last executing test programs: 4m46.981825279s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$usbfs(0x0, 0x75, 0x101301) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0xc0185500, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$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") 4m43.675530367s ago: executing program 1 (id=6): listen(0xffffffffffffffff, 0x3) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x46) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0xd, 0x80000000}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x5) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40801) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 4m27.844420699s ago: executing program 32 (id=6): listen(0xffffffffffffffff, 0x3) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x46) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0xd, 0x80000000}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x5) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40801) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 9.598517796s ago: executing program 3 (id=794): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="8b375530f2a1de05ec00b48cf33f536dc647159a5556065cf4371d49", 0x1c}], 0x1) 9.475306655s ago: executing program 3 (id=795): syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0xa0282, 0x8, 0x10}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1002, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0x6000003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x2000009, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x3, 0x100, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r4, 0x0, r2, &(0x7f00000000c0)=0x10000, 0x10000001, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 8.514912982s ago: executing program 0 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x6, 0xf1, 0x0, 0x0, @str='+\x00'}]}, 0x18}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414ff"], 0x24}}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xffffffff, 0x0, 0x54, 0x5}, 0x9c) 8.371393971s ago: executing program 5 (id=801): r0 = open(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setsig(r0, 0xa, 0x21) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2481, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) 7.428318818s ago: executing program 5 (id=804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r3, &(0x7f00000001c0)={0x0, 0x10, 0x1, @thr={0x0, 0x0}}) 7.165159167s ago: executing program 0 (id=805): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x5, 0x2, 0x8080000, 0x2000, &(0x7f0000ff6000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="360f01caba430066ed66b832cffda90f23c80f21f866350800d0000f23f8baf80c66b8ae96948066efbafc0cec2e660f7d220f01cb66b92c0800000f32b868048ed00f0f1e0098940f01c2"}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.863321876s