHGfJcWSOs+Y4W46z5zhHjnPmOFeOc+c4T47z5jhfjvPnuECOC+a4UI4L57hIjovmSI6L5bh4jkvkuGSOS+W4dI7L5LhsjsvluHyOK+S4Yo4r5bhyjqNyXCXHVXNcLcfVc1wjxzVzXCvHtXNcJ8d1c1wvx/Vz3CDHDXPcKMeNc9wkx01z3CzHzXPcYvB/7XyOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmaI7H5Xh8jifkeGKOo3M8KceTczwlx1NzPC3H03M8I8czczwrx7NzPCfHc3M8L8fzc7wgxwtzvCjHi3O8JMfBHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPscx+R4aY6X5Xh5jlfkeGWOV+V4dY7X5HhtjtfleH2ON+R4Y4435XhzjrfkeGuOt+V4e4535HhnjnfleHeO9+R4b4735Xh/jg/k+GCOD+X4cI6P5Phojo/l+HiOT+T4ZI5P5fh0js/k+GyOz+X4fI4v5Phiji/l+HKOr+T4ao6v5fh6jm/k+GaOb+X4do7v5Phuju/l+H6OH+T4YY4f5fhxjp/k+GmOn+X4eY5f5Phljl/l+HWO3+T4bY7f5fh9jj/k+GOOP+X4c46/5Phrjr/l+HuOf+T4Z45/5fh3jv/k+G+OY3McKHBIgeMUOG6BQwscr8DxCxxW4PACJyhwRIETFjhRgRMXOEmBkxY4WYGTFzhFgVMWOFWBUxc4TYHTFjhdgdMXOEOBMxY4U4EzFzhLgSMLnLXA2QqcvcA5CpyzwLkKnLvAeQqct8D5Cpy/wAUKXLDAhQpcuMBFCly0QApcrMDFC1yiwCULXKrApQtcpsBlC1yuwOULXKHAFQtcqcCVCxxV4CoFrlrgagWuXuAaBa5Z4FoFrl3gOgWuW+B6Ba5f4AYFbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeA+Be5b4H4F7l/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFHl3gMQUeW6AFHlfg8QWeUOCJBY4u8KQCTy7wlAJPLfC0Ak8v8IwCzyzwrALPLvCcAs8t8LwCzy/wggIvLPCiAi8u8JICBwsMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsCxxT4KUFXlbg5QVeUeCVBV5V4NUFXlPgtQVeV+D1Bd5Q4I0F3lTgzQXeUuCtBd5W4O0F3lHgnQXeVeDdBd5T4L0F3lfg/QU+UOCDBT5U4MMFPlLgowU+VuDjBT5R4JMFPlXg0wU+U+CzBT5X4PMFvlDgiwW+VODLBb5S4KsFvlbg6wW+UeCbBb5V4NtDBwb+09y7Bb5X4PsFflDghwV+VODHBX5S4KcFflbg5wV+UeCXBX5V4NcFflPgtwV+V+D3Bf5Q4I8F/lTgzwX+UuCvBf5W4O8F/lHgnwX+VeDfBf5T4L8Fji1woMQhJY5T4rglDi1xvBLHL3FYicPLkU5Q4ogSJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL4f9T21rxhJnKnHmEmcpcWSJs5Y4W4mzlzhHiXOWOFeJc5c4T4nzljhfifOXuECJC5a4UIkLl7hIiYuWSImLlbh4iUuUuGSJS5W4dInLlLhsicuVuHyJK5S4YokrlbhyiaNKXKXEVUtcrcTVS1yjxDVLXKvEtUtcp8R1S1yvxPVL3KDEDUvcqMSNS9ykxE1L3KzEzUvcosQtS9yqxK1L3KbEbUvcrsTtS9yhxB1L3KnEnUvcpcRdS9ytxN1L3KPEPUvcq8S9S9ynxH1L3K/E/Us8oMQDSzyoxINLPKTEQ0v+HTt2rIeXeESJR5Z4VIlHl3hMiceWaInHlXh8iSeUeGKJo0s8qcSTSzylxFNLPK3E00s8o8QzSzyrxLNLPKfEc0s8r8TzS7ygxAtLvKjEi0u8pMTBEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsSx5R4aYmXlXh5iVeUeOV4AwP/sXp1ideUeG2J15V4fYk3lHhjiTeVeHOJt5R4a4m3lXh7iXeUeGeJd5V4d4n3lHhvifeVeH+JD5T4YIkPlfhwiY+U+GiJj5X4eIlPlPhkiU+V+HSJz5T4bInPlfh8iS+U+GKJL5X4comvlPhqia+V+HqJb5T4Zolvlfh2ie+U+G6J75X4fokflPhhiR+V+HGJn5T4aYmflfh5iV+U+GWJX5X4dYnflPhtid+V+H2JP5T4Y4k/lfhzib+U+GuJv5X4e4l/lPhniX+V+HeJ/5T4b4ljSxyocEiF41Q4boVDKxyvwvErHFbh8AonqHBEhRNWOFGFE1c4SYWTVjhZhZNXOEWFU1Y4VYVTVzhNhdNWOF2FAwMDo/+zwzNWOFOFM1c4S4UjK5y1wtkqnL3COSqcs8K5Kpy7wnkqnLfC+Sqcvxry/2rkC1W4cIWLVLhohVS4WIWLV7hEhUtWuFSFS1e4TIXLVrhchctXuEKFK1a4UoUrVziqwlUqXLXC1SpcvcI1KlyzwrUqXLvCdSpct8L1Kly/wg0q3LDCjSrcuMJNKty0ws0q3LzCLSrcssKtKty6wm0q3LbC7SrcvsIdKtyxwp0q3LnCXSrctcLdKty9wj0q3LPCvSrcu8J9Kty3wv0q3L/CAyo8sMKDKjy4wkMqPLTCwyo8vMIjKjyywqMqPLrCYyo8tkIrPK7C4ys8ocITKxxd4UkVnlzhKdX//w/16RWeUeGZFZ5V4dkVnlPhuRWeV+H5FV5Q4YUVXlThxRVeUuFghUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2FYyq8tMLLKry8wisqvLLCqyq8usJrKry2wusqvL7CGyq8scKbKry5wlsqvLXC2yq8vcI7KryzwrsqvLvCeyq8t8L7Kry/wgcqfLDChyp8uMJHKny0wscqfLzCJyp8ssKnKny6wmcqfLbC5yp8vsIXKnyxwpcqfLnCVyp8tcLXKny9wjcqfLPCtyp8u8J3Kny3wvcqfL/CDyr8sMKPKvy4wk8q/LTCzyr8vMIvKvyywq8q/LrCbyr8tsLvKsaOHRjwhwp/rPCnCn+u8JcKf63wtwp/r/CPCv+s8K8K/67wnwr/rXDsf9qscUiN49Q4bo1DaxyvxvFrHFbj8BonqHFEjRPWOFGNE9c4SY2T1jhZjZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNI2uctcbZapy9xjlqnLPGuWqcu8Z5apy3xvlqnL/GBWpcsMaFaly4xkVqXLRGalysxsVrXKLGJWtcqsala1ymxmVrXK7G5WtcocYVa1ypxpVrHFXjKjWuWuNqNa5e4xo1rlnjWjWuXeM6Na5b43o1rl/jBjVuWONGNW5c4yY1blrjZjVuXuMWNW5Z41Y1bl3jNjVuW+N2NW5f4w417ljjTjXuXOMuNe5a42417l7jHjXuWeNeNe5d4z417lvjfjXuX+MBNR5Y40E1HlzjITUeWuNhNR5e4xE1HlnjUTUeXeMxNR5bozUeV+PxNZ5Q44k1jq7xpBpPrvGUGk+t8bQaT6/xjBrPrPGsGs+u8Zwaz63xvBrPr/GCGi+s8aIaL67xkhoHawxqDGuMaoxrTGpMa8xqzGssaixrrGqsa2xqbGvsauxrHFPjpTVeVuPlNV5R45U1XlXj1TVeU+O1NV5X4/U13lDjjTXeVOPNNd5S46013lbj7TXeUeOdNd5V49013lPjvTXeV+P9NT5Q44M1PlTjwzU+UuOjNT5W4+M1PlHjkzU+VfP6/+2xfLbG52p8vsYXanyxxpdqfLnGV2p8tcbXany9xjdqfLPGt2p8u8Z3any3xvdqfL/GD2r8sMaPavy4xk9q/LTGz2r8vMYvavyyxq9q/LrGb2r8tsbvavy+xh9q/LHGn2r8ucZfavy1xt9q/L3GP2r8s8a/avy7xn9q/LfGsTUONDikwXEaHLfBoQ2O1+D4DQ5rcHiDEzQ4osEJG5yowYkbnKTBSRucrMHJG5yiwSkbnKrBqRucpsFpG5yuwekbnKHBGRucqcGZG5ylwZENztrgbA3O3uAcDc7Z4FwNzt3gPA3O2+B8Dc7f4AINLtjgQg0u3OAiDS7aIA0u1uDiDS7R4JINLtXg0g0u0+CyDS7X4PINrtDgig2u1ODKDY5qcJUGV21wtQZXb3CNBtdscK0G125wnQbXbXC9BtdvcIMGN2xwowY3bnCTBjdtcLOG4f+xsUWDWza4VYNbN7hNg9s2uF2D2ze4Q4M7NrhTgzs3uEuDuza4W4O7N7hHg3s2uFeDeze4T4P7Nrhfg/s3eECDBzZ4UIMHN3hIg4c2eFiDhzd4RINHNnhUg0c3eEyDxzZog8c1eHyDJzR4YoOjGzypwZMbPKXBUxs8rcHTGzyjwTMbPKvBsxs8p8FzGzyvwfMbvKDBCxu8qMGLG7ykwcEGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wbHNHhpg5c1eHmDVzR4ZYNXNXh1g9c0eG2D1zV4fYM3NHhjgzc1eHODtzR4a4O3NXh7g3c0eGeDdzV4d4P3NHhvg/c1eH+DDzT4YIMPNfhwg480+GiDjzX4eINPNPhkg081+HSDzzT4bPNfGhjyP17phQZfbPClBl9u8JUGX23wtQZfb/CNBt9s8K0G327wnQbfbfC9Bt9v8IMGP2zwowY/bvCTBj9t8LMGP2/wiwa/bPCrBr9u8JsGv23wuwa/b/CHBn9s8KcGf27wlwZ/bfC3Bn9v8I8G/2zwrwb/bvCfBv9tcGyDAy0OaXGcFsdtcWiL47U4fovDWhze4gQtjmhxwhYnanHiFidpcdIWJ2tx8hanaHHKFqdqceoWr5kEp21xuhanb3GGFmdscaYWZ25xlhZHtjhri7O1OHuLc7Q4Z4tztTh3i/O0OG+L87U4f4sLtLhgiwu1uHCLi7S4aIu0uFiLi7e4RItLtrhUi0u3uEyLy7a4XIvLt7hCiyu2uFKLK7c4qsVVWly1xdVaXL3FNVpcs8W1Wly7Zdg6La7b4notrt/iBi1u2OJGLW7c4iYtbtriZi1u3uIWLW7Z4lYtbt3iNi1u2+J2A6N2/C/WO7S4Y4s7tbhzi7u0uGuLu7W4e4t7tLhni3u1uHeL+7S4b4v7tbh/iwe0eGCLB7V4cIuHtHhoi4e1eHiLR7R4ZItHtXh0i8e0eGyLtnhci8e3eEKLJ7Y4usWTWjy5xVNaPLXF01o8vcUzWjyzxbNaPLvFc1o8t8XzWjy/xQtavLDFi1q8uMVLWhxsMWgxbDFqMW4xaTFtMWsxb7FosWyxarFusWmxbbFrsW9xTDvSS1u8rMXLW7yixStbvKrFq/9jq8VrW7yuxetbvKHFG1u8qcWbW7ylxVtbvK3F21u8o8U7W7yrxbtbvKfFe1u8r8X7W3ygxQdbfKjFh1t8pMVHW3ysxcdbfKLFJ1t8qsWnW3ymxWdbfK7F51t8ocUXW3ypHf9/8sErLb7a4mstvt7iGy2+2eJbLb7d4jstvtviey2+3+IHLX7Y4kctftziJy1+2uJnLX7e4hctftniVy1+3eI3LX7b4nctft/iDy3+2OJPLf7c4i8t/triby3+3uIfLf7Z4l8t/t3iPy3+2+LYFgc6HNLhOB2O2+HQDsfrcPwOh3U4vMMJOhzR4YQdTtThxB1O0uGkHU7W4eQdTtHhlB1O1eHUHU7T4bQdTtfh9B3O0OGMHc7U4cwdztLhyA5n7XC2DmfvcI4O5+xwrg7n7nCeDuftcL4O5+9wgQ4X7HChDhfucJEOF+2QDhfrcPEOl+hwyQ6X6nDpDpfpcNkOl+tw+Q5X6HDFDlfqcOUOR3W4Soerdrhah6t3uEaHa3a4Vodrd7hOh+t2uF6H63e4QYcbdrhRhxt3uEmHm3a4WYebd7hFh1t2uFWHW3e4TYfbdrhdh9t3uEOHO3a4U4c7d7hLh7t2uFuHu3e4R4d7drhXh3t3uE+H+3a4X4f7d3hAhwd2eFCHB3d4SIeHdnhYh4d3eESHR3Z4VIdHd3hMh8d2aIfHdXh8hyd0eGKHozs8qcOTOzylw1M7PK3D0zs8o8MzOzyrw7M7PKfDczs8r8PzO7ygwws7vKjDizu8pMPBDoMOww6jDuMOkw7TDrMO8w6LDssOqw7rDpsO2w67DvsOx3R4aYeXdXh5h1d0eGWHV3V4dYfXdHhth9d1eH2HN3R4Y4c3dXhzh7d0eGuHt3V4e4d3dHhnh3d1eHeH93R4b4f3dXh/hw90+GCHD3X4cIePdPhoh491+HiHT3T4ZIdPdfh0h890+GyHz3X4fIcvdPhihy91+HKHr3T4aoevdfh6h290+GaHb3X4dofvdPhuh+91+H6HH3T4YYcfdfhxh590+GmHn3X4eYdfdPhlh191+HWH33T4bYffdfh9hz90+GOHP3X4c4e/dPhrh791+HuHf3T4Z4d/dfh3h/90+G+HYzsc6HFIj+P0OG6PQ3scr8fxexzW4/AeJ+hxRI8T9jhRjxP3OEmPk/Y4WY+T9zhFj1P2OFWPU/c4TY/T9jhdj9P3OEOPM/Y4U48z9zhLjyN7nLXH2Xqcvcc5epyzx7l6nLvHeXqct8f5epy/xwV6XLDHhXpcuMdFely0R3pcrMfFe1yixyV7XKrHpXtcpsdle1yux+V7XKHHFXtcqceVexzV4yo9rtrjaj2u3uMaPa7Z41o9rt3jOj2u2+N6Pa4/emDgv5ht2ONGPW7c4yY9btrjZj1u3uMWPW7Z41Y9bt3jNj1u2+N2PW7f4w497tjjTj3u3OMuPe7a42497t7jHj3u2eNePe7d4z497tvjfj3u3+MBPR7Y40E9HtzjIT0e2uNhPR7e4xE9HtnjUT0e3eMxPR7boz0e1+PxPZ7Q44k9ju7xpB5P7vGUHk/t8bQeT+/xjB7P7PGsHs/u8Zwez+3xvB7P7/GCHi/s8aIeL+7xkh4Hewx6DHuMeox7THpMe8x6zHsseix7rHqse2x6bHvseux7HNPjpT1e1uPlPV7R45U9XtXj1T1e0+O1PV7X4/U93tDjjT3e1OPNPd7S46093tbj7T3e0eOdPd7V49093tPjvT3e1+P9PT7Q44NDBgb+i8XDPT7S46M9Ptbj4z0+0eOTPT7V49M9PtPjsz0+1+PzPb7Q44s9vtTjyz2+0uOrPb7W4+s9vtHjmz2+1ePbPb7T47s9vtfj+z1+0OOHPX7U48c9ftLjpz1+1uPnPX7R45c9ftXj1z1+0+O3PX7X4/c9/tDjjz3+1OPPPf7S4689/tbj7z3+0eOfPf7V4989/tPjvz2O7XFgDA4Zg+OMwXHH4NAxON4YHH8MDhuDw8fgBGNwxBj+P6LOMYiTZPnas7O2jZm18ay9s7Zt28aztm2rbfzWtm3btueNuXfv+//U0R1dERmn8mRlZVSddPwAJwhwwgAnCnDiACcJcNIAJwtw8gCnCHDKAKcKcOoApwlw2gCnC3D6AGcIcMYAZwpwWIDDA5w5wFkCnDXA2QKcPcA5ApwzwLkCnDvAeQKcN+D3f5WQXSDABQNcKEACXDjARQJcNMDFAlw8wCUCXDLApQJcOsBlAlw2wOUCXD7AFQIcEeCKAa4U4MoBrhLgqgGuFuDqAa4R4JoBrhXg2gGuE+C6Aa4X4PoBbhDghgFuFODGAW4S4KYBbhbg5gFuEeCWAW4V4NYBbhPgtgFuF+D2Ae4Q4I4B7hTgzgHuEuCuAe4W4O4B7hHgngHuFeDeAe4T4L4B7hfg/gEeEOCBAR4U4MEBHhLgoQEeFuDhAR4R4JEBHhWgAR4d4DEBHhvgcQEeH+AJAZ4Y4EkBnhzgKQGeGuBpAZ4e4BkBnhngWQGeHeA5AZ4b4HkBnh/gBQFeGOBFAV4c4CUBXhrgZQFeHuAVAV4Z4FUBXh3gNQFeG+B1AV4f4A0B3hjgTQHeHGAQYBhgFGAcYBJgGmAWYB5gEWAZYBVgHWATYBtgF2Af4CDAWwK8NcDbArw9wDsCvDPAuwK8O8B7Arw3wPsCvD/ABwJ8MMCHAnw4wEcCfDTAxwJ8PMAnAnwywKcCfDrAZwJ8NsDnAnw+wBcCfDHAlwJ8OcBXAnw1wNcCfD3ANwJ8M8C3Anw7wHcCfDfA9wJ8P8APAvwwwI8C/DjATwL8NMDPAvw8wC8C/DLAr/7l4zcBfhvgdwF+H+APAf4Y4E8B/hzgLwH+GuBvAf4e4B8B/hngXwH+HeA/AY4McEiIo4U4NMTRQxwjxDFDHCvEsUMcJ8RxQxwvxPFDnCDECUOcKMSJQ5wkxElDnCzEyUOcIsQpQ5wqxKlDnCbEaUOcLsTpQ5whxBlDnCnEYSEOD3HmEGcJcdYQZwtx9hDnCHHOEOcKce4Q5wlx3hDnC3H+EBcIccEQFwqREBcOcZEQFw1xsRAXD3GJEJcMcakQlw5xmRCXDXG5EJcPcYUQR4S4YogrhbhyiKuEuGqIq4W4eohrhLhmiGuFuHaI64S4bojrhbh+iBuEuGGIG4W4cYibhLhpiJuFuHmIW4S4ZYhbhbh1iNuEuG2I24W4fYg7hLhjiDuFuHOIu4S4a4i7hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFaIhHh3hMiMeGeFyIx4d4QognhnhSiCeHeEqIp4Z4Woinh3hGiGeGeFaIZ4d4TojnhnheiOeHeEGIF4Z4UYgXh3hJiJeGeFmIl4d4RYhXhnhViFeHeE2I14Z4XYjXh3hDiDeGeFOIN4cYhBiGGIUYh5iEmIaYhZiHWIRYhliFWIfYhNiG2IXYhzgI8ZYQbw3xthBvD/GOEO8M8a4Q7w7xnhDvDfG+EO8P8YEQHwzxoRAfDvGREB8N8bEQHw/xiRCfDPGpEJ8O8ZkQnw3xuRCfD/GFEF8M8aUQXw7xlRBfDfG1EF8P8Y0Q3wzxrRDfDvGdEN8N8b0Q3w/xgxA/DPGjED8O8ZMQPw3xsxA/D/GLEL8M8asQvw7xmxC/DfG7EL8P8YcQfwzxpxB/DvGXEH8N8bcQfw/xjxD/DPGvEP8O8Z8QR4Y4JMLRIhwa4egRjhHhmBGOFeHYEY4T4bgRjhfh+BFOEOGEEU4U4cQRThLhpBFOFuHkEU4R4ZQRThXh1BFOE+G0EU4X4fQRzhDhjBHOFOGwCIdHOHOEs0Q4a4SzRTh7hHNEOGeEc0U4d4TzRDhvhPNFOH+EC0S4YIQLRUiEC0e4SISLRrhYhItHuESES0a4VIRLR7hMhMtGuFyEy0e4QoQjIlwxwpUiXDnCVSJcNcLVIlw9wjUiXDPCtSJcO8J1Ilw3wvUiXD/CDSLcMMKNItw4wk0i3DTCzSLcPMItItwywq0i3DrCbSLcNsLtItw+wh0i3DHCnSLcOcJdItw1wt0i3D3CPSLcM8K9Itw7wn0i3DfC/SLcP8IDIjwwwoMiPDjCQyI8NMLDIjw8wiMiPDLCoyI0wqMjPCbCYyM8LsLjIzwhwhMjPCnCkyM8JcJTIzwtwtMjPCPCMyM8K8KzIzwnwnMjPC/C8yO8IMILI7wowosjvCTCSyO8LMLLI7wiwisjvCrCqyO8JsJrI7wuwusjvCHCGyO8KcKbIwwiDCOMIowjTCJMI8wizCMsIiwjrCKsI2wibCPsIuwjHER4S4S3RnhbhLdHeEeEd0Z4V4R3R3hPhPdGeF+E90f4QIQPRvhQhA9H+EiEj0b4WISPR/hEhE9G+FSET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBNPS//b8j/DjCTyL8NMLPIvw8wi8i/DLCryL8OsJvIvw2wu8i/D7CHyL8McKfIvw5wl8i/DXC3yL8PcI/Ivwzwr8i/DvCfyIcGeGQGEeLcWiMo8c4RoxjxjhWjGPHOE6M48Y4XozjxzhBjBPGOFGME8c4SYyTxjhZjJPHOEWMU8Y4VYxTxzhNjNPGOF2M08c4Q4wzxjhTjMNiHB7jzDHOEuOsMc4W4+wxzhHjnDHOFePcMc4T47wxzhfjyH+7fi8Y40IxEuPCMS4S46IxLhbj4jEuEeOSMS4V49IxLhPjsjEuF+PyMa4Q44gYV4xxpRhXjnGVGFeNcbUYV49xjRjXjHGtGNeOcZ0Y141xvRjXj3GDGDeMcaMYN45xkxg3jXGzGDePcYsYh/yrxbt1jNvEuG2M28W4fYw7xLhjjDvFuHOMu8S4a4y7xbh7jHvEHL9njHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIfFeHiMR8R4ZIxHxWiMR8d4TIzHxnhcjMfHeEKMJ8Z4Uownx3hKjKfGeFqMp8d4RoxnxnhWjGfHeE6M58Z4Xoznx3hBjBfGeFGMF8d4SYyXxnhZjJfHeEWMV8Z4VYxXx3hNjNfGeF2M18d4Q4w3xnhTjDfHGMQYxhjFGMeYxJjGmMWYj6JJjGWMVYx1jE3M2KO+dTH2MQ5ivCXGW2O8LcbbY7wjxjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2N8KMaHY3wkxkdjfCzGx2N8IsYnY3wqxqdjfCbGZ2N8LsbnY3whxhdjfCnGl2N8JcZXY3xtCL4e4xsxvhnjWzG+HeM7Mb4b43sxvh/jBzF+GONHMX4c4ycxfhrjZzF+HuMXMX4Z41cxfh3jNzF+G+N3MX4f4w8x/hjjTzH+HOMvMf4a428x/h7jHzH+GeNfMf4d4z+jeDTKNxMcLcGhCY6e4BgJjpngWAmOneA4CY6b4HgJjp/gBAlOmOBECU6c4CQJTprgZAlOnuAUo8b+e0hi6gSnSXDaBKdLcPoEZ0hwxgRnSnBYgsMTnDnBWRKcNcHZEpw9wTkSnDPBuRKcO8F5Epw3wfkSnD/BBRJcMMGFEiTBhRNcJMFFE1wswcUTXCLBJRNcKsGlE1wmwWUTXC7B5RNcIcERCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f8L+L/+6U4M4J7pLgrgnuluDuCe6R4J4J7pXg3gnuk+C+Ce6X4P4JHpDggQkelODBCR6S4KEJHpbg4QkekeCRCR6VoAkeneAx/2J6XILHJ3hCgicmeFKCJyd4SoKnJnhagqcneEaCZyZ4VoJnJ3hOgucmeF6C5yd4QYIXJnhRghcneEmClyZ4WYKXJ3hFglcmeFWCVyd4TYLXJnhdgtcneEOCNyZ4U4I3JxgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgnOEjwlgRvTfC2BG9P8I4E70zwrgTvTvCeBO9N8L4E70/wgQQfTPCh5L89LR9J8NEEH0vw8QSfSPDJBJ9K8OkEn0nw2QSfS/D5BF9I8MUEX0rw5QRfSfDVBF9L8PUE30jwzQTfSvDtBN9J8N0E30vw/QQ/SPDDBD9K8OMEP0nw0wQ/S/DzBL9I8MsEv0rw6wS/SfDbBL9L8PsEf0jwxwR/SvDnBH9J8NcEf0vw9wT/SPDPBP9K8O8E/0lwZIJDUhwtxaEpjp7iGCmOmeJYKY6d4jgpjpvieCmOn+IEKU6Y4kQpTpziJClOmuJkKU6e4hQpTpniVClOneI0KU6b4nQpTp/iDCnOmOJMKQ5LcXiKM6c4S4qzpjhbirOnOEeKc6Y4V4pzpzhPivOmOF+K86e4QIoLprhQiqS4cIqLpLhoiouluHiKS6S4ZIpLpbh0isukuGyKy6W4fIorpDgixRVTXCnFlVNcJcVVU1wtxdVTXCPFNVNcK2WctVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCpFUzw6xWNSPDbF41I8PsUTUjwxxZNSPDnFU1I8NcXTUkaFcs9I8cwUz0rx7BTPSfHcFM9L8fwUL0jxwhQvSvHiFC9J8dIUL0vx8hSvSPHKFK9K8eoUr0nx2hSvS/H6FG9I8cYUb0rx5hSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FAcp3pLirSneluLtKd6R4p0p3pXi3Snek+K9Kd6X4v0pPpDigyk+lOLDKT6S4qMpPpbi4yk+kf468skUn0rx6RSfSfHZFJ9L8fkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cOUcf+3HnyS4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4sgUh2Q4WoZDMxw9wzEyHDPDsTIcO8NxMhw3w/EyHD/DCTKcMMOJMpw4w0kynDTDyTKcPMMpMpwyw6kynDrDaTKcNsPpMpw+wxkynDHDmTIcluHwDGfOcJYMZ81wtgxnz3CODOfMcK4M585wngznzXC+DOfPcIH/XQfIkAwXznCRof99XyzDxTNcIsMlM1wqw6UzXCbDZTNcLsPlM1whwxEZrpjhShmunOEqGa6a4WoZrp7hGhmumeFaGa6d4ToZrpvhehmun+EGGW6Y4UYZbpzhJhlumuFmGW6e4RYZbpnhVhluneE2GW6b4XYZbp/hDhnumOFOGe6c4S4Z7prhbhnunuEeGe6Z4V4Z7p3hPhnum+F+Ge6f4QEZHpjhQRkenOEhGR6a4WEZHp7hERkemeFRGZrh0Rkek+GxGR6X4fEZnpDhiRmelOHJGZ6S4akZnpbh6RmekeGZGZ6V4dkZnpPhuRmel+H5GV6Q4YUZXpThxRlekuGlGV6W4eUZXpHhlRleleHVGV6T4bUZXpfh9RnekOGNGd6U4ZB/M6IwwyjDOMMkwzTDLMM8wyLDMsMqwzrDJsM2wy7DPsNBhrdkeGuGt2V4e4Z3ZHhnhndleHeG92R4b4b3ZXh/hg9k+GCGD2X4cIaPZPhoho9l+HiGT2T4ZIZPZfh0hs9k+GyGz42y+T18IcMXM3wpw5czfCXDVzN8LcPXM3wjwzczfCvDtzN8J8N3M3wvw/cz/GAIfpjhRxl+nOEnGX6a4WcZfp7hFxl+meFXGX6d4TcZfpvhdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/GY4cZXuOo+U4NMfRcxwjxzFzHCvHsXMcJ8dxcxwvx/FznCDHCXOcKMeJc5wkx0lznCzHyXOcIscpc5wqx6lznCbHaXOcLsfpc5whxxlznCnHYTkOz3HmHGfJcdYcZ8tx9hznyHHOHOfKce4c58n/bx89f44L5LhgjgvlSI4L57hIjovmuFiOi+e4RI5L5rhUjkvnuEyOy+a4XI7L57hCjiNyXDHHlXJcOcdVclw1x9VyXD3HNXJcM8e1clw7x3VyXDfH9XJcP8cNctwwx41y3DjHTXLcNMfNctw8Z/RRsXzLHLfKcesct8lx2xy3y3H7HHfIccccd8px53/x3jXH3XLcPcc9hg9xzxz3ynHvHPfJcd8c98tx/xwPyPHAHA/K8eAcD8nx0BwPy/HwHI/I8cgcj8rRHI/O8Zgcj83xuByPz/GEHE/M8aQcT87xlBxPzfG0HE/P8Ywcz8zxrBzPzvGcHM/N8bwcz8/xghwvzPGiHC/O8ZIcL83xshwvz/GKHK/M8aocr87xmhyvzfG6HK/P8YYcb8zxphxvzjHIMcwxyjHOMckxzTHLMc+xyLHMscrHGlLn2OTY5tjl2Oc4yPGWHG/N8bYx8PYc78jxzhzvyvHuHO/J8d4c78vx/hwfyPHBHB/K8eEcH8nx0Rwfy/HxHJ/I8ckcn8rx6RyfyfHZHJ/L8fkcX8jxxRxfyvHlHF/J8dUcX8vx9RzfyPHNHN/K8e0c38nx3Rzfy/H9HD/I8cMcP8rx4xw/yfHTHD/L8fMcv8jxyxy/yvHrHL8ZNXdD8Lscv8/xhxx/zPGnHH/O8Zccf83xtxx/z/GPHP/M8a8c/87xnxxHjuJUgaMVOLTA0Qsco8AxCxyrwLELHKfAcQscr8DxC5ygwAkLnKjAiQv8p8BJC5yswMkLnKLAKQucqsCpC5ymwGkLnK7A6QucocAZC5ypwGEFDi9w5gJnKXDWAmcrcPYC5yhwzgLnKnDuAucpcN4C5ytw/gIXKHDBAhcqkAIXLnCRAhctcLECFy9wiQKXLHCpApcucJkCly1wuQKXL3CFAkcUuGKBKxW4coGrFLhqgasVuHqBaxS4ZoFrFbh2gesUuG6B6xW4foEbFLhhgRsVuHGBmxS4aYGbFbh5gVsUuGWBWxW4dYHbFLhtgdsVuH2BOxS4Y4E7FbhzgbsUuGuBuxW4e4F7FLhngXsVuHeB+xS4b4H7Fbh/gQcUeGCBBxV4cIGHFHhogYcVeHiBRxR4ZIFHFWiBRxd4TIHHFnhcgccXeEKBJxZ4UoEnF3hKgacWeFqBpxd4RoFnFnhWgWcXeE6B5xZ4XoHnF3hBgRcWeFGBFxd4SYGXFnhZgZcXeEWBVxZ4VYFXF3hNgdcWeF2B1xd4Q4E3FnhTgTcXGBQYFhgVGBeYFJgW/8mNzQssCiwLrAqsC2yKif5TO+8K7AscFHhLgbcWeFuBtxd4R4F3FnhXgXcXeE+B9xZ4X4H3F/hAgQ8W+FCBDxf4SIGPFvhYgY8X+ESBTxb4VIFPF/hMgc8W+FyBz4/Ccgi+WOBLBb5c4CsFvlrgawW+XuAbBb5Z4FsFvl3gOwW+W+B7Bb5f4AcFfljgRwV+XOAnBX5a4GcFfl7gFwV+WeBXBX5d4DcFflvgdwV+X+APBf5Y4E8F/lzgLwX+WuBvBf5e4B8F/lngXwX+/S9vRxY4pMTRShxa4ugljlHimCWOVeLYJY5T4rgljlfi+CVOUOKEJU5U4sQlTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOKwEoeXOHOJs5Q4a4mzlTh7iXOUOGeJc5U4d4nzlDhvifOVOH+JC5S4YIkLlUiJC5e4SImLlrhYiYuXuESJS5a4VIlLl7hMicuWuFyJy5e4QokjSlyxxJVKXLnEVUpctcTVSly9xDVKXLPEtUpcu8R1Sly3xPVKXL/EDUrcsMSNSty4xE1K3LTEzUrcvMQtStyyxK1K3LrEbUrctsTtSty+xB1K3LHEnUrcucRdSty1xN1K3L3EPUrcs8S9Sty7xH1K3LfE/Urcv8QDSjywxINKPLjEQ0o8tMTDSjy8xCNKPLLEo0q0xKNLPKbEY0s8rsTjSzyhxBNLPKnEk0s8pcRTSzytxNNLPKPEM0s8q8SzSzynxHNLPK/E80u8oMQLS7yoxItLvKTES0u8rMTLS7yixCtLvKrEq0u8psRrS7yuxOtLvKHEG0u8qcSbSwxKDEuMSoxLTEpMS8xKzEssSixLrEqsS2xKbEvsSnx5fhyUeEuJt5Z4W4m3l3hHiXeWeFeJd5d4T4n3lnhfifeX+ECJD5b4UIkPl/hIiY+W+FiJj5f4RIlPlvhUiU+X+EyJz5b4XInPl/hCiS+W+NIoG0p8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixC9L/KrEr0v8psRvS/yuxO9L/KHEH0v8qcSfS/ylxF9L/K3E30v8o8Q/S/yrxL9L/KfEkSUOqXC0kWMPGfUcvcIxKhyzwrEqHLvCcSoct8LxKhy/wgkqnLDCiSqcuMJJKpy0wskqnLzCKSqcssKpKpy6wmkqnLbC6SqcvsIZKpyxwpkqHFbh8ApnrnCWCmetcLYKZ69wjgrnrHCuCueucJ4K561wvgrnr3CBChescKEKqXDhChepcNEKF6tw8QqXqHDJCpeqcOkKl6lw2QqXq3D5CleocESFK1a4UoUrV7hKhatWuFqFq1e4RoVrVrhWhWtXuE6F61a4XoXrV7hBhRtWuFGFG1e4SYWbVrhZhZtXuEWFW1a41Sic/y1ZbFvhdhVuX+EOFe5Y4U4V7lzhLhXuWuFuFe5e4R4V7lnhXhXuXeE+Fe5b4X4V7l/hARUeWOFBFR5c4SEVHlrhYRUeXuERFR5Z4VEVWuHRFR5T4bEVHlfh8RWeUOGJFZ5U4ckVnlLhqRWeVuHpFZ5R4ZkVnlXh2RWeU+G5FZ5X4fkVXlDhhRVeVOHFFV5S4aUVXlbh5RVeUeGVFV5V4dUVXlPhtRVeV+H1Fd5Q4Y0V3lThzRUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2FQ4qvKXCWyu8rcLbK7yjwjsrvKvCuyu8p8J7K7yvwvsrfKDCByt8qMKHK3ykwkcrfKzCxyt8osInK3yqwqcrfKbCZyt8rsLnK3yhwhcrfKnClyt8pcJXK3ytwtcrfKPCNyt8q8K3K3ynwncrfK/C9yv8oMIPK/yowo8r/KTCTyv8bOTI/zpNhV9W+FWFX1f4TYXfVvhdhd9X+EOFP1b4U4U/V/hLhb9W+FuFv1f4R4V/VvhXhX9X+E+FIyscUuNoNQ6tcfQax6hxzBrHqnHsGsepcdwax6tx/BonqHHCGieqceKaIZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOGONM9U4rMbhNc5c4yw1zlrjbDXOXuMcNc5Z41w1zl3jPDXOW+N8Nc5f4wI1LljjQjVS48I1LlLjojUuVuPiNS5R45I1LlXj0jUuU+OyNS5X4/I1rlDjiBpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agarfHoGo+p8dj6vznrqLk/ocYTazypxpNrPKXGU2s8rcbTazyjxjNrPKvGs2s8p2bYKL85r8bza7ygxgtrvKjGi2u8pMZLa7ysxstrvKLGK2u8qsara7ymxmtrvK7G62u8ocYba7ypxptrDGoMa4xqjGtMakxrzGrMayxqLGusaqxrbGpsa+xq7Gsc1HhLjbfWeFuNt9d4R4131nhXjXfXeE+N99Z4X4331/hAjQ/W+FCND9f4SI2P1vhYjY/X+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb8P/XfhqfGvGv+u8Z8aR9Y4pMHRGhza4OgNjtHgmA2O1eDYDY7T4LgNjtfg+A1O0OCEDU7U4MQNTtLgpA1O1uDkDU7R4JQNTtXg1A1O0+C0DU7X4PQNztDgjA3O1OCwBoc3OHODszQ4a4OzNTh7g3M0OGeDczU4d4PzNDhvg/M1OH+DCzS4YIMLNUiDCze4SIOLNrhYg4s3uESDSza4VINLN7hMg8s2uFyDyze4QoMjGlyxwZUaXLnBVRpctcHVGly9wTUaXLPBtRpcu8F1Gly3wfUaXL/BDRrcsMGNGty4wU0a3LTBzRrcvMEtGtyywa0a3LrBbRr8Z+TIkds1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNWiDR485xGMaPLbB4xo8vsETGjyxwZMaPLnBUxo8tcHTGjy9wTMaPLPBsxo8u8FzGjy3wfMaPL/BCxq8sMGLGry4wUsavLTByxq8vBnj/2sKXdXg1Q1e0+C1DV7X4PUN3tDgjQ3e9L9fm//WTaMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wYHDd7S4K0N3tbg7Q3e0eCdDf9jgvc0eG+D9zV4f4MPNPhggw81+HCDjzT4aIOPNfh4g080+GSDTzX4dIPPNPhsg881+HyDLzT4YoMvNfhyg680+GqDrzX4eoNvNPhmg281+HaD7zT4boPvNfh+gx80+GEz5sSjcPq4wU8a/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/Gvx7lA82OLLBIS2O1uLQFkdvcYwWx2xxrBbHbnGcFsdtcbwWx29xghYnbHGiFiducZIWJ21xshYnb3GKFqdscaoWp25xmhanbXG6FqdvcYYWZ2xxphaHtTi8xZlbnKXFWVucrcXZW5yjxTlbnKvFuVucp8V5W5yvxflbXKDFBVtcqEVaXLjFRVpctMXFWly8xSVaXLLFpVpcusVlWly2xeVaXL7FFVoc0eKKLa7U4sotrtLiqi2u1uLqLa7R4potrtXi2i2u0+K6La7X/kfXbMgGLW7Y4kYtbtziJi1u2uJmLW7e4hYtbtniVi1u3eI2LW7b4nYtbt/iDi3u2OJOLe7c4i4t7tribi3u3uIeLe7Z4l4t7t3iPi3u2+J+Le7f4gEtHtjiQS0e3OIhLR7a4mEtHt7iES0e2eJRLdri0S0e0+KxLR7X4vEtntDiiS2e1OLJLZ7S4qktntbi6S2e0eKZLZ7V4tktntPiuS2e1+L5LV7Q4oUtXtTixS1e0uKlLV7W4uUtXtHilS1e1eLVLV7T4rUtXtfi9S3e0OKNLd7U4s0tBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i0OWrylxVtbvK3F21u8o8U7W7yrxbtbvKfFe1u8r8X7W3ygxQdbfKjFh1t8pMVHW3ysxcdbfKLFJ1t8qsWnW3ymxWdbfK7F51t8ocUXW3ypxZdbfKXFV1t8rcXXW3yjxTdbfKvFt1t8p8V3W3yvxfdb/KDFD1v8qMWPW/ykxU9b/KzFz1v8osUvW/yqxa9b/KbFb1v8rsXvW/yhxR9b/KnFn1v8pcVfW/ytxd9b/KPFP1v8q8W/W/ynxZGjfLjD0Toc2uHoHY7R4ZgdjtXh2KOicIfjdjheh+N3OEGHE3Y4UYcTdzhJh5N2OFmHk3c4RYdTdjhVh1N3OE2H03Y4XYfTdzhDhzN2OFOHwzoc3uHMHc7S4awdztbh7B3O0eGcHc7V4dwdztPhvB3O1+H8HS7Q4YIdLtQhHS7c4SIdLtrhYh0u3uESHS7Z4VIdLt3hMh0u2+FyHS7f4QodjuhwxQ5X6nDlDlfpcNUOV+tw9Q7X6HDNDtfqcO0O1+lw3Q7X63D9DjfocMMON+pw4w436XDTDjfrcPMOt+hwyw636nDrDrfpcNsOt+tw+w536HDHDnfqcOcOd+lw1w5363D3DvfocM8O9+pw7w736XDfDvfrcP8OD+jwwA4P6vDgDg/p8NAOD+vw8A6P6PDIDo/q0A6P7vCYDo/t8LgOj+/whA5P7PCkDk/u8JQOT+3wtA5P7/CMDs/s8KwOz+7wnA7P7fC8Ds/v8IIOL+zwog4v7vCSDi/t8LIOL+/wig6v7PCqDq/u8JoOr+3wug6v7/CGDm/s8KYOb+4w6DDsMOow7jDpMO0w6zDvsOiw7LDqsO6w6bDtsOuw73DQ4S0d3trhbR3e3uEdHd7Z4V0d3t3hPR3e2+F9Hd7f4QMdPtjhQx0+3OEjHT7a4WMdPt7hEx0+2eFTHT7d4TMdPtvhcx0+3+ELHb7Y4UsdvtzhKx2+2uFrHb7e4RsdvtnhWx2+3eE7Hb7b4Xsdvt/hBx1+2OFHHX7c4ScdftrhZx1+3uEXHX7Z4Vcdft3hNx1+2+F3HX7f4Q8d/tjhTx3+3OEvHf7a4W8d/t7hHx3+2eFfHf7d4T8djuxwSI+j9Ti0x9F7HKPHMXscq8exexynx3F7HK/H8XucoMcJe5yox4l7nKTHSXucrMfJe5yixyl7nKrHqXucpsdpe5yux+l7nKHHGXucqcdhPQ7vceYeZ+lx1h5n63H2Hufocc4e5+px7h7n6XHeHufrcf4eF+hxwR4X6pEeF+5xkR4X7XGxHhfvcYkel+xxqR6X7nGZHpftcbkel+9xhR5H9Lhijyv1uHKPq/S4ao+r9bh6j2v8i8NaPa7d4zo9rtvjej2u3+MGPW7Y40Y9btzjJj1u2uNmPW7e4xY9btlzwiict+5xmx637XG7HrfvcYced+xxpx537nGXHnftcbced+9xjx73HIF79bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/Voj0f3eEyPx/Z4XI/H93hCjyf2eFKPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOj+f2eF6P5/d4QY8X9nhRjxf3eEmPl/Z4WY+X93hFj1f2eFWPV/d4TY/X9nhdj9f3eEOPN/Z4U4839xj0GPYY9Rj3mPSY9pj1mPdY9Fj2WPVY99j02PbY9dj3OOjxlh5v7fG2Hm/v8Y4e7+zxrh7v7lmQIUO8t8f7ery/xwd6fLDHh3p8uMdHeny0x8d6fLzHJ3p88n/yqD0+0+OzPT7X4/P90P+/x3mpx5d7fKXHV/s/0td6fL3HN3p8s8e3eny7x3d6fLfH93p8v8cPevywx496/LjHT3r8tMfPevy8xy96/LLHr3r8usdvevy2x+96/L7HH3r8scefevy5x196/LXH33r8vcc/evyzx796/LvHf3oc2eOQAY42wKEDHH2AYwxwzAGONcCxBzjOAMcd4HgDHH+AEwxwwgFONMCJBzjJACcd4GQDnHyAUwxwygFONcCpBzjNAKcd4HQDnH6AMwxwxgHONMBhAxw+wJkHOMsAZx3gbAOcfYBzDHDOAc41wLkHOM8A5x383/mwBQa44AAXGiADXHiAiwxw0QEuNsDFB7jEAJcc4FIDXHqAywxw2QEuN8DlB7jCAEcMcMUBrjTAlQe4ygBXHeBqA1x9gGsMcM0BrjXg/xF1Dl5gXN+/Tdq0SW3bxq5t27bNlLtIbaW27SZjo7bb1LaRMnmr79uu3x8wc/iZOffoumGAGwW4cYCbBLhpgJsFuHmAWwS4ZYBbBbh1gNsEuG2A2wW4fYA7BLhjgDsFuHOAuwS4a4C7Bbh7gHsEuGeAewW4d4D7BLhvgPsFuH+ABwR4YIAHBXhwgIcEeGiAhwV4eIBHBHhkgEMDPCrAowM8JsBjAzwuwOMDNMATAjwxwJMCPDnAYQGeEuCpAZ4W4OkBnhHgmQGeFeDZAZ4T4LkBnhfg+QFeEOCFAV4U4MUBXhLg8AAvDfCyAC8P8IoArwzwqgCvDvCaAK8N8LoArw/whgBvDPCmAG8O8JYAbw3wtgBvD/COAO8M8K4A7w7wngDvDfC+AO8P8IEAHwzwoQAfDvCRAEcEODLAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsBHA3wswMcDfCLAJwN8KsCnA3wmwGcDfC7A5wN8IcAXA3wpwJcDfCXAVwN8LcDXA3wjwDcDHBXgWwG+HeA7Ab4b4HsBvh/gBwF+GOBHAX4c4CcBfhrgZwF+HuAXAX4Z4FcBfh3gNwF+G+B3AX4f4A8B/hjgTwH+HOAvAf4a4OgAfwvw9wD/CPDPAP8K8O8AxwQ49h88hTgwxHFCHDfEQSGOF+L4IQ4OcUiIE4Q4YYgThThxiJOEOGmIk4U4eYhThDhliFOFOHWI04Q4bYjThTh9iDOEOGOIM4U4c4izhDhriLOFOHuIc4Q4Z4hzhTh3iPP8Q3PAgAHzhTh/iAuEuGDIgIVCXDjERUJcNMTFQlw8REJcIsQlQ1wqxKUH/tsoGOJyIS4f4gohrhjiSiGuHOIqIa4a4mohrh7iGiGuGeJaIa4d4johrhvieiGuH+IGIW4Y4kYhbhziJiFuGuJmIW4e4hYhbhniViFuHeI2IW4b4nYhbh/iDiHuGOJOIe4c4i4h7hribiHuHuIeIe4Z4l4h7h3iPiHuG+J+Ie4f4gEhHhjiQSEeHOIhIR46fPAcQ/+V84gQjwxxaIhHhXh0iMeEeGyIx4V4fIiGeEKIJ4Z4UognhzgsxFNCPDXE00I8PcQzQjwzxLNCPDvEc0I8N8TzQjw/xAtCvDDEi0K8OMRLQhwe4qUhXhbi5WP/x9OVIV4V4tUhXhPitSFeF+L1Id4Q4o0h3hTizSHeEuKtId4W4u0h3hHinSHeFeLdId4T4r0h3hfi/SE+EOKDIT4U4sMhPhLiiBBHhhiEGIYYhRiHmISYhpiFmIdYhFiGWIVYh9iE2IbYhdiH+GiIj4X4eIhPhPhkiE+F+HSIz4T4bIjPhfh8iC+E+GKIL4X4coivhPhqiK+F+HqIb4T4ZoijQnwrxLdDfCfEd0N8L8T3Q/zgX4x9FOLHIX4S4qchfhbi5yF+EeKXIX4V4tchfhPityF+F+L3If4Q4o8h/hTizyH+EuKvIY4O8bcQfw/xjxD/DPGvEP8OcUyIY0McEOHACMeJcNwIB0U4XoTjRzg4wiERThDhhBFOFOHEEU4S4aQRThbh5BFOEeGUEU4V4dQRThPhtBFOF+H0Ec4Q4YwRzhThzBHOEuGsEc4W4ewRzhHhnBHOFeHcEc4T4bwRzhfh/BEuEOGCES4U4cIRLhLhohEuFuHiERLhEhEuGeFSES4d4TIRLhvhchEuH+EKEa4Y4UoRrhzhKhGuGuFqEa4e4RoRrhnhWhGuHeE6Ea4b4XoRrh/hBhFuGOFGEW4c4SYRbhrhZhFuPmCIW0S45X/xYYTbRLhthNtFuH2EO0S4Y4Q7RbhzhLtEuGuEu0W4e4R7RLhnhHtFuHeE+0S4b4T7Rbh/hAdEeGCEB0V4cISHRHhohIdFeHiER0R4ZIRDIzwqwqMjPCbCYyM8LsLjIzTCEyI8McKT/tH/ABwW4SkRnhrhaRGeHuEZEZ4Z4VkRnh3hORGeG+F5EZ4f4QURXhjhRRFeHOElEQ6P8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4lwRIQjIwwiDCOMIowjTCJMI8wizCMsIiwjrCKsI2wibCPsIuwjfDTCxyJ8PMInInwywqcifDrCZyJ8NsLnInw+whcifDHClyJ8OcJXInw1wtcifD3CNyJ8M8JREb4V4dsRvhPhuxG+F+H7EX4Q4YcRfhThxxF+EuGnEX4W4ecRfhHhlxF+FeHX0f/NCH0X4fcR/hDhjxH+FOHPEf4S4a8Rjo7wtwh/j/CPCP+M8K8I/45wTIRjIxwQ48AYx4lx3BgHxThejOPHODjGITFOEOOEMU4U48QxThLjpDFOFuPkMU4R45QxThXj1DFOE+O0MU4X4/QxzhDjjDHOFOPMMc4S46wxzhbj7DHOEeOcMc4V49wxzhPjvDHOF+P8MS4Q44IxLhTjwjEuEuOiMS4W4+IxEuMSMS4Z41IxLh3jMjEuG+NyMS4f4woxrhjjSjGuHOMqMa4a42oxrh7jGjGuGeNaMa4d4zoxrhvjejH/te24YYwbxbhxjJvEuGmMm8W4eYxbxLhljFvFuPU/uvv3oe1i3D7GHWLcMcadYtw5xl1i3DXG3WLcPcY9Ytwzxr1i3DvGfWLcN8b9Ytw/xgNiPDDGg2I8OMZDYjw0xsNiPDzGI2I8MsahMR4V49ExHhPjsTEeF+PxMRrjCTGeGONJMZ4c47AYT4nx1BhPi/H0GM+I8cwYz4rx7BjPifHcGM+L8fwYL4jxwhgvivHiGC+JcXiMl8Z4WYyXx3hFjFfGeFWMV8d4TYzXxnhdjNfHeEOMN8Z4U4w3x3hLjLfGeFuMt8d4R4x3xnhXjHfHeE+M98Z4X4z3x/hAjA/G+FCMD8f4SIwjYhwZYxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx/jozE+FjPw33KkT8b4VIxPx/hMjM/+952P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjHFUjG/F+HaM78T4bozvxfh+jB/E+GGMH8X4cYyfxPhpjJ/F+HmMX8T4ZYxfxfh1jN/E+G2M38X4fYw/xPhjjD/F+HOMv8T4a4yjY/wtxt9j/CPGP2P8K8a/YxwT49gYByQ4MMFxEhw3wUEJjpfg+AkOTnBIghMkOGGCEyU4cYKTJDhpgpMlOHmCUyQ4ZYJTJTh1gtMkOG2C0yU4fYIzJDhjgjMlOHOCsyQ4a4KzJTh7gnMkOGeCcyU4d4LzJDhvgvMlOH+CCyS4YIILJbhwgoskuGiCiyW4eIIkuESCSya4VIJLJ7hMgssmuFyCyye4QoIrJrhSgisnuEqCqya4WoKrJ7hGgmsmuFaCaye4ToLrJrhegusnuEGCGya4UYIbJ7hJgpsmuFmCmye4RYJbJrhVglsnuE2C2ya4XYLbJ7hDgjsmuFOCOyfj/v9c0a4J7pbg7gnukfxvl/xeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpng0ASPSvDoBI9J8NgEj0vw+ARN8IQET0zwpARPTnBYgqckeGqCpyV4eoJnJHhmgmcleHaC5yR4boLnJXh+ghckeGGCFyV4cYKXJDg8wUsTvCzByxO8IsErE7wqwasTvCbBaxO8LsHrE7whwRsTvCnBmxO85b9NCAnenuAdCd6Z4F0J3p3gPQnem+B9Cd6f4AMJPpjgQwk+nOAjCY5IcGSCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYKPJvhYgo8n+ESCTyb4VIJPJ/hMgs8m+FyCzyf4QoIvJvhSgi8n+EqCryb4WoKvJ/hGgm8mOCrBtxJ8O8F3Enw3wfcSfD/BDxL8MMGPEvw4wU8S/DTBzxL8PMEvEvwywa8S/DrBbxL8NsHvEvw+wR8S/DHBnxL8OcFfEvw1wdEJ/pbg7wn+keCfCf6V4N8JjklwbIIDUhyY4jgpjpvioBTHS3H8FAenOCTFCVKcMMWJUpw4xUlSnDTFyVKcPMUpUpwyxalSnDrFaVKcNsXpUpw+xRlSnDHFmVKcOcVZUpw1Zbx/aM+e4hwpzpniXCnOneI8Kc6b4nwpzp/iAikumOJCKS6c4iIpLpriYikuniIpLpHikikuleLSKS6T4rIpLpfi8imukOKKKa6U4soprpLiqimuluLqKa6R4poprpXi2imuk+K6Ka6X4vopbpDihilulOLGKW6S4qYpbpbi5ilukeKWKW6V4tYpbpPitilul+L2Ke6Qjj15xxR3SnHnFHdJcdcUd0tx9xT3SHHPFPdKce8U90lx3xT3S3H/FA9I8cAUD0rx4BQPSfHQFA9L8fAUj0jxyBSHpnhUikeneEyKx6Z4XIrHp2iKJ6R4YoonpXhyisNSPCXFU1M8LcXTUzwjxTNTPCvFs1M8J8VzUzwvxfNTvCDFC1O8KMWLU7wkxeEpXpriZSlenuIVKV6Z4lUpXp3iNSlem+J1KV6f4g0p3pjiTSnenOItKd6a4m0p3p7iHSnemeJdKd6d4j0p3pvifSnen+IDKT6Y4kMpPpziIymOSHFkikGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2Kj6b4WIqPp/hEik+m+FSKT6f4TIrPpvhcis+n+EKKL6b4Uoovp/hKiq+m+FqKr6f4RopvpjgqxbdSfDvFd1J8N8X3Unw/xQ9S/DDFj1L8OMVPUvw0xc9S/DzFL1L8MsWvUvw6xW9S/DbF71L8PsUfUvwxxZ9S/DnFX1L8NcXRKf6W4u8p/pHinyn+leLfKY5JcWyKAzIcmOE4GY6b4aAMx8tw/AwHZzgkwwkynDDDiTKcOMNJMpw0w8kynDzDKTKcMsOpMpw6w2kynDbD6TKcPsMZMpwxw5kynDnDWTKcNcPZMpw9wzkynDPDuTKcO8N5Mpw3w/kynD/DBTJcMMOFMlw4w0UyXDTDxTJcPEMyXCLDJTNcKsOlM1wmw2UzXC7D5TNcIcMVM1wpw5UzXCXDVTNcLcPVM1wjwzUzXCvDtTNcJ8N1M1wvw/Uz3CDDDTPcKMONM9wkw00z3CzDzTPcIsMtM9wqw60z3CbDbTPcLsPtM9whwx0z3CnDnTPcJcNdM9wtw90z3CPDPTPcK8O9M9wnw30z3C/D/TM8IMMDMzwow4MzPCTDQzM8LMPDMzwiwyMzHJrhURkeneExGR6b4XEZHp+hGZ6Q4YkZnpThyRkOy/CUDE/N8LQMT8/wjAzPzPCsDM/O8JwMz83wvAzPz/CCDC/M8KIML87wkgyHZ3hphpdleHmGV2R4ZYZXZXh1htdkeG2G12V4fYY3ZHhjhjdleHOGt2R4a4a3ZXh7hndkeGeGd2V4d4b3ZHhvhvdleH+GD2T4YIYPZfhwho9kOCLDkRkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn2GT6a4WMZPp7hExk+meFTGT6d4TMZPpvhcxk+n+ELGb6Y4UsZvpzhKxm+muFrGb6e4RsZvpnhqAzfyvDtDN/J8N0M38vw/Qw/yPDDDD/K8OMMP8nw0ww/y/DzDL/I8MsMv8rw6wy/yfDbDL/L8PsMf8jwxwx/yvDnDH/J8NcMR2f4W4a/Z/hHhn9m+FeGf2c4JsOxGQ7IcWCO4+Q4bo6Dchwvx/FzHJzjkBwnyHHCHCfKceIcJ8lx0hwny3HyHKfIccocp8px6hynyXHaHKfLcfocZ8hxxhxnynHmHGfJcdYcZ8tx9hznyHHOHOfKce4c58lx3hzny3H+HBfIccEcF8px4RwXyXHRHBfLcfEcyXGJHJfMcakcl85xmRyXzXG5HJfPcYUcV8xxpRxXznGVHFfNcbUcV89xjRzXzHGtHNfOcZ0c181xvRzXz3GDHDfMcaMcN85xkxw3zXGzHDfPcYsct8xxqxy3znGbHLfNcbsct89xhxx3zHGnHHfOcZccd81xtxx3z3GPHPfMca8c985xnxz3zXG/HPfP8YAcD8zxoHycAQfneEiOh+Z4WI6H53hEjkfmODTHo3I8Osdjcjw2x+MGDBrwj53N8YQcT8zxpBxPznFYjqfkeGqOp+V4eo5n5HhmjmfleHaO5+R4bo7n5Xh+jhfkeGGOF+V4cY6X5Dg8x0tzvCzHy3O8Iscrc7wqx6tzvCbHa3O8Lsfrc7whxxtzvCnHm3O8Jcdbc7wtx9tzvCPHO3O8K8e7c7wnx3tzvC/H+3N8IMcHc3wox4dzfCTHETmOzDHIMcwxyjHOMckxzTHLMc+xyLHMscqxzrHJsc2xy7HP8dEcH8vx8RyfyPHJHJ/K8ekcn8nx2Ryfy/H5HF/I8cUcX8rx5RxfyfHVHF/L8fUc38jxzRxH5fhWjm/n+E6O7+b4Xo7v5/hBjh/m+FGOH+f4SY6f5vhZjp/n+EWOX+b4VY5f5/hNjt/m+F2O3+f4Q44/5vhTjj/n+EuOv+Y4Osffcvw9xz9y/DPHv3L8O8cxOY7NcUCBAwscp8BxCxxU4HgFjl/g4AKHFDhBgRMWOFGBExc4SYGTFjhZgZMXOEWBUxY4VYFTFzhNgdMWOF2B0xc4Q4EzFjhTgTMXOEuBsxY4W4GzFzhHgXMWOFeBcxc4T4HzFjhfgfMXuECBCxa4UIELF7hIgYsWuFiBixdIgUsUuGSBSxW4dIHLFLhsgcsVuHyBKxS4YoErFbhygasUuGqBqxW4eoFrFP/Xp752gesUuG6B6xW4foEbFLhhgRsVuHGBmxS4aYGbFbh5gVsUuGWBWxW4dYHbFLhtgdsVuH2BOxS4Y4E7FbhzgbsUuGuBuxW4e4F7FLhngXsVuHeB+xS4b4H7Fbh/weixY8d6YIEHFXhwgYcUeGiBhxV4eIFHFHhkgUMLPKrAows8psBjCzyuwOMLtMATCjyxwJMKPLnAYQWeUuCpBZ5W4OkFnlHgmQWeVeDZBZ5T4LkFnlfg+QVeUOCFBV5U4MUFXlLg8AIvLfCyAi8v8IoCryzwqgKvLvCaAq8t8LoCry/whgJvLPCmAm8u8JYCby3wtgJvL/COAu8s8K4C7y7wngLvLfC+Au8v8IECHyzwoQIfLvCRAkcUOLLAoMCwwKjAuMCkwLTArMC8wKLAssCqwLrApsC2wK7AvsBHC3yswMcLfKLAJwt8qsCnC3ymwGcLfK7A5wt8ocAXC3ypwJcLfKXAVwt8rcDXCyb+L3c8qsC3Cny7wHcKfLfA9wp8v8APCvywwI8K/LjATwr8tMDPCvy8wC8K/LLArwr8usBvCvy2wO8K/L7AHwr8scCfCvy5wF8K/LXA0QX+VuDvBf5R4J8F/lXg3wWOKXBsgQNKHFjiOCWOW+KgEscrcfwSB5c4pMQJSpywxIlKnLjESUqctMTJSpy8xClKnLLEqUqcusRpSpy2xOlKnL7EGUqcscSZSpy5xFlKnLXE2UqcvcQ5SpyzxLlKnLvEeUqct8T5Spy/xAVKXLDEhUpcuMRFSly0xMVKXLxESlyixCVLXKrEpUtcpsRlS1yuxOVLXKHEFUtcqcSVS1ylxFVLXK3E1Utco8Q1S1yrxLVLXKfEdUtcr8T1S9ygxA1L3KjEjUvcpMRNS9ysxM1L3KLELUvcqsStS9ymxG1L3K7E7UvcocQdS9ypxJ1L3KXEXUvcrcTdS9yjxD1L3KvEvUvcp8R9S9yvxP1LPKDEA0s8qMSDSzykxENLPKzEw0s8osQjSxxa4lElHl3iMSUeW+JxJR5foiWeUOKJJZ5U4sklDivxlBJPLfG0Ek8v8YwSzyzxrBLPLvGcEs8t8bwSzy/xghIvLPGiEi8u8ZISh5d4aYmXlXh5iVeUeGWJV5V4dYnXlHhtideVeH2JN5R4Y4k3lXhzibeUeGuJt5V4e4l3lHhniXeVeHeJ95R4b4n3lXh/iQ+U+GCJD5X4cImPlDiixJElBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl9iU+WuJjJT5e4hMlPlniU+WAQf/9H54t8bkSny/xhRJfLPGlEl8u8ZUSXy3xtRJfL/GNEt8scVSJb5X4donvlPhuie+V+H6JH5T4YYkflfhxiZ+U+GmJn5X4eYlflPhliV+V+HWJ35T4bYnflfh9iT+U+GOJP5X4c4m/lPhriaNL/K3E30v8o8Q/S/yrxL9LHFPi2BIHVDiwwnEqHLfCQRWOV+H4FQ6ucEiFE1Q4YYUTVThxhZNUOGmFk1U4eYVTVDhlhVNVOHWF01Q4bYXTVTh9hTNUOGOFM1U4c4WzVDhrhbNVOHuFc1Q4Z4VzVTh3hfNUOG+F81U4f4ULVLhghQtVuHCFi1S4aIWLVbh4hVS4RIVLVrhUhUtXuEyFy1a4XIXLV7hChStWuFKFK1e4SoWrVrhahatXuEaFa1a4VoVrV7hOhetWuF6F61e4QYUbVrhRhRtXuEmFm1a4WYWbV7hFhVtWuFWFW1e4TYXbVrhdhdtXuEOFO1a4U4U7V7hLhbtWuFuFu1e4R4V7VrhXhXtXuE+F+1a4X4X7V3hAhQdWeFCFB1d4SIWHVnhYhYdXeESFR1Y4tMKjKjy6wmMqPLbC4yo8vkIrPKHCEys8qcKTKxxW4SkVnlrhaRWeXuEZFZ5Z4VkVnl3hORWeW+F5FZ5f4QUVXljhRRVeXOElFQ6v8NIKL6vw8gqvqPDKCq+q8OoKr6nw2or/yqLeUOGNFd5U4c0V3lLhrRXeVuHtFd5R4Z0V3lXh3RXeU+G9Fd5X4f0VPlDhgxU+VOHDFT5S4YgKR1YYVBhWGFUYV5hUmFaYVZhXWFRYVlhVWFfYVNhW2FXYV/hohY9V+HiFT1T4ZIVPVfh0hc9U+GyFz1X4fIUvVPhihS9V+HKFr1T4aoWvVfh6hW9U+GaFoyp8q8K3/8HbsAED3q3wvQrfr/CDCj+s8KMKP67wkwo/rfCzCj+v8IsKv6zwqwq/rvCbCr+t8LsKv6/whwp/rPCnCn+u8JcKf61wdIW/Vfh7hX9U+GeFf1X4d4VjKhxb4YAaB9Y4To3j1jioxvFqHL/GwTUOqXGCGiescaIaJ65xkhonrXGyGievcYoap6xxqhqnrnGaGqetcboap69xhhpnrHGmGmeucZYaZ61xthpnr3GOGuesca4a565xnhrnrXG+GuevcYEaF6xxoRoXrnGRGhetcbEaF6+RGpeocckal6px6RqXqXHZGpercfkaV6hxxRpXqnHlGlepcdUaV6tx9RrXqHHNGteqce0a16lx3RrXq3H9GjeoccMaN/pHHwNwkxo3rXGzGjevcYsat6xxqxq3rnGbGretcbsat69xhxp3rHGnGneucZcad61xtxp3r3GPGvesca8a965xnxr3rXG/Gvev8YAaD6zxoBoPrgcPOKTGQ2s8rMbDazyixiNrHFrjUTUeXeMxNR5b43E1Hl+jNZ5Q44k1nlTjyTUOq/GUGk+t8bQaT6/xjBrPrPGsGs+u8Zwaz63xvBrPr/GCGi+s8aIaL67xkhqH13hpjZfVeHmNV9R4ZY1X1Xh1jdfUeG2N19V4fY031HhjjTfVeHONt9R4a4231Xh7jXfUeGeNd9V4d4331HhvjffVeH+ND9T4YI0P1fhwjY/UOKLGkTUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NT5a42M1Pl7jEzU+WeNTNT5d4zM1PlvjczU+X+MLNb5Y40s1vlzjKzW+WuNrNb5e4xs1vlnjqBrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6nx0xo/q/HzGr+o8csav6rx6xq/qfHbGr+r8fsaf6jxxxp/qvHnGn+p8dcaR9f4W42/1/hHjX/W+FeNf9c4psaxNQ5ocGCD4zQ4boODGhyvwfEbHNzgkAYnaHDCBidqcOIGJ2lw0gYna3DyBqdocMoGp2pw6ganaXDaBqdrcPoGZ2hwxgZnanDmBmdpcNYGZ2tw9gbnaHDOBudqcO4G52lw3gbna3D+BhdocMEGF2pw4QYXaXDRBhdrcPEGaXCJBpdscKn/RjEaXLbB5RpcvsEVGlyxwZUaXLnBVRpctcHVGly9wTUaXLPBtRpcu8F1Gly3wfUaXL/BDRrcsMGNGty4wU0a3LTBzRrcvMEtGtyywa0a3LrBbRrctsHtGty+wR0a3LHBnRrcucFdGty1wd0a3L3BPRrcs8G9Gty7wX0a3LfB/Rrcv8EDGjywwYMaPLjBQxo8tMHDGjy8wSMaPLLBoQ0e1eDRDR7T4LENHtfg8Q36r7wnNnhSgyc3OKzBUxo8tcHTGjy9wTMaPLPBsxo8u8FzGjy3wfMaPL/BCxq8sMGLGry4wUsaHN7gpQ1e1uDlDV7R4JUNXtXg1Q1e0+C1DV7X4PUN3tDgjQ3e1ODNDd7S4K0N3tbg7Q3e0eCdDd7V4N0N3tPgvQ3e1+D9DT7Q4IMNPtTgww0+0uCIBkc2GDQYNhg1GDeYNJg2mDWYN1g0WDZYNVg32DTYNtg12Df4aIOPNfh4g080+GSDTzX4dIPPNPhsg881+HyDLzT4YoMvNfhyg680+GqDrzX4eoNvNPhmg6MafKvBtxt8p8F3G3yvwfcb/KDBDxv8qMGPG/ykwU8b/KzBz5tRftHglw1+1eDXDX7T4LcNftfg9w3+0OCPDf7U4M8N/tLgrw2ObvC3Bn9v8I8G/2zwrwb/bnBMg2MbHNDiwBbHaXHcFge1OF6L47c4uMUhLU7Q4oQtTtTixC1O0uKkLU7W4uQtTtEO+f/noqlanLrFaVqctsXpWpy+xRlanLHFmVqcucVZWpy1xdlanL3FOVqcs8W5Wpy7xXlanLfF+Vqcv8UFWlywxYVaXLjFRVpctMXFWly8RVpcosUlW1yqxaVbXKbFZVtcrsXlW1yhxRVbXKnFlVtcpcVVW1ytxdVbXKPFNVtcq8W1W1ynxXVbXK/F9VvcoMUNW9yoxY1b3KTFTVvcrMXNW9yixS1b3KrFrVvcpsVtW9yuxe1b3KHFHVvcqcWdW9ylxV1b3K3F3Vvco8U9W9yrxb1b3KfFfVvcr8X9WzygxQNbPKjFg1s8pMVDWzysxcNbPKLFI1sc2uJRLR7d4jEtHtvicS0e36ItntDiiS2e1OLJLQ5r8ZQWT23xtBZPb/GMFs9s8awWz27xnBbPbfG8Fs9v8YIWL2zxopa50hYvaXF4i5e2eFmLl7d4RYtXtnhVi1e3eE2L17Z4XYvXt3hDize2eFOLN7d4S4u3tnhbi7e3eEeLd7Z4V4t3t3hPi/e2eF+L97f4QIsPtvhQiw+3+EiLI1oc2WLQYjg+Ri3GLSYt/sNn1mLeYtFi2WLVYt1i02LbYtdi3+KjLT7W4uMtPtHiky0+1eLTLT7T4rMtPtfi8y2+0OKLLb7U4sstvtLiqy2+1uLrLb7R4pstjmrxrRbfbvGdFt9t8b0W32/xgxY/bPGjFj9u8ZMWP23xsxY/b/GLFr9s8asWv27xmxa/bfG7Fr9v8YcWf2zxpxZ/bvGXf/xrwIABo1v8rcXfW/yjxT9b/KvFv1sc0+LYFgd0OLDDcToct8NBHY7X4fgdDu5wyNix/7tuq8OJOpy4w0k6nLTDyTqcvMMpOpyyw6k6nLrDaTqctsPpOpy+wxk6nLHDmTqcucNZOpy1w9k6nL3DOTqcs8O5Opy7w3k6nLfD+Tqcv8MFOlyww4U6XLjDRTpctMPFOly8QzpcosMlO1yqw6U7XKbDZTtcrsPlO1yhwxU7XKnDlTtcpcNVO1ytw9U7XKPDNTtcq8O1O1ynw3U7XK/D9TvcoMMNO9yow4073KTDTTvcrMPNO9yiwy073KrDrTvcpsNtO9yuw+073KHDHTvG7NThzh3u0uGuHe7W4e4d7tHhnh3u1eHeHe7T4b4d7tfh/h0e0OGBHR7U4cEdHtLhoR0e1uHhHR7R4ZEdDu3wqA6P7vCYDo/t8LgOj+/QDk/o8MQOT+rw5A6HdXhKh6d2eFqHp3d4RodndnhWh2d3eE6H53Z4Xofnd3hBhxd2eFGHF3d4SYfDO7y0Y7Z//OTyDq/o8MoOr+rw6g6v6fDaDq/r8PoOb+jwxg5v6vDmDm/5199u6/D2Du/o8M4O7+rw7g7v6fDeDu/r8P4OH+jwwQ4f6vDhDh/pcESHIzsMOgw7jDqMO0w6TDvMOsw7LDosO6w6rDtsOmw77DrsO3y0w8c6fLzDJzp8ssOnOnz6H5z8G14+1+HzHb7Q4YsdvtThyx2+0uGrHb7W4esdvtHhmx2O6vCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/v8IsOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+1wdIe/dfh7h390+GeHf3X4d4djOhzb4YAeB/Y4To/j9jiox/F6HL/HwT0O6XGCHifscaIeJ+5xkh4n7XGyHifvcYoep+xxqh6n7nGa/n950ul6nL7HGXqcsceZepy5x1l6nLXH2Xqcvcc5epyzx7l6nLvHeXqct8f5epy/xwV6XLDHhXpcuMdFely0x8V6XLxHelyixyV7XKrHpXtcpsdle1yux+V7XKHHFf+R7V/7rdLjqj2u1uPqPa7R45o9rtXj2j2u0+O6Pa7X4/o9btDjhj1u1PPfK9y0x8163LzHLXrcssetety6x2163LbH7Xrcvscdetyxx5163LnHXXrctcfdety9xz163LPHvXrcu8d9ety3x/163L/HA3o8sMeDejy4x0N6PLTHw3o8vMcjejyyx6E9HtXj0T0e0+OxPR7X4/E92uMJPZ7Y40k9ntzjsB5P6fHUHk/r8fQez+jxzB7P6vHsHs/p8dwez+vx/B4v6PHCHi/q8eIeL+lxeI+X9nhZj5f3eEWPV/Z4VY9X93hNj9f2eF2P1/d4Q4839nhTjzf3eEuPt/Z4W4+393hHj3f2eFePd/d4T4/39nhfj/f3+ECPD/b4UI8P9/hIjyN6HNnj/wsAAP//Pt/GrQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, r6, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) symlink(&(0x7f000000ad80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f000000acc0)='./file1\x00') 531.266202ms ago: executing program 5 (id=2031): socket$kcm(0x10, 0xa, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x3b) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000240)=0x6, 0x4) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x1, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2010, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r6 = openat(r5, &(0x7f0000000340)='./file0\x00', 0x408c2, 0x185) ioctl$AUTOFS_IOC_CATATONIC(r6, 0xc0049364, 0x1000000000000) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @loopback}, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f00000004c0)={0x7, 0x3, &(0x7f00000002c0)=[0x6c2, 0x9, 0x1], &(0x7f0000000380)=[0x7, 0x6, 0x3], &(0x7f0000000400)=[0x6ec, 0x0], &(0x7f0000000480)=[0x80]}) accept4(r0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 0s ago: executing program 3 (id=2032): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) faccessat2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c0050890e1d2cc1bbbdf08d08fe06ff2766758d8955927fab01a7ccdecfc59b2041a9461723f1db971e775e0e358c03b00c510998283ed6f1dba0502d352e58b65a28492b0a7053e14eccd84ac5b3452602d77c0ca0"], 0x1, 0x442a, &(0x7f0000008940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e3002a000a4fbe22e00d190c937dc6914243b0402d6dcb70ad80851956fe6727ae888746b02cee670a5882a0ad79716584e6b04b7b62edac751478af9c62f", 0x40, 0xfffffffffffffffc) kernel console output (not intermixed with test programs): loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 737.030552][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.083773][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.091034][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.098487][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.105879][ T4530] NILFS (loop6): discard dirty page: offset=204800, ino=18 [ 737.113519][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.120759][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.128048][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.150685][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.227803][ T4530] NILFS (loop6): discard dirty page: offset=208896, ino=18 [ 737.256945][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.277131][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.292022][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.315413][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.531061][ T4530] NILFS (loop6): discard dirty page: offset=212992, ino=18 [ 737.581973][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.609587][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.627533][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.642136][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.659857][ T4530] NILFS (loop6): discard dirty page: offset=217088, ino=18 [ 737.690261][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.713861][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.729825][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.746631][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.761195][ T4530] NILFS (loop6): discard dirty page: offset=221184, ino=18 [ 737.769599][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.777332][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.785362][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.792938][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.800480][ T4530] NILFS (loop6): discard dirty page: offset=225280, ino=18 [ 737.808324][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.816136][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.825611][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.834791][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.842295][ T4530] NILFS (loop6): discard dirty page: offset=229376, ino=18 [ 737.854105][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.861564][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 737.895991][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 738.047419][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 738.082126][ T4530] NILFS (loop6): discard dirty page: offset=233472, ino=18 [ 738.089401][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 738.096695][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 738.104233][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 738.953298][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 738.960996][ T4530] NILFS (loop6): discard dirty page: offset=237568, ino=18 [ 739.015472][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.053194][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.072938][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.080278][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.114946][ T4530] NILFS (loop6): discard dirty page: offset=241664, ino=18 [ 739.141989][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.175377][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.191908][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.211333][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.241728][ T4530] NILFS (loop6): discard dirty page: offset=245760, ino=18 [ 739.282087][ T27] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 739.291971][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.315764][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.331919][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.357809][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.472083][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 739.487313][ T27] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 739.502209][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 739.509059][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c094, bcdDevice= 0.00 [ 739.519029][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.522208][ T4530] NILFS (loop6): discard dirty page: offset=249856, ino=18 [ 739.543275][ T27] usb 1-1: config 0 descriptor?? [ 739.662967][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.844357][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.852441][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.859848][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.867641][ T4530] NILFS (loop6): discard dirty page: offset=253952, ino=18 [ 739.875083][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.883257][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.890612][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.899122][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.906707][ T4530] NILFS (loop6): discard dirty page: offset=258048, ino=18 [ 739.917549][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.924987][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.933023][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.940388][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.948468][ T4530] NILFS (loop6): discard dirty page: offset=262144, ino=18 [ 739.955952][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.963824][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.971243][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.979136][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 739.986744][ T4530] NILFS (loop6): discard dirty page: offset=266240, ino=18 [ 739.995529][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.003569][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.011372][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.019616][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.027611][ T4530] NILFS (loop6): discard dirty page: offset=270336, ino=18 [ 740.035014][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.069000][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.073698][ T27] hid-generic 0003:046D:C094.0001: unbalanced collection at end of report description [ 740.091961][ T27] hid-generic: probe of 0003:046D:C094.0001 failed with error -22 [ 740.127895][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.160889][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.189798][ T4530] NILFS (loop6): discard dirty page: offset=274432, ino=18 [ 740.222135][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.229357][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.242202][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.262055][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.285085][ T9334] usb 1-1: USB disconnect, device number 20 [ 740.297530][ T4530] NILFS (loop6): discard dirty page: offset=278528, ino=18 [ 740.318476][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.326633][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.334402][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.341625][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.349472][ T4530] NILFS (loop6): discard dirty page: offset=282624, ino=18 [ 740.357414][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.365297][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.372783][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.386096][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.417663][ T4530] NILFS (loop6): discard dirty page: offset=286720, ino=18 [ 740.444935][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.452757][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.460081][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.468463][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.476018][ T4530] NILFS (loop6): discard dirty page: offset=290816, ino=18 [ 740.491010][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.512643][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.536953][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.546158][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.553843][ T4530] NILFS (loop6): discard dirty page: offset=294912, ino=18 [ 740.561223][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.569229][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.578447][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.588607][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.607552][ T4530] NILFS (loop6): discard dirty page: offset=299008, ino=18 [ 740.620924][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.630292][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.651139][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.662268][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.671750][ T4530] NILFS (loop6): discard dirty page: offset=303104, ino=18 [ 740.694915][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.704331][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.717948][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.735490][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.754497][ T4530] NILFS (loop6): discard dirty page: offset=307200, ino=18 [ 740.774592][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.791973][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.847172][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.884341][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.920544][ T4530] NILFS (loop6): discard dirty page: offset=311296, ino=18 [ 740.951615][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 740.991318][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 741.026016][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 741.092748][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 741.132475][ T4530] NILFS (loop6): discard dirty page: offset=315392, ino=18 [ 741.165692][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 741.169000][T10442] loop0: detected capacity change from 0 to 64 [ 741.191138][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 741.224694][T10442] syz.0.1571: attempt to access beyond end of device [ 741.224694][T10442] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 741.253237][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 741.278927][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 741.289774][T10442] Buffer I/O error on dev loop0, logical block 512, async page read [ 741.301463][ T4530] NILFS (loop6): discard dirty page: offset=319488, ino=18 [ 741.321338][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 741.352937][T10442] syz.0.1571: attempt to access beyond end of device [ 741.352937][T10442] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 741.387131][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 741.406034][T10442] Buffer I/O error on dev loop0, logical block 56576, async page read [ 741.432034][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 741.583231][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 741.624759][ T4530] NILFS (loop6): discard dirty page: offset=323584, ino=18 [ 741.687533][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 741.753006][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 741.828831][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 741.871978][ T9334] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 741.923063][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 741.991000][ T4530] NILFS (loop6): discard dirty page: offset=327680, ino=18 [ 742.051693][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.065486][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.083703][ T9334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.114987][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.126849][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.151962][ T9334] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 742.161083][ T4530] NILFS (loop6): discard dirty page: offset=331776, ino=18 [ 742.180476][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.222018][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.246402][ T9334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.280118][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.281651][ T9334] usb 4-1: config 0 descriptor?? [ 742.351173][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.401927][ T4530] NILFS (loop6): discard dirty page: offset=335872, ino=18 [ 742.409984][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.431922][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.439263][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.473874][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.505383][ T4530] NILFS (loop6): discard dirty page: offset=339968, ino=18 [ 742.521372][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.541028][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.765852][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.773414][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.785018][ T9334] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 742.798346][ T9334] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input28 [ 742.822147][ T4530] NILFS (loop6): discard dirty page: offset=344064, ino=18 [ 742.860088][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 742.996700][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 743.148195][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 743.312206][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 743.534111][ T9334] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 743.600502][ T125] usb 4-1: USB disconnect, device number 10 [ 743.652835][ T4530] NILFS (loop6): discard dirty page: offset=348160, ino=18 [ 743.682001][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 743.689254][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 743.717930][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 743.731944][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 743.739296][ T4530] NILFS (loop6): discard dirty page: offset=352256, ino=18 [ 743.771780][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 743.790399][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 743.814128][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 743.834314][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 743.867717][ T4530] NILFS (loop6): discard dirty page: offset=356352, ino=18 [ 743.894746][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 743.931986][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 743.954299][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 743.998805][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.026238][ T4530] NILFS (loop6): discard dirty page: offset=360448, ino=18 [ 744.048390][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.078427][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.111937][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.129394][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.146916][ T4530] NILFS (loop6): discard dirty page: offset=364544, ino=18 [ 744.175164][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.210026][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.239714][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.254642][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.299218][ T4530] NILFS (loop6): discard dirty page: offset=368640, ino=18 [ 744.337444][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.366058][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.395858][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.427524][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.452043][ T4530] NILFS (loop6): discard dirty page: offset=372736, ino=18 [ 744.493109][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.559167][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.596885][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.747470][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.769716][ T4530] NILFS (loop6): discard dirty page: offset=376832, ino=18 [ 744.792223][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.799485][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.830866][ T4268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 744.852642][ T4268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 744.862735][ T4268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 744.869783][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 744.890103][ T4267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 744.901491][ T4267] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 744.922236][ T4267] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 745.050134][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.164413][ T4530] NILFS (loop6): discard dirty page: offset=380928, ino=18 [ 745.307502][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.355649][T10465] lo speed is unknown, defaulting to 1000 [ 745.372847][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.403160][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.410408][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.446875][ T4530] NILFS (loop6): discard dirty page: offset=385024, ino=18 [ 745.462121][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.476818][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.494442][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.501694][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.529233][ T4530] NILFS (loop6): discard dirty page: offset=389120, ino=18 [ 745.562147][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.586283][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.618864][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.653063][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.680702][ T4530] NILFS (loop6): discard dirty page: offset=393216, ino=18 [ 745.715761][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.758449][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.790075][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.813601][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.851265][ T4530] NILFS (loop6): discard dirty page: offset=397312, ino=18 [ 745.883902][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 745.899584][T10476] loop0: detected capacity change from 0 to 128 [ 745.958247][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 746.012982][T10465] chnl_net:caif_netlink_parms(): no params data found [ 746.070725][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 746.119533][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 746.190522][ T4530] NILFS (loop6): discard dirty page: offset=401408, ino=18 [ 746.233907][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 746.299003][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 746.374385][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 746.382594][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 746.389833][ T4530] NILFS (loop6): discard dirty page: offset=405504, ino=18 [ 746.397741][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 746.445893][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 746.475991][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 746.524635][T10485] loop0: detected capacity change from 0 to 64 [ 746.537438][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 746.599165][T10465] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.609178][ T4530] NILFS (loop6): discard dirty page: offset=409600, ino=18 [ 746.618768][T10485] syz.0.1582: attempt to access beyond end of device [ 746.618768][T10485] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 746.647540][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 746.658854][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 746.671518][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.119699][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.136026][ T4530] NILFS (loop6): discard dirty page: offset=413696, ino=18 [ 747.146058][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.158298][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.168137][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.180274][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.196833][ T4266] Bluetooth: hci5: command 0x0409 tx timeout [ 747.221977][T10485] Buffer I/O error on dev loop0, logical block 512, async page read [ 747.230151][T10485] syz.0.1582: attempt to access beyond end of device [ 747.230151][T10485] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 747.459577][T10485] Buffer I/O error on dev loop0, logical block 56576, async page read [ 747.469387][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.490374][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.606398][ T4530] NILFS (loop6): discard dirty page: offset=417792, ino=18 [ 747.614132][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.621493][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.628798][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.636796][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.644418][ T4530] NILFS (loop6): discard dirty page: offset=421888, ino=18 [ 747.652152][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.659455][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.667252][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.720339][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.738866][T10465] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.746222][ T4530] NILFS (loop6): discard dirty page: offset=425984, ino=18 [ 747.753807][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.761201][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.764575][T10465] device bridge_slave_0 entered promiscuous mode [ 747.776094][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.821962][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.829257][ T4530] NILFS (loop6): discard dirty page: offset=430080, ino=18 [ 747.893521][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.901658][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.909028][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.916591][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.924102][ T4530] NILFS (loop6): discard dirty page: offset=434176, ino=18 [ 747.952580][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.959992][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 747.989311][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.014919][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.050202][ T4530] NILFS (loop6): discard dirty page: offset=438272, ino=18 [ 748.378875][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.402183][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.417954][T10465] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.439594][T10465] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.462071][T10465] device bridge_slave_1 entered promiscuous mode [ 748.470130][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.501933][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.509198][ T4530] NILFS (loop6): discard dirty page: offset=442368, ino=18 [ 748.540764][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.565536][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.572148][T10465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.573564][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.608089][T10465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.625690][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.658713][ T4530] NILFS (loop6): discard dirty page: offset=446464, ino=18 [ 748.677339][T10502] loop3: detected capacity change from 0 to 64 [ 748.689002][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.707888][T10465] team0: Port device team_slave_0 added [ 748.719206][T10465] team0: Port device team_slave_1 added [ 748.732792][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.750460][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.750745][T10502] syz.3.1586: attempt to access beyond end of device [ 748.750745][T10502] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 748.768432][T10502] Buffer I/O error on dev loop3, logical block 512, async page read [ 748.810598][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.819900][ T4530] NILFS (loop6): discard dirty page: offset=450560, ino=18 [ 748.827807][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.829672][T10465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.835577][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.849925][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.857297][T10502] syz.3.1586: attempt to access beyond end of device [ 748.857297][T10502] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 748.857684][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.882091][T10465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.908018][ T9334] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 748.920736][ T4530] NILFS (loop6): discard dirty page: offset=454656, ino=18 [ 748.949049][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.962870][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.972088][T10502] Buffer I/O error on dev loop3, logical block 56576, async page read [ 748.979863][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 748.988051][T10465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.006033][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.016241][ T4530] NILFS (loop6): discard dirty page: offset=458752, ino=18 [ 749.034326][T10465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.051057][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.141989][ T9333] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 749.168908][T10465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.173303][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.202664][ T9334] usb 5-1: Using ep0 maxpacket: 16 [ 749.212141][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.219762][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.227353][ T4530] NILFS (loop6): discard dirty page: offset=462848, ino=18 [ 749.236710][ T9334] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 749.255804][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.267992][ T9334] usb 5-1: config 0 interface 0 has no altsetting 0 [ 749.275046][ T4267] Bluetooth: hci5: command 0x041b tx timeout [ 749.281784][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.289287][ T9334] usb 5-1: New USB device found, idVendor=046d, idProduct=c094, bcdDevice= 0.00 [ 749.298521][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.305885][ T9334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.314332][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.316273][ T9334] usb 5-1: config 0 descriptor?? [ 749.332262][T10465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.344703][ T9333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.362235][ T4530] NILFS (loop6): discard dirty page: offset=466944, ino=18 [ 749.376067][ T9333] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 749.390070][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.395248][ T9333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.427430][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.428480][ T9333] usb 1-1: config 0 descriptor?? [ 749.455358][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.506215][T10465] device hsr_slave_0 entered promiscuous mode [ 749.509485][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.521042][T10465] device hsr_slave_1 entered promiscuous mode [ 749.529194][T10465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 749.539862][T10465] Cannot create hsr debugfs directory [ 749.556914][ T4530] NILFS (loop6): discard dirty page: offset=471040, ino=18 [ 749.576545][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.594683][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.610786][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.628050][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.648498][ T4530] NILFS (loop6): discard dirty page: offset=475136, ino=18 [ 749.701271][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.743324][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.761174][ T9334] hid-generic 0003:046D:C094.0003: unbalanced collection at end of report description [ 749.781044][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.793352][ T9334] hid-generic: probe of 0003:046D:C094.0003 failed with error -22 [ 749.810865][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.823706][ T4530] NILFS (loop6): discard dirty page: offset=479232, ino=18 [ 749.831013][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.900024][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.922495][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.929775][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 749.947713][ T4530] NILFS (loop6): discard dirty page: offset=483328, ino=18 [ 749.980353][ T5301] usb 5-1: USB disconnect, device number 17 [ 750.009407][ T9333] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 750.031139][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.043555][T10465] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 750.057994][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.070894][ T9333] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input29 [ 750.083287][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.094738][T10465] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 750.103534][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.110810][ T4530] NILFS (loop6): discard dirty page: offset=487424, ino=18 [ 750.138325][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.159354][T10465] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 750.191935][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.202890][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.211462][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.229080][T10510] loop5: detected capacity change from 0 to 64 [ 750.236293][ T9333] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 750.249224][T10465] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 750.257454][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.268010][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.287547][ T4530] NILFS (loop6): discard dirty page: offset=491520, ino=18 [ 750.324264][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.331749][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.449101][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.502219][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.509592][ T4530] NILFS (loop6): discard dirty page: offset=495616, ino=18 [ 750.531945][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.539494][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.578482][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.633708][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 750.968361][ T4530] NILFS (loop6): discard dirty page: offset=499712, ino=18 [ 751.501060][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 751.525603][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 751.551519][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 751.644299][ T4267] Bluetooth: hci5: command 0x040f tx timeout [ 751.652183][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 751.721953][ T4530] NILFS (loop6): discard dirty page: offset=503808, ino=18 [ 751.734554][T10465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.808823][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 751.882175][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 751.907240][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 751.934159][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 751.965101][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 752.006079][T10465] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.025311][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 752.042902][ T4298] usb 1-1: USB disconnect, device number 21 [ 752.089620][ T4530] NILFS (loop6): discard dirty page: offset=507904, ino=18 [ 752.109415][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 752.133725][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 752.152320][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 752.176040][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.183267][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.579960][ C0] keytouch 0003:0926:3333.0004: usb_submit_urb(ctrl) failed: -19 [ 752.599029][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 752.607373][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 752.615194][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 752.622479][ T4530] NILFS (loop6): discard dirty page: offset=512000, ino=18 [ 752.629738][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 752.637700][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 752.645011][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 752.652311][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 752.659545][ T4530] NILFS (loop6): discard dirty page: offset=516096, ino=18 [ 752.682910][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 752.726263][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 752.935479][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 752.996243][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 753.001030][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 753.069205][ T4530] NILFS (loop6): discard dirty page: offset=520192, ino=18 [ 753.229935][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 753.283149][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 753.295883][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.303081][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.312339][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 753.323500][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 753.330146][T10520] loop5: detected capacity change from 0 to 1024 [ 753.362381][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 753.366076][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 753.378259][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 753.399253][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 753.402158][ T4530] NILFS (loop6): discard dirty page: offset=524288, ino=18 [ 753.445058][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 753.490872][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 753.520546][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 753.568191][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 753.647847][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 753.656887][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 753.671342][T10520] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 753.680606][ T4267] Bluetooth: hci5: command 0x0419 tx timeout [ 753.770031][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 753.794823][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 753.804531][ T26] audit: type=1804 audit(1738309162.247:73): pid=10520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1590" name="/newroot/112/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 753.832563][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 753.851652][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 753.876125][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 753.901138][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 753.928563][ T7737] EXT4-fs (loop5): unmounting filesystem. [ 753.945566][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 753.956132][T10530] loop4: detected capacity change from 0 to 128 [ 753.963216][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 753.970473][ T4530] NILFS (loop6): discard dirty page: offset=528384, ino=18 [ 754.013309][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 754.040952][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 754.061443][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 754.083159][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 754.122621][ T4530] NILFS (loop6): discard dirty page: offset=532480, ino=18 [ 754.167787][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 754.196784][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 754.257320][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 754.409974][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 754.575726][ T4530] NILFS (loop6): discard dirty page: offset=536576, ino=18 [ 754.795468][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.086783][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.121922][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.156543][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.202429][ T4530] NILFS (loop6): discard dirty page: offset=540672, ino=18 [ 755.277525][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.306445][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.320817][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.371970][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.391040][ T4530] NILFS (loop6): discard dirty page: offset=544768, ino=18 [ 755.420455][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.430573][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.461051][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.481269][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.510551][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 755.515323][ T4530] NILFS (loop6): discard dirty page: offset=548864, ino=18 [ 755.532379][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 755.545689][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.560949][T10465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.592385][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.599654][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.634916][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.663088][ T4530] NILFS (loop6): discard dirty page: offset=552960, ino=18 [ 755.670362][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.712144][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.719421][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.721103][T10548] loop0: detected capacity change from 0 to 4096 [ 755.762810][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.770092][ T4530] NILFS (loop6): discard dirty page: offset=557056, ino=18 [ 755.813247][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.820525][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.833832][T10548] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 755.872811][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.880175][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 755.951344][ T4530] NILFS (loop6): discard dirty page: offset=561152, ino=18 [ 756.010183][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.045499][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.077799][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.108153][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.138550][ T4530] NILFS (loop6): discard dirty page: offset=565248, ino=18 [ 756.182169][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.211906][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.219176][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.270204][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.293285][ T4530] NILFS (loop6): discard dirty page: offset=569344, ino=18 [ 756.331650][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.372049][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.389513][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.430026][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.433424][T10559] loop0: detected capacity change from 0 to 64 [ 756.440174][ T4530] NILFS (loop6): discard dirty page: offset=573440, ino=18 [ 756.471450][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.501663][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.525182][T10559] syz.0.1599: attempt to access beyond end of device [ 756.525182][T10559] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 756.551638][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.560816][T10549] loop5: detected capacity change from 0 to 32768 [ 756.570730][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 756.572412][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.586713][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 756.606706][ T4530] NILFS (loop6): discard dirty page: offset=577536, ino=18 [ 756.615188][T10559] Buffer I/O error on dev loop0, logical block 512, async page read [ 756.652455][T10559] syz.0.1599: attempt to access beyond end of device [ 756.652455][T10559] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 756.661997][T10549] [ 756.661997][T10549] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 756.661997][T10549] [ 756.667668][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.726689][T10559] Buffer I/O error on dev loop0, logical block 56576, async page read [ 756.737113][T10465] device veth0_vlan entered promiscuous mode [ 756.743522][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.751633][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 756.815929][ T26] audit: type=1800 audit(1738309165.257:74): pid=10549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1598" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 756.836989][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.872272][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.917882][ T4530] NILFS (loop6): discard dirty page: offset=581632, ino=18 [ 756.930274][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 756.961740][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.969632][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.977132][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.984485][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 756.992279][ T4530] NILFS (loop6): discard dirty page: offset=585728, ino=18 [ 756.992643][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 757.001985][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.014669][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.021939][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.029157][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.067901][ T4530] NILFS (loop6): discard dirty page: offset=589824, ino=18 [ 757.413162][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.449721][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.470253][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 757.508323][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.526472][T10465] device veth1_vlan entered promiscuous mode [ 757.572121][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.579391][ T4530] NILFS (loop6): discard dirty page: offset=593920, ino=18 [ 757.586801][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.594111][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.601339][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.608604][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.615907][ T4530] NILFS (loop6): discard dirty page: offset=598016, ino=18 [ 