last executing test programs: 45.365032484s ago: executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00'}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008004, &(0x7f0000000600)={0x2, 0x4e20, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002500)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)}}, {{&(0x7f0000002c00)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002cc0)=ANY=[@ANYBLOB], 0x18}}], 0x3, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f0000000380)="ed53da01a95d191fd56df2e54201576974e880dfc64b2b9b59d371e527d0318a6018c7db6b5074f407", &(0x7f0000000240)=""/58, &(0x7f0000000b40)="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", &(0x7f0000000480)="266c2381a01c9ff240a168622001d6d3502a144ce0cd3d1d091297b0ca8555fd9c97f8c1cc0eb60d0da8b2008a33b12a94019d96c78217b40bc02e2e55f409aec9416ccec00999", 0x80000000, r2}, 0x38) 44.316995968s ago: executing program 5: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000880)="$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") mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000540)=""/239, 0xef) 43.843913285s ago: executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002140)='./file1\x00', 0x0, &(0x7f0000000240)={[{@numtail}, {@rodir}, {@utf8no}, {@utf8}, {@shortname_lower}, {@fat=@errors_continue}, {@shortname_winnt}]}, 0x1, 0x1a3, &(0x7f0000000080)="$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") unlink(0x0) mknod$loop(&(0x7f0000000400)='./file0/file0\x00', 0x0, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x8, 0x11, 0x0, @remote, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0285629, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac1(0x0, 0xe6, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/386], &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x7, 0x8, 0x20, 0x40, 0x6}, 0xbe, &(0x7f0000000280)={0x5, 0xf, 0xbe, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x3, 0x9}, @generic={0x8c, 0x10, 0xb, "58a71a551d6eaf9a3e09712855dfa966610fd3917c6c2932860c2505e85923495678298cddb61936cd546c03ebff7b8791171e0731dac3b5c8f6fd4d6d4baa1d04f194d872913de1eb24ea6b95678afad074082e82ca2ddf5222c5ec464c3d01964361e5ff0e18cf731c8b3c0be9b6800ff8e430bd7d084517d5e0b36ecbf25743dbe77fb06348706f"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0x7, 0x5, 0x5, 0xa9}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "62000300000000000000000000000020"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xd, 0x9, 0x40}]}, 0x5, [{0xf4, &(0x7f00000000c0)=@string={0xf4, 0x3, "61409dd79c18ceab43fb1753df2ed8803bedc1476970564d76fdbf83ba5c8456b57b4f0e18b327d85e34e6b606fb47c73eb7b7e9f44f3a2d682f1c200df28c5c93c16ca13431ea1cc7fbfa8cddf335e72e66e88dfd15a59b5bbb81e4b5042b3ecedc532d7834090698f0e5a8fc2537bbf480c22182730f6b510db07fda113a70c153b79498772230cd6031675edfc2907455b16577246f735950a5d9740086e76e63d8f8c583541403f2c89666cfc23d655b02b42ba4a56b607ebfe39e9f682b3bb022f64c3a679e9f3007d8b23996b6aaf3aab01c2c0606598df5fbfccb56877d1acec4720840e0dadd989664556774b153"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x409}}]}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_script(r3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0/file0\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x841001, &(0x7f0000000800)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x3f}}, {@max_read={'max_read', 0x3d, 0x1}}], [{@appraise}, {@pcr={'pcr', 0x3d, 0x9}}, {@subj_type={'subj_type', 0x3d, '-&,'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@audit}, {@flag='ro'}, {@fsmagic={'fsmagic', 0x3d, 0x40}}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x39, 0x3d, 0x0, 0x61, 0x61, 0x64, 0x30], 0x2d, [0x65, 0x35, 0x34, 0x62], 0x2d, [0x30, 0x35, 0x66, 0x34], 0x2d, [0x64, 0x39, 0x64, 0x6], 0x2d, [0x63, 0x37, 0x62, 0x66, 0x34, 0x39, 0x31, 0x36]}}}]}}) 40.353497954s ago: executing program 5: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000880)="$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") mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000540)=""/239, 0xef) 38.706503393s ago: executing program 5: socket$xdp(0x2c, 0x3, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000500)=0x0) timer_settime(r0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 37.436468745s ago: executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 17.188528206s ago: executing program 3: r0 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x1}, &(0x7f0000000380)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x1000, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 16.979203941s ago: executing program 3: syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0x0, &(0x7f0000005b80)=ANY=[@ANYBLOB='0'], 0x1, 0x5afb, &(0x7f0000005bc0)="$eJzs3Q+MXXWdKPBz7p1p73TaMoMCtfzpAKWv8ASmFB/QYBx4EfBpEUGLCtJWOi2D/QOdqYUqtpCIBnm8Jm+jrImEEE3YEIK7ZF3/rClmEbOyxiYuW9xdFwOald1gDYJ2KbGbmXvOzNwz53fPnXvvlBY+n9A5c8787vf3/f7Ob+6cc+7h3ggAAIC3hKc+P/yHKxe+98d3Db6684rvbroz6i6Pba+kDXqS5W1vVIYcTrM7Fowts/Ni98Csp95z7wee/donvvH8C71Ll3395ssO3jp35T33DPzsgoM/+dMdRXHT+XTmxHr8UhxFJ/906Zfv/uHTJ4xui6MoKsc9u6KoNy79oDfOhOh/LYqideN51v7w8VeXrx9d7vrS7Jrtx2SCmO9vbZVknn3h+1tO+s05lz275+eXvtpfeW3rrokmcWXSfIqi+WsmP74ziqKu5N+odLYtSB+cLK+KomjOpMddWJDXaQ3mf3ZgfWGynJUsuwvipD8/NbPe2WAeHZllpcHHNas0w/FT6f6bO8P9Z5/csv30JstvJcszpxm/nP6Lo1IcdYx3tzGemCPRpP0WR/HYvp9YL9XMhTgzN+IoijPrpcx6uTNT11i/yUQrx3Ht9rRdZntfsr0j2X5qwVy7JrD9HWm9yS/qgUz92aDdU74Zr2tMmtcv6+RyOJQmPQflbU/zrSQ7ozvZ1h0fO+Uxh3KkP1v1wn2PPb/jgcU9gTzib8ZJ/Lip+M9sumjfkh2/2L8gFH9NKYlfair+8DkvP/ri1T86IRh/dxq/3FT8585f8pXv7dx+IDg+v0vHp6Op+OUVZx1cdlf/qmD+D6bxK03Ff+jSR746/11PPhrMvz8dn67mxmdo2+vXPXzc/mD8KI0/p6n4l7xy/BkrtjyyIRj/iXR8upuK//Tw0Mq7b1q0vS8Uf28af15T8U/71fXX7dk3+Fww/4F0fHqaiv/uxZdctXL/5ntDz53xrsP1FxbgzeltyTHWF5P1Zs8zWzXpfOH+nrh6zDc3+TevnR1ljPYzfwbjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDW9FDPusE/feeU1zuS9dnJN6eUq8t0+6woiruiKBoeWbt1ZGjzhr6bt2zbunntxr61I32Dm0e23t53/jv7tg7esnHt7aM/7T97efVxx0ZxdRmfPKXvQ4cOHSr11G5L+/vUBf//8b5T9v1zFPUf97NTOoL5f/COhf+7N+drRjxwaOP/O+OGF+f+/bbqhp4kr55AXlEgr4sffmnFb77b9X+jqP/4enn9+9LLf1iT0NiGiTiJ0uyoNPbN7HhObh7jWSf5pOPVsX5o42B/8fiWA3X8+sBffWT78I27quNbCdbR4Ph2DRz64+ZvP3HjxTuuqm44Uvd70XinVaT5peNXScZ7flLX/EBdHYG67j7j1H/7pz/f9NKuqL/j94um9l1UV2cyATrjdzTUb9rDnLh2TCpJ+3SPp487d2TTLecO377j7KFNazcMbhjcvHz58gvPX37eBef9r3PHSq9+bVv9af//o8H6D8982nLBwFD6tbH5VJRX0XiM5lU8HpMzCv3+vf3Dl//LnX+9++rqhqJ5nrYefz5JlnNGd/OyaNJ8mzpWeXUVjUNnYBw2XNP9F6/0bfmvouehyXtm8teMeODQ74f+4T1z95x+Q3XDYXmen5xQk8/z41kn+XROft5ZduSO7+yonNTVnZvX6Xe9/NF//E7cN57frFnRbWtHRrYuq349THW9/ZrPtreuC5f856071tzZO6Wu86pf5yaZzo1PzM0ruzWta9HY13KUDEu6iCql/Po6o2p+2b8L6eOyo9qd/Kw7Pja3rqz0Z6teuO+x53c8sDg00vE3qz12RfOqy/ikQMuNmQeWxxPO679ofkRRtGbytnQcn/j2n/Xt+XHvpsL5UZ0ZU75myxs49LmL5v56+Nq9K6sbDs/zyqSEmnxeGc96Ip+x8Rp7XjnvyKnjjdvPNb9Y8cChPSe9c8Pyvx1Jfu2Lxne8dd74Lo+ioueBRZn1mXoeyPYz0T4/Xl9mvTsqN/W88dz5S77yvZ3bDwSfN37X6PPGZ2vWyi0+b8SB+bTvc3/5x8/se+Z97XveeN+S8sf/ddHyZECPlN+3SjKvK4F5PZ51kk88eV6fc+OWjeuq24/c499kWXD+k/79Hr59x6fWbtw4uHW4sboaPS5J+8mOcrPHJelv37EFdaX7a6KumfumkfFq9PctzX9ddrya/H2DPN1R3NTfs2c2XbRvyY5f7O8JxI3XlJL4pabiD5/z8qMvXv2jE4Lxd6fxO5qKX15x1sFld/WvCsZ/ME7iV5qK/9Clj3x1/ruefDQYvz/Nv6u544mhba9f9/Bx4fGP0vjdTcV/enho5d03LdoejL83TvoZPbaLosdfXb6+uh5HncnzcJpHZ01eUXY9zqyXMuvlyeul6jX48Q7KcVy7PW2XbD91Ui55rg1sT48eKwuqywPpepT9pv72I01p0jFB3vai42sAeDNJX/9PjzXS1/8XJX8QJ73+X13Gs2oevyA5nlowsWnsPO/Ovuof0ule10vzyF7XS+MvPb02RrPX9Yquy52WWU/zWpSMSppPneOGuVED1+Wm9lP/ulym/OLrZn1fzGzoGLu2F9pvncmVirzXmTP5zh2N0Opx9oL8rMePs0PzLnu9I32dPm5w3mXvi0j3b/a+iDT+wswFtGbvi2h13qWXNerMu7HKiq+nTp0XUZ1xnZgX+dGy82Ia86inOo9m9nWpo/98f2avv7ueEIif/B050s/30+3p80NHg9cBVgW2t+s6QPp0keb1yzq5HA6uAwDAxPl/ekwxev4/+re6L3OcX3Tekj3LSOMF72Mp5+dTdP479X62OU0d913yyvFnrNjyyIbgcfETjd6XckvN2pyC+1KKxnFxZr1wHAO3ghRdd1iSad8dzWtqHE/71fXX7dk3+FxwHAeqB1LF47i7Zm1ei+O4NLNeOI6d+VkVjWO2n6L5e2ZmvTu5I2i64/7uxZdctXL/5nuD476r0XF/sGatp2DcnacH4jtPPyLO02f6euQbdh0guW49U9cBrglsn+51gO4p34zXNeaouw4Q+LsAAEez9Px//H755Pz/7zLtWj0/DB63DbTnftbgcdv4cW1rx+XB/MePy1s7LwrGHz8vau28JTg+4+ctrZ13BeOPn3e1dp0mOD5PpOPT2nF/6H8XSI/7j/7zopm9zuC8KFmPst9UOS8CAOBIkJ7/p4er6f3/Tybr2WPjmT/Pnenz0Jk+j57p6wwzfZ3kaD/PPdqvM8z0dTbXAVwHKOY6AADAm8N7k+UNDbbvGLuHOIo+eeNN561eN/jp1eu3Dg4O37L2xsHVQ5uHRsbbdY6deU29TzrUX9F90nnt59RpvzoYvzafywLtQ1qtP9RfUf157evVvyYYvzafywPtQ1qtP9RfUf157evVvzYYvzafKwLtQ1qtP9RfUf157evV/8lg/Np83hdoH9Jq/aH+iurPa1+v/huD8Wvz+T+B9iGt1h/qr6j+vPb16s++X2ao/vcH2oe0Wn+ov6L689rXq38wGL82nw8E2oe0Wn+ov6L689rXq399MH5tPisD7UNarT/UX1H9ee3r1b8hGL82nysD7UNarT/UX1H9ee3r1X9TMH5tPh8MtA9ptf5Qf0X157WvV/9QMH5tPlcF2oe0Wn+ov6L689rXq//mYPzafD4UaB/Sav2h/orqz2tfr/5PBePX5nN1oH1Iq/WH+iuqP699vfo3BuPX5nNNoH1Iq/WH+iuqP699vfo3BePX5vPhQPuQVusP9VdUf177evVvDsavzecjgfYhrdYf6q+o/rz29erfEoxfm8+qQPuQVusP9VdUf177evXfEoxfm8+1gfYhrdYf6q+o/rz29eq/NRi/Np+PBtqHtFp/qL+i+vPa16t/azB+bT4fC7QPabX+UH9F9ee1r1f/cDB+bT4fD7QPabX+UH9F9ee1r1f/SDB+bT7XBdqHtFp/qL+i+vPa16t/WzB+bT7XB9qHtFp/qL+i+vPa16v/08H4tfl8ItA+pNX6Q/0V1Z/Xvl7924Pxa/O5IdA+pNX6Q/0V1Z/Xvl79twXj1+azOtA+ZLz+ka2Dg6u33bJu7cjg6s1b1g0Or96+dWhkZDA5UGv1vsTgfWXJfYmdUUfd+hdm1o9J3h/omMD7A2Xbp2FPHPtm6vsDZbvtKHifnKL9le2/6H2G8trnzbfQ/i16Pmh0PmTV/H5UJ8nQ5uHBrVOfv7vqjsfkORGN3TbXVV3GxzfUPvt2nYFuCjVeT6VuPdnNs5MbAWfHxzXUPgp8Htx0NV5PHKwnL4/pfo5dGnZan2OX+TJFznu01tS7fnjsSXpo7cahHYNT859zBOT/xoxjaUoeRfs/zuTRm2TSG/q8t0De27/1Hw/99rd/8/4o6j+ufFJL4xcPHFpz4PhP/vTi2eeO5l+qm/94y/RzlQs+/zDbPq2nY+OW4ZH/uX7Lts35r6Cl9zuXxtdn6H7npM5yg/cvh+73mO79y/GUb45Mjd6/DAAA8FaR/v//6fnqguT/Qe3NXCJo/Dpwa/9/dPA68N7GrgNnr0YUXQfOtk/LbvQ6cHeL14Gz/Yeu05bqtK/3ukuj14E/Hmg/XY3Pk9beByA4T5KRKpon2f8Pv2ieZNtPd550tThPsv0XzZO89vVen250nlwbaB/S+Hxo7X0ngvOhv7H5kP1czaL5kG0/3flQaXE+ZPsvmg957evdr9PofPhwoH2jGp8frb0vTHB+rGlsfmQ/L6VofmTbT3d+xC3Oj2z/RfMjr329+xkbnR8fCrRPNb7/W3vfnuD+393Y/s9+bkvR/s+2n+7+L7W4/7P9F+3/vPb17ududP9fGWifqt3/ozt+bL8Prt6+Zevke6Bn+nNbQhrPb2Y/t6ZZjec/s+/7NPP5z+z7Ss18/q2dNwXz39vaK12N5z+zn0vUrMP2emzyZlNF7z9V9DrtxwLbp/s67awp3xyZvE4LAAAAMy99/T/9OP70/eG/lCwDH9PftKP/8719/nZu/DZ9/nbRdUzX8+p0dgRwPQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9ZncsGFs+9fnhP1y58L0/vmvw1Z1XfHfTnbsHZj31nns/8OzXPvGN51/oXbrs6zdfdvDWuSvvuWfgZxcc/Mmf7igM3FNdnJmsVqIofimOopN/uvTLd//w6RNGt8VRFJXjnl1R1BuXftAbZyL0vxZF0brxPGt/+Piry9ePLnd9aXbN9mMyQbJ1Rd3lNJ+aPKPbCiviKFRJ5tkXvr/lpN+cc9mze35+6av9lde27ppoElcmzacomr9m8uM7oyjqSv6NSmfbgvTByfKqKIrmTHrchQV5ndZg/mcH1hcmy1nJsrsgTvrzUzPrnQ3m0ZFZVhp8XLNKMxw/le6/uTPcf/bJLdtPb7L8VrI8c5rxy+m/OCrFUcd4dxvjiTkSTdpvcRSP7fuJ9VLNXIgzcyOOojizXsqslzszdY31m0y0chzXbk/bZbb3Jds7ku2nFsy1awLb35HWm/yiHsjUnw3aPeWb8brGpHn9sk4uh0Np0nNQ3vY030qyM7qTbd3xsVMecyhH+rNVL9z32PM7HljcE8gj/macxI+biv/Mpov2Ldnxi/0LQvHXlJL4pabiD5/z8qMvXv2jE4Lxd6fxy03Ff+78JV/53s7tB4Lj87t0fDqail9ecdbBZXf1rwrm/2Aav9JU/IcufeSr89/15KPB/PvT8elqbnyGtr1+3cPH7Q/Gj9L4c5qKf8krx5+xYssjG4Lxn0jHp7up+E8PD628+6ZF2/tC8fem8ec1Ff+0X11/3Z59g88F8x9Ix6enqfjvXnzJVSv3b7439NwZ7zpcf2EB3pzelhxjfTFZb/Y8s1WTzhfu74mrx3xzk3/z2tlRxmg/82cwPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb06Dl9+/8/K9q6/oiKMoDrQ5lCP9WXnWwEBfE/2WV5x1cNld/asmb1vQRBwAAACgWHoeXhrfUokWRNvjrujE3PbpNYIT07W4dnv2GkLXRMu2xCm1KU65TXE62hSns01xZrUpzuw2xakUxKlEjcXpqhun1HA+c9oUp7tNcea2Kc68NsWZ36Y4x7QpTk/dOI3Pw942xTm2TXHe1qY4b29TnOPaFOf4NsU5oU1xsteUpzsP5yUtF4bijH1TLozTEZfHf5B3PT3t5+TM40rT7Ke7wX6y1+yn209Xg/2c3mI/lQb7WdJiP3GD/ZzZYj+lgn7SeXtbNr+0n3Stwfl/e5vi7GhTnM+0Kc5n2xTnjjbF+Vyb4uxsMQ5Ao9Lz/4nzxp5odsfF0ZzkGSd7FSA9311UffSU56NK9gQ9kcY7KbN9VlG87Il6Jt6iNud3WmZ7Z028jvHjpjrxeibHW5z5YWG92QsKmfyWTjde9sICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMygwcvv33n53tVXRHE0+l+uQznSn5VnDQz0NdHvqhfue+z5HQ8snrxtdkcTgQAAAIBC6Xl45/iWSjS749xoVjyrpl0luQ5QSdbLPdVl3FcaW86Je+u270janzvy3+zaX4xcVf0A8HN3ZmeGbeG3/QXqQAodWbpiRPpn0QKp4aIPs42pNgWjAdPdUqbrpttd7LYpXZG1PhAfNDTRxNUnwxOG8KAGrUqyfdAYlIRNFJsI2heJVgNNKElrYjJmd+fOv850lhFtwc/n4d4753zP9ztntmnyPTMHHtk4fXTmw+MH9oyVxkqTQ0NDd94xtGXrlo9u3Dc+Udq0fA3ZDvl6K/mmj87s3zMxUTo4vfy6+X3nK+vytaHRxcuxyvv+/w51okp8rc5/7qHzXwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6vUnFutrgwMtwXhRC1iSm3kMylMnFc6KLuvW+t3XD31DNj9WPZdBeJAAAAgI6SPry3OpIL2XQqpML1S69uroX2h1Dr+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP89peLcbHFhZHhVFELUJqbcQjKXysRxoYu6v5ke3/HEF9YfqR/Ld5EHAAAA6Czpw3uqI7mQDwOhN7q+IS45G7ihaX1zXJLnxhXGNZ8dtIsbWGHc4ArjPtgh7lOV+6MBAAAA3v2S/j9dHekP2fTVbfv/Tn19Ere+KS5VuXfzWwEAAADg35P0/5nqSD5k0/lqv77Sfv/mprhkfafv7ZP1nb63T+JubVOn+ft8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODKVSrOzRYXRoZTUQhRm5hyC8lcKhPHhS7qnr5j8Ns/nz1yoX4sm+4iEQAAANBR0ofXWu9cyKb7Qm9YtdT33zn49y/OjB5b09tfmc5kwqN7Dh06uGX5msQNfPXNz/3up1HhorjNy9fLsjkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAdVSrOzRYXRoavikKI2sSUW0jmUpk4LnRR9/T44X8++PR1Z+vH8l3kAQAAADpL+vBa758L+ZAJmbB26VV9r7+op2l9uzMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L1j+ujM/j0TE6WDHjx48FB9uNz/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFeKUnFutrgwMpyLQojaxJRbSOZSmTgudFH3qY8/891rPvKLZ+vH8l3kAQAAADpL+vBa758L+dAbesN1S69anQks9f/9/8U3CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXBFKxbnZ4sLI8NVRCFGbmHILyVwqE8eFLure/OfPPzh/qnS6fiyb7iIRAAAA0FHSh2eqI7mQTW8O2bCu8nqicUGUqtxbnwvU1j3SsKxvxesea1iXWvG6rzXtLF3ZzfK6XJKvf/leXVe4eF0hhJCvrMvXJkYb1oXjDauuXvH7/F7Duv4O6wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcgUrFudniwshwFIUQtYkpt5DMpTJxXOii7ssH7jo1OPPHs/Vj+S7yAAAAAJ0lfXit98+FfLgxXBNuXOr7Q39jfBK37enX7/7rz676Rgib1v72pnTb/H+5tfjL5ksIPY1BPSH8X6Ve1KbekR//7ak33vjJJ0PYdF1q3dut15gyLo9eWPvQS9uyGy/xwQAAAMB7SNL/91ZH+kM2Pdm2/08677fV/09de99jayrXSkfetKKnv1Kvp029/Vu/+aPCTaf+sNj/X6rep798wyfWhKmt8XhyXR5pEsXliSc37D6z+oXDya6X66ea6iefy2sXfviZI9N7v7JcPxdylfEb0q3qX3xtclVcPj954uTebTM7G+un2+z/iQ3v/9Pvv3Pg9cX659b3Vet/4BL7v3T9a+8vvnLsueO7Guv3tqk/dt+q779VmPpH8/77mhJXPvnlP3jdX6FJFJfPjb94z+r5gd2N9UMIo/WByed/8sS3CvO/XnMgqZ/8VuTWgab6df/U6q9NZ05RXJ5fd9vY0POHVjXWj5rqJ/s/9fgPzn/p1Mvbm/f/cPP+29Zv3v/2wdQDr64f6ubHMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7wKl4txscWFkOKRCiNrElFtI5lKZOC50Ufdjt9y7c8fZya/Xj2XTXSQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3jGl4txscWFkuCcKIWoTU24hmUtl4rjQRd3p29989syuX72vfizfRR4AAACgs6QPr/X+uZAPmZAJfUt9/+iFtQ+9tC27MfQvz0aVe3piavrQh/ZNHZ58+DK9cwAAAGClkv4/XR3pD9n0LaG30v/Pr7ttbOj5Q6uS/j+EMLp4ye0bnygNheo5wfbB1AOvrh8qVM8J6uNu3zs1UTkmSPI+ftfq16Y/u7CjZd4ttbhz4y/es3p+YHcS11u5L8VtrsVNPLlh95nVLxxO4nqSc4rFuE21uPOTJ07u3TazM5lP1eeri7v2/uIrx547vquap3Lvq9QFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgX+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhv45CrCriOADP3LurV++67RblJkUqJhokKxWVEK1C0kMbUuCLBT5kZWRSSxhCuAlZmIRPFUERURCIFAQ9FGFBGSRREKE9hKE91ENsRBviRsXuzuzePXra7dQqyPfBYZw59/zmf+aMZ+8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOL/mtvWMtYefHvj9zkW3fb57y/Cu29/f9tT+vjmHb913x7FX7n3zxMnuFavfeGj9yKMd/Xv39n1948gXfz45bfAT483K1G2EEH+OIVz55YoX9nx6ZOHoWAwh1GPXYAjdsfZxdywk9J4OIdw3UefUk+8OX3f/aDv43Nwp4xcVQor3FZr1XM+4rqn1cmFppH32zIfbr/hx1fpjh75dN9zbOP3Y4ORHYqNlP4XQubn1+vYQwrx0jMq7rSdfnNoNIYT5LdfdNE1dS2dY/7Ul/UWpnZPa5jQ5+fySQr99hnW0FdrGDK+rqjbL+Vl+fh2zPH/x5Vacpzu176V25b/Mr+cjhloMbRPTPRwn90hoeW4xxLFnP9mvTdkLsbA3Ygix0K8V+vX2wn2NzZs2Wj3GqeP5c4XxxWm8LY0vmWav3V0yfnm+3/Qf9VTh/ouhzTP+MXFfY3Jd3/9DLedCreUddLbxXG8jPYxmGmvGi8+45q+zyOc2nnz+7RM7X13WVVJHfCem/Fgp/5ttNx9dvvO7oZ6y/M21lF+rlD+w6teDP9312cLS/P05v14p//j1y1/8YNeOU6Xr80ten7ZK+fU114ys3t27sbT+13J+o1L+6+sOvNx5wycHS+vvzeszr9r6bH38j01vXTpUmh9y/vxK+Wt/u+zqNdsPPFCa/1Fen2al/CMDW/v3PHjVjsVl+V/l/AWV8pf+cM+mQ0e3HC+tvy+vT1el/FuWrd3QP/TIvrJ3Zxw8V39hAS5Ml6TvWM+mftXfmf9Vy++Fl7ri+He+jnQs+D8nKhidp3MW8wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4mx04IAEAAAAQ9P91OwIFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgqAAD//zQOVqE=") truncate(&(0x7f0000000040)='./file1\x00', 0x979e) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x109042, 0x0) fallocate(r0, 0x0, 0x0, 0x7000000) 14.30710874s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r5}) r6 = socket$key(0xf, 0x3, 0x2) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x48}, 0x1, 0x7}, 0x0) 10.023497349s ago: executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000340)={0x2000000c}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00'}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008004, &(0x7f0000000600)={0x2, 0x4e20, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002500)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)}}, {{&(0x7f0000002c00)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002cc0)=ANY=[@ANYBLOB], 0x18}}], 0x3, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f0000000380)="ed53da01a95d191fd56df2e54201576974e880dfc64b2b9b59d371e527d0318a6018c7db6b5074f407", &(0x7f0000000240)=""/58, &(0x7f0000000b40)="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", &(0x7f0000000480)="266c2381a01c9ff240a168622001d6d3502a144ce0cd3d1d091297b0ca8555fd9c97f8c1cc0eb60d0da8b2008a33b12a94019d96c78217b40bc02e2e55f409aec9416ccec00999", 0x80000000, r2}, 0x38) 9.798849658s ago: executing program 1: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000080)={[{@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ssd}]}, 0x0, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$tcp_mem(r0, &(0x7f0000000040), 0x48) lseek(r0, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78) 9.535302076s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 8.962514692s ago: executing program 4: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000880)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/239, 0xef) 8.187962155s ago: executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002140)='./file1\x00', 0x0, &(0x7f0000000240)={[{@numtail}, {@rodir}, {@utf8no}, {@utf8}, {@shortname_lower}, {@fat=@errors_continue}, {@shortname_winnt}]}, 0x1, 0x1a3, &(0x7f0000000080)="$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") unlink(0x0) mknod$loop(&(0x7f0000000400)='./file0/file0\x00', 0x0, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x8, 0x11, 0x0, @remote, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0285629, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac1(0x3, 0xe6, 0x0, 0x0) r3 = creat(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_script(r3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0/file0\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x841001, &(0x7f0000000800)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x3f}}, {@max_read={'max_read', 0x3d, 0x1}}], [{@appraise}, {@pcr={'pcr', 0x3d, 0x9}}, {@subj_type={'subj_type', 0x3d, '-&,'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@audit}, {@flag='ro'}, {@fsmagic={'fsmagic', 0x3d, 0x40}}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x39, 0x3d, 0x0, 0x61, 0x61, 0x64, 0x30], 0x2d, [0x65, 0x35, 0x34, 0x62], 0x2d, [0x30, 0x35, 0x66, 0x34], 0x2d, [0x64, 0x39, 0x64, 0x6], 0x2d, [0x63, 0x37, 0x62, 0x66, 0x34, 0x39, 0x31, 0x36]}}}]}}) 8.027992067s ago: executing program 3: syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0x0, &(0x7f0000005b80)=ANY=[@ANYBLOB='0'], 0x1, 0x5afb, &(0x7f0000005bc0)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x979e) finit_module(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x109042, 0x0) fallocate(r0, 0x0, 0x0, 0x7000000) 7.362524547s ago: executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}}}}, 0x0) 6.369486979s ago: executing program 0: r0 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x1}, &(0x7f0000000380)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x1000, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 6.282629332s ago: executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="000049000000703879fd121ec1733d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.258729928s ago: executing program 2: syz_mount_image$nilfs2(&(0x7f0000000a00), &(0x7f0000000a40)='./file2\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0001413b6bbd9ccfa4f408c462944b1fbae1e513d8eb9dd5d9347c94eef39da916206f8793c7464fb236376d80"], 0x1, 0xa04, &(0x7f00000014c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) 6.055009568s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002000)=ANY=[@ANYBLOB=',\x00\x00\x00 \x00\x00\x00\x00\x00~'], 0x2c}}, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 5.519261199s ago: executing program 2: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000d80), &(0x7f0000000dc0)=ANY=[@ANYBLOB='enc=oaep hash=blak\t'], 0x0, 0x0) 5.336931972s ago: executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000340)={0x2000000c}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00'}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008004, &(0x7f0000000600)={0x2, 0x4e20, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002500)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)}}, {{&(0x7f0000002c00)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002cc0)=ANY=[@ANYBLOB], 0x18}}], 0x3, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f0000000380)="ed53da01a95d191fd56df2e54201576974e880dfc64b2b9b59d371e527d0318a6018c7db6b5074f407", &(0x7f0000000240)=""/58, &(0x7f0000000b40)="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", &(0x7f0000000480)="266c2381a01c9ff240a168622001d6d3502a144ce0cd3d1d091297b0ca8555fd9c97f8c1cc0eb60d0da8b2008a33b12a94019d96c78217b40bc02e2e55f409aec9416ccec00999", 0x80000000, r2}, 0x38) 4.941836008s ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}}, 0x0) 4.842503411s ago: executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x1a3903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x9) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x1, 0x0) 4.820378409s ago: executing program 3: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000880)="$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") mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/239, 0xef) 4.185052812s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r5}) r6 = socket$key(0xf, 0x3, 0x2) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x48}, 0x1, 0x7}, 0x0) 3.7395147s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f0000000100)={[{@grpquota}, {@jqfmt_vfsv1}, {@journal_async_commit}]}, 0x1, 0x504, &(0x7f0000000300)="$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") socket$xdp(0x2c, 0x3, 0x0) timer_create(0x0, &(0x7f0000000040), &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000500)=0x0) timer_settime(r0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 3.490655344s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 3.313715171s ago: executing program 4: syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0x0, &(0x7f0000005b80)=ANY=[@ANYBLOB='0'], 0x1, 0x5afb, &(0x7f0000005bc0)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000005140)='./file0\x00', 0x1000884, &(0x7f0000000100)={[{@nospace_cache}, {@nodatacow}, {@nossd_spread}, {@noautodefrag}, {@space_cache}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@usebackuproot}]}, 0x1, 0x5100, &(0x7f000000f3c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000100)={0x40, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x40}}, 0x0) r4 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) 3.180319641s ago: executing program 0: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000080)={[{@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ssd}]}, 0x0, 0x559e, &(0x7f000000ac40)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$tcp_mem(r0, &(0x7f0000000040), 