last executing test programs: 1m9.151176383s ago: executing program 0 (id=589): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 1m8.904472379s ago: executing program 0 (id=592): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r1) 1m7.915349761s ago: executing program 0 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 1m7.646980528s ago: executing program 0 (id=602): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 1m7.40147179s ago: executing program 0 (id=604): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x700}]}, 0x34}}, 0x20) 1m6.939085617s ago: executing program 0 (id=609): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1m6.253837294s ago: executing program 32 (id=609): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 36.604382145s ago: executing program 5 (id=789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 36.077894231s ago: executing program 5 (id=796): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x4}}, 0x20) 35.749463395s ago: executing program 5 (id=800): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="67727e10ea34", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @empty, 0xfffffffe}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 34.626057417s ago: executing program 5 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 34.327615781s ago: executing program 5 (id=809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r2, 0x0, 0x400000002000000, 0x2) 33.823839268s ago: executing program 5 (id=812): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7fff) listen(r0, 0x2) accept4(r0, 0x0, 0x0, 0x80800) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x8081) 32.92212971s ago: executing program 33 (id=812): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7fff) listen(r0, 0x2) accept4(r0, 0x0, 0x0, 0x80800) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x8081) 6.729351036s ago: executing program 2 (id=970): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) 5.310457436s ago: executing program 6 (id=982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 5.142741181s ago: executing program 4 (id=983): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$eJzs3U1sHFcBAOA3a6/z22ZTHGrS0CYU2vJTu3FM+ImAVM2FqKm4Vaq4RElaIpyASCVI1UOSEzdaVeHK76mX8qNK5IKinrhUopG49FQ4cCAKUiUO0JC48vq99e7zbmbt2J6s9/uk2bdv3tt9b3ZnZmdn5r0XgKFVaz7OzEwUIVy+8saRfz32zy0hXBlfzNFoPo62xeohhCLGR7P3+2BkIbz14asnuoVFmG4+pnh47kbrtdtCCBfC3nA1NMLuy9def3f62WMXj17a996bh66vzdIDAMBw+c7VQzO7/v7Xh3Z+9NbDh8Om1vx0fN6I8e3xuP9wPPBPx/+10Bkv2qZ2Y1m+0TjVsnwjXfK1l1PP8o32KH8se996j3ybSsofaZvXbblhkKX1uBGK2mRHvFabnFz4Tx6a/+vHismzp2dfPFdRRYFV959HQgh7Taahny42N4jq67Gu09yOqvdAAAvy64VLXMjPLNyd1ruN9lf+jadr3V8Pq2C913/lD1b5v71oj8Pq2ahrU1qutB1tj/G26whnQpf7l/Ltby5/42z7T++XX4+o91nPXtcRBuX6Qq96jqxzPVaqV/3z9WKj+kYM0+fwzSy9ffvJv9NB+Y6B7v7r/L/JNLTTkuPbO8jvlQE2tvy+ubkopef39eXpm0rSN5ekbylJ39qRa2n6tpLXwzD748s/C68Vi//z8//0yz0fns6z3RfD+5dZn/x85HLLH7tDbD3Kd4zEIPnT8edPffXkC9cW7v8vWuv/7bi+743xRtyarsYM6Xxhfl69de9/o7OcWo98D2T1ua9L/ubz8c58xfji+4S2/cySekx0vm5Hr3x7OvM1snxb4rQ5q29+fLI1e106/kj71fR5jWbLW8+WYyyrR9qv7IxhXg9YibQ+9rr/P62fE6FevHh69tRTMZ7W07+M1DfNz99fXtTvVrvuwN3pt/3PROhs/7O9Nb9ea98v7FicX7TvFxrZ/Oke8w/EePqd+97Ilub8yRM/mD252gsPQ+7c+Ve+f3x29tSPPPHEE09aT6reMwFrberlMz+cOnf+lSdPnzn+0qmXTp09cPDggenpg187MDPVPK6faj+6BzaSxR/9qmsCAAAAAAAAAAAA9OvHR49c+9s7X3l/of3/Yvu/1P4/3fmb2v//tFho615rmx+6jAOY2gHu7JLezJN1sDqW5avH6RNZfcezcnZlr/tkDFvj+MX2/6m4vF/XVJ8Hs/l5/70pX9adwJL+UsayXkfy8QI/E8NLMfx1gAoVW7rPjmFZ/9ZpXU/9UyyjX4ruBVOJ9L2lLyX1Y5Laf/fq1ynt/3euQx1ZfevRnLDqZQS6+/cQ9//dPHZZw/f/zf3VL+Pm3mmbqq6bqfppbs4oHsC9oerxP9N5zxSe/fO3N89PKduNpzv3l3n/pXA37vXxJ5W/scb/bI1/19f+7+bS0RMaKyv3f7+4/n5bsWF3v/vffPlTP9DjeQl3PhP90Xz5NxcX5fHQX/lzv8rKzy8I9elmXP70+W/ts/wly7+nrKTzb3eb+/9YfvrYnni03/IXalzUOuuRnzdO1//y88bJrWz5T650+Vc4UOPtWD4Ms0EZZ3a5+hj/t6ls/N8lVnn8317y+zC+HONpR5juc8hHOFlm/VuR9DuwK3v/ouT3zfi/g+3rMSzbHtL4v2l9bHSJ19ri9S6f7Ubd18Cg+uDevf63+ENVfV1M/X5f1dfDtIxpbm5ubU9olai0cCr//Kv+n1B1+VV//mXy8X/zY/h8/N88PR//N0/Px//N0/Px9fL0rVl6/nnm4//m6Q9m75uPDzyR/cHO0z9V8vrdJekPlaTvKUn/dEn6vpL0h0vSHylJf6Ak/dGS9M+WpH+uJP2xkvQnStI/X5K+0aX2KMO6/DDM8vZ5tn8YHql9ba/tf7wkHRhcP39r/zMv/OG7jYX2/2Ot8yHpOt7hGK/H/84/ifH8undoi8+nvRPj/8jS7/XzHTBM8v4z8t/3x0vSgcGV7vOyfcMQKrq3k+i336pex/kMli/E8Isx/FIMn4zhZAynYrg/htPrVD/WxjO/f/vQa8Xi//0dWXq/95Pn7YHyfqIO9Fmf/PzAcu/Hz/vxW667LX+FzcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqU2s+zsxMFCFcvvLGkeePnZ6an/OtVo5G83G0LVZvvS6Ep2I4EsNfxie3Pnz1RHt4O4ZFmA5FKFrzw3M3WiVtCyFcCHvD1dAIuy9fe/3d6WePXTx6ad97bx66vnafAAAAAGx8HwcAAP//V88c0Q==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80186e84, &(0x7f0000000080)={@desc={0x40002, 0x0, @desc1}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4.911065215s ago: executing program 1 (id=985): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 4.856474562s ago: executing program 6 (id=986): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000002c0)=@v1={0x0, @aes128, 0x8, @auto="0010f3ffb92c804b"}) 4.685642039s ago: executing program 1 (id=987): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000340)=0xe) writev(r2, &(0x7f0000001340)=[{&(0x7f0000001200)="e79d", 0x2}, {0x0}, {0x0}], 0x3) 4.546784804s ago: executing program 2 (id=988): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 4.474109317s ago: executing program 4 (id=989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800005ba500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 4.418402495s ago: executing program 1 (id=991): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4.273434317s ago: executing program 6 (id=993): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 4.203913846s ago: executing program 7 (id=994): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001880)="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", 0x410}], 0x1, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x400}], 0x18, 0x200040d0}], 0x1, 0x840) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000003a00)=""/4109, 0x100d}], 0x1}, 0x40010021) 4.169217462s ago: executing program 1 (id=995): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@discard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x37, 0x2d, 0x32, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") chdir(&(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) fallocate(r1, 0x10, 0x3, 0x7c25) openat(0xffffffffffffff9c, 0x0, 0x42042, 0x14a) 4.082668144s ago: executing program 2 (id=996): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000a0001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.916203112s ago: executing program 4 (id=998): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x12, r0, 0x0) r1 = socket$isdn(0x22, 0x2, 0x3) bind$isdn(r1, &(0x7f0000000200)={0x22, 0x7f, 0x6, 0x3, 0x5}, 0x6) 3.888850441s ago: executing program 7 (id=999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 3.662980519s ago: executing program 2 (id=1000): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000000}) 3.532928803s ago: executing program 4 (id=1001): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 3.271920316s ago: executing program 3 (id=1002): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) r0 = semget$private(0x0, 0x4, 0x9c) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$GETVAL(r0, 0x1, 0xc, 0x0) 3.174186574s ago: executing program 4 (id=1003): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000640)={0x48, 0x1, r1, 0x0, 0x9, 0x2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x1, r1, 0x0, 0x1, 0x10}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000140)={0x20, r1, 0x1, 0x0, &(0x7f0000000040)=[{}]}) 3.094599428s ago: executing program 6 (id=1004): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.699138412s ago: executing program 4 (id=1005): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4840) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="b6", 0x1}], 0x1) 2.496931248s ago: executing program 6 (id=1006): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 2.256893605s ago: executing program 3 (id=1007): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x240002, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4092, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x158) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file0/file0'}}]}) 2.067235906s ago: executing program 7 (id=1008): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r0, 0x0, 0x9}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x25, 0x0, 0x0) 1.693169938s ago: executing program 7 (id=1009): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x7b04, 0x3080, 0x8003, 0x25f}, &(0x7f0000000380)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x11, r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x4, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x3, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x0, 0x71, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x3c, 0x4, 0x1, 0x1000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0x37c63b1d, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfffff001, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xffff, 0x2000002, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x6, 0x3], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x401, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x5, 0x5, 0x3b, 0x1, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x0, 0x400002, 0x3, 0x4, 0x5, 0xf23, 0xe2eb, 0x6, 0xfffffffb, 0xef5, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0x3, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x6, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0xfffffffb, 0x2, 0x5, 0x11, 0x2, 0x14c, 0x60a7, 0x6, 0x35b0fa9a, 0x400007, 0x2, 0x5, 0x735, 0x8, 0x3, 0x50fd, 0x10001, 0x3, 0x9, 0x54, 0x9602, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10200, 0xfffffffe, 0x8, 0x2b94, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x19, 0xb1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6e2, 0x620, 0x1, 0x0, 0x0) 1.69126209s ago: executing program 3 (id=1010): syz_io_uring_setup(0x386c, 0x0, &(0x7f0000000380), &(0x7f0000000200)) r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x80081, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e060c"], 0x9) 1.430791757s ago: executing program 2 (id=1011): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xc410, &(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES16], 0x1, 0x6247, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x3c) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r1, 0x0) read(r1, &(0x7f0000001400)=""/4096, 0x1000) 1.389470109s ago: executing program 3 (id=1012): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) 1.298476473s ago: executing program 1 (id=1013): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x81, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) execve(&(0x7f00000002c0)='./file0/file2\x00', 0x0, 0x0) 1.115538817s ago: executing program 7 (id=1014): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000001280)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0xffffffff, 0x8010, 0x0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f0000001780)="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", 0x2000, &(0x7f00000011c0)={&(0x7f00000003c0)={0x50, 0x0, 0x1, {0x7, 0x2b, 0xee, 0x1e0081, 0x6793, 0x20, 0x4, 0x7, 0x0, 0x0, 0x8, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.115015423s ago: executing program 3 (id=1015): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) 942.368077ms ago: executing program 6 (id=1016): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000040)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$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") r0 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getdents(r0, &(0x7f0000000400)=""/196, 0xc4) 815.330523ms ago: executing program 3 (id=1017): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file2\x00', 0x8, &(0x7f0000000240)={[{@autodefrag}, {@autodefrag}, {@barrier}, {@max_inline={'max_inline', 0x3d, [0x6d]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@space_cache_v2}, {@thread_pool={'thread_pool', 0x3d, 0x1}}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x82040, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 705.039351ms ago: executing program 7 (id=1018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x5452, &(0x7f0000000a00)={'dvmrp0\x00', @random='c\b\x00'}) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) 328.851016ms ago: executing program 1 (id=1019): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10}) 0s ago: executing program 2 (id=1020): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)=0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) write$dsp(r1, &(0x7f0000001480)='C', 0x1) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)='@', 0x1}], 0x1) kernel console output (not intermixed with test programs): 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 171.449606][ T7442] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 171.458541][ T7442] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 171.467455][ T7442] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 171.476388][ T7442] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 171.485482][ T7442] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 171.494458][ T7442] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 171.503403][ T7442] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 171.512540][ T7442] XFS (loop5): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74 [ 171.532848][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.555511][ T7442] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 171.570448][ T7442] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 171.834105][ T5869] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 172.670935][ T7474] loop2: detected capacity change from 0 to 4096 [ 173.280635][ T7465] loop3: detected capacity change from 0 to 32768 [ 173.422733][ T7465] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.480027][ T7469] loop1: detected capacity change from 0 to 40427 [ 173.515198][ T7469] F2FS-fs (loop1): invalid crc value [ 173.576046][ T7465] XFS (loop3): Ending clean mount [ 173.664176][ T7465] XFS (loop3): Quotacheck needed: Please wait. [ 173.757335][ T7465] XFS (loop3): Quotacheck: Done. [ 173.767167][ T7498] loop4: detected capacity change from 0 to 4096 [ 173.816787][ T7465] syz.3.480: attempt to access beyond end of device [ 173.816787][ T7465] loop3: rw=4096, sector=35327, nr_sectors = 1 limit=32768 [ 174.054915][ T7498] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 174.076217][ T7469] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 174.102455][ T7498] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 174.138229][ T7498] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 174.158408][ T7498] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 174.172057][ T5875] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 174.198634][ T7469] F2FS-fs (loop1): Start checkpoint disabled! [ 174.241048][ T7498] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 174.275868][ T7498] ntfs3(loop4): ino=5, "/" attr_set_size [ 174.286253][ T7469] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 174.549310][ T7469] syz.1.483: attempt to access beyond end of device [ 174.549310][ T7469] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.688726][ T7512] syz.1.483: attempt to access beyond end of device [ 174.688726][ T7512] loop1: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 174.950197][ T2986] kworker/u8:9: attempt to access beyond end of device [ 174.950197][ T2986] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 175.008531][ T2986] CPU: 1 UID: 0 PID: 2986 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 175.008565][ T2986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.008581][ T2986] Workqueue: writeback wb_workfn (flush-7:1) [ 175.008618][ T2986] Call Trace: [ 175.008628][ T2986] [ 175.008638][ T2986] dump_stack_lvl+0x189/0x250 [ 175.008676][ T2986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.008707][ T2986] ? __pfx_queue_work_on+0x10/0x10 [ 175.008731][ T2986] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 175.008767][ T2986] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 175.008819][ T2986] f2fs_handle_critical_error+0x37c/0x540 [ 175.008867][ T2986] f2fs_write_end_io+0x886/0xb60 [ 175.008919][ T2986] __submit_merged_bio+0x27a/0x6a0 [ 175.008965][ T2986] __submit_merged_write_cond+0x255/0x530 [ 175.009012][ T2986] f2fs_write_data_pages+0x261d/0x3000 [ 175.009051][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.009128][ T2986] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 175.009186][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.009213][ T2986] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.009291][ T2986] ? ret_from_fork_asm+0x1a/0x30 [ 175.009361][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.009388][ T2986] ? __lock_acquire+0xab9/0xd20 [ 175.009439][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.009466][ T2986] ? rcu_is_watching+0x15/0xb0 [ 175.009492][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.009530][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.009570][ T2986] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 175.009611][ T2986] do_writepages+0x32e/0x550 [ 175.009652][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.009678][ T2986] ? reacquire_held_locks+0x127/0x1d0 [ 175.009703][ T2986] ? writeback_sb_inodes+0x384/0x1010 [ 175.009749][ T2986] __writeback_single_inode+0x145/0xff0 [ 175.009781][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.009808][ T2986] ? do_raw_spin_unlock+0x122/0x240 [ 175.009846][ T2986] writeback_sb_inodes+0x6c7/0x1010 [ 175.009890][ T2986] ? __switch_to+0xdae/0x1670 [ 175.009951][ T2986] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 175.010045][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.010072][ T2986] ? rcu_is_watching+0x15/0xb0 [ 175.010097][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.010138][ T2986] wb_writeback+0x43b/0xaf0 [ 175.010183][ T2986] ? queue_io+0x3b1/0x590 [ 175.010220][ T2986] ? __pfx_wb_writeback+0x10/0x10 [ 175.010265][ T2986] ? _raw_spin_unlock_irq+0x23/0x50 [ 175.010307][ T2986] wb_workfn+0x409/0xef0 [ 175.010358][ T2986] ? __pfx_wb_workfn+0x10/0x10 [ 175.010391][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.010418][ T2986] ? __lock_acquire+0xab9/0xd20 [ 175.010475][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.010507][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.010543][ T2986] ? _raw_spin_unlock_irq+0x23/0x50 [ 175.010573][ T2986] ? process_scheduled_works+0x9ef/0x17b0 [ 175.010596][ T2986] ? process_scheduled_works+0x9ef/0x17b0 [ 175.010623][ T2986] process_scheduled_works+0xae1/0x17b0 [ 175.010691][ T2986] ? __pfx_process_scheduled_works+0x10/0x10 [ 175.010726][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.010765][ T2986] worker_thread+0x8a0/0xda0 [ 175.010794][ T2986] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 175.010840][ T2986] ? __kthread_parkme+0x7b/0x200 [ 175.010882][ T2986] kthread+0x711/0x8a0 [ 175.010918][ T2986] ? __pfx_worker_thread+0x10/0x10 [ 175.010943][ T2986] ? __pfx_kthread+0x10/0x10 [ 175.010969][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.011002][ T2986] ? _raw_spin_unlock_irq+0x23/0x50 [ 175.011033][ T2986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 175.011060][ T2986] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.011093][ T2986] ? __pfx_kthread+0x10/0x10 [ 175.011125][ T2986] ret_from_fork+0x3fc/0x770 [ 175.011155][ T2986] ? __pfx_ret_from_fork+0x10/0x10 [ 175.011190][ T2986] ? __switch_to_asm+0x39/0x70 [ 175.011221][ T2986] ? __switch_to_asm+0x33/0x70 [ 175.011251][ T2986] ? __pfx_kthread+0x10/0x10 [ 175.011284][ T2986] ret_from_fork_asm+0x1a/0x30 [ 175.011342][ T2986] [ 175.429238][ T7486] loop5: detected capacity change from 0 to 40427 [ 175.459193][ T7486] F2FS-fs (loop5): Image doesn't support compression [ 175.480236][ T2986] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 175.490636][ T7486] F2FS-fs (loop5): build fault injection rate: 690 [ 175.540915][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 175.584114][ T7486] F2FS-fs (loop5): invalid crc value [ 175.690676][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 175.697843][ T24] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 175.706111][ T24] usb 3-1: config 0 has no interface number 0 [ 175.712270][ T24] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.724732][ T24] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 175.738883][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.748355][ T24] usb 3-1: Product: syz [ 175.752602][ T24] usb 3-1: Manufacturer: syz [ 175.757222][ T24] usb 3-1: SerialNumber: syz [ 175.764981][ T24] usb 3-1: config 0 descriptor?? [ 175.776101][ T24] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 175.785966][ T24] em28xx 3-1:0.132: Video interface 132 found: [ 176.035134][ T7486] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 176.063342][ T7486] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 176.201797][ T24] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 176.332571][ T5869] syz-executor: attempt to access beyond end of device [ 176.332571][ T5869] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.392718][ T5869] CPU: 1 UID: 0 PID: 5869 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 176.392750][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.392768][ T5869] Call Trace: [ 176.392777][ T5869] [ 176.392787][ T5869] dump_stack_lvl+0x189/0x250 [ 176.392825][ T5869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.392855][ T5869] ? __pfx_queue_work_on+0x10/0x10 [ 176.392878][ T5869] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 176.392913][ T5869] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 176.392960][ T5869] f2fs_handle_critical_error+0x37c/0x540 [ 176.393004][ T5869] f2fs_write_end_io+0x886/0xb60 [ 176.393048][ T5869] __submit_merged_bio+0x27a/0x6a0 [ 176.393090][ T5869] __submit_merged_write_cond+0x255/0x530 [ 176.393133][ T5869] f2fs_write_data_pages+0x261d/0x3000 [ 176.393217][ T5869] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 176.393305][ T5869] ? __mod_zone_page_state+0xd7/0x140 [ 176.393349][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.393376][ T5869] ? folios_put_refs+0x560/0x640 [ 176.393414][ T5869] ? __pfx_folios_put_refs+0x10/0x10 [ 176.393438][ T5869] ? rcu_is_watching+0x15/0xb0 [ 176.393471][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.393497][ T5869] ? __lock_acquire+0xab9/0xd20 [ 176.393551][ T5869] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 176.393590][ T5869] do_writepages+0x32e/0x550 [ 176.393628][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.393658][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.393684][ T5869] ? do_raw_spin_unlock+0x122/0x240 [ 176.393719][ T5869] filemap_fdatawrite+0x199/0x240 [ 176.393753][ T5869] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 176.393835][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.393867][ T5869] ? do_raw_spin_unlock+0x122/0x240 [ 176.393902][ T5869] f2fs_sync_dirty_inodes+0x31f/0x830 [ 176.393945][ T5869] f2fs_write_checkpoint+0x95a/0x1df0 [ 176.393998][ T5869] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 176.394076][ T5869] ? kill_f2fs_super+0x298/0x6c0 [ 176.394107][ T5869] kill_f2fs_super+0x2c3/0x6c0 [ 176.394139][ T5869] ? __pfx_kill_f2fs_super+0x10/0x10 [ 176.394161][ T5869] ? radix_tree_delete_item+0x2b6/0x400 [ 176.394208][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.394236][ T5869] ? shrinker_free+0x2ce/0x3e0 [ 176.394265][ T5869] deactivate_locked_super+0xbc/0x130 [ 176.394297][ T5869] cleanup_mnt+0x425/0x4c0 [ 176.394322][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.394348][ T5869] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.394386][ T5869] task_work_run+0x1d4/0x260 [ 176.394423][ T5869] ? __pfx_task_work_run+0x10/0x10 [ 176.394453][ T5869] ? __x64_sys_umount+0x122/0x160 [ 176.394491][ T5869] ? exit_to_user_mode_loop+0x40/0x110 [ 176.394530][ T5869] exit_to_user_mode_loop+0xec/0x110 [ 176.394565][ T5869] do_syscall_64+0x2bd/0x3b0 [ 176.394585][ T5869] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.394619][ T5869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.394641][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.394667][ T5869] ? exc_page_fault+0x9f/0xf0 [ 176.394703][ T5869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.394726][ T5869] RIP: 0033:0x7fb967f8ff17 [ 176.394748][ T5869] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 176.394767][ T5869] RSP: 002b:00007ffeab3cabb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 176.394791][ T5869] RAX: 0000000000000000 RBX: 00007fb968011c05 RCX: 00007fb967f8ff17 [ 176.394808][ T5869] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeab3cac70 [ 176.394822][ T5869] RBP: 00007ffeab3cac70 R08: 0000000000000000 R09: 0000000000000000 [ 176.394837][ T5869] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeab3cbd00 [ 176.394853][ T5869] R13: 00007fb968011c05 R14: 000000000002b00f R15: 00007ffeab3cbd40 [ 176.394890][ T5869] [ 176.394925][ T5869] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 176.893631][ T7519] loop4: detected capacity change from 0 to 32768 [ 176.916365][ T7526] loop0: detected capacity change from 0 to 40427 [ 176.986360][ T7526] F2FS-fs (loop0): invalid crc value [ 177.004325][ T7519] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 177.067745][ T2986] (kworker/u8:9,2986,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 177.327117][ T5872] ocfs2: Unmounting device (7,4) on (node local) [ 177.391957][ T24] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 177.452550][ T24] em28xx 3-1:0.132: board has no eeprom [ 177.458836][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 177.518506][ T7526] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 177.555635][ T7526] F2FS-fs (loop0): Start checkpoint disabled! [ 177.579609][ T7526] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 177.610632][ T24] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 177.618486][ T24] em28xx 3-1:0.132: analog set to bulk mode. [ 177.658821][ T858] em28xx 3-1:0.132: Registering V4L2 extension [ 177.718474][ T24] usb 3-1: USB disconnect, device number 6 [ 177.734216][ T24] em28xx 3-1:0.132: Disconnecting em28xx [ 177.741071][ T974] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 177.779695][ T7526] syz.0.502: attempt to access beyond end of device [ 177.779695][ T7526] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 178.000789][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.031448][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.088005][ T974] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.111219][ T1087] kworker/u8:5: attempt to access beyond end of device [ 178.111219][ T1087] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 178.149798][ T974] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.164500][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.195822][ T974] usb 5-1: config 0 descriptor?? [ 178.210841][ T1087] CPU: 1 UID: 0 PID: 1087 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 178.210874][ T1087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.210889][ T1087] Workqueue: writeback wb_workfn (flush-7:0) [ 178.210924][ T1087] Call Trace: [ 178.210934][ T1087] [ 178.210944][ T1087] dump_stack_lvl+0x189/0x250 [ 178.210981][ T1087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.211011][ T1087] ? __pfx_queue_work_on+0x10/0x10 [ 178.211035][ T1087] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 178.211070][ T1087] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 178.211121][ T1087] f2fs_handle_critical_error+0x37c/0x540 [ 178.211167][ T1087] f2fs_write_end_io+0x886/0xb60 [ 178.211217][ T1087] __submit_merged_bio+0x27a/0x6a0 [ 178.211262][ T1087] __submit_merged_write_cond+0x255/0x530 [ 178.211308][ T1087] f2fs_write_data_pages+0x261d/0x3000 [ 178.211397][ T1087] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 178.211432][ T1087] ? __local_bh_enable_ip+0x12d/0x1c0 [ 178.211482][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.211509][ T1087] ? rcu_is_watching+0x15/0xb0 [ 178.211583][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.211666][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.211693][ T1087] ? unwind_next_frame+0x19ae/0x2390 [ 178.211725][ T1087] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 178.211765][ T1087] do_writepages+0x32e/0x550 [ 178.211805][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.211831][ T1087] ? reacquire_held_locks+0x127/0x1d0 [ 178.211856][ T1087] ? writeback_sb_inodes+0x384/0x1010 [ 178.211902][ T1087] __writeback_single_inode+0x145/0xff0 [ 178.211933][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.211960][ T1087] ? do_raw_spin_unlock+0x122/0x240 [ 178.211998][ T1087] writeback_sb_inodes+0x6c7/0x1010 [ 178.212069][ T1087] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 178.212163][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.212190][ T1087] ? rcu_is_watching+0x15/0xb0 [ 178.212214][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.212254][ T1087] wb_writeback+0x43b/0xaf0 [ 178.212298][ T1087] ? queue_io+0x3b1/0x590 [ 178.212335][ T1087] ? __pfx_wb_writeback+0x10/0x10 [ 178.212380][ T1087] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.212422][ T1087] wb_workfn+0x409/0xef0 [ 178.212477][ T1087] ? __pfx_wb_workfn+0x10/0x10 [ 178.212510][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.212537][ T1087] ? __lock_acquire+0xab9/0xd20 [ 178.212590][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.212622][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.212654][ T1087] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.212685][ T1087] ? process_scheduled_works+0x9ef/0x17b0 [ 178.212709][ T1087] ? process_scheduled_works+0x9ef/0x17b0 [ 178.212736][ T1087] process_scheduled_works+0xae1/0x17b0 [ 178.212805][ T1087] ? __pfx_process_scheduled_works+0x10/0x10 [ 178.212843][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.212883][ T1087] worker_thread+0x8a0/0xda0 [ 178.212949][ T1087] kthread+0x711/0x8a0 [ 178.212986][ T1087] ? __pfx_worker_thread+0x10/0x10 [ 178.213012][ T1087] ? __pfx_kthread+0x10/0x10 [ 178.213038][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.213072][ T1087] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.213104][ T1087] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.213132][ T1087] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.213166][ T1087] ? __pfx_kthread+0x10/0x10 [ 178.213199][ T1087] ret_from_fork+0x3fc/0x770 [ 178.213230][ T1087] ? __pfx_ret_from_fork+0x10/0x10 [ 178.213266][ T1087] ? __switch_to_asm+0x39/0x70 [ 178.213297][ T1087] ? __switch_to_asm+0x33/0x70 [ 178.213328][ T1087] ? __pfx_kthread+0x10/0x10 [ 178.213361][ T1087] ret_from_fork_asm+0x1a/0x30 [ 178.213419][ T1087] [ 178.213430][ T1087] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 178.599265][ T7557] serio: Serial port ptm0 [ 178.600942][ T858] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 178.610937][ T858] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 178.618052][ T858] em28xx 3-1:0.132: No AC97 audio processor [ 178.628870][ T858] usb 3-1: Decoder not found [ 178.633939][ T858] em28xx 3-1:0.132: failed to create media graph [ 178.640725][ T858] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 178.651200][ T858] em28xx 3-1:0.132: Remote control support is not available for this card. [ 178.660612][ T24] em28xx 3-1:0.132: Closing input extension [ 178.692101][ T24] em28xx 3-1:0.132: Freeing device [ 178.929759][ T974] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 179.161058][ T974] usb 5-1: USB disconnect, device number 5 [ 179.235402][ T7570] loop2: detected capacity change from 0 to 128 [ 179.434315][ T7570] syz.2.515: attempt to access beyond end of device [ 179.434315][ T7570] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 179.559786][ T7566] fido_id[7566]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 179.601949][ T7573] syz.2.515: attempt to access beyond end of device [ 179.601949][ T7573] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 179.675534][ T7573] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 180.898511][ T7565] loop1: detected capacity change from 0 to 32768 [ 180.964016][ T7565] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.514 (7565) [ 181.018323][ T7565] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 181.049889][ T7565] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 181.060954][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 