757.623193][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.630962][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.638533][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.645795][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.672150][ T4530] NILFS (loop6): discard dirty page: offset=602112, ino=18 [ 757.705915][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 757.715592][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.723725][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 757.793508][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.831407][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 757.842426][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.854295][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 757.874610][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.893675][T10465] device veth0_macvtap entered promiscuous mode [ 757.914838][T10465] device veth1_macvtap entered promiscuous mode [ 757.917507][ T4530] NILFS (loop6): discard dirty page: offset=606208, ino=18 [ 757.948552][T10549] find_entry called with index = 0 [ 757.952173][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.961386][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.981979][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.989237][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 757.993077][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.031971][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.042777][ T4530] NILFS (loop6): discard dirty page: offset=610304, ino=18 [ 758.052014][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.059253][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.062106][T10549] read_mapping_page failed! [ 758.071538][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.083109][T10549] ERROR: (device loop5): txCommit: [ 758.083109][T10549] [ 758.101901][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.108758][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.119237][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.126748][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.155287][ T4530] NILFS (loop6): discard dirty page: offset=614400, ino=18 [ 758.161922][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.176075][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.201753][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.205399][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.233373][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.240913][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.240937][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.240955][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.251234][T10465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.271975][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.310769][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.331512][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.354518][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.391909][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.401831][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.422135][ T4530] NILFS (loop6): discard dirty page: offset=618496, ino=18 [ 758.428771][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.429365][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.472252][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.479515][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.481924][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.505104][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.522928][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.530200][ T4530] NILFS (loop6): discard dirty page: offset=622592, ino=18 [ 758.552031][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.594784][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.605061][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.615724][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.648207][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.655375][T10465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.660745][ T4379] ERROR: (device loop5): diWrite: ixpxd invalid [ 758.660745][ T4379] [ 758.682616][ T4379] ERROR: (device loop5): txCommit: [ 758.682616][ T4379] [ 758.690532][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 758.690582][ T4379] jfs_write_inode: jfs_commit_inode failed! [ 758.705453][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 758.722197][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.729499][ T4530] NILFS (loop6): discard dirty page: offset=626688, ino=18 [ 758.732666][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 758.761275][ T7737] [ 758.761275][ T7737] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 758.761275][ T7737] [ 758.781998][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.789407][ T7737] [ 758.789407][ T7737] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 758.789407][ T7737] [ 758.812893][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 758.823306][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.830560][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.831622][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 758.895902][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 758.903888][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 758.913080][ T4530] NILFS (loop6): discard dirty page: offset=630784, ino=18 [ 758.920502][T10465] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.939565][T10465] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.952315][ T9333] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 758.959984][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 759.013245][T10465] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.092404][T10465] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.171953][ T9333] usb 4-1: Using ep0 maxpacket: 16 [ 759.189578][ T9333] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.260421][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 759.365711][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 759.385811][ T9333] usb 4-1: config 0 interface 0 has no altsetting 0 [ 759.467997][ T9333] usb 4-1: New USB device found, idVendor=046d, idProduct=c094, bcdDevice= 0.00 [ 759.484489][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 759.575071][ T4530] NILFS (loop6): discard dirty page: offset=634880, ino=18 [ 759.611052][ T9333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.676760][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 759.785945][ T9333] usb 4-1: config 0 descriptor?? [ 759.852161][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 759.859444][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 759.901948][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 759.919413][ T4530] NILFS (loop6): discard dirty page: offset=638976, ino=18 [ 759.927864][T10578] loop4: detected capacity change from 0 to 1024 [ 759.934354][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 759.941614][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.004995][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.039591][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.058094][T10578] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 760.095058][ T4530] NILFS (loop6): discard dirty page: offset=643072, ino=18 [ 760.102705][ T4557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.106550][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.136987][ T4557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.157840][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 760.164799][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.173171][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.180602][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.188863][ T4530] NILFS (loop6): discard dirty page: offset=647168, ino=18 [ 760.209002][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.219221][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.236343][ T26] audit: type=1804 audit(1738309168.677:75): pid=10578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1604" name="/newroot/337/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 760.269199][ T9333] hid-generic 0003:046D:C094.0005: unbalanced collection at end of report description [ 760.325774][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.352945][ T9333] hid-generic: probe of 0003:046D:C094.0005 failed with error -22 [ 760.405283][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.467973][ T4530] NILFS (loop6): discard dirty page: offset=651264, ino=18 [ 760.491516][ T9333] usb 4-1: USB disconnect, device number 11 [ 760.508862][ T4557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.553559][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.571695][ T4557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.582230][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 760.640121][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.660668][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.668061][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.675370][ T4530] NILFS (loop6): discard dirty page: offset=655360, ino=18 [ 760.691958][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.700127][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.716684][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 760.737893][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.791822][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.799610][ T4530] NILFS (loop6): discard dirty page: offset=659456, ino=18 [ 760.819442][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.828461][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.856368][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.869919][T10588] loop0: detected capacity change from 0 to 1024 [ 760.914337][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 760.947594][ T4530] NILFS (loop6): discard dirty page: offset=0, ino=3 [ 760.956188][ T4530] NILFS (loop6): discard dirty block: blocknr=42, size=1024 [ 760.969158][ T4530] NILFS (loop6): discard dirty block: blocknr=43, size=1024 [ 760.980716][ T4530] NILFS (loop6): discard dirty block: blocknr=44, size=1024 [ 761.001034][T10591] loop4: detected capacity change from 0 to 64 [ 761.040365][T10591] syz.4.1605: attempt to access beyond end of device [ 761.040365][T10591] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 761.059231][T10591] Buffer I/O error on dev loop4, logical block 512, async page read [ 761.075788][ T4530] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 761.145644][T10591] syz.4.1605: attempt to access beyond end of device [ 761.145644][T10591] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 761.163118][ T4530] NILFS (loop6): discard dirty page: offset=65536, ino=3 [ 761.170807][ T4530] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 761.180276][ T4530] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 761.196444][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 761.203914][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 761.212144][ T4530] NILFS (loop6): discard dirty page: offset=69632, ino=3 [ 761.219217][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 761.227380][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 761.234802][T10591] Buffer I/O error on dev loop4, logical block 56576, async page read [ 761.243082][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 761.250972][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 761.259239][ T26] audit: type=1800 audit(1738309169.707:76): pid=10592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1607" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 761.259390][ T4530] NILFS (loop6): discard dirty page: offset=73728, ino=3 [ 761.424537][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 761.445364][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 761.466007][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 761.483996][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 761.523014][ T4530] NILFS (loop6): discard dirty page: offset=77824, ino=3 [ 761.535775][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 761.889943][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 761.949750][ T4533] hfsplus: b-tree write err: -5, ino 4 [ 761.954141][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 761.966648][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 761.978283][ T4530] NILFS (loop6): discard dirty page: offset=81920, ino=3 [ 761.985956][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 761.995632][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 762.003067][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 762.010353][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 762.025575][ T4530] NILFS (loop6): discard dirty page: offset=86016, ino=3 [ 762.035292][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 762.042851][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 762.050299][ T4530] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 762.058003][ T4530] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 762.073054][ T9379] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 762.150421][ T9379] NILFS (loop6): discard dirty page: offset=0, ino=6 [ 762.170603][ T9379] NILFS (loop6): discard dirty block: blocknr=35, size=1024 [ 762.193134][ T9379] NILFS (loop6): discard dirty block: blocknr=36, size=1024 [ 762.206688][ T9379] NILFS (loop6): discard dirty block: blocknr=37, size=1024 [ 762.252088][ T9379] NILFS (loop6): discard dirty block: blocknr=38, size=1024 [ 762.285145][T10609] loop5: detected capacity change from 0 to 64 [ 762.303524][ T9379] NILFS (loop6): discard dirty page: offset=0, ino=5 [ 762.310241][ T9379] NILFS (loop6): discard dirty block: blocknr=41, size=1024 [ 762.356554][T10610] loop0: detected capacity change from 0 to 128 [ 762.402186][T10609] syz.5.1610: attempt to access beyond end of device [ 762.402186][T10609] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 762.406043][T10610] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 762.424240][ T9379] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 762.461479][ T9379] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 762.480582][T10602] loop3: detected capacity change from 0 to 4096 [ 762.495421][T10602] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 762.543576][ T9379] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 762.552764][T10609] Buffer I/O error on dev loop5, logical block 512, async page read [ 762.587573][T10609] syz.5.1610: attempt to access beyond end of device [ 762.587573][T10609] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 762.683711][T10609] Buffer I/O error on dev loop5, logical block 56576, async page read [ 764.409352][T10624] loop7: detected capacity change from 0 to 64 [ 764.552024][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 764.756456][ T4251] sysv_free_block: flc_count > flc_size [ 764.762267][ T4251] sysv_free_block: flc_count > flc_size [ 764.767870][ T4251] sysv_free_block: flc_count > flc_size [ 764.778073][ T4251] sysv_free_block: flc_count > flc_size [ 764.783865][ T4251] sysv_free_block: flc_count > flc_size [ 764.790440][ T4251] sysv_free_block: flc_count > flc_size [ 764.845060][ T4251] sysv_free_block: flc_count > flc_size [ 765.149104][ T4251] sysv_free_block: flc_count > flc_size [ 765.656071][ T4251] sysv_free_block: flc_count > flc_size [ 765.691088][ T4251] sysv_free_block: flc_count > flc_size [ 765.708010][ T4251] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 765.854852][T10621] loop4: detected capacity change from 0 to 32768 [ 766.000162][T10630] loop3: detected capacity change from 0 to 1024 [ 766.088297][T10630] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 766.252065][ T26] audit: type=1804 audit(1738309174.597:77): pid=10630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1615" name="/newroot/334/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 766.914813][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 767.078583][T10460] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 767.637121][T10645] loop0: detected capacity change from 0 to 64 [ 767.649843][T10645] syz.0.1623: attempt to access beyond end of device [ 767.649843][T10645] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 767.673564][T10645] Buffer I/O error on dev loop0, logical block 512, async page read [ 767.681626][T10645] syz.0.1623: attempt to access beyond end of device [ 767.681626][T10645] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 767.699572][T10645] Buffer I/O error on dev loop0, logical block 56576, async page read [ 767.722463][ T4530] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.410764][T10652] loop4: detected capacity change from 0 to 32768 [ 768.594339][ T4530] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.622315][T10652] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 768.665076][ T26] audit: type=1800 audit(1738309177.107:78): pid=10652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1619" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 770.045681][T10659] loop7: detected capacity change from 0 to 4096 [ 770.242158][T10659] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 770.261616][ T4256] ocfs2: Unmounting device (7,4) on (node local) [ 770.403349][ T4530] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.487843][T10672] loop4: detected capacity change from 0 to 128 [ 770.569053][T10672] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 770.659674][ T4530] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.044304][ T4256] sysv_free_block: flc_count > flc_size [ 774.050764][ T4256] sysv_free_block: flc_count > flc_size [ 774.097173][ T4256] sysv_free_block: flc_count > flc_size [ 774.151477][ T4256] sysv_free_block: flc_count > flc_size [ 774.178256][ T4256] sysv_free_block: flc_count > flc_size [ 774.248620][ T4256] sysv_free_block: flc_count > flc_size [ 774.275215][ T4256] sysv_free_block: flc_count > flc_size [ 774.280835][ T4256] sysv_free_block: flc_count > flc_size [ 774.318783][ T4256] sysv_free_block: flc_count > flc_size [ 774.340864][ T4256] sysv_free_block: flc_count > flc_size [ 774.362574][ T4256] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 774.687342][T10696] loop4: detected capacity change from 0 to 64 [ 778.491235][T10731] loop7: detected capacity change from 0 to 4096 [ 779.135430][T10731] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 779.576676][T10727] loop4: detected capacity change from 0 to 128 [ 779.913036][T10727] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 780.874704][ T4256] sysv_free_block: flc_count > flc_size [ 780.912265][ T4256] sysv_free_block: flc_count > flc_size [ 780.917880][ T4256] sysv_free_block: flc_count > flc_size [ 780.946914][ T4256] sysv_free_block: flc_count > flc_size [ 780.976084][ T4256] sysv_free_block: flc_count > flc_size [ 781.033763][ T4256] sysv_free_block: flc_count > flc_size [ 781.039436][ T4256] sysv_free_block: flc_count > flc_size [ 781.061906][ T4256] sysv_free_block: flc_count > flc_size [ 781.067505][ T4256] sysv_free_block: flc_count > flc_size [ 781.101014][ T4256] sysv_free_block: flc_count > flc_size [ 781.132541][ T4256] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 781.197546][T10747] loop5: detected capacity change from 0 to 1024 [ 781.605370][ T4530] device hsr_slave_0 left promiscuous mode [ 781.652267][ T4530] device hsr_slave_1 left promiscuous mode [ 781.676593][ T26] audit: type=1800 audit(1738309190.117:79): pid=10754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1647" name="bus" dev="loop5" ino=26 res=0 errno=0 [ 781.696922][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.720013][ T4530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.778400][ T4530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.840837][ T4530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.985654][ T4530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.934546][ T4530] device bridge_slave_1 left promiscuous mode [ 782.940839][ T4530] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.989927][ T4533] hfsplus: b-tree write err: -5, ino 4 [ 783.032612][ T4530] device bridge_slave_0 left promiscuous mode [ 783.055157][ T4530] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.103829][T10743] loop3: detected capacity change from 0 to 32768 [ 783.146837][T10743] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1644 (10743) [ 783.279988][T10743] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 783.301242][ T4530] device veth1_macvtap left promiscuous mode [ 783.310572][ T4530] device veth0_macvtap left promiscuous mode [ 783.338699][ T4530] device veth1_vlan left promiscuous mode [ 783.372125][ T4530] device veth0_vlan left promiscuous mode [ 783.372673][T10743] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 783.475810][T10743] BTRFS info (device loop3): setting nodatacow, compression disabled [ 783.492109][T10743] BTRFS info (device loop3): doing ref verification [ 783.502467][T10743] BTRFS info (device loop3): turning off barriers [ 783.539496][T10743] BTRFS info (device loop3): enabling ssd optimizations [ 783.561204][T10743] BTRFS info (device loop3): using spread ssd allocation scheme [ 783.583996][T10743] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 783.862315][T10743] BTRFS info (device loop3): force lzo compression, level 0 [ 783.891266][T10743] BTRFS info (device loop3): turning on sync discard [ 783.902966][T10743] BTRFS info (device loop3): using free space tree [ 784.228704][T10743] BTRFS error (device loop3): open_ctree failed [ 785.126866][T10801] loop7: detected capacity change from 0 to 128 [ 785.212025][T10801] VFS: Found a Xenix FS (block size = 1024) on device loop7 [ 787.322797][T10465] sysv_free_block: flc_count > flc_size [ 787.331636][T10465] sysv_free_block: flc_count > flc_size [ 787.375667][T10465] sysv_free_block: flc_count > flc_size [ 787.410666][T10465] sysv_free_block: flc_count > flc_size [ 787.434054][T10465] sysv_free_block: flc_count > flc_size [ 787.439745][T10465] sysv_free_block: flc_count > flc_size [ 787.445510][T10465] sysv_free_block: flc_count > flc_size [ 787.451208][T10465] sysv_free_block: flc_count > flc_size [ 787.457301][T10465] sysv_free_block: flc_count > flc_size [ 787.463571][T10465] sysv_free_block: flc_count > flc_size [ 787.469927][T10465] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 787.751556][T10813] loop7: detected capacity change from 0 to 4096 [ 788.683486][T10813] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 789.303068][T10823] autofs4:pid:10823:autofs_fill_super: called with bogus options [ 790.090217][ T4530] team0 (unregistering): Port device team_slave_1 removed [ 790.235315][ T4530] team0 (unregistering): Port device team_slave_0 removed [ 790.830653][ T4530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.963304][ T4530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.659172][T10842] loop3: detected capacity change from 0 to 128 [ 791.713938][T10842] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 793.635463][ T4249] sysv_free_block: flc_count > flc_size [ 793.655171][ T4249] sysv_free_block: flc_count > flc_size [ 793.660770][ T4249] sysv_free_block: flc_count > flc_size [ 793.679022][ T4249] sysv_free_block: flc_count > flc_size [ 793.684837][ T4249] sysv_free_block: flc_count > flc_size [ 793.690445][ T4249] sysv_free_block: flc_count > flc_size [ 793.696430][ T4249] sysv_free_block: flc_count > flc_size [ 793.704536][ T4249] sysv_free_block: flc_count > flc_size [ 793.710116][ T4249] sysv_free_block: flc_count > flc_size [ 793.730310][ T4249] sysv_free_block: flc_count > flc_size [ 793.743189][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 794.232958][ T4530] bond0 (unregistering): Released all slaves [ 794.340676][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1653'. [ 795.038034][T10868] loop0: detected capacity change from 0 to 4096 [ 796.038235][T10868] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 796.744713][T10887] loop7: detected capacity change from 0 to 64 [ 796.858540][T10887] syz.7.1678: attempt to access beyond end of device [ 796.858540][T10887] loop7: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 796.899767][T10887] Buffer I/O error on dev loop7, logical block 512, async page read [ 796.916903][T10887] syz.7.1678: attempt to access beyond end of device [ 796.916903][T10887] loop7: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 797.084557][T10887] Buffer I/O error on dev loop7, logical block 56576, async page read [ 798.872067][ T27] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 799.071970][ T27] usb 8-1: Using ep0 maxpacket: 16 [ 799.079268][ T27] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.125382][ T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 799.647180][ T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 799.698039][ T27] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 799.761278][ T27] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 799.823932][ T27] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 799.855621][ T27] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 799.885815][ T27] usb 8-1: Manufacturer: syz [ 799.896594][ T27] usb 8-1: config 0 descriptor?? [ 800.672059][ T27] rc_core: IR keymap rc-hauppauge not found [ 800.683786][ T27] Registered IR keymap rc-empty [ 800.723607][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 800.831997][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 800.862518][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 800.969494][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input30 [ 801.219448][T10938] loop4: detected capacity change from 0 to 1024 [ 801.266819][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 801.357958][ T26] audit: type=1800 audit(1738309209.797:80): pid=10938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1691" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 801.419780][ T4557] hfsplus: b-tree write err: -5, ino 4 [ 801.432677][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 801.572200][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 801.642182][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 801.672053][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 801.702357][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 801.791996][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 801.858871][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 801.922059][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 801.972066][ T27] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 803.065985][ T27] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 803.161896][ T27] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 803.247038][ T27] usb 8-1: USB disconnect, device number 2 [ 803.563369][T10969] loop5: detected capacity change from 0 to 64 [ 804.930724][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1703'. [ 804.951598][T10984] loop5: detected capacity change from 0 to 1024 [ 805.063237][ T26] audit: type=1800 audit(1738309213.507:81): pid=10984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1702" name="bus" dev="loop5" ino=26 res=0 errno=0 [ 805.107300][ T4539] hfsplus: b-tree write err: -5, ino 4 [ 805.512013][ T4298] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 805.972703][ T4298] usb 6-1: Using ep0 maxpacket: 16 [ 805.980276][ T4298] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.015298][ T4298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 806.027132][ T4298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 806.037349][ T4298] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 806.047516][ T4298] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 806.458004][ T4298] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 806.508091][ T4298] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 806.590106][ T4298] usb 6-1: Manufacturer: syz [ 806.723965][ T4298] usb 6-1: config 0 descriptor?? [ 807.192067][ T4298] rc_core: IR keymap rc-hauppauge not found [ 807.198019][ T4298] Registered IR keymap rc-empty [ 807.368618][T11025] loop0: detected capacity change from 0 to 4096 [ 807.376606][T11025] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 807.395306][T11025] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 807.412651][ T4298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 807.445729][ T6613] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 807.462185][ T4298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 807.513509][ T4298] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 808.066690][ T4298] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input31 [ 808.157260][ T4298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 808.212191][ T4298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 808.516048][T11041] loop0: detected capacity change from 0 to 128 [ 808.792937][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.799352][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.861983][ T4298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 808.892238][ T4298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 808.962011][ T4298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 809.023635][ T4298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 809.205768][T11044] loop5: detected capacity change from 0 to 1024 [ 809.218861][ T4298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 809.236488][ T26] audit: type=1800 audit(1738309217.677:82): pid=11044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1715" name="bus" dev="loop5" ino=26 res=0 errno=0 [ 809.287592][ T4307] hfsplus: b-tree write err: -5, ino 4 [ 809.352129][ T4298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 809.381993][ T4298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 809.454993][T11051] loop5: detected capacity change from 0 to 64 [ 809.461988][ T4298] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 809.503123][ T4298] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 809.512742][ T4298] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 809.572113][ T4298] usb 6-1: USB disconnect, device number 4 [ 809.737472][T11051] syz.5.1718: attempt to access beyond end of device [ 809.737472][T11051] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 809.825088][T11051] Buffer I/O error on dev loop5, logical block 512, async page read [ 810.152235][T11051] syz.5.1718: attempt to access beyond end of device [ 810.152235][T11051] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 810.219434][T11051] Buffer I/O error on dev loop5, logical block 56576, async page read [ 810.301178][T11061] loop4: detected capacity change from 0 to 128 [ 810.366336][T11061] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 811.453189][ T4256] sysv_free_block: flc_count > flc_size [ 811.459021][ T4256] sysv_free_block: flc_count > flc_size [ 811.476511][ T4256] sysv_free_block: flc_count > flc_size [ 811.495107][T11072] loop7: detected capacity change from 0 to 256 [ 811.501966][ T4256] sysv_free_block: flc_count > flc_size [ 811.507580][ T4256] sysv_free_block: flc_count > flc_size [ 811.544470][ T4256] sysv_free_block: flc_count > flc_size [ 811.550059][ T4256] sysv_free_block: flc_count > flc_size [ 811.589645][T11072] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 811.598673][ T4256] sysv_free_block: flc_count > flc_size [ 811.608327][ T4256] sysv_free_block: flc_count > flc_size [ 811.624615][ T4256] sysv_free_block: flc_count > flc_size [ 811.642612][ T4256] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 811.775941][ T9665] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 812.011939][ T9665] usb 4-1: Using ep0 maxpacket: 16 [ 812.042331][ T9665] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.083877][ T9665] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 812.097726][ T9665] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 812.141125][ T9665] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 812.178175][ T9665] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 812.210511][ T9665] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 812.276470][ T9665] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 812.328680][ T9665] usb 4-1: Manufacturer: syz [ 812.377832][ T9665] usb 4-1: config 0 descriptor?? [ 812.970485][T11096] loop0: detected capacity change from 0 to 1024 [ 813.232095][ T9665] rc_core: IR keymap rc-hauppauge not found [ 813.238235][ T9665] Registered IR keymap rc-empty [ 813.393511][ T9665] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 813.432237][ T9665] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 813.482606][ T9665] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 813.545782][ T26] audit: type=1800 audit(1738309221.987:83): pid=11105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1729" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 813.596906][ T9665] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input32 [ 813.730036][ T9665] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 813.782469][ T9665] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 813.842180][ T9665] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 813.892631][ T9665] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 813.932022][ T9665] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 813.972095][ T9665] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 814.012569][ T9665] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 814.052475][ T9665] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 814.091924][ T9665] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 814.132089][ T9665] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 814.198549][ T9665] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 814.224567][ T9665] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 814.271297][ T9665] usb 4-1: USB disconnect, device number 12 [ 814.366993][T11117] loop7: detected capacity change from 0 to 8 [ 815.562262][ T26] audit: type=1800 audit(1738309223.987:84): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1732" name="file2" dev="loop7" ino=6 res=0 errno=0 [ 817.449075][T11145] loop7: detected capacity change from 0 to 128 [ 817.512666][T11145] VFS: Found a Xenix FS (block size = 1024) on device loop7 [ 818.068400][ T34] hfsplus: b-tree write err: -5, ino 4 [ 818.622464][T10465] sysv_free_block: flc_count > flc_size [ 818.628087][T10465] sysv_free_block: flc_count > flc_size [ 818.648687][T10465] sysv_free_block: flc_count > flc_size [ 818.701801][T10465] sysv_free_block: flc_count > flc_size [ 818.743811][T10465] sysv_free_block: flc_count > flc_size [ 818.749413][T10465] sysv_free_block: flc_count > flc_size [ 818.801942][T10465] sysv_free_block: flc_count > flc_size [ 818.808390][T10465] sysv_free_block: flc_count > flc_size [ 818.821771][T10465] sysv_free_block: flc_count > flc_size [ 818.834889][T10465] sysv_free_block: flc_count > flc_size [ 818.860477][T10465] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 818.868734][T11160] loop4: detected capacity change from 0 to 64 [ 818.948103][T11160] syz.4.1741: attempt to access beyond end of device [ 818.948103][T11160] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 819.074895][T11160] Buffer I/O error on dev loop4, logical block 512, async page read [ 819.083855][T11160] syz.4.1741: attempt to access beyond end of device [ 819.083855][T11160] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 819.097493][T11160] Buffer I/O error on dev loop4, logical block 56576, async page read [ 819.153630][T11162] loop5: detected capacity change from 0 to 128 [ 819.296624][T10460] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 820.928942][T11184] loop3: detected capacity change from 0 to 64 [ 822.130610][T11196] loop5: detected capacity change from 0 to 1024 [ 822.503713][T11173] loop0: detected capacity change from 0 to 32768 [ 822.576395][T11173] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1743 (11173) [ 822.687194][T11173] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 823.219912][T11173] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 823.252062][T11173] BTRFS info (device loop0): force zlib compression, level 3 [ 823.299143][T11173] BTRFS info (device loop0): force clearing of disk cache [ 823.322038][T11173] BTRFS info (device loop0): setting nodatasum [ 823.328328][T11173] BTRFS info (device loop0): doing ref verification [ 823.353140][ T26] audit: type=1800 audit(1738309231.797:85): pid=11202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1749" name="bus" dev="loop5" ino=26 res=0 errno=0 [ 823.369066][T11208] loop3: detected capacity change from 0 to 128 [ 823.396862][T11173] BTRFS info (device loop0): allowing degraded mounts [ 823.409702][T11208] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 823.432483][T11173] BTRFS info (device loop0): enabling disk space caching [ 823.472046][T11173] BTRFS info (device loop0): disk space caching is enabled [ 823.637666][T11173] BTRFS error (device loop0): open_ctree failed [ 825.488663][ T4249] sysv_free_block: flc_count > flc_size [ 825.495057][ T4249] sysv_free_block: flc_count > flc_size [ 825.512129][ T4249] sysv_free_block: flc_count > flc_size [ 825.518793][ T4249] sysv_free_block: flc_count > flc_size [ 825.542114][ T4249] sysv_free_block: flc_count > flc_size [ 825.548709][ T4249] sysv_free_block: flc_count > flc_size [ 825.571202][ T4249] sysv_free_block: flc_count > flc_size [ 825.576256][T11240] loop4: detected capacity change from 0 to 8192 [ 825.598339][ T4249] sysv_free_block: flc_count > flc_size [ 825.630866][ T4249] sysv_free_block: flc_count > flc_size [ 825.679406][ T4249] sysv_free_block: flc_count > flc_size [ 825.705193][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 827.778471][T11260] loop7: detected capacity change from 0 to 128 [ 829.429762][ T5666] hfsplus: b-tree write err: -5, ino 4 [ 829.474402][T11286] loop7: detected capacity change from 0 to 64 [ 830.617788][T11297] loop5: detected capacity change from 0 to 128 [ 830.732934][T11297] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 832.216978][ T7737] sysv_free_block: flc_count > flc_size [ 832.234346][ T7737] sysv_free_block: flc_count > flc_size [ 832.302008][ T7737] sysv_free_block: flc_count > flc_size [ 832.315591][ T7737] sysv_free_block: flc_count > flc_size [ 832.334656][ T7737] sysv_free_block: flc_count > flc_size [ 832.368397][ T7737] sysv_free_block: flc_count > flc_size [ 832.414384][ T7737] sysv_free_block: flc_count > flc_size [ 832.419989][ T7737] sysv_free_block: flc_count > flc_size [ 832.455306][ T7737] sysv_free_block: flc_count > flc_size [ 832.513091][ T7737] sysv_free_block: flc_count > flc_size [ 832.519298][ T7737] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 833.640249][T11322] loop4: detected capacity change from 0 to 4096 [ 833.713314][T11322] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 834.831201][T11346] loop4: detected capacity change from 0 to 1024 [ 834.888818][T11346] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 834.923865][T11350] loop0: detected capacity change from 0 to 1024 [ 834.967786][ T26] audit: type=1804 audit(1738309243.407:86): pid=11346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1777" name="/newroot/377/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 835.255444][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 835.418681][ T26] audit: type=1800 audit(1738309243.857:87): pid=11354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1776" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 835.458360][T11358] loop4: detected capacity change from 0 to 128 [ 835.496557][T11358] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 837.602423][ T4256] sysv_free_block: flc_count > flc_size [ 837.616662][ T4256] sysv_free_block: flc_count > flc_size [ 837.646046][ T4256] sysv_free_block: flc_count > flc_size [ 837.771044][ T4256] sysv_free_block: flc_count > flc_size [ 837.946565][ T4256] sysv_free_block: flc_count > flc_size [ 838.057957][ T4256] sysv_free_block: flc_count > flc_size [ 838.099362][ T4256] sysv_free_block: flc_count > flc_size [ 838.124901][ T4256] sysv_free_block: flc_count > flc_size [ 838.130581][ T4256] sysv_free_block: flc_count > flc_size [ 838.162147][ T4256] sysv_free_block: flc_count > flc_size [ 838.168325][ T4256] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 839.415170][T11392] loop7: detected capacity change from 0 to 4096 [ 839.476900][T11392] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 840.009178][ T4530] hfsplus: b-tree write err: -5, ino 4 [ 840.416321][T11413] loop7: detected capacity change from 0 to 128 [ 840.468914][T10460] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 840.512762][T11417] loop0: detected capacity change from 0 to 64 [ 840.617469][T11417] syz.0.1790: attempt to access beyond end of device [ 840.617469][T11417] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 840.642052][T11417] Buffer I/O error on dev loop0, logical block 512, async page read [ 840.665427][T11417] syz.0.1790: attempt to access beyond end of device [ 840.665427][T11417] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 840.684425][T11417] Buffer I/O error on dev loop0, logical block 56576, async page read [ 841.215168][T11427] loop5: detected capacity change from 0 to 128 [ 841.251974][T11427] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 842.478374][ T7737] sysv_free_block: flc_count > flc_size [ 842.486846][ T7737] sysv_free_block: flc_count > flc_size [ 842.515712][ T7737] sysv_free_block: flc_count > flc_size [ 842.562190][ T7737] sysv_free_block: flc_count > flc_size [ 842.577820][ T7737] sysv_free_block: flc_count > flc_size [ 842.602968][ T7737] sysv_free_block: flc_count > flc_size [ 842.672089][ T7737] sysv_free_block: flc_count > flc_size [ 842.700324][ T7737] sysv_free_block: flc_count > flc_size [ 842.729568][ T7737] sysv_free_block: flc_count > flc_size [ 842.735506][ T7737] sysv_free_block: flc_count > flc_size [ 842.741690][ T7737] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 844.129565][T11456] loop5: detected capacity change from 0 to 1024 [ 844.495190][ T26] audit: type=1800 audit(1738309252.937:88): pid=11463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1801" name="bus" dev="loop5" ino=26 res=0 errno=0 [ 844.853800][T11459] loop3: detected capacity change from 0 to 4096 [ 844.899711][T11459] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 845.427548][T11486] loop4: detected capacity change from 0 to 1024 [ 845.510079][T11486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 845.581069][ T26] audit: type=1804 audit(1738309254.017:89): pid=11486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1805" name="/newroot/384/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 845.785193][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 847.279834][ T4530] hfsplus: b-tree write err: -5, ino 4 [ 847.579783][T11509] loop5: detected capacity change from 0 to 128 [ 847.611677][T11509] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 848.547914][ T7737] sysv_free_block: flc_count > flc_size [ 848.555360][ T7737] sysv_free_block: flc_count > flc_size [ 848.569034][ T7737] sysv_free_block: flc_count > flc_size [ 849.471137][ T7737] sysv_free_block: flc_count > flc_size [ 849.479355][ T7737] sysv_free_block: flc_count > flc_size [ 849.512321][ T7737] sysv_free_block: flc_count > flc_size [ 849.532784][ T7737] sysv_free_block: flc_count > flc_size [ 849.538480][ T7737] sysv_free_block: flc_count > flc_size [ 849.591863][ T7737] sysv_free_block: flc_count > flc_size [ 849.597491][ T7737] sysv_free_block: flc_count > flc_size [ 849.619662][T11526] loop0: detected capacity change from 0 to 64 [ 849.642634][ T7737] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 849.966435][T11526] syz.0.1815: attempt to access beyond end of device [ 849.966435][T11526] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 850.044292][T11532] loop5: detected capacity change from 0 to 64 [ 850.092043][T11526] Buffer I/O error on dev loop0, logical block 512, async page read [ 850.110043][T11532] syz.5.1814: attempt to access beyond end of device [ 850.110043][T11532] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 850.138406][T11532] Buffer I/O error on dev loop5, logical block 512, async page read [ 850.151688][T11532] syz.5.1814: attempt to access beyond end of device [ 850.151688][T11532] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 850.186740][T11526] syz.0.1815: attempt to access beyond end of device [ 850.186740][T11526] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 850.215958][T11532] Buffer I/O error on dev loop5, logical block 56576, async page read [ 850.233069][T11526] Buffer I/O error on dev loop0, logical block 56576, async page read [ 851.033108][T11537] loop7: detected capacity change from 0 to 4096 [ 851.211907][T11537] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 851.844810][T11553] loop5: detected capacity change from 0 to 128 [ 854.020848][T11568] loop3: detected capacity change from 0 to 128 [ 854.232752][T11568] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 857.024743][ T4249] sysv_free_block: flc_count > flc_size [ 857.030479][ T4249] sysv_free_block: flc_count > flc_size [ 857.059378][ T4249] sysv_free_block: flc_count > flc_size [ 857.080439][ T4249] sysv_free_block: flc_count > flc_size [ 857.109110][ T4249] sysv_free_block: flc_count > flc_size [ 857.122082][ T4249] sysv_free_block: flc_count > flc_size [ 857.127699][ T4249] sysv_free_block: flc_count > flc_size [ 857.141856][ T4249] sysv_free_block: flc_count > flc_size [ 857.149337][ T4249] sysv_free_block: flc_count > flc_size [ 857.192935][ T4249] sysv_free_block: flc_count > flc_size [ 857.207187][T11585] loop5: detected capacity change from 0 to 64 [ 857.234126][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 857.827716][T11593] loop3: detected capacity change from 0 to 4096 [ 857.848300][T11593] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 859.353968][T11614] loop0: detected capacity change from 0 to 128 [ 860.620378][T11628] loop5: detected capacity change from 0 to 128 [ 860.665865][T11627] loop0: detected capacity change from 0 to 1024 [ 860.696761][T11628] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 861.021942][T11636] loop7: detected capacity change from 0 to 4096 [ 861.029302][T11636] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 861.143866][ T26] audit: type=1800 audit(1738309269.587:90): pid=11639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1838" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 861.228686][T11641] loop7: detected capacity change from 0 to 64 [ 862.208438][T11657] loop4: detected capacity change from 0 to 64 [ 862.273890][T11657] syz.4.1845: attempt to access beyond end of device [ 862.273890][T11657] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 862.322294][T11657] Buffer I/O error on dev loop4, logical block 512, async page read [ 862.355861][T11657] syz.4.1845: attempt to access beyond end of device [ 862.355861][T11657] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 862.414878][T11657] Buffer I/O error on dev loop4, logical block 56576, async page read [ 863.282001][ T7737] sysv_free_block: flc_count > flc_size [ 863.287632][ T7737] sysv_free_block: flc_count > flc_size [ 863.310343][ T7737] sysv_free_block: flc_count > flc_size [ 863.329662][ T7737] sysv_free_block: flc_count > flc_size [ 863.335673][ T7737] sysv_free_block: flc_count > flc_size [ 863.342080][ T7737] sysv_free_block: flc_count > flc_size [ 863.347804][ T7737] sysv_free_block: flc_count > flc_size [ 863.373545][ T7737] sysv_free_block: flc_count > flc_size [ 863.379208][ T7737] sysv_free_block: flc_count > flc_size [ 863.391031][ T7737] sysv_free_block: flc_count > flc_size [ 863.397405][ T7737] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 863.662216][ T4662] hfsplus: b-tree write err: -5, ino 4 [ 864.813609][T11686] loop0: detected capacity change from 0 to 128 [ 867.604618][T10460] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 869.267376][T11724] loop7: detected capacity change from 0 to 128 [ 869.339617][T11724] VFS: Found a Xenix FS (block size = 1024) on device loop7 [ 869.589358][T11728] loop0: detected capacity change from 0 to 1024 [ 870.339480][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.351854][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.395596][T10465] sysv_free_block: flc_count > flc_size [ 870.401230][T10465] sysv_free_block: flc_count > flc_size [ 870.453786][T10465] sysv_free_block: flc_count > flc_size [ 870.459433][T10465] sysv_free_block: flc_count > flc_size [ 870.503247][T10465] sysv_free_block: flc_count > flc_size [ 870.508875][T10465] sysv_free_block: flc_count > flc_size [ 870.562749][T10465] sysv_free_block: flc_count > flc_size [ 870.568359][T10465] sysv_free_block: flc_count > flc_size [ 870.597026][T10465] sysv_free_block: flc_count > flc_size [ 870.632624][T10465] sysv_free_block: flc_count > flc_size [ 870.659171][T10465] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 870.881899][T11743] loop4: detected capacity change from 0 to 4096 [ 870.902886][T11743] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 872.564240][ T4266] Bluetooth: hci5: command 0x0406 tx timeout [ 873.592738][ T4662] hfsplus: b-tree write err: -5, ino 4 [ 873.710724][T11760] loop4: detected capacity change from 0 to 128 [ 874.583786][T11763] loop0: detected capacity change from 0 to 64 [ 874.618251][T11763] syz.0.1866: attempt to access beyond end of device [ 874.618251][T11763] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 874.641782][ T6613] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 874.716267][T11763] Buffer I/O error on dev loop0, logical block 512, async page read [ 874.725650][T11763] syz.0.1866: attempt to access beyond end of device [ 874.725650][T11763] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 874.739854][T11763] Buffer I/O error on dev loop0, logical block 56576, async page read [ 875.238806][T11773] loop5: detected capacity change from 0 to 64 [ 877.066974][T11795] loop3: detected capacity change from 0 to 128 [ 877.117844][T11795] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 878.256419][ T4249] sysv_free_block: flc_count > flc_size [ 878.270919][ T4249] sysv_free_block: flc_count > flc_size [ 878.291896][ T4249] sysv_free_block: flc_count > flc_size [ 878.297896][ T4249] sysv_free_block: flc_count > flc_size [ 878.330404][ T4249] sysv_free_block: flc_count > flc_size [ 878.365718][ T4249] sysv_free_block: flc_count > flc_size [ 878.398262][ T4249] sysv_free_block: flc_count > flc_size [ 878.430701][ T4249] sysv_free_block: flc_count > flc_size [ 878.462619][ T4249] sysv_free_block: flc_count > flc_size [ 878.487968][ T4249] sysv_free_block: flc_count > flc_size [ 878.497167][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 878.575470][T11806] loop0: detected capacity change from 0 to 1024 [ 879.005918][T11815] loop3: detected capacity change from 0 to 4096 [ 880.691379][T11815] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 881.312642][T11825] loop4: detected capacity change from 0 to 64 [ 882.490681][ T4600] hfsplus: b-tree write err: -5, ino 4 [ 884.497116][T11861] loop5: detected capacity change from 0 to 128 [ 884.575486][T11861] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 885.036869][T11867] loop0: detected capacity change from 0 to 64 [ 885.406729][T11867] syz.0.1887: attempt to access beyond end of device [ 885.406729][T11867] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 885.542160][T11867] Buffer I/O error on dev loop0, logical block 512, async page read [ 885.550276][T11867] syz.0.1887: attempt to access beyond end of device [ 885.550276][T11867] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 885.589765][ T7737] sysv_free_block: flc_count > flc_size [ 885.611693][ T7737] sysv_free_block: flc_count > flc_size [ 885.651847][ T7737] sysv_free_block: flc_count > flc_size [ 885.658925][T11867] Buffer I/O error on dev loop0, logical block 56576, async page read [ 885.730193][ T7737] sysv_free_block: flc_count > flc_size [ 885.777221][ T7737] sysv_free_block: flc_count > flc_size [ 885.808830][ T7737] sysv_free_block: flc_count > flc_size [ 885.821973][ T7737] sysv_free_block: flc_count > flc_size [ 885.857896][ T7737] sysv_free_block: flc_count > flc_size [ 885.894476][T11873] loop3: detected capacity change from 0 to 64 [ 885.923772][ T7737] sysv_free_block: flc_count > flc_size [ 885.929372][ T7737] sysv_free_block: flc_count > flc_size [ 885.937079][ T7737] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 886.002857][T11873] syz.3.1890: attempt to access beyond end of device [ 886.002857][T11873] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 886.111986][T11873] Buffer I/O error on dev loop3, logical block 512, async page read [ 886.169306][T11873] syz.3.1890: attempt to access beyond end of device [ 886.169306][T11873] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 886.192140][T11873] Buffer I/O error on dev loop3, logical block 56576, async page read [ 887.652861][T11899] loop5: detected capacity change from 0 to 1024 [ 888.812987][ T26] audit: type=1800 audit(1738309297.257:91): pid=11909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1894" name="bus" dev="loop5" ino=26 res=0 errno=0 [ 888.833251][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.459622][T11915] loop3: detected capacity change from 0 to 128 [ 889.487832][T11915] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 890.940534][ T4249] sysv_free_block: flc_count > flc_size [ 890.955890][ T4249] sysv_free_block: flc_count > flc_size [ 890.961557][ T4249] sysv_free_block: flc_count > flc_size [ 890.971968][ T4249] sysv_free_block: flc_count > flc_size [ 890.977547][ T4249] sysv_free_block: flc_count > flc_size [ 891.017757][ T4249] sysv_free_block: flc_count > flc_size [ 891.033020][ T4249] sysv_free_block: flc_count > flc_size [ 891.038806][ T4249] sysv_free_block: flc_count > flc_size [ 891.054669][ T4249] sysv_free_block: flc_count > flc_size [ 891.098895][ T4249] sysv_free_block: flc_count > flc_size [ 891.123006][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 891.404968][T11929] loop3: detected capacity change from 0 to 4096 [ 891.421295][T11929] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 891.689751][ T4662] hfsplus: b-tree write err: -5, ino 4 [ 892.534413][T11938] loop0: detected capacity change from 0 to 64 [ 892.558252][T11940] loop3: detected capacity change from 0 to 64 [ 893.178498][T11940] syz.3.1903: attempt to access beyond end of device [ 893.178498][T11940] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 893.247887][T11940] Buffer I/O error on dev loop3, logical block 512, async page read [ 893.256526][T11940] syz.3.1903: attempt to access beyond end of device [ 893.256526][T11940] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 893.270373][T11940] Buffer I/O error on dev loop3, logical block 56576, async page read [ 893.508772][T11950] loop4: detected capacity change from 0 to 64 [ 893.608352][T11950] syz.4.1907: attempt to access beyond end of device [ 893.608352][T11950] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 893.703065][T11950] Buffer I/O error on dev loop4, logical block 512, async page read [ 893.731701][T11950] syz.4.1907: attempt to access beyond end of device [ 893.731701][T11950] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 893.792173][T11950] Buffer I/O error on dev loop4, logical block 56576, async page read [ 895.377177][T11964] loop3: detected capacity change from 0 to 128 [ 895.434066][T11964] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 897.327789][ T4249] sysv_free_block: flc_count > flc_size [ 897.333910][ T4249] sysv_free_block: flc_count > flc_size [ 897.339453][ T4249] sysv_free_block: flc_count > flc_size [ 897.361901][ T4249] sysv_free_block: flc_count > flc_size [ 897.367501][ T4249] sysv_free_block: flc_count > flc_size [ 897.388782][ T4249] sysv_free_block: flc_count > flc_size [ 897.418255][ T4249] sysv_free_block: flc_count > flc_size [ 897.445011][ T4249] sysv_free_block: flc_count > flc_size [ 897.471551][ T4249] sysv_free_block: flc_count > flc_size [ 897.526106][ T4249] sysv_free_block: flc_count > flc_size [ 897.588172][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 897.691302][T11977] loop0: detected capacity change from 0 to 1024 [ 898.044939][T11982] loop3: detected capacity change from 0 to 4096 [ 898.065651][T11982] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 898.110368][T11984] loop4: detected capacity change from 0 to 128 [ 898.490409][ T4379] hfsplus: b-tree write err: -5, ino 4 [ 899.822817][T11994] loop7: detected capacity change from 0 to 64 [ 900.052250][T11996] loop3: detected capacity change from 0 to 64 [ 900.103242][T11996] syz.3.1920: attempt to access beyond end of device [ 900.103242][T11996] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 900.156737][T11996] Buffer I/O error on dev loop3, logical block 512, async page read [ 900.165490][T11996] syz.3.1920: attempt to access beyond end of device [ 900.165490][T11996] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 900.195086][T11996] Buffer I/O error on dev loop3, logical block 56576, async page read [ 900.355547][ T26] audit: type=1800 audit(1738309308.797:92): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1915" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 900.717732][T12010] loop7: detected capacity change from 0 to 128 [ 900.737201][T12010] VFS: Found a Xenix FS (block size = 1024) on device loop7 [ 901.882460][T10465] sysv_free_block: flc_count > flc_size [ 901.893189][T10465] sysv_free_block: flc_count > flc_size [ 901.898825][T10465] sysv_free_block: flc_count > flc_size [ 901.919164][ T4600] hfsplus: b-tree write err: -5, ino 4 [ 901.932390][T10465] sysv_free_block: flc_count > flc_size [ 901.937998][T10465] sysv_free_block: flc_count > flc_size [ 901.968443][T10465] sysv_free_block: flc_count > flc_size [ 901.992445][T10465] sysv_free_block: flc_count > flc_size [ 902.008272][T10465] sysv_free_block: flc_count > flc_size [ 902.023340][T10465] sysv_free_block: flc_count > flc_size [ 902.057141][T10465] sysv_free_block: flc_count > flc_size [ 902.104128][T10465] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 903.142495][T12028] loop7: detected capacity change from 0 to 128 [ 904.003616][T10460] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 906.170451][T12037] loop3: detected capacity change from 0 to 4096 [ 906.215126][T12037] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 906.480832][T12042] loop4: detected capacity change from 0 to 64 [ 906.496691][T12043] loop5: detected capacity change from 0 to 64 [ 906.692222][T12042] syz.4.1935: attempt to access beyond end of device [ 906.692222][T12042] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 906.769156][T12042] Buffer I/O error on dev loop4, logical block 512, async page read [ 906.786637][T12042] syz.4.1935: attempt to access beyond end of device [ 906.786637][T12042] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 906.904539][T12042] Buffer I/O error on dev loop4, logical block 56576, async page read [ 907.167778][T12049] loop3: detected capacity change from 0 to 128 [ 907.177201][T12049] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 907.808221][T12051] loop0: detected capacity change from 0 to 1024 [ 908.221717][ T4249] sysv_free_block: flc_count > flc_size [ 908.231307][ T4249] sysv_free_block: flc_count > flc_size [ 908.281992][ T4249] sysv_free_block: flc_count > flc_size [ 908.287687][ T4249] sysv_free_block: flc_count > flc_size [ 908.297853][ T4249] sysv_free_block: flc_count > flc_size [ 908.318988][ T4249] sysv_free_block: flc_count > flc_size [ 908.331296][ T4249] sysv_free_block: flc_count > flc_size [ 908.368018][ T4249] sysv_free_block: flc_count > flc_size [ 908.380576][ T4249] sysv_free_block: flc_count > flc_size [ 908.394382][ T4249] sysv_free_block: flc_count > flc_size [ 908.462458][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 909.208039][ T26] audit: type=1800 audit(1738309317.647:93): pid=12068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1937" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 911.388327][T12077] loop7: detected capacity change from 0 to 64 [ 911.564652][T12077] syz.7.1945: attempt to access beyond end of device [ 911.564652][T12077] loop7: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 911.628850][T12080] loop3: detected capacity change from 0 to 4096 [ 911.660293][T12080] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 911.672057][T12077] Buffer I/O error on dev loop7, logical block 512, async page read [ 911.717539][T12077] syz.7.1945: attempt to access beyond end of device [ 911.717539][T12077] loop7: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 911.742319][T12077] Buffer I/O error on dev loop7, logical block 56576, async page read [ 911.982626][T12082] loop5: detected capacity change from 0 to 64 [ 912.247977][T12084] loop4: detected capacity change from 0 to 64 [ 912.724440][T12084] syz.4.1948: attempt to access beyond end of device [ 912.724440][T12084] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 912.930096][T12084] Buffer I/O error on dev loop4, logical block 512, async page read [ 912.962370][T12084] syz.4.1948: attempt to access beyond end of device [ 912.962370][T12084] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 912.986569][T12084] Buffer I/O error on dev loop4, logical block 56576, async page read [ 914.346315][ T4533] hfsplus: b-tree write err: -5, ino 4 [ 914.776672][T12099] autofs4:pid:12099:autofs_fill_super: called with bogus options [ 917.734926][T12125] loop0: detected capacity change from 0 to 4096 [ 917.791613][T12125] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 917.998372][T12127] loop4: detected capacity change from 0 to 64 [ 920.025884][T12137] loop0: detected capacity change from 0 to 64 [ 920.108476][T12137] syz.0.1961: attempt to access beyond end of device [ 920.108476][T12137] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 920.140533][T12140] loop3: detected capacity change from 0 to 64 [ 920.149258][T12137] Buffer I/O error on dev loop0, logical block 512, async page read [ 920.250918][T12137] syz.0.1961: attempt to access beyond end of device [ 920.250918][T12137] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 920.474311][T12140] syz.3.1963: attempt to access beyond end of device [ 920.474311][T12140] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 920.523349][T12137] Buffer I/O error on dev loop0, logical block 56576, async page read [ 920.747735][T12140] Buffer I/O error on dev loop3, logical block 512, async page read [ 920.880353][T12140] syz.3.1963: attempt to access beyond end of device [ 920.880353][T12140] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 920.893789][T12140] Buffer I/O error on dev loop3, logical block 56576, async page read [ 921.734044][T12149] loop0: detected capacity change from 0 to 64 [ 925.479168][T12166] autofs4:pid:12166:autofs_fill_super: called with bogus options [ 926.259787][T12176] loop4: detected capacity change from 0 to 4096 [ 926.276241][T12176] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 926.418256][T12179] loop5: detected capacity change from 0 to 64 [ 928.432584][T12185] loop4: detected capacity change from 0 to 64 [ 928.510710][T12185] syz.4.1975: attempt to access beyond end of device [ 928.510710][T12185] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 928.612141][T12185] Buffer I/O error on dev loop4, logical block 512, async page read [ 929.099395][T12185] syz.4.1975: attempt to access beyond end of device [ 929.099395][T12185] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 929.182313][T12185] Buffer I/O error on dev loop4, logical block 56576, async page read [ 930.323386][T12208] loop3: detected capacity change from 0 to 1024 [ 930.390731][T12208] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 931.393857][T12215] autofs4:pid:12215:autofs_fill_super: called with bogus options [ 931.454195][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.479675][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.763333][ T26] audit: type=1804 audit(1738309340.207:94): pid=12208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1982" name="/newroot/405/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 931.961018][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 932.254103][T12224] loop3: detected capacity change from 0 to 4096 [ 932.273337][T12224] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 932.905834][T12229] loop7: detected capacity change from 0 to 64 [ 935.004123][T12233] loop3: detected capacity change from 0 to 32768 [ 935.259262][T12233] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 935.297499][ T26] audit: type=1800 audit(1738309343.737:95): pid=12233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1989" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 935.925083][T12244] loop0: detected capacity change from 0 to 64 [ 936.039429][ T4249] ocfs2: Unmounting device (7,3) on (node local) [ 936.050986][T12244] syz.0.1992: attempt to access beyond end of device [ 936.050986][T12244] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 936.104468][T12246] loop4: detected capacity change from 0 to 64 [ 936.144914][T12244] Buffer I/O error on dev loop0, logical block 512, async page read [ 936.180130][T12244] syz.0.1992: attempt to access beyond end of device [ 936.180130][T12244] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 936.182283][T12246] syz.4.1993: attempt to access beyond end of device [ 936.182283][T12246] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 936.200306][T12244] Buffer I/O error on dev loop0, logical block 56576, async page read [ 936.238695][T12246] Buffer I/O error on dev loop4, logical block 512, async page read [ 936.251760][T12249] loop5: detected capacity change from 0 to 1024 [ 936.271982][T12246] syz.4.1993: attempt to access beyond end of device [ 936.271982][T12246] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 936.296097][T12246] Buffer I/O error on dev loop4, logical block 56576, async page read [ 936.513010][T12249] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 936.590700][T12255] autofs4:pid:12255:autofs_fill_super: called with bogus options [ 937.289193][ T26] audit: type=1804 audit(1738309345.727:96): pid=12249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1995" name="/newroot/191/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 937.759931][ T7737] EXT4-fs (loop5): unmounting filesystem. [ 938.684477][T12273] loop5: detected capacity change from 0 to 4096 [ 938.720761][T12273] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 939.383263][T12281] loop3: detected capacity change from 0 to 64 [ 939.630378][T12283] loop7: detected capacity change from 0 to 64 [ 946.513100][T12301] autofs4:pid:12301:autofs_fill_super: called with bogus options [ 948.359407][T12304] loop7: detected capacity change from 0 to 1024 [ 949.437623][T12304] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 949.551178][ T26] audit: type=1804 audit(1738309357.987:97): pid=12304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2009" name="/newroot/86/bus/bus" dev="loop7" ino=18 res=1 errno=0 [ 949.857976][T10465] EXT4-fs (loop7): unmounting filesystem. [ 952.790316][T12344] autofs4:pid:12344:autofs_fill_super: called with bogus options [ 953.212356][T12343] loop3: detected capacity change from 0 to 64 [ 956.367825][T12357] loop3: detected capacity change from 0 to 1024 [ 956.389406][T12358] loop4: detected capacity change from 0 to 1024 [ 956.502958][ T4267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 956.513402][ T4267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 956.521342][ T4267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 956.726775][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 956.734870][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 956.745485][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 956.765319][T12358] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 957.182089][ T26] audit: type=1800 audit(1738309365.287:98): pid=12368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2023" name="bus" dev="loop3" ino=26 res=0 errno=0 [ 957.378533][ T4301] hfsplus: b-tree write err: -5, ino 4 [ 957.565427][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 957.808424][ T4834] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.871042][T12359] lo speed is unknown, defaulting to 1000 [ 957.959802][ T4834] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.042663][T12380] loop7: detected capacity change from 0 to 128 [ 958.057509][T12380] VFS: Found a Xenix FS (block size = 1024) on device loop7 [ 958.077227][ T4834] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.285068][ T4834] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.469259][T12384] syz.7.2030: attempt to access beyond end of device [ 958.469259][T12384] loop7: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 958.483298][T12384] Buffer I/O error on dev loop7, logical block 3245768, async page read [ 958.747176][T12386] autofs4:pid:12386:autofs_fill_super: called with bogus options [ 958.797961][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 959.221108][T12384] ================================================================== [ 959.229310][T12384] BUG: KASAN: use-after-free in sysv_new_block+0x788/0x960 [ 959.236540][T12384] Read of size 4 at addr ffff88805125d0c8 by task syz.7.2030/12384 [ 959.244532][T12384] [ 959.246888][T12384] CPU: 1 PID: 12384 Comm: syz.7.2030 Not tainted 6.1.127-syzkaller #0 [ 959.255146][T12384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 959.265216][T12384] Call Trace: [ 959.268549][T12384] [ 959.271492][T12384] dump_stack_lvl+0x1e3/0x2cb [ 959.276210][T12384] ? nf_tcp_handle_invalid+0x642/0x642 [ 959.281699][T12384] ? panic+0x764/0x764 [ 959.285788][T12384] ? _printk+0xd1/0x111 [ 959.289972][T12384] ? __virt_addr_valid+0x17f/0x530 [ 959.295110][T12384] ? __virt_addr_valid+0x17f/0x530 [ 959.300252][T12384] print_report+0x15f/0x4f0 [ 959.304774][T12384] ? __virt_addr_valid+0x17f/0x530 [ 959.309928][T12384] ? __virt_addr_valid+0x17f/0x530 [ 959.315061][T12384] ? __virt_addr_valid+0x45b/0x530 [ 959.320199][T12384] ? __phys_addr+0xb6/0x170 [ 959.324729][T12384] ? sysv_new_block+0x788/0x960 [ 959.329690][T12384] kasan_report+0x136/0x160 [ 959.334215][T12384] ? sysv_new_block+0x788/0x960 [ 959.339094][T12384] sysv_new_block+0x788/0x960 [ 959.343800][T12384] get_block+0x2e7/0x1790 [ 959.348174][T12384] ? create_page_buffers+0x1d2/0x4b0 [ 959.353479][T12384] ? __rwlock_init+0x140/0x140 [ 959.358260][T12384] ? sysv_truncate+0x1050/0x1050 [ 959.363222][T12384] ? attach_page_private+0x110/0x300 [ 959.368535][T12384] ? create_page_buffers+0x24e/0x4b0 [ 959.373846][T12384] __block_write_begin_int+0x544/0x1a30 [ 959.379599][T12384] ? rcu_is_watching+0x11/0xb0 [ 959.384376][T12384] ? sysv_truncate+0x1050/0x1050 [ 959.389335][T12384] ? page_zero_new_buffers+0x650/0x650 [ 959.394822][T12384] ? sysv_truncate+0x1050/0x1050 [ 959.399790][T12384] block_write_begin+0x98/0x1f0 [ 959.404674][T12384] ? sysv_write_begin+0x16/0x60 [ 959.409548][T12384] sysv_write_begin+0x2d/0x60 [ 959.414248][T12384] page_symlink+0x2c1/0x4e0 [ 959.418787][T12384] ? page_readlink+0x1d0/0x1d0 [ 959.423582][T12384] ? generic_permission+0x27c/0x4f0 [ 959.428808][T12384] sysv_symlink+0xcb/0x180 [ 959.433258][T12384] vfs_symlink+0x247/0x3d0 [ 959.437704][T12384] do_symlinkat+0x21e/0x390 [ 959.442230][T12384] ? __check_object_size+0x4dd/0xa30 [ 959.447537][T12384] ? vfs_symlink+0x3d0/0x3d0 [ 959.452154][T12384] ? getname_flags+0x1f9/0x4f0 [ 959.456941][T12384] ? lockdep_hardirqs_on+0x94/0x130 [ 959.462160][T12384] __x64_sys_symlink+0x7a/0x90 [ 959.466957][T12384] do_syscall_64+0x3b/0xb0 [ 959.471390][T12384] ? clear_bhb_loop+0x45/0xa0 [ 959.476084][T12384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 959.482014][T12384] RIP: 0033:0x7f028b38cda9 [ 959.486545][T12384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.506178][T12384] RSP: 002b:00007f028c11f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 959.514638][T12384] RAX: ffffffffffffffda RBX: 00007f028b5a6160 RCX: 00007f028b38cda9 [ 959.522632][T12384] RDX: 0000000000000000 RSI: 000000002000acc0 RDI: 000000002000ad80 [ 959.530630][T12384] RBP: 00007f028b40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 959.538639][T12384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.546642][T12384] R13: 0000000000000000 R14: 00007f028b5a6160 R15: 00007ffd111b1568 [ 959.554651][T12384] [ 959.557688][T12384] [ 959.560025][T12384] The buggy address belongs to the physical page: [ 959.566467][T12384] page:ffffea0001449740 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5125d [ 959.576645][T12384] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 959.583795][T12384] raw: 00fff00000000000 ffffea000129a008 ffffea0001449788 0000000000000000 [ 959.592400][T12384] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 959.601096][T12384] page dumped because: kasan: bad access detected [ 959.607536][T12384] page_owner tracks the page as freed [ 959.612914][T12384] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 4249, tgid 4249 (syz-executor), ts 956031539922, free_ts 958392533629 [ 959.630829][T12384] post_alloc_hook+0x18d/0x1b0 [ 959.635620][T12384] get_page_from_freelist+0x3731/0x38d0 [ 959.641197][T12384] __alloc_pages+0x28d/0x770 [ 959.645816][T12384] __folio_alloc+0xf/0x30 [ 959.650168][T12384] vma_alloc_folio+0x486/0x990 [ 959.654958][T12384] wp_page_copy+0x291/0x18c0 [ 959.659575][T12384] handle_mm_fault+0x2525/0x5340 [ 959.664532][T12384] exc_page_fault+0x26f/0x620 [ 959.669235][T12384] asm_exc_page_fault+0x22/0x30 [ 959.674122][T12384] page last free stack trace: [ 959.678807][T12384] free_unref_page_prepare+0x12a6/0x15b0 [ 959.684469][T12384] free_unref_page_list+0x663/0x900 [ 959.689695][T12384] release_pages+0x24c4/0x27a0 [ 959.694485][T12384] tlb_flush_mmu+0xfc/0x210 [ 959.699009][T12384] tlb_finish_mmu+0xce/0x1f0 [ 959.703714][T12384] exit_mmap+0x3b3/0x980 [ 959.707984][T12384] __mmput+0x115/0x3c0 [ 959.712076][T12384] exit_mm+0x226/0x300 [ 959.716172][T12384] do_exit+0x9f1/0x26a0 [ 959.720361][T12384] do_group_exit+0x202/0x2b0 [ 959.724986][T12384] get_signal+0x16f7/0x17d0 [ 959.729666][T12384] arch_do_signal_or_restart+0xb0/0x1a10 [ 959.735330][T12384] exit_to_user_mode_loop+0x6a/0x100 [ 959.740739][T12384] exit_to_user_mode_prepare+0xb1/0x140 [ 959.746308][T12384] syscall_exit_to_user_mode+0x60/0x270 [ 959.751887][T12384] do_syscall_64+0x47/0xb0 [ 959.756328][T12384] [ 959.758673][T12384] Memory state around the buggy address: [ 959.764322][T12384] ffff88805125cf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 959.772493][T12384] ffff88805125d000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 959.780596][T12384] >ffff88805125d080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 959.788679][T12384] ^ [ 959.795123][T12384] ffff88805125d100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 959.803211][T12384] ffff88805125d180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 959.811291][T12384] ================================================================== [ 959.819423][ C1] vkms_vblank_simulate: vblank timer overrun [ 959.826785][T12384] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 959.834003][T12384] CPU: 1 PID: 12384 Comm: syz.7.2030 Not tainted 6.1.127-syzkaller #0 [ 959.842166][T12384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 959.852311][T12384] Call Trace: [ 959.855592][T12384] [ 959.858554][T12384] dump_stack_lvl+0x1e3/0x2cb [ 959.863338][T12384] ? nf_tcp_handle_invalid+0x642/0x642 [ 959.868818][T12384] ? panic+0x764/0x764 [ 959.872923][T12384] ? preempt_schedule_common+0xa6/0xd0 [ 959.878389][T12384] ? vscnprintf+0x59/0x80 [ 959.882726][T12384] panic+0x318/0x764 [ 959.886626][T12384] ? check_panic_on_warn+0x1d/0xa0 [ 959.891742][T12384] ? memcpy_page_flushcache+0xfc/0xfc [ 959.897137][T12384] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 959.903131][T12384] ? _raw_spin_unlock+0x40/0x40 [ 959.907988][T12384] ? print_report+0x4a3/0x4f0 [ 959.912667][T12384] check_panic_on_warn+0x7e/0xa0 [ 959.917608][T12384] ? sysv_new_block+0x788/0x960 [ 959.922483][T12384] end_report+0x66/0x110 [ 959.926727][T12384] kasan_report+0x143/0x160 [ 959.931231][T12384] ? sysv_new_block+0x788/0x960 [ 959.936090][T12384] sysv_new_block+0x788/0x960 [ 959.940783][T12384] get_block+0x2e7/0x1790 [ 959.945130][T12384] ? create_page_buffers+0x1d2/0x4b0 [ 959.950418][T12384] ? __rwlock_init+0x140/0x140 [ 959.955186][T12384] ? sysv_truncate+0x1050/0x1050 [ 959.960130][T12384] ? attach_page_private+0x110/0x300 [ 959.965420][T12384] ? create_page_buffers+0x24e/0x4b0 [ 959.970725][T12384] __block_write_begin_int+0x544/0x1a30 [ 959.976283][T12384] ? rcu_is_watching+0x11/0xb0 [ 959.981054][T12384] ? sysv_truncate+0x1050/0x1050 [ 959.986003][T12384] ? page_zero_new_buffers+0x650/0x650 [ 959.991469][T12384] ? sysv_truncate+0x1050/0x1050 [ 959.996410][T12384] block_write_begin+0x98/0x1f0 [ 960.001260][T12384] ? sysv_write_begin+0x16/0x60 [ 960.006120][T12384] sysv_write_begin+0x2d/0x60 [ 960.010802][T12384] page_symlink+0x2c1/0x4e0 [ 960.015319][T12384] ? page_readlink+0x1d0/0x1d0 [ 960.020090][T12384] ? generic_permission+0x27c/0x4f0 [ 960.025301][T12384] sysv_symlink+0xcb/0x180 [ 960.029725][T12384] vfs_symlink+0x247/0x3d0 [ 960.034151][T12384] do_symlinkat+0x21e/0x390 [ 960.038662][T12384] ? __check_object_size+0x4dd/0xa30 [ 960.043955][T12384] ? vfs_symlink+0x3d0/0x3d0 [ 960.048554][T12384] ? getname_flags+0x1f9/0x4f0 [ 960.053323][T12384] ? lockdep_hardirqs_on+0x94/0x130 [ 960.058537][T12384] __x64_sys_symlink+0x7a/0x90 [ 960.063309][T12384] do_syscall_64+0x3b/0xb0 [ 960.067721][T12384] ? clear_bhb_loop+0x45/0xa0 [ 960.072397][T12384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 960.078299][T12384] RIP: 0033:0x7f028b38cda9 [ 960.082715][T12384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.102322][T12384] RSP: 002b:00007f028c11f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 960.110737][T12384] RAX: ffffffffffffffda RBX: 00007f028b5a6160 RCX: 00007f028b38cda9 [ 960.118714][T12384] RDX: 0000000000000000 RSI: 000000002000acc0 RDI: 000000002000ad80 [ 960.126685][T12384] RBP: 00007f028b40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 960.134651][T12384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.142618][T12384] R13: 0000000000000000 R14: 00007f028b5a6160 R15: 00007ffd111b1568 [ 960.150602][T12384] [ 960.153928][T12384] Kernel Offset: disabled [ 960.158258][T12384] Rebooting in 86400 seconds..