ago: executing program 4 (id=806): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) 6.790384655s ago: executing program 0 (id=807): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) set_mempolicy(0x2, 0x0, 0x3) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = inotify_init1(0x0) readv(r3, &(0x7f0000000340)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200000018000480140001800a00010072616e67650000007de450d5c3ceb70957003e000c040002800900010073797a30000000000900020073797a320000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) kexec_load(0x4, 0x3, &(0x7f0000000440)=[{&(0x7f00000001c0)="3d9d", 0x2, 0x4, 0xfffffffffffffc01}, {&(0x7f0000000240)="4d52c41a3fa3241e0e33f6b06e13db80c3dee07b4167ffa3d794abc5c5c2292dcd5f285e32", 0x25, 0x63ec, 0x4}, {&(0x7f00000002c0)="d3779e95b05a7e83b2b8edd7660a5483a8b1fbd7de610a56e8db5e9aae7441dbf5173211d65b69c22477c908dbca0ff43d084615bd38141f8ab10e25", 0x3c, 0x5, 0x8}], 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x2218a5d, &(0x7f0000000140), 0x0, 0x96d6, &(0x7f0000013100)="$eJzs2gm4pnPhuPH3DGOXMVRSaiqiRdYsUWYGMxSSJdoRSVlKKlpHJaWNFtqUfctWllC2VpK9hRJCZY202Ib5X2fmDGO6+en/W1T3fV/XOe/7Pu/zPOf7fj/Pcg6z5aRNJw4G8wxmNG4we2dfNXnqmCs2uu3wbRY+aoWT7trv4SsuOX7kccLI48TBYDBq5O2hGcvGDk4+ZdRgzunLH2r+eecbWnAwWHHk5ch+BqvOeFjw0pnrTZut2Qc69NC3fWZ8TW+h4R8x/OSQ/fY6dDAYjJll+6HBYGjKP3xQaVtOmDzpIasH3YatRo88n/VrrhlfC14wGCx42oCPj1nXHXocPtLwz5zyvLNGb/Q4/Ox/u7acMHn92fyHz8U5RpatOnyOz34OGpv9OL9lqa1WH5nC6cfbYDB8iXvYufJv0ZYTJm0weOTr/ODwNc7bZ9qM6+bcgxk3inkHg8F8I9fXBR5vl/rvNWHiStPv2TNfj7DPPJan0HFx7BtOeGD4Jj0YDBYZDMauN/NeUFVVVf8eTZi40tpw/5/n0e7/J564+Gnd/6uqqv59W3/CxJWG7/Wz3f8XeLT7/66Ln//hGf/tf/yqM7Z64PH9EFVVVfVPNWl9vP+PebT7/6prX7xB9/+qqqp/3zbZcPr9f4HZ7v+LPtr9/7UnrLHEyHozf2+4f5ZdDs3y/xPum2X5HLMsv3eW5aNn2c+s6881y/K7Z1k+9/B7sP64wWDszH8vOPWhxWPHDb83svyeWZaPf+jf6Sy5zizLJ8yyfNIsyyeOjHV4+eRZlk+eZf31HmWqq6qq/mXaZKVJaw9m+Xf2I4sXm/k+3f/PPf3qZR+v8VZVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdW/Zw/cdsZZg8FgaDAYjBoMpg5Gns/6OJg2bdq04dcnnnPJJY/bQP81Gjr7qslTx1yx0W2Hb7PwUSucdNd+D83Sv23//p+g/jsN+89zzLjBYOfNH++h1ONQ57+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u3vs/vP8r46jHp86/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7uHvIf9biOox6fOv/d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uAduO+OskWNg1GAwdTDyfMrMx9P3fc3rRlZdfYuT7tj/oS2XHL/DyLOzr5o8dYfHYeyPQ0PDn3XMFRvddvg2Cx+1wkl37fcfcPb8+3+C+u803X+HocFg5PweM3wubzRhk82WGQwG+99x0harDB58b7Xh99YYO8dgjumbLjP9+7pL8o6nrDfjcfzwt0Uf3MeJ0/e//rSD5xiabRCz9JKzrzv8LVvetfLsj0s/8ucYNfPJodeceue0adOmPWzhSPM8wsYz9z/zs8x+no+MfZnhsS+3205vX+6de7x32R122nr77bbfbucVVlpt5VVWXGGV1V+03Jt32HG75Wd8f4Q5Gzf9+9qPZc4WmH3Obpsw65zN/tkeac7GPfqcTd/j1PcObTZzzub8J+ds7Uefs3E7jPygJcePHmw1fWqGBoMl1xk92H34xQpzDwZLrjuy7mLD6645dtRgsO9DH3T42dwPHoNDU4bX2XLSphMfGtk/fsJ/uE4/bMUlx488Thh5nDhjiOMGDx2KYwcnnzJqeC4eNs3zzzvf0IKDwYojL0f2M1h95N2DZq43bbZmH+jQQ9/2mfE1vYWGdzL85K3Ln3Hl8Lk42/b/G/1/Xf//wWu1oQcnamjka2SdGV4TJq//0M+aPg3DczfHyLJVh01mn7P/yf5hvOPmHIx5lPFOWn/iSsOLZ5v/mZvg8XX7Uue9b8axNX7VGVs98P+NQuNd4FHGu/4EHO8CjzbeY95/0SkzdvU/Nt7ZrnUbTP8+/rFc6waPfq2bg3aw3YVLzH6te/kjD/Fh5/HMOZp7tpUe6Vq3+wErThne//hHv9ZtMDz20Q+71o0aDJZce+a1bvjCN2n0YN/hFysOv5g8enDU8IuVpr+Yd3DO8IsXvmmXHbcdXrDezDlZfni/48cOTXc/b9Wbl572+WnT1hkZy/ixDx/ryPExbtb7+YSxMyZz5rYz9zu86sz93vjkGe9NGtnvhH9ivzO3pfHesdCM9yaP7HfibPsd/Sj7nbntP5wPyww9eOF6hOvNpNmuNyN/48z8cQ/7mmvG14IXDAYLnka+s637X14z6fyd51HGO2HiSmsPj2+28/fBw5HO34smXzF8r1hwMBgsMhiMXW/m2P/Jhh5pvHM++ngnwnjnfLTxXnb0Thv+D4x3MMt4H3acbbnJjGNlvZHjbPI/cfzO3Hb269jo6e/OuOyv91iuY+P+4Tq25xyjZpvsWXqk39m2hfVnPF/sod9zrzr+yJlzP3q2/f5Xv7PN8lmG4Do2Zra/50etd+1giOZ8yjFrXjz0hUef89GDh/9tMXPOZ277aHM++bHM+dMefc4f6+/Jyzx7xvujZxv/rHO+8aee+smZcz7XbPv9r+Z88qPfO/5xzscPRtOcL3/vjHl7tOvpI835zG1nzvnwR1xj7JyDdYfvWSNzPumxzPli/zPH+Xyw/ozn2z246MzDT3rVzDmffY7/qzmf9M/O+bgHj/Mlp7/3rFGDueYa7L71brvtusKM7zNfrjjjO1+L7r5qxjw/2r30kYxmbvto58U6j8VozGMyGvqvjBaf85GMHjq1Dttl1yf9/16L1vlnjQZ8LbriyBnz9mi/Fz3SnM/clu6Di86y/ex/h26y4fTfuxeY7T44cxO8D555+gZ7z9zlyGb3zzbMmffV+2ZZPscsy++dZfnoWfYz6/pzzbL87lmWD3+EuWZZfybruOG/eUeWT31o9bHDvzyNG1l+zyzLxz+07ZLrzLJ8wizLJ82yfOJDh8aSk2dZPnmW9dcb/JPN/G/SO8x+ka/HWv/9113+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7gHbjvjrJFjYNRgMHUw4/nQyONgytDGt641/DgYDEavety0jR/v8T7ODZ191eSpY67Y6LbDt1n4qBVOumu//4Cz59//E9R/p+n+OwwNBiPn95gdBoPBRhM22WyZwWCw8bTjVh01ePC9xYbfW3PsqMFg36GH7WDuB9cZmjK8zpaTNp04GMwzssa4f/ih/3AePWzFJcePPE4YeZw44/o0bvDQ8Tp2cPIpowZzTl/+UPPPO9/QgoPBiiMvR/YzWHXGw4KXzlxv2mzNPtChh77tM+NregsN/4jhJ7tvP/npw3M12/b/Ms28Vu8w6r9ctfPfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xT1w2xlnjRwDowaDqYMZz4emjDwOhk44+bkjh8joPS4/4uDHe7yPc0NnXzV56pgrNrrt8G0WPmqFk+7a7z/g7Pn3/wT132m6/w5Dg8HI+T1mh8FgsNGETTZbZjAYHHzE5XuMGjz43mLD7605dtRgsO/Qw3Yw94PrDE0ZXmfLSZtOHAzmGVlj3D/80H84jx624pLjRx4njDxOnHF9Gjd46HgdOzj5lFGDOacvf6j5551vaMHBYMWRlyP7Gaw642HBS2euN222Zh/o0EPf9pnxNb2Fhn/E8JO9FrjqhOG5mm37f5lmXqt3GPVfrtr57y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uIeuO2Ms0aOgVGDwdTBjOejRh6Hptxw/Qc3G34cfr3wentf9XiP93Fu6OyrJk8dc8VGtx2+zcJHrXDSXfv9B5w9//6foP47DfvPc8y4wWDnzR/vodTjUOe/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vf3YP+H3p8x1GPT53/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xD9x2xlkjT0c9tHTUlI4LbOjsqyZPHXPFRrcdvs3CR61w0l37Pd4D+u/2CP575o9Z/D+cP2bx/0j+mMX/o/ljFv+98scs/h/LH7P4750/ZvH/eP6Yxf8T+WMW/33yxyz+n8wfs/h/Kn/M4v/p/DGL/2fyxyz+n80fs/jvmz9m8d8vf8zi/7n8MYv/5/PHLP5fyB+z+H8xf8ziv3/+mMX/gPwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi//X8scs/gfmj1n8v54/ZvH/Rv6