181.251245][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 181.309838][ T24] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 181.356390][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.470770][ T24] usb 1-1: Product: syz [ 181.474963][ T24] usb 1-1: Manufacturer: syz [ 181.539894][ T7565] BTRFS info (device loop1): checking UUID tree [ 181.562213][ T7618] loop5: detected capacity change from 0 to 32768 [ 181.567507][ T24] usb 1-1: SerialNumber: syz [ 181.604843][ T7618] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 181.613773][ T7618] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 181.620680][ T7565] BTRFS info (device loop1): enabling free space tree [ 181.633984][ T24] usb 1-1: config 0 descriptor?? [ 181.670870][ T7565] BTRFS info (device loop1): doing ref verification [ 181.713374][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 181.767783][ T30] audit: type=1804 audit(1756586039.177:18): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.514" name="/newroot/94/bus/file1" dev="loop1" ino=260 res=1 errno=0 [ 181.826950][ T7618] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 181.838969][ T974] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 181.860846][ T974] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 181.877705][ T7637] loop3: detected capacity change from 0 to 512 [ 181.907601][ T7637] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 182.183550][ T5877] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 182.470367][ T7641] loop4: detected capacity change from 0 to 32768 [ 182.676983][ T974] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 816ms [ 182.709404][ T974] gfs2: fsid=syz:syz.0: jid=0: Done [ 182.735284][ T7641] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 182.735314][ T7641] allowing incompatible features above 0.0: (unknown version) [ 182.735329][ T7641] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 182.778481][ T7641] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 182.786839][ T7641] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 182.795939][ T7641] bcachefs (loop4): Version upgrade required: [ 182.795939][ T7641] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 182.795939][ T7641] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 182.795939][ T7641] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 182.872877][ T7641] bcachefs (loop4): dropping and reconstructing all alloc info [ 182.877832][ T24] gspca_ov534_9: reg_w failed -71 [ 182.885515][ T7618] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 182.922712][ T7641] bcachefs (loop4): accounting_read... done [ 183.003155][ T7641] bcachefs (loop4): alloc_read... done [ 183.032776][ T7641] bcachefs (loop4): snapshots_read... done [ 183.059572][ T7641] bcachefs (loop4): check_allocations... done [ 183.162782][ T7641] bcachefs (loop4): going read-write [ 183.213621][ T7641] bcachefs (loop4): done starting filesystem [ 183.380906][ T7618] gfs2: fsid=syz:syz.0: found 1 quota changes [ 183.460590][ T24] gspca_ov534_9: Unknown sensor 0000 [ 183.460702][ T24] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 183.570934][ T24] usb 1-1: USB disconnect, device number 4 [ 183.581128][ T5872] bcachefs (loop4): shutting down [ 183.638095][ T5872] bcachefs (loop4): going read-only [ 183.678181][ T5872] bcachefs (loop4): finished waiting for writes to stop [ 183.816929][ T5872] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 183.843267][ T5872] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 183.879035][ T5872] bcachefs (loop4): unclean shutdown complete, journal seq 11 [ 183.947123][ T5872] bcachefs (loop4): done going read-only, filesystem not clean [ 184.060001][ T5872] bcachefs (loop4): shutdown complete [ 184.973881][ T7685] loop0: detected capacity change from 0 to 128 [ 185.090389][ T7685] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 185.393391][ T7693] loop5: detected capacity change from 0 to 1024 [ 185.441064][ T7693] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 185.485212][ T7693] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869) [ 185.563095][ T7693] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 185.618121][ T7693] EXT4-fs error (device loop5): ext4_get_journal_inode:5800: inode #5: comm syz.5.555: unexpected bad inode w/o EXT4_IGET_BAD [ 185.688176][ T7693] EXT4-fs (loop5): no journal found [ 185.729441][ T7693] EXT4-fs (loop5): can't get journal size [ 185.760196][ T7693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.841537][ T974] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 185.858229][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.024615][ T974] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 186.041890][ T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 186.053293][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.074728][ T974] usb 2-1: Product: syz [ 186.084735][ T974] usb 2-1: Manufacturer: syz [ 186.090349][ T974] usb 2-1: SerialNumber: syz [ 186.099833][ T974] usb 2-1: config 0 descriptor?? [ 186.222670][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.270166][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.342260][ T43] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 186.358068][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.381026][ T43] usb 4-1: SerialNumber: syz [ 186.411653][ T5944] usb 2-1: USB disconnect, device number 6 [ 186.521244][ T974] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 186.635249][ T43] usb 4-1: 0:2 : does not exist [ 186.706036][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 186.719652][ T43] usb 4-1: USB disconnect, device number 6 [ 186.734766][ T974] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 186.760249][ T974] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.794952][ T974] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.803874][ T7420] udevd[7420]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.865977][ T974] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.900597][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.939063][ T974] usb 1-1: Product: syz [ 186.948636][ T974] usb 1-1: Manufacturer: syz [ 186.961200][ T974] usb 1-1: SerialNumber: syz [ 187.409275][ T974] usb 1-1: 0:2 : does not exist [ 188.201278][ T7722] loop5: detected capacity change from 0 to 32768 [ 188.229897][ T974] usb 1-1: USB disconnect, device number 5 [ 188.408828][ T7722] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 188.448789][ T7748] loop1: detected capacity change from 0 to 2048 [ 188.562561][ T7748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.655566][ T7760] vlan2: entered allmulticast mode [ 188.674745][ T7760] macvtap0: entered allmulticast mode [ 188.675659][ T30] audit: type=1800 audit(1756586046.087:19): pid=7722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.566" name="file1" dev="loop5" ino=9553 res=0 errno=0 [ 188.691211][ T7748] EXT4-fs (loop1): shut down requested (1) [ 188.719540][ T7760] veth0_macvtap: entered allmulticast mode [ 188.803209][ T30] audit: type=1800 audit(1756586046.147:20): pid=7761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.566" name="file1" dev="loop5" ino=9553 res=0 errno=0 [ 188.973961][ T5877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.007107][ T5869] ocfs2: Unmounting device (7,5) on (node local) [ 189.215730][ T7769] loop4: detected capacity change from 0 to 128 [ 189.375022][ T7769] syz.4.586: attempt to access beyond end of device [ 189.375022][ T7769] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 189.493417][ T7772] syz.4.586: attempt to access beyond end of device [ 189.493417][ T7772] loop4: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 189.539332][ T7778] netlink: 'syz.5.587': attribute type 4 has an invalid length. [ 189.590652][ T7772] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 189.604038][ T7779] netlink: 'syz.5.587': attribute type 4 has an invalid length. [ 189.952363][ T7789] trusted_key: syz.0.592 sent an empty control message without MSG_MORE. [ 190.661595][ T7803] loop4: detected capacity change from 0 to 256 [ 190.666722][ T7802] netlink: 'syz.5.598': attribute type 1 has an invalid length. [ 190.736001][ T7803] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d) [ 190.825980][ T30] audit: type=1800 audit(1756586048.237:21): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.597" name="bus" dev="loop4" ino=1048620 res=0 errno=0 [ 191.390625][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 191.586356][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 191.636395][ T24] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 191.655682][ T24] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 191.680584][ T24] usb 6-1: Product: syz [ 191.684766][ T24] usb 6-1: Manufacturer: syz [ 191.730374][ T24] usb 6-1: SerialNumber: syz [ 191.762208][ T24] usb 6-1: config 0 descriptor?? [ 192.064793][ T5944] usb 6-1: USB disconnect, device number 7 [ 192.177073][ T1087] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.300321][ T1087] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.466932][ T1087] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.712794][ T1087] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.769739][ T7833] loop3: detected capacity change from 0 to 512 [ 192.798940][ T7834] loop5: detected capacity change from 0 to 128 [ 192.912072][ T7834] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.026683][ T7834] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.192193][ T7834] syz.5.614 (pid 7834) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 193.227650][ T1087] bridge_slave_1: left allmulticast mode [ 193.271884][ T1087] bridge_slave_1: left promiscuous mode [ 193.290332][ T7849] loop3: detected capacity change from 0 to 512 [ 193.324528][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.389949][ T7849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.511756][ T5869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.559571][ T5875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.561113][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.580753][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.625966][ T1087] bridge_slave_0: left allmulticast mode [ 193.671194][ T1087] bridge_slave_0: left promiscuous mode [ 193.721865][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.856957][ T5879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.868574][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.878032][ T5879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.914044][ T5879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.921972][ T5879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.747718][ T7841] loop4: detected capacity change from 0 to 32768 [ 194.842412][ T7889] loop5: detected capacity change from 0 to 1024 [ 194.882376][ T7841] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 194.934341][ T7889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 194.966036][ T7892] loop2: detected capacity change from 0 to 512 [ 194.982275][ T7889] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.039362][ T7889] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.632: lblock 0 mapped to illegal pblock 0 (length 1) [ 195.046750][ T7892] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 195.077500][ T7889] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 195.093009][ T7889] EXT4-fs (loop5): This should not happen!! Data will be lost [ 195.093009][ T7889] [ 195.112471][ T7899] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: comm syz.5.632: lblock 0 mapped to illegal pblock 0 (length 1) [ 195.125985][ T7841] XFS (loop4): Ending clean mount [ 195.135369][ T7892] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 195.232142][ T7899] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.632: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 195.254770][ T7892] EXT4-fs (loop2): 1 truncate cleaned up [ 195.292658][ T30] audit: type=1800 audit(1756586052.707:22): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.617" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 195.300917][ T7892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.364645][ T7899] EXT4-fs error (device loop5) in ext4_setattr:6071: Corrupt filesystem [ 195.462693][ T5872] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 195.537385][ T7880] loop3: detected capacity change from 0 to 32768 [ 195.612810][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 195.613007][ T7880] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 195.878928][ T7880] XFS (loop3): Ending clean mount [ 195.949675][ T7880] XFS (loop3): Quotacheck needed: Please wait. [ 195.978952][ T5881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.031037][ T5871] Bluetooth: hci0: command tx timeout [ 196.112048][ T7880] XFS (loop3): Quotacheck: Done. [ 196.183542][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.216594][ T1087] bond0 (unregistering): Released all slaves [ 196.248764][ T7880] XFS (loop3): User initiated shutdown received. [ 196.271034][ T7880] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476). Shutting down filesystem. [ 196.302282][ T7883] netlink: 'syz.1.631': attribute type 12 has an invalid length. [ 196.320832][ T7880] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 196.351261][ T7883] netlink: 'syz.1.631': attribute type 29 has an invalid length. [ 196.358996][ T7883] netlink: 148 bytes leftover after parsing attributes in process `syz.1.631'. [ 196.417654][ T7883] netlink: 51 bytes leftover after parsing attributes in process `syz.1.631'. [ 196.488008][ T5875] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.404876][ T7924] loop5: detected capacity change from 0 to 32768 [ 197.423063][ T7924] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.640 (7924) [ 197.498828][ T7924] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.554982][ T7924] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 197.560402][ T1087] hsr_slave_0: left promiscuous mode [ 197.574763][ T7936] loop3: detected capacity change from 0 to 1024 [ 197.587462][ T7936] EXT4-fs: Ignoring removed oldalloc option [ 197.597587][ T7936] EXT4-fs: Ignoring removed bh option [ 197.621156][ T1087] hsr_slave_1: left promiscuous mode [ 197.627335][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.646496][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.706504][ T7936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.720457][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.782278][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.791207][ T7920] loop2: detected capacity change from 0 to 40427 [ 197.833653][ T7920] F2FS-fs (loop2): build fault injection rate: 14 [ 197.849435][ T7924] BTRFS info (device loop5): rebuilding free space tree [ 197.883183][ T7920] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 197.922027][ T7924] BTRFS info (device loop5): allowing degraded mounts [ 197.932520][ T7920] F2FS-fs (loop2): invalid crc value [ 197.965015][ T1087] veth1_macvtap: left promiscuous mode [ 197.978931][ T7924] BTRFS info (device loop5): enabling ssd optimizations [ 197.991944][ T1087] veth0_macvtap: left promiscuous mode [ 198.002137][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 198.008638][ T7924] BTRFS info (device loop5): enabling free space tree [ 198.029713][ T1087] veth1_vlan: left promiscuous mode [ 198.042359][ T1087] veth0_vlan: left promiscuous mode [ 198.049771][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 198.060195][ T7924] BTRFS info (device loop5): force clearing of disk cache [ 198.070035][ T7924] BTRFS info (device loop5): use zstd compression, level 3 [ 198.100410][ T7924] BTRFS info (device loop5): max_inline set to 0 [ 198.111282][ T5871] Bluetooth: hci0: command tx timeout [ 198.342045][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 198.344864][ T7920] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 198.379831][ T7920] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 198.401640][ T7920] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 198.412009][ T5875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.520300][ T7920] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 198.560614][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 198.602544][ T7920] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x131/0xa40 [ 198.618033][ T43] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 198.660758][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.700895][ T7924] BTRFS warning (device loop5): failed to trim 1 block group(s), last error -512 [ 198.703598][ T43] usb 5-1: config 0 descriptor?? [ 198.724637][ T7968] BTRFS warning (device loop5): failed to trim 2 block group(s), last error -512 [ 198.749936][ T7973] syz.2.638: attempt to access beyond end of device [ 198.749936][ T7973] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.771546][ T7973] F2FS-fs (loop2): inject write IO error in f2fs_write_end_io of __submit_merged_bio+0x27a/0x6a0 [ 198.890110][ T7973] CPU: 0 UID: 0 PID: 7973 Comm: syz.2.638 Not tainted syzkaller #0 PREEMPT(full) [ 198.890144][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.890160][ T7973] Call Trace: [ 198.890170][ T7973] [ 198.890181][ T7973] dump_stack_lvl+0x189/0x250 [ 198.890220][ T7973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.890251][ T7973] ? __pfx_queue_work_on+0x10/0x10 [ 198.890277][ T7973] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 198.890314][ T7973] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 198.890363][ T7973] f2fs_handle_critical_error+0x37c/0x540 [ 198.890409][ T7973] f2fs_write_end_io+0x886/0xb60 [ 198.890460][ T7973] __submit_merged_bio+0x27a/0x6a0 [ 198.890504][ T7973] __submit_merged_write_cond+0x255/0x530 [ 198.890551][ T7973] f2fs_write_data_pages+0x261d/0x3000 [ 198.890632][ T7973] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 198.890688][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.890716][ T7973] ? __switch_to+0xdae/0x1670 [ 198.890785][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.890812][ T7973] ? check_path+0x21/0x40 [ 198.890835][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.890863][ T7973] ? check_noncircular+0xe0/0x160 [ 198.890948][ T7973] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 198.890988][ T7973] do_writepages+0x32e/0x550 [ 198.891027][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.891059][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.891087][ T7973] ? do_raw_spin_unlock+0x122/0x240 [ 198.891125][ T7973] filemap_fdatawrite+0x199/0x240 [ 198.891160][ T7973] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 198.891244][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.891279][ T7973] ? do_raw_spin_unlock+0x122/0x240 [ 198.891315][ T7973] f2fs_sync_dirty_inodes+0x31f/0x830 [ 198.891360][ T7973] f2fs_write_checkpoint+0x95a/0x1df0 [ 198.891415][ T7973] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 198.891491][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.891519][ T7973] ? down_write+0x162/0x1f0 [ 198.891544][ T7973] ? __pfx_down_write+0x10/0x10 [ 198.891583][ T7973] f2fs_issue_checkpoint+0x3ac/0x570 [ 198.891615][ T7973] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 198.891650][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.891679][ T7973] ? do_raw_spin_lock+0x121/0x290 [ 198.891721][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.891749][ T7973] ? __up_read+0x280/0x680 [ 198.891787][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.891815][ T7973] ? f2fs_sync_fs+0x200/0x3d0 [ 198.891853][ T7973] f2fs_do_sync_file+0x869/0x1860 [ 198.891892][ T7973] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 198.891964][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.891992][ T7973] ? __mark_inode_dirty+0x3d2/0xe10 [ 198.892025][ T7973] ? vfs_fsync_range+0x149/0x1c0 [ 198.892048][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.892076][ T7973] ? f2fs_sync_file+0xe9/0x160 [ 198.892104][ T7973] f2fs_file_write_iter+0x753/0x2410 [ 198.892152][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.892187][ T7973] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 198.892214][ T7973] ? rcu_read_lock_any_held+0xb3/0x120 [ 198.892262][ T7973] vfs_write+0x5c9/0xb30 [ 198.892301][ T7973] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 198.892331][ T7973] ? __pfx_vfs_write+0x10/0x10 [ 198.892378][ T7973] ? __fget_files+0x2a/0x420 [ 198.892423][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.892457][ T7973] ksys_write+0x145/0x250 [ 198.892493][ T7973] ? __pfx_ksys_write+0x10/0x10 [ 198.892523][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.892559][ T7973] ? do_syscall_64+0xbe/0x3b0 [ 198.892588][ T7973] do_syscall_64+0xfa/0x3b0 [ 198.892609][ T7973] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.892646][ T7973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.892669][ T7973] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.892697][ T7973] ? exc_page_fault+0x9f/0xf0 [ 198.892736][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.892760][ T7973] RIP: 0033:0x7f528ff8ebe9 [ 198.892781][ T7973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.892802][ T7973] RSP: 002b:00007f5290d84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.892829][ T7973] RAX: ffffffffffffffda RBX: 00007f52901c6090 RCX: 00007f528ff8ebe9 [ 198.892847][ T7973] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000004 [ 198.892863][ T7973] RBP: 00007f5290011e19 R08: 0000000000000000 R09: 0000000000000000 [ 198.892879][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.892894][ T7973] R13: 00007f52901c6128 R14: 00007f52901c6090 R15: 00007ffee8c94578 [ 198.892934][ T7973] [ 198.911030][ T7968] BTRFS warning (device loop5): failed to trim 1 device(s), last error -512 [ 199.011194][ T7973] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 199.111682][ T7924] BTRFS warning (device loop5): failed to trim 1 device(s), last error -512 [ 199.333445][ T7982] loop3: detected capacity change from 0 to 64 [ 199.471780][ T5869] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.557289][ T30] audit: type=1800 audit(1756586056.967:23): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.653" name="file1" dev="loop3" ino=23 res=0 errno=0 [ 200.212038][ T43] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 200.221278][ T7997] loop5: detected capacity change from 0 to 8 [ 200.222250][ T5871] Bluetooth: hci0: command tx timeout [ 200.236113][ T43] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 200.268404][ T43] asix 5-1:0.0: probe with driver asix failed with error -71 [ 200.317396][ T43] usb 5-1: USB disconnect, device number 6 [ 200.790737][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 200.984310][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.022993][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.047612][ T24] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 201.055825][ T30] audit: type=1326 audit(1756586058.467:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.4.667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f12d8ebe9 code=0x0 [ 201.073929][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.113773][ T24] usb 6-1: config 0 descriptor?? [ 201.291636][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 201.344565][ T8020] netlink: 'syz.2.669': attribute type 10 has an invalid length. [ 201.358451][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 201.505705][ T8022] Bluetooth: MGMT ver 1.23 [ 201.511610][ T8022] Bluetooth: hci0: invalid length 4, exp 2 for type 11 [ 201.549377][ T24] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 201.564849][ T24] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 201.592041][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0007/input/input11 [ 201.651789][ T24] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 201.806976][ T5952] usb 6-1: USB disconnect, device number 8 [ 201.926000][ T8025] fido_id[8025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 202.270754][ T5871] Bluetooth: hci0: command tx timeout [ 202.413098][ T8020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.436877][ T8020] team0: Port device bond0 added [ 202.494917][ T8028] ip6tnl1: entered promiscuous mode [ 203.242675][ T7857] chnl_net:caif_netlink_parms(): no params data found [ 203.374936][ T8054] loop4: detected capacity change from 0 to 64 [ 203.490659][ T5952] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 203.645688][ T30] audit: type=1804 audit(1756586061.037:25): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.683" name=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 [ 203.672767][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.766334][ T7857] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.828651][ T7857] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.842047][ T7857] bridge_slave_0: entered allmulticast mode [ 203.849976][ T7857] bridge_slave_0: entered promiscuous mode [ 203.922494][ T7857] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.929646][ T7857] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.976187][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.980848][ T7857] bridge_slave_1: entered allmulticast mode [ 204.013059][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.013267][ T7857] bridge_slave_1: entered promiscuous mode [ 204.043261][ T5952] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.058683][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.096139][ T5952] usb 2-1: config 0 descriptor?? [ 204.189750][ T8049] loop2: detected capacity change from 0 to 32768 [ 204.213257][ T8049] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.681 (8049) [ 204.219088][ T7857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.281994][ T8049] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 204.294459][ T7857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.314070][ T8049] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 204.370924][ T974] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 204.431280][ T7857] team0: Port device team_slave_0 added [ 204.449219][ T7857] team0: Port device team_slave_1 added [ 204.452526][ T8049] BTRFS info (device loop2): enabling ssd optimizations [ 204.457775][ T8081] loop3: detected capacity change from 0 to 64 [ 204.484448][ T8049] BTRFS info (device loop2): enabling free space tree [ 204.491424][ T8049] BTRFS info (device loop2): use zstd compression, level 3 [ 204.530388][ T8081] minix_free_block (loop3:2): bit already cleared [ 204.550132][ T974] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.558910][ T8081] minix_free_block (loop3:3): bit already cleared [ 204.563571][ T30] audit: type=1800 audit(1756586061.977:26): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.681" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 204.592730][ T974] usb 5-1: config 0 has no interface number 0 [ 204.599438][ T974] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 204.611450][ T8081] minix_free_block (loop3:4): bit already cleared [ 204.612631][ T5952] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 204.646166][ T974] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 204.680479][ T974] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.695379][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.806658][ T7857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.814465][ T974] usb 5-1: config 0 descriptor?? [ 204.815284][ T8066] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 204.831316][ T7857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.864759][ T5881] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 204.879802][ T7857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.905892][ T858] usb 2-1: USB disconnect, device number 7 [ 204.941704][ T7857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.972605][ T974] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 204.991589][ T7857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.067771][ T8086] fido_id[8086]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 205.102543][ T7857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.386221][ T8093] overlayfs: failed to verify upper (107/file0, ino=576, err=-116) [ 205.415225][ T8093] overlayfs: failed to verify index dir 'upper' xattr [ 205.442284][ T8093] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 205.482025][ T974] usb 5-1: USB disconnect, device number 7 [ 205.545755][ T7857] hsr_slave_0: entered promiscuous mode [ 205.614272][ T8096] loop2: detected capacity change from 0 to 4096 [ 205.618610][ T7857] hsr_slave_1: entered promiscuous mode [ 205.656836][ T7857] debugfs: 'hsr0' already exists in 'hsr' [ 205.681281][ T7857] Cannot create hsr debugfs directory [ 205.704715][ T8096] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 205.933267][ T5881] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 207.483105][ T7857] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 207.549935][ T7857] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 207.593833][ T8121] syz.4.701: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 207.643158][ T7857] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 207.685111][ T8121] CPU: 0 UID: 0 PID: 8121 Comm: syz.4.701 Not tainted syzkaller #0 PREEMPT(full) [ 207.685146][ T8121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.685162][ T8121] Call Trace: [ 207.685180][ T8121] [ 207.685190][ T8121] dump_stack_lvl+0x189/0x250 [ 207.685231][ T8121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.685261][ T8121] ? __pfx__printk+0x10/0x10 [ 207.685296][ T8121] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 207.685326][ T8121] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 207.685357][ T8121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.685385][ T8121] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 207.685417][ T8121] warn_alloc+0x214/0x310 [ 207.685463][ T8121] ? __pfx_warn_alloc+0x10/0x10 [ 207.685509][ T8121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.685537][ T8121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.685565][ T8121] ? __get_vm_area_node+0x28f/0x300 [ 207.685599][ T8121] ? vb2_vmalloc_alloc+0xef/0x340 [ 207.685630][ T8121] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 207.685702][ T8121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 207.685744][ T8121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.685772][ T8121] ? __kasan_kmalloc+0x93/0xb0 [ 207.685810][ T8121] vmalloc_user_noprof+0xad/0xf0 [ 207.685846][ T8121] ? vb2_vmalloc_alloc+0xef/0x340 [ 207.685873][ T8121] vb2_vmalloc_alloc+0xef/0x340 [ 207.685897][ T8121] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 207.685923][ T8121] __vb2_queue_alloc+0x9c2/0x15a0 [ 207.685993][ T8121] vb2_core_reqbufs+0xc31/0x1420 [ 207.686029][ T8121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.686079][ T8121] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 207.686115][ T8121] ? vb2_verify_memory_type+0x1fc/0x570 [ 207.686156][ T8121] ? vb2_reqbufs+0x3a9/0x630 [ 207.686207][ T8121] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 207.686242][ T8121] __video_do_ioctl+0xc9b/0xdb0 [ 207.686279][ T8121] ? __pfx___video_do_ioctl+0x10/0x10 [ 207.686322][ T8121] video_usercopy+0x871/0x14f0 [ 207.686360][ T8121] ? __pfx___video_do_ioctl+0x10/0x10 [ 207.686386][ T8121] ? __pfx_video_usercopy+0x10/0x10 [ 207.686429][ T8121] ? __fget_files+0x2a/0x420 [ 207.686470][ T8121] ? __fget_files+0x2a/0x420 [ 207.686506][ T8121] ? __fget_files+0x3a0/0x420 [ 207.686548][ T8121] v4l2_ioctl+0x18d/0x1e0 [ 207.686573][ T8121] ? __pfx_v4l2_ioctl+0x10/0x10 [ 207.686596][ T8121] __se_sys_ioctl+0xfc/0x170 [ 207.686630][ T8121] do_syscall_64+0xfa/0x3b0 [ 207.686652][ T8121] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.686688][ T8121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.686711][ T8121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.686739][ T8121] ? exc_page_fault+0x9f/0xf0 [ 207.686777][ T8121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.686800][ T8121] RIP: 0033:0x7f9f12d8ebe9 [ 207.686821][ T8121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.686842][ T8121] RSP: 002b:00007f9f13cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.686868][ T8121] RAX: ffffffffffffffda RBX: 00007f9f12fc6090 RCX: 00007f9f12d8ebe9 [ 207.686886][ T8121] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000003 [ 207.686903][ T8121] RBP: 00007f9f12e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 207.686919][ T8121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.686934][ T8121] R13: 00007f9f12fc6128 R14: 00007f9f12fc6090 R15: 