0x48) lseek(r0, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78) 3.127480188s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='^', 0xf4240}], 0x1}], 0x1, 0x0) timer_getoverrun(0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}}}}}}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000040)) 1.88920162s ago: executing program 1: r0 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x1}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0x1000, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 1.669096939s ago: executing program 1: syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f00000000c0)={[{@lazytime}, {@uqnoenforce}, {@quota}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$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") quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)) 541.78129ms ago: executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002140)='./file1\x00', 0x0, &(0x7f0000000240)={[{@numtail}, {@rodir}, {@utf8no}, {@utf8}, {@shortname_lower}, {@fat=@errors_continue}, {@shortname_winnt}]}, 0x1, 0x1a3, &(0x7f0000000080)="$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") unlink(0x0) mknod$loop(&(0x7f0000000400)='./file0/file0\x00', 0x0, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x8, 0x11, 0x0, @remote, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0285629, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac1(0x3, 0xe6, 0x0, 0x0) r3 = creat(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_script(r3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0/file0\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x841001, &(0x7f0000000800)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x3f}}, {@max_read={'max_read', 0x3d, 0x1}}], [{@appraise}, {@pcr={'pcr', 0x3d, 0x9}}, {@subj_type={'subj_type', 0x3d, '-&,'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@audit}, {@flag='ro'}, {@fsmagic={'fsmagic', 0x3d, 0x40}}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x39, 0x3d, 0x0, 0x61, 0x61, 0x64, 0x30], 0x2d, [0x65, 0x35, 0x34, 0x62], 0x2d, [0x30, 0x35, 0x66, 0x34], 0x2d, [0x64, 0x39, 0x64, 0x6], 0x2d, [0x63, 0x37, 0x62, 0x66, 0x34, 0x39, 0x31, 0x36]}}}]}}) 532.317842ms ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002000)=ANY=[@ANYBLOB=',\x00\x00\x00 \x00\x00\x00\x00\x00~'], 0x2c}}, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 0s ago: executing program 0: timer_create(0x0, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) timer_getoverrun(0x0) kernel console output (not intermixed with test programs): t: 32 [ 1323.735863][ T5183] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1323.741472][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.769868][ T5183] usb 5-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 1323.773186][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.812615][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.828499][ T5183] usb 5-1: too many endpoints for config 0 interface 0 altsetting 49: 32, using maximum allowed: 30 [ 1323.832885][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.861267][ T5183] usb 5-1: config 0 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1323.873449][T15969] loop0: detected capacity change from 0 to 32768 [ 1323.885674][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.903583][ T5183] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1323.914498][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.937845][ T5183] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1323.943187][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.963193][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.969503][ T5183] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1324.002659][ T5183] usb 5-1: Product: syz [ 1324.005346][T15969] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1324.006985][ T5183] usb 5-1: Manufacturer: syz [ 1324.021648][ T5183] usb 5-1: SerialNumber: syz [ 1324.028136][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.047419][ T5183] usb 5-1: config 0 descriptor?? [ 1324.092818][T15881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.154566][ T9847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.162530][ T9847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.208174][T15881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.258961][T15973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.266738][T15881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.276778][T15973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.290564][T15881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.300219][T15881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.305598][T15969] XFS (loop0): Ending clean mount [ 1324.328497][T15969] XFS (loop0): Quotacheck needed: Please wait. [ 1324.655837][T15969] XFS (loop0): Quotacheck: Done. [ 1324.889915][T15987] loop3: detected capacity change from 0 to 2048 [ 1324.955988][ T5183] ldusb 5-1:0.0: Interrupt in endpoint not found [ 1324.979638][ T5183] usb 5-1: USB disconnect, device number 35 [ 1324.990370][T15987] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1325.015285][ T29] audit: type=1326 audit(1719250503.342:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15988 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb2e87d0a9 code=0x0 [ 1325.019034][T15734] VFS: Lookup of '. °. ' in vfat loop4 would have caused loop [ 1325.072712][T15987] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1325.090565][ T5647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.128904][ T5647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.153961][T15734] VFS: Lookup of '. °. ' in vfat loop4 would have caused loop [ 1326.107957][T15709] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1326.281823][ T9846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.355141][ T9846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.977173][T16001] loop1: detected capacity change from 0 to 512 [ 1327.035666][T16001] EXT4-fs: Ignoring removed bh option [ 1327.063433][T16001] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1327.154674][T16001] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 1327.224728][T15985] loop2: detected capacity change from 0 to 32768 [ 1327.233094][T12572] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.245782][T15985] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (15985) [ 1327.303462][T16001] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 1327.349455][T16001] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1327.398546][T15985] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1327.443547][T15985] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1327.452357][T15985] BTRFS info (device loop2): using free-space-tree [ 1327.526579][T15985] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1327.534228][T15985] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1327.594728][T15985] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1327.656796][T15985] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1327.673906][T15881] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1327.725022][T15985] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1327.734733][T15985] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1327.768547][T15985] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1327.784657][T15985] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1327.808882][T15985] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1327.867557][T15985] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1327.936216][T15985] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1328.000936][T15985] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1328.133788][T15985] BTRFS error (device loop2): open_ctree failed [ 1328.235866][T12572] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.509941][T16037] loop0: detected capacity change from 0 to 64 [ 1328.667775][T16037] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1328.787318][T12572] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.473927][T12572] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.201889][T16058] loop1: detected capacity change from 0 to 512 [ 1330.226174][T16058] EXT4-fs: Ignoring removed bh option [ 1330.302075][T16058] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1330.386191][T12964] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1330.395153][T16058] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 1330.414583][T12964] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1330.427420][T12964] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1330.446284][T16058] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 1330.470879][T16058] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1330.487675][T12964] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1330.529677][T12964] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1330.549692][T12964] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1330.720573][T12572] bridge_slave_1: left allmulticast mode [ 1330.760946][T12572] bridge_slave_1: left promiscuous mode [ 1330.939286][T12572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.221659][T12572] bridge_slave_0: left allmulticast mode [ 1331.380251][T12572] bridge_slave_0: left promiscuous mode [ 1331.424398][T12572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.507359][T15881] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1332.683819][T12964] Bluetooth: hci5: command tx timeout [ 1332.747690][ T5187] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1332.840603][T16086] loop5: detected capacity change from 0 to 512 [ 1332.945641][T16086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1332.973741][ T5187] usb 3-1: Using ep0 maxpacket: 32 [ 1332.987613][ T5187] usb 3-1: New USB device found, idVendor=03f0, idProduct=0107, bcdDevice= 2.00 [ 1332.996966][ T5187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.005206][ T5187] usb 3-1: Product: syz [ 1333.009583][ T5187] usb 3-1: Manufacturer: syz [ 1333.016317][ T5187] usb 3-1: SerialNumber: syz [ 1333.029175][ T5187] usb 3-1: config 0 descriptor?? [ 1333.037875][T16086] ext4 filesystem being mounted at /root/syzkaller-testdir91982955/syzkaller.Lz5H8Q/8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1333.059911][ T5187] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1333.271326][ T5187] usb 3-1: USB disconnect, device number 22 [ 1333.423706][T15769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.531432][T16077] loop1: detected capacity change from 0 to 32768 [ 1333.558633][T12572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.562312][T16077] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (16077) [ 1333.600869][T12572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.630681][T16077] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1333.634995][T12572] bond0 (unregistering): Released all slaves [ 1333.684496][T16077] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1333.759360][T16077] BTRFS info (device loop1): using free-space-tree [ 1333.788142][T10999] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1333.976376][T10999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.994787][T10999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.005165][T10999] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1334.092536][T10999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.129665][T16119] loop2: detected capacity change from 0 to 256 [ 1334.186255][T10999] usb 4-1: config 0 descriptor?? [ 1334.468432][T16125] loop5: detected capacity change from 0 to 512 [ 1334.480312][ T29] audit: type=1800 audit(1719250512.812:480): pid=16077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 1334.525985][T16125] EXT4-fs: Ignoring removed bh option [ 1334.534897][T16125] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1334.773415][T12964] Bluetooth: hci5: command tx timeout [ 1334.786120][T16125] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.5: corrupted in-inode xattr: invalid ea_ino [ 1335.069630][T16125] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 12 (err -117) [ 1335.187363][T16125] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1335.266181][T15881] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1335.428607][T15769] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1335.554209][T10999] hid-multitouch 0003:0EEF:72D0.0013: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0 [ 1335.634706][T10999] usb 4-1: USB disconnect, device number 44 [ 1335.887035][T12964] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1335.897539][T12572] hsr_slave_0: left promiscuous mode [ 1335.909737][T12964] Bluetooth: hci1: Injecting HCI hardware error event [ 1335.922131][ T5132] Bluetooth: hci1: hardware error 0x00 [ 1335.942064][T12572] hsr_slave_1: left promiscuous mode [ 1336.099731][T12572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1336.179175][T12572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1336.255037][T12572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1336.262496][T12572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1336.433679][T12572] veth1_macvtap: left promiscuous mode [ 1336.445361][T12572] veth0_macvtap: left promiscuous mode [ 1336.485308][T12572] veth1_vlan: left promiscuous mode [ 1336.491215][T12572] veth0_vlan: left promiscuous mode [ 1336.843351][T12964] Bluetooth: hci5: command tx timeout [ 1336.869815][T16153] loop1: detected capacity change from 0 to 64 [ 1337.043684][T16153] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1337.238608][T16157] loop2: detected capacity change from 0 to 2048 [ 1337.319234][T16157] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1337.371161][T16157] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1338.179886][ T5132] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1338.840938][T16145] loop3: detected capacity change from 0 to 32768 [ 1338.918451][T16145] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1338.934171][ T5132] Bluetooth: hci5: command tx timeout [ 1339.227313][T16145] XFS (loop3): Ending clean mount [ 1339.251217][T16145] XFS (loop3): Quotacheck needed: Please wait. [ 1339.394635][T16159] loop0: detected capacity change from 0 to 32768 [ 1339.509038][T16145] XFS (loop3): Quotacheck: Done. [ 1339.604625][T15835] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1339.692815][T16159] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 1339.727672][T16159] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 1339.834423][T16159] bcachefs (loop0): alloc_read... done [ 1339.840026][T16159] bcachefs (loop0): stripes_read... done [ 1339.873557][T16159] bcachefs (loop0): snapshots_read... done [ 1339.898846][T16159] bcachefs (loop0): journal_replay... done [ 1339.926126][T16159] bcachefs (loop0): resume_logged_ops... done [ 1339.953073][T16159] bcachefs (loop0): going read-write [ 1340.018028][T16159] bcachefs (loop0): done starting filesystem [ 1340.143033][ T5132] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1340.152603][ T5132] Bluetooth: hci3: Injecting HCI hardware error event [ 1340.165375][T12964] Bluetooth: hci3: hardware error 0x00 [ 1340.404019][T16175] loop2: detected capacity change from 0 to 32768 [ 1340.427342][T16175] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (16175) [ 1340.494673][T16175] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1340.521465][T16175] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1340.522740][T12572] team0 (unregistering): Port device team_slave_1 removed [ 1340.537918][T16190] loop3: detected capacity change from 0 to 512 [ 1340.546172][T16175] BTRFS info (device loop2): using free-space-tree [ 1340.558992][T16190] EXT4-fs: Ignoring removed bh option [ 1340.593326][T16190] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1340.650596][T16190] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 1340.709055][T16190] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 1340.725852][T16190] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1340.817134][T12572] team0 (unregistering): Port device team_slave_0 removed [ 1340.911985][ T29] audit: type=1800 audit(1719250519.232:481): pid=16175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1340.936455][T15835] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1341.100358][T15771] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1341.109122][T16209] loop3: detected capacity change from 0 to 256 [ 1342.423380][T12964] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1342.593641][T15709] bcachefs (loop0): shutting down [ 1342.598750][T15709] bcachefs (loop0): going read-only [ 1342.632212][T15709] bcachefs (loop0): finished waiting for writes to stop [ 1342.793023][T15709] bcachefs (loop0): flushing journal and stopping allocators, journal seq 8 [ 1342.819390][T15709] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 8 [ 1342.891397][T15709] bcachefs (loop0): shutdown complete, journal seq 9 [ 1342.921865][T15709] bcachefs (loop0): marking filesystem clean [ 1343.251754][T15709] bcachefs (loop0): shutdown complete [ 1345.221942][T16219] loop2: detected capacity change from 0 to 32768 [ 1345.307689][T16219] XFS: attr2 mount option is deprecated. [ 1345.352759][T16219] XFS: ikeep mount option is deprecated. [ 1345.398058][T16219] XFS: noikeep mount option is deprecated. [ 1345.611113][T16219] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1345.729634][T16060] chnl_net:caif_netlink_parms(): no params data found [ 1345.834030][T16244] loop5: detected capacity change from 0 to 2048 [ 1345.866604][T16244] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1345.920937][T16245] loop3: detected capacity change from 0 to 64 [ 1345.950332][T16244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1346.020959][T16219] XFS (loop2): Ending clean mount [ 1346.204243][T16219] XFS (loop2): Quotacheck needed: Please wait. [ 1346.304308][T16245] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1346.975060][T16219] XFS (loop2): Quotacheck: Done. [ 1347.248486][T15771] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1347.524583][T16060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.531875][T16060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.574790][T16060] bridge_slave_0: entered allmulticast mode [ 1347.618276][T16060] bridge_slave_0: entered promiscuous mode [ 1347.660296][T16060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.748182][T16060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.782801][T16060] bridge_slave_1: entered allmulticast mode [ 1347.806087][T16060] bridge_slave_1: entered promiscuous mode [ 1348.236950][T16060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1348.328355][T16060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1348.435267][T16266] loop3: detected capacity change from 0 to 256 [ 1349.007980][T16269] loop2: detected capacity change from 0 to 512 [ 1349.729638][T16060] team0: Port device team_slave_0 added [ 1349.747777][T16060] team0: Port device team_slave_1 added [ 1349.757123][T16269] EXT4-fs: Ignoring removed bh option [ 1349.770476][T16269] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1349.830690][T16269] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 1349.893393][T16269] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 1349.954243][T16269] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1349.967353][ T29] audit: type=1326 audit(1719250528.282:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01fb67d0a9 code=0x0 [ 1350.104053][T16060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.138978][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.177896][T15771] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1350.209359][T16060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.276759][T16060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.309422][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.402847][T16060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.654933][T16260] loop5: detected capacity change from 0 to 32768 [ 1350.720104][T16260] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (16260) [ 1350.958867][T16060] hsr_slave_0: entered promiscuous mode [ 1350.979811][T16060] hsr_slave_1: entered promiscuous mode [ 1351.434847][T16295] loop1: detected capacity change from 0 to 2048 [ 1351.561301][T16295] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1351.610927][T16295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1351.873283][ T5187] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1351.991246][T16303] loop0: detected capacity change from 0 to 256 [ 1352.395779][T12964] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1352.406790][T12964] Bluetooth: hci2: Injecting HCI hardware error event [ 1352.417228][ T5132] Bluetooth: hci2: hardware error 0x00 [ 1353.981438][ T5187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1354.021369][ T5187] usb 3-1: New USB device found, idVendor=1e2d, idProduct=0069, bcdDevice=f7.47 [ 1354.038521][ T5187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.069617][ T5187] usb 3-1: Product: syz [ 1354.084102][ T5187] usb 3-1: Manufacturer: syz [ 1354.088769][ T5187] usb 3-1: SerialNumber: syz [ 1354.114601][ T5187] usb 3-1: config 0 descriptor?? [ 1354.130629][ T5187] cdc_ether 3-1:0.0: invalid descriptor buffer length [ 1354.145018][ T5187] usb 3-1: bad CDC descriptors [ 1354.413940][ T5187] usb 3-1: USB disconnect, device number 23 [ 1354.448863][T16318] loop0: detected capacity change from 0 to 512 [ 1354.472755][T16318] EXT4-fs: Ignoring removed bh option [ 1354.506941][T16318] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1354.580508][T16318] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 1354.686443][T16318] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 1354.802342][T16318] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1354.933775][T15709] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1355.622826][T16060] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1356.743503][ T5132] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1356.759812][T16060] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1356.930949][T16060] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1356.960205][T16345] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1357.047410][T16060] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1357.156194][T16347] loop1: detected capacity change from 0 to 2048 [ 1357.169693][T16347] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1357.186697][T16347] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1357.551314][T16350] loop5: detected capacity change from 0 to 256 [ 1358.685546][T12964] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1358.695555][T12964] Bluetooth: hci0: Injecting HCI hardware error event [ 1358.707314][ T5132] Bluetooth: hci0: hardware error 0x00 [ 1359.613976][T16365] loop0: detected capacity change from 0 to 512 [ 1359.622633][T16365] EXT4-fs: Ignoring removed bh option [ 1359.674307][T16365] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1359.682269][T16060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.731804][T16365] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 1359.748451][T16365] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 1359.802887][T16365] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1359.825742][T16060] 8021q: adding VLAN 0 to HW filter on device team0 [ 1359.854292][ T5184] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1359.906332][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.913716][ T5187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1359.948328][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.955737][ T5187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1360.017201][T15709] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1360.075073][T15916] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1360.089860][ T5184] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1360.113879][ T5184] usb 4-1: New USB device found, idVendor=1e2d, idProduct=0069, bcdDevice=f7.47 [ 1360.143826][ T5184] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.173042][ T5184] usb 4-1: Product: syz [ 1360.188183][ T5184] usb 4-1: Manufacturer: syz [ 1360.192832][ T5184] usb 4-1: SerialNumber: syz [ 1360.225453][ T5184] usb 4-1: config 0 descriptor?? [ 1360.247390][ T5184] cdc_ether 4-1:0.0: invalid descriptor buffer length [ 1360.256394][ T5184] usb 4-1: bad CDC descriptors [ 1360.285066][T15916] usb 2-1: Using ep0 maxpacket: 32 [ 1360.305238][T15916] usb 2-1: New USB device found, idVendor=03f0, idProduct=0107, bcdDevice= 2.00 [ 1360.315192][T15916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.344227][T15916] usb 2-1: Product: syz [ 1360.348849][T16060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1360.363238][T15916] usb 2-1: Manufacturer: syz [ 1360.374121][T15916] usb 2-1: SerialNumber: syz [ 1360.390538][T15916] usb 2-1: config 0 descriptor?? [ 1360.411499][T15916] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1361.666107][ T5132] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1361.733370][ T4503] usb 4-1: USB disconnect, device number 45 [ 1361.843267][T15916] usb 2-1: USB disconnect, device number 13 [ 1361.912117][T16392] loop0: detected capacity change from 0 to 16 [ 1361.945793][T16392] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1362.390708][T16376] loop2: detected capacity change from 0 to 32768 [ 1362.575646][T16406] loop3: detected capacity change from 0 to 2048 [ 1362.642309][T16409] loop0: detected capacity change from 0 to 256 [ 1362.646447][T16406] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1362.699024][T16060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1362.730605][T16406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1363.049814][T16376] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 1363.497638][T16376] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 1365.204626][T16376] bcachefs (loop2): alloc_read... done [ 1365.210235][T16376] bcachefs (loop2): stripes_read... done [ 1365.253308][T16376] bcachefs (loop2): snapshots_read... done [ 1365.297764][T16422] loop5: detected capacity change from 0 to 2048 [ 1365.305718][T16376] bcachefs (loop2): journal_replay... done [ 1365.311650][T16376] bcachefs (loop2): resume_logged_ops... done [ 1365.346007][T16422] EXT4-fs: Ignoring removed mblk_io_submit option [ 1365.362104][T16376] bcachefs (loop2): going read-write [ 1365.369422][T16376] bcachefs (loop2): bch2_copygc_start(): error creating copygc thread EINTR [ 1365.403554][T16376] bcachefs (loop2): error starting copygc thread [ 1365.409968][T16376] bcachefs (loop2): going read-only [ 1365.445281][T16376] bcachefs (loop2): finished waiting for writes to stop [ 1365.488666][T16422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1365.489639][T16376] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 1365.543057][T16376] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 1365.610869][T16376] bcachefs (loop2): shutdown complete, journal seq 11 [ 1365.649879][T16376] bcachefs (loop2): marking filesystem clean [ 1365.694355][T10999] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1365.712477][T16376] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR [ 1365.742253][T16376] bcachefs (loop2): shutting down [ 1365.851560][T16376] bcachefs (loop2): shutdown complete [ 1365.859481][T16436] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz-executor.5: bg 0: block 234: padding at end of block bitmap is not set [ 1365.891340][T16436] EXT4-fs (loop5): Remounting filesystem read-only [ 1365.904587][T10999] usb 4-1: Using ep0 maxpacket: 8 [ 1365.944574][T10999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1365.973529][T10999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1366.004079][T10999] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1366.023462][T10999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1366.059880][T10999] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1366.095813][T10999] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1366.143352][T10999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.184934][T10999] usb 4-1: config 0 descriptor?? [ 1366.192242][T16428] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1366.288930][T16440] loop1: detected capacity change from 0 to 512 [ 1366.298305][T16440] EXT4-fs: Ignoring removed bh option [ 1366.310802][T16440] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1366.350005][T16440] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 1366.428032][T16440] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 1366.486232][T16440] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1366.497077][T16060] veth0_vlan: entered promiscuous mode [ 1366.620798][T16060] veth1_vlan: entered promiscuous mode [ 1366.668511][T15881] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1366.893995][T16060] veth0_macvtap: entered promiscuous mode [ 1366.967605][T16060] veth1_macvtap: entered promiscuous mode [ 1367.131113][T16060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.173951][T16060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.196406][T16060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.223318][T16060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.257255][T16060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.290785][T16060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.322888][T16060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.351846][T16060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.381638][T16060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.410981][T16060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.446938][ T5132] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 1367.474533][T11632] usb 4-1: USB disconnect, device number 46 [ 1367.537240][T16060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1367.611771][T16060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.656474][T16060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.693197][T16060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.723841][T16060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.752606][T16060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.777406][T16060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.791765][T16060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.802822][T16060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.833553][T16060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.893264][T16060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.725171][T16060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.811179][T16060] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.883519][T16060] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.892326][T16060] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.975690][T16060] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.566914][T16468] loop3: detected capacity change from 0 to 256 [ 1369.829799][ T2452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.980342][ T2452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.717085][ T9847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.797096][ T9847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.977614][T16476] loop1: detected capacity change from 0 to 2048 [ 1371.092097][T16476] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1371.127468][T16476] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1372.924868][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.931293][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1375.215840][T16506] input: syz1 as /devices/virtual/input/input46 [ 1375.522807][T10999] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1375.733267][T10999] usb 1-1: Using ep0 maxpacket: 8 [ 1375.761382][T10999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1375.807135][T10999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1375.864995][T16518] loop2: detected capacity change from 0 to 256 [ 1375.881800][T10999] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1375.917226][T10999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1375.958804][T10999] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1376.326615][T10999] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1376.335823][T10999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.354556][T10999] usb 1-1: config 0 descriptor?? [ 1376.361493][T16508] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1377.342355][ T5132] Bluetooth: hci5: command tx timeout [ 1377.598827][T16536] loop2: detected capacity change from 0 to 2048 [ 1377.630721][T16536] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1377.657075][T16536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1377.780070][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1378.020882][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.066305][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1378.092092][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.108236][ T9] usb 5-1: Product: syz [ 1378.144759][ T9] usb 5-1: Manufacturer: syz [ 1378.162572][ T9] usb 5-1: SerialNumber: syz [ 1378.813798][T12964] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1380.588850][ T9] cdc_ncm 5-1:1.0: bind() failure [ 1380.630019][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1380.663814][ T9] cdc_ncm 5-1:1.1: bind() failure [ 1380.693681][ T9] usb 5-1: USB disconnect, device number 36 [ 1381.018710][T16560] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1381.044352][T16560] overlayfs: failed to set xattr on upper [ 1381.081568][T16560] overlayfs: ...falling back to redirect_dir=nofollow. [ 1381.109501][T16560] overlayfs: ...falling back to index=off. [ 1381.115589][T16560] overlayfs: ...falling back to uuid=null. [ 1381.645300][T16565] input: syz1 as /devices/virtual/input/input47 [ 1381.719071][ T29] audit: type=1326 audit(1719250560.042:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16564 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8687d0a9 code=0x0 [ 1381.760360][T16556] loop3: detected capacity change from 0 to 32768 [ 1381.788374][T16556] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (16556) [ 1381.820432][T16558] loop4: detected capacity change from 0 to 32768 [ 1381.842249][T16556] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1381.842440][T16558] BTRFS: device /dev/loop4 (7:4) using temp-fsid 3c2300b2-ae04-46f4-82a8-654a63fdb07a [ 1381.852955][T16556] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1381.880531][T16556] BTRFS info (device loop3): using free-space-tree [ 1381.885069][T16558] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (16558) [ 1381.915902][T16558] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1381.928665][T16558] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1381.937637][T16558] BTRFS info (device loop4): using free-space-tree [ 1382.247620][T15835] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1382.258074][ T29] audit: type=1800 audit(1719250560.572:484): pid=16558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1382.338942][T16060] BTRFS info (device loop4): last unmount of filesystem 3c2300b2-ae04-46f4-82a8-654a63fdb07a [ 1382.822945][T16598] loop2: detected capacity change from 0 to 256 [ 1384.770287][T16615] loop3: detected capacity change from 0 to 2048 [ 1384.827539][T16615] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1384.857510][T16615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1390.066921][T16636] loop3: detected capacity change from 0 to 32768 [ 1390.097633][T16636] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (16636) [ 1390.150552][T16636] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1390.174180][T16636] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1390.183072][T16636] BTRFS info (device loop3): using free-space-tree [ 1390.237870][T16638] loop2: detected capacity change from 0 to 32768 [ 1390.247531][T16638] BTRFS: device /dev/loop2 (7:2) using temp-fsid 40b67afd-3742-461c-b212-382f56e468d6 [ 1390.257298][T16638] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (16638) [ 1390.280599][T16638] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1390.291092][T16638] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1390.300009][T16638] BTRFS info (device loop2): using free-space-tree [ 1390.505470][T15835] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1390.532495][ T29] audit: type=1800 audit(1719250568.842:485): pid=16638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1390.670345][T15771] BTRFS info (device loop2): last unmount of filesystem 40b67afd-3742-461c-b212-382f56e468d6 [ 1391.261809][T16422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1391.287005][T16670] input: syz1 as /devices/virtual/input/input48 [ 1391.388255][ T29] audit: type=1326 audit(1719250569.692:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16669 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01fb67d0a9 code=0x0 [ 1391.561740][T16673] loop4: detected capacity change from 0 to 512 [ 1391.582863][T16673] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1391.658013][T16673] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 1391.882282][T15916] usb 1-1: USB disconnect, device number 27 [ 1392.243283][ T9845] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.743819][ T9845] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.057301][ T9845] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.427157][ T9845] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.563446][ T5132] Bluetooth: hci4: command tx timeout [ 1393.686689][T12964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1393.700798][T12964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1393.711271][T12964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1393.720533][T12964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1393.733242][T12964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1393.763719][T12964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1394.271866][ T9845] bridge_slave_1: left allmulticast mode [ 1394.296127][ T9845] bridge_slave_1: left promiscuous mode [ 1394.322627][ T9845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.397757][ T9845] bridge_slave_0: left allmulticast mode [ 1394.406400][T16702] loop3: detected capacity change from 0 to 32768 [ 1394.425956][ T9845] bridge_slave_0: left promiscuous mode [ 1394.431967][ T9845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.490010][T16702] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (16702) [ 1394.605086][T16702] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1394.624207][T16702] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1394.693290][T16702] BTRFS info (device loop3): using free-space-tree [ 1394.759861][T16696] loop4: detected capacity change from 0 to 32768 [ 1394.808493][T16696] BTRFS: device /dev/loop4 (7:4) using temp-fsid 37abcbed-499a-4df3-8b42-7bd7bfb6f6b6 [ 1394.833366][T16696] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (16696) [ 1394.861229][T16704] loop2: detected capacity change from 0 to 32768 [ 1394.883997][T16704] BTRFS: device /dev/loop2 (7:2) using temp-fsid 6156409d-6289-4386-973e-ef3378c37b2f [ 1394.897412][T16696] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1394.916221][T16704] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (16704) [ 1394.940163][T16696] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1394.993619][T16704] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1395.025587][T16696] BTRFS info (device loop4): using free-space-tree [ 1395.033419][T16704] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1395.059547][T16704] BTRFS info (device loop2): using free-space-tree [ 1395.381061][T16709] loop0: detected capacity change from 0 to 32768 [ 1395.393441][T16709] XFS (loop0): sunit and swidth must be specified together [ 1395.432222][T15835] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1395.469041][ T29] audit: type=1800 audit(1719250573.792:487): pid=16704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1395.635159][T16764] input: syz1 as /devices/virtual/input/input49 [ 1395.713699][ T29] audit: type=1326 audit(1719250574.032:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf8e47d0a9 code=0x0 [ 1395.749870][T16060] BTRFS info (device loop4): last unmount of filesystem 37abcbed-499a-4df3-8b42-7bd7bfb6f6b6 [ 1395.769582][T15771] BTRFS info (device loop2): last unmount of filesystem 6156409d-6289-4386-973e-ef3378c37b2f [ 1395.885552][ T5132] Bluetooth: hci1: command tx timeout [ 1396.402356][T16709] loop0: detected capacity change from 0 to 764 [ 1396.694166][ T5184] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1396.923671][ T5184] usb 4-1: Using ep0 maxpacket: 32 [ 1396.954577][ T5184] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1396.970547][ T5184] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1397.006888][ T5184] usb 4-1: config 0 interface 0 has no altsetting 1 [ 1397.020983][ T5184] usb 4-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 1397.035600][ T5184] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.043801][ T5184] usb 4-1: Product: syz [ 1397.048144][ T5184] usb 4-1: Manufacturer: syz [ 1397.052777][ T5184] usb 4-1: SerialNumber: syz [ 1397.057080][T16775] loop4: detected capacity change from 0 to 512 [ 1397.080253][ T5184] usb 4-1: config 0 descriptor?? [ 1397.089171][T16775] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1397.136384][ T5184] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1397.218076][T16775] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 1397.245514][T16779] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1397.348213][ T5184] usb 4-1: USB disconnect, device number 47 [ 1397.392307][ T9845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1397.449572][ T9845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.461885][T16783] loop2: detected capacity change from 0 to 256 [ 1397.464281][ T9845] bond0 (unregistering): Released all slaves [ 1397.792854][T16787] syz_tun: entered promiscuous mode [ 1397.833670][T16790] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1397.850578][T16784] syz_tun: left promiscuous mode [ 1397.963604][ T5132] Bluetooth: hci1: command tx timeout [ 1399.886447][T16806] input: syz1 as /devices/virtual/input/input50 [ 1400.043928][ T29] audit: type=1326 audit(1719250578.342:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16805 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8687d0a9 code=0x0 [ 1400.067557][ T5132] Bluetooth: hci1: command tx timeout [ 1400.493332][ T9845] hsr_slave_0: left promiscuous mode [ 1400.542621][ T9845] hsr_slave_1: left promiscuous mode [ 1400.603995][ T9845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1400.614374][ T9845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1400.656344][ T9845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1400.686572][ T9845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1400.849700][ T9845] veth1_macvtap: left promiscuous mode [ 1400.873618][ T9845] veth0_macvtap: left promiscuous mode [ 1400.891203][ T9845] veth1_vlan: left promiscuous mode [ 1400.911417][ T9845] veth0_vlan: left promiscuous mode [ 1401.336462][T16798] loop3: detected capacity change from 0 to 32768 [ 1401.363446][T16798] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (16798) [ 1401.408450][T16797] loop1: detected capacity change from 0 to 32768 [ 1401.449501][T16800] loop4: detected capacity change from 0 to 32768 [ 1401.467211][T16797] BTRFS: device /dev/loop1 (7:1) using temp-fsid 221241e5-3cf8-416c-bb41-02920347c88f [ 1401.481131][T16798] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1401.511538][T16797] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (16797) [ 1401.525909][T16798] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1401.558820][T16798] BTRFS info (device loop3): using free-space-tree [ 1401.576450][T16800] BTRFS: device /dev/loop4 (7:4) using temp-fsid aae1dfaf-fd77-41b6-96f7-32c730d583b8 [ 1401.591623][T16800] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (16800) [ 1401.614215][T16798] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1401.629482][T16798] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1401.656242][T16798] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1401.688481][T16822] loop2: detected capacity change from 0 to 512 [ 1401.711982][T16798] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1401.726848][T16798] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1401.744984][T16822] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1401.751990][T16810] loop0: detected capacity change from 0 to 32768 [ 1401.761440][T16800] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1401.765052][T16810] XFS (loop0): sunit and swidth must be specified together [ 1401.791707][T16800] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1401.792638][T16798] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1401.802317][T16798] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1401.853926][T16800] BTRFS info (device loop4): using free-space-tree [ 1401.855061][T16822] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 1401.886679][T16798] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1401.887899][T16798] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1401.988435][T16798] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1402.017683][T16798] BTRFS error (device loop3): open_ctree failed [ 1402.110161][T16800] BTRFS error (device loop4): open_ctree failed [ 1402.153835][ T5132] Bluetooth: hci1: command tx timeout [ 1402.981561][T16810] loop0: detected capacity change from 0 to 764 [ 1403.610698][T16868] input: syz1 as /devices/virtual/input/input51 [ 1403.674776][ T29] audit: type=1326 audit(1719250581.972:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16866 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8687d0a9 code=0x0 [ 1404.631190][T16879] loop2: detected capacity change from 0 to 512 [ 1404.662896][T16879] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1404.738132][T16879] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 1404.749090][T16864] loop3: detected capacity change from 0 to 32768 [ 1404.812181][T16864] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (16864) [ 1404.830090][ T9845] team0 (unregistering): Port device team_slave_1 removed [ 1404.896506][T16864] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1404.940953][T16864] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 1404.968650][T16864] BTRFS info (device loop3): using free-space-tree [ 1405.150659][ T9845] team0 (unregistering): Port device team_slave_0 removed [ 1405.170668][T16873] loop1: detected capacity change from 0 to 32768 [ 1405.330492][T16873] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1405.455812][ T29] audit: type=1800 audit(1719250583.772:491): pid=16906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 1405.493479][T16864] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 1405.632516][T16873] XFS (loop1): Ending clean mount [ 1405.668666][T16873] XFS (loop1): Quotacheck needed: Please wait. [ 1405.876293][T16877] loop4: detected capacity change from 0 to 32768 [ 1405.921891][T16877] BTRFS: device /dev/loop4 (7:4) using temp-fsid c1c3fb11-9def-41d8-833c-6e1541dbf9d9 [ 1405.948029][T16873] XFS (loop1): Quotacheck: Done. [ 1405.980590][T16877] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (16877) [ 1406.062237][T16877] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1406.091102][T16877] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1406.110755][T16877] BTRFS info (device loop4): using free-space-tree [ 1406.184060][T15835] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1406.220822][T16882] loop2: detected capacity change from 0 to 32768 [ 1406.242841][T16882] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (16882) [ 1406.272853][T16882] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1406.288331][T16882] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1406.301552][T16882] BTRFS info (device loop2): using free-space-tree [ 1406.595921][T15881] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1406.715320][ T29] audit: type=1800 audit(1719250585.042:492): pid=16877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1406.758646][T15771] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1406.887514][T16060] BTRFS info (device loop4): last unmount of filesystem c1c3fb11-9def-41d8-833c-6e1541dbf9d9 [ 1409.040276][T16956] loop2: detected capacity change from 0 to 2048 [ 1409.145954][T16956] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1409.162131][T16941] loop3: detected capacity change from 0 to 32768 [ 1409.215377][T16941] BTRFS: device /dev/loop3 (7:3) using temp-fsid ffaf5883-f7f9-4eb7-b7a7-22131848e1b3 [ 1409.237257][T16956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1409.272883][T16707] chnl_net:caif_netlink_parms(): no params data found [ 1409.273279][T16941] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (16941) [ 1409.739858][T16941] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1409.750695][T16941] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1409.851513][T16941] BTRFS info (device loop3): using free-space-tree [ 1410.089221][T12964] Bluetooth: hci4: command 0x0406 tx timeout [ 1410.400148][T16941] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1410.401518][T16941] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1410.415388][T16971] input: syz1 as /devices/virtual/input/input52 [ 1410.549949][T16941] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1410.557767][T16941] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1410.665134][ T29] audit: type=1326 audit(1719250588.962:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feefd07d0a9 code=0x0 [ 1410.707980][T16941] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1410.725668][T16941] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1410.752927][T16707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.770122][T16941] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1410.794748][T16707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.812215][T16707] bridge_slave_0: entered allmulticast mode [ 1410.821857][T16941] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1410.822164][T16707] bridge_slave_0: entered promiscuous mode [ 1410.822889][T16941] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1410.913619][T16707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.930869][T16941] BTRFS error (device loop3): open_ctree failed [ 1410.963454][T16707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.997418][T16707] bridge_slave_1: entered allmulticast mode [ 1411.058685][T16707] bridge_slave_1: entered promiscuous mode [ 1411.197902][T16989] loop2: detected capacity change from 0 to 512 [ 1411.293440][T16989] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1411.374432][T16989] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 1411.418720][T16707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1411.487679][T16707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1411.830568][T16707] team0: Port device team_slave_0 added [ 1411.891087][T16707] team0: Port device team_slave_1 added [ 1412.182670][T16707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1412.210364][T16707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.353375][T16707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1412.423326][T16707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.453751][T16707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.543258][T16707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.831027][T16707] hsr_slave_0: entered promiscuous mode [ 1412.865185][T16707] hsr_slave_1: entered promiscuous mode [ 1412.882843][T16988] loop0: detected capacity change from 0 to 32768 [ 1412.897736][T16707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1412.913289][T16707] Cannot create hsr debugfs directory [ 1412.940577][T16988] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (16988) [ 1413.016042][T16988] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1413.036662][T16988] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1413.073425][T16988] BTRFS info (device loop0): using free-space-tree [ 1413.298302][T16997] loop3: detected capacity change from 0 to 32768 [ 1413.381447][T16997] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1413.456965][ T29] audit: type=1800 audit(1719250591.782:494): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 1413.525329][T16988] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 1413.547068][T16996] loop4: detected capacity change from 0 to 32768 [ 1413.564288][T16996] BTRFS: device /dev/loop4 (7:4) using temp-fsid c3618144-13db-4440-ad24-d7bd72bfbefe [ 1413.578717][T16993] loop1: detected capacity change from 0 to 32768 [ 1413.589191][T16996] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (16996) [ 1413.659481][T16993] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (16993) [ 1413.675321][T16996] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1413.679907][T16997] XFS (loop3): Ending clean mount [ 1413.696877][T16996] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1413.701616][T16993] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1413.722407][T16996] BTRFS info (device loop4): using free-space-tree [ 1413.744918][T16997] XFS (loop3): Quotacheck needed: Please wait. [ 1413.761675][T16993] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1413.773848][T16993] BTRFS info (device loop1): using free-space-tree [ 1413.893606][T16997] XFS (loop3): Quotacheck: Done. [ 1414.015514][ T29] audit: type=1800 audit(1719250592.342:495): pid=16996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1414.298008][T15881] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1414.309976][T16060] BTRFS info (device loop4): last unmount of filesystem c3618144-13db-4440-ad24-d7bd72bfbefe [ 1414.392879][T15709] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1414.720320][T15835] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1415.028391][T16707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1415.110383][T16707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1415.210809][T16707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1415.311523][T16707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1415.754934][ T5132] Bluetooth: Frame is too long (len 133, expected len 4) [ 1415.769679][T17069] input: syz1 as /devices/virtual/input/input53 [ 1415.799864][T17070] loop0: detected capacity change from 0 to 1024 [ 1415.887310][ T29] audit: type=1326 audit(1719250594.182:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17065 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8687d0a9 code=0x0 [ 1416.179236][T16707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.224889][T16707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1416.251137][T15012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.258518][T15012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1416.431180][T15012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.438780][T15012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.829325][T17088] 9pnet_fd: Insufficient options for proto=fd [ 1417.971984][T17091] loop2: detected capacity change from 0 to 512 [ 1418.049700][T17091] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1418.176945][T17091] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 1418.495413][T16707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1420.357288][T17099] loop0: detected capacity change from 0 to 32768 [ 1420.436277][T17099] BTRFS: device /dev/loop0 (7:0) using temp-fsid 1ed3bbc8-e771-4acb-8de4-9225dda71b67 [ 1420.496203][T17099] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (17099) [ 1420.615722][T17099] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1420.674445][T17099] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1420.746570][T17099] BTRFS info (device loop0): using free-space-tree [ 1420.787279][T16707] veth0_vlan: entered promiscuous mode [ 1420.903380][T16707] veth1_vlan: entered promiscuous mode [ 1420.999168][ T29] audit: type=1800 audit(1719250599.322:497): pid=17099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 1421.025513][ T5184] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1421.101808][T16707] veth0_macvtap: entered promiscuous mode [ 1421.140657][T16707] veth1_macvtap: entered promiscuous mode [ 1421.205320][T15709] BTRFS info (device loop0): last unmount of filesystem 1ed3bbc8-e771-4acb-8de4-9225dda71b67 [ 1421.235876][T17143] input: syz1 as /devices/virtual/input/input54 [ 1421.253210][ T5184] usb 4-1: Using ep0 maxpacket: 16 [ 1421.257903][T16707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.268041][ T5184] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1421.282666][ T29] audit: type=1326 audit(1719250599.602:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8687d0a9 code=0x0 [ 1421.300602][T16707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.327578][ T5184] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1421.333491][T16707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.353698][ T5184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.373192][T16707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.400366][T16707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.401717][ T5184] usb 4-1: config 0 descriptor?? [ 1421.451929][T16707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.471274][T16707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.490883][T16707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.504209][T16707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.529912][T16707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.555342][T16707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1421.666649][T16707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.712559][T16707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.743652][T16707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.782307][T16707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.828230][T16707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.861159][T16707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.910704][T16707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.948923][T16707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.973342][T16707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.026070][T16707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.045505][T17123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.063600][T17123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.090874][T16707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1422.122109][ T5184] hid-generic 0003:0158:0100.0014: unknown main item tag 0x1 [ 1422.155610][T17124] loop1: detected capacity change from 0 to 32768 [ 1422.185657][T16707] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.219098][ T5184] hid-generic 0003:0158:0100.0014: unexpected long global item [ 1422.233378][T17124] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (17124) [ 1422.251362][T16707] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.264745][ T5184] hid-generic 0003:0158:0100.0014: probe with driver hid-generic failed with error -22 [ 1422.285944][T16707] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.308115][ T5184] usb 4-1: USB disconnect, device number 48 [ 1422.314200][T16707] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.354466][T17124] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1422.403688][T17124] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 1422.412173][T17124] BTRFS info (device loop1): using free-space-tree [ 1423.354862][T17155] loop0: detected capacity change from 0 to 2048 [ 1423.375693][T17155] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1423.390143][T17155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1424.361217][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.432698][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.736050][T17124] BTRFS error (device loop1): open_ctree failed [ 1424.858882][ T5604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.889422][ T5604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.847372][T17195] loop4: detected capacity change from 0 to 512 [ 1425.883976][T17193] input: syz1 as /devices/virtual/input/input55 [ 1426.242190][T17195] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1426.373512][ T29] audit: type=1326 audit(1719250604.682:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8687d0a9 code=0x0 [ 1426.497304][T17195] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 1427.982833][T17214] loop2: detected capacity change from 0 to 1024 [ 1428.020785][T17214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1428.195477][T17217] loop1: detected capacity change from 0 to 2048 [ 1428.216510][T17217] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1428.266129][T17217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1429.956783][T17238] loop4: detected capacity change from 0 to 256 [ 1430.023917][T17238] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1430.095485][T17238] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1430.143444][T17238] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1430.151168][T17238] UDF-fs: Scanning with blocksize 512 failed [ 1430.221133][T17238] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1430.282003][T17238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1430.311018][T17215] loop0: detected capacity change from 0 to 32768 [ 1430.364969][T17215] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (17215) [ 1430.494070][T17215] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1430.592854][T17215] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1430.770639][T17215] BTRFS info (device loop0): using free-space-tree [ 1430.991954][T17215] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1431.014788][T17215] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1431.107315][T17215] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1431.193621][T17215] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1431.265354][T17215] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1431.344694][T17215] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1431.417764][T17215] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1431.434808][T17215] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1431.445870][T17215] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1431.456345][T17215] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1431.505832][T17215] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1431.518426][T17259] input: syz1 as /devices/virtual/input/input56 [ 1431.566317][T17215] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1431.567692][T17215] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1431.609879][T17215] BTRFS error (device loop0): open_ctree failed [ 1431.625849][ T29] audit: type=1326 audit(1719250609.932:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17253 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6727a7d0a9 code=0x0 [ 1431.662496][T17266] loop2: detected capacity change from 0 to 64 [ 1431.919581][ T5132] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1432.973670][T17272] loop2: detected capacity change from 0 to 256 [ 1433.440374][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.446879][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1436.167259][T17307] input: syz1 as /devices/virtual/input/input57 [ 1436.263542][ T29] audit: type=1326 audit(1719250614.562:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17306 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6727a7d0a9 code=0x0 [ 1436.278054][T17309] loop0: detected capacity change from 0 to 512 [ 1436.350655][T12964] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1436.403208][T17309] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1436.495071][T17309] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 1436.722406][T17316] loop5: detected capacity change from 0 to 256 [ 1437.328216][T17290] loop1: detected capacity change from 0 to 32768 [ 1437.618514][T17290] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop1": -EINTR [ 1438.229718][T12964] Bluetooth: Frame is too long (len 133, expected len 4) [ 1440.861891][T17355] loop4: detected capacity change from 0 to 256 [ 1440.915488][T17356] input: syz1 as /devices/virtual/input/input58 [ 1441.033361][ T29] audit: type=1326 audit(1719250619.342:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17354 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8687d0a9 code=0x0 [ 1441.233593][T17358] loop0: detected capacity change from 0 to 2048 [ 1441.319097][T17358] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1442.132207][T17358] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1443.488738][T17370] loop2: detected capacity change from 0 to 128 [ 1443.889045][T10999] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1443.918811][T17382] loop3: detected capacity change from 0 to 512 [ 1443.973987][T17382] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1444.014517][T17382] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 1444.065642][T12964] Bluetooth: Frame is too long (len 133, expected len 4) [ 1444.114970][T10999] usb 3-1: Using ep0 maxpacket: 16 [ 1444.852064][T10999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xEF has an invalid bInterval 252, changing to 11 [ 1444.929028][T10999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xEF has invalid maxpacket 59323, setting to 1024 [ 1445.005416][T10999] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1445.034558][T10999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.074407][T10999] usb 3-1: config 0 descriptor?? [ 1445.080492][T17370] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1446.195387][T17407] loop3: detected capacity change from 0 to 256 [ 1446.335364][T17370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.377623][T17370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.441003][T10999] hid (null): global environment stack underflow [ 1446.493338][T10999] hid (null): global environment stack underflow [ 1446.538584][T10999] hid (null): unknown global tag 0xd [ 1446.571600][T10999] hid (null): report_id 0 is invalid [ 1446.622226][T10999] hid (null): usage index exceeded [ 1447.103015][T17412] loop1: detected capacity change from 0 to 2048 [ 1447.187765][T17412] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1447.268189][T17412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1447.558433][T10999] hid-generic 0003:0158:0100.0015: global environment stack underflow [ 1447.570746][T10999] hid-generic 0003:0158:0100.0015: item 0 4 1 11 parsing failed [ 1447.580024][T10999] hid-generic 0003:0158:0100.0015: probe with driver hid-generic failed with error -22 [ 1447.594411][T10999] usb 3-1: USB disconnect, device number 24 [ 1451.088159][T17442] loop2: detected capacity change from 0 to 512 [ 1451.234195][T17442] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1451.287745][T17442] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 1451.344423][T17451] syz-executor.3 (pid 17451) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1451.654508][T17459] loop3: detected capacity change from 0 to 256 [ 1453.366457][T17466] loop5: detected capacity change from 0 to 2048 [ 1453.431415][T17466] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1453.504841][T17466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1453.803389][T17480] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1455.519736][T17501] loop4: detected capacity change from 0 to 256 [ 1455.542541][T17491] loop0: detected capacity change from 0 to 4096 [ 1455.625935][T17491] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1456.252882][T12964] Bluetooth: hci5: command 0x0406 tx timeout [ 1456.939766][T17505] loop2: detected capacity change from 0 to 512 [ 1457.020052][T17491] ntfs3: loop0: Failed to read $UpCase (-4). [ 1457.050485][T17505] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1457.123905][T17505] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 1457.166967][ T5132] Bluetooth: Frame is too long (len 133, expected len 4) [ 1457.991028][T17530] loop1: detected capacity change from 0 to 128 [ 1458.036068][T17530] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18703, location=18703 [ 1458.087766][T17530] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1458.154544][T17530] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1459.428441][T17553] loop1: detected capacity change from 0 to 256 [ 1461.184407][T17564] loop3: detected capacity change from 0 to 512 [ 1461.274003][T17564] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1461.343216][T17564] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 1463.077416][ T29] audit: type=1804 audit(1719250641.402:503): pid=17596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2690952015/syzkaller.AQ6kyF/76/bus" dev="sda1" ino=1954 res=1 errno=0 [ 1464.520108][T17615] loop2: detected capacity change from 0 to 256 [ 1465.060795][T17626] loop5: detected capacity change from 0 to 128 [ 1466.107211][T17632] loop4: detected capacity change from 0 to 512 [ 1466.149959][T17632] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1466.184906][T17632] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 1468.747937][T17668] loop0: detected capacity change from 0 to 256 [ 1468.761599][T17670] loop4: detected capacity change from 0 to 128 [ 1469.873669][T17690] loop2: detected capacity change from 0 to 512 [ 1469.926966][T17690] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1469.990898][T17690] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 1473.025745][ T29] audit: type=1326 audit(1719250651.352:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17712 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fb67d0a9 code=0x7ffc0000 [ 1473.132055][ T29] audit: type=1326 audit(1719250651.392:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17712 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fb67d0a9 code=0x7ffc0000 [ 1473.237675][ T29] audit: type=1326 audit(1719250651.392:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17712 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01fb67d0a9 code=0x7ffc0000 [ 1473.353198][ T29] audit: type=1326 audit(1719250651.392:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17712 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fb67d0a9 code=0x7ffc0000 [ 1473.453729][ T29] audit: type=1326 audit(1719250651.392:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17712 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fb67d0a9 code=0x7ffc0000 [ 1473.554831][ T29] audit: type=1326 audit(1719250651.402:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17712 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f01fb67d0a9 code=0x7ffc0000 [ 1473.620889][ T29] audit: type=1326 audit(1719250651.402:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17712 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fb67d0a9 code=0x7ffc0000 [ 1473.682217][T17718] loop3: detected capacity change from 0 to 128 [ 1473.724237][ T29] audit: type=1326 audit(1719250651.402:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17712 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f01fb67d0a9 code=0x7ffc0000 [ 1473.821593][ T29] audit: type=1326 audit(1719250651.402:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17712 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fb67d0a9 code=0x7ffc0000 [ 1473.903355][ T29] audit: type=1326 audit(1719250651.402:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17712 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f01fb67d0a9 code=0x7ffc0000 [ 1474.072527][ T5132] Bluetooth: Frame is too long (len 133, expected len 4) [ 1474.613350][T17739] loop5: detected capacity change from 0 to 512 [ 1474.678114][T17739] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1474.776065][T17739] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 1478.788771][T17765] loop5: detected capacity change from 0 to 128 [ 1478.916214][T17765] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1478.942185][T17771] loop3: detected capacity change from 0 to 128 [ 1478.956699][T17765] ext4 filesystem being mounted at /root/syzkaller-testdir307179091/syzkaller.uOsM5T/33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1478.992865][ C1] vkms_vblank_simulate: vblank timer overrun [ 1479.278359][T16707] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1481.464874][T17798] loop5: detected capacity change from 0 to 512 [ 1481.527492][T17798] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1481.578397][T17768] loop1: detected capacity change from 0 to 32768 [ 1481.653450][T17768] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (17768) [ 1481.736886][T17798] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 1482.992327][T17817] loop3: detected capacity change from 0 to 256 [ 1483.008480][T17819] loop2: detected capacity change from 0 to 128 [ 1483.396762][T17828] loop0: detected capacity change from 0 to 128 [ 1483.539283][T17831] loop2: detected capacity change from 0 to 1024 [ 1483.595961][T17831] hfsplus: unable to parse mount options [ 1483.703788][ T5083] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1483.926855][ T5083] usb 5-1: config 0 has an invalid interface number: 66 but max is 1 [ 1483.958124][ T5083] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.017629][ T5083] usb 5-1: config 0 has no interface number 1 [ 1484.047102][ T5083] usb 5-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1484.089064][ T5083] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1484.114191][ T5083] usb 5-1: New USB device found, idVendor=2040, idProduct=c609, bcdDevice=f2.d3 [ 1484.123696][ T5183] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1484.146606][ T5083] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.168716][ T5083] usb 5-1: Product: syz [ 1484.182302][ T5083] usb 5-1: Manufacturer: syz [ 1484.199126][ T5083] usb 5-1: SerialNumber: syz [ 1484.246826][ T5083] usb 5-1: config 0 descriptor?? [ 1484.306328][ T5083] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 1484.319618][ T5183] usb 3-1: Using ep0 maxpacket: 16 [ 1484.346813][ T5183] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.390785][ T5083] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1484.401272][ T5183] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1484.426360][ T5183] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1484.438679][ T5083] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 1484.470152][ T5083] usb 5-1: media controller created [ 1484.482509][ T5183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.515473][ T5183] usb 3-1: Product: syz [ 1484.519710][ T5183] usb 3-1: Manufacturer: syz [ 1484.557425][ T5183] usb 3-1: SerialNumber: syz [ 1484.717922][ T5083] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1484.755949][ T5132] Bluetooth: Frame is too long (len 133, expected len 4) [ 1484.935761][ T5083] usb 5-1: selecting invalid altsetting 1 [ 1484.972342][ T5083] set interface failed [ 1484.972381][ T5083] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1485.002099][T17831] overlayfs: failed to resolve './file1': -2 [ 1485.033677][ T5083] error writing reg: 0xff, val: 0x00 [ 1485.285061][ T5183] usb 3-1: 0:2 : does not exist [ 1485.439280][ T5183] usb 3-1: USB disconnect, device number 25 [ 1485.449759][ T5083] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1487.091287][T17866] loop0: detected capacity change from 0 to 512 [ 1487.113011][T17866] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1487.207508][T17870] loop5: detected capacity change from 0 to 128 [ 1487.230239][T17866] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 1488.010756][ T5083] usb 5-1: USB disconnect, device number 37 [ 1490.152393][T17903] loop5: detected capacity change from 0 to 1024 [ 1490.193700][T17903] hfsplus: unable to parse mount options [ 1491.483205][ T5187] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1491.561314][T17895] loop2: detected capacity change from 0 to 32768 [ 1491.703288][ T5187] usb 6-1: Using ep0 maxpacket: 16 [ 1491.731522][ T5187] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.746944][ T5187] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1491.762562][ T5187] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1491.800929][ T5187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.819546][ T5187] usb 6-1: Product: syz [ 1491.822589][T17929] loop3: detected capacity change from 0 to 128 [ 1491.827819][ T5187] usb 6-1: Manufacturer: syz [ 1491.843120][ T5187] usb 6-1: SerialNumber: syz [ 1491.984274][T17895] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 1492.031248][T17895] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 1492.151395][T17895] bcachefs (loop2): alloc_read... done [ 1492.158415][T17903] overlayfs: failed to resolve './file1': -2 [ 1492.193160][T17895] bcachefs (loop2): stripes_read... done [ 1492.211028][ T5187] usb 6-1: 0:2 : does not exist [ 1492.223209][T17895] bcachefs (loop2): snapshots_read... done [ 1492.244423][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1492.244451][ T29] audit: type=1800 audit(1719250670.572:515): pid=17939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 1492.259482][T17895] bcachefs (loop2): journal_replay... done [ 1492.331276][T17895] bcachefs (loop2): resume_logged_ops... done [ 1492.354916][ T5187] usb 6-1: USB disconnect, device number 29 [ 1492.372433][T17895] bcachefs (loop2): going read-write [ 1492.401062][T17895] bcachefs (loop2): bch2_copygc_start(): error creating copygc thread EINTR [ 1492.438300][T17895] bcachefs (loop2): error starting copygc thread [ 1492.472131][T17895] bcachefs (loop2): going read-only [ 1492.477541][T17895] bcachefs (loop2): finished waiting for writes to stop [ 1492.487457][T17895] bcachefs (loop2): flushing journal and stopping allocators, journal seq 8 [ 1492.496450][T17895] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 8 [ 1492.573217][T17895] bcachefs (loop2): shutdown complete, journal seq 9 [ 1492.580903][T17895] bcachefs (loop2): marking filesystem clean [ 1492.594375][T17895] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR [ 1492.612763][T17895] bcachefs (loop2): shutting down [ 1492.805211][T17895] bcachefs (loop2): shutdown complete [ 1492.845126][T17946] loop4: detected capacity change from 0 to 256 [ 1494.782420][T17962] loop5: detected capacity change from 0 to 2048 [ 1494.856939][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.863542][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.950533][T17962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1496.367067][T17979] loop5: detected capacity change from 0 to 128 [ 1496.709857][T17983] loop0: detected capacity change from 0 to 2048 [ 1496.781773][T17983] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1497.021469][T17988] loop5: detected capacity change from 0 to 128 [ 1497.376546][ T5183] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1497.878769][T17996] loop2: detected capacity change from 0 to 4096 [ 1497.933268][ T5183] usb 6-1: Using ep0 maxpacket: 32 [ 1497.950611][ T5183] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1497.959541][ T5183] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1498.005766][ T5183] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 41042, setting to 1024 [ 1499.028796][ T5183] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1499.042084][ T5183] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1499.052655][ T5183] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1499.073164][ T5183] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1499.081661][ T5183] usb 6-1: Product: syz [ 1499.113626][ T5183] usb 6-1: Manufacturer: syz [ 1499.162604][ T5183] usb 6-1: SerialNumber: syz [ 1499.249684][ T5183] usb 6-1: config 0 descriptor?? [ 1499.300533][ T5183] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1499.359710][ T5183] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1499.382366][T18006] loop3: detected capacity change from 0 to 1024 [ 1499.405865][T18006] hfsplus: unable to parse mount options [ 1499.501397][T17988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.528373][T17988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.878430][T18014] loop2: detected capacity change from 0 to 2048 [ 1499.895691][ T5187] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1499.919908][T18014] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1500.134005][ T5187] usb 4-1: Using ep0 maxpacket: 16 [ 1500.160180][T10999] usb 6-1: USB disconnect, device number 30 [ 1500.164311][ T5187] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.190236][T10999] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1500.206861][ T5187] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1500.221920][T16707] VFS: Lookup of '. °. ' in vfat loop5 would have caused loop [ 1500.257327][ T5187] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1500.268714][T16707] VFS: Lookup of '. °. ' in vfat loop5 would have caused loop [ 1500.296684][ T5187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.343417][ T5187] usb 4-1: Product: syz [ 1500.370701][ T5187] usb 4-1: Manufacturer: syz [ 1500.383264][ T5187] usb 4-1: SerialNumber: syz [ 1500.884026][T18026] overlayfs: failed to resolve './file1': -2 [ 1501.714734][ T5187] usb 4-1: 0:2 : does not exist [ 1501.873196][ T5187] usb 4-1: USB disconnect, device number 49 [ 1502.208564][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.648152][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.750249][T18019] loop4: detected capacity change from 0 to 32768 [ 1503.321481][T18043] ceph: separator ':' missing in source [ 1504.274884][T18019] warn_alloc: 1 callbacks suppressed [ 1504.274910][T18019] syz-executor.4: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1504.356753][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.377874][T18019] CPU: 1 PID: 18019 Comm: syz-executor.4 Not tainted 6.10.0-rc5-syzkaller #0 [ 1504.386707][T18019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1504.396794][T18019] Call Trace: [ 1504.400103][T18019] [ 1504.403060][T18019] dump_stack_lvl+0x16c/0x1f0 [ 1504.407793][T18019] warn_alloc+0x24d/0x3a0 [ 1504.412192][T18019] ? __pfx_warn_alloc+0x10/0x10 [ 1504.417102][T18019] ? __bch2_darray_resize+0xd8/0x250 [ 1504.422458][T18019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.428134][T18019] ? __get_vm_area_node+0x190/0x2d0 [ 1504.433389][T18019] ? __get_vm_area_node+0x1bc/0x2d0 [ 1504.438658][T18019] __vmalloc_node_range_noprof+0xff7/0x1520 [ 1504.444638][T18019] ? __bch2_darray_resize+0xd8/0x250 [ 1504.449983][T18019] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1504.456383][T18019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.462068][T18019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.467743][T18019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.473417][T18019] ? trace_kmalloc+0x2d/0xe0 [ 1504.478065][T18019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.483740][T18019] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 1504.489513][T18019] ? __bch2_darray_resize+0xd8/0x250 [ 1504.495025][T18019] kvmalloc_node_noprof+0x14f/0x1a0 [ 1504.500305][T18019] ? __bch2_darray_resize+0xd8/0x250 [ 1504.505648][T18019] __bch2_darray_resize+0xd8/0x250 [ 1504.510820][T18019] bch2_fs_btree_write_buffer_init+0x2a2/0x380 [ 1504.517035][T18019] bch2_fs_alloc+0x1a50/0x2670 [ 1504.521878][T18019] ? __pfx_bch2_fs_alloc+0x10/0x10 [ 1504.527118][T18019] bch2_fs_open+0x7b5/0x1110 [ 1504.531797][T18019] ? kasan_save_free_info+0x3b/0x60 [ 1504.537058][T18019] ? __pfx_bch2_fs_open+0x10/0x10 [ 1504.542142][T18019] ? bch2_mount+0x46e/0x1230 [ 1504.546853][T18019] ? kasan_quarantine_put+0x10a/0x240 [ 1504.552293][T18019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.558064][T18019] ? lockdep_hardirqs_on+0x7c/0x110 [ 1504.563412][T18019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.569123][T18019] bch2_mount+0xe2c/0x1230 [ 1504.573626][T18019] ? __pfx_bch2_mount+0x10/0x10 [ 1504.578642][T18019] ? vfs_parse_fs_param_source+0x103/0x1e0 [ 1504.584518][T18019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.590192][T18019] ? aa_get_newest_label+0x376/0x680 [ 1504.595532][T18019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.601218][T18019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.606880][T18019] ? apparmor_capable+0x126/0x1e0 [ 1504.611936][T18019] ? __pfx_bch2_mount+0x10/0x10 [ 1504.616827][T18019] legacy_get_tree+0x10c/0x220 [ 1504.621641][T18019] vfs_get_tree+0x92/0x380 [ 1504.626111][T18019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.631776][T18019] path_mount+0x14e6/0x1f20 [ 1504.636340][T18019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.642004][T18019] ? kmem_cache_free+0x12f/0x3a0 [ 1504.646979][T18019] ? __pfx_path_mount+0x10/0x10 [ 1504.651892][T18019] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1504.657557][T18019] ? putname+0x12e/0x170 [ 1504.661843][T18019] __x64_sys_mount+0x297/0x320 [ 1504.666668][T18019] ? __pfx___x64_sys_mount+0x10/0x10 [ 1504.672022][T18019] do_syscall_64+0xcd/0x250 [ 1504.676583][T18019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.682528][T18019] RIP: 0033:0x7f6727a7e7aa [ 1504.686966][T18019] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1504.706602][T18019] RSP: 002b:00007f67287c2ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1504.715053][T18019] RAX: ffffffffffffffda RBX: 00007f67287c2f80 RCX: 00007f6727a7e7aa [ 1504.723048][T18019] RDX: 0000000020005b00 RSI: 0000000020005b40 RDI: 00007f67287c2f40 [ 1504.731047][T18019] RBP: 0000000020005b00 R08: 00007f67287c2f80 R09: 0000000000000000 [ 1504.739047][T18019] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020005b40 [ 1504.747046][T18019] R13: 00007f67287c2f40 R14: 0000000000005afb R15: 0000000020005b80 [ 1504.755069][T18019] [ 1504.758181][ C1] vkms_vblank_simulate: vblank timer overrun [ 1504.916115][T18019] Mem-Info: [ 1504.923204][T18019] active_anon:33762 inactive_anon:35 isolated_anon:0 [ 1504.923204][T18019] active_file:32 inactive_file:47807 isolated_file:0 [ 1504.923204][T18019] unevictable:0 dirty:28 writeback:0 [ 1504.923204][T18019] slab_reclaimable:10850 slab_unreclaimable:104537 [ 1504.923204][T18019] mapped:19206 shmem:13127 pagetables:720 [ 1504.923204][T18019] sec_pagetables:0 bounce:0 [ 1504.923204][T18019] kernel_misc_reclaimable:0 [ 1504.923204][T18019] free:1350996 free_pcp:4492 free_cma:0 [ 1504.977871][T18053] loop3: detected capacity change from 0 to 256 [ 1505.152531][T18019] Node 0 active_anon:137112kB inactive_anon:140kB active_file:128kB inactive_file:191160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:79424kB dirty:112kB writeback:0kB shmem:55208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10504kB pagetables:2924kB sec_pagetables:0kB all_unreclaimable? no [ 1505.184760][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.278853][T18019] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1505.309130][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.319516][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.413624][T18019] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.440894][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.555146][T18019] lowmem_reserve[]: 0 2565 2567 0 0 [ 1505.560539][T18019] Node 0 DMA32 free:1438000kB boost:0kB min:35052kB low:43812kB high:52572kB reserved_highatomic:0KB active_anon:128268kB inactive_anon:140kB active_file:128kB inactive_file:189348kB unevictable:0kB writepending:112kB present:3129332kB managed:2654752kB mlocked:0kB bounce:0kB free_pcp:11192kB local_pcp:2392kB free_cma:0kB [ 1505.590983][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.743169][T18019] lowmem_reserve[]: 0 0 1 0 0 [ 1505.748035][T18019] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:0kB present:1048576kB managed:1896kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1505.775967][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.837873][T18019] lowmem_reserve[]: 0 0 0 0 0 [ 1505.883188][T18019] Node 1 Normal free:3940360kB boost:0kB min:54828kB low:68532kB high:82236kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:7568kB local_pcp:7312kB free_cma:0kB [ 1505.912540][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.957128][T18059] loop1: detected capacity change from 0 to 2048 [ 1505.972754][ T12] bridge_slave_1: left allmulticast mode [ 1505.991453][ T12] bridge_slave_1: left promiscuous mode [ 1506.003173][T18019] lowmem_reserve[]: 0 0 0 0 0 [ 1506.021765][T18019] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1506.023733][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.053126][T18059] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1506.093198][T18019] Node 0 DMA32: 2*4kB (UE) 17*8kB (UE) 400*16kB (UME) 522*32kB (UME) 203*64kB (UME) 70*128kB (UME) 44*256kB (UME) 47*512kB (UME) 23*1024kB (UME) 4*2048kB (UME) 324*4096kB (UM) = 1439376kB [ 1506.171727][T18063] loop2: detected capacity change from 0 to 128 [ 1506.173499][T18019] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 1506.205187][ T12] bridge_slave_0: left allmulticast mode [ 1506.231389][ T12] bridge_slave_0: left promiscuous mode [ 1506.233251][T18019] Node 1 [ 1506.241146][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.262012][T18019] Normal: 4*4kB (U) 13*8kB (UM) 21*16kB (UM) 16*32kB (UM) 13*64kB (UM) 12*128kB (UM) 5*256kB (UM) 7*512kB (UM) 2*1024kB (UM) 5*2048kB (UM) 957*4096kB (M) = 3940360kB [ 1506.323219][T18019] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1506.360888][T18019] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1506.377619][T18019] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1506.393322][T18019] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1506.402732][T18019] 59573 total pagecache pages [ 1506.414437][T12964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1506.427104][T18019] 35 pages in swap cache [ 1506.427186][T12964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1506.431379][T18019] Free swap = 124176kB [ 1506.463528][T12964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1506.494477][T12964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1506.503755][T12964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1506.511460][T12964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1506.521399][T18019] Total swap = 124996kB [ 1506.527276][T18019] 2097051 pages RAM [ 1506.539108][T18019] 0 pages HighMem/MovableOnly [ 1506.548722][T18019] 401769 pages reserved [ 1506.553217][T18019] 0 pages cma reserved [ 1506.625120][T18019] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete [ 1508.635349][T12964] Bluetooth: hci1: command tx timeout [ 1509.181362][T18086] loop1: detected capacity change from 0 to 512 [ 1509.201761][T18086] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1509.263220][T18086] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 1509.946894][T18094] ceph: separator ':' missing in source [ 1511.142732][T12964] Bluetooth: hci1: command tx timeout [ 1512.068289][T18106] loop4: detected capacity change from 0 to 128 [ 1512.171737][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1512.310210][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1512.350638][ T12] bond0 (unregistering): Released all slaves [ 1513.185060][T12964] Bluetooth: hci1: command tx timeout [ 1513.935585][T18101] loop1: detected capacity change from 0 to 32768 [ 1514.329993][T18101] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1514.363560][T18101] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 1514.398159][T18101] BTRFS info (device loop1): using free-space-tree [ 1514.522948][T18101] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1514.524574][T18101] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1514.565489][T18101] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1514.663656][T18101] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1514.715306][T18101] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1514.739319][T18101] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1514.754396][ T12] hsr_slave_0: left promiscuous mode [ 1514.819634][ T12] hsr_slave_1: left promiscuous mode [ 1514.915379][T18101] BTRFS error (device loop1): open_ctree failed [ 1514.932896][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1514.966804][T18107] loop3: detected capacity change from 0 to 32768 [ 1514.983201][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1514.986577][T18107] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (18107) [ 1515.045405][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1515.052904][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.070749][T18107] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1515.126818][T18107] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1515.146083][T18109] loop4: detected capacity change from 0 to 32768 [ 1515.154443][T18107] BTRFS info (device loop3): using free-space-tree [ 1515.200729][T18107] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1515.202062][T18107] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1515.254912][T18107] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1515.255255][T12964] Bluetooth: hci1: command tx timeout [ 1515.432772][ T12] veth1_macvtap: left promiscuous mode [ 1515.438660][ T12] veth0_macvtap: left promiscuous mode [ 1515.447882][ T12] veth1_vlan: left promiscuous mode [ 1515.453777][ T12] veth0_vlan: left promiscuous mode [ 1516.207576][T18107] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1516.208680][T18107] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1516.222062][T18109] workqueue: Failed to create a rescuer kthread for wq "bcachefs_journal": -EINTR [ 1516.243878][T18109] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete [ 1516.264545][T18107] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1516.265590][T18107] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1516.354140][T18107] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1516.426494][T18107] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1516.487297][T18107] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1516.549170][T18107] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1516.587355][T18107] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1516.670286][T18107] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1516.768521][T18107] BTRFS error (device loop3): open_ctree failed [ 1517.275310][T18162] loop1: detected capacity change from 0 to 512 [ 1517.338913][T18162] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1517.437599][T18162] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 1517.591285][T18166] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1517.879566][T18169] loop4: detected capacity change from 0 to 256 [ 1520.103752][T18184] loop0: detected capacity change from 0 to 128 [ 1522.084141][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1522.278697][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1523.863974][T18205] loop4: detected capacity change from 0 to 2048 [ 1523.919228][T18205] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1523.977594][T18205] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1524.044197][T18207] loop1: detected capacity change from 0 to 512 [ 1524.087807][T18207] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1524.155323][T18207] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 1524.548883][T18199] loop0: detected capacity change from 0 to 32768 [ 1524.567055][T18210] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1524.569139][T18199] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (18199) [ 1524.629590][T18199] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1524.650842][T18199] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1524.681774][T18199] BTRFS info (device loop0): using free-space-tree [ 1524.975169][T18199] BTRFS info (device loop0): rebuilding free space tree [ 1525.108056][T18203] loop3: detected capacity change from 0 to 32768 [ 1525.460372][T18243] loop2: detected capacity change from 0 to 128 [ 1525.556014][T15709] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1525.567931][ T25] kworker/dying (25) used greatest stack depth: 16736 bytes left [ 1525.599388][T18064] chnl_net:caif_netlink_parms(): no params data found [ 1525.760003][T18203] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 1525.827432][T18203] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 1525.952313][T18203] bcachefs (loop3): alloc_read... done [ 1525.958022][T18203] bcachefs (loop3): stripes_read... done [ 1525.968159][T18203] bcachefs (loop3): snapshots_read... done [ 1525.988096][T18203] bcachefs (loop3): journal_replay... done [ 1525.994191][T18203] bcachefs (loop3): resume_logged_ops... done [ 1526.000472][T18203] bcachefs (loop3): going read-write [ 1526.023269][T18203] bcachefs (loop3): done starting filesystem [ 1526.190174][T18251] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1526.333300][T15835] bcachefs (loop3): shutting down [ 1526.356893][T15835] bcachefs (loop3): going read-only [ 1526.362146][T15835] bcachefs (loop3): finished waiting for writes to stop [ 1526.432274][T15835] bcachefs (loop3): flushing journal and stopping allocators, journal seq 9 [ 1526.445225][T18064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.455380][T15835] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 9 [ 1526.465162][T18064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.465456][T18064] bridge_slave_0: entered allmulticast mode [ 1526.470579][T18064] bridge_slave_0: entered promiscuous mode [ 1527.136511][T15835] bcachefs (loop3): shutdown complete, journal seq 10 [ 1527.295841][T18064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.303415][T18064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.460646][T18064] bridge_slave_1: entered allmulticast mode [ 1527.462026][T15835] bcachefs (loop3): marking filesystem clean [ 1527.506709][T18064] bridge_slave_1: entered promiscuous mode [ 1527.652080][T15835] bcachefs (loop3): shutdown complete [ 1527.860114][T18064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1527.969093][T18064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.133522][T18265] loop2: detected capacity change from 0 to 256 [ 1529.770705][T18064] team0: Port device team_slave_0 added [ 1529.810846][T18064] team0: Port device team_slave_1 added [ 1529.922601][T18270] loop0: detected capacity change from 0 to 512 [ 1529.979137][T18270] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1530.010293][T18270] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 1530.093338][T18064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1530.123570][T18064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1530.203440][T18064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1530.271214][T18064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1530.278270][T18064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1530.358795][T18064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1530.681119][T18064] hsr_slave_0: entered promiscuous mode [ 1530.737819][T18064] hsr_slave_1: entered promiscuous mode [ 1530.787994][T18064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1530.818370][T18064] Cannot create hsr debugfs directory [ 1531.517574][T18287] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1532.158058][T18291] loop4: detected capacity change from 0 to 128 [ 1532.747761][T18295] loop4: detected capacity change from 0 to 128 [ 1533.073197][T10999] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1533.283275][T10999] usb 5-1: Using ep0 maxpacket: 32 [ 1533.335575][T18283] loop1: detected capacity change from 0 to 32768 [ 1533.365739][T10999] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1533.512096][T10999] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1533.572694][T18283] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (18283) [ 1533.766014][T10999] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 41042, setting to 1024 [ 1533.991958][T10999] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1534.057274][T10999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1534.100973][T10999] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1534.156046][T10999] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1534.235714][T18064] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1534.245561][T10999] usb 5-1: Product: syz [ 1534.249772][T10999] usb 5-1: Manufacturer: syz [ 1534.283262][T10999] usb 5-1: SerialNumber: syz [ 1534.310219][T18064] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1534.329890][T10999] usb 5-1: config 0 descriptor?? [ 1534.351290][T10999] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1534.366666][T18064] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1534.395126][T10999] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1534.412573][T18064] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1534.578811][T18305] loop2: detected capacity change from 0 to 2048 [ 1534.626894][T18305] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1534.654029][T18305] NILFS (loop2): trying rollback from an earlier position [ 1534.810249][T18305] NILFS (loop2): recovery complete [ 1534.828667][T18309] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1534.971711][T18294] loop3: detected capacity change from 0 to 32768 [ 1535.147048][T11632] usb 5-1: USB disconnect, device number 38 [ 1535.158620][T11632] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1535.229583][T16060] VFS: Lookup of '. °. ' in vfat loop4 would have caused loop [ 1535.294823][T16060] VFS: Lookup of '. °. ' in vfat loop4 would have caused loop [ 1535.309895][T18064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1535.383804][T18294] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 1535.397938][T18294] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 1535.459435][T18064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1535.495799][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1535.504551][T18294] bcachefs (loop3): alloc_read... done [ 1535.510106][T18294] bcachefs (loop3): stripes_read... done [ 1535.540131][T18294] bcachefs (loop3): snapshots_read... done [ 1535.562869][T15012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.570213][T15012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1535.604674][T18294] bcachefs (loop3): journal_replay... done [ 1535.610882][T18294] bcachefs (loop3): resume_logged_ops... done [ 1535.617981][T18294] bcachefs (loop3): going read-write [ 1535.638345][T15012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.639646][T18294] bcachefs (loop3): done starting filesystem [ 1535.645656][T15012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1535.748477][T15835] bcachefs (loop3): shutting down [ 1535.758052][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1535.769148][T15835] bcachefs (loop3): going read-only [ 1535.792426][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.801282][T15835] bcachefs (loop3): finished waiting for writes to stop [ 1535.827276][T15835] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8 [ 1535.828026][ T9] usb 2-1: config 0 descriptor?? [ 1535.847348][T15835] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8 [ 1535.862703][ T9] cp210x 2-1:0.0: cp210x converter detected [ 1536.088874][T15835] bcachefs (loop3): shutdown complete, journal seq 9 [ 1536.242908][T15835] bcachefs (loop3): marking filesystem clean [ 1536.444790][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1536.734021][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1536.840692][T15835] bcachefs (loop3): shutdown complete [ 1536.853848][ T9] usb 2-1: USB disconnect, device number 14 [ 1536.884551][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1536.900790][ T5647] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.946689][ T9] cp210x 2-1:0.0: device disconnected [ 1537.045029][T18331] loop2: detected capacity change from 0 to 512 [ 1537.124280][T18331] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1537.155722][T18331] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 1537.215939][T18334] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1537.331339][ T5647] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.801717][ T5647] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.637086][ T5647] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.484468][ T5647] bridge_slave_1: left allmulticast mode [ 1539.490156][ T5647] bridge_slave_1: left promiscuous mode [ 1539.527473][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.585712][ T5647] bridge_slave_0: left allmulticast mode [ 1539.611873][ T5647] bridge_slave_0: left promiscuous mode [ 1539.642699][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.756868][T18338] loop0: detected capacity change from 0 to 32768 [ 1539.784890][T12964] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1539.796968][T18338] BTRFS: device /dev/loop0 (7:0) using temp-fsid 0f8fe0ee-614e-463b-acad-aeb345bf3b72 [ 1539.807248][T12964] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1539.836216][T12964] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1539.841124][T18338] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (18338) [ 1539.865998][T12964] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1539.878278][T12964] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1539.897075][T12964] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1539.950535][T18354] loop3: detected capacity change from 0 to 128 [ 1540.043316][T18338] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1540.074819][T18338] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1540.103553][T18338] BTRFS info (device loop0): using free-space-tree [ 1540.130278][T18357] loop2: detected capacity change from 0 to 128 [ 1540.345725][T18338] BTRFS info (device loop0): rebuilding free space tree [ 1540.423249][T10999] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1540.548335][T18347] loop1: detected capacity change from 0 to 32768 [ 1540.638702][T15709] BTRFS info (device loop0): last unmount of filesystem 0f8fe0ee-614e-463b-acad-aeb345bf3b72 [ 1540.692275][T10999] usb 3-1: Using ep0 maxpacket: 32 [ 1540.697956][T18347] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1540.711613][ T12] ================================================================== [ 1540.719693][ T12] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2dd6/0x3b30 [ 1540.727547][ T12] Read of size 8 at addr ffff888020d7a818 by task kworker/u8:1/12 [ 1540.735380][ T12] [ 1540.737719][ T12] CPU: 1 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc5-syzkaller #0 [ 1540.746078][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1540.756160][ T12] Workqueue: btrfs-delalloc btrfs_work_helper [ 1540.762276][ T12] Call Trace: [ 1540.765568][ T12] [ 1540.768508][ T12] dump_stack_lvl+0x116/0x1f0 [ 1540.773216][ T12] print_report+0xc3/0x620 [ 1540.777659][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.783319][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.788973][ T12] ? __phys_addr+0xc6/0x150 [ 1540.793505][ T12] kasan_report+0xd9/0x110 [ 1540.797957][ T12] ? __lock_acquire+0x2dd6/0x3b30 [ 1540.803011][ T12] ? __lock_acquire+0x2dd6/0x3b30 [ 1540.808075][ T12] __lock_acquire+0x2dd6/0x3b30 [ 1540.812959][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.818615][ T12] ? lockdep_lock+0xc6/0x200 [ 1540.823249][ T12] ? __pfx_lockdep_lock+0x10/0x10 [ 1540.828323][ T12] ? __pfx___lock_acquire+0x10/0x10 [ 1540.833548][ T12] ? lockdep_unlock+0x11a/0x290 [ 1540.838436][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.844096][ T12] ? __lock_acquire+0x1fb0/0x3b30 [ 1540.849156][ T12] lock_acquire+0x1b1/0x560 [ 1540.853689][ T12] ? try_to_wake_up+0x9a/0x13e0 [ 1540.858587][ T12] ? __pfx_lock_acquire+0x10/0x10 [ 1540.863640][ T12] ? __pfx_mark_lock+0x10/0x10 [ 1540.868430][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.874088][ T12] ? lock_acquire+0x1b1/0x560 [ 1540.878795][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 1540.884018][ T12] ? try_to_wake_up+0x9a/0x13e0 [ 1540.888909][ T12] try_to_wake_up+0x9a/0x13e0 [ 1540.893633][ T12] ? __pfx_try_to_wake_up+0x10/0x10 [ 1540.898870][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.904532][ T12] ? mark_held_locks+0x9f/0xe0 [ 1540.909328][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1540.915164][ T12] btrfs_add_delayed_iput+0x30a/0x3d0 [ 1540.920587][ T12] submit_compressed_extents+0xd02/0x13a0 [ 1540.926353][ T12] ? __pfx_mark_lock+0x10/0x10 [ 1540.931145][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.936802][ T12] ? lock_acquire+0x1b1/0x560 [ 1540.941506][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.947162][ T12] ? find_held_lock+0x2d/0x110 [ 1540.951967][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.957627][ T12] ? __pfx_submit_compressed_extents+0x10/0x10 [ 1540.963828][ T12] ? __pfx_lock_release+0x10/0x10 [ 1540.968883][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1540.974537][ T12] ? mark_held_locks+0x9f/0xe0 [ 1540.979327][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1540.985161][ T12] btrfs_work_helper+0x68d/0xc90 [ 1540.990152][ T12] process_one_work+0x9fe/0x1b60 [ 1540.995133][ T12] ? __pfx_btrfs_work_helper+0x10/0x10 [ 1541.000631][ T12] ? __pfx_process_one_work+0x10/0x10 [ 1541.006041][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1541.011705][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1541.017364][ T12] ? assign_work+0x1a0/0x250 [ 1541.021983][ T12] worker_thread+0x6c8/0xf70 [ 1541.026616][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1541.031758][ T12] kthread+0x2c4/0x3a0 [ 1541.035868][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 1541.041090][ T12] ? __pfx_kthread+0x10/0x10 [ 1541.045723][ T12] ret_from_fork+0x48/0x80 [ 1541.050179][ T12] ? __pfx_kthread+0x10/0x10 [ 1541.054813][ T12] ret_from_fork_asm+0x1a/0x30 [ 1541.059633][ T12] [ 1541.062657][ T12] [ 1541.064979][ T12] Allocated by task 2: [ 1541.069050][ T12] kasan_save_stack+0x33/0x60 [ 1541.073748][ T12] kasan_save_track+0x14/0x30 [ 1541.078442][ T12] __kasan_slab_alloc+0x89/0x90 [ 1541.083310][ T12] kmem_cache_alloc_node_noprof+0x153/0x310 [ 1541.089233][ T12] copy_process+0x4b7/0x8f10 [ 1541.093866][ T12] kernel_clone+0xfd/0x980 [ 1541.098297][ T12] kernel_thread+0xc0/0x100 [ 1541.102819][ T12] kthreadd+0x4ef/0x7d0 [ 1541.107084][ T12] ret_from_fork+0x48/0x80 [ 1541.111538][ T12] ret_from_fork_asm+0x1a/0x30 [ 1541.116343][ T12] [ 1541.118676][ T12] Freed by task 18347: [ 1541.122746][ T12] kasan_save_stack+0x33/0x60 [ 1541.127441][ T12] kasan_save_track+0x14/0x30 [ 1541.132145][ T12] kasan_save_free_info+0x3b/0x60 [ 1541.137203][ T12] poison_slab_object+0xf7/0x160 [ 1541.142182][ T12] __kasan_slab_free+0x32/0x50 [ 1541.146963][ T12] kmem_cache_free+0x12f/0x3a0 [ 1541.151747][ T12] delayed_put_task_struct+0x22c/0x300 [ 1541.157229][ T12] rcu_core+0x82b/0x16b0 [ 1541.161495][ T12] handle_softirqs+0x219/0x8f0 [ 1541.166293][ T12] irq_exit_rcu+0xbb/0x120 [ 1541.170746][ T12] sysvec_apic_timer_interrupt+0x95/0xb0 [ 1541.176405][ T12] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1541.182437][ T12] [ 1541.184763][ T12] Last potentially related work creation: [ 1541.190476][ T12] kasan_save_stack+0x33/0x60 [ 1541.195171][ T12] __kasan_record_aux_stack+0xba/0xd0 [ 1541.200573][ T12] __call_rcu_common.constprop.0+0x9a/0x790 [ 1541.206493][ T12] put_task_struct_rcu_user+0x87/0xd0 [ 1541.211888][ T12] __schedule+0xf1d/0x5d00 [ 1541.216330][ T12] schedule+0xe7/0x350 [ 1541.220417][ T12] schedule_timeout+0x136/0x2a0 [ 1541.225305][ T12] __wait_for_common+0x3e1/0x5f0 [ 1541.230290][ T12] usb_start_wait_urb+0x148/0x4c0 [ 1541.235361][ T12] usb_control_msg+0x327/0x4b0 [ 1541.240150][ T12] hub_port_init+0x1d0a/0x3a50 [ 1541.244939][ T12] hub_event+0x2b65/0x4e20 [ 1541.249385][ T12] process_one_work+0x9fe/0x1b60 [ 1541.254352][ T12] worker_thread+0x6c8/0xf70 [ 1541.258993][ T12] kthread+0x2c4/0x3a0 [ 1541.263192][ T12] ret_from_fork+0x48/0x80 [ 1541.267649][ T12] ret_from_fork_asm+0x1a/0x30 [ 1541.272448][ T12] [ 1541.274773][ T12] The buggy address belongs to the object at ffff888020d79e00 [ 1541.274773][ T12] which belongs to the cache task_struct of size 7424 [ 1541.288926][ T12] The buggy address is located 2584 bytes inside of [ 1541.288926][ T12] freed 7424-byte region [ffff888020d79e00, ffff888020d7bb00) [ 1541.302914][ T12] [ 1541.305243][ T12] The buggy address belongs to the physical page: [ 1541.311656][ T12] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20d78 [ 1541.320435][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1541.328949][ T12] memcg:ffff88801c6ef781 [ 1541.333191][ T12] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1541.341207][ T12] page_type: 0xffffefff(slab) [ 1541.345898][ T12] raw: 00fff00000000040 ffff8880162f0500 ffffea0001372000 dead000000000003 [ 1541.354501][ T12] raw: 0000000000000000 0000000000040004 00000001ffffefff ffff88801c6ef781 [ 1541.363111][ T12] head: 00fff00000000040 ffff8880162f0500 ffffea0001372000 dead000000000003 [ 1541.371804][ T12] head: 0000000000000000 0000000000040004 00000001ffffefff ffff88801c6ef781 [ 1541.380493][ T12] head: 00fff00000000003 ffffea0000835e01 ffffffffffffffff 0000000000000000 [ 1541.389203][ T12] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1541.397880][ T12] page dumped because: kasan: bad access detected [ 1541.404295][ T12] page_owner tracks the page as allocated [ 1541.410013][ T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 16581616576, free_ts 0 [ 1541.429681][ T12] post_alloc_hook+0x2d1/0x350 [ 1541.434488][ T12] get_page_from_freelist+0x136a/0x2e50 [ 1541.440072][ T12] __alloc_pages_noprof+0x22b/0x2460 [ 1541.445397][ T12] alloc_slab_page+0x56/0x110 [ 1541.450109][ T12] new_slab+0x84/0x260 [ 1541.454197][ T12] ___slab_alloc+0xdac/0x1870 [ 1541.458893][ T12] __slab_alloc.constprop.0+0x56/0xb0 [ 1541.464288][ T12] kmem_cache_alloc_node_noprof+0xed/0x310 [ 1541.470127][ T12] copy_process+0x4b7/0x8f10 [ 1541.474760][ T12] kernel_clone+0xfd/0x980 [ 1541.479198][ T12] kernel_thread+0xc0/0x100 [ 1541.483749][ T12] kthreadd+0x4ef/0x7d0 [ 1541.487924][ T12] ret_from_fork+0x48/0x80 [ 1541.492376][ T12] ret_from_fork_asm+0x1a/0x30 [ 1541.497181][ T12] page_owner free stack trace missing [ 1541.502548][ T12] [ 1541.504876][ T12] Memory state around the buggy address: [ 1541.510514][ T12] ffff888020d7a700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1541.518596][ T12] ffff888020d7a780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1541.526669][ T12] >ffff888020d7a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1541.534737][ T12] ^ [ 1541.539592][ T12] ffff888020d7a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1541.547664][ T12] ffff888020d7a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1541.555733][ T12] ================================================================== [ 1541.563793][ T12] Disabling lock debugging due to kernel taint [ 1541.569941][ T12] ================================================================== [ 1541.578003][ T12] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2d98/0x3b30 [ 1541.585839][ T12] Read of size 8 at addr ffff888020d7a820 by task kworker/u8:1/12 [ 1541.593660][ T12] [ 1541.595990][ T12] CPU: 1 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.10.0-rc5-syzkaller #0 [ 1541.605815][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1541.615888][ T12] Workqueue: btrfs-delalloc btrfs_work_helper [ 1541.621997][ T12] Call Trace: [ 1541.625285][ T12] [ 1541.628229][ T12] dump_stack_lvl+0x116/0x1f0 [ 1541.632939][ T12] print_report+0xc3/0x620 [ 1541.637406][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1541.643077][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1541.648735][ T12] ? __phys_addr+0xc6/0x150 [ 1541.653266][ T12] kasan_report+0xd9/0x110 [ 1541.657711][ T12] ? __lock_acquire+0x2d98/0x3b30 [ 1541.662765][ T12] ? __lock_acquire+0x2d98/0x3b30 [ 1541.667824][ T12] __lock_acquire+0x2d98/0x3b30 [ 1541.672707][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1541.678365][ T12] ? lockdep_lock+0xc6/0x200 [ 1541.682999][ T12] ? __pfx_lockdep_lock+0x10/0x10 [ 1541.688072][ T12] ? __pfx___lock_acquire+0x10/0x10 [ 1541.693298][ T12] ? lockdep_unlock+0x11a/0x290 [ 1541.698194][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1541.703849][ T12] ? __lock_acquire+0x1fb0/0x3b30 [ 1541.708907][ T12] lock_acquire+0x1b1/0x560 [ 1541.713437][ T12] ? try_to_wake_up+0x9a/0x13e0 [ 1541.718338][ T12] ? __pfx_lock_acquire+0x10/0x10 [ 1541.723397][ T12] ? __pfx_mark_lock+0x10/0x10 [ 1541.728200][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1541.733857][ T12] ? lock_acquire+0x1b1/0x560 [ 1541.738564][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 1541.743787][ T12] ? try_to_wake_up+0x9a/0x13e0 [ 1541.748677][ T12] try_to_wake_up+0x9a/0x13e0 [ 1541.753399][ T12] ? __pfx_try_to_wake_up+0x10/0x10 [ 1541.758647][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1541.764303][ T12] ? mark_held_locks+0x9f/0xe0 [ 1541.769098][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1541.774934][ T12] btrfs_add_delayed_iput+0x30a/0x3d0 [ 1541.780355][ T12] submit_compressed_extents+0xd02/0x13a0 [ 1541.786118][ T12] ? __pfx_mark_lock+0x10/0x10 [ 1541.790909][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1541.796565][ T12] ? lock_acquire+0x1b1/0x560 [ 1541.801266][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1541.806929][ T12] ? find_held_lock+0x2d/0x110 [ 1541.811734][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1541.817398][ T12] ? __pfx_submit_compressed_extents+0x10/0x10 [ 1541.823611][ T12] ? __pfx_lock_release+0x10/0x10 [ 1541.828673][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1541.834333][ T12] ? mark_held_locks+0x9f/0xe0 [ 1541.839129][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1541.844964][ T12] btrfs_work_helper+0x68d/0xc90 [ 1541.849953][ T12] process_one_work+0x9fe/0x1b60 [ 1541.854936][ T12] ? __pfx_btrfs_work_helper+0x10/0x10 [ 1541.860433][ T12] ? __pfx_process_one_work+0x10/0x10 [ 1541.865837][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1541.871497][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1541.877152][ T12] ? assign_work+0x1a0/0x250 [ 1541.881772][ T12] worker_thread+0x6c8/0xf70 [ 1541.886407][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1541.891550][ T12] kthread+0x2c4/0x3a0 [ 1541.895657][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 1541.900877][ T12] ? __pfx_kthread+0x10/0x10 [ 1541.905510][ T12] ret_from_fork+0x48/0x80 [ 1541.909967][ T12] ? __pfx_kthread+0x10/0x10 [ 1541.914632][ T12] ret_from_fork_asm+0x1a/0x30 [ 1541.919458][ T12] [ 1541.922485][ T12] [ 1541.924811][ T12] Allocated by task 2: [ 1541.928880][ T12] kasan_save_stack+0x33/0x60 [ 1541.933574][ T12] kasan_save_track+0x14/0x30 [ 1541.938293][ T12] __kasan_slab_alloc+0x89/0x90 [ 1541.943169][ T12] kmem_cache_alloc_node_noprof+0x153/0x310 [ 1541.949090][ T12] copy_process+0x4b7/0x8f10 [ 1541.953723][ T12] kernel_clone+0xfd/0x980 [ 1541.958154][ T12] kernel_thread+0xc0/0x100 [ 1541.962669][ T12] kthreadd+0x4ef/0x7d0 [ 1541.966844][ T12] ret_from_fork+0x48/0x80 [ 1541.971296][ T12] ret_from_fork_asm+0x1a/0x30 [ 1541.976101][ T12] [ 1541.978423][ T12] Freed by task 18347: [ 1541.982490][ T12] kasan_save_stack+0x33/0x60 [ 1541.987184][ T12] kasan_save_track+0x14/0x30 [ 1541.991876][ T12] kasan_save_free_info+0x3b/0x60 [ 1541.996933][ T12] poison_slab_object+0xf7/0x160 [ 1542.001911][ T12] __kasan_slab_free+0x32/0x50 [ 1542.006691][ T12] kmem_cache_free+0x12f/0x3a0 [ 1542.011475][ T12] delayed_put_task_struct+0x22c/0x300 [ 1542.016955][ T12] rcu_core+0x82b/0x16b0 [ 1542.021225][ T12] handle_softirqs+0x219/0x8f0 [ 1542.026034][ T12] irq_exit_rcu+0xbb/0x120 [ 1542.030508][ T12] sysvec_apic_timer_interrupt+0x95/0xb0 [ 1542.036185][ T12] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1542.042209][ T12] [ 1542.044533][ T12] Last potentially related work creation: [ 1542.050248][ T12] kasan_save_stack+0x33/0x60 [ 1542.054944][ T12] __kasan_record_aux_stack+0xba/0xd0 [ 1542.060349][ T12] __call_rcu_common.constprop.0+0x9a/0x790 [ 1542.066266][ T12] put_task_struct_rcu_user+0x87/0xd0 [ 1542.071663][ T12] __schedule+0xf1d/0x5d00 [ 1542.076099][ T12] schedule+0xe7/0x350 [ 1542.080184][ T12] schedule_timeout+0x136/0x2a0 [ 1542.085072][ T12] __wait_for_common+0x3e1/0x5f0 [ 1542.090030][ T12] usb_start_wait_urb+0x148/0x4c0 [ 1542.095079][ T12] usb_control_msg+0x327/0x4b0 [ 1542.099868][ T12] hub_port_init+0x1d0a/0x3a50 [ 1542.104659][ T12] hub_event+0x2b65/0x4e20 [ 1542.109113][ T12] process_one_work+0x9fe/0x1b60 [ 1542.114076][ T12] worker_thread+0x6c8/0xf70 [ 1542.118699][ T12] kthread+0x2c4/0x3a0 [ 1542.122803][ T12] ret_from_fork+0x48/0x80 [ 1542.127258][ T12] ret_from_fork_asm+0x1a/0x30 [ 1542.132062][ T12] [ 1542.134389][ T12] The buggy address belongs to the object at ffff888020d79e00 [ 1542.134389][ T12] which belongs to the cache task_struct of size 7424 [ 1542.148543][ T12] The buggy address is located 2592 bytes inside of [ 1542.148543][ T12] freed 7424-byte region [ffff888020d79e00, ffff888020d7bb00) [ 1542.162530][ T12] [ 1542.164855][ T12] The buggy address belongs to the physical page: [ 1542.171287][ T12] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20d78 [ 1542.180063][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1542.188573][ T12] memcg:ffff88801c6ef781 [ 1542.192854][ T12] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1542.200787][ T12] page_type: 0xffffefff(slab) [ 1542.205484][ T12] raw: 00fff00000000040 ffff8880162f0500 ffffea0001372000 dead000000000003 [ 1542.214091][ T12] raw: 0000000000000000 0000000000040004 00000001ffffefff ffff88801c6ef781 [ 1542.222692][ T12] head: 00fff00000000040 ffff8880162f0500 ffffea0001372000 dead000000000003 [ 1542.231382][ T12] head: 0000000000000000 0000000000040004 00000001ffffefff ffff88801c6ef781 [ 1542.240078][ T12] head: 00fff00000000003 ffffea0000835e01 ffffffffffffffff 0000000000000000 [ 1542.248767][ T12] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1542.257445][ T12] page dumped because: kasan: bad access detected [ 1542.263859][ T12] page_owner tracks the page as allocated [ 1542.269570][ T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 16581616576, free_ts 0 [ 1542.289227][ T12] post_alloc_hook+0x2d1/0x350 [ 1542.294024][ T12] get_page_from_freelist+0x136a/0x2e50 [ 1542.299612][ T12] __alloc_pages_noprof+0x22b/0x2460 [ 1542.304934][ T12] alloc_slab_page+0x56/0x110 [ 1542.309644][ T12] new_slab+0x84/0x260 [ 1542.313730][ T12] ___slab_alloc+0xdac/0x1870 [ 1542.318426][ T12] __slab_alloc.constprop.0+0x56/0xb0 [ 1542.323818][ T12] kmem_cache_alloc_node_noprof+0xed/0x310 [ 1542.329648][ T12] copy_process+0x4b7/0x8f10 [ 1542.334283][ T12] kernel_clone+0xfd/0x980 [ 1542.338720][ T12] kernel_thread+0xc0/0x100 [ 1542.343239][ T12] kthreadd+0x4ef/0x7d0 [ 1542.347413][ T12] ret_from_fork+0x48/0x80 [ 1542.351873][ T12] ret_from_fork_asm+0x1a/0x30 [ 1542.356675][ T12] page_owner free stack trace missing [ 1542.362039][ T12] [ 1542.364360][ T12] Memory state around the buggy address: [ 1542.369989][ T12] ffff888020d7a700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1542.378062][ T12] ffff888020d7a780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1542.386139][ T12] >ffff888020d7a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1542.394207][ T12] ^ [ 1542.399320][ T12] ffff888020d7a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1542.407395][ T12] ffff888020d7a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1542.415463][ T12] ================================================================== [ 1542.423526][ T12] ================================================================== [ 1542.431591][ T12] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x271/0x2c0 [ 1542.439439][ T12] Read of size 4 at addr ffff888020d7a804 by task kworker/u8:1/12 [ 1542.447257][ T12] [ 1542.449583][ T12] CPU: 1 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.10.0-rc5-syzkaller #0 [ 1542.459406][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1542.469473][ T12] Workqueue: btrfs-delalloc btrfs_work_helper [ 1542.475577][ T12] Call Trace: [ 1542.478862][ T12] [ 1542.481800][ T12] dump_stack_lvl+0x116/0x1f0 [ 1542.486504][ T12] print_report+0xc3/0x620 [ 1542.490945][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1542.496601][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1542.502253][ T12] ? __phys_addr+0xc6/0x150 [ 1542.506780][ T12] kasan_report+0xd9/0x110 [ 1542.511220][ T12] ? do_raw_spin_lock+0x271/0x2c0 [ 1542.516281][ T12] ? do_raw_spin_lock+0x271/0x2c0 [ 1542.521346][ T12] do_raw_spin_lock+0x271/0x2c0 [ 1542.526231][ T12] ? __pfx_mark_lock+0x10/0x10 [ 1542.531017][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1542.536430][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1542.542088][ T12] ? lock_acquire+0x1b1/0x560 [ 1542.546796][ T12] _raw_spin_lock_irqsave+0x42/0x60 [ 1542.552016][ T12] ? try_to_wake_up+0x9a/0x13e0 [ 1542.556909][ T12] try_to_wake_up+0x9a/0x13e0 [ 1542.561630][ T12] ? __pfx_try_to_wake_up+0x10/0x10 [ 1542.566863][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1542.572519][ T12] ? mark_held_locks+0x9f/0xe0 [ 1542.577395][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1542.583328][ T12] btrfs_add_delayed_iput+0x30a/0x3d0 [ 1542.588751][ T12] submit_compressed_extents+0xd02/0x13a0 [ 1542.594519][ T12] ? __pfx_mark_lock+0x10/0x10 [ 1542.599334][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1542.604996][ T12] ? lock_acquire+0x1b1/0x560 [ 1542.609701][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1542.615359][ T12] ? find_held_lock+0x2d/0x110 [ 1542.620164][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1542.625822][ T12] ? __pfx_submit_compressed_extents+0x10/0x10 [ 1542.632020][ T12] ? __pfx_lock_release+0x10/0x10 [ 1542.637083][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1542.642750][ T12] ? mark_held_locks+0x9f/0xe0 [ 1542.647547][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1542.653386][ T12] btrfs_work_helper+0x68d/0xc90 [ 1542.658375][ T12] process_one_work+0x9fe/0x1b60 [ 1542.663366][ T12] ? __pfx_btrfs_work_helper+0x10/0x10 [ 1542.668863][ T12] ? __pfx_process_one_work+0x10/0x10 [ 1542.674269][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1542.679956][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1542.685615][ T12] ? assign_work+0x1a0/0x250 [ 1542.690237][ T12] worker_thread+0x6c8/0xf70 [ 1542.694877][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1542.700025][ T12] kthread+0x2c4/0x3a0 [ 1542.704147][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 1542.709372][ T12] ? __pfx_kthread+0x10/0x10 [ 1542.714039][ T12] ret_from_fork+0x48/0x80 [ 1542.718502][ T12] ? __pfx_kthread+0x10/0x10 [ 1542.723136][ T12] ret_from_fork_asm+0x1a/0x30 [ 1542.727955][ T12] [ 1542.730978][ T12] [ 1542.733304][ T12] Allocated by task 2: [ 1542.737461][ T12] kasan_save_stack+0x33/0x60 [ 1542.742162][ T12] kasan_save_track+0x14/0x30 [ 1542.746946][ T12] __kasan_slab_alloc+0x89/0x90 [ 1542.751819][ T12] kmem_cache_alloc_node_noprof+0x153/0x310 [ 1542.757740][ T12] copy_process+0x4b7/0x8f10 [ 1542.762372][ T12] kernel_clone+0xfd/0x980 [ 1542.766805][ T12] kernel_thread+0xc0/0x100 [ 1542.771324][ T12] kthreadd+0x4ef/0x7d0 [ 1542.775499][ T12] ret_from_fork+0x48/0x80 [ 1542.779951][ T12] ret_from_fork_asm+0x1a/0x30 [ 1542.784752][ T12] [ 1542.787074][ T12] Freed by task 18347: [ 1542.791147][ T12] kasan_save_stack+0x33/0x60 [ 1542.795842][ T12] kasan_save_track+0x14/0x30 [ 1542.800535][ T12] kasan_save_free_info+0x3b/0x60 [ 1542.805592][ T12] poison_slab_object+0xf7/0x160 [ 1542.810572][ T12] __kasan_slab_free+0x32/0x50 [ 1542.815357][ T12] kmem_cache_free+0x12f/0x3a0 [ 1542.820141][ T12] delayed_put_task_struct+0x22c/0x300 [ 1542.825622][ T12] rcu_core+0x82b/0x16b0 [ 1542.829889][ T12] handle_softirqs+0x219/0x8f0 [ 1542.834688][ T12] irq_exit_rcu+0xbb/0x120 [ 1542.839138][ T12] sysvec_apic_timer_interrupt+0x95/0xb0 [ 1542.844800][ T12] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1542.850824][ T12] [ 1542.853153][ T12] Last potentially related work creation: [ 1542.858873][ T12] kasan_save_stack+0x33/0x60 [ 1542.863567][ T12] __kasan_record_aux_stack+0xba/0xd0 [ 1542.868968][ T12] __call_rcu_common.constprop.0+0x9a/0x790 [ 1542.874882][ T12] put_task_struct_rcu_user+0x87/0xd0 [ 1542.880277][ T12] __schedule+0xf1d/0x5d00 [ 1542.884712][ T12] schedule+0xe7/0x350 [ 1542.888798][ T12] schedule_timeout+0x136/0x2a0 [ 1542.893687][ T12] __wait_for_common+0x3e1/0x5f0 [ 1542.898651][ T12] usb_start_wait_urb+0x148/0x4c0 [ 1542.903701][ T12] usb_control_msg+0x327/0x4b0 [ 1542.908489][ T12] hub_port_init+0x1d0a/0x3a50 [ 1542.913282][ T12] hub_event+0x2b65/0x4e20 [ 1542.917729][ T12] process_one_work+0x9fe/0x1b60 [ 1542.922692][ T12] worker_thread+0x6c8/0xf70 [ 1542.927307][ T12] kthread+0x2c4/0x3a0 [ 1542.931412][ T12] ret_from_fork+0x48/0x80 [ 1542.935864][ T12] ret_from_fork_asm+0x1a/0x30 [ 1542.940665][ T12] [ 1542.942994][ T12] The buggy address belongs to the object at ffff888020d79e00 [ 1542.942994][ T12] which belongs to the cache task_struct of size 7424 [ 1542.957155][ T12] The buggy address is located 2564 bytes inside of [ 1542.957155][ T12] freed 7424-byte region [ffff888020d79e00, ffff888020d7bb00) [ 1542.971145][ T12] [ 1542.973469][ T12] The buggy address belongs to the physical page: [ 1542.979880][ T12] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20d78 [ 1542.988656][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1542.997172][ T12] memcg:ffff88801c6ef781 [ 1543.001411][ T12] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1543.009335][ T12] page_type: 0xffffefff(slab) [ 1543.014029][ T12] raw: 00fff00000000040 ffff8880162f0500 ffffea0001372000 dead000000000003 [ 1543.022634][ T12] raw: 0000000000000000 0000000000040004 00000001ffffefff ffff88801c6ef781 [ 1543.031239][ T12] head: 00fff00000000040 ffff8880162f0500 ffffea0001372000 dead000000000003 [ 1543.039930][ T12] head: 0000000000000000 0000000000040004 00000001ffffefff ffff88801c6ef781 [ 1543.048624][ T12] head: 00fff00000000003 ffffea0000835e01 ffffffffffffffff 0000000000000000 [ 1543.057316][ T12] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1543.065992][ T12] page dumped because: kasan: bad access detected [ 1543.072408][ T12] page_owner tracks the page as allocated [ 1543.078122][ T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 16581616576, free_ts 0 [ 1543.097803][ T12] post_alloc_hook+0x2d1/0x350 [ 1543.102605][ T12] get_page_from_freelist+0x136a/0x2e50 [ 1543.108192][ T12] __alloc_pages_noprof+0x22b/0x2460 [ 1543.113518][ T12] alloc_slab_page+0x56/0x110 [ 1543.118236][ T12] new_slab+0x84/0x260 [ 1543.122324][ T12] ___slab_alloc+0xdac/0x1870 [ 1543.127020][ T12] __slab_alloc.constprop.0+0x56/0xb0 [ 1543.132415][ T12] kmem_cache_alloc_node_noprof+0xed/0x310 [ 1543.138247][ T12] copy_process+0x4b7/0x8f10 [ 1543.142877][ T12] kernel_clone+0xfd/0x980 [ 1543.147308][ T12] kernel_thread+0xc0/0x100 [ 1543.151835][ T12] kthreadd+0x4ef/0x7d0 [ 1543.156015][ T12] ret_from_fork+0x48/0x80 [ 1543.160472][ T12] ret_from_fork_asm+0x1a/0x30 [ 1543.165278][ T12] page_owner free stack trace missing [ 1543.170644][ T12] [ 1543.172968][ T12] Memory state around the buggy address: [ 1543.178601][ T12] ffff888020d7a700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1543.186674][ T12] ffff888020d7a780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1543.194749][ T12] >ffff888020d7a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1543.202818][ T12] ^ [ 1543.206891][ T12] ffff888020d7a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1543.214965][ T12] ffff888020d7a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1543.223059][ T12] ================================================================== [ 1543.231126][ T12] ================================================================== [ 1543.239188][ T12] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x281/0x2c0 [ 1543.247029][ T12] Read of size 8 at addr ffff888020d7a810 by task kworker/u8:1/12 [ 1543.254850][ T12] [ 1543.257183][ T12] CPU: 1 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.10.0-rc5-syzkaller #0 [ 1543.267009][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1543.277081][ T12] Workqueue: btrfs-delalloc btrfs_work_helper [ 1543.283199][ T12] Call Trace: [ 1543.286485][ T12] [ 1543.289424][ T12] dump_stack_lvl+0x116/0x1f0 [ 1543.294134][ T12] print_report+0xc3/0x620 [ 1543.298577][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1543.304236][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1543.309893][ T12] ? __phys_addr+0xc6/0x150 [ 1543.314422][ T12] kasan_report+0xd9/0x110 [ 1543.318866][ T12] ? do_raw_spin_lock+0x281/0x2c0 [ 1543.323927][ T12] ? do_raw_spin_lock+0x281/0x2c0 [ 1543.328993][ T12] do_raw_spin_lock+0x281/0x2c0 [ 1543.333879][ T12] ? __pfx_mark_lock+0x10/0x10 [ 1543.338669][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1543.344077][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1543.349737][ T12] ? lock_acquire+0x1b1/0x560 [ 1543.354448][ T12] _raw_spin_lock_irqsave+0x42/0x60 [ 1543.359671][ T12] ? try_to_wake_up+0x9a/0x13e0 [ 1543.364593][ T12] try_to_wake_up+0x9a/0x13e0 [ 1543.369318][ T12] ? __pfx_try_to_wake_up+0x10/0x10 [ 1543.374554][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1543.380212][ T12] ? mark_held_locks+0x9f/0xe0 [ 1543.385004][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1543.390842][ T12] btrfs_add_delayed_iput+0x30a/0x3d0 [ 1543.396261][ T12] submit_compressed_extents+0xd02/0x13a0 [ 1543.402027][ T12] ? __pfx_mark_lock+0x10/0x10 [ 1543.406822][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1543.412480][ T12] ? lock_acquire+0x1b1/0x560 [ 1543.417185][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1543.422844][ T12] ? find_held_lock+0x2d/0x110 [ 1543.427650][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1543.433307][ T12] ? __pfx_submit_compressed_extents+0x10/0x10 [ 1543.439504][ T12] ? __pfx_lock_release+0x10/0x10 [ 1543.444558][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1543.450214][ T12] ? mark_held_locks+0x9f/0xe0 [ 1543.455012][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1543.460855][ T12] btrfs_work_helper+0x68d/0xc90 [ 1543.465846][ T12] process_one_work+0x9fe/0x1b60 [ 1543.470829][ T12] ? __pfx_btrfs_work_helper+0x10/0x10 [ 1543.476326][ T12] ? __pfx_process_one_work+0x10/0x10 [ 1543.481754][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1543.487416][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1543.493075][ T12] ? assign_work+0x1a0/0x250 [ 1543.497699][ T12] worker_thread+0x6c8/0xf70 [ 1543.502338][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1543.507500][ T12] kthread+0x2c4/0x3a0 [ 1543.511612][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 1543.516836][ T12] ? __pfx_kthread+0x10/0x10 [ 1543.521469][ T12] ret_from_fork+0x48/0x80 [ 1543.525926][ T12] ? __pfx_kthread+0x10/0x10 [ 1543.530559][ T12] ret_from_fork_asm+0x1a/0x30 [ 1543.535378][ T12] [ 1543.538421][ T12] [ 1543.540750][ T12] Allocated by task 2: [ 1543.544819][ T12] kasan_save_stack+0x33/0x60 [ 1543.549524][ T12] kasan_save_track+0x14/0x30 [ 1543.554222][ T12] __kasan_slab_alloc+0x89/0x90 [ 1543.559094][ T12] kmem_cache_alloc_node_noprof+0x153/0x310 [ 1543.565017][ T12] copy_process+0x4b7/0x8f10 [ 1543.569655][ T12] kernel_clone+0xfd/0x980 [ 1543.574092][ T12] kernel_thread+0xc0/0x100 [ 1543.578609][ T12] kthreadd+0x4ef/0x7d0 [ 1543.582783][ T12] ret_from_fork+0x48/0x80 [ 1543.587237][ T12] ret_from_fork_asm+0x1a/0x30 [ 1543.592040][ T12] [ 1543.594382][ T12] Freed by task 18347: [ 1543.598453][ T12] kasan_save_stack+0x33/0x60 [ 1543.603342][ T12] kasan_save_track+0x14/0x30 [ 1543.608038][ T12] kasan_save_free_info+0x3b/0x60 [ 1543.613102][ T12] poison_slab_object+0xf7/0x160 [ 1543.618083][ T12] __kasan_slab_free+0x32/0x50 [ 1543.622868][ T12] kmem_cache_free+0x12f/0x3a0 [ 1543.627651][ T12] delayed_put_task_struct+0x22c/0x300 [ 1543.633137][ T12] rcu_core+0x82b/0x16b0 [ 1543.637406][ T12] handle_softirqs+0x219/0x8f0 [ 1543.642230][ T12] irq_exit_rcu+0xbb/0x120 [ 1543.646685][ T12] sysvec_apic_timer_interrupt+0x95/0xb0 [ 1543.652346][ T12] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1543.658374][ T12] [ 1543.660702][ T12] Last potentially related work creation: [ 1543.666423][ T12] kasan_save_stack+0x33/0x60 [ 1543.671122][ T12] __kasan_record_aux_stack+0xba/0xd0 [ 1543.676523][ T12] __call_rcu_common.constprop.0+0x9a/0x790 [ 1543.682438][ T12] put_task_struct_rcu_user+0x87/0xd0 [ 1543.687832][ T12] __schedule+0xf1d/0x5d00 [ 1543.692266][ T12] schedule+0xe7/0x350 [ 1543.696359][ T12] schedule_timeout+0x136/0x2a0 [ 1543.701250][ T12] __wait_for_common+0x3e1/0x5f0 [ 1543.706213][ T12] usb_start_wait_urb+0x148/0x4c0 [ 1543.711264][ T12] usb_control_msg+0x327/0x4b0 [ 1543.716058][ T12] hub_port_init+0x1d0a/0x3a50 [ 1543.720849][ T12] hub_event+0x2b65/0x4e20 [ 1543.725297][ T12] process_one_work+0x9fe/0x1b60 [ 1543.730267][ T12] worker_thread+0x6c8/0xf70 [ 1543.734888][ T12] kthread+0x2c4/0x3a0 [ 1543.738991][ T12] ret_from_fork+0x48/0x80 [ 1543.743445][ T12] ret_from_fork_asm+0x1a/0x30 [ 1543.748247][ T12] [ 1543.750572][ T12] The buggy address belongs to the object at ffff888020d79e00 [ 1543.750572][ T12] which belongs to the cache task_struct of size 7424 [ 1543.764736][ T12] The buggy address is located 2576 bytes inside of [ 1543.764736][ T12] freed 7424-byte region [ffff888020d79e00, ffff888020d7bb00) [ 1543.778777][ T12] [ 1543.781108][ T12] The buggy address belongs to the physical page: [ 1543.787527][ T12] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20d78 [ 1543.796304][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1543.804822][ T12] memcg:ffff88801c6ef781 [ 1543.809060][ T12] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1543.816962][ T12] page_type: 0xffffefff(slab) [ 1543.821655][ T12] raw: 00fff00000000040 ffff8880162f0500 ffffea0001372000 dead000000000003 [ 1543.830279][ T12] raw: 0000000000000000 0000000000040004 00000001ffffefff ffff88801c6ef781 [ 1543.838888][ T12] head: 00fff00000000040 ffff8880162f0500 ffffea0001372000 dead000000000003 [ 1543.847580][ T12] head: 0000000000000000 0000000000040004 00000001ffffefff ffff88801c6ef781 [ 1543.856277][ T12] head: 00fff00000000003 ffffea0000835e01 ffffffffffffffff 0000000000000000 [ 1543.864986][ T12] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1543.873672][ T12] page dumped because: kasan: bad access detected [ 1543.880091][ T12] page_owner tracks the page as allocated [ 1543.885805][ T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 16581616576, free_ts 0 [ 1543.905495][ T12] post_alloc_hook+0x2d1/0x350 [ 1543.910297][ T12] get_page_from_freelist+0x136a/0x2e50 [ 1543.915882][ T12] __alloc_pages_noprof+0x22b/0x2460 [ 1543.921205][ T12] alloc_slab_page+0x56/0x110 [ 1543.925916][ T12] new_slab+0x84/0x260 [ 1543.930004][ T12] ___slab_alloc+0xdac/0x1870 [ 1543.934698][ T12] __slab_alloc.constprop.0+0x56/0xb0 [ 1543.940094][ T12] kmem_cache_alloc_node_noprof+0xed/0x310 [ 1543.945924][ T12] copy_process+0x4b7/0x8f10 [ 1543.950555][ T12] kernel_clone+0xfd/0x980 [ 1543.954992][ T12] kernel_thread+0xc0/0x100 [ 1543.959512][ T12] kthreadd+0x4ef/0x7d0 [ 1543.963685][ T12] ret_from_fork+0x48/0x80 [ 1543.968139][ T12] ret_from_fork_asm+0x1a/0x30 [ 1543.972941][ T12] page_owner free stack trace missing [ 1543.978312][ T12] [ 1543.980635][ T12] Memory state around the buggy address: [ 1543.986270][ T12] ffff888020d7a700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1543.994346][ T12] ffff888020d7a780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1544.002454][ T12] >ffff888020d7a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1544.010521][ T12] ^ [ 1544.015114][ T12] ffff888020d7a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1544.023190][ T12] ffff888020d7a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1544.031256][ T12] ================================================================== [ 1544.039319][ T12] ================================================================== [ 1544.047379][ T12] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x267/0x2c0 [ 1544.055223][ T12] Read of size 4 at addr ffff888020d7a808 by task kworker/u8:1/12 [ 1544.063040][ T12] [ 1544.065369][ T12] CPU: 1 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.10.0-rc5-syzkaller #0 [ 1544.075208][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1544.085287][ T12] Workqueue: btrfs-delalloc btrfs_work_helper [ 1544.091403][ T12] Call Trace: [ 1544.094692][ T12] [ 1544.097631][ T12] dump_stack_lvl+0x116/0x1f0 [ 1544.102346][ T12] print_report+0xc3/0x620 [ 1544.106793][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.112451][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.118107][ T12] ? __phys_addr+0xc6/0x150 [ 1544.122636][ T12] kasan_report+0xd9/0x110 [ 1544.127081][ T12] ? do_raw_spin_lock+0x267/0x2c0 [ 1544.132148][ T12] ? do_raw_spin_lock+0x267/0x2c0 [ 1544.137238][ T12] do_raw_spin_lock+0x267/0x2c0 [ 1544.142127][ T12] ? __pfx_mark_lock+0x10/0x10 [ 1544.146919][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1544.152330][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.157996][ T12] ? lock_acquire+0x1b1/0x560 [ 1544.162713][ T12] _raw_spin_lock_irqsave+0x42/0x60 [ 1544.167940][ T12] ? try_to_wake_up+0x9a/0x13e0 [ 1544.172838][ T12] try_to_wake_up+0x9a/0x13e0 [ 1544.177658][ T12] ? __pfx_try_to_wake_up+0x10/0x10 [ 1544.182900][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.188563][ T12] ? mark_held_locks+0x9f/0xe0 [ 1544.193360][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1544.199193][ T12] btrfs_add_delayed_iput+0x30a/0x3d0 [ 1544.204613][ T12] submit_compressed_extents+0xd02/0x13a0 [ 1544.210379][ T12] ? __pfx_mark_lock+0x10/0x10 [ 1544.215171][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.220829][ T12] ? lock_acquire+0x1b1/0x560 [ 1544.225535][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.231191][ T12] ? find_held_lock+0x2d/0x110 [ 1544.235998][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.241660][ T12] ? __pfx_submit_compressed_extents+0x10/0x10 [ 1544.247857][ T12] ? __pfx_lock_release+0x10/0x10 [ 1544.252914][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.258574][ T12] ? mark_held_locks+0x9f/0xe0 [ 1544.263366][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1544.269203][ T12] btrfs_work_helper+0x68d/0xc90 [ 1544.274199][ T12] process_one_work+0x9fe/0x1b60 [ 1544.279192][ T12] ? __pfx_btrfs_work_helper+0x10/0x10 [ 1544.284697][ T12] ? __pfx_process_one_work+0x10/0x10 [ 1544.290112][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.295781][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.301437][ T12] ? assign_work+0x1a0/0x250 [ 1544.306058][ T12] worker_thread+0x6c8/0xf70 [ 1544.310696][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1544.315839][ T12] kthread+0x2c4/0x3a0 [ 1544.319949][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 1544.325171][ T12] ? __pfx_kthread+0x10/0x10 [ 1544.329802][ T12] ret_from_fork+0x48/0x80 [ 1544.334258][ T12] ? __pfx_kthread+0x10/0x10 [ 1544.338894][ T12] ret_from_fork_asm+0x1a/0x30 [ 1544.343713][ T12] [ 1544.346735][ T12] [ 1544.349058][ T12] Allocated by task 2: [ 1544.353130][ T12] kasan_save_stack+0x33/0x60 [ 1544.357825][ T12] kasan_save_track+0x14/0x30 [ 1544.362515][ T12] __kasan_slab_alloc+0x89/0x90 [ 1544.367384][ T12] kmem_cache_alloc_node_noprof+0x153/0x310 [ 1544.373305][ T12] copy_process+0x4b7/0x8f10 [ 1544.377961][ T12] kernel_clone+0xfd/0x980 [ 1544.382393][ T12] kernel_thread+0xc0/0x100 [ 1544.386920][ T12] kthreadd+0x4ef/0x7d0 [ 1544.391106][ T12] ret_from_fork+0x48/0x80 [ 1544.395559][ T12] ret_from_fork_asm+0x1a/0x30 [ 1544.400362][ T12] [ 1544.402684][ T12] Freed by task 18347: [ 1544.406755][ T12] kasan_save_stack+0x33/0x60 [ 1544.411450][ T12] kasan_save_track+0x14/0x30 [ 1544.416141][ T12] kasan_save_free_info+0x3b/0x60 [ 1544.421199][ T12] poison_slab_object+0xf7/0x160 [ 1544.426176][ T12] __kasan_slab_free+0x32/0x50 [ 1544.430958][ T12] kmem_cache_free+0x12f/0x3a0 [ 1544.435739][ T12] delayed_put_task_struct+0x22c/0x300 [ 1544.441219][ T12] rcu_core+0x82b/0x16b0 [ 1544.445485][ T12] handle_softirqs+0x219/0x8f0 [ 1544.450282][ T12] irq_exit_rcu+0xbb/0x120 [ 1544.454734][ T12] sysvec_apic_timer_interrupt+0x95/0xb0 [ 1544.460391][ T12] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1544.466413][ T12] [ 1544.468738][ T12] Last potentially related work creation: [ 1544.474451][ T12] kasan_save_stack+0x33/0x60 [ 1544.479152][ T12] __kasan_record_aux_stack+0xba/0xd0 [ 1544.484592][ T12] __call_rcu_common.constprop.0+0x9a/0x790 [ 1544.490512][ T12] put_task_struct_rcu_user+0x87/0xd0 [ 1544.495908][ T12] __schedule+0xf1d/0x5d00 [ 1544.500346][ T12] schedule+0xe7/0x350 [ 1544.504431][ T12] schedule_timeout+0x136/0x2a0 [ 1544.509324][ T12] __wait_for_common+0x3e1/0x5f0 [ 1544.514284][ T12] usb_start_wait_urb+0x148/0x4c0 [ 1544.519338][ T12] usb_control_msg+0x327/0x4b0 [ 1544.524126][ T12] hub_port_init+0x1d0a/0x3a50 [ 1544.528917][ T12] hub_event+0x2b65/0x4e20 [ 1544.533363][ T12] process_one_work+0x9fe/0x1b60 [ 1544.538333][ T12] worker_thread+0x6c8/0xf70 [ 1544.542951][ T12] kthread+0x2c4/0x3a0 [ 1544.547056][ T12] ret_from_fork+0x48/0x80 [ 1544.551514][ T12] ret_from_fork_asm+0x1a/0x30 [ 1544.556322][ T12] [ 1544.558732][ T12] The buggy address belongs to the object at ffff888020d79e00 [ 1544.558732][ T12] which belongs to the cache task_struct of size 7424 [ 1544.573006][ T12] The buggy address is located 2568 bytes inside of [ 1544.573006][ T12] freed 7424-byte region [ffff888020d79e00, ffff888020d7bb00) [ 1544.587035][ T12] [ 1544.589364][ T12] The buggy address belongs to the physical page: [ 1544.595774][ T12] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20d78 [ 1544.604549][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1544.613059][ T12] memcg:ffff88801c6ef781 [ 1544.617306][ T12] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1544.625209][ T12] page_type: 0xffffefff(slab) [ 1544.629901][ T12] raw: 00fff00000000040 ffff8880162f0500 ffffea0001372000 dead000000000003 [ 1544.638507][ T12] raw: 0000000000000000 0000000000040004 00000001ffffefff ffff88801c6ef781 [ 1544.647116][ T12] head: 00fff00000000040 ffff8880162f0500 ffffea0001372000 dead000000000003 [ 1544.655809][ T12] head: 0000000000000000 0000000000040004 00000001ffffefff ffff88801c6ef781 [ 1544.664499][ T12] head: 00fff00000000003 ffffea0000835e01 ffffffffffffffff 0000000000000000 [ 1544.673214][ T12] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1544.681902][ T12] page dumped because: kasan: bad access detected [ 1544.688322][ T12] page_owner tracks the page as allocated [ 1544.694042][ T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 16581616576, free_ts 0 [ 1544.713710][ T12] post_alloc_hook+0x2d1/0x350 [ 1544.718511][ T12] get_page_from_freelist+0x136a/0x2e50 [ 1544.724122][ T12] __alloc_pages_noprof+0x22b/0x2460 [ 1544.729448][ T12] alloc_slab_page+0x56/0x110 [ 1544.734166][ T12] new_slab+0x84/0x260 [ 1544.738255][ T12] ___slab_alloc+0xdac/0x1870 [ 1544.742952][ T12] __slab_alloc.constprop.0+0x56/0xb0 [ 1544.748347][ T12] kmem_cache_alloc_node_noprof+0xed/0x310 [ 1544.754180][ T12] copy_process+0x4b7/0x8f10 [ 1544.758836][ T12] kernel_clone+0xfd/0x980 [ 1544.763270][ T12] kernel_thread+0xc0/0x100 [ 1544.767788][ T12] kthreadd+0x4ef/0x7d0 [ 1544.771963][ T12] ret_from_fork+0x48/0x80 [ 1544.776415][ T12] ret_from_fork_asm+0x1a/0x30 [ 1544.781238][ T12] page_owner free stack trace missing [ 1544.786783][ T12] [ 1544.789112][ T12] Memory state around the buggy address: [ 1544.794750][ T12] ffff888020d7a700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1544.802826][ T12] ffff888020d7a780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1544.810902][ T12] >ffff888020d7a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1544.818968][ T12] ^ [ 1544.823300][ T12] ffff888020d7a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1544.831373][ T12] ffff888020d7a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1544.839441][ T12] ================================================================== [ 1544.847516][ T12] ================================================================== [ 1544.855579][ T12] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x11e/0x2c0 [ 1544.863421][ T12] Write of size 4 at addr ffff888020d7a800 by task kworker/u8:1/12 [ 1544.871324][ T12] [ 1544.873650][ T12] CPU: 1 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.10.0-rc5-syzkaller #0 [ 1544.883494][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1544.893570][ T12] Workqueue: btrfs-delalloc btrfs_work_helper [ 1544.899688][ T12] Call Trace: [ 1544.902977][ T12] [ 1544.905919][ T12] dump_stack_lvl+0x116/0x1f0 [ 1544.910629][ T12] print_report+0xc3/0x620 [ 1544.915071][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.920729][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.926384][ T12] ? __phys_addr+0xc6/0x150 [ 1544.930911][ T12] kasan_report+0xd9/0x110 [ 1544.935358][ T12] ? do_raw_spin_lock+0x11e/0x2c0 [ 1544.940421][ T12] ? do_raw_spin_lock+0x11e/0x2c0 [ 1544.945492][ T12] kasan_check_range+0xef/0x1a0 [ 1544.950380][ T12] do_raw_spin_lock+0x11e/0x2c0 [ 1544.955272][ T12] ? __pfx_mark_lock+0x10/0x10 [ 1544.960061][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1544.965470][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1544.971127][ T12] ? lock_acquire+0x1b1/0x560 [ 1544.975844][ T12] _raw_spin_lock_irqsave+0x42/0x60 [ 1544.981066][ T12] ? try_to_wake_up+0x9a/0x13e0 [ 1544.985962][ T12] try_to_wake_up+0x9a/0x13e0 [ 1544.990688][ T12] ? __pfx_try_to_wake_up+0x10/0x10 [ 1544.995940][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.001599][ T12] ? mark_held_locks+0x9f/0xe0 [ 1545.006398][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1545.012236][ T12] btrfs_add_delayed_iput+0x30a/0x3d0 [ 1545.017658][ T12] submit_compressed_extents+0xd02/0x13a0 [ 1545.023423][ T12] ? __pfx_mark_lock+0x10/0x10 [ 1545.028215][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.033873][ T12] ? lock_acquire+0x1b1/0x560 [ 1545.038576][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.044234][ T12] ? find_held_lock+0x2d/0x110 [ 1545.049213][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.054872][ T12] ? __pfx_submit_compressed_extents+0x10/0x10 [ 1545.061071][ T12] ? __pfx_lock_release+0x10/0x10 [ 1545.066127][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.071786][ T12] ? mark_held_locks+0x9f/0xe0 [ 1545.076599][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1545.082456][ T12] btrfs_work_helper+0x68d/0xc90 [ 1545.087453][ T12] process_one_work+0x9fe/0x1b60 [ 1545.092472][ T12] ? __pfx_btrfs_work_helper+0x10/0x10 [ 1545.097973][ T12] ? __pfx_process_one_work+0x10/0x10 [ 1545.103385][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.109606][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.115273][ T12] ? assign_work+0x1a0/0x250 [ 1545.119899][ T12] worker_thread+0x6c8/0xf70 [ 1545.124540][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1545.129685][ T12] kthread+0x2c4/0x3a0 [ 1545.133799][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 1545.139020][ T12] ? __pfx_kthread+0x10/0x10 [ 1545.143657][ T12] ret_from_fork+0x48/0x80 [ 1545.148118][ T12] ? __pfx_kthread+0x10/0x10 [ 1545.152749][ T12] ret_from_fork_asm+0x1a/0x30 [ 1545.157576][ T12] [ 1545.160600][ T12] [ 1545.162928][ T12] Allocated by task 2: [ 1545.167003][ T12] kasan_save_stack+0x33/0x60 [ 1545.171706][ T12] kasan_save_track+0x14/0x30 [ 1545.176401][ T12] __kasan_slab_alloc+0x89/0x90 [ 1545.181274][ T12] kmem_cache_alloc_node_noprof+0x153/0x310 [ 1545.187198][ T12] copy_process+0x4b7/0x8f10 [ 1545.191833][ T12] kernel_clone+0xfd/0x980 [ 1545.196269][ T12] kernel_thread+0xc0/0x100 [ 1545.200812][ T12] kthreadd+0x4ef/0x7d0 [ 1545.205011][ T12] ret_from_fork+0x48/0x80 [ 1545.209476][ T12] ret_from_fork_asm+0x1a/0x30 [ 1545.214282][ T12] [ 1545.216641][ T12] Freed by task 18347: [ 1545.220712][ T12] kasan_save_stack+0x33/0x60 [ 1545.225408][ T12] kasan_save_track+0x14/0x30 [ 1545.230103][ T12] kasan_save_free_info+0x3b/0x60 [ 1545.235163][ T12] poison_slab_object+0xf7/0x160 [ 1545.240143][ T12] __kasan_slab_free+0x32/0x50 [ 1545.244923][ T12] kmem_cache_free+0x12f/0x3a0 [ 1545.249705][ T12] delayed_put_task_struct+0x22c/0x300 [ 1545.255188][ T12] rcu_core+0x82b/0x16b0 [ 1545.259479][ T12] handle_softirqs+0x219/0x8f0 [ 1545.264282][ T12] irq_exit_rcu+0xbb/0x120 [ 1545.268756][ T12] sysvec_apic_timer_interrupt+0x95/0xb0 [ 1545.274420][ T12] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1545.280443][ T12] [ 1545.282768][ T12] Last potentially related work creation: [ 1545.288482][ T12] kasan_save_stack+0x33/0x60 [ 1545.293178][ T12] __kasan_record_aux_stack+0xba/0xd0 [ 1545.298583][ T12] __call_rcu_common.constprop.0+0x9a/0x790 [ 1545.304509][ T12] put_task_struct_rcu_user+0x87/0xd0 [ 1545.309913][ T12] __schedule+0xf1d/0x5d00 [ 1545.314355][ T12] schedule+0xe7/0x350 [ 1545.318442][ T12] schedule_timeout+0x136/0x2a0 [ 1545.323329][ T12] __wait_for_common+0x3e1/0x5f0 [ 1545.328321][ T12] usb_start_wait_urb+0x148/0x4c0 [ 1545.333379][ T12] usb_control_msg+0x327/0x4b0 [ 1545.338168][ T12] hub_port_init+0x1d0a/0x3a50 [ 1545.342956][ T12] hub_event+0x2b65/0x4e20 [ 1545.347404][ T12] process_one_work+0x9fe/0x1b60 [ 1545.352369][ T12] worker_thread+0x6c8/0xf70 [ 1545.356991][ T12] kthread+0x2c4/0x3a0 [ 1545.361098][ T12] ret_from_fork+0x48/0x80 [ 1545.365551][ T12] ret_from_fork_asm+0x1a/0x30 [ 1545.370357][ T12] [ 1545.372682][ T12] The buggy address belongs to the object at ffff888020d79e00 [ 1545.372682][ T12] which belongs to the cache task_struct of size 7424 [ 1545.386836][ T12] The buggy address is located 2560 bytes inside of [ 1545.386836][ T12] freed 7424-byte region [ffff888020d79e00, ffff888020d7bb00) [ 1545.400829][ T12] [ 1545.403162][ T12] The buggy address belongs to the physical page: [ 1545.409579][ T12] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20d78 [ 1545.418359][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1545.426870][ T12] memcg:ffff88801c6ef781 [ 1545.431111][ T12] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1545.439015][ T12] page_type: 0xffffefff(slab) [ 1545.443707][ T12] raw: 00fff00000000040 ffff8880162f0500 ffffea0001372000 dead000000000003 [ 1545.452399][ T12] raw: 0000000000000000 0000000000040004 00000001ffffefff ffff88801c6ef781 [ 1545.461005][ T12] head: 00fff00000000040 ffff8880162f0500 ffffea0001372000 dead000000000003 [ 1545.469718][ T12] head: 0000000000000000 0000000000040004 00000001ffffefff ffff88801c6ef781 [ 1545.478411][ T12] head: 00fff00000000003 ffffea0000835e01 ffffffffffffffff 0000000000000000 [ 1545.487100][ T12] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1545.495784][ T12] page dumped because: kasan: bad access detected [ 1545.502202][ T12] page_owner tracks the page as allocated [ 1545.507919][ T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 16581616576, free_ts 0 [ 1545.527687][ T12] post_alloc_hook+0x2d1/0x350 [ 1545.532497][ T12] get_page_from_freelist+0x136a/0x2e50 [ 1545.538086][ T12] __alloc_pages_noprof+0x22b/0x2460 [ 1545.543415][ T12] alloc_slab_page+0x56/0x110 [ 1545.548131][ T12] new_slab+0x84/0x260 [ 1545.552219][ T12] ___slab_alloc+0xdac/0x1870 [ 1545.556920][ T12] __slab_alloc.constprop.0+0x56/0xb0 [ 1545.562322][ T12] kmem_cache_alloc_node_noprof+0xed/0x310 [ 1545.568160][ T12] copy_process+0x4b7/0x8f10 [ 1545.572796][ T12] kernel_clone+0xfd/0x980 [ 1545.577228][ T12] kernel_thread+0xc0/0x100 [ 1545.581751][ T12] kthreadd+0x4ef/0x7d0 [ 1545.585952][ T12] ret_from_fork+0x48/0x80 [ 1545.590418][ T12] ret_from_fork_asm+0x1a/0x30 [ 1545.595223][ T12] page_owner free stack trace missing [ 1545.600589][ T12] [ 1545.602913][ T12] Memory state around the buggy address: [ 1545.608551][ T12] ffff888020d7a700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1545.616650][ T12] ffff888020d7a780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1545.624734][ T12] >ffff888020d7a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1545.632806][ T12] ^ [ 1545.636881][ T12] ffff888020d7a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1545.644959][ T12] ffff888020d7a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1545.653030][ T12] ================================================================== [ 1545.661104][ T12] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 1545.668829][ T12] CPU: 1 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.10.0-rc5-syzkaller #0 [ 1545.678657][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1545.688731][ T12] Workqueue: btrfs-delalloc btrfs_work_helper [ 1545.694848][ T12] Call Trace: [ 1545.698138][ T12] [ 1545.701077][ T12] dump_stack_lvl+0x3d/0x1f0 [ 1545.705703][ T12] panic+0x6f5/0x7a0 [ 1545.709634][ T12] ? __pfx_panic+0x10/0x10 [ 1545.714087][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.719755][ T12] ? lock_release+0x4cc/0x6c0 [ 1545.724462][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.730137][ T12] end_report+0x160/0x180 [ 1545.734496][ T12] kasan_report+0xe9/0x110 [ 1545.738941][ T12] ? do_raw_spin_lock+0x11e/0x2c0 [ 1545.744005][ T12] ? do_raw_spin_lock+0x11e/0x2c0 [ 1545.749075][ T12] kasan_check_range+0xef/0x1a0 [ 1545.753964][ T12] do_raw_spin_lock+0x11e/0x2c0 [ 1545.758849][ T12] ? __pfx_mark_lock+0x10/0x10 [ 1545.763638][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1545.769047][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.774707][ T12] ? lock_acquire+0x1b1/0x560 [ 1545.779414][ T12] _raw_spin_lock_irqsave+0x42/0x60 [ 1545.784638][ T12] ? try_to_wake_up+0x9a/0x13e0 [ 1545.789528][ T12] try_to_wake_up+0x9a/0x13e0 [ 1545.794339][ T12] ? __pfx_try_to_wake_up+0x10/0x10 [ 1545.799579][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.805265][ T12] ? mark_held_locks+0x9f/0xe0 [ 1545.810067][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1545.815915][ T12] btrfs_add_delayed_iput+0x30a/0x3d0 [ 1545.821340][ T12] submit_compressed_extents+0xd02/0x13a0 [ 1545.827109][ T12] ? __pfx_mark_lock+0x10/0x10 [ 1545.831924][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.837582][ T12] ? lock_acquire+0x1b1/0x560 [ 1545.842287][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.847948][ T12] ? find_held_lock+0x2d/0x110 [ 1545.852762][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.858428][ T12] ? __pfx_submit_compressed_extents+0x10/0x10 [ 1545.864630][ T12] ? __pfx_lock_release+0x10/0x10 [ 1545.869688][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.875345][ T12] ? mark_held_locks+0x9f/0xe0 [ 1545.880139][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1545.885976][ T12] btrfs_work_helper+0x68d/0xc90 [ 1545.891080][ T12] process_one_work+0x9fe/0x1b60 [ 1545.896076][ T12] ? __pfx_btrfs_work_helper+0x10/0x10 [ 1545.901576][ T12] ? __pfx_process_one_work+0x10/0x10 [ 1545.906983][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.912655][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1545.918321][ T12] ? assign_work+0x1a0/0x250 [ 1545.922943][ T12] worker_thread+0x6c8/0xf70 [ 1545.927583][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1545.932728][ T12] kthread+0x2c4/0x3a0 [ 1545.936840][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 1545.942063][ T12] ? __pfx_kthread+0x10/0x10 [ 1545.946697][ T12] ret_from_fork+0x48/0x80 [ 1545.951157][ T12] ? __pfx_kthread+0x10/0x10 [ 1545.955791][ T12] ret_from_fork_asm+0x1a/0x30 [ 1545.960611][ T12] [ 1545.963829][ T12] Kernel Offset: disabled [ 1545.968154][ T12] Rebooting in 86400 seconds..