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/t/MH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv9v5Y9Z/L+dP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/7+SPWfxPyx+z+J+eP2bxPyN/zOL/3fwxi//38scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/+/ljFv8f5I9Z/H+YP2bx/1H+mMX/x/ljFv+f5I9Z/M/LH7P4n58/ZvH/af6Yxf+C/DGL/8/yxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/n+ePWfx/kT9m8f9l/pjF/1f5Yxb/K/LHLP5X5o9Z/H+dP2bx/03+mMX/qvwxi/9v88cs/lfnj1n8r8kfs/hfmz9m8f9d/pjF/7r8MYv/9fljFv8b8scs/r/PH7P4/yF/zOL/x/wxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOL/p/wxi//t+WMW/zvyxyz+f84fs/jfmT9m8f9L/pjF/6/5Yxb/v+WPWfz/nj9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+U/PHLP73549Z/B/IH7P4T8sfk/jPMcgfs/gP5Y9Z/Eflj1n858gfs/jPmT9m8R+dP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvF/Qv6YxX+h/DGL/xib/8sWfEyrWfwXtvk/xiz+Y/PHLP6L5I9Z/BfNH7P4PzF/zOL/pPwxi/+T88cs/ovlj1n8n5I/ZvFfPH/M4v/U/DGL/9Pyxyz+S+SPWfyfnj9m8X9G/pjFf1z+mMX/mfljFv9n5Y9Z/J+dP2bxXzJ/zOK/VP6Yxf85+WMW/6Xzxyz+y+SPWfyfmz9m8X9e/pjF//n5Yxb/F+SPWfyXzR+z+L8wf8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+L8of8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+L84fs/ivkT9m8V8zf8zi/5L8MYv/S/PHLP5r5Y9Z/Mfnj1n8J+SPWfwn5o9Z/NfOH7P4r5M/ZvFfN3/M4j8pf8ziPzl/zOK/Xv6YxX/9/DGL/8vyxyz+L88fs/hvkD9m8d8wf8ziv1H+mMX/FfljFv+N88cs/q/MH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/q/LHLP5b5I9Z/LfMH7P4vzp/zOL/mvwxi/9r88cs/q/LH7P4vz5/zOL/hvwxi/8b88cs/lvlj1n8t84fs/hvkz9m8X9T/pjFf9v8MYv/dvljFv83549Z/LfPH7P4vyV/zOK/Q/6Yxf+t+WMW/7flj1n8d8wfs/jvlD9m8d85f8ziv0v+mMX/7fljFv935I9Z/HfNH7P4vzN/zOK/W/6Yxf9d+WMW/3fnj1n835M/ZvHfPX/M4r9H/pjF/735Yxb/9+WPWfzfnz9m8f9A/pjF/4P5Yxb/D+WPWfyn5I9Z/PfMH7P4fzh/zOL/kfwxi/9H88cs/nvlj1n8P5Y/ZvHfO3/M4v/x/DGL/yfyxyz+++SPWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8d83f8ziv1/+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMV///wxi/8B+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/6/lj1n8D8wfs/h/PX/M4v+N/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8v5k/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/t/KH7P4fzt/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP7fyR+z+J+WP2bxPz1/zOJ/Rv6Yxf+7+WMW/+/lj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4n5c/ZvE/P3/M4v/T/DGL/wX5Yxb/n+WPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP4/zx+z+P8if8zi/8v8MYv/r/LHLP5X5I9Z/K/MH7P4/zp/zOL/m/wxi/9V+WMW/9/mj1n8r84fs/hfkz9m8b82f8zi/7v8MYv/dfljFv/r88cs/jfkj1n8f58/ZvH/Q/6Yxf+P+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf9P+WMW/9vzxyz+d+SPWfz/nD9m8b8zf8zi/5f8MYv/X/PHLP5/yx+z+P89f8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfyn5o9Z/O/PH7P4P5A/ZvGflj8m8Z9zkD9m8R/KH7P4j8ofs/jPkT9m8Z8zf8ziPzp/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v+E/DGL/0L5Yxb/MfljFv+F88cs/mPzