last executing test programs: 26m37.060139852s ago: executing program 1 (id=427): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r6) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) 26m35.448878144s ago: executing program 1 (id=429): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20) fadvise64(r0, 0xfcff, 0x20000, 0x3) 26m34.920824197s ago: executing program 1 (id=432): socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x8) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805f"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0xfffffffd, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x42842}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x800}, 0x0) 26m33.887615371s ago: executing program 1 (id=433): semget$private(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80c0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @null, @netrom={'nr', 0x0}, 0xfffffe4c, 'syz1\x00', @bcast, 0x5, 0x1, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000003680)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb7, 0x80, 0x3, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r3, 0x0}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) gettid() socket(0x1e, 0x1, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 26m32.056895141s ago: executing program 1 (id=437): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x44, 0x28, 0xd2b, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x24048042) 26m30.941302592s ago: executing program 1 (id=439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x600801, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 26m15.480948485s ago: executing program 32 (id=439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x600801, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 16m53.35813508s ago: executing program 3 (id=1446): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mount$cgroup2(0x0, 0x0, &(0x7f0000000100), 0x8081, &(0x7f0000000500)=ANY=[@ANYBLOB='memory_l']) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') 16m52.030702269s ago: executing program 3 (id=1448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./bus\x00') 16m50.833679218s ago: executing program 3 (id=1449): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000200)={0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000740), &(0x7f0000001b40), 0x80, r4, 0x0, 0x7}, 0x38) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x200048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$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") chdir(&(0x7f0000000040)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000007340)={0xbe, 0x1, {r1}, {0xee01}, 0x0, 0x7}) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000140)) read$FUSE(r7, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r8, &(0x7f00000024c0)={0x90, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, r10, 0x3, 0x5}}}, 0x90) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000b40)="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", 0x2000, &(0x7f00000074c0)={&(0x7f0000000640)={0x50, 0xffffffffffffffda, 0x8000000000000000, {0x7, 0x2b, 0x8, 0xc080220, 0x101, 0x8e25, 0x6, 0x3, 0x0, 0x0, 0x8, 0x3}}, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0xa0, {0xe8}}, 0x0, &(0x7f00000006c0)={0x18, 0x0, 0x6ec, {0x5}}, &(0x7f0000000700)={0x18, 0x0, 0x8000000000000001, {0xd}}, &(0x7f0000000800)={0x28, 0xffffffffffffffda, 0x2, {{0xfffffffffffffff7, 0x7, 0x0, r1}}}, &(0x7f0000000880)={0x60, 0x0, 0x100000000, {{0x6, 0xfffffffffffffff8, 0x7f, 0x692f0506, 0x1, 0x5, 0x3, 0x4}}}, &(0x7f0000000900)={0x18, 0x0, 0x6b6, {0xc0}}, &(0x7f0000000940)={0x16, 0x0, 0x9b6f, {'erofs\x00'}}, &(0x7f0000000980)={0x20, 0xfffffffffffffff5, 0x6e}, &(0x7f00000009c0)={0x78, 0xffffffffffffffda, 0x80, {0x4, 0x0, 0x0, {0x5, 0x0, 0x7, 0x2, 0x1, 0xfffffffffffffff9, 0x5, 0xfffffff8, 0x8000, 0x1000, 0x5, 0x0, 0xffffffffffffffff, 0x3ff, 0x89}}}, 0x0, &(0x7f0000002cc0)={0x68, 0x0, 0xffffffffffffffff, [{0x2, 0x4, 0x0, 0xbc17}, {0x6, 0x6, 0x6, 0x0, 'erofs\x00'}, {0x4, 0x0, 0x6, 0x0, 'erofs\x00'}]}, &(0x7f0000006f00)={0x328, 0x0, 0x3, [{{0x4, 0x2, 0xef, 0x8000000000000001, 0x3, 0x0, {0x1, 0x6, 0x8, 0xff, 0x8, 0x9b7, 0x0, 0x0, 0x1, 0xc000, 0x4c6e1d6f, 0x0, 0x0, 0x4021a77a, 0x9}}, {0x1, 0x0, 0x0, 0x10000}}, {{0x2, 0x1, 0x10, 0x5, 0x9, 0x101, {0x3, 0x101, 0x7, 0x0, 0xff, 0x7f, 0x8, 0x57b2, 0x5, 0xc000, 0x3c6d9351, 0x0, 0x0, 0xdbef, 0x1}}, {0x4, 0x3, 0x8, 0x1, 'overlay\x00'}}, {{0x3, 0x2, 0x7ff, 0x80000001, 0x3, 0x1, {0x3, 0x1ff, 0x8, 0xc498, 0xfffffffffffffffd, 0x0, 0xba2, 0x400, 0xb, 0xa000, 0x7fffffff, 0x0, 0xee00, 0x3, 0x9f}}, {0x6, 0x4, 0x3, 0x9, '*\'@'}}, {{0x3, 0x3, 0x5, 0x4, 0x80, 0x7db0, {0x4, 0x2, 0x3, 0x1ff, 0x21a, 0x8, 0x3, 0x1, 0x764c, 0xc000, 0x5, 0xee00, 0x0, 0x80000000, 0x9}}, {0x6, 0x8, 0x1, 0x8, '\''}}, {{0x5, 0x3, 0x917, 0x1, 0x3, 0x4, {0x3, 0x0, 0x7, 0x8, 0x5, 0x8000000000000000, 0x79, 0xfffffffe, 0x9, 0x1000, 0x1, 0x0, 0xee00, 0x1, 0x1}}, {0x0, 0x4, 0x4, 0x80000001, ']}[-'}}]}, &(0x7f0000007240)={0xa0, 0xfffffffffffffffe, 0x8, {{0x3, 0x2, 0x73f999da, 0x3, 0x54d, 0x8, {0x5, 0x0, 0x8000000000000000, 0x67b, 0x2, 0x19, 0xab, 0x2, 0x4, 0x6000, 0x0, 0x0, r5, 0x7, 0x7}}, {0x0, 0x13}}}, &(0x7f0000007300)={0x20, 0x0, 0x3, {0x9, 0x0, 0x0, 0x7ff}}, &(0x7f0000007380)={0x130, 0xfffffffffffffffe, 0x6, {0x11, 0x1c1, 0x0, '\x00', {0x10, 0x378426ee, 0x400, 0x1, r6, r10, 0x4000, '\x00', 0x2, 0x8000, 0x7fffffff, 0x7, {0x1000, 0x2}, {0x6, 0x698}, {0xf8d, 0x5}, {0x3, 0x51}, 0x5, 0x6, 0x7, 0x9}}}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, 0x0, 0x0) 16m49.503430937s ago: executing program 3 (id=1450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 16m49.024834846s ago: executing program 0 (id=1451): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="b6a3cde7e41dc14bad8796142759deebb7890087274a4f750356ab1b794545ab2852", @ANYRESDEC=0x0, @ANYBLOB="44bf90b1b2fbe866d03930"], 0x8, 0xa7, &(0x7f00000003c0)="$eJzszrFNw0AYBeBnWxhovAAFG3gHRkEuoaMCIXkiVmEEb0BBm+Yix0mkVCmiKFH0fdLdvdPdL73f1c9TuqSMSSmltEkes+SPz6+31/d5b7Jxl537cBPq7XpI8twt+e9lfmn3f6b/72GqMsznJbsCAACnqdMf3Kv0/dGhMUlzxlIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV2QdAAD//0dpGb4=") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1c5a4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 16m48.287154307s ago: executing program 3 (id=1452): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x26e1, 0x0) close(r0) socket$inet6(0xa, 0x3, 0x3a) sendmmsg$alg(r0, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000a00)="ebe3a0e9796cfd1647e299f4e376fd9a128280b372219d205e81f4a7f71c3426aae1eff7e0054a863f3ad28deae85550b8af8c6dbb79960698ab67cd991b64490c", 0x41}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x44014) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 16m47.903805308s ago: executing program 0 (id=1453): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e20000000052001000000000000", @ANYRES16], 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 16m47.7625116s ago: executing program 3 (id=1455): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800) connect$qrtr(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2b, 0x64, 0x79, 0x10, 0x586, 0x1500, 0x2e97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa, 0xbf, 0x40, 0x0, [], [{{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0) close_range(r0, r1, 0x0) 16m47.51268853s ago: executing program 0 (id=1456): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x2604c410}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xff0e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r8, @ANYBLOB="e781ffffffffffff00003b040008080040", @ANYRES8=r6, @ANYBLOB="2a003300d0000000080211000001080211000000505050505050000004040000000076060405190003000000"], 0x48}}, 0x0) dup3(0xffffffffffffffff, r4, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@cache_fscache}]}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x0, 0x44, 0x0) 16m46.308761569s ago: executing program 0 (id=1458): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000200)={0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000740), &(0x7f0000001b40), 0x80, r4, 0x0, 0x7}, 0x38) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x200048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$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") chdir(&(0x7f0000000040)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000007340)={0xbe, 0x1, {r1}, {0xee01}, 0x0, 0x7}) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000140)) read$FUSE(r7, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r8, &(0x7f00000024c0)={0x90, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, r10, 0x3, 0x5}}}, 0x90) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000b40)="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", 0x2000, &(0x7f00000074c0)={&(0x7f0000000640)={0x50, 0xffffffffffffffda, 0x8000000000000000, {0x7, 0x2b, 0x8, 0xc080220, 0x101, 0x8e25, 0x6, 0x3, 0x0, 0x0, 0x8, 0x3}}, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0xa0, {0xe8}}, 0x0, &(0x7f00000006c0)={0x18, 0x0, 0x6ec, {0x5}}, &(0x7f0000000700)={0x18, 0x0, 0x8000000000000001, {0xd}}, &(0x7f0000000800)={0x28, 0xffffffffffffffda, 0x2, {{0xfffffffffffffff7, 0x7, 0x0, r1}}}, &(0x7f0000000880)={0x60, 0x0, 0x100000000, {{0x6, 0xfffffffffffffff8, 0x7f, 0x692f0506, 0x1, 0x5, 0x3, 0x4}}}, &(0x7f0000000900)={0x18, 0x0, 0x6b6, {0xc0}}, &(0x7f0000000940)={0x16, 0x0, 0x9b6f, {'erofs\x00'}}, &(0x7f0000000980)={0x20, 0xfffffffffffffff5, 0x6e}, &(0x7f00000009c0)={0x78, 0xffffffffffffffda, 0x80, {0x4, 0x0, 0x0, {0x5, 0x0, 0x7, 0x2, 0x1, 0xfffffffffffffff9, 0x5, 0xfffffff8, 0x8000, 0x1000, 0x5, 0x0, 0xffffffffffffffff, 0x3ff, 0x89}}}, 0x0, &(0x7f0000002cc0)={0x68, 0x0, 0xffffffffffffffff, [{0x2, 0x4, 0x0, 0xbc17}, {0x6, 0x6, 0x6, 0x0, 'erofs\x00'}, {0x4, 0x0, 0x6, 0x0, 'erofs\x00'}]}, &(0x7f0000006f00)={0x328, 0x0, 0x3, [{{0x4, 0x2, 0xef, 0x8000000000000001, 0x3, 0x0, {0x1, 0x6, 0x8, 0xff, 0x8, 0x9b7, 0x0, 0x0, 0x1, 0xc000, 0x4c6e1d6f, 0x0, 0x0, 0x4021a77a, 0x9}}, {0x1, 0x0, 0x0, 0x10000}}, {{0x2, 0x1, 0x10, 0x5, 0x9, 0x101, {0x3, 0x101, 0x7, 0x0, 0xff, 0x7f, 0x8, 0x57b2, 0x5, 0xc000, 0x3c6d9351, 0x0, 0x0, 0xdbef, 0x1}}, {0x4, 0x3, 0x8, 0x1, 'overlay\x00'}}, {{0x3, 0x2, 0x7ff, 0x80000001, 0x3, 0x1, {0x3, 0x1ff, 0x8, 0xc498, 0xfffffffffffffffd, 0x0, 0xba2, 0x400, 0xb, 0xa000, 0x7fffffff, 0x0, 0xee00, 0x3, 0x9f}}, {0x6, 0x4, 0x3, 0x9, '*\'@'}}, {{0x3, 0x3, 0x5, 0x4, 0x80, 0x7db0, {0x4, 0x2, 0x3, 0x1ff, 0x21a, 0x8, 0x3, 0x1, 0x764c, 0xc000, 0x5, 0xee00, 0x0, 0x80000000, 0x9}}, {0x6, 0x8, 0x1, 0x8, '\''}}, {{0x5, 0x3, 0x917, 0x1, 0x3, 0x4, {0x3, 0x0, 0x7, 0x8, 0x5, 0x8000000000000000, 0x79, 0xfffffffe, 0x9, 0x1000, 0x1, 0x0, 0xee00, 0x1, 0x1}}, {0x0, 0x4, 0x4, 0x80000001, ']}[-'}}]}, &(0x7f0000007240)={0xa0, 0xfffffffffffffffe, 0x8, {{0x3, 0x2, 0x73f999da, 0x3, 0x54d, 0x8, {0x5, 0x0, 0x8000000000000000, 0x67b, 0x2, 0x19, 0xab, 0x2, 0x4, 0x6000, 0x0, 0x0, r5, 0x7, 0x7}}, {0x0, 0x13}}}, &(0x7f0000007300)={0x20, 0x0, 0x3, {0x9, 0x0, 0x0, 0x7ff}}, &(0x7f0000007380)={0x130, 0xfffffffffffffffe, 0x6, {0x11, 0x1c1, 0x0, '\x00', {0x10, 0x378426ee, 0x400, 0x1, r6, r10, 0x4000, '\x00', 0x2, 0x8000, 0x7fffffff, 0x7, {0x1000, 0x2}, {0x6, 0x698}, {0xf8d, 0x5}, {0x3, 0x51}, 0x5, 0x6, 0x7, 0x9}}}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, 0x0, 0x0) 16m43.779363547s ago: executing program 0 (id=1461): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="b6a3cde7e41dc14bad8796142759deebb7890087274a4f750356ab1b794545ab2852", @ANYRESDEC=0x0, @ANYBLOB="44bf90b1b2fbe866d03930"], 0x8, 0xa7, &(0x7f00000003c0)="$eJzszrFNw0AYBeBnWxhovAAFG3gHRkEuoaMCIXkiVmEEb0BBm+Yix0mkVCmiKFH0fdLdvdPdL73f1c9TuqSMSSmltEkes+SPz6+31/d5b7Jxl537cBPq7XpI8twt+e9lfmn3f6b/72GqMsznJbsCAACnqdMf3Kv0/dGhMUlzxlIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV2QdAAD//0dpGb4=") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1c5a4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 16m42.463995005s ago: executing program 0 (id=1463): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800) connect$qrtr(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2b, 0x64, 0x79, 0x10, 0x586, 0x1500, 0x2e97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa, 0xbf, 0x40, 0x0, [], [{{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0) close_range(r0, r1, 0x0) 16m31.592638088s ago: executing program 33 (id=1455): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800) connect$qrtr(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2b, 0x64, 0x79, 0x10, 0x586, 0x1500, 0x2e97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa, 0xbf, 0x40, 0x0, [], [{{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0) close_range(r0, r1, 0x0) 16m26.866950226s ago: executing program 34 (id=1463): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800) connect$qrtr(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2b, 0x64, 0x79, 0x10, 0x586, 0x1500, 0x2e97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa, 0xbf, 0x40, 0x0, [], [{{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0) close_range(r0, r1, 0x0) 31.560439601s ago: executing program 5 (id=3167): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001700)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) 30.664770574s ago: executing program 5 (id=3171): syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000000)='./file0\x00', 0x3000010, &(0x7f00000002c0)={[{@nodiscard}, {}]}, 0x2, 0xb9a7, &(0x7f000000c1c0)="$eJzs3QtsXXUdwPHTru1WUFlEoxEJZYMNhFHaznU8lLaMjTIoyASq4zWgjMlghi0Kg0jRGFBCphJfIUZeIgbiA2d8gGFqYCCBjSAMRAUTGWDCa5gNNVBzes/t2ruuof/t/6+jn0+ynnvO7e/s9n77P5eSte2eu6Ajy2qykt6s0g3Lj32u8cb2H3xz2n2HL7626vXS0bZJxd0NxXbfYjsl6z9ZW367unSo5jurf1Gd71QPPu9u9fVV78my9xW7bcW2tbS5vKn8fn0VisOTy/dXDzyMqq+W/gyoz998ec6U8wafJ3/HLMsO3eYDHae62+fNLZ6TbFC3CcXdVVvv69/WlP4c9ccsO2pttt3PjzGVP87JZ6z6wpNj/UB2Bd3t8zor+rcVnauK9dhQuQbHo8rP83PPbFpWPIVVg69Hu5ru9rnHZyOs43/+5Ru9faXrZm2WZXVZlk3MsmzSWPdg52jvaOnIr/nl/SJ7ef1PHu7z4s7/Xv2zLMveXbxOHFZ+LQB2Le0dLUcPs/7rRlr/dx23/ibrH3Z9ne0dLflar1j/k0Za/9PuPmZh8UV3a2nqrbH9IAAAAACAYS2/bOWFi5Yu7bnEDTfccGPgxlhfmYDYti76sX4kQGop/nNirD9GAAAAGO86u9pfmlA15NCEwTt7P9zTv525pfuClXfPOaG8Le6eP8wph3yff19fX9/q05eeU+xOrPh+2UmVw/n5l9y36NJit6Hy+w9q+4/WZmefv2Rpz6H5XzW1Nrs032nKzzutNvtavtOc70yvzW7Pd1r6d+qzNfnOIecuW3pefuCAwGfsnaWzqzebMKRYNuSzYXD/Jff1/qq8HeGU5bP1/1CJvP/mplvuqrivbDv9B86/7//hzxd4Rxld/2uuKW9HOOU263/94llNw923/f4D55+if1zDXP+HNKq87ldc/xuGOeXA/K9P+/pzef8ZP113bXGo5u1c/wedf2pl//6TD1z/81PtV77+568t++/QkzEOdXZd9dJI63/k/jUfKt6tetDswNla+m77TN7/nuvaHi8O1Y6y/34jrf+qhm2uJ4xSZ9dNfRXrfxT9s+nDnHKgybvmdK7O+7/25iOPDrpvNP33r+zfuOKizzYuv2zljCUXLVrcs7jn4pbmWa3NrU2zZ89q7L8klN7u2JMyjuzY+s92q5ipyrL9B+ZnX3HMhrz/n28+9dbi0KRR9p824vo/e+hjZZAp1VldXXbpohUrLmkqvS3vNpfelt5tmP6jeP2fWv4iqr7YVmXZBwfmD7zy9YPz/ndu2HRLcahulP2nj9S/buvfS6AdXP/nVcwM6f/QIz035/2XH/ThC4tDo339P2DE9d9r/e+ozq6K/+Gzk+X9T958xMbA8QN9/RdXiv71G1tXBY5/RP+4UvRf82LL7YHjB+kfV4r+997feEbg+MH6x5Wi/+cePGhl4PgM/eNK0X/GU9P3DBw/RP+4UvT/xxNTZwaON+ofV4r+Jz174dWB44fqH1eK/t99ZdmNgeNN+seVov/v+859MHC8Wf+4UvTf/dXFLweOt+gfV4r+K565fK/A8Zn6x5Wi/2/XX3lk4PhH9Y8rRf+Na5afEjg+S/+4UvRvXPf5SwLHW/WPa7j+2/4WwHB5/xdf+OFvAsdn6x9XivXf8Pwt3wscP0z/uFL0v3zLT/4VOH64/nGl6H/XG3c8Fjh+hP5xpej/8IZfTgscP1L/uFL0r3ny56H/TvNj+seVov9ZD9x7QeD4x/WPK0X/b629+8TA8aO2379mZz3EcS1F/75nT3w2cLzN+o8rRf9Zr8wP/f2w7frHlaL/RX3zfhw43qF/XCn63/rq0V8JHD9a/7hS9H/6mbOuCByfo39cKfq/d/3ChYHjx+gfV4r+nWtOaw4cn6t/XCn6965b8P7A8Xn6x5Wi/9wXvvTXwPFj9Y8rRf9Vz1/9n8DxTv3jStH/T1uuvT5w/Dj940rRf+83Vq0OHJ+vf1wp+p+z4fr2wPHj9Y8rRf87nvz2+YHjJ+gfV4r+rz5wwx6B4136x5Wi/2Frvx/6w9ZP1D+uFP2ve23DDYHjJ+kfV4r+c9567J7A8U/oH1eK/vu8/MzjgeMn6x9Xiv5P/P3pTYHjC/SPK0X/Hz2ydmLg+Cf1jytF/7N/94fhfk/I23GK/nGl6H/Eo+s6A8dP1T+uFP03/e2hiwPHT9M/rhT9Z/57r9sCx7v1jytF/zc373NV4Pin9I8rRf/bNu75QuD4p/WPK0X/ZS9+YF3g+EL940rRf/L9ux8eOH66/nGl6P/Ug3vsHTh+hv5xpej/xacmrAgcP1P/uFL0n//ExAWB42fpDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLencBdWg/8Hz+ztqhUQkKmPbRHi9CilSxtKqVFe9pU2qksabGURIulvSREhUoLSpTSKoSILJEkCS3zf00z95im78wznr/HZL7v9+s199muOf3O73N+5z7d132uAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABmRJutvdEag8HICZcOe8rtp+yz7j1Ln7r6WScses0rdjpm2IPjr11t5gk3jxk7mcETd7bauNuGj99k5IkXnTV83IXhk97vrLPMMmyOwbB58qgO3up/GPacQ2fG3+mYwWAw7OjxfyaaZdyXVe+++/b/4b6qbbb6OmuPm7zxfyZ2GzHh5gnXTzw/cvyfVbYeDFbZcjDF58f0t+G9dz40vcfw32Cz1ddZb7L+gwmdn+g++fpuNfnz/JJbdltluob7N9ls9bXXH9d6Suv4nE1XO2vsE6/rI08dDEaeNhiMPH0wGHnG9O7Bv8fqayy/xrjX/KHL46sfNvSGIL2+D1tgo81nHQwGo8Z/nxh55tD3AuC/y+prLP+asP5HD92e1v+qd88xn/UP//3WW32N5QeTvM8ff+1hQ/9/H9f/PSM2OG76jRgAAAD4Vz1+36VXTNjXN3wwmH8wyf7eiecm/Fxg2AVX3XTTdBvo00PYT/bU35n4LzOu8sznjRkM9thkeg+F6WDY9B4A05X+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276V/syfv/J37ee86h09WP3/jVEzZdZMV5Nr1o8r8/7rqZ//PDnl5m1P3/g12GjW85rvkug8HgDatvuPHig8Hgok3nWXHBwcTbVhp32ypzj5hwgIDFn/i6yBTueMykp7NOvI8Lnrj/9caeNmLYZIOYxOvXvOygnTd7+GWTny425ccx8fgSF6235mxDn2UZPtlGU3quDt3/0GOZvPOEsS8+buxL77v7Xkvvc+BBS+6y+7Y77bDTDnssv9wKKy634rIrrbTC0jvustsOy4z/OoU5Gz8rC03LnI2efM7uW33SOZv8sU1pzsZMbc4mfNL3nuM2vWRozkb+i3O20NTnbMwuQ2MdM2qwzRNTM+5BLDxqcMC4C8vONMlry7zjtn3l3MMHg2Of/GtIM018Dg47bJd/w3FLJpwuMOF0wXjckoundNySwdBxS4YOmLDy+JN9Lx/abvLPWU+4epqPW7L/Go8uOHjK57L+T/yvvv8/pddKwyZO1NA3kQnbjO/1z+NMDE3bapMcZ2LFdCyZf6enjHfM8InP6zTeCZ+LGzbZ/E/tc3GDnXY8ZJEJUVcc/7ce/19Hya8d6z/xdUrrecxkp1N77Rjxz7P/vHaHG144+WvH66Y8xCeti6E5mmmyjab02nHAttfsMulr0xReO9bfZcIHjf/52jHuP7vQ0GvHuLEvOmpw7LgLy427sNiowbnjLiz/xIVZBleNu7DUdnvutv2wJ75fPeV5sPiwJx3gJjxv157seTsNx8dZ9brBYNVr0+Oa8nRm6Xk7eirjzZ/nHkz189xXbrvAhYPBYPYJj2vlobH/b6Txjpz6eMPxJwZTO/7E4LSb9jvj3zzeievsiefahJfpxafwd560zuZ8yjo7fMQkK2Na39dsH7Yff37eifd2+g43Xj80R6Mmu9//6Xv00GNJ/Yfe801q2GGDYVObmym9D3vS3Mwx9bmZ1vcvi094gzHLVOZmiQcPffHQ3Iz+F+dmsSnMzaTvhyc1ejCY5clzM3Kw1rh3NBPmZtFpmZvZ/j3Pm1nD9uPPLzLxqjvWOmSlobkJcxG//w/d/6L/4twM22bi82bhJ25bcPhg9OjBAdvuu+/ey47/OnRxufFfp74GF56WuZz53zOX80141Rn+1MmZeNWuZ49d/n+7Bhf+V+dyzGD40P9z7zL5Yvn38fOfbvp307+b/t3076Z/N/276V9sCp//HzP0c8Gjhp250YQfxoy6+uG59p3e453OZuj9/xP6Pmn//75zPXz18MHE26a6f3b8Nk/L/bMrjj85eNmh7SbfPzjh6mneP/vQMdduPvjP7J/9Xxlaq9Pwc0Ov/93076Z/N/276d9N/27/av9V/4/GwfRh/XfTv5v+3fTvpn83/bvpX2wK+/+XGfo9gJv3efTMCTtCR+2z8SqPTO/xTmcz9P7/CX2ftP//kVU23mf4YOJtU93/P36bjv3/q9x10hGDp/H+/6G1av8//wP9u+nfTf9u+nfTv5v+3fTvpn83/btN1n8qR/xjRmT9d9O/m/7FprD/f7Wh3wMYtcdCCw39PsCt9x85YnqPdzqbUff/+/f/e3n976Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+hebsP9/MNk/e/gmz4so7P//7zaF/hvoH7X031D/qKX/RvpHLf031j9q6b+J/lFL/zfrH7X031T/qKX/ZvpHLf031z9q6f8W/aOW/lvoH7X031L/qKX/W/WPWvpvpX/U0n9r/aOW/tvoH7X031b/qKX/2/SPWvpvp3/U0n97/aOW/jvoH7X031H/qKX/TvpHLf131j9q6b+L/lFL/131j1r6v13/qKX/bvpHLf131z9q6b+H/lFL/z31j1r676V/1NL/HfpHLf331j9q6b+P/lFL/331j1r6v1P/qKX/fvpHLf331z9q6X+A/lFL/wP1j1r6H6R/1NL/YP2jlv6H6B+19H+X/lFL/3frH7X0P1T/qKX/YfpHLf0P1z9q6f8e/aOW/u/VP2rp/z79o5b+79c/aul/hP5RS/8P6B+19D9S/6il/1H6Ry39j9Y/aul/jP5RS/8P6h+19P+Q/lFL/w/rH7X0/4j+UUv/Y8v6j57G7Vr6H1fWf1q19P+o/lFL/+P1j1r6f0z/qKX/CfpHLf0/rn/U0v8T+kct/U/UP2rpf5L+UUv/k/WPWvqfon/U0v+T+kct/T+lf9TS/9P6Ry39P6N/1NL/VP2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS/+z9Y9a+p+jf9TS/1z9o5b+n9U/aul/nv5RS//P6R+19D9f/6il/+f1j1r6f0H/qKX/F/WPWvpfoH/U0v9L+kct/b+sf9TS/0L9o5b+F+kftfS/WP+opf9X9I9a+n9V/6il/9f0j1r6X6J/1NL/Uv2jlv6X6R+19P+6/lFL/8v1j1r6X6F/1NL/Sv2jlv5X6R+19P+G/lFL/2/qH7X0/5b+UUv/q/WPWvpfo3/U0v/b+kct/a/VP2rp/x39o5b+39U/aul/nf5RS//r9Y9a+n9P/6il/w36Ry39b9Q/aun/ff2jlv436R+19L9Z/6il/y36Ry39b9U/aul/m/5RS//b9Y9a+v9A/6il/x36Ry39f6h/1NL/R/pHLf1/rH/U0v9O/aOW/j/RP2rp/1P9o5b+P9M/aul/l/5RS/+f6x+19P+F/lFL/7v1j1r6/1L/qKX/r/SPWvrfo3/U0v/X+kct/X+jf9TS/7f6Ry39f6d/1NL/Xv2jlv6/1z9q6f8H/aOW/vfpH7X0/6P+UUv/+/WPWvr/Sf+opf8Dvf1nmtqNLf3/3Nt/qlr6P6h/1NL/L/pHLf0f0j9q6f9X/aOW/g/rH7X0/5v+UUv/v+sftfT/h/5RSf9ZBvpHJf0Hj+oftfR/TP+opf/j+kct/cfqH5X0HzbQP2rpP0z/qKX/cP2jlv4j9I9a+o/UP2rpP0r/qKX/aP2jlv4z6R+19J9Z/6il/yz6Ry39Z9U/aun/DP2jlv6z6R+19J9d/6il/xz6Ry39n6l/1NJ/Tv2jlv5z6R+19J9b/6il/7P0j1r6z6N/1NL/2fpHLf2fo3/U0v+5+kct/efVP2rp/zz9o5b+8+kftfR/vv5RS/8XFPc/fCq3tfR/YXH/qWnpP7/+UUv/F+kftfQfo3/U0n8B/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6b+o/lFL/8X0j1r6L65/1NL/xfpHLf1fon/U0v+l+kct/ZfQP2rpv6T+UUv/pdr7PzJ2vMmubum/dHv/KWjpv4z+UUv/ZfWPWvovp3/U0n95/aOW/i/TP2rp/3L9o5b+K+gftfRfUf+opf9K+kct/VfWP2rp/wr9o5b+q+gftfR/pf5RS/9X6R+19H916j/yPziup6mW/qta/1FL/9X0j1r6r65/1NJ/Df2jlv6v0T9q6b+m/lFL/7X0j1r6r61/1NJ/Hf2jlv7r6h+19F9P/6il/2v1j1r6v07/qKX/+vpHLf1fr3/U0v8N+kct/d+of9TS/036Ry39N9A/aum/of5RS/+N9I9a+m+sf9TSfxP9o5b+b9Y/aum/qf5RS//N9I9a+m+uf9TS/y36Ry39t9A/aum/pf5RS/+36h+19N9K/6il/9b6Ry39t9E/aum/rf5RS/+36R+19N9O/6il//b6Ry39d9A/aum/o/5RS/+d9I9a+u+sf9TSfxf9o5b+u+oftfR/u/5RS//d9I9a+u+uf9TSfw/9o5b+e+oftfTfa8r9Z/mPjOtpqqX/O6z/qKX/3vpHLf330T9q6b+v/lFL/3fqH7X030//qKX//vpHLf0P0D9q6X+g/lFL/4P0j1r6H6x/1NL/EP2jlv7v0j9q6f9u/aOW/ofqH7X0P6yt/zT+VkNL/8Pb+k+jlv7v0T9q6f9e/aOW/u/TP2rp/379o5b+R+gftfT/gP5RS/8j9Y9a+h+lf9TS/2j9o5b+x+gftfT/oP5RS/8P6R+19P+w/lFL/4/oH7X0P1b/qKX/cfpHLf0/qn/U0v94/aOW/h/TP2rpf4L+UUv/j+sftfT/hP5RS/8T9Y9a+p+kf9TS/2T9o5b+p+gftfT/pP5RS/9P6R+19P+0/lFL/8/oH7X0P1X/qKX/afpHLf1P1z9q6X+G/lFL/zP1j1r6n6V/1NL/bP2jlv7n6B+19D9X/6il/2f1j1r6n6d/1NL/c/pHLf3P1z9q6f95/aOW/l/QP2rp/0X9o5b+F+gftfT/kv5RS/8v6x+19L9Q/6il/0X6Ry39L9Y/aun/Ff2jlv5f1T9q6f81/aOW/pfoH7X0v1T/qKX/ZfpHLf2/rn/U0v9y/aOW/lfoH7X0v1L/qKX/VfpHLf2/oX/U0v+b+kct/b+lf9TS/2r9o5b+1+gftfT/tv5RS/9r9Y9a+n9H/6il/3f1j1r6X6d/1NL/ev2jlv7f0z9q6X+D/lFL/xv1j1r6f1//qKX/TfpHLf1v1j9q6X+L/lFL/1v1j1r636Z/1NL/dv2jlv4/0D9q6X+H/lFL/x8OBoPR02tMT2Mt/X9k/Uct/X+sf9TS/079o5b+P9E/aun/U/2jlv4/0z9q6X+X/lFL/5/rH7X0/4X+UUv/u/WPWvr/Uv+opf+v9I9a+t+jf9TS/9f6Ry39f6N/1NL/t/pHLf1/p3/U0v9e/f9pzn+eben/e/2jlv5/0D9q6X+f/lFL/z/qH7X0v1//qKX/n/SPWvo/oH/U0v/P+kct/R/UP2rp/xf9o5b+D+kftfT/q/5RS/+H9Y9a+v9N/6il/9/1j1r6/0P/qKX/I/pHLf0f1T9q6f+Y/lFL/8f1j1r6j9U/Kun/xFn9n6ql/zD9o5b+w/WPWvqP0D9q6T9S/6il/yj9o5b+o/WPWvrPpH/U0n9m/aOW/rPoH7X0n1X/qKX/M/SPWvrPpn/U0n92/aOW/nPoH7X0f6b+UUv/OfWPWvrPpX/U0n9u/aOW/s/SP2rpP4/+UUv/Z+sftfR/jv5RS//n6h+19J9X/6il//P0j1r6z6d/1NL/+fpHLf1foH/U0v+F+kct/efXP2rp/yL9o0n7Dxs2GMyo/cfoH7Ws/wX0j1r6L6h/1NJ/If2jlv4L6x+19F9E/6il/6L6Ry39F9M/aum/uP5RS/8X6x+19H+J/lFL/5fqH7X0X0L/qKX/kvpHLf2X0j9q6b+0/lFL/2X0j1r6L6t/1NJ/Of2jlv7L6x+19H+Z/lFL/5frH7X0X0H/qKX/ivpHLf1X0j9q6b+y/lFL/1foH7X0X0X/qKX/K/WPWvq/Sv+opf+r9Y9a+q+qf9TSf7Up9J976f/UwJ6eWvqvbv1HLf3X0D9q6f8a/aOW/mvqH7X0X0v/qKX/2vpHLf3X0T9q6b+u/lFL//X0j1r6v1b/qKX/6/SPWvqvr3/U0v/1+kct/d+gf9TS/436Ry3936R/1NJ/A/2jlv4b6h+19N9I/6il/8b6Ry39N9E/aun/Zv2jlv6b6h+19N9M/6il/+b6Ry3936J/1NJ/C/2jlv5b6h+19H+r/lFL/630j1r6b61/1NJ/G/2jlv7b6h+19H+b/lFL/+30j1r6b69/1NJ/B/2jlv476h+19N9J/6il/876Ry39d9E/aum/q/5RS/+36x+19N9N/6il/+76Ry3999A/aum/p/5RS/+99I9a+r9D/6il/976Ry3999E/aum/r/5RS/936h+19N9P/6il//76Ry39D9A/aul/oP5RS/+D9I9a+h+sf9TS/xD9o5b+79I/aun/bv2jlv6H6h+19D9M/6il/+H6Ry3936N/1NL/vfpHLf3fp3/U0v/9+kct/Y/QP2rp/wH9o5b+R+oftfQ/Sv+opf/R+kct/Y/RP2rp/0H9o5b+H9I/aun/Yf2jlv4f0T9q6X+s/lFL/+P0j1r6f1T/qKX/8fpHLf0/pn/U0v8E/aOW/h/XP2rp/4my/odN43Yt/U8s6z+tWvqfpH/U0v9k/aOW/qfoH7X0/6T+UUv/T+kftfT/tP5RS//P6B+19D9V/6il/2n6Ry39T9c/aul/hv5RS/8z9Y9a+p+lf9TS/2z9o5b+5+gftfQ/V/+opf9n9Y9a+p+nf9TS/3P6Ry39z9c/aun/ef2jlv5f0D9q6f9F/aOW/hfoH7X0/5L+UUv/L+sftfS/UP+opf9F+kct/S/WP2rp/xX9o5b+X9U/aun/Nf2jlv6X6B+19L9U/6il/2X6Ry39v65/1NL/cv2jlv5X6B+19L9S/6il/1X6P8n8E05b+n9D/6il/zf1j1r6f0v/qKX/1fpHLf2v0T9q6f9t/aOW/tfqH7X0/47+UUv/7+oftfS/Tv+opf/1+kct/b+nf9TS/wb9o5b+N+oftfT/vv5RS/+b9I9a+t+sf9TS/xb9o5b+t+oftfS/Tf+opf/t+kct/X+gf9TS/46h/jNPp3E9TbX0/6H1H7X0/5H+UUv/H+sftfS/U/+opf9P9I9a+v9U/6il/8/0j1r636V/1NL/5/pHLf1/oX/U0v9u/aOW/r/UP2rp/yv9o5b+9+gftfT/tf5RS//f6B+19P+t/lFL/9/pH7X0v1f/qKX/7/WPWvr/Qf+opf99+kct/f+of9TS/379o5b+f9I/aun/gP5RS/8/6x+19H9Q/6il/1/0j1r6P6R/1NL/r/pHLf0f1j9q6f83/aOW/n/XP2rp/w/9o5b+j+gftfR/VP+opf9j+kct/R/XP2rpP1b/qKT/iIH+UUv/YfpHLf2H6x+19B+hf9TSf6T+UUv/UfpHLf1H6x+19J9J/6il/8z6Ry39Z9E/auk/q/5RS/9n6B+19J9N/6il/+z6Ry3959A/aun/TP2jlv5z6h+19J9L/6il/9z6Ry39n6V/1NJ/Hv2jlv7P1j9q6f8c/aOW/s/VP2rpP6/+UUv/5+kftfSfT/+opf/z9Y9a+r9A/6il/wv1j1r6z69/1NL/RfpHLf3H6B+19F9A/6il/4L6Ry39F9I/aum/sP5RS/9F9I9a+i+qf9TSfzH9o5b+i+sftfR/sf5RS/+X6B+19H+p/lFL/yX0j1r6L6l/1NJ/Kf2jlv5L6x+19F9G/6il/7L6Ry39l9M/aum/vP5RS/+X6R+19H+5/lFL/xX0j1r6r6h/1NJ/pd7+M03txpb+K/f2n6qW/q/QP2rpv4r+UUv/V+oftfR/lf5RS/9X6x+19F9V/6il/2r6Ry39V9c/aum/hv5RS//X6B+19F9T/6il/1r6Ry3919Y/aum/jv5RS/919Y9a+q+nf9TS/7X6Ry39X6d/1NJ/ff2jlv6v1z9q6f8G/aOW/m/UP2rp/yb9o5b+G+gftfTfUP+opf9G+kct/TfWP2rpv4n+UUv/N+sftfTfVP+opf9m+kfj+888mNH7b65/1LL+36J/1NJ/C/2jlv5b6h+19H+r/lFL/630j1r6b61/1NJ/G/2jlv7b6h+19H+b/lFL/+30j1r6b69/1NJ/B/2jlv476h+19N9J/6il/876Ry39d9E/aum/q/5RS/+36x+19N9N/6il/+76Ry3999A/aum/p/5RS/+99I9a+r9D/6il/976Ry3999E/aum/r/5RS/936h+19N9P/6il//76Ry39D9A/aul/oP5RS/+D9I9a+h+sf9TS/xD9o5b+79I/aun/bv2jlv6H6h+19D9M/6il/+H6Ry3936N/1NL/vfpHLf3fp3/U0v/9+kct/Y/Qf8jYsZNcaOn/Af2jlv5H6h+19D9K/6il/9H6Ry39j9E/aun/Qf2jlv4f0j9q6f9h/aOW/h/RP2rpf6z+UUv/4/SPWvp/VP+opf/x+kct/T+mf9TS/wT9o5b+H9c/aun/Cf2jlv4n6h+19D9J/6il/8n6Ry39T9E/aun/Sf2jlv6f0j9q6f9p/aOW/p/RP2rpf6r+UUv/0/SPWvqfrn/U0v8M/aOW/mfqH7X0P0v/qKX/2fpHLf3P0T9q6X+u/lFL/8/qH7X0P0//qKX/5/SPWvqfr3/U0v/z+kct/b+gf9TS/4v6Ry39L9A/aun/Jf2jlv5f1j9q6X+h/lFL/4v0j1r6X6x/1NL/K/pHLf2/qn/U0v9r+kct/S/RP2rpf6n+UUv/y/SPZuT+q/3z2hFf1z+akftPuv4v1z9q6X+F/lFL/yv1j1r6X6V/1NL/G/pHLf2/qX/U0v9b+kct/a/WP2rpf43+UUv/b+sftfS/Vv+opf939I9a+n9X/6il/3X6Ry39r9c/aun/Pf2jlv436B+19L9R/6il//f1j1r636R/1NL/Zv2jlv636B+19L9V/6il/236Ry39b9c/aun/A/2jlv536B+19P+h/lFL/x/pHw31Hz3h8oza/8f6Ry3r/079o5b+P9E/aun/U/2jlv4/0z9q6X+X/lFL/5/rH7X0/4X+UUv/u/WPWvr/Uv+opf+v9I9a+t+jf9TS/9f6Ry39f6N/1NL/t/pHLf1/p3/U0v9e/aOW/r/XP2rp/wf9o5b+9+kftfT/o/5RS//79Y9a+v9J/6il/wP6Ry39/6x/1NL/Qf2jlv5/0T9q6f+Q/lFL/7/qH7X0f1j/qKX/3/SPWvr/Xf+opf8/9I9a+j+if9TS/1H9oxm3/93XTHLtiMf0j2bc/k9e/4/rH7X0H6t/VNJ/5ED/qKX/MP2jlv7D/8f+I/5vx/U01dJ/hPUftfQfqX/U0n+U/lFL/9H6Ry39Z9I/Kug/Mbv+T1XQf5yRs+gftfSfVf+opf8z9I9a+s+mf9TSf3b9o5b+c+gftfR/pv5RS/859Y9a+s+lf9TSf279o5b+z9I/auk/j/5RS/9n6x+19H+O/lFL/+fqH7X0n1f/qKX/8/SPWvrPp3/U0v/5+kct/V+gf9TS/4X6Ry3959c/aun/Iv2jlv5j9I9a+i+gf9TSf0H9o5b+C+kftfRfWP+opf8i+kct/RfVP2rpv5j+UUv/xfWPWvq/WP+opf9L9I9a+r9U/6il/xL6Ry39l9Q/aum/lP5RS/+l9Y9a+i+jf9TSf1n9o5b+y+kftfRfXv9oBu4/yyTXjnyZ/tEM3P9J6//l+kfj++834dKM238F/aOW9b+i/lFL/5X0j1r6r6x/1NL/FTX9Z/6Xtm7pv0pN/39NS/9X6h+19H+V/lFL/1frH7X0X1X/qKX/avpHLf1X1z9q6b+G/lFL/9foH7X0X1P/qKX/WvpHLf3X1j9q6b+O/lFL/3X1j1r6r6d/1NL/tfpHLf1fp3/U0n99/aOW/q/XP2rp/wb9o5b+b9Q/aun/Jv2jlv4b6B+19N9Q/6il/0b6Ry39N9Y/aum/if5RS/836x+19N9U/6il/2b6Ry39N9c/aun/Fv2jlv5b6B+19N9S/6il/1v1j1r6b6V/1NJ/a/2jlv7b6B+19N9W/2jkYDBo6P82/aOW9b+d/lFL/+31j1r676B/1NJ/R/2jlv476R+19N9Z/6il/y76Ry39d9U/aun/dv2jlv676R+19N9d/6il/x76Ry3999Q/aum/l/5RS/936B+19N9b/6il/z76Ry3999U/aun/Tv2jlv776R+19N9f/6il/wH6Ry39D9Q/aul/kP5RS/+D9Y9a+h+if9TS/136Ry39361/1NL/UP2jlv6H6R+19D9c/6il/3v0j1r6vzf0X/o/Oa6nqZb+77P+o5b+79c/aul/hP5RS/8P6B+19D9S/6il/1H6Ry39j9Y/aul/jP5RS/8P6h+19P+Q/lFL/w/rH7X0/4j+UUv/Y/WPWvofp3/U0v+j+kct/Y/XP2rp/zH9o5b+J+gftfT/uP5RS/9P6B+19D9R/6il/0n6Ry39T9Y/eqL/7IPBYAbvf4r+Ucv6/6T+UUv/T+kftfT/tP5RS//P6B+19D9V/6il/2n6Ry39T9c/aul/hv5RS/8z9Y9a+p+lf9TS/2z9o5b+5+gftfQ/V/+opf9n9Y9m5P4z//PakefpH83I/Sdd/5/TP2rpf77+UUv/z+sftfT/gv5RS/8v6h+19L9A/6il/5f0j1r6f1n/qKX/hfpHLf0v0j9q6X+x/lFL/6/oH7X0/6r+UUv/r+kftfS/RP+opf+l+kct/S/TP2rp/3X9o5b+l+sftfS/Qv+opf+V+kct/a/SP2rp/w39o5b+39Q/aun/Lf2jlv5X6x+19L9G/6il/7f1j1r6X6t/1NL/O/pHLf2/q3/U0v86/aOW/tfrH7X0/57+UUv/G/SPWvrfqH/U0v/7+kct/W/SP2rpf7P+UUv/W/SPWvrfWtf/9rHTslVL/9vq+k+blv636x+19P+B/lFL/zv0j1r6/1D/qKX/j/SPWvr/WP+opf+d+kct/X+if9TS/6f6Ry39f6Z/1NL/Lv2jlv4/1z9q6f8L/aOW/nfrH7X0/6X+UUv/X+kftfS/R/+opf+v9Y9a+v9G/6il/2/1j1r6/07/qKX/vfpHLf1/r3/U0v8P+kct/e/TP2rp/0f9o5b+9+sftfT/k/5RS/8H9I9a+v9Z/6il/4P6Ry39/6J/1NL/If2jlv5/1T9q6f+w/lFL/7/pH7X0/7v+UUv/f+gftfR/RP+opf+j+kct/R/TP2rp/7j+UUv/sfpHJf1HDfSPWvoP0z9q6T9c/6il/wj9o5b+I/WPWvqP0j9q6T9a/6il/0z6Ry39Z9Y/auk/i/5RS/9Z9Y9a+j9D/6il/2z6RxP7bzFsMJiB+8+uf9Sy/ufQP2rp/0z9o5b+c+oftfSfS/+opf/c+kct/Z+lf9TSfx79o5b+z9Y/aun/HP2jlv7P1T9q6T+v/lFL/+fpH7X0n0//qKX/8/WPWvq/QP+opf8L9Y9a+s+vf9TS/0X6Ry39x+gftfRfQP9oBu+/8tLjz45aUP9oBu8/ZNRC+kct/RfWP2rpv4j+UUv/RfWPWvovpn/U0n9x/aOW/i/WP2rp/xL9o5b+L9U/aum/hP5RS/8l9Y9a+i+lf9TSf2n9o5b+y+gftfRfVv+opf9y+kct/ZfXP2rp/zL9o5b+L9c/aum/gv5RS/8V9Y9a+q+kf9TSf2X9o5b+r9A/aum/iv5RS/9X6h+19H+V/lFL/1frH7X0X1X/qKX/avpHLf1X1z9q6b+G/lFL/9foH7X0X1P/qKX/WvpHLf3X1j9q6b+O/lFL/3X1j1r6r6d/1NL/tfpHLf1fp3/U0n99/aOW/q/XP2rp/wb9o5b+b9Q/aun/Jv2jlv4b6B+N63/bYDCY0ftvqH/Usv430j9q6b+x/lFL/030j1r6v1n/qKX/pvpHLf030z9q6b+5/lFL/7foH7X030L/qKX/lvpHLf3fqn/U0n8r/aOW/lvrH7X030b/qKX/tvpHLf3fpn/U0n87/aOW/tvrH7X030H/qKX/jvpHLf130j9q6b+z/lFL/130j1r676p/1NL/7fpHLf130z9q6b+7/lFL/z30j1r676l/1NJ/L/2jlv7v0D9q6b+3/lFL/330j1r676t/1NL/nfpHLf330z9q6b+//lFL/wP0j1r6H6h/1NL/IP2jlv4H6x+19D9E/6il/7v0j1r6v1v/qKX/ofpHLf0P0z9q6X+4/lFL//foH7X0f6/+UUv/9+kftfR/v/5RS/8j9I9a+n9A/6il/5H6Ry39j9I/aul/tP5RS/9j9I9a+n9Q/6il/4f0j1r6f1j/qKX/R/SPWvofq3/U0v84/aOW/h/VP2rpf3xf/7HT8nhb+n+sr/80ael/gv5RS/+P6x+19P+E/lFL/xP1j1r6n6R/1NL/ZP2jlv6n6B+19P+k/lFL/0/pH7X0/7T+UUv/z+gftfQ/Vf+opf9p+kct/U/XP2rpf4b+UUv/M/WPWvqfpX/U0v9s/aOW/ufoH7X0P1f/qKX/Z/WPWvqfp3/U0v9zVf3XPWpat2zpf35V/2nX0v/z+kct/b+gf9TS/4v6Ry39L9A/aun/Jf2jlv5f1j9q6X+h/lFL/4v0j1r6X6x/1NL/K/pHLf2/qn/U0v9r+kct/S/RP2rpf6n+UUv/y/SPWvp/Xf+opf/l+kct/a/QP2rpf6X+UUv/q/SPWvp/Q/+opf839Y9a+n9L/6il/9X6Ry39r9E/aun/bf2jlv7X6h+19P+O/lFL/+/qH7X0v07/qKX/9fpHLf2/p3/U0v8G/aOW/jfqH7X0/77+UUv/m/SPWvrfrH/U0v8W/aOW/rfqH7X0v03/qKX/7fpHLf1/oH/U0v8O/aOW/j/UP2rp/yP9o5b+P9Y/aul/p/5RS/+f6B+19P+p/lFL/5/pH7X0v0v/qKX/z/WPWvr/Qv+opf/d+kct/X+pf9TS/1f6Ry3979E/aun/a/2jlv6/0T9q6f9b/aOW/r/TP2rpf6/+UUv/3+sftfT/g/5RS//79I9a+v9R/6il//36Ry39/6R/1NL/Af2jlv5/1j9q6f+g/lFL/7/oH7X0f0j/qKX/X/WPWvo/rH/U0v9v+kct/f+uf9TS/x/6Ry39H9E/aun/qP5RS//H9I9a+j+uf9TSf6z+UUn/0QP9o5b+w/SPWvoP1z9q6T9C/6il/0j9o5b+o/SPWvqP1j9q6T+T/lFL/5n1j1r6z6J/1NJ/Vv2jlv7P0D9q6T+b/lFL/9n1j1r6z6F/1NL/mfpHLf3n1D9q6T+X/lFL/7n1j1r6P0v/qKX/PPpHLf2frX/U0v85+kct/Z+rf9TSf179o5b+z6vrf9g0bdXSf766/tOmpf/z9Y9a+r9A/6il/wv1j1r6z69/1NL/RfpHLf3H6B+19F9A/6il/4L6Ry39F9I/aum/sP5RS/9F9I9a+i+qf9TSfzH9o5b+i+sftfR/sf5RS/+X6B+19H+p/lFL/yX0j1r6L6l/1NJ/Kf2jlv5L6x+19F9G/6il/7L6RxP7nz9j919O/6hl/S+vf9TS/2X6Ry39X65/1NJ/Bf2jlv4r6h+19F9J/6il/8r6Ry39X6F/1NJ/Ff2jlv6v1D9q6f8q/aOW/q/WP2rpv6r+UUv/1fSPWvqvrn/U0n8N/aOW/q/RP2rpv6b+UUv/tfSPWvqvrX/U0n8d/aOW/uvqH7X0X0//qKX/a/WPWvq/Tv+opf/6+kct/V+vf9TS/w36Ry3936h/1NL/TfpHLf030D9q6b+h/lFL/430j1r6b6x/1NJ/E/2jlv5v1j9q6b+p/lFL/830j1r6b65/1NL/LfpHLf230D9q6b+l/lFL/7fqH7X030r/qKX/1vpHLf230T9q6b+t/lFL/7fpH7X0307/qKX/9vpHLf130D9q6b+j/lFL/530j1r676x/9M/+Y8dO77H8W0yh/y76Ry3rf1f9o5b+b9c/aum/m/5RS//d9Y9a+u+hf9TSf0/9o5b+e+kftfR/h/5RS/+99Y9a+u+jf9TSf1/9o5b+79Q/aum/n/5RS//99Y9a+h+gf9TS/0D9o5b+B+kftfQ/WP+opf8h+kct/d+lf9TS/936Ry39D9U/aul/mP5RS//D9Y9a+r9H/6il/3v1j1r6v0//qKX/+/WPWvofoX/U0v8D+kct/Y/UP2rpf5T+UUv/o/WPWvofo3/U0v+D+kct/T+kf9TS/8P6Ry39P6J/1NL/WP2jlv7H6R+19P+o/lFL/+P1j1r6f0z/qKX/CfpHLf0/rn/U0v8T+kct/U/UP2rpf5L+UUv/k/WPWvqfon/U0v+T+kct/T+lf9TS/9P6Ry39P6N/1NL/VP2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS/+z9Y9a+p+jf9TS/1z9o5b+n9U/aul/nv5RS//P6R+19D9f/6il/+f1j1r6f0H/qKX/F/WPWvpfoH/U0v9L+kct/b+sf9TS/0L9o5b+F+kftfS/WP+opf9X9I9a+n9V/6il/9f0j1r6X6J/1NL/Uv2jlv6X6R+19P+6/lFL/8v1j1r6X6F/1NL/Sv2jlv5X6R+19P+G/lFL/2/qH7X0/5b+UUv/q/WPWvpfo3/U0v/b+kct/a/VP2rp/x39o5b+39U/aul/nf5RS//r9Y9a+n9P/6il/w36Ry39b9Q/aun/ff2jlv436R+19L9Z/6il/y36Ry39b9U/aul/m/5RS//b9Y9a+v9A/6il/x36Ry39fzh5/yX+w+N6mmrp/yPrP2rp/2P9o5b+d+oftfT/if5RS/+f6h+19P+Z/lFL/7v0j1r6/1z/qKX/L/SPWvrfrX/U0v+X+kct/X+lf9TS/x79o5b+v9Y/aun/G/2jlv6/1T9q6f+78f09BSbT0v9e6z9q6f97/aOW/n/QP2rpf5/+UUv/P+oftfS/X/+opf+f9I9a+j+gf9TS/8/6Ry39H9Q/aun/F/2jlv4P6R+19P+r/lFL/4f1j1r6/03/qKX/3/WPWvr/Q/+opf8j+kct/R/VP2rp/5j+UUv/x/WPWvqP1T8q6T/TQP+opf8w/aOW/sP1j1r6j9A/auk/Uv+opf8o/aOW/qP1j1r6z6R/1NJ/Zv2jlv6z6B+19J9V/6il/zP0j1r6z6Z/1NJ/dv2jlv5z6B+19H+m/lFL/zn1j1r6z6V/1NJ/bv2jlv7P0j9q6T+P/lFL/2frH7X0f47+UUv/5+oftfSfV/+opf/z9I9a+s+nf9TS//n6Ry39X6B/1NL/hfpHLf3n1z9q6f8i/aOW/mP0j1r6L6B/1NJ/Qf2jlv4L6R+19F9Y/6il/yL6Ry39F9U/aum/mP5RS//F9Y9a+r9Y/6il/0v0j1r6v1T/qKX/EvpHLf2X1D9q6b+U/lFL/6X1j1r6L6N/1NJ/Wf2jlv7L6R+19F9e/6il/8v0j1r6v1z/qKX/CvpHLf1XnIb+D8zxfzmwp6eW/itZ/1FL/5X1j1r6v0L/qKX/KvpHLf1fqX/U0v9V+kct/V+tf9TSf1X9o5b+q+kftfRfXf+opf8a+kct/V+jf9TSf039o5b+a+kftfRfW/+opf86+kct/dfVP2rpv57+UUv/1+oftfR/nf5RS//19Y9a+r9e/6il/xv0j1r6v1H/qKX/m/SPWvpvoH/U0n9D/aOW/hvpH7X031j/qKX/JvpHLf3frH/U0n9T/aOW/pvpH7X031z/qKX/W/SPWvpvoX/U0n9L/aOW/m/VP2rpv5X+UUv/rfWPWvpvo3/U0n9b/aOW/m/TP2rpv53+UUv/7fWPWvrvoH/U0n9H/aOW/jvpH7X031n/qKX/LvpHLf131T9q6f92/aOW/rvpH7X0313/qKX/HvpHLf331D9q6b+X/lFL/3foH7X031v/qKX/PvpHLf331T9q6f9O/aOW/vvpH7X031//qKX/AfpHLf0P1D9q6X+Q/lFL/4P1j1r6H6J/1NL/XfpHLf3frX/U0v9Q/aOW/ofpH7X0P1z/qKX/e/SPWvq/V/+opf/79I9a+r9f/6il/xH6Ry39P6B/1NL/SP2jlv5H6R+19D9a/6il/zH6Ry39P6h/1NL/Q/pHLf0/rH/U0v8j+kct/Y+N/R8bO95/bnhPNy39j7P+o5b+H9U/aul/vP5RS/+P6R+19D9B/6il/8f1j1r6f0L/qKX/ifpHLf1P0j9q6X+y/lFL/1P0j1r6f1L/qKX/p/SPWvp/Wv+opf9n9I9a+p+qf9TS/zT9o5b+p+sftfQ/Q/+opf+Z+kct/c/SP2rpf7b+UUv/c/SPWvqfq3/U0v+z+kct/c/TP2rp/zn9o5b+5+sftfT/vP5RS/8v6B+19P+i/lFL/wv0j1r6f0n/qKX/l/WPWvpfqH/U0v8i/aOW/hfrH7X0/4r+UUv/r+oftfT/mv5RS/9L9I9a+l+qf9TS/zL9o5b+X9c/aul/uf5RS/8r9I9a+l+pf9TS/yr9o5b+39A/aun/Tf2jlv7f0j9q6X+1/lFL/2v0j1r6f1v/qKX/tfpHLf2/o3/U0v+7+kct/a/TP2rpf73+UUv/7+kftfS/Qf+opf+N+kct/b+vf9TS/yb9o5b+N+sftfS/Rf+JZp7kfEv/W/WPWvrfpn/U0v92/aOW/j/QP2rpf4f+UUv/H+oftfT/kf5RS/8f6x+19L9T/6il/0/0j1r6/1T/qKX/z/SPWvrfpX/U0v/n+kct/X+hf9TS/279o5b+v9Q/aun/K/2jlv736B+19P+1/lFL/9/oH7X0/63+UUv/3+kftfS/V/+opf/v9Y9a+v9B/6il/336Ry39/6h/1NL/fv2jlv5/0j9q6f+A/lFL/z/rH7X0f1D/qKX/X/SPWvo/pH/U0v+v+kct/R/WP2rp/zf9o5b+f9c/aun/D/2jlv6P6B+19H9U/6il/2P6Ry39H9c/auk/Vv+opP8Th7zW/6la+g/TP2rpP1z/qKX/CP2jlv4j9Y9a+o/SP2rpP1r/qKX/TPpHLf1n1j9q6T+L/lFL/1n1j1r6P0P/qKX/bPpHLf1n1z9q6T+H/lFL/2fqH7X0n1P/qKX/XPpHLf3n1j9q6f8s/aOW/vPoH7X0f7b+UUv/5+gftfR/rv5RS/959Y9a+j9P/6il/3z6Ry39n69/1NL/BfpHLf1fqH/U0n9+/aOW/i/SP2rpP0b/qKX/AvpHLf0X1D9q6b+Q/lFL/4X1j1r6L6J/1NJ/Uf2jlv6L6R+19F9c/6il/4v1j1r6v0T/qKX/S/WPWvovoX92WEf/JfWPWtb/UvpHLf2X1j9q6b+M/lFL/2X1j1r6L6d/1NJ/ef2jlv4vi/3/6x/t/7eW/i+3/qOW/ivoH7X0X1H/qKX/SvpHLf1X1j9q6f8K/aOW/qvoH7X0f6X+UUv/V+kftfR/tf5RS/9V9Y9a+q+mf9TSf3X9o5b+a+gftfR/jf5RS/819Y9a+q+lf9TSf239o5b+6+gftfRfV/+opf96+kct/V+rfzRZ/5mn93j+v02h/+v0j1rW//r6Ry39X69/1NL/DfpHLf3fqH/U0v9N+kct/TfQP2rpv6H+UUv/jfSPWvpvrH/U0n8T/aOW/m/WP2rpv6n+UUv/zfSPWvpvrn/U0v8t+kct/bfQP2rpv6X+UUv/t+oftfTfSv+opf/W+kct/bfRP2rpv63+UUv/t+kftfTfTv+opf/2+kct/XfQP2rpv6P+UUv/nfSPWvrvrH/U0n8X/aOW/rvqH7X0f7v+UUv/3cb3n2l6DevpqqX/7tZ/1NJ/D/2jlv576h+19N9L/6il/zv0j1r6761/1NJ/H/2jlv776h+19H+n/lFL//30j1r6769/1NL/AP2jlv4H6h+19D+ot//eI0+e8iNv6X9wb/+paul/iP5RS/936R+19H+3/lFL/0P1j1r6H6Z/1NL/cP2jlv7v0T9q6f9e/aOW/u/TP2rp/379o5b+R+gftfT/gP5RS/8j9Y9a+h+lf9TS/2j9o5b+x+gftfT/oP5RS/8P6R+19P+w/lFL/4/oH7X0P1b/qKX/cfpHLf0/qn/U0v94/aOW/h/TP2rpf4L+UUv/j+sftfT/hP5RS/8T9Y9a+p+kf9TS/2T9o5b+p+gftfT/pP5RS/9P6R+19P+0/lFL/8/oH7X0P1X/qKX/afpHLf1P1z9q6X+G/lFL/zP1j1r6n6V/1NL/bP2jlv7n6B+19D9X/6il/2f1j1r6n6d/1NL/c/pHLf3P1z9q6f95/aOW/l/QP2rp/0X9o5b+F+gftfT/kv5RS/8v6x+19L9Q/6il/0X6Ry39L9Y/aun/Ff2jlv5f1T9q6f81/aOW/pfoH7X0v1T/qKX/ZfpHLf2/rn/U0v9y/aOW/lfoH7X0v1L/qKX/VfpHLf2/oX/U0v+b+kct/b+lf9TS/2r9o5b+1+gftfT/tv5RS/9r9Y9a+n9H/6il/3f1j1r6X6d/1NL/ev2jlv7f0z9q6X+D/lFL/xv1j1r6f1//qKX/TfpHLf1v1j9q6X+L/lFL/1v1j1r636Z/1NL/dv2jlv4/0D9q6X+H/lFL/x/qH7X0/5H+UUv/H+sftfS/U/+opf9P9I9a+v9U/6il/8/0j1r636V/1NL/5/pHLf1/oX/U0v9u/aOW/r/UP2rp/yv9o5b+9+gftfT/tf5RS//f6B+19P+t/lFL/9/pH7X0v1f/qKX/7/WPWvr/Qf+opf99+kct/f+of9TS/379o5b+f9I/aun/gP5RS/8/6x+19H9Q/6il/1/0j1r6P6R/1NL/r/pHLf0f1j9q6f83/aOW/n/XP2rp/w/9o5b+j+gftfR/VP+opf9j+kct/R/XP2rpP1b/qKT/LAP9o5b+w/SPWvoP1z9q6T9C/6il/0j9o5b+o/SPWvqP1j9q6T+T/lFL/5n1j1r6z6J/1NJ/Vv2jlv7P0D9q6T+b/lFL/9n1j1r6z6F/1NL/mfpHLf3n1D9q6T+X/lFL/7n1j1r6P0v/qKX/PPpHLf2frX/U0v85+kct/Z+rf9TSf179o5b+z9M/auk/n/5RS//n6x+19H+B/lFL/xfqH7X0n1//qKX/i/SPWvqP0T9q6b+A/lFL/wX1j1r6L6R/1NJ/Yf2jlv6L6B+19F9U/6il/2L6Ry39F9c/aun/Yv2jlv4v0T9q6f9S/aOW/kvoH7X0X1L/qKX/UvpHM2r/YZP1X1r/aIbrDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANwUAAP//I98B9w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000001740)={@desc={0x1, 0x0, @auto="2d0318129479bdc2"}}) 27.554862948s ago: executing program 5 (id=3175): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x31) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000040)={0x8, 0xfffffffffffffff9}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006c40)}], 0x1}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) mkdir(0x0, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x2, 0x49, {}, {0xb289d58468e4db09, 0xc, 0x1, 0xff, 0x9, 0x3, "80322142"}, 0x6, 0x1, {0x0}, 0x7}) 18.270420047s ago: executing program 5 (id=3182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x50, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103, 0x0, {0x4}}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f0000000200)='~', 0x1) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r13, r13], 0x2, r11, r12, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) r14 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r14, &(0x7f0000000000)="170cf31f8e85bcdbb6ad484c26dfa6be3180020cc3ad083eb719a8495180e3411bca5a3904d99c037e2d8e3c1c72fa92fbc31f328a0634a228ba73fca36ab95455c2429a396c437ae822453d5dbfd246cfc6e49f4b77fbb58e3e23beae7970b5bdb6c5d6a4b76a6e910402706986d2c4da7f3cab1ec8", 0x76, 0x4000810, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r14, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) setsockopt$sock_int(r14, 0x1, 0xa, &(0x7f0000000140)=0x3, 0x4) 17.079777794s ago: executing program 2 (id=3185): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x7, @win={{0x7ff, 0x6, 0x9, 0x9}, 0x8, 0x1, 0x0, 0x4efc, 0x0, 0x2}}) pipe2(0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 16.792613868s ago: executing program 2 (id=3187): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x40000000015, 0x5, 0x0) socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f0000000100), 0x0) 16.775030769s ago: executing program 4 (id=3188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x34}}, 0x10) 16.540962438s ago: executing program 6 (id=3189): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)=0xfffffffd) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000001c0)={0x9ea0, 0x55595659, 0x3, @discrete={0x10, 0x3}}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x0) 16.419355688s ago: executing program 4 (id=3190): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x31) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000040)={0x8, 0xfffffffffffffff9}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006c40)}], 0x1}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) mkdir(0x0, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x2, 0x49, {}, {0xb289d58468e4db09, 0xc, 0x1, 0xff, 0x9, 0x3, "80322142"}, 0x6, 0x1, {0x0}, 0x7}) 16.291072349s ago: executing program 2 (id=3191): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 16.253217322s ago: executing program 6 (id=3192): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="65dae4a4c5080606dcc70e32e93e949d3f8e227275515524ff52a40ed138c40bbdbc0357c1c19d32bc88f8925daa1deb98cf7d11f1bf013f91ff635eeb6dd9680dc3934790728725f22fe1404229e5d6d9bb180936940734370b1c5bca6c07a3cc71deeef7ab58b469d06196a75d0e3edcc71fe33a1e545e432a5b6a500df20406ad192e593d9f9f503159afa28287e930b7572c38ddedd233f382beacacd8944b4508981a033a4100e5f96abe891cdd0b4ff49e0cc918818999cb5dfa778990805764"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x40000000015, 0x5, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r4, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) close_range(r3, r4, 0x0) 15.53473709s ago: executing program 2 (id=3193): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x31) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000040)={0x8, 0xfffffffffffffff9}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006c40)="324d86ee", 0x4}], 0x1}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) mkdir(0x0, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x2, 0x49, {}, {0xb289d58468e4db09, 0xc, 0x1, 0xff, 0x9, 0x3, "80322142"}, 0x6, 0x1, {0x0}, 0x7}) 14.969379217s ago: executing program 6 (id=3194): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xf5ffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 12.984774369s ago: executing program 6 (id=3195): socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x40203, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_io_uring_setup(0x38ff, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x80000}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 7.680301333s ago: executing program 4 (id=3196): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, 0x0) 7.267569326s ago: executing program 2 (id=3197): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0x1, 0x1af, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000090) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x402, &(0x7f0000000ec0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f00000002c0)=""/119, 0x77}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f000001ab00)=""/4096, 0x1000}, {&(0x7f0000000840)=""/215, 0xd7}, {&(0x7f0000000180)=""/48, 0x30}], 0x7, &(0x7f00000005c0)=""/78, 0x4e}}, {{&(0x7f0000000940)=@un=@abs, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/6, 0x6}], 0x1, &(0x7f00000009c0)=""/138, 0x8a}, 0x8482}], 0x2, 0x0, &(0x7f0000000b00)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001b00)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6.056624525s ago: executing program 6 (id=3198): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x2, @sliced={0xff63, [0x0, 0x6, 0x7, 0xa, 0x1, 0x5, 0x7, 0x8, 0x9, 0x1, 0x1, 0x6, 0x0, 0x5, 0x113, 0xbe4c, 0x3, 0x40, 0x7, 0x7, 0x401, 0x3, 0x5, 0xffff, 0x4, 0x8, 0xfff8, 0xf, 0x800, 0x6, 0x2, 0x7ff, 0x4, 0x4, 0x100, 0x2, 0xc0, 0xff, 0x8000, 0x3, 0x4, 0x7fff, 0x4c, 0x2, 0xf8ff, 0x81, 0x2, 0x7fff], 0xe6}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r2 = shmget(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) syz_usb_connect(0x0, 0x2f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xa0, 0x8a, 0x28, 0x10, 0x2692, 0x9005, 0xaa0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x2, 0x0, 0x99, 0xd0, 0xc9, 0x0, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb8, 0x4, 0xfa, 0x9, "1609f2"}]}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x34, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x34}}, 0x10) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r1, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) 5.969653762s ago: executing program 5 (id=3199): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x40000000015, 0x5, 0x0) socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f0000000100), 0x0) 4.752988582s ago: executing program 4 (id=3200): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, 0x0, 0x3, {0x2, 0xff, 0x4}, 0xfd}, 0x18) 4.40340992s ago: executing program 4 (id=3201): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 4.305806058s ago: executing program 5 (id=3202): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x6}, {0xff, 0xfc, 0x4, 0x8ba0}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008180)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0x1ff}], 0x1, 0x40000003, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, 0x0, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @mcast1, 0x7}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e25, @multicast1}, 0x2, 0x0, 0x4}}, 0x2e) 4.202238767s ago: executing program 2 (id=3203): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 