00007ffcddbc5238 [ 207.686972][ T8121] [ 207.686982][ T8121] Mem-Info: [ 208.046597][ T7857] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 208.066861][ T8121] active_anon:6610 inactive_anon:0 isolated_anon:0 [ 208.066861][ T8121] active_file:3705 inactive_file:40306 isolated_file:0 [ 208.066861][ T8121] unevictable:768 dirty:499 writeback:50 [ 208.066861][ T8121] slab_reclaimable:11296 slab_unreclaimable:100283 [ 208.066861][ T8121] mapped:36436 shmem:1360 pagetables:1239 [ 208.066861][ T8121] sec_pagetables:0 bounce:0 [ 208.066861][ T8121] kernel_misc_reclaimable:0 [ 208.066861][ T8121] free:1308517 free_pcp:12879 free_cma:0 [ 208.136500][ T8121] Node 0 active_anon:25572kB inactive_anon:0kB active_file:14820kB inactive_file:161024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145700kB dirty:2000kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11932kB pagetables:4836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 208.182727][ T8121] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 208.217907][ T8121] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.360369][ T8121] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 208.400917][ T8121] Node 0 DMA32 free:1325964kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24276kB inactive_anon:0kB active_file:14820kB inactive_file:159444kB unevictable:1536kB writepending:1104kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:36964kB local_pcp:18468kB free_cma:0kB [ 208.526498][ T8121] lowmem_reserve[]: 0 0 1 1 1 [ 208.552997][ T8121] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 208.650606][ T8121] lowmem_reserve[]: 0 0 0 0 0 [ 208.655386][ T8121] Node 1 Normal free:3892480kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16736kB local_pcp:9440kB free_cma:0kB [ 208.770638][ T8121] lowmem_reserve[]: 0 0 0 0 0 [ 208.775442][ T8121] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 208.855663][ T8121] Node 0 DMA32: 2*4kB (UE) 2*8kB (UE) 255*16kB (UME) 324*32kB (UME) 229*64kB (UME) 104*128kB (UME) 58*256kB (UME) 47*512kB (UME) 38*1024kB (UME) 17*2048kB (UME) 284*4096kB (M) = 1318344kB [ 208.965976][ T8121] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 209.039538][ T8121] Node 1 Normal: 200*4kB (UE) 50*8kB (UME) 31*16kB (UME) 103*32kB (UME) 28*64kB (UME) 7*128kB (UME) 5*256kB (UME) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3892480kB [ 209.108021][ T8121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.139025][ T8121] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 209.170703][ T8121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.200755][ T8121] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 209.230734][ T8121] 53492 total pagecache pages [ 209.235501][ T8121] 0 pages in swap cache [ 209.239647][ T8121] Free swap = 124996kB [ 209.264154][ T8121] Total swap = 124996kB [ 209.274512][ T8121] 2097051 pages RAM [ 209.278321][ T8121] 0 pages HighMem/MovableOnly [ 209.297389][ T8132] loop3: detected capacity change from 0 to 32768 [ 209.310763][ T8121] 425662 pages reserved [ 209.315022][ T8121] 0 pages cma reserved [ 209.809399][ T8146] loop1: detected capacity change from 0 to 131072 [ 209.824343][ T8146] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 209.834409][ T8146] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 209.890969][ T8146] F2FS-fs (loop1): invalid crc value [ 209.931247][ T7857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.007733][ T8146] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 210.037563][ T8146] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 210.044648][ T8146] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 210.095479][ T7857] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.177080][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.184270][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.300152][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.308751][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.623792][ T8132] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 210.623826][ T8132] allowing incompatible features above 0.0: (unknown version) [ 210.623841][ T8132] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 210.861202][ T8132] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 210.901995][ T8132] bcachefs (loop3): initializing new filesystem [ 210.978004][ T8132] bcachefs (loop3): error reallocating journal fifo (32768 open entries) [ 210.998223][ T8183] netlink: 20 bytes leftover after parsing attributes in process `syz.5.720'. [ 211.071054][ T8132] bcachefs (loop3): bch2_fs_initialize(): error ENOMEM_journal_pin_fifo [ 211.117643][ T8132] bcachefs (loop3): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo [ 211.167060][ T8132] bcachefs (loop3): shutting down [ 211.274186][ T8132] bcachefs (loop3): shutdown complete [ 211.621326][ T8199] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.726'. [ 211.660000][ T7857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.953336][ T8204] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 211.958183][ T5952] IPVS: starting estimator thread 0... [ 212.076764][ T8209] IPVS: using max 24 ests per chain, 57600 per kthread [ 212.458654][ T8220] loop2: detected capacity change from 0 to 2048 [ 212.557861][ T8220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.693860][ T8220] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.715799][ T7857] veth0_vlan: entered promiscuous mode [ 212.779038][ T7857] veth1_vlan: entered promiscuous mode [ 212.920692][ T5945] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 212.962188][ T7857] veth0_macvtap: entered promiscuous mode [ 212.983082][ T8195] loop5: detected capacity change from 0 to 32768 [ 213.009306][ T7857] veth1_macvtap: entered promiscuous mode [ 213.074455][ T7857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.126228][ T7857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.140808][ T5945] usb 2-1: Using ep0 maxpacket: 8 [ 213.152584][ T5945] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 213.153105][ T8195] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 213.170683][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.186616][ T5945] usb 2-1: Product: syz [ 213.191227][ T5945] usb 2-1: Manufacturer: syz [ 213.195819][ T5945] usb 2-1: SerialNumber: syz [ 213.204042][ T5945] usb 2-1: config 0 descriptor?? [ 213.217286][ T5945] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 213.235225][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.259207][ T5881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.327259][ T63] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.348272][ T63] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.381759][ T8195] XFS (loop5): Ending clean mount [ 213.388304][ T63] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.448153][ T8195] XFS (loop5): Quotacheck needed: Please wait. [ 213.664211][ T8195] XFS (loop5): Quotacheck: Done. [ 213.749754][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.791221][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.905797][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.962041][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.025606][ T5869] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 214.077733][ T5945] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 214.109381][ T5945] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 214.171325][ T5945] usb 2-1: USB disconnect, device number 8 [ 214.247396][ T8132] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo [ 214.611973][ T43] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 214.761338][ T5944] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 214.790986][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 214.850626][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 214.881340][ T43] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 214.888931][ T43] usb 7-1: can't read configurations, error -71 [ 214.940743][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 214.958187][ T5944] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 214.976040][ T5944] usb 5-1: config 0 has no interface number 0 [ 214.982948][ T5944] usb 5-1: config 0 interface 85 has no altsetting 0 [ 215.004023][ T5944] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 215.036787][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.062866][ T5944] usb 5-1: Product: syz [ 215.071920][ T5944] usb 5-1: Manufacturer: syz [ 215.076517][ T5944] usb 5-1: SerialNumber: syz [ 215.111622][ T5944] usb 5-1: config 0 descriptor?? [ 215.130968][ T974] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 215.143498][ T5944] appletouch 5-1:0.85: Could not find int-in endpoint [ 215.161601][ T5944] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 215.181495][ T5944] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 215.284262][ T8252] loop2: detected capacity change from 0 to 32768 [ 215.308792][ T8252] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.739 (8252) [ 215.313128][ T974] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.375877][ T974] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.377641][ T8252] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.407136][ T8252] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 215.449475][ T974] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.478544][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.496940][ T974] usb 2-1: Product: syz [ 215.513621][ T974] usb 2-1: Manufacturer: syz [ 215.529710][ T974] usb 2-1: SerialNumber: syz [ 215.558667][ T8252] BTRFS info (device loop2): enabling ssd optimizations [ 215.608384][ T8252] BTRFS info (device loop2): turning on async discard [ 215.670790][ T8252] BTRFS info (device loop2): enabling free space tree [ 215.746515][ T8256] loop5: detected capacity change from 0 to 32768 [ 215.803737][ T8256] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.738 (8256) [ 215.856341][ T974] usb 2-1: 0:2 : does not exist [ 215.906043][ T974] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 215.927273][ T8256] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 215.993599][ T8256] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 216.021935][ T974] usb 2-1: USB disconnect, device number 9 [ 216.206363][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.314082][ T5881] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 216.349943][ T8256] BTRFS info (device loop5): enabling ssd optimizations [ 216.413420][ T8256] BTRFS info (device loop5): enabling free space tree [ 216.495184][ T974] usb 5-1: USB disconnect, device number 8 [ 216.770582][ T5945] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 217.030755][ T5945] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.080732][ T5945] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.144245][ T5945] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 217.213026][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.249800][ T5945] usb 7-1: config 0 descriptor?? [ 217.388453][ T8324] loop3: detected capacity change from 0 to 128 [ 217.499508][ T8324] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.621546][ T8324] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.740708][ T5945] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 217.759999][ T5945] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 217.849385][ T5945] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0009/input/input12 [ 217.959017][ T5875] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.024207][ T5945] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 218.161037][ T5945] usb 7-1: USB disconnect, device number 4 [ 218.182956][ T8336] loop1: detected capacity change from 0 to 256 [ 218.273998][ T5869] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 218.511112][ T8342] loop2: detected capacity change from 0 to 64 [ 218.649184][ T30] audit: type=1800 audit(1756586076.057:27): pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.762" name="file1" dev="loop2" ino=22 res=0 errno=0 [ 218.885733][ T8345] fido_id[8345]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 219.015791][ T8354] veth0: entered promiscuous mode [ 219.050694][ T974] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 219.120134][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 219.285159][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 219.296941][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 219.353742][ T974] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 219.386527][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.408848][ T974] usb 5-1: Product: syz [ 219.430393][ T974] usb 5-1: Manufacturer: syz [ 219.445454][ T8359] loop5: detected capacity change from 0 to 4096 [ 219.475678][ T974] usb 5-1: SerialNumber: syz [ 219.505448][ T974] usb 5-1: config 0 descriptor?? [ 219.515224][ T974] hub 5-1:0.0: bad descriptor, ignoring hub [ 219.524883][ T974] hub 5-1:0.0: probe with driver hub failed with error -5 [ 219.599467][ T974] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 220.099580][ T5945] usb 5-1: USB disconnect, device number 9 [ 220.204847][ T5944] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 220.247278][ T5944] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 220.310831][ T8339] loop3: detected capacity change from 0 to 40427 [ 220.343014][ T8339] F2FS-fs (loop3): build fault injection rate: 25 [ 220.361488][ T8339] F2FS-fs (loop3): build fault injection type: 0x7698c [ 220.403317][ T8339] F2FS-fs (loop3): invalid crc value [ 220.454600][ T8339] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970 [ 220.538570][ T8339] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 220.616347][ T8377] fido_id[8377]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 220.650993][ T30] audit: type=1326 audit(1756586078.057:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.1.778" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa971b8ebe9 code=0x0 [ 220.873103][ T8339] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 220.876324][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.780'. [ 220.913852][ T8339] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 220.985828][ T8367] loop2: detected capacity change from 0 to 32768 [ 221.003830][ T8339] F2FS-fs (loop3): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 221.032237][ T8367] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.771 (8367) [ 221.072820][ T8339] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_new_data_folio+0xb8/0x870 [ 221.101042][ T8367] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.146513][ T8367] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 221.188553][ T5875] syz-executor: attempt to access beyond end of device [ 221.188553][ T5875] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 221.217867][ T5875] CPU: 1 UID: 0 PID: 5875 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 221.217899][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.217914][ T5875] Call Trace: [ 221.217924][ T5875] [ 221.217934][ T5875] dump_stack_lvl+0x189/0x250 [ 221.217974][ T5875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.218004][ T5875] ? __pfx_queue_work_on+0x10/0x10 [ 221.218029][ T5875] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 221.218064][ T5875] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 221.218116][ T5875] f2fs_handle_critical_error+0x37c/0x540 [ 221.218174][ T5875] f2fs_write_end_io+0x886/0xb60 [ 221.218225][ T5875] __submit_merged_bio+0x27a/0x6a0 [ 221.218270][ T5875] __submit_merged_write_cond+0x255/0x530 [ 221.218317][ T5875] f2fs_write_data_pages+0x261d/0x3000 [ 221.218356][ T5875] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.218432][ T5875] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 221.218469][ T5875] ? is_bpf_text_address+0x26/0x2b0 [ 221.218522][ T5875] ? arch_stack_walk+0xfc/0x150 [ 221.218599][ T5875] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.218660][ T5875] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.218687][ T5875] ? __lock_acquire+0xab9/0xd20 [ 221.218735][ T5875] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.218763][ T5875] ? do_raw_spin_lock+0x121/0x290 [ 221.218801][ T5875] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.218834][ T5875] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.218861][ T5875] ? do_raw_spin_unlock+0x122/0x240 [ 221.218893][ T5875] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 221.218933][ T5875] do_writepages+0x32e/0x550 [ 221.218975][ T5875] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.219009][ T5875] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.219035][ T5875] ? do_raw_spin_unlock+0x122/0x240 [ 221.219073][ T5875] filemap_fdatawrite+0x199/0x240 [ 221.219109][ T5875] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 221.219211][ T5875] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.219246][ T5875] ? do_raw_spin_unlock+0x122/0x240 [ 221.219284][ T5875] f2fs_sync_dirty_inodes+0x31f/0x830 [ 221.219332][ T5875] f2fs_write_checkpoint+0x95a/0x1df0 [ 221.219394][ T5875] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 221.219489][ T5875] ? kill_f2fs_super+0x298/0x6c0 [ 221.219523][ T5875] kill_f2fs_super+0x2c3/0x6c0 [ 221.219558][ T5875] ? __pfx_kill_f2fs_super+0x10/0x10 [ 221.219581][ T5875] ? radix_tree_delete_item+0x2b6/0x400 [ 221.219627][ T5875] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.219654][ T5875] ? shrinker_free+0x2ce/0x3e0 [ 221.219686][ T5875] deactivate_locked_super+0xbc/0x130 [ 221.219720][ T5875] cleanup_mnt+0x425/0x4c0 [ 221.219745][ T5875] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.219770][ T5875] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.219809][ T5875] task_work_run+0x1d4/0x260 [ 221.219848][ T5875] ? __pfx_task_work_run+0x10/0x10 [ 221.219878][ T5875] ? __x64_sys_umount+0x122/0x160 [ 221.219919][ T5875] ? exit_to_user_mode_loop+0x40/0x110 [ 221.219959][ T5875] exit_to_user_mode_loop+0xec/0x110 [ 221.219995][ T5875] do_syscall_64+0x2bd/0x3b0 [ 221.220016][ T5875] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.220051][ T5875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.220073][ T5875] ? srso_alias_return_thunk+0x5/0xfbef5 [ 221.220099][ T5875] ? exc_page_fault+0x9f/0xf0 [ 221.220136][ T5875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.220159][ T5875] RIP: 0033:0x7feba498ff17 [ 221.220188][ T5875] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 221.220208][ T5875] RSP: 002b:00007ffe93ca7f78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 221.220233][ T5875] RAX: 0000000000000000 RBX: 00007feba4a11c05 RCX: 00007feba498ff17 [ 221.220250][ T5875] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe93ca8030 [ 221.220266][ T5875] RBP: 00007ffe93ca8030 R08: 0000000000000000 R09: 0000000000000000 [ 221.220282][ T5875] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe93ca90c0 [ 221.220299][ T5875] R13: 00007feba4a11c05 R14: 0000000000035f8b R15: 00007ffe93ca9100 [ 221.220341][ T5875] [ 221.295222][ T5875] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 221.683375][ T8367] BTRFS info (device loop2): rebuilding free space tree [ 221.788379][ T8367] BTRFS info (device loop2): allowing degraded mounts [ 221.810691][ T8420] loop1: detected capacity change from 0 to 16 [ 221.815740][ T8367] BTRFS info (device loop2): enabling ssd optimizations [ 221.834812][ T8367] BTRFS info (device loop2): enabling free space tree [ 221.853115][ T8367] BTRFS info (device loop2): force clearing of disk cache [ 221.860319][ T8367] BTRFS info (device loop2): max_inline set to 0 [ 221.873450][ T8420] erofs (device loop1): mounted with root inode @ nid 36. [ 221.931679][ T8420] erofs (device loop1): readahead error at folio 4 @ nid 36 [ 221.963936][ T8420] syz.1.786: attempt to access beyond end of device [ 221.963936][ T8420] loop1: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 221.993400][ T8420] syz.1.786: attempt to access beyond end of device [ 221.993400][ T8420] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 222.076552][ T8423] erofs (device loop1): invalid logical cluster 0 at nid 36 [ 222.144790][ T8423] erofs (device loop1): readahead error at folio 0 @ nid 36 [ 222.185137][ T8420] erofs (device loop1): invalid logical cluster 0 at nid 36 [ 222.258081][ T8420] erofs (device loop1): read error -117 @ 0 of nid 36 [ 222.263517][ T8423] erofs (device loop1): readahead error at folio 6 @ nid 36 [ 222.280256][ T8426] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 222.306504][ T8423] syz.1.786: attempt to access beyond end of device [ 222.306504][ T8423] loop1: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 222.343901][ T8420] erofs (device loop1): failed to readdir of logical block 0 of nid 36 [ 222.372135][ T8423] syz.1.786: attempt to access beyond end of device [ 222.372135][ T8423] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 222.430869][ T8423] erofs (device loop1): invalid logical cluster 0 at nid 36 [ 222.438194][ T8423] erofs (device loop1): read error -117 @ 0 of nid 36 [ 222.456220][ T5881] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.501419][ T8423] erofs (device loop1): failed to readdir of logical block 0 of nid 36 [ 222.597046][ T8434] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 223.201401][ T8446] loop1: detected capacity change from 0 to 2048 [ 223.257488][ T8446] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 223.317831][ T8446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.763987][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 223.951069][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 223.977692][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.043093][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.080600][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 224.104164][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.176428][ T9] usb 5-1: config 0 descriptor?? [ 224.201935][ T9] hub 5-1:0.0: USB hub found [ 224.262226][ T8465] loop6: detected capacity change from 0 to 4096 [ 224.406413][ T8465] ntfs3(loop6): ino=5, "/" mi_enum_attr [ 224.416341][ T9] hub 5-1:0.0: 1 port detected [ 224.928718][ T8459] loop2: detected capacity change from 0 to 32768 [ 224.973784][ T8459] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.804 (8459) [ 225.024795][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.259408][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.504802][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.509074][ T9] hub 5-1:0.0: activate --> -90 [ 225.525800][ T974] usb 5-1-port1: config error [ 225.535951][ T8459] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.579136][ T8459] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 225.682591][ T8459] BTRFS info (device loop2): rebuilding free space tree [ 225.731002][ T5945] usb 5-1: USB disconnect, device number 10 [ 225.783002][ T8459] BTRFS info (device loop2): allowing degraded mounts [ 225.798894][ T8459] BTRFS info (device loop2): enabling ssd optimizations [ 225.851173][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.861492][ T8459] BTRFS info (device loop2): enabling free space tree [ 225.861518][ T8459] BTRFS info (device loop2): force clearing of disk cache [ 225.861540][ T8459] BTRFS info (device loop2): use zstd compression, level 3 [ 225.861563][ T8459] BTRFS info (device loop2): max_inline set to 0 [ 225.995350][ T30] audit: type=1800 audit(1756586083.407:29): pid=8459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.804" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 226.178542][ T8499] loop6: detected capacity change from 0 to 128 [ 226.356888][ T5881] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.380817][ T36] bridge_slave_1: left allmulticast mode [ 226.392550][ T36] bridge_slave_1: left promiscuous mode [ 226.403078][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.411092][ T8499] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.492933][ T36] bridge_slave_0: left allmulticast mode [ 226.494976][ T8499] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.546624][ T36] bridge_slave_0: left promiscuous mode [ 226.553344][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.796815][ T8511] netlink: 48 bytes leftover after parsing attributes in process `syz.2.818'. [ 226.985207][ T8499] fscrypt (loop6, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 227.061493][ T8499] fscrypt (loop6, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 227.296831][ T7857] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.347018][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.356719][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.364463][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.374735][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.382536][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.778576][ T8496] loop3: detected capacity change from 0 to 32768 [ 227.938112][ T8496] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 228.107877][ T8496] XFS (loop3): Ending clean mount [ 228.131939][ T8496] XFS (loop3): Quotacheck needed: Please wait. [ 228.254951][ T8496] XFS (loop3): Quotacheck: Done. [ 228.332932][ T30] audit: type=1800 audit(1756586085.747:30): pid=8496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.815" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 228.627491][ T36] bond1 (unregistering): (slave geneve2): Releasing active interface [ 228.686754][ T5875] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 229.170370][ T8553] input: syz1 as /devices/virtual/input/input13 [ 229.309323][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 229.467188][ T8543] loop1: detected capacity change from 0 to 32768 [ 229.471732][ T5879] Bluetooth: hci1: command tx timeout [ 229.527478][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 229.535370][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 229.549617][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 229.556004][ T8561] ceph: No mds server is up or the cluster is laggy [ 229.563132][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 229.886616][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.945915][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.977743][ T36] bond0 (unregistering): Released all slaves [ 230.324065][ T36] bond1 (unregistering): Released all slaves [ 230.655158][ T8586] team0: entered promiscuous mode [ 230.660287][ T8586] team_slave_0: entered promiscuous mode [ 230.667114][ T8586] team_slave_1: entered promiscuous mode [ 230.680324][ T8586] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 230.698805][ T8586] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 230.834167][ T8596] netlink: 35 bytes leftover after parsing attributes in process `syz.2.845'. [ 230.906429][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 231.550757][ T5945] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 231.550937][ T5879] Bluetooth: hci1: command tx timeout [ 231.731990][ T5945] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 231.764264][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.790004][ T8618] loop6: detected capacity change from 0 to 2048 [ 231.850882][ T5945] usb 5-1: Product: syz [ 231.879103][ T5945] usb 5-1: Manufacturer: syz [ 231.906858][ T5945] usb 5-1: SerialNumber: syz [ 231.927134][ T5886] loop6: p1 < > p3 [ 231.953041][ T5945] usb 5-1: config 0 descriptor?? [ 231.979831][ T5886] loop6: p3 size 134217728 extends beyond EOD, truncated [ 232.044947][ T8618] loop6: p1 < > p3 [ 232.073802][ T8618] loop6: p3 size 134217728 extends beyond EOD, truncated [ 232.158130][ T36] hsr_slave_0: left promiscuous mode [ 232.181911][ T36] hsr_slave_1: left promiscuous mode [ 232.213977][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.246911][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.382727][ T5945] airspy 5-1:0.0: Board ID: 00 [ 232.397722][ T5945] airspy 5-1:0.0: Firmware version: [ 232.406219][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.449371][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.568004][ T36] veth1_macvtap: left promiscuous mode [ 232.581853][ T36] veth0_macvtap: left promiscuous mode [ 232.597746][ T36] veth1_vlan: left promiscuous mode [ 232.607785][ T36] veth0_vlan: left promiscuous mode [ 232.931400][ T8631] loop3: detected capacity change from 0 to 32768 [ 232.948155][ T8631] btrfs: Deprecated parameter 'usebackuproot' [ 232.958981][ T8631] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 232.988915][ T8631] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.857 (8631) [ 233.019178][ T8631] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.042507][ T8631] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 233.175575][ T2986] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 233.210062][ T5945] airspy 5-1:0.0: usb_control_msg() failed -71 request 0f [ 233.222817][ T5945] airspy 5-1:0.0: Registered as swradio24 [ 233.231802][ T5945] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 233.241853][ T8631] BTRFS error (device loop3): failed to load root extent [ 233.249605][ T5945] usb 5-1: USB disconnect, device number 11 [ 233.272218][ T8631] BTRFS warning (device loop3): try to load backup roots slot 1 [ 233.286758][ T2986] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 233.301352][ T8631] BTRFS warning (device loop3): couldn't read tree root [ 233.308318][ T8631] BTRFS warning (device loop3): try to load backup roots slot 2 [ 233.334455][ T2986] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 233.353266][ T8631] BTRFS warning (device loop3): couldn't read tree root [ 233.363474][ T8631] BTRFS warning (device loop3): try to load backup roots slot 3 [ 233.415814][ T8631] BTRFS info (device loop3): rebuilding free space tree [ 233.459329][ T8631] BTRFS info (device loop3): checking UUID tree [ 233.480301][ T8631] BTRFS info (device loop3): setting nodatasum [ 233.498858][ T8631] BTRFS info (device loop3): setting nodatacow [ 233.508997][ T8631] BTRFS info (device loop3): enabling ssd optimizations [ 233.529068][ T8631] BTRFS info (device loop3): turning off barriers [ 233.550682][ T8631] BTRFS info (device loop3): turning on sync discard [ 233.578819][ T8631] BTRFS info (device loop3): enabling free space tree [ 233.607010][ T8631] BTRFS info (device loop3): force clearing of disk cache [ 233.630685][ T5879] Bluetooth: hci1: command tx timeout [ 233.640316][ T8631] BTRFS info (device loop3): enabling auto defrag [ 233.651787][ T8633] loop1: detected capacity change from 0 to 32768 [ 233.656933][ T8631] BTRFS info (device loop3): doing ref verification [ 233.667800][ T8631] BTRFS info (device loop3): trying to use backup root at mount time [ 233.713239][ T8631] BTRFS info (device loop3): max_inline set to 0 [ 233.735846][ T8633] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 233.877745][ T8633] XFS (loop1): Ending clean mount [ 234.248895][ T5875] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.281293][ T5877] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 234.655129][ T36] team0 (unregistering): Port device team_slave_1 removed [ 235.097528][ T36] team0 (unregistering): Port device team_slave_0 removed [ 235.620805][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 235.719785][ T5879] Bluetooth: hci1: command tx timeout [ 235.802537][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.813681][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.830841][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 235.847770][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 235.861772][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 235.871213][ T9] usb 5-1: SerialNumber: syz [ 236.085358][ T8667] batadv_slave_1: entered promiscuous mode [ 236.113387][ T8671] batadv_slave_1: left promiscuous mode [ 236.124286][ T9] usb 5-1: 0:2 : does not exist [ 236.129221][ T9] usb 5-1: unit 5 not found! [ 236.214544][ T9] usb 5-1: USB disconnect, device number 12 [ 236.334232][ T7420] udevd[7420]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.383689][ T8692] loop3: detected capacity change from 0 to 512 [ 236.440901][ T8522] chnl_net:caif_netlink_parms(): no params data found [ 236.495315][ T8692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 236.550800][ T8692] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.834635][ T7407] udevd[7407]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 236.850917][ T5886] udevd[5886]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 237.026141][ T8694] loop1: detected capacity change from 0 to 32768 [ 237.036069][ T8694] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.872 (8694) [ 237.069333][ T5875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 237.085784][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.133286][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.140476][ T8522] bridge_slave_0: entered allmulticast mode [ 237.187807][ T8522] bridge_slave_0: entered promiscuous mode [ 237.217455][ T8694] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 237.250775][ T8694] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 237.296449][ T8522] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.325597][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.351469][ T8522] bridge_slave_1: entered allmulticast mode [ 237.429312][ T8522] bridge_slave_1: entered promiscuous mode [ 237.514510][ T8694] BTRFS info (device loop1): setting nodatasum [ 237.559850][ T8694] BTRFS info (device loop1): enabling ssd optimizations [ 237.567221][ T8694] BTRFS info (device loop1): disabling tree log [ 237.592627][ T8694] BTRFS info (device loop1): enabling free space tree [ 237.606081][ T8694] BTRFS info (device loop1): enabling auto defrag [ 237.742583][ T8522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.857836][ T5877] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 237.954730][ T8522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.177976][ T8757] loop2: detected capacity change from 0 to 512 [ 238.248099][ T8755] loop1: detected capacity change from 0 to 2048 [ 238.282611][ T8757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.336548][ T8757] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.367226][ T8755] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 238.411344][ T8522] team0: Port device team_slave_0 added [ 238.424401][ T8763] netlink: 'syz.4.886': attribute type 1 has an invalid length. [ 238.433542][ T8755] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 238.457144][ T8755] UDF-fs: Scanning with blocksize 512 failed [ 238.517853][ T8755] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.662994][ T8763] bond1: entered promiscuous mode [ 238.692392][ T8763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.808203][ T8749] loop3: detected capacity change from 0 to 32768 [ 238.827301][ T8522] team0: Port device team_slave_1 added [ 238.827957][ T5881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.848287][ T8749] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.881 (8749) [ 238.915571][ T8749] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 238.987257][ T8749] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 239.219864][ T8749] BTRFS info (device loop3): enabling ssd optimizations [ 239.255571][ T8749] BTRFS info (device loop3): enabling free space tree [ 239.258896][ T8766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.282974][ T8766] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 239.313063][ T8789] netlink: 'syz.1.890': attribute type 4 has an invalid length. [ 239.322392][ T8766] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 239.347490][ T8789] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 239.376945][ T30] audit: type=1800 audit(1756586096.787:31): pid=8749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.881" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 239.388576][ T8789] netlink: 3577 bytes leftover after parsing attributes in process `syz.1.890'. [ 239.399825][ T8766] bond1: (slave vxcan3): making interface the new active one [ 239.456595][ T8766] vxcan3: entered promiscuous mode [ 239.489010][ T30] audit: type=1800 audit(1756586096.837:32): pid=8749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.881" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 239.512322][ T8766] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 239.554808][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.579315][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.688403][ T8522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.701555][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.708504][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.804619][ T5875] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 239.822859][ T8522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.877534][ T8792] bond0: option all_slaves_active: invalid value (20) [ 239.890359][ T8767] loop6: detected capacity change from 0 to 32768 [ 239.911759][ T8767] XFS: noikeep mount option is deprecated. [ 239.918472][ T30] audit: type=1326 audit(1756586097.317:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa971b8ebe9 code=0x7ffc0000 [ 240.040151][ T30] audit: type=1326 audit(1756586097.317:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa971b8ebe9 code=0x7ffc0000 [ 240.071309][ T8767] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 240.211210][ T30] audit: type=1326 audit(1756586097.317:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fa971b8ebe9 code=0x7ffc0000 [ 240.233503][ T30] audit: type=1326 audit(1756586097.317:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa971b8ebe9 code=0x7ffc0000 [ 240.297600][ T30] audit: type=1326 audit(1756586097.407:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa971b8ebe9 code=0x7ffc0000 [ 240.630898][ T8767] XFS (loop6): Ending clean mount [ 240.728555][ T8767] XFS (loop6): Quotacheck needed: Please wait. [ 240.745717][ T8522] hsr_slave_0: entered promiscuous mode [ 240.781602][ T8819] netlink: 'syz.2.900': attribute type 1 has an invalid length. [ 240.931615][ T8522] hsr_slave_1: entered promiscuous mode [ 240.937952][ T8522] debugfs: 'hsr0' already exists in 'hsr' [ 241.049794][ T8522] Cannot create hsr debugfs directory [ 241.170081][ T8767] XFS (loop6): Quotacheck: Done. [ 241.211684][ T974] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 241.403399][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 241.425056][ T974] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 241.439403][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.447715][ T974] usb 5-1: Product: syz [ 241.451983][ T974] usb 5-1: Manufacturer: syz [ 241.456631][ T974] usb 5-1: SerialNumber: syz [ 241.486590][ T974] usb 5-1: config 0 descriptor?? [ 241.514790][ T974] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 241.520491][ T8819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.547245][ T974] usb 5-1: Detected FT-X [ 241.605174][ T7857] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 241.720442][ T974] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 241.758533][ T974] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 241.781444][ T974] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 241.812100][ T8831] vlan2: entered allmulticast mode [ 241.816185][ T974] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 241.817239][ T8831] dummy0: entered allmulticast mode [ 241.891254][ T974] usb 5-1: USB disconnect, device number 13 [ 241.914475][ T974] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 241.951307][ T974] ftdi_sio 5-1:0.0: device disconnected [ 242.285840][ T8837] loop6: detected capacity change from 0 to 1024 [ 242.416969][ T8843] loop3: detected capacity change from 0 to 4096 [ 242.517575][ T8843] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 242.658805][ T8843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.689629][ T8854] loop1: detected capacity change from 0 to 128 [ 242.851638][ T8854] syz.1.913: attempt to access beyond end of device [ 242.851638][ T8854] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 242.971692][ T8853] syz.1.913: attempt to access beyond end of device [ 242.971692][ T8853] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 242.985743][ T8853] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 243.122320][ T8522] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 243.231403][ T8522] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 243.334430][ T8522] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 243.407609][ T8522] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 243.412508][ T5875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.046950][ T8522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.121206][ T5952] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 244.208443][ T8522] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.300250][ T5952] usb 3-1: config 0 has no interfaces? [ 244.318699][ T5952] usb 3-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 244.348242][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.360569][ T5952] usb 3-1: Product: syz [ 244.364820][ T5952] usb 3-1: Manufacturer: syz [ 244.367706][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.376591][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.389817][ T5952] usb 3-1: SerialNumber: syz [ 244.399605][ T5952] usb 3-1: config 0 descriptor?? [ 244.471907][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.479094][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.635486][ T8903] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 244.828245][ T9] usb 3-1: USB disconnect, device number 7 [ 245.054224][ T8896] loop4: detected capacity change from 0 to 32768 [ 245.091225][ T8896] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.928 (8896) [ 245.170442][ T8896] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 245.174080][ T8522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.224702][ T8896] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 245.525458][ T8896] BTRFS info (device loop4): rebuilding free space tree [ 245.584516][ T8896] BTRFS info (device loop4): enabling ssd optimizations [ 245.609848][ T8896] BTRFS info (device loop4): turning on sync discard [ 245.654501][ T8896] BTRFS info (device loop4): enabling free space tree [ 245.692568][ T8896] BTRFS info (device loop4): force clearing of disk cache [ 245.699894][ T8896] BTRFS info (device loop4): enabling auto defrag [ 245.717509][ T8896] BTRFS info (device loop4): max_inline set to 0 [ 245.778543][ T30] audit: type=1800 audit(1756586103.187:38): pid=8896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.928" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 245.829722][ T8905] loop6: detected capacity change from 0 to 32768 [ 245.881351][ T5945] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 246.011861][ T8911] loop3: detected capacity change from 0 to 32768 [ 246.023341][ T8905] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 246.070696][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 246.085655][ T5945] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.106639][ T5945] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 246.108512][ T8911] (syz.3.933,8911,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 246.116606][ T5945] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 246.141218][ T5945] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 246.157216][ T5945] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.168192][ T8911] (syz.3.933,8911,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 246.212148][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.220187][ T5945] usb 3-1: Product: syz [ 246.257382][ T5945] usb 3-1: Manufacturer: syz [ 246.295293][ T5945] usb 3-1: SerialNumber: syz [ 246.333012][ T8522] veth0_vlan: entered promiscuous mode [ 246.354139][ T8911] JBD2: Ignoring recovery information on journal [ 246.364069][ T8522] veth1_vlan: entered promiscuous mode [ 246.417148][ T8522] veth0_macvtap: entered promiscuous mode [ 246.438874][ T8522] veth1_macvtap: entered promiscuous mode [ 246.485342][ T5872] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 246.523030][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.564766][ T8911] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 246.577373][ T8935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 246.594736][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.668587][ T7857] ocfs2: Unmounting device (7,6) on (node local) [ 246.680795][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.815566][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.871300][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.906746][ T1143] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.246654][ T8935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 247.292969][ T5875] ocfs2: Unmounting device (7,3) on (node local) [ 247.325396][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.380607][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.490708][ T5945] cdc_ncm 3-1:1.0: bind() failure [ 247.578349][ T5945] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 247.595717][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.610054][ T5945] cdc_ncm 3-1:1.1: bind() failure [ 247.650732][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.859120][ T24] usb 3-1: USB disconnect, device number 8 [ 249.125633][ T8977] loop6: detected capacity change from 0 to 7 [ 249.580675][ T6027] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 249.671002][ T8977] Dev loop6: unable to read RDB block 7 [ 249.697326][ T8977] loop6: AHDI p1 p2 [ 249.711254][ T8977] loop6: partition table partially beyond EOD, truncated [ 249.854518][ T8963] loop1: detected capacity change from 0 to 262144 [ 249.863570][ T8963] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.943 (8963) [ 249.879352][ T8977] loop6: p1 start 926365495 is beyond EOD, truncated [ 249.918020][ T8963] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 249.928249][ T8963] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 249.994398][ T6027] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.055973][ T6027] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.157549][ T6027] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 250.181694][ T8963] BTRFS info (device loop1): enabling ssd optimizations [ 250.188662][ T8963] BTRFS info (device loop1): using spread ssd allocation scheme [ 250.196669][ T8963] BTRFS info (device loop1): enabling free space tree [ 250.233897][ T30] audit: type=1800 audit(1756586107.647:39): pid=8963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.943" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 250.305876][ T6027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.385615][ T6027] usb 5-1: SerialNumber: syz [ 250.512189][ T5877] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 250.622053][ T9016] loop3: detected capacity change from 0 to 128 [ 250.714240][ T6027] usb 5-1: 0:2 : does not exist [ 250.745006][ T9016] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.803466][ T6027] usb 5-1: USB disconnect, device number 14 [ 250.821272][ T9016] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.082089][ T5875] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.970821][ T5952] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 252.086947][ T9043] loop1: detected capacity change from 0 to 1024 [ 252.189362][ T9043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.260884][ T5952] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 252.269173][ T5952] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 252.390004][ T5952] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 252.444328][ T5952] usb 4-1: config 220 has no interface number 2 [ 252.470678][ T5952] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 252.537264][ T5952] usb 4-1: config 220 interface 0 has no altsetting 0 [ 252.556766][ T5952] usb 4-1: config 220 interface 76 has no altsetting 0 [ 252.584735][ T5877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.598648][ T5952] usb 4-1: config 220 interface 1 has no altsetting 0 [ 252.623732][ T5952] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 252.668799][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.705065][ T5952] usb 4-1: Product: syz [ 252.749494][ T5952] usb 4-1: Manufacturer: syz [ 252.764842][ T5952] usb 4-1: SerialNumber: syz [ 252.963476][ T9064] netlink: 72 bytes leftover after parsing attributes in process `syz.1.974'. [ 253.060312][ T5952] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 253.100587][ T5952] usb 4-1: No valid video chain found. [ 253.106146][ T5952] usb 4-1: selecting invalid altsetting 0 [ 253.175445][ T5952] usb 4-1: selecting invalid altsetting 0 [ 253.183359][ T5952] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 253.231088][ T5952] usb 4-1: USB disconnect, device number 7 [ 253.541589][ T9064] hsr_slave_1 (unregistering): left promiscuous mode [ 253.772276][ T9081] loop4: detected capacity