4.16014847s ago: executing program 4 (id=3204): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x31) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000040)={0x8, 0xfffffffffffffff9}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006c40)="324d86", 0x3}], 0x1}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) mkdir(0x0, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x2, 0x49, {}, {0xb289d58468e4db09, 0xc, 0x1, 0xff, 0x9, 0x3, "80322142"}, 0x6, 0x1, {0x0}, 0x7}) 0s ago: executing program 6 (id=3205): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000600)=""/105, 0x69}, 0x91}], 0x1, 0x102, 0x0) kernel console output (not intermixed with test programs): 60][T16763] syzkaller0: entered promiscuous mode [ 1632.588410][T16763] syzkaller0: entered allmulticast mode [ 1633.934637][T16011] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1633.953077][T16011] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1633.966238][T16011] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1637.062145][T16793] loop4: detected capacity change from 0 to 40427 [ 1637.183515][T16793] F2FS-fs (loop4): invalid crc value [ 1637.405408][T16793] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1637.457219][T16793] F2FS-fs (loop4): Start checkpoint disabled! [ 1637.497430][T16793] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1637.554115][T16801] syzkaller0: entered promiscuous mode [ 1637.670469][T16801] syzkaller0: entered allmulticast mode [ 1637.814308][ T28] audit: type=1800 audit(1754591846.423:4562): pid=16793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2750" name="bus" dev="loop4" ino=14 res=0 errno=0 [ 1637.869570][T16793] bio_check_eod: 182 callbacks suppressed [ 1637.869588][T16793] syz.4.2750: attempt to access beyond end of device [ 1637.869588][T16793] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1637.893607][T16793] syz.4.2750: attempt to access beyond end of device [ 1637.893607][T16793] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1637.909075][T16793] syz.4.2750: attempt to access beyond end of device [ 1637.909075][T16793] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1637.924358][T16793] syz.4.2750: attempt to access beyond end of device [ 1637.924358][T16793] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1637.939248][T16793] syz.4.2750: attempt to access beyond end of device [ 1637.939248][T16793] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1637.954217][T16793] syz.4.2750: attempt to access beyond end of device [ 1637.954217][T16793] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1637.969386][T16793] syz.4.2750: attempt to access beyond end of device [ 1637.969386][T16793] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1637.985151][T16793] syz.4.2750: attempt to access beyond end of device [ 1637.985151][T16793] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1638.002203][T16793] syz.4.2750: attempt to access beyond end of device [ 1638.002203][T16793] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1638.018628][T16793] syz.4.2750: attempt to access beyond end of device [ 1638.018628][T16793] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1639.527693][T16824] loop2: detected capacity change from 0 to 4096 [ 1639.714337][T16824] ntfs3: loop2: Unsupported bytes per MFT record 8192. [ 1639.722324][T16824] ntfs3: loop2: try to read out of volume at offset 0x1ffe00 [ 1640.517686][ T1125] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1640.609653][ T1125] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1641.198887][ T1125] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1643.900518][T16860] loop2: detected capacity change from 0 to 512 [ 1643.950503][T16860] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2767: casefold flag without casefold feature [ 1644.004983][T16860] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2767: couldn't read orphan inode 15 (err -117) [ 1644.047183][T16860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1644.098068][T16868] loop6: detected capacity change from 0 to 128 [ 1644.678467][T16870] loop5: detected capacity change from 0 to 4096 [ 1644.909379][T16870] ntfs3: loop5: Unsupported bytes per MFT record 8192. [ 1644.919116][T16870] ntfs3: loop5: try to read out of volume at offset 0x1ffe00 [ 1645.176930][T16868] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1645.238734][T16868] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1646.666319][T14812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1647.386215][T11707] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1647.995866][T16896] loop5: detected capacity change from 0 to 16 [ 1648.040382][T16896] erofs: (device loop5): mounted with root inode @ nid 36. [ 1648.065393][T16896] overlayfs: missing 'lowerdir' [ 1650.627546][T16912] loop2: detected capacity change from 0 to 512 [ 1650.637114][T16914] loop4: detected capacity change from 0 to 128 [ 1650.700505][T16914] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1650.733831][T16912] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2781: casefold flag without casefold feature [ 1650.744004][T16914] ext4 filesystem being mounted at /589/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1651.077211][T16912] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2781: couldn't read orphan inode 15 (err -117) [ 1651.132401][T16912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1651.716175][ T8133] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1651.894844][T14812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1652.731114][T16935] loop5: detected capacity change from 0 to 40427 [ 1652.765571][T16938] loop6: detected capacity change from 0 to 16 [ 1654.460478][T16938] erofs: (device loop6): mounted with root inode @ nid 36. [ 1654.495738][T16937] overlayfs: missing 'lowerdir' [ 1654.507910][T16935] F2FS-fs (loop5): invalid crc value [ 1654.613998][T16935] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1654.676872][T16935] F2FS-fs (loop5): Start checkpoint disabled! [ 1654.688752][T16935] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1654.747041][ T28] audit: type=1800 audit(1754591863.353:4563): pid=16935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2790" name="bus" dev="loop5" ino=14 res=0 errno=0 [ 1654.777116][T16935] bio_check_eod: 182 callbacks suppressed [ 1654.777133][T16935] syz.5.2790: attempt to access beyond end of device [ 1654.777133][T16935] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1654.803064][T16935] syz.5.2790: attempt to access beyond end of device [ 1654.803064][T16935] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1654.819130][T16935] syz.5.2790: attempt to access beyond end of device [ 1654.819130][T16935] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1654.835936][T16935] syz.5.2790: attempt to access beyond end of device [ 1654.835936][T16935] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1654.852352][T16935] syz.5.2790: attempt to access beyond end of device [ 1654.852352][T16935] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1654.867337][T16935] syz.5.2790: attempt to access beyond end of device [ 1654.867337][T16935] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1654.882396][T16935] syz.5.2790: attempt to access beyond end of device [ 1654.882396][T16935] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1654.899473][T16935] syz.5.2790: attempt to access beyond end of device [ 1654.899473][T16935] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1654.915494][T16935] syz.5.2790: attempt to access beyond end of device [ 1654.915494][T16935] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1654.931579][T16935] syz.5.2790: attempt to access beyond end of device [ 1654.931579][T16935] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1658.361060][T16949] loop4: detected capacity change from 0 to 40427 [ 1658.393243][T16949] F2FS-fs (loop4): invalid crc value [ 1658.418510][T16949] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1658.477022][T16949] F2FS-fs (loop4): Start checkpoint disabled! [ 1658.518027][T16949] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1658.805542][ T1113] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1658.887560][ T28] audit: type=1800 audit(1754591867.423:4564): pid=16949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2792" name="bus" dev="loop4" ino=14 res=0 errno=0 [ 1658.932818][ T1113] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1658.989485][ T1113] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1660.228171][T16960] loop6: detected capacity change from 0 to 40427 [ 1660.265373][T16960] F2FS-fs (loop6): invalid crc value [ 1660.275940][T16960] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1660.336207][T16960] F2FS-fs (loop6): Start checkpoint disabled! [ 1660.373106][T16960] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1660.415534][T16960] bio_check_eod: 373 callbacks suppressed [ 1660.415552][T16960] syz.6.2796: attempt to access beyond end of device [ 1660.415552][T16960] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1660.438806][T16960] syz.6.2796: attempt to access beyond end of device [ 1660.438806][T16960] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1660.454531][T16960] syz.6.2796: attempt to access beyond end of device [ 1660.454531][T16960] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1660.470360][T16960] syz.6.2796: attempt to access beyond end of device [ 1660.470360][T16960] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1660.486268][T16960] syz.6.2796: attempt to access beyond end of device [ 1660.486268][T16960] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1660.502605][T16960] syz.6.2796: attempt to access beyond end of device [ 1660.502605][T16960] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1660.520290][T16960] syz.6.2796: attempt to access beyond end of device [ 1660.520290][T16960] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1660.537235][T16960] syz.6.2796: attempt to access beyond end of device [ 1660.537235][T16960] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1660.553351][T16960] syz.6.2796: attempt to access beyond end of device [ 1660.553351][T16960] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1660.569650][T16960] syz.6.2796: attempt to access beyond end of device [ 1660.569650][T16960] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1660.649018][ T28] audit: type=1800 audit(1754591869.013:4565): pid=16960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2796" name="bus" dev="loop6" ino=14 res=0 errno=0 [ 1660.728181][ T1103] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1660.752581][ T1103] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1660.795952][ T1103] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1662.577250][T16011] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1662.602579][T16011] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1662.632672][T16011] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1662.876590][T16981] loop4: detected capacity change from 0 to 512 [ 1662.969894][T16982] loop5: detected capacity change from 0 to 16 [ 1664.743416][T16982] erofs: (device loop5): mounted with root inode @ nid 36. [ 1664.758637][T16979] overlayfs: missing 'lowerdir' [ 1664.802595][T16981] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2797: casefold flag without casefold feature [ 1664.864260][T16981] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2797: couldn't read orphan inode 15 (err -117) [ 1665.043097][T16981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1665.836686][T16987] loop2: detected capacity change from 0 to 40427 [ 1665.868929][T16987] F2FS-fs (loop2): invalid crc value [ 1665.888028][T16987] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1665.948804][T16987] F2FS-fs (loop2): Start checkpoint disabled! [ 1665.965453][T16987] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1665.988458][ T8133] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1666.086453][ T28] audit: type=1800 audit(1754591874.683:4566): pid=16987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2805" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 1666.115472][T16987] bio_check_eod: 183 callbacks suppressed [ 1666.115490][T16987] syz.2.2805: attempt to access beyond end of device [ 1666.115490][T16987] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1666.139810][T16987] syz.2.2805: attempt to access beyond end of device [ 1666.139810][T16987] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1666.157120][T16987] syz.2.2805: attempt to access beyond end of device [ 1666.157120][T16987] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1666.172989][T16987] syz.2.2805: attempt to access beyond end of device [ 1666.172989][T16987] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1666.188889][T16987] syz.2.2805: attempt to access beyond end of device [ 1666.188889][T16987] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1666.204886][T16987] syz.2.2805: attempt to access beyond end of device [ 1666.204886][T16987] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1666.220440][T16987] syz.2.2805: attempt to access beyond end of device [ 1666.220440][T16987] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1666.236127][T16987] syz.2.2805: attempt to access beyond end of device [ 1666.236127][T16987] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1666.253546][T16987] syz.2.2805: attempt to access beyond end of device [ 1666.253546][T16987] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1666.269261][T16987] syz.2.2805: attempt to access beyond end of device [ 1666.269261][T16987] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1668.230883][ T1138] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1668.290380][ T1138] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1668.330963][ T1138] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1669.007758][T17020] No such timeout policy "syz1" [ 1669.343587][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.350032][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.282553][T17025] loop5: detected capacity change from 0 to 16 [ 1670.294416][T17025] erofs: (device loop5): mounted with root inode @ nid 36. [ 1670.314742][T17024] overlay: Unknown parameter '/' [ 1670.479751][T17027] loop6: detected capacity change from 0 to 512 [ 1670.674208][T17027] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2814: casefold flag without casefold feature [ 1670.862669][T17027] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2814: couldn't read orphan inode 15 (err -117) [ 1670.928596][T17027] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1671.130788][T17031] loop2: detected capacity change from 0 to 40427 [ 1671.150058][T17031] F2FS-fs (loop2): invalid crc value [ 1671.160497][T17031] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1671.203932][T17033] ksmbd: Unknown IPC event: 6, ignore. [ 1671.246451][T17031] F2FS-fs (loop2): Start checkpoint disabled! [ 1671.282495][T17031] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1671.417405][ T28] audit: type=1800 audit(1754591880.023:4567): pid=17031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2811" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 1671.448609][T17031] bio_check_eod: 182 callbacks suppressed [ 1671.448627][T17031] syz.2.2811: attempt to access beyond end of device [ 1671.448627][T17031] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1671.470929][T17031] syz.2.2811: attempt to access beyond end of device [ 1671.470929][T17031] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1671.486412][T17031] syz.2.2811: attempt to access beyond end of device [ 1671.486412][T17031] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1671.502042][T17031] syz.2.2811: attempt to access beyond end of device [ 1671.502042][T17031] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1671.518440][T17031] syz.2.2811: attempt to access beyond end of device [ 1671.518440][T17031] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1671.535427][T17031] syz.2.2811: attempt to access beyond end of device [ 1671.535427][T17031] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1671.552204][T17031] syz.2.2811: attempt to access beyond end of device [ 1671.552204][T17031] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1671.567647][T17031] syz.2.2811: attempt to access beyond end of device [ 1671.567647][T17031] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1671.583791][T17031] syz.2.2811: attempt to access beyond end of device [ 1671.583791][T17031] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1671.599441][T17031] syz.2.2811: attempt to access beyond end of device [ 1671.599441][T17031] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1672.723895][T11707] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1674.194700][T17059] No such timeout policy "syz1" [ 1675.031825][T17065] ksmbd: Unknown IPC event: 6, ignore. [ 1676.034631][ T1077] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1676.086056][ T1077] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1676.707026][T17083] loop6: detected capacity change from 0 to 128 [ 1676.874219][T17083] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1676.943109][T17083] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1677.706296][T11707] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1677.758488][T17090] No such timeout policy "syz1" [ 1677.860018][T17089] loop2: detected capacity change from 0 to 40427 [ 1677.951930][T17089] F2FS-fs (loop2): invalid crc value [ 1677.964765][T17089] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1678.043071][T17089] F2FS-fs (loop2): Start checkpoint disabled! [ 1678.067104][T17089] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1678.179560][T17089] bio_check_eod: 182 callbacks suppressed [ 1678.179577][T17089] syz.2.2825: attempt to access beyond end of device [ 1678.179577][T17089] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1678.204012][T17089] syz.2.2825: attempt to access beyond end of device [ 1678.204012][T17089] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1678.219810][T17089] syz.2.2825: attempt to access beyond end of device [ 1678.219810][T17089] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1678.236821][T17089] syz.2.2825: attempt to access beyond end of device [ 1678.236821][T17089] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1678.253068][T17089] syz.2.2825: attempt to access beyond end of device [ 1678.253068][T17089] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1678.269270][T17089] syz.2.2825: attempt to access beyond end of device [ 1678.269270][T17089] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1678.285259][T17089] syz.2.2825: attempt to access beyond end of device [ 1678.285259][T17089] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1678.303034][T17089] syz.2.2825: attempt to access beyond end of device [ 1678.303034][T17089] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1678.319798][T17089] syz.2.2825: attempt to access beyond end of device [ 1678.319798][T17089] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1678.338345][T17089] syz.2.2825: attempt to access beyond end of device [ 1678.338345][T17089] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1678.432370][ T28] audit: type=1800 audit(1754591886.783:4568): pid=17089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2825" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 1678.982387][T17100] loop6: detected capacity change from 0 to 40427 [ 1679.029097][T17100] F2FS-fs (loop6): invalid crc value [ 1679.067396][T17100] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1679.138112][T17100] F2FS-fs (loop6): Start checkpoint disabled! [ 1679.158555][T17100] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1679.227983][ T28] audit: type=1800 audit(1754591887.833:4569): pid=17100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2832" name="bus" dev="loop6" ino=14 res=0 errno=0 [ 1679.695243][T10405] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1679.717346][T10405] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1679.728058][T10405] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1679.937947][T17105] loop4: detected capacity change from 0 to 40427 [ 1679.984906][T17105] F2FS-fs (loop4): invalid crc value [ 1679.997155][T17105] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1680.059496][T17105] F2FS-fs (loop4): Start checkpoint disabled! [ 1680.087660][T17105] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1680.144022][ T28] audit: type=1800 audit(1754591888.753:4570): pid=17105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2833" name="bus" dev="loop4" ino=14 res=0 errno=0 [ 1680.760700][ T1088] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1680.812356][T17110] ksmbd: Unknown IPC event: 6, ignore. [ 1680.824511][ T1088] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1680.834552][ T1088] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1680.995795][T17112] syzkaller0: entered promiscuous mode [ 1681.042742][T17112] syzkaller0: entered allmulticast mode [ 1681.850196][ T1138] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1681.926873][ T1138] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1681.973509][ T1138] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1683.018464][T17135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1683.034654][T17135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1683.049294][T17135] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1683.069446][T17135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1683.084663][T17135] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1683.099558][T17135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1683.405263][T17126] fuse: Unknown parameter 'user_id00000000000000000000' [ 1684.403420][T17133] chnl_net:caif_netlink_parms(): no params data found [ 1684.973327][ T8133] bond0: (slave syz_tun): Releasing backup interface [ 1685.003434][T17154] No such timeout policy "syz1" [ 1685.193095][ T5802] Bluetooth: hci2: command tx timeout [ 1685.453363][T17157] loop6: detected capacity change from 0 to 40427 [ 1685.486537][T17157] F2FS-fs (loop6): invalid crc value [ 1685.510987][T17157] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1685.574687][T17157] F2FS-fs (loop6): Start checkpoint disabled! [ 1685.604659][T17157] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1685.667322][ T28] audit: type=1800 audit(1754591894.273:4571): pid=17157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2845" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1686.372919][ T28] audit: type=1800 audit(1754591894.973:4572): pid=17163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2845" name="bus" dev="loop6" ino=14 res=0 errno=0 [ 1686.440051][T17163] bio_check_eod: 566 callbacks suppressed [ 1686.440087][T17163] syz.6.2845: attempt to access beyond end of device [ 1686.440087][T17163] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1686.603894][T17163] syz.6.2845: attempt to access beyond end of device [ 1686.603894][T17163] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1686.621971][T17163] syz.6.2845: attempt to access beyond end of device [ 1686.621971][T17163] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1686.642798][T17163] syz.6.2845: attempt to access beyond end of device [ 1686.642798][T17163] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1686.660547][T17163] syz.6.2845: attempt to access beyond end of device [ 1686.660547][T17163] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1686.685594][T17163] syz.6.2845: attempt to access beyond end of device [ 1686.685594][T17163] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1686.702581][T17163] syz.6.2845: attempt to access beyond end of device [ 1686.702581][T17163] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1686.721093][T17163] syz.6.2845: attempt to access beyond end of device [ 1686.721093][T17163] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1686.748962][T17163] syz.6.2845: attempt to access beyond end of device [ 1686.748962][T17163] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1686.767645][T17163] syz.6.2845: attempt to access beyond end of device [ 1686.767645][T17163] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1687.109587][T17133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.269247][T17133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.413456][T17133] bridge_slave_0: entered allmulticast mode [ 1687.538518][T17133] bridge_slave_0: entered promiscuous mode [ 1687.736224][ T5802] Bluetooth: hci2: command tx timeout [ 1687.819492][T17133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.996713][T17133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.166741][T17133] bridge_slave_1: entered allmulticast mode [ 1688.361403][T17133] bridge_slave_1: entered promiscuous mode [ 1690.285529][ T5802] Bluetooth: hci2: command tx timeout [ 1690.709223][T10405] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.818767][ T58] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1690.869446][ T58] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1690.911031][ T58] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1691.018220][T17133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1691.226516][T10405] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.326529][T17133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1691.417775][T10405] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.561010][T10405] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.718901][T17133] team0: Port device team_slave_0 added [ 1691.765730][T17133] team0: Port device team_slave_1 added [ 1691.857540][T17133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1691.995792][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1692.026168][T17133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1692.045155][T17133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1692.079398][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1692.126793][T17133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1692.150357][T17178] fuse: Bad value for 'fd' [ 1692.154165][T17181] syzkaller0: entered promiscuous mode [ 1692.164194][T17181] syzkaller0: entered allmulticast mode [ 1692.372793][ T5802] Bluetooth: hci2: command tx timeout [ 1692.758745][T17133] hsr_slave_0: entered promiscuous mode [ 1692.778890][T17133] hsr_slave_1: entered promiscuous mode [ 1692.810868][T17133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1692.826535][T17133] Cannot create hsr debugfs directory [ 1693.208372][T10405] tipc: Left network mode [ 1693.730236][T17204] loop5: detected capacity change from 0 to 4096 [ 1693.808622][T17204] ntfs3: loop5: Unsupported bytes per MFT record 8192. [ 1693.817633][T17204] ntfs3: loop5: try to read out of volume at offset 0x1ffe00 [ 1695.384221][T17214] loop6: detected capacity change from 0 to 40427 [ 1695.409311][T17214] F2FS-fs (loop6): invalid crc value [ 1695.430728][T17214] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1695.495825][T17214] F2FS-fs (loop6): Start checkpoint disabled! [ 1695.514007][T17214] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1695.574740][ T28] audit: type=1800 audit(1754591904.183:4573): pid=17214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2858" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 1695.608721][T17214] bio_check_eod: 182 callbacks suppressed [ 1695.608739][T17214] syz.6.2858: attempt to access beyond end of device [ 1695.608739][T17214] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1695.631506][T17214] syz.6.2858: attempt to access beyond end of device [ 1695.631506][T17214] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1695.648955][T17214] syz.6.2858: attempt to access beyond end of device [ 1695.648955][T17214] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1695.665409][T17214] syz.6.2858: attempt to access beyond end of device [ 1695.665409][T17214] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1695.681573][T17214] syz.6.2858: attempt to access beyond end of device [ 1695.681573][T17214] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1695.697383][T17214] syz.6.2858: attempt to access beyond end of device [ 1695.697383][T17214] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1695.712885][T17214] syz.6.2858: attempt to access beyond end of device [ 1695.712885][T17214] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1695.728189][T17214] syz.6.2858: attempt to access beyond end of device [ 1695.728189][T17214] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1695.745358][T17214] syz.6.2858: attempt to access beyond end of device [ 1695.745358][T17214] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1695.761380][T17214] syz.6.2858: attempt to access beyond end of device [ 1695.761380][T17214] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1695.992512][ T28] audit: type=1800 audit(1754591904.213:4574): pid=17214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2858" name="bus" dev="loop6" ino=14 res=0 errno=0 [ 1697.826136][ T1138] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1697.843574][ T1138] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1697.850849][ T1138] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1698.222881][T17243] loop5: detected capacity change from 0 to 4096 [ 1698.755768][T17243] ntfs3: loop5: Unsupported bytes per MFT record 8192. [ 1698.763603][T17243] ntfs3: loop5: try to read out of volume at offset 0x1ffe00 [ 1700.870780][T17133] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1700.989030][T17133] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1701.110302][T17133] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1701.148739][T10405] hsr_slave_0: left promiscuous mode [ 1701.630535][T17269] loop5: detected capacity change from 0 to 40427 [ 1701.709023][T17274] loop6: detected capacity change from 0 to 4096 [ 1701.983092][T17274] ntfs3: loop6: Unsupported bytes per MFT record 8192. [ 1701.991702][T17274] ntfs3: loop6: try to read out of volume at offset 0x1ffe00 [ 1702.026679][T17269] F2FS-fs (loop5): invalid crc value [ 1702.035384][T10405] hsr_slave_1: left promiscuous mode [ 1702.074915][T17269] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1702.095787][T10405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1702.126002][T10405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1702.156438][T17269] F2FS-fs (loop5): Start checkpoint disabled! [ 1702.163781][T10405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1702.163867][T10405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1702.253526][T17269] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1702.312591][T10405] bridge_slave_1: left allmulticast mode [ 1702.318857][T10405] bridge_slave_1: left promiscuous mode [ 1702.517837][T10405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.549268][ T28] audit: type=1800 audit(1754591911.133:4575): pid=17269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2872" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 1702.699712][ T28] audit: type=1800 audit(1754591911.153:4576): pid=17269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2872" name="bus" dev="loop5" ino=14 res=0 errno=0 [ 1703.289114][T17269] bio_check_eod: 182 callbacks suppressed [ 1703.289131][T17269] syz.5.2872: attempt to access beyond end of device [ 1703.289131][T17269] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1703.314210][T17269] syz.5.2872: attempt to access beyond end of device [ 1703.314210][T17269] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1703.331246][T17269] syz.5.2872: attempt to access beyond end of device [ 1703.331246][T17269] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1703.347246][T17269] syz.5.2872: attempt to access beyond end of device [ 1703.347246][T17269] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1703.363415][T17269] syz.5.2872: attempt to access beyond end of device [ 1703.363415][T17269] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1703.380016][T17269] syz.5.2872: attempt to access beyond end of device [ 1703.380016][T17269] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1703.396321][T17269] syz.5.2872: attempt to access beyond end of device [ 1703.396321][T17269] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1703.412397][T17269] syz.5.2872: attempt to access beyond end of device [ 1703.412397][T17269] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1703.428768][T17269] syz.5.2872: attempt to access beyond end of device [ 1703.428768][T17269] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1703.444428][T17269] syz.5.2872: attempt to access beyond end of device [ 1703.444428][T17269] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1703.537205][T10405] bridge_slave_0: left allmulticast mode [ 1703.602321][T10405] bridge_slave_0: left promiscuous mode [ 1703.612830][T10405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.793234][T10405] veth1_macvtap: left promiscuous mode [ 1703.799054][T10405] veth0_macvtap: left promiscuous mode [ 1704.442493][ T1088] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1704.496269][ T1088] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1704.534938][ T1088] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1705.626907][T10405] team0 (unregistering): Port device team_slave_1 removed [ 1705.717536][T10405] team0 (unregistering): Port device team_slave_0 removed [ 1705.824715][T10405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1705.927326][T10405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1706.925175][T10405] bond0 (unregistering): Released all slaves [ 1707.029310][T17133] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1707.040850][T17284] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2875'. [ 1708.352963][T17133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1708.474740][T17133] 8021q: adding VLAN 0 to HW filter on device team0 [ 1708.533669][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.541198][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1708.694249][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.701540][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1709.148623][T17334] loop5: detected capacity change from 0 to 512 [ 1709.177971][T17133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1709.205121][T17334] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2885: casefold flag without casefold feature [ 1709.312169][T17334] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2885: couldn't read orphan inode 15 (err -117) [ 1709.336111][T17334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1709.778611][T11697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1709.837970][T17343] loop2: detected capacity change from 0 to 128 [ 1709.898945][T17343] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1709.996460][T17133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1710.021966][T17343] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1711.857863][T17133] veth0_vlan: entered promiscuous mode [ 1712.734439][T17133] veth1_vlan: entered promiscuous mode [ 1712.892858][T17133] veth0_macvtap: entered promiscuous mode [ 1712.936240][T17133] veth1_macvtap: entered promiscuous mode [ 1713.020487][T14812] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1713.033919][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1713.061717][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.109595][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1713.160965][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.198610][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1713.236064][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.258949][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1713.281200][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.442090][T17133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1713.472416][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1713.500077][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.545812][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1713.588664][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.620386][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1713.668951][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.699848][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1713.718253][T17365] loop5: detected capacity change from 0 to 32768 [ 1713.740145][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.741028][T17370] loop2: detected capacity change from 0 to 40427 [ 1713.778763][T17370] F2FS-fs (loop2): invalid crc value [ 1713.789586][T17133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1713.812504][T17370] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1713.880468][T17370] F2FS-fs (loop2): Start checkpoint disabled! [ 1713.886190][T17133] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.915044][T17370] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1713.942897][T17365] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1713.963013][T17133] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.992569][T17365] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1714.002896][T17365] BTRFS info (device loop5): metadata ratio 2 [ 1714.009315][T17365] BTRFS info (device loop5): allowing degraded mounts [ 1714.017829][T17365] BTRFS info (device loop5): force zlib compression, level 3 [ 1714.028359][T17365] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1714.050379][T17133] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.069061][ T28] audit: type=1800 audit(1754591922.673:4577): pid=17373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2891" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1714.103536][T17365] BTRFS info (device loop5): use zstd compression, level 3 [ 1714.110854][T17365] BTRFS info (device loop5): force clearing of disk cache [ 1714.120210][T17133] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.195634][T17370] bio_check_eod: 182 callbacks suppressed [ 1714.195651][T17370] syz.2.2891: attempt to access beyond end of device [ 1714.195651][T17370] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1714.219440][T17370] syz.2.2891: attempt to access beyond end of device [ 1714.219440][T17370] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1714.235277][T17370] syz.2.2891: attempt to access beyond end of device [ 1714.235277][T17370] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1714.253335][T17370] syz.2.2891: attempt to access beyond end of device [ 1714.253335][T17370] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1714.269328][T17370] syz.2.2891: attempt to access beyond end of device [ 1714.269328][T17370] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1714.286207][T17370] syz.2.2891: attempt to access beyond end of device [ 1714.286207][T17370] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1714.303036][T17370] syz.2.2891: attempt to access beyond end of device [ 1714.303036][T17370] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1714.319012][T17370] syz.2.2891: attempt to access beyond end of device [ 1714.319012][T17370] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1714.335134][T17370] syz.2.2891: attempt to access beyond end of device [ 1714.335134][T17370] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1714.352486][T17370] syz.2.2891: attempt to access beyond end of device [ 1714.352486][T17370] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1714.429449][T17365] BTRFS info (device loop5): max_inline at 0 [ 1714.502182][T17365] BTRFS info (device loop5): using free space tree [ 1714.567578][ T28] audit: type=1800 audit(1754591922.783:4578): pid=17374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2891" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 1715.167500][T17365] BTRFS info (device loop5): enabling ssd optimizations [ 1715.187816][T10405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.237213][T10405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.393794][T17365] BTRFS info (device loop5): rebuilding free space tree [ 1715.460265][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.503493][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.898388][ T28] audit: type=1800 audit(1754591924.503:4579): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2890" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 1716.343457][ T4503] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1716.365386][ T4503] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1716.394907][T11697] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1716.415049][ T4503] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1716.748079][T17396] loop6: detected capacity change from 0 to 32768 [ 1716.805531][T17396] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.2894 (17396) [ 1716.935226][T17396] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1716.995337][T17396] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 1717.059689][T17396] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1717.102565][T17396] BTRFS info (device loop6): use zstd compression, level 3 [ 1717.110418][T17396] BTRFS info (device loop6): using free space tree [ 1717.494602][T17401] loop4: detected capacity change from 0 to 32768 [ 1717.519709][T17396] BTRFS info (device loop6): enabling ssd optimizations [ 1717.574697][T17396] BTRFS info (device loop6): auto enabling async discard [ 1717.658527][ T28] audit: type=1800 audit(1754591926.253:4580): pid=17396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2894" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 1717.752842][T17401] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1718.088163][T17401] XFS (loop4): Ending clean mount [ 1718.247011][T17401] XFS (loop4): Quotacheck needed: Please wait. [ 1718.311041][T11707] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1718.636902][T17401] XFS (loop4): Quotacheck: Done. [ 1719.248997][T17133] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1721.239054][T17449] loop4: detected capacity change from 0 to 128 [ 1721.524792][T17449] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1721.793053][T17449] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1722.890154][T17133] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1722.934708][T17458] loop2: detected capacity change from 0 to 40427 [ 1722.963432][T17458] F2FS-fs (loop2): invalid crc value [ 1723.005720][T17458] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1723.074877][T17458] F2FS-fs (loop2): Start checkpoint disabled! [ 1723.110235][T17458] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1723.256385][ T28] audit: type=1800 audit(1754591931.793:4581): pid=17458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2904" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1723.343397][T17465] bio_check_eod: 182 callbacks suppressed [ 1723.343453][T17465] syz.2.2904: attempt to access beyond end of device [ 1723.343453][T17465] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1723.505617][T17465] syz.2.2904: attempt to access beyond end of device [ 1723.505617][T17465] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1723.524661][T17465] syz.2.2904: attempt to access beyond end of device [ 1723.524661][T17465] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1723.541525][T17465] syz.2.2904: attempt to access beyond end of device [ 1723.541525][T17465] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1723.559561][T17465] syz.2.2904: attempt to access beyond end of device [ 1723.559561][T17465] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1723.578477][T17465] syz.2.2904: attempt to access beyond end of device [ 1723.578477][T17465] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1723.594293][T17465] syz.2.2904: attempt to access beyond end of device [ 1723.594293][T17465] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1723.616465][T17465] syz.2.2904: attempt to access beyond end of device [ 1723.616465][T17465] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1723.635257][T17465] syz.2.2904: attempt to access beyond end of device [ 1723.635257][T17465] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1723.653688][T17465] syz.2.2904: attempt to access beyond end of device [ 1723.653688][T17465] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1726.522352][ T28] audit: type=1800 audit(1754591931.893:4582): pid=17465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2904" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 1727.095801][T17471] loop5: detected capacity change from 0 to 4096 [ 1727.112580][T17471] ntfs3: loop5: Unsupported bytes per MFT record 8192. [ 1727.119671][T17471] ntfs3: loop5: try to read out of volume at offset 0x1ffe00 [ 1727.193527][T12299] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1727.350815][T17477] loop6: detected capacity change from 0 to 128 [ 1727.438181][T17477] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1727.502586][T17477] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1727.847269][ T1103] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1727.878282][ T1103] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1727.888148][ T1103] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1730.341624][T11707] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1730.706062][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.713694][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.785417][T17488] loop5: detected capacity change from 0 to 32768 [ 1730.913908][T17488] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1730.979010][T17488] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1732.550044][T17488] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1732.660382][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1732.986071][T17514] loop6: detected capacity change from 0 to 40427 [ 1733.010157][T17514] F2FS-fs (loop6): invalid crc value [ 1733.024814][T17514] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1733.066017][T17514] F2FS-fs (loop6): Start checkpoint disabled! [ 1733.075628][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1733.094236][T17514] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1733.173765][ T28] audit: type=1800 audit(1754591941.783:4583): pid=17514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2919" name="bus" dev="loop6" ino=14 res=0 errno=0 [ 1733.204413][T17514] bio_check_eod: 182 callbacks suppressed [ 1733.204430][T17514] syz.6.2919: attempt to access beyond end of device [ 1733.204430][T17514] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1733.226998][T17514] syz.6.2919: attempt to access beyond end of device [ 1733.226998][T17514] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1733.242560][T17514] syz.6.2919: attempt to access beyond end of device [ 1733.242560][T17514] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1733.258510][T17514] syz.6.2919: attempt to access beyond end of device [ 1733.258510][T17514] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1733.274668][T17514] syz.6.2919: attempt to access beyond end of device [ 1733.274668][T17514] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1733.290733][T17514] syz.6.2919: attempt to access beyond end of device [ 1733.290733][T17514] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1733.306399][T17514] syz.6.2919: attempt to access beyond end of device [ 1733.306399][T17514] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1733.322236][T17514] syz.6.2919: attempt to access beyond end of device [ 1733.322236][T17514] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1733.339427][T17514] syz.6.2919: attempt to access beyond end of device [ 1733.339427][T17514] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1733.355239][T17514] syz.6.2919: attempt to access beyond end of device [ 1733.355239][T17514] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1733.744137][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 668ms [ 1733.777734][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 1733.826988][T17488] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1734.203921][T17488] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 1735.104346][ T1088] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1735.124617][ T1088] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1735.162554][ T1088] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1735.590008][T17524] loop4: detected capacity change from 0 to 32768 [ 1735.633689][T17524] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2921 (17524) [ 1735.745621][T17524] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1735.792510][T17524] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1735.807980][T17524] BTRFS info (device loop4): force clearing of disk cache [ 1735.872521][T17524] BTRFS info (device loop4): metadata ratio 0 [ 1735.879088][T17524] BTRFS info (device loop4): using free space tree [ 1736.104400][T17524] BTRFS info (device loop4): enabling ssd optimizations [ 1736.130999][T17524] BTRFS info (device loop4): auto enabling async discard [ 1736.201687][T17524] BTRFS info (device loop4): rebuilding free space tree [ 1736.280773][T17549] loop2: detected capacity change from 0 to 128 [ 1736.394064][T17549] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1736.595233][T17555] loop5: detected capacity change from 0 to 128 [ 1736.609058][T17549] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1736.676390][T17555] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1736.900116][T17555] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1737.779442][T11697] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1738.070209][T17133] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1738.089069][ T12] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 1738.636721][T14812] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1741.798314][T17583] loop4: detected capacity change from 0 to 40427 [ 1741.869309][T17583] F2FS-fs (loop4): invalid crc value [ 1742.043511][T17583] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1742.089649][T17583] F2FS-fs (loop4): Start checkpoint disabled! [ 1742.102382][T17583] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1742.193976][T17583] bio_check_eod: 182 callbacks suppressed [ 1742.193994][T17583] syz.4.2931: attempt to access beyond end of device [ 1742.193994][T17583] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1742.216606][T17583] syz.4.2931: attempt to access beyond end of device [ 1742.216606][T17583] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1742.234681][T17583] syz.4.2931: attempt to access beyond end of device [ 1742.234681][T17583] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1742.252565][T17583] syz.4.2931: attempt to access beyond end of device [ 1742.252565][T17583] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1742.269972][T17583] syz.4.2931: attempt to access beyond end of device [ 1742.269972][T17583] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1742.286372][T17583] syz.4.2931: attempt to access beyond end of device [ 1742.286372][T17583] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1742.302868][T17583] syz.4.2931: attempt to access beyond end of device [ 1742.302868][T17583] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1742.319159][T17583] syz.4.2931: attempt to access beyond end of device [ 1742.319159][T17583] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1742.335927][T17583] syz.4.2931: attempt to access beyond end of device [ 1742.335927][T17583] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1742.352338][T17583] syz.4.2931: attempt to access beyond end of device [ 1742.352338][T17583] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1742.452359][ T28] audit: type=1800 audit(1754591950.783:4584): pid=17583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2931" name="bus" dev="loop4" ino=14 res=0 errno=0 [ 1743.114274][T17585] loop5: detected capacity change from 0 to 32768 [ 1743.283415][T17585] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1743.736592][T17585] XFS (loop5): Ending clean mount [ 1743.797702][T17585] XFS (loop5): Quotacheck needed: Please wait. [ 1743.843929][T16011] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1743.866909][T16011] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1743.878514][T16011] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1744.068654][T17585] XFS (loop5): Quotacheck: Done. [ 1744.847594][T11697] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1745.057615][T17605] loop6: detected capacity change from 0 to 32768 [ 1745.182676][T17605] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1745.378953][T17620] loop4: detected capacity change from 0 to 128 [ 1745.504779][T17620] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1745.622764][T17620] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1745.673442][T17605] XFS (loop6): Ending clean mount [ 1745.725851][T17605] XFS (loop6): Quotacheck needed: Please wait. [ 1746.156216][T17605] XFS (loop6): Quotacheck: Done. [ 1746.499219][T17133] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1746.933996][T11707] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1747.019571][T17639] loop2: detected capacity change from 0 to 16 [ 1747.074637][T17639] erofs: (device loop2): mounted with root inode @ nid 36. [ 1754.435428][T17677] loop4: detected capacity change from 0 to 128 [ 1754.490652][T17677] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1754.513431][T17677] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1755.599955][T17133] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1756.187596][T17690] loop4: detected capacity change from 0 to 16 [ 1756.363142][T17690] erofs: (device loop4): mounted with root inode @ nid 36. [ 1759.608573][T17724] loop5: detected capacity change from 0 to 256 [ 1763.060734][T17724] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1763.243742][T17721] sctp: failed to load transform for md5: -4 [ 1763.874323][T17736] syzkaller0: entered promiscuous mode [ 1763.880152][T17736] syzkaller0: entered allmulticast mode [ 1766.374839][T17756] loop6: detected capacity change from 0 to 64 [ 1766.490007][T17754] loop4: detected capacity change from 0 to 4096 [ 1766.501836][ T5879] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1766.715039][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 1766.758346][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1766.839799][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1766.878126][ T5879] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1767.198542][T17758] loop6: detected capacity change from 0 to 40427 [ 1767.218030][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.253728][ T5879] usb 3-1: config 0 descriptor?? [ 1767.259082][T17758] F2FS-fs (loop6): invalid crc value [ 1767.282073][T17758] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1767.333425][T17758] F2FS-fs (loop6): Start checkpoint disabled! [ 1767.348906][T17758] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1768.093028][ T5879] microsoft 0003:045E:07DA.0004: item 0 4 0 8 parsing failed [ 1768.123196][ T5879] microsoft 0003:045E:07DA.0004: parse failed [ 1768.132770][ T5879] microsoft: probe of 0003:045E:07DA.0004 failed with error -22 [ 1768.263777][ T42] bio_check_eod: 182 callbacks suppressed [ 1768.263795][ T42] kworker/u4:2: attempt to access beyond end of device [ 1768.263795][ T42] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1768.313456][T10823] usb 3-1: USB disconnect, device number 20 [ 1768.362728][ T42] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1768.370732][ T42] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1768.945736][T17767] syzkaller0: entered promiscuous mode [ 1768.978412][T17767] syzkaller0: entered allmulticast mode [ 1771.514446][T17792] loop4: detected capacity change from 0 to 4096 [ 1771.729531][T17792] ntfs3: loop4: Unsupported bytes per MFT record 8192. [ 1771.738569][T17792] ntfs3: loop4: try to read out of volume at offset 0x1ffe00 [ 1771.915051][T17796] loop6: detected capacity change from 0 to 1024 [ 1771.945208][T17796] netlink: 'syz.6.2985': attribute type 29 has an invalid length. [ 1771.974100][T17796] netlink: 'syz.6.2985': attribute type 29 has an invalid length. [ 1771.978247][T12110] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1772.022552][T17796] netlink: 'syz.6.2985': attribute type 29 has an invalid length. [ 1772.074776][T17797] No such timeout policy "syz1" [ 1772.868279][T17804] loop4: detected capacity change from 0 to 40427 [ 1772.927176][T17804] F2FS-fs (loop4): invalid crc value [ 1772.997123][T17804] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1773.067284][T17804] F2FS-fs (loop4): Start checkpoint disabled! [ 1773.097178][T17809] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1773.125705][T17809] CIFS mount error: No usable UNC path provided in device string! [ 1773.125705][T17809] [ 1773.137125][T17809] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1773.255021][T17804] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1773.800761][ T28] audit: type=1800 audit(1754591982.403:4585): pid=17811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2988" name="bus" dev="loop4" ino=14 res=0 errno=0 [ 1773.874090][T17811] syz.4.2988: attempt to access beyond end of device [ 1773.874090][T17811] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1774.012017][T17811] syz.4.2988: attempt to access beyond end of device [ 1774.012017][T17811] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1774.057426][T17811] syz.4.2988: attempt to access beyond end of device [ 1774.057426][T17811] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1774.075818][T17811] syz.4.2988: attempt to access beyond end of device [ 1774.075818][T17811] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1774.095445][T17811] syz.4.2988: attempt to access beyond end of device [ 1774.095445][T17811] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1774.115875][T17811] syz.4.2988: attempt to access beyond end of device [ 1774.115875][T17811] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1774.133138][T17811] syz.4.2988: attempt to access beyond end of device [ 1774.133138][T17811] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1774.153475][T17811] syz.4.2988: attempt to access beyond end of device [ 1774.153475][T17811] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1774.173314][T17811] syz.4.2988: attempt to access beyond end of device [ 1774.173314][T17811] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1774.195291][T17811] syz.4.2988: attempt to access beyond end of device [ 1774.195291][T17811] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1779.015178][T17835] loop5: detected capacity change from 0 to 128 [ 1779.032976][ T1138] bio_check_eod: 181 callbacks suppressed [ 1779.032998][ T1138] kworker/u4:10: attempt to access beyond end of device [ 1779.032998][ T1138] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1779.070135][ T1138] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1779.079839][ T1138] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1779.088901][ T1138] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1779.105493][T17835] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1779.185543][T17835] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1780.524950][T11697] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1781.285074][T17858] loop5: detected capacity change from 0 to 4096 [ 1781.775925][T17858] ntfs3: loop5: Unsupported bytes per MFT record 8192. [ 1781.785384][T17858] ntfs3: loop5: try to read out of volume at offset 0x1ffe00 [ 1782.734080][T17865] loop5: detected capacity change from 0 to 40427 [ 1782.757641][T17865] F2FS-fs (loop5): invalid crc value [ 1782.802719][T17865] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1782.856902][T17865] F2FS-fs (loop5): Start checkpoint disabled! [ 1782.875339][T17865] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1782.976127][ T28] audit: type=1800 audit(1754591991.583:4586): pid=17871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3001" name="bus" dev="loop5" ino=14 res=0 errno=0 [ 1783.036453][T17871] syz.5.3001: attempt to access beyond end of device [ 1783.036453][T17871] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1783.054139][T17871] syz.5.3001: attempt to access beyond end of device [ 1783.054139][T17871] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1783.204244][T17871] syz.5.3001: attempt to access beyond end of device [ 1783.204244][T17871] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1783.222402][T17871] syz.5.3001: attempt to access beyond end of device [ 1783.222402][T17871] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1783.240123][T17871] syz.5.3001: attempt to access beyond end of device [ 1783.240123][T17871] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1783.259109][T17871] syz.5.3001: attempt to access beyond end of device [ 1783.259109][T17871] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1783.275431][T17871] syz.5.3001: attempt to access beyond end of device [ 1783.275431][T17871] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1783.295372][T17871] syz.5.3001: attempt to access beyond end of device [ 1783.295372][T17871] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1783.314803][T17871] syz.5.3001: attempt to access beyond end of device [ 1783.314803][T17871] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1787.422114][ T4503] bio_check_eod: 182 callbacks suppressed [ 1787.422136][ T4503] kworker/u4:11: attempt to access beyond end of device [ 1787.422136][ T4503] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1787.872952][ T4503] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1787.924120][ T4503] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1787.962110][T17888] No such timeout policy "syz1" [ 1788.002262][ T4503] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1788.444581][T17891] tipc: Enabling of bearer rejected, failed to enable media [ 1788.537829][T17894] syzkaller0: entered promiscuous mode [ 1788.573607][T17894] syzkaller0: entered allmulticast mode [ 1789.308325][T17896] loop2: detected capacity change from 0 to 4096 [ 1789.322901][T17896] ntfs3: loop2: Unsupported bytes per MFT record 8192. [ 1789.330899][T17896] ntfs3: loop2: try to read out of volume at offset 0x1ffe00 [ 1789.414072][T12110] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1789.883961][T17904] loop4: detected capacity change from 0 to 512 [ 1789.955943][T17904] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3011: bad orphan inode 13 [ 1790.486866][T17904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1790.940264][T17904] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1790.959421][T17904] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.3011: bad inode number: 15 [ 1791.164358][T17133] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1792.136383][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.355342][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.516852][T17922] loop6: detected capacity change from 0 to 128 [ 1792.583716][T17922] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1792.869256][T17922] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1794.544224][T17942] loop2: detected capacity change from 0 to 16 [ 1795.259622][T17939] loop4: detected capacity change from 0 to 4096 [ 1795.324363][T17939] ntfs3: loop4: Unsupported bytes per MFT record 8192. [ 1795.326145][T17942] erofs: (device loop2): mounted with root inode @ nid 36. [ 1795.340285][T17939] ntfs3: loop4: try to read out of volume at offset 0x1ffe00 [ 1795.370464][T11707] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1798.839021][T17977] loop6: detected capacity change from 0 to 4096 [ 1798.902886][T17977] ntfs3: loop6: Unsupported bytes per MFT record 8192. [ 1798.910757][T17977] ntfs3: loop6: try to read out of volume at offset 0x1ffe00 [ 1799.062855][T12110] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1799.122092][T17957] No such timeout policy "syz1" [ 1799.716214][T17980] loop5: detected capacity change from 0 to 40427 [ 1799.788340][T17980] F2FS-fs (loop5): invalid crc value [ 1799.825551][T17980] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1799.916365][T17980] F2FS-fs (loop5): Start checkpoint disabled! [ 1799.945810][T17980] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1800.509454][ T28] audit: type=1800 audit(1754592009.113:4587): pid=17987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3031" name="bus" dev="loop5" ino=14 res=0 errno=0 [ 1800.580942][T17987] syz.5.3031: attempt to access beyond end of device [ 1800.580942][T17987] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1800.614087][T17987] syz.5.3031: attempt to access beyond end of device [ 1800.614087][T17987] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1800.633020][T17987] syz.5.3031: attempt to access beyond end of device [ 1800.633020][T17987] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1800.650531][T17987] syz.5.3031: attempt to access beyond end of device [ 1800.650531][T17987] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1800.710816][T17987] syz.5.3031: attempt to access beyond end of device [ 1800.710816][T17987] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1800.732918][T17987] syz.5.3031: attempt to access beyond end of device [ 1800.732918][T17987] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1800.748805][T17987] syz.5.3031: attempt to access beyond end of device [ 1800.748805][T17987] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1800.768145][T17987] syz.5.3031: attempt to access beyond end of device [ 1800.768145][T17987] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1800.788098][T17987] syz.5.3031: attempt to access beyond end of device [ 1800.788098][T17987] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1800.810096][T17987] syz.5.3031: attempt to access beyond end of device [ 1800.810096][T17987] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1802.306430][T17995] loop6: detected capacity change from 0 to 16 [ 1803.925555][T17995] erofs: (device loop6): mounted with root inode @ nid 36. [ 1805.039302][T10405] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1805.064625][T10405] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1805.086185][T10405] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1805.086230][T18002] loop6: detected capacity change from 0 to 1024 [ 1805.179066][T18002] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 1805.250369][T18002] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1805.289874][T18002] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.3034: Failed to acquire dquot type 0 [ 1805.506551][T18002] EXT4-fs error (device loop6): mb_free_blocks:1943: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1805.739101][T18002] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #13: comm syz.6.3034: corrupted inode contents [ 1805.996030][T18002] EXT4-fs error (device loop6): ext4_dirty_inode:6106: inode #13: comm syz.6.3034: mark_inode_dirty error [ 1806.203095][T18002] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #13: comm syz.6.3034: corrupted inode contents [ 1806.274133][T18002] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #13: comm syz.6.3034: mark_inode_dirty error [ 1806.288085][T18002] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #13: comm syz.6.3034: corrupted inode contents [ 1806.307306][T18002] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 1806.340472][T18002] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #13: comm syz.6.3034: corrupted inode contents [ 1806.393082][T18002] EXT4-fs error (device loop6): ext4_truncate:4288: inode #13: comm syz.6.3034: mark_inode_dirty error [ 1806.422890][T18002] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 1806.500309][T18002] EXT4-fs (loop6): 1 truncate cleaned up [ 1806.524137][T18002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1806.605824][T18011] loop4: detected capacity change from 0 to 1024 [ 1808.659779][T11707] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1809.498576][T18037] loop5: detected capacity change from 0 to 16 [ 1810.239699][T17135] Bluetooth: hci2: command 0x0406 tx timeout [ 1810.367166][T18037] erofs: (device loop5): mounted with root inode @ nid 36. [ 1810.503554][T18040] tipc: Enabling of bearer rejected, failed to enable media [ 1810.615952][T18044] syzkaller0: entered promiscuous mode [ 1810.645963][T18044] syzkaller0: entered allmulticast mode [ 1810.684508][T18033] loop2: detected capacity change from 0 to 40427 [ 1810.735998][T18033] F2FS-fs (loop2): invalid crc value [ 1810.838222][T18033] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1810.948784][T18033] F2FS-fs (loop2): Start checkpoint disabled! [ 1810.993415][T18033] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1811.115616][ T28] audit: type=1800 audit(1754592019.723:4588): pid=18038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3044" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 1811.190226][T18038] bio_check_eod: 182 callbacks suppressed [ 1811.190308][T18038] syz.2.3044: attempt to access beyond end of device [ 1811.190308][T18038] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1811.337443][T18038] syz.2.3044: attempt to access beyond end of device [ 1811.337443][T18038] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1811.355155][T18038] syz.2.3044: attempt to access beyond end of device [ 1811.355155][T18038] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1811.373658][T18038] syz.2.3044: attempt to access beyond end of device [ 1811.373658][T18038] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1811.393178][T18038] syz.2.3044: attempt to access beyond end of device [ 1811.393178][T18038] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1811.410827][T18038] syz.2.3044: attempt to access beyond end of device [ 1811.410827][T18038] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1811.427061][T18038] syz.2.3044: attempt to access beyond end of device [ 1811.427061][T18038] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1811.444728][T18038] syz.2.3044: attempt to access beyond end of device [ 1811.444728][T18038] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1811.464101][T18038] syz.2.3044: attempt to access beyond end of device [ 1811.464101][T18038] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1811.483344][T18038] syz.2.3044: attempt to access beyond end of device [ 1811.483344][T18038] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1815.269027][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1815.308972][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1815.346825][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1815.816146][T18071] loop5: detected capacity change from 0 to 40427 [ 1816.143194][T18071] F2FS-fs (loop5): invalid crc value [ 1816.173848][T18071] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1816.229749][T18071] F2FS-fs (loop5): Start checkpoint disabled! [ 1816.249536][T18071] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1816.375797][ T28] audit: type=1800 audit(1754592024.983:4589): pid=18079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3053" name="bus" dev="loop5" ino=14 res=0 errno=0 [ 1816.763209][T18079] bio_check_eod: 182 callbacks suppressed [ 1816.763249][T18079] syz.5.3053: attempt to access beyond end of device [ 1816.763249][T18079] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1816.788286][T18079] syz.5.3053: attempt to access beyond end of device [ 1816.788286][T18079] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1816.808785][T18079] syz.5.3053: attempt to access beyond end of device [ 1816.808785][T18079] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1817.720022][T18079] syz.5.3053: attempt to access beyond end of device [ 1817.720022][T18079] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1817.738775][T18079] syz.5.3053: attempt to access beyond end of device [ 1817.738775][T18079] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1817.760338][T18079] syz.5.3053: attempt to access beyond end of device [ 1817.760338][T18079] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1817.776624][T18079] syz.5.3053: attempt to access beyond end of device [ 1817.776624][T18079] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1817.796331][T18079] syz.5.3053: attempt to access beyond end of device [ 1817.796331][T18079] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1817.819194][T18079] syz.5.3053: attempt to access beyond end of device [ 1817.819194][T18079] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1817.838162][T18079] syz.5.3053: attempt to access beyond end of device [ 1817.838162][T18079] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1820.782643][ T27] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1821.054064][T10405] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1821.072282][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 1821.094386][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1821.115814][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1821.120649][T10405] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1821.130655][ T27] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1821.147900][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.166624][ T27] usb 5-1: config 0 descriptor?? [ 1821.187332][T10405] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1821.212712][T18093] tipc: Enabling of bearer rejected, failed to enable media [ 1821.223866][T18093] syzkaller0: entered promiscuous mode [ 1821.229435][T18093] syzkaller0: entered allmulticast mode [ 1821.610432][ T27] usbhid 5-1:0.0: can't add hid device: -71 [ 1821.647894][ T27] usbhid: probe of 5-1:0.0 failed with error -71 [ 1821.673398][ T27] usb 5-1: USB disconnect, device number 15 [ 1823.158587][T18091] loop2: detected capacity change from 0 to 32768 [ 1823.182684][T18099] loop5: detected capacity change from 0 to 40427 [ 1823.282949][T18091] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.3048 (18091) [ 1823.299611][T18099] F2FS-fs (loop5): invalid crc value [ 1823.414644][T18099] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1823.476149][T18099] F2FS-fs (loop5): Start checkpoint disabled! [ 1823.487611][T18099] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1823.566504][T18091] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1824.187939][T18091] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1824.199755][T18091] BTRFS info (device loop2): using free space tree [ 1824.208660][T18091] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1824.228897][T18091] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1824.239924][T18091] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1824.256866][T18091] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1824.270640][T18091] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1824.360358][ T28] audit: type=1800 audit(1754592032.963:4590): pid=18119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3057" name="bus" dev="loop5" ino=14 res=0 errno=0 [ 1824.450928][T18119] bio_check_eod: 182 callbacks suppressed [ 1824.450982][T18119] syz.5.3057: attempt to access beyond end of device [ 1824.450982][T18119] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1824.590540][T18091] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1824.664219][T18119] syz.5.3057: attempt to access beyond end of device [ 1824.664219][T18119] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1824.691358][T18119] syz.5.3057: attempt to access beyond end of device [ 1824.691358][T18119] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1824.709432][T18119] syz.5.3057: attempt to access beyond end of device [ 1824.709432][T18119] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1824.726770][T18119] syz.5.3057: attempt to access beyond end of device [ 1824.726770][T18119] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1824.745375][T18119] syz.5.3057: attempt to access beyond end of device [ 1824.745375][T18119] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1824.762756][T18119] syz.5.3057: attempt to access beyond end of device [ 1824.762756][T18119] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1824.783432][T18119] syz.5.3057: attempt to access beyond end of device [ 1824.783432][T18119] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1824.804439][T18119] syz.5.3057: attempt to access beyond end of device [ 1824.804439][T18119] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1824.824365][T18119] syz.5.3057: attempt to access beyond end of device [ 1824.824365][T18119] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1824.861252][T18091] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1824.861980][T18091] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1825.226885][T18091] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1825.453987][T18091] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1825.735872][T18091] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1826.079553][T18091] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1827.629465][T18131] loop6: detected capacity change from 0 to 40427 [ 1828.045972][T18132] loop4: detected capacity change from 0 to 40427 [ 1828.124198][T18132] F2FS-fs (loop4): invalid crc value [ 1828.134667][T18091] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1828.146672][T18091] BTRFS error (device loop2): open_ctree failed: -12 [ 1828.166603][T18131] F2FS-fs (loop6): invalid crc value [ 1828.234907][T18132] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1828.280606][T18132] F2FS-fs (loop4): Start checkpoint disabled! [ 1828.298954][T18131] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1828.360686][T18132] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1828.406091][T12299] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by udevd (12299) [ 1828.543485][ T28] audit: type=1800 audit(1754592037.143:4591): pid=18141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3066" name="bus" dev="loop4" ino=14 res=0 errno=0 [ 1833.183707][ T12] bio_check_eod: 372 callbacks suppressed [ 1833.183733][ T12] kworker/u4:1: attempt to access beyond end of device [ 1833.183733][ T12] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1833.374669][T10405] kworker/u4:13: attempt to access beyond end of device [ 1833.374669][T10405] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1833.399898][T18154] loop6: detected capacity change from 0 to 2048 [ 1833.407026][ T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1833.407077][ T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1833.407115][ T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1833.458441][T10405] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1833.482311][T10405] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1833.499976][T10405] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1833.617608][T18155] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1833.812800][ T28] audit: type=1804 audit(1754592042.413:4592): pid=18154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3072" name="/newroot/369/file2/bus" dev="loop6" ino=2097152 res=1 errno=0 [ 1833.910601][T18156] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 12 [ 1834.102367][T18156] Remounting filesystem read-only [ 1834.110123][T18154] NILFS (loop6): discard dirty page: offset=65536, ino=2097152 [ 1834.173871][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1834.192774][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1834.228857][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1834.306804][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1834.382380][T18154] NILFS (loop6): discard dirty page: offset=69632, ino=2097152 [ 1834.469258][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1834.586909][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1834.634706][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1834.682601][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1834.690192][T18154] NILFS (loop6): discard dirty page: offset=73728, ino=2097152 [ 1834.758650][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1834.768477][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1834.792709][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1834.800207][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1834.814098][T18154] NILFS (loop6): discard dirty page: offset=77824, ino=2097152 [ 1834.972548][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.058752][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.071772][ T1207] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1835.195760][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.322747][ T1207] usb 6-1: Using ep0 maxpacket: 16 [ 1835.341879][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.360357][ T1207] usb 6-1: config 1 has an invalid interface number: 76 but max is 0 [ 1835.394549][T18154] NILFS (loop6): discard dirty page: offset=81920, ino=2097152 [ 1835.414329][ T1207] usb 6-1: config 1 has no interface number 0 [ 1835.452456][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.470753][ T1207] usb 6-1: config 1 interface 76 has no altsetting 0 [ 1835.502573][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.510235][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.563834][ T1207] usb 6-1: New USB device found, idVendor=2692, idProduct=9005, bcdDevice=aa.0a [ 1835.606678][ T1207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.610609][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.639629][T18154] NILFS (loop6): discard dirty page: offset=86016, ino=2097152 [ 1835.649875][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.659300][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.668494][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.677979][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.687547][T18154] NILFS (loop6): discard dirty page: offset=90112, ino=2097152 [ 1835.692808][ T1207] usb 6-1: Product: syz [ 1835.706028][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.718435][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.735525][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.743515][ T1207] usb 6-1: Manufacturer: syz [ 1835.750396][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.764171][T18154] NILFS (loop6): discard dirty page: offset=94208, ino=2097152 [ 1835.778531][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.786594][ T1207] usb 6-1: SerialNumber: syz [ 1835.794282][ T1207] option 6-1:1.76: GSM modem (1-port) converter detected [ 1835.832581][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.839972][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.871914][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.900022][T18154] NILFS (loop6): discard dirty page: offset=98304, ino=2097152 [ 1835.925609][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.962145][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1835.969578][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1836.028361][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1836.071383][T18154] NILFS (loop6): discard dirty page: offset=102400, ino=2097152 [ 1836.135203][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1836.199844][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1836.213885][T18176] loop2: detected capacity change from 0 to 512 [ 1836.252329][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1836.259654][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1836.373651][T18174] loop4: detected capacity change from 0 to 40427 [ 1836.415127][T18176] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1836.423711][T18174] F2FS-fs (loop4): invalid crc value [ 1836.460970][T18176] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1836.509216][T18154] NILFS (loop6): discard dirty page: offset=106496, ino=2097152 [ 1836.534521][T18176] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1836.549855][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1836.558476][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1836.567073][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1836.575878][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1836.586100][T18174] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1836.607368][T18154] NILFS (loop6): discard dirty page: offset=110592, ino=2097152 [ 1836.658325][T18174] F2FS-fs (loop4): Start checkpoint disabled! [ 1836.830364][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1836.948680][T18174] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1837.014001][T18176] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3078: bad orphan inode 131083 [ 1837.064703][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1837.255783][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1837.434168][T18176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1837.452924][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1837.469931][T18154] NILFS (loop6): discard dirty page: offset=114688, ino=2097152 [ 1837.540034][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1837.587130][ T28] audit: type=1800 audit(1754592046.193:4593): pid=18184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3077" name="bus" dev="loop4" ino=14 res=0 errno=0 [ 1837.638213][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1837.769420][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1837.835348][T18184] syz.4.3077: attempt to access beyond end of device [ 1837.835348][T18184] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1837.853970][T18184] syz.4.3077: attempt to access beyond end of device [ 1837.853970][T18184] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1837.876123][T18184] syz.4.3077: attempt to access beyond end of device [ 1837.876123][T18184] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1837.894643][T18184] syz.4.3077: attempt to access beyond end of device [ 1837.894643][T18184] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1837.915166][T18184] syz.4.3077: attempt to access beyond end of device [ 1837.915166][T18184] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1837.936363][T18184] syz.4.3077: attempt to access beyond end of device [ 1837.936363][T18184] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1837.955192][T18184] syz.4.3077: attempt to access beyond end of device [ 1837.955192][T18184] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1837.977189][T18184] syz.4.3077: attempt to access beyond end of device [ 1837.977189][T18184] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1838.080334][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1838.157224][T18154] NILFS (loop6): discard dirty page: offset=118784, ino=2097152 [ 1838.193116][T18184] bio_check_eod: 67 callbacks suppressed [ 1838.193169][T18184] syz.4.3077: attempt to access beyond end of device [ 1838.193169][T18184] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1838.220460][T18184] syz.4.3077: attempt to access beyond end of device [ 1838.220460][T18184] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1838.238335][T18184] syz.4.3077: attempt to access beyond end of device [ 1838.238335][T18184] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1838.256901][T18184] syz.4.3077: attempt to access beyond end of device [ 1838.256901][T18184] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1838.275205][T18184] syz.4.3077: attempt to access beyond end of device [ 1838.275205][T18184] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1838.300414][T18184] syz.4.3077: attempt to access beyond end of device [ 1838.300414][T18184] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1838.320398][T18184] syz.4.3077: attempt to access beyond end of device [ 1838.320398][T18184] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1838.340156][T18184] syz.4.3077: attempt to access beyond end of device [ 1838.340156][T18184] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1838.358880][T18184] syz.4.3077: attempt to access beyond end of device [ 1838.358880][T18184] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1838.378567][T18184] syz.4.3077: attempt to access beyond end of device [ 1838.378567][T18184] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1838.508063][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1839.140200][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1839.160914][T10405] NILFS (loop6): discard dirty page: offset=67371008, ino=3 [ 1839.264880][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1839.286099][T10405] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1839.428063][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1839.467383][T10405] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1839.572247][T18176] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1839.653304][T10405] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1839.697665][T18154] NILFS (loop6): discard dirty page: offset=122880, ino=2097152 [ 1839.716649][ T5842] usb 6-1: USB disconnect, device number 3 [ 1839.782918][T10405] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1839.827436][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1839.891075][T10405] NILFS (loop6): discard dirty page: offset=268697600, ino=6 [ 1839.983852][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1840.042609][T10405] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1840.116102][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1840.242494][T10405] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1840.270502][ T5842] option 6-1:1.76: device disconnected [ 1840.373076][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1840.462410][T10405] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1840.520920][T18154] NILFS (loop6): discard dirty page: offset=126976, ino=2097152 [ 1840.573336][T10405] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1840.612529][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1840.684312][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1840.759834][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1840.883148][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1841.179688][T10405] NILFS (loop6): discard dirty page: offset=126976, ino=2097152 [ 1841.246159][T10405] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1841.318230][T10405] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1841.408103][T10405] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1841.493462][T10405] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1841.527177][T14812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1841.557286][T18154] NILFS (loop6): discard dirty page: offset=268697600, ino=6 [ 1841.567788][T18154] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1841.579731][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1841.737186][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1841.752978][T18154] NILFS (loop6): discard dirty block: blocknr=129, size=1024 [ 1841.762062][T18154] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 1841.798199][T18154] NILFS (loop6): discard dirty page: offset=67375104, ino=3 [ 1841.824124][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1841.852784][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1841.860125][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1841.902722][T18154] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 1842.039831][T10405] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1842.103372][T10405] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1842.110548][T10405] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1842.130657][T18192] loop5: detected capacity change from 0 to 32768 [ 1842.334146][T18192] JBD2: Ignoring recovery information on journal [ 1842.506176][T18192] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1842.730484][T18200] No such timeout policy "syz1" [ 1843.114808][T18204] syz.5.3079 (18204) used greatest stack depth: 18736 bytes left [ 1843.302476][T11697] ocfs2: Unmounting device (7,5) on (node local) [ 1844.600432][ T5802] Bluetooth: hci0: unexpected event for opcode 0x080e [ 1845.438634][T18237] loop4: detected capacity change from 0 to 4096 [ 1845.483195][T18237] ntfs3: loop4: Unsupported bytes per MFT record 8192. [ 1845.501188][T18237] ntfs3: loop4: try to read out of volume at offset 0x1ffe00 [ 1847.377279][T18253] syzkaller0: entered promiscuous mode [ 1847.384955][T18253] syzkaller0: entered allmulticast mode [ 1849.689261][T18283] loop4: detected capacity change from 0 to 2048 [ 1849.767305][T18283] UDF-fs: bad mount option "ïdÃ…SÓ6Ü\•çgu¿š" or missing value [ 1850.077654][T18288] overlayfs: missing 'lowerdir' [ 1850.139917][T18289] (null): rxe_set_mtu: Set mtu to 4096 [ 1850.150487][T18289] lo speed is unknown, defaulting to 1000 [ 1850.165652][T18289] lo speed is unknown, defaulting to 1000 [ 1850.176110][T18289] lo speed is unknown, defaulting to 1000 [ 1851.830111][T18289] infiniband sz1: set active [ 1851.842025][T18289] infiniband sz1: added lo [ 1852.248278][T14284] lo speed is unknown, defaulting to 1000 [ 1852.394034][T18289] RDS/IB: sz1: added [ 1852.399966][T18289] smc: adding ib device sz1 with port count 1 [ 1852.408493][T18289] smc: ib device sz1 port 1 has pnetid [ 1852.427102][T18289] lo speed is unknown, defaulting to 1000 [ 1852.599974][T18289] lo speed is unknown, defaulting to 1000 [ 1852.754502][T18289] lo speed is unknown, defaulting to 1000 [ 1852.904652][T18289] lo speed is unknown, defaulting to 1000 [ 1853.058415][T18289] lo speed is unknown, defaulting to 1000 [ 1853.210570][T14284] lo speed is unknown, defaulting to 1000 [ 1853.274139][T18292] netlink: 'syz.4.3112': attribute type 1 has an invalid length. [ 1853.577532][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.586101][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.272582][T18302] loop2: detected capacity change from 0 to 40427 [ 1855.405322][T18302] F2FS-fs (loop2): invalid crc value [ 1855.547801][T18302] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1855.619927][T18302] F2FS-fs (loop2): Start checkpoint disabled! [ 1855.877021][T18302] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1856.067604][T18315] ksmbd: Unknown IPC event: 0, ignore. [ 1856.464264][ T28] audit: type=1800 audit(1754592065.073:4594): pid=18302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3116" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 1856.492907][T18302] bio_check_eod: 107 callbacks suppressed [ 1856.492925][T18302] syz.2.3116: attempt to access beyond end of device [ 1856.492925][T18302] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1856.515962][T18302] syz.2.3116: attempt to access beyond end of device [ 1856.515962][T18302] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1856.531401][T18302] syz.2.3116: attempt to access beyond end of device [ 1856.531401][T18302] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1856.547256][T18302] syz.2.3116: attempt to access beyond end of device [ 1856.547256][T18302] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1856.563367][T18302] syz.2.3116: attempt to access beyond end of device [ 1856.563367][T18302] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1856.579452][T18302] syz.2.3116: attempt to access beyond end of device [ 1856.579452][T18302] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1856.595187][T18302] syz.2.3116: attempt to access beyond end of device [ 1856.595187][T18302] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1856.611508][T18302] syz.2.3116: attempt to access beyond end of device [ 1856.611508][T18302] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1856.628450][T18302] syz.2.3116: attempt to access beyond end of device [ 1856.628450][T18302] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1856.644949][T18302] syz.2.3116: attempt to access beyond end of device [ 1856.644949][T18302] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1856.804396][T18318] loop4: detected capacity change from 0 to 128 [ 1856.883338][T18318] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1856.902435][T18318] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1857.906923][T17133] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1857.977171][T18330] loop5: detected capacity change from 0 to 512 [ 1858.164346][T18330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1858.242521][T18330] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1858.329783][T18330] fs-verity (loop5, inode 15): Unrecognized descriptor size: 0 bytes [ 1858.506109][T11697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1858.638850][T10405] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1858.670792][T10405] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1858.965651][T10405] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1861.052693][T18357] syzkaller0: entered promiscuous mode [ 1861.059712][T18357] syzkaller0: entered allmulticast mode [ 1861.180281][T18360] ksmbd: Unknown IPC event: 0, ignore. [ 1861.970846][T18366] loop5: detected capacity change from 0 to 128 [ 1862.003354][T18366] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1862.074285][T18366] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1863.256685][T11697] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1864.919765][T18381] loop5: detected capacity change from 0 to 40427 [ 1864.957390][T18382] loop4: detected capacity change from 0 to 16 [ 1866.184829][T18382] erofs: (device loop4): mounted with root inode @ nid 36. [ 1866.199837][T18381] F2FS-fs (loop5): invalid crc value [ 1866.229270][T18381] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1866.325526][T18381] F2FS-fs (loop5): Start checkpoint disabled! [ 1866.335904][T18381] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1866.557421][ T28] audit: type=1800 audit(1754592075.163:4595): pid=18387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3135" name="bus" dev="loop5" ino=14 res=0 errno=0 [ 1866.759520][T18387] bio_check_eod: 182 callbacks suppressed [ 1866.759562][T18387] syz.5.3135: attempt to access beyond end of device [ 1866.759562][T18387] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1866.784524][T18387] syz.5.3135: attempt to access beyond end of device [ 1866.784524][T18387] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1866.802570][T18387] syz.5.3135: attempt to access beyond end of device [ 1866.802570][T18387] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1866.820682][T18387] syz.5.3135: attempt to access beyond end of device [ 1866.820682][T18387] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1866.838363][T18387] syz.5.3135: attempt to access beyond end of device [ 1866.838363][T18387] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1866.858423][T18387] syz.5.3135: attempt to access beyond end of device [ 1866.858423][T18387] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1866.874911][T18387] syz.5.3135: attempt to access beyond end of device [ 1866.874911][T18387] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1866.892119][T18387] syz.5.3135: attempt to access beyond end of device [ 1866.892119][T18387] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1866.908815][T18387] syz.5.3135: attempt to access beyond end of device [ 1866.908815][T18387] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1866.926232][T18387] syz.5.3135: attempt to access beyond end of device [ 1866.926232][T18387] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1868.197603][T14284] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1870.765989][T18402] loop4: detected capacity change from 0 to 128 [ 1870.974640][T18402] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1871.049271][T18402] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1871.239725][ T1103] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1871.278889][ T1103] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1871.309795][ T1103] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1872.057594][T17133] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1873.329442][T18416] loop4: detected capacity change from 0 to 16 [ 1873.345616][T18416] erofs: (device loop4): mounted with root inode @ nid 36. [ 1875.003961][T18426] ksmbd: Unknown IPC event: 0, ignore. [ 1876.663524][T18433] No such timeout policy "syz1" [ 1877.996271][T18451] loop4: detected capacity change from 0 to 128 [ 1878.163231][T18451] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1878.196003][T18451] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1880.292658][T18466] loop2: detected capacity change from 0 to 16 [ 1880.928630][T18466] erofs: (device loop2): mounted with root inode @ nid 36. [ 1881.839843][T17133] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1883.791694][T18484] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1884.225858][T18487] loop4: detected capacity change from 0 to 40427 [ 1884.273930][T18487] F2FS-fs (loop4): invalid crc value [ 1884.369067][T18487] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1884.495930][T18487] F2FS-fs (loop4): Start checkpoint disabled! [ 1884.514166][T18487] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1884.958288][T18491] loop2: detected capacity change from 0 to 40427 [ 1885.005285][T18491] F2FS-fs (loop2): invalid crc value [ 1885.066930][T18491] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1885.218227][ T28] audit: type=1800 audit(1754592093.823:4596): pid=18497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3161" name="bus" dev="loop4" ino=14 res=0 errno=0 [ 1885.289259][T18497] bio_check_eod: 182 callbacks suppressed [ 1885.289295][T18497] syz.4.3161: attempt to access beyond end of device [ 1885.289295][T18497] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1885.443316][T18497] syz.4.3161: attempt to access beyond end of device [ 1885.443316][T18497] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1885.462892][T18497] syz.4.3161: attempt to access beyond end of device [ 1885.462892][T18497] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1885.480302][T18497] syz.4.3161: attempt to access beyond end of device [ 1885.480302][T18497] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1885.499090][T18497] syz.4.3161: attempt to access beyond end of device [ 1885.499090][T18497] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1885.518119][T18497] syz.4.3161: attempt to access beyond end of device [ 1885.518119][T18497] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1885.534567][T18497] syz.4.3161: attempt to access beyond end of device [ 1885.534567][T18497] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1885.554108][T18497] syz.4.3161: attempt to access beyond end of device [ 1885.554108][T18497] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1885.573574][T18497] syz.4.3161: attempt to access beyond end of device [ 1885.573574][T18497] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1885.593566][T18497] syz.4.3161: attempt to access beyond end of device [ 1885.593566][T18497] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1885.970232][T18491] F2FS-fs (loop2): Start checkpoint disabled! [ 1890.218750][ T1077] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1890.239513][ T1077] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1890.250183][ T1077] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1891.415533][T18521] No such timeout policy "syz1" [ 1892.102290][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1892.311719][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1892.328206][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1892.352148][ T9] usb 5-1: config 0 has no interface number 0 [ 1892.393495][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1892.412223][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.443768][ T9] usb 5-1: Product: syz [ 1892.448044][ T9] usb 5-1: Manufacturer: syz [ 1892.462202][ T9] usb 5-1: SerialNumber: syz [ 1892.482886][ T9] usb 5-1: config 0 descriptor?? [ 1892.509977][ T9] smsc95xx v2.0.0 [ 1892.515108][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1892.542651][ T9] smsc95xx: probe of 5-1:0.67 failed with error -22 [ 1892.606273][T18514] loop5: detected capacity change from 0 to 65536 [ 1892.608841][T18524] loop2: detected capacity change from 0 to 32768 [ 1892.680458][T18524] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1892.699783][T18524] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1892.739309][T18514] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1892.790418][ T5802] Bluetooth: to_multiplier 49751 > 3200 [ 1892.792254][ T9] usb 5-1: USB disconnect, device number 16 [ 1892.819174][T18514] XFS (loop5): Ending clean mount [ 1892.842760][T18524] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1892.996299][T11697] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1893.080300][T18524] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1894.159049][T18542] loop4: detected capacity change from 0 to 40427 [ 1894.217914][T18542] F2FS-fs (loop4): invalid crc value [ 1894.244254][T18542] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1894.343114][T18542] F2FS-fs (loop4): Start checkpoint disabled! [ 1894.353487][T18542] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1894.530813][ T28] audit: type=1800 audit(1754592103.123:4597): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3178" name="bus" dev="loop4" ino=14 res=0 errno=0 [ 1894.732687][T18548] bio_check_eod: 182 callbacks suppressed [ 1894.732724][T18548] syz.4.3178: attempt to access beyond end of device [ 1894.732724][T18548] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1894.755444][T18548] syz.4.3178: attempt to access beyond end of device [ 1894.755444][T18548] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1894.777006][T18548] syz.4.3178: attempt to access beyond end of device [ 1894.777006][T18548] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1894.794583][T18548] syz.4.3178: attempt to access beyond end of device [ 1894.794583][T18548] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1894.814900][T18548] syz.4.3178: attempt to access beyond end of device [ 1894.814900][T18548] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1894.835851][T18548] syz.4.3178: attempt to access beyond end of device [ 1894.835851][T18548] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1894.852852][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 1894.863084][T18548] syz.4.3178: attempt to access beyond end of device [ 1894.863084][T18548] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1894.881645][T18548] syz.4.3178: attempt to access beyond end of device [ 1894.881645][T18548] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1894.898853][T18548] syz.4.3178: attempt to access beyond end of device [ 1894.898853][T18548] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1894.918136][T18548] syz.4.3178: attempt to access beyond end of device [ 1894.918136][T18548] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1897.266782][T18556] loop5: detected capacity change from 0 to 40427 [ 1897.325479][T18556] F2FS-fs (loop5): invalid crc value [ 1897.374063][T18556] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1897.466876][T18556] F2FS-fs (loop5): Start checkpoint disabled! [ 1897.524725][T18556] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1898.475916][ T28] audit: type=1800 audit(1754592107.083:4598): pid=18563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3175" name="bus" dev="loop5" ino=14 res=0 errno=0 [ 1902.473209][ T1077] bio_check_eod: 372 callbacks suppressed [ 1902.473237][ T1077] kworker/u4:5: attempt to access beyond end of device [ 1902.473237][ T1077] loop4: rw=2049, sector=45160, nr_sectors = 16 limit=40427 [ 1902.537857][ T1077] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1902.547570][T16011] kworker/u4:0: attempt to access beyond end of device [ 1902.547570][T16011] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1902.564139][ T1077] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1902.615382][T16011] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1902.693721][T16011] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1902.700704][T16011] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1902.878961][T18569] veth3: entered promiscuous mode [ 1904.736902][T18590] loop4: detected capacity change from 0 to 40427 [ 1904.813619][T18590] F2FS-fs (loop4): invalid crc value [ 1904.826071][T18590] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1905.038509][T18590] F2FS-fs (loop4): Start checkpoint disabled! [ 1905.092814][T18590] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1905.683844][ T28] audit: type=1800 audit(1754592114.263:4599): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3190" name="bus" dev="loop4" ino=14 res=0 errno=0 [ 1905.833535][T18600] syz.4.3190: attempt to access beyond end of device [ 1905.833535][T18600] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1905.854048][T18600] syz.4.3190: attempt to access beyond end of device [ 1905.854048][T18600] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1905.874236][T18600] syz.4.3190: attempt to access beyond end of device [ 1905.874236][T18600] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1905.893615][T18600] syz.4.3190: attempt to access beyond end of device [ 1905.893615][T18600] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1905.912526][T18600] syz.4.3190: attempt to access beyond end of device [ 1905.912526][T18600] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1905.934988][T18600] syz.4.3190: attempt to access beyond end of device [ 1905.934988][T18600] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1905.951993][T18600] syz.4.3190: attempt to access beyond end of device [ 1905.951993][T18600] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1905.970166][T18600] syz.4.3190: attempt to access beyond end of device [ 1905.970166][T18600] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1907.189394][T18604] loop2: detected capacity change from 0 to 40427 [ 1907.202846][T18602] No such timeout policy "syz1" [ 1907.254894][T18604] F2FS-fs (loop2): invalid crc value [ 1907.348636][T18604] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1907.419758][T18604] F2FS-fs (loop2): Start checkpoint disabled! [ 1907.439846][T18604] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1909.588902][ T28] audit: type=1800 audit(1754592118.193:4600): pid=18611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3193" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 1909.659885][T18611] bio_check_eod: 183 callbacks suppressed [ 1909.659918][T18611] syz.2.3193: attempt to access beyond end of device [ 1909.659918][T18611] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1909.809831][T18611] syz.2.3193: attempt to access beyond end of device [ 1909.809831][T18611] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1909.827770][T18611] syz.2.3193: attempt to access beyond end of device [ 1909.827770][T18611] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1909.845452][T18611] syz.2.3193: attempt to access beyond end of device [ 1909.845452][T18611] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1909.865128][T18611] syz.2.3193: attempt to access beyond end of device [ 1909.865128][T18611] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1909.885193][T18611] syz.2.3193: attempt to access beyond end of device [ 1909.885193][T18611] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1909.903670][T18611] syz.2.3193: attempt to access beyond end of device [ 1909.903670][T18611] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1909.920854][T18611] syz.2.3193: attempt to access beyond end of device [ 1909.920854][T18611] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1909.938886][T18611] syz.2.3193: attempt to access beyond end of device [ 1909.938886][T18611] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1909.956402][T18611] syz.2.3193: attempt to access beyond end of device [ 1909.956402][T18611] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1913.135535][T18615] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3195'. [ 1913.227716][T18615] bond_slave_0: entered promiscuous mode [ 1913.234259][T18615] bond_slave_1: entered promiscuous mode [ 1913.277261][T18615] macvtap1: entered promiscuous mode [ 1913.312929][T18615] bond0: entered promiscuous mode [ 1913.318745][T18615] macvtap1: entered allmulticast mode [ 1913.371855][T18615] bond0: entered allmulticast mode [ 1913.377072][T18615] bond_slave_0: entered allmulticast mode [ 1913.413184][T18615] bond_slave_1: entered allmulticast mode [ 1913.419624][T18615] syz_tun: entered allmulticast mode [ 1913.454372][ T4503] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1913.473754][T18615] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1913.502287][ T4503] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1913.509701][ T4503] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1913.585003][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1913.596375][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1913.605209][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1913.683549][T18616] bond0: left allmulticast mode [ 1913.688499][T18616] bond_slave_0: left allmulticast mode [ 1913.740666][T18616] bond_slave_1: left allmulticast mode [ 1913.762777][T18616] syz_tun: left allmulticast mode [ 1913.767922][T18616] bond0: left promiscuous mode [ 1913.783754][T18616] bond_slave_0: left promiscuous mode [ 1913.789533][T18616] bond_slave_1: left promiscuous mode [ 1914.320289][T18618] loop2: detected capacity change from 0 to 64 [ 1914.875047][T18619] overlayfs: upper fs needs to support d_type. [ 1915.260872][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.272324][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.985135][T18619] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1915.999845][T18619] overlayfs: failed to set xattr on upper [ 1916.046093][T18619] overlayfs: ...falling back to redirect_dir=nofollow. [ 1916.062871][T18619] overlayfs: ...falling back to index=off. [ 1916.075941][T18619] overlayfs: ...falling back to uuid=null. [ 1916.412197][T14812] Bad inode number on dev loop2: 4160749571 is out of range [ 1916.445674][T14812] Bad inode number on dev loop2: 4160749571 is out of range [ 1916.749412][T18641] loop4: detected capacity change from 0 to 40427 [ 1916.794109][T18641] F2FS-fs (loop4): invalid crc value [ 1916.840750][T18641] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1916.888846][T18641] F2FS-fs (loop4): Start checkpoint disabled! [ 1916.910419][T18641] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1917.238508][ T28] audit: type=1800 audit(1754592125.843:4601): pid=18641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3204" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1917.305890][ T28] audit: type=1800 audit(1754592125.913:4602): pid=18645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3204" name="bus" dev="loop4" ino=14 res=0 errno=0 [ 1917.485167][T18645] bio_check_eod: 183 callbacks suppressed [ 1917.485199][T18645] syz.4.3204: attempt to access beyond end of device [ 1917.485199][T18645] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1917.509212][T18645] syz.4.3204: attempt to access beyond end of device [ 1917.509212][T18645] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1917.526836][T18645] syz.4.3204: attempt to access beyond end of device [ 1917.526836][T18645] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1917.544983][T18645] syz.4.3204: attempt to access beyond end of device [ 1917.544983][T18645] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1917.563068][T18645] syz.4.3204: attempt to access beyond end of device [ 1917.563068][T18645] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1917.580896][T18645] syz.4.3204: attempt to access beyond end of device [ 1917.580896][T18645] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1917.597765][T18645] syz.4.3204: attempt to access beyond end of device [ 1917.597765][T18645] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1917.615013][T18645] syz.4.3204: attempt to access beyond end of device [ 1917.615013][T18645] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1917.632483][T18645] syz.4.3204: attempt to access beyond end of device [ 1917.632483][T18645] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1917.650345][T18645] syz.4.3204: attempt to access beyond end of device [ 1917.650345][T18645] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1920.602234][T15375] ================================================================== [ 1920.610998][T15375] BUG: KASAN: slab-use-after-free in __mutex_lock+0x6cb/0xcc0 [ 1920.618534][T15375] Read of size 8 at addr ffff88805f6b40a0 by task khidpd_10cf0004/15375 [ 1920.627080][T15375] [ 1920.629445][T15375] CPU: 1 PID: 15375 Comm: khidpd_10cf0004 Not tainted 6.6.101-syzkaller #0 [ 1920.638170][T15375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1920.648276][T15375] Call Trace: [ 1920.651940][T15375] [ 1920.654935][T15375] dump_stack_lvl+0x16c/0x230 [ 1920.659809][T15375] ? __lock_acquire+0x7c80/0x7c80 [ 1920.664942][T15375] ? show_regs_print_info+0x20/0x20 [ 1920.670268][T15375] ? load_image+0x3b0/0x3b0 [ 1920.675070][T15375] ? __virt_addr_valid+0x469/0x540 [ 1920.680201][T15375] print_report+0xac/0x220 [ 1920.684902][T15375] ? __mutex_lock+0x6cb/0xcc0 [ 1920.689613][T15375] kasan_report+0x117/0x150 [ 1920.694146][T15375] ? __mutex_lock+0x6cb/0xcc0 [ 1920.698941][T15375] __mutex_lock+0x6cb/0xcc0 [ 1920.703570][T15375] ? __mutex_lock+0x4e8/0xcc0 [ 1920.708463][T15375] ? l2cap_unregister_user+0x6a/0x1a0 [ 1920.713973][T15375] ? mutex_lock_nested+0x20/0x20 [ 1920.718951][T15375] ? __wake_up_bit+0x1e0/0x1e0 [ 1920.724008][T15375] ? timer_delete_sync+0x20/0x20 [ 1920.728977][T15375] ? _raw_spin_unlock+0x40/0x40 [ 1920.733859][T15375] l2cap_unregister_user+0x6a/0x1a0 [ 1920.739087][T15375] hidp_session_thread+0x3c8/0x410 [ 1920.744259][T15375] ? hidp_session_get+0x80/0x80 [ 1920.749133][T15375] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1920.755325][T15375] ? hidp_session_thread+0x410/0x410 [ 1920.760826][T15375] ? hidp_session_thread+0x410/0x410 [ 1920.766169][T15375] ? __kthread_parkme+0x7a/0x1c0 [ 1920.771331][T15375] ? __kthread_parkme+0x162/0x1c0 [ 1920.777370][T15375] kthread+0x2fa/0x390 [ 1920.781685][T15375] ? hidp_session_get+0x80/0x80 [ 1920.786828][T15375] ? kthread_blkcg+0xd0/0xd0 [ 1920.791535][T15375] ret_from_fork+0x48/0x80 [ 1920.796171][T15375] ? kthread_blkcg+0xd0/0xd0 [ 1920.801086][T15375] ret_from_fork_asm+0x11/0x20 [ 1920.806088][T15375] [ 1920.809125][T15375] [ 1920.811555][T15375] Allocated by task 14812: [ 1920.816198][T15375] kasan_set_track+0x4e/0x70 [ 1920.821165][T15375] __kasan_kmalloc+0x8f/0xa0 [ 1920.826487][T15375] __kmalloc+0xb4/0x240 [ 1920.830755][T15375] hci_alloc_dev_priv+0x28/0x2040 [ 1920.835925][T15375] vhci_create_device+0x11b/0x6e0 [ 1920.841063][T15375] vhci_write+0x3b5/0x470 [ 1920.845429][T15375] vfs_write+0x43b/0x940 [ 1920.849867][T15375] ksys_write+0x147/0x250 [ 1920.854305][T15375] do_syscall_64+0x55/0xb0 [ 1920.858907][T15375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1920.864911][T15375] [ 1920.867252][T15375] Freed by task 14812: [ 1920.871329][T15375] kasan_set_track+0x4e/0x70 [ 1920.875960][T15375] kasan_save_free_info+0x2e/0x50 [ 1920.881210][T15375] ____kasan_slab_free+0x126/0x1e0 [ 1920.886453][T15375] slab_free_freelist_hook+0x130/0x1b0 [ 1920.891937][T15375] __kmem_cache_free+0xba/0x1f0 [ 1920.896822][T15375] bt_host_release+0x82/0x90 [ 1920.901563][T15375] device_release+0x96/0x1c0 [ 1920.906499][T15375] kobject_put+0x221/0x470 [ 1920.910953][T15375] vhci_release+0x8b/0xd0 [ 1920.915586][T15375] __fput+0x234/0x970 [ 1920.919684][T15375] task_work_run+0x1ce/0x250 [ 1920.924583][T15375] do_exit+0x90b/0x23c0 [ 1920.928849][T15375] do_group_exit+0x21b/0x2d0 [ 1920.933712][T15375] __x64_sys_exit_group+0x3f/0x40 [ 1920.938773][T15375] do_syscall_64+0x55/0xb0 [ 1920.943293][T15375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1920.949223][T15375] [ 1920.951559][T15375] Last potentially related work creation: [ 1920.957419][T15375] kasan_save_stack+0x3e/0x60 [ 1920.962109][T15375] __kasan_record_aux_stack+0xaf/0xc0 [ 1920.967520][T15375] insert_work+0x3d/0x310 [ 1920.971868][T15375] __queue_work+0xd2c/0x1020 [ 1920.976563][T15375] queue_work_on+0x121/0x1e0 [ 1920.981254][T15375] process_scheduled_works+0xa45/0x15b0 [ 1920.986827][T15375] worker_thread+0xa55/0xfc0 [ 1920.991463][T15375] kthread+0x2fa/0x390 [ 1920.995562][T15375] ret_from_fork+0x48/0x80 [ 1921.000004][T15375] ret_from_fork_asm+0x11/0x20 [ 1921.004791][T15375] [ 1921.007300][T15375] Second to last potentially related work creation: [ 1921.013889][T15375] kasan_save_stack+0x3e/0x60 [ 1921.018577][T15375] __kasan_record_aux_stack+0xaf/0xc0 [ 1921.024165][T15375] insert_work+0x3d/0x310 [ 1921.028686][T15375] __queue_work+0xc39/0x1020 [ 1921.033309][T15375] call_timer_fn+0x16e/0x530 [ 1921.038039][T15375] __run_timers+0x558/0x7d0 [ 1921.042677][T15375] run_timer_softirq+0x67/0xf0 [ 1921.047468][T15375] handle_softirqs+0x280/0x820 [ 1921.052299][T15375] __irq_exit_rcu+0xc7/0x190 [ 1921.057012][T15375] irq_exit_rcu+0x9/0x20 [ 1921.061279][T15375] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1921.067313][T15375] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1921.073333][T15375] [ 1921.075678][T15375] The buggy address belongs to the object at ffff88805f6b4000 [ 1921.075678][T15375] which belongs to the cache kmalloc-8k of size 8192 [ 1921.090278][T15375] The buggy address is located 160 bytes inside of [ 1921.090278][T15375] freed 8192-byte region [ffff88805f6b4000, ffff88805f6b6000) [ 1921.104456][T15375] [ 1921.106804][T15375] The buggy address belongs to the physical page: [ 1921.113248][T15375] page:ffffea00017dac00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f6b0 [ 1921.123521][T15375] head:ffffea00017dac00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1921.132495][T15375] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1921.140683][T15375] page_type: 0xffffffff() [ 1921.145146][T15375] raw: 00fff00000000840 ffff888017842280 ffffea0000894e00 dead000000000004 [ 1921.153953][T15375] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 1921.162774][T15375] page dumped because: kasan: bad access detected [ 1921.169223][T15375] page_owner tracks the page as allocated [ 1921.174964][T15375] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 14635, tgid 14634 (syz.6.2204), ts 1339063088363, free_ts 1339015689305 [ 1921.196006][T15375] post_alloc_hook+0x1cd/0x210 [ 1921.200800][T15375] get_page_from_freelist+0x195c/0x19f0 [ 1921.206371][T15375] __alloc_pages+0x1e3/0x460 [ 1921.211007][T15375] alloc_slab_page+0x5d/0x170 [ 1921.215741][T15375] new_slab+0x87/0x2e0 [ 1921.219843][T15375] ___slab_alloc+0xc6d/0x12f0 [ 1921.224562][T15375] __kmem_cache_alloc_node+0x1a2/0x260 [ 1921.230302][T15375] kmalloc_trace+0x2a/0xe0 [ 1921.234758][T15375] tipc_mon_create+0xc2/0x490 [ 1921.239505][T15375] __tipc_nl_bearer_enable+0xde8/0x1360 [ 1921.245795][T15375] tipc_nl_compat_doit+0x3b0/0x5e0 [ 1921.250953][T15375] tipc_nl_compat_recv+0x83d/0xbe0 [ 1921.256257][T15375] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1921.262008][T15375] genl_rcv_msg+0x60b/0x790 [ 1921.266613][T15375] netlink_rcv_skb+0x216/0x480 [ 1921.271749][T15375] genl_rcv+0x28/0x40 [ 1921.275756][T15375] page last free stack trace: [ 1921.280443][T15375] free_unref_page_prepare+0x7ce/0x8e0 [ 1921.286014][T15375] free_unref_page+0x32/0x2e0 [ 1921.290710][T15375] __unfreeze_partials+0x1cf/0x210 [ 1921.295852][T15375] put_cpu_partial+0x17c/0x250 [ 1921.300666][T15375] __slab_free+0x31d/0x410 [ 1921.305207][T15375] qlist_free_all+0x75/0xe0 [ 1921.309916][T15375] kasan_quarantine_reduce+0x143/0x160 [ 1921.315410][T15375] __kasan_slab_alloc+0x22/0x80 [ 1921.320274][T15375] slab_post_alloc_hook+0x6e/0x4d0 [ 1921.325497][T15375] kmem_cache_alloc+0x11e/0x2e0 [ 1921.330487][T15375] ptlock_alloc+0x20/0x70 [ 1921.334845][T15375] pte_alloc_one+0xce/0x540 [ 1921.339582][T15375] __pte_alloc+0x22/0x2a0 [ 1921.344033][T15375] vm_insert_page+0x68d/0x8b0 [ 1921.348736][T15375] kcov_mmap+0xe9/0x160 [ 1921.353030][T15375] mmap_region+0xe57/0x1f80 [ 1921.357642][T15375] [ 1921.360085][T15375] Memory state around the buggy address: [ 1921.365819][T15375] ffff88805f6b3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1921.374331][T15375] ffff88805f6b4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1921.382448][T15375] >ffff88805f6b4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1921.390975][T15375] ^ [ 1921.396282][T15375] ffff88805f6b4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1921.404535][T15375] ffff88805f6b4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1921.412959][T15375] ================================================================== [ 1921.428760][T15375] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1921.436110][T15375] CPU: 1 PID: 15375 Comm: khidpd_10cf0004 Not tainted 6.6.101-syzkaller #0 [ 1921.445362][T15375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1921.455647][T15375] Call Trace: [ 1921.458965][T15375] [ 1921.461935][T15375] dump_stack_lvl+0x16c/0x230 [ 1921.466665][T15375] ? show_regs_print_info+0x20/0x20 [ 1921.471996][T15375] ? load_image+0x3b0/0x3b0 [ 1921.476855][T15375] panic+0x2c0/0x710 [ 1921.480888][T15375] ? bpf_jit_dump+0xd0/0xd0 [ 1921.485445][T15375] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 1921.491506][T15375] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1921.497770][T15375] ? _raw_spin_unlock+0x40/0x40 [ 1921.502775][T15375] ? print_memory_metadata+0x314/0x400 [ 1921.508284][T15375] ? __mutex_lock+0x6cb/0xcc0 [ 1921.512999][T15375] check_panic_on_warn+0x84/0xa0 [ 1921.518422][T15375] ? __mutex_lock+0x6cb/0xcc0 [ 1921.523524][T15375] end_report+0x6f/0x140 [ 1921.527814][T15375] kasan_report+0x128/0x150 [ 1921.532363][T15375] ? __mutex_lock+0x6cb/0xcc0 [ 1921.537357][T15375] __mutex_lock+0x6cb/0xcc0 [ 1921.542009][T15375] ? __mutex_lock+0x4e8/0xcc0 [ 1921.546909][T15375] ? l2cap_unregister_user+0x6a/0x1a0 [ 1921.552770][T15375] ? mutex_lock_nested+0x20/0x20 [ 1921.557841][T15375] ? __wake_up_bit+0x1e0/0x1e0 [ 1921.562728][T15375] ? timer_delete_sync+0x20/0x20 [ 1921.567881][T15375] ? _raw_spin_unlock+0x40/0x40 [ 1921.572940][T15375] l2cap_unregister_user+0x6a/0x1a0 [ 1921.578253][T15375] hidp_session_thread+0x3c8/0x410 [ 1921.583486][T15375] ? hidp_session_get+0x80/0x80 [ 1921.588372][T15375] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1921.594300][T15375] ? hidp_session_thread+0x410/0x410 [ 1921.599643][T15375] ? hidp_session_thread+0x410/0x410 [ 1921.604964][T15375] ? __kthread_parkme+0x7a/0x1c0 [ 1921.609970][T15375] ? __kthread_parkme+0x162/0x1c0 [ 1921.615211][T15375] kthread+0x2fa/0x390 [ 1921.619329][T15375] ? hidp_session_get+0x80/0x80 [ 1921.624584][T15375] ? kthread_blkcg+0xd0/0xd0 [ 1921.629219][T15375] ret_from_fork+0x48/0x80 [ 1921.633666][T15375] ? kthread_blkcg+0xd0/0xd0 [ 1921.638268][T15375] ret_from_fork_asm+0x11/0x20 [ 1921.643307][T15375] [ 1921.646718][T15375] Kernel Offset: disabled [ 1921.651231][T15375] Rebooting in 86400 seconds..