change from 0 to 2048 [ 253.830903][ T9081] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 253.934776][ T7420] udevd[7420]: incorrect nilfs2 checksum on /dev/loop4 [ 253.976143][ T9088] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.014122][ T9087] loop6: detected capacity change from 0 to 128 [ 254.112159][ T9087] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 254.240693][ T9087] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 254.522356][ T7857] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.857101][ T9113] loop6: detected capacity change from 0 to 128 [ 255.000434][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.007069][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.084598][ T30] audit: type=1800 audit(1756586112.497:40): pid=9113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.993" name="bus" dev="loop6" ino=1048630 res=0 errno=0 [ 255.300469][ T9118] syz.6.993: attempt to access beyond end of device [ 255.300469][ T9118] loop6: rw=2049, sector=737, nr_sectors = 304 limit=128 [ 255.480642][ T6059] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 255.709470][ T6059] usb 3-1: Using ep0 maxpacket: 32 [ 255.728158][ T9127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.731657][ T6059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.787763][ T6059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.831938][ T6059] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 255.870639][ T6059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.921367][ T6059] usb 3-1: config 0 descriptor?? [ 256.000489][ T9108] loop1: detected capacity change from 0 to 32768 [ 256.037551][ T9108] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.995 (9108) [ 256.120748][ T9108] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 256.137333][ T9108] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 256.146835][ T9108] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 256.381565][ T5952] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 256.471277][ T6059] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 256.540798][ T9108] BTRFS info (device loop1): rebuilding free space tree [ 256.559254][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 256.597916][ T5952] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 256.642285][ T5952] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 256.666461][ T6059] usb 3-1: USB disconnect, device number 9 [ 256.680968][ T9108] BTRFS info (device loop1): disabling free space tree [ 256.688286][ T9108] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 256.718680][ T5952] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.748386][ T9151] fido_id[9151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 256.761032][ T9108] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 256.783791][ T9153] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 256.792195][ T5952] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 256.839753][ T5952] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 256.863614][ T9108] BTRFS info (device loop1): enabling ssd optimizations [ 256.877355][ T5952] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 256.888671][ T5952] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 256.910340][ T9108] BTRFS info (device loop1): turning on sync discard [ 256.950605][ T9108] BTRFS info (device loop1): enabling disk space caching [ 256.959266][ T5952] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.972874][ T9108] BTRFS info (device loop1): force clearing of disk cache [ 256.979992][ T9108] BTRFS info (device loop1): enabling auto defrag [ 256.990768][ T5952] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 257.041408][ T5952] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 257.060556][ T9108] BTRFS info (device loop1): max_inline set to 0 [ 257.090139][ T5952] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 257.105026][ T5952] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 257.158380][ T5952] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 257.212666][ T5952] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 257.260837][ T5952] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 257.298136][ T5952] usb 5-1: string descriptor 0 read error: -22 [ 257.313643][ T5952] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 257.380489][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.428128][ T13] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 257.456263][ T5952] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 257.494673][ T5877] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 258.519606][ T9162] loop2: detected capacity change from 0 to 32768 [ 258.578086][ T9162] [ 258.578086][ T9162] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.578086][ T9162] [ 258.730752][ T13] [ 258.730752][ T13] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.730752][ T13] [ 258.749949][ T9172] loop6: detected capacity change from 0 to 32768 [ 258.763654][ T13] [ 258.763654][ T13] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.763654][ T13] [ 258.780162][ T5881] [ 258.780162][ T5881] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.780162][ T5881] [ 258.794487][ T5881] [ 258.794487][ T5881] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.794487][ T5881] [ 258.827167][ T109] [ 258.827167][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.827167][ T109] [ 258.874832][ T109] ================================================================== [ 258.880401][ T9174] loop3: detected capacity change from 0 to 32768 [ 258.882899][ T109] BUG: KASAN: slab-use-after-free in txEnd+0x32d/0x530 [ 258.882932][ T109] Write of size 8 at addr ffff888032bd4840 by task jfsCommit/109 [ 258.896096][ T9174] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1017 (9174) [ 258.899019][ T9174] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 258.903808][ T109] [ 258.903821][ T109] CPU: 0 UID: 0 PID: 109 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 258.903849][ T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.903865][ T109] Call Trace: [ 258.903875][ T109] [ 258.903885][ T109] dump_stack_lvl+0x189/0x250 [ 258.903918][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.903948][ T109] ? __kasan_check_byte+0x12/0x40 [ 258.903983][ T109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.904010][ T109] ? rcu_is_watching+0x15/0xb0 [ 258.904034][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.904061][ T109] ? lock_release+0x4b/0x3e0 [ 258.904099][ T109] ? __virt_addr_valid+0x1c8/0x5c0 [ 258.904129][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.904156][ T109] ? __virt_addr_valid+0x4a5/0x5c0 [ 258.904188][ T109] print_report+0xca/0x240 [ 258.904211][ T109] ? txEnd+0x32d/0x530 [ 258.904234][ T109] kasan_report+0x118/0x150 [ 258.904269][ T109] ? txEnd+0x32d/0x530 [ 258.904298][ T109] kasan_check_range+0x2b0/0x2c0 [ 258.904335][ T109] txEnd+0x32d/0x530 [ 258.904361][ T109] jfs_lazycommit+0x5ba/0xa90 [ 258.904392][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 258.904425][ T109] ? __pfx_default_wake_function+0x10/0x10 [ 258.904461][ T109] ? __kthread_parkme+0x7b/0x200 [ 258.904487][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.904514][ T109] ? __kthread_parkme+0x1a1/0x200 [ 258.904543][ T109] kthread+0x711/0x8a0 [ 258.904574][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 258.904600][ T109] ? __pfx_kthread+0x10/0x10 [ 258.904627][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.904656][ T109] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.904688][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.904715][ T109] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.904749][ T109] ? __pfx_kthread+0x10/0x10 [ 258.904778][ T109] ret_from_fork+0x3fc/0x770 [ 258.904804][ T109] ? __pfx_ret_from_fork+0x10/0x10 [ 258.904833][ T109] ? __switch_to_asm+0x39/0x70 [ 258.904862][ T109] ? __switch_to_asm+0x33/0x70 [ 258.904893][ T109] ? __pfx_kthread+0x10/0x10 [ 258.904922][ T109] ret_from_fork_asm+0x1a/0x30 [ 258.904963][ T109] [ 258.904972][ T109] [ 259.033380][ T9174] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 259.035539][ T109] Allocated by task 9162: [ 259.068192][ T9172] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 259.071181][ T109] kasan_save_track+0x3e/0x80 [ 259.071216][ T109] __kasan_kmalloc+0x93/0xb0 [ 259.130640][ T9172] allowing incompatible features above 0.0: (unknown version) [ 259.133259][ T109] __kmalloc_cache_noprof+0x230/0x3d0 [ 259.135565][ T9172] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 259.144022][ T109] lmLogOpen+0x2d1/0xfb0 [ 259.144048][ T109] jfs_mount_rw+0xe9/0x670 [ 259.144069][ T109] jfs_fill_super+0x754/0xd80 [ 259.144099][ T109] get_tree_bdev_flags+0x40e/0x4d0 [ 259.210606][ T9172] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 259.211453][ T109] vfs_get_tree+0x92/0x2b0 [ 259.234244][ T9172] bcachefs (loop6): initializing new filesystem [ 259.238096][ T109] do_new_mount+0x2a2/0x9e0 [ 259.238136][ T109] __se_sys_mount+0x317/0x410 [ 259.253478][ T109] do_syscall_64+0xfa/0x3b0 [ 259.257986][ T109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.263873][ T109] [ 259.266188][ T109] Freed by task 5881: [ 259.270158][ T109] kasan_save_track+0x3e/0x80 [ 259.274841][ T109] kasan_save_free_info+0x46/0x50 [ 259.279861][ T109] __kasan_slab_free+0x5b/0x80 [ 259.284626][ T109] kfree+0x18e/0x440 [ 259.288528][ T109] lmLogClose+0x297/0x520 [ 259.292857][ T109] jfs_umount+0x2ef/0x3c0 [ 259.297181][ T109] jfs_put_super+0x8c/0x190 [ 259.300114][ T9172] bcachefs (loop6): going read-write [ 259.301709][ T109] generic_shutdown_super+0x135/0x2c0 [ 259.301739][ T109] kill_block_super+0x44/0x90 [ 259.301771][ T109] deactivate_locked_super+0xbc/0x130 [ 259.301798][ T109] cleanup_mnt+0x425/0x4c0 [ 259.326824][ T109] task_work_run+0x1d4/0x260 [ 259.331416][ T109] exit_to_user_mode_loop+0xec/0x110 [ 259.336697][ T109] do_syscall_64+0x2bd/0x3b0 [ 259.341270][ T109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.347149][ T109] [ 259.349451][ T109] The buggy address belongs to the object at ffff888032bd4800 [ 259.349451][ T109] which belongs to the cache kmalloc-1k of size 1024 [ 259.363484][ T109] The buggy address is located 64 bytes inside of [ 259.363484][ T109] freed 1024-byte region [ffff888032bd4800, ffff888032bd4c00) [ 259.377264][ T109] [ 259.379571][ T109] The buggy address belongs to the physical page: [ 259.385960][ T109] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32bd0 [ 259.394703][ T109] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 259.403187][ T109] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 259.411150][ T109] page_type: f5(slab) [ 259.415116][ T109] raw: 00fff00000000040 ffff88801a441dc0 0000000000000000 dead000000000001 [ 259.423682][ T109] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 259.432250][ T109] head: 00fff00000000040 ffff88801a441dc0 0000000000000000 dead000000000001 [ 259.440902][ T109] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 259.449554][ T109] head: 00fff00000000003 ffffea0000caf401 00000000ffffffff 00000000ffffffff [ 259.458206][ T109] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 259.466850][ T109] page dumped because: kasan: bad access detected [ 259.473241][ T109] page_owner tracks the page as allocated [ 259.478932][ T109] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12, tgid 12 (kworker/u8:0), ts 100950275646, free_ts 100941502309 [ 259.498021][ T109] post_alloc_hook+0x240/0x2a0 [ 259.502789][ T109] get_page_from_freelist+0x21e4/0x22c0 [ 259.508322][ T109] __alloc_frozen_pages_noprof+0x181/0x370 [ 259.514116][ T109] alloc_pages_mpol+0x232/0x4a0 [ 259.518960][ T109] allocate_slab+0x8a/0x370 [ 259.523448][ T109] ___slab_alloc+0xbeb/0x1410 [ 259.528127][ T109] __kmalloc_noprof+0x305/0x4f0 [ 259.532967][ T109] ___neigh_create+0x6d5/0x2260 [ 259.537813][ T109] ip6_finish_output2+0xb4d/0x16a0 [ 259.542915][ T109] ndisc_send_skb+0xb54/0x1440 [ 259.547666][ T109] ndisc_send_ns+0xcb/0x150 [ 259.552154][ T109] addrconf_dad_work+0xaae/0x14b0 [ 259.557175][ T109] process_scheduled_works+0xae1/0x17b0 [ 259.562704][ T109] worker_thread+0x8a0/0xda0 [ 259.567276][ T109] kthread+0x711/0x8a0 [ 259.571334][ T109] ret_from_fork+0x3fc/0x770 [ 259.575907][ T109] page last free pid 5881 tgid 5881 stack trace: [ 259.582209][ T109] __free_frozen_pages+0xbc4/0xd30 [ 259.587313][ T109] __put_partials+0x156/0x1a0 [ 259.591981][ T109] put_cpu_partial+0x17c/0x250 [ 259.596726][ T109] __slab_free+0x2d5/0x3c0 [ 259.601132][ T109] qlist_free_all+0x97/0x140 [ 259.605717][ T109] kasan_quarantine_reduce+0x148/0x160 [ 259.611194][ T109] __kasan_slab_alloc+0x22/0x80 [ 259.616058][ T109] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 259.621956][ T109] dup_task_struct+0x52/0x860 [ 259.626624][ T109] copy_process+0x54b/0x3c00 [ 259.631199][ T109] kernel_clone+0x21e/0x840 [ 259.635696][ T109] __x64_sys_clone+0x18b/0x1e0 [ 259.640474][ T109] do_syscall_64+0xfa/0x3b0 [ 259.644962][ T109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.650839][ T109] [ 259.653139][ T109] Memory state around the buggy address: [ 259.658753][ T109] ffff888032bd4700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 259.666807][ T109] ffff888032bd4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 259.674852][ T109] >ffff888032bd4800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.682891][ T109] ^ [ 259.689079][ T109] ffff888032bd4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.697127][ T109] ffff888032bd4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.705193][ T109] ================================================================== [ 259.776439][ T109] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 259.783665][ T109] CPU: 0 UID: 0 PID: 109 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 259.792772][ T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.802822][ T109] Call Trace: [ 259.806094][ T109] [ 259.809018][ T109] dump_stack_lvl+0x99/0x250 [ 259.813603][ T109] ? __asan_memcpy+0x40/0x70 [ 259.818187][ T109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.823380][ T109] ? __pfx__printk+0x10/0x10 [ 259.827969][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.833600][ T109] vpanic+0x281/0x750 [ 259.837573][ T109] ? preempt_schedule+0xae/0xc0 [ 259.842443][ T109] ? __pfx_vpanic+0x10/0x10 [ 259.846934][ T109] ? preempt_schedule_common+0x83/0xd0 [ 259.852406][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.858032][ T109] ? preempt_schedule+0xae/0xc0 [ 259.862882][ T109] ? __pfx_preempt_schedule+0x10/0x10 [ 259.868254][ T109] panic+0xb9/0xc0 [ 259.871979][ T109] ? __pfx_panic+0x10/0x10 [ 259.876384][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.882027][ T109] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 259.887923][ T109] ? txEnd+0x32d/0x530 [ 259.891981][ T109] check_panic_on_warn+0x89/0xb0 [ 259.896912][ T109] ? txEnd+0x32d/0x530 [ 259.900966][ T109] end_report+0x78/0x160 [ 259.905211][ T109] kasan_report+0x129/0x150 [ 259.909725][ T109] ? txEnd+0x32d/0x530 [ 259.913786][ T109] kasan_check_range+0x2b0/0x2c0 [ 259.918721][ T109] txEnd+0x32d/0x530 [ 259.922608][ T109] jfs_lazycommit+0x5ba/0xa90 [ 259.927279][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 259.932465][ T109] ? __pfx_default_wake_function+0x10/0x10 [ 259.938271][ T109] ? __kthread_parkme+0x7b/0x200 [ 259.943195][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.948814][ T109] ? __kthread_parkme+0x1a1/0x200 [ 259.953828][ T109] kthread+0x711/0x8a0 [ 259.957888][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 259.963073][ T109] ? __pfx_kthread+0x10/0x10 [ 259.967650][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.973272][ T109] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.978462][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.984081][ T109] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.989275][ T109] ? __pfx_kthread+0x10/0x10 [ 259.993854][ T109] ret_from_fork+0x3fc/0x770 [ 259.998435][ T109] ? __pfx_ret_from_fork+0x10/0x10 [ 260.003535][ T109] ? __switch_to_asm+0x39/0x70 [ 260.008298][ T109] ? __switch_to_asm+0x33/0x70 [ 260.013055][ T109] ? __pfx_kthread+0x10/0x10 [ 260.017636][ T109] ret_from_fork_asm+0x1a/0x30 [ 260.022400][ T109] [ 260.025620][ T109] Kernel Offset: disabled [ 260.029928][ T109] Rebooting in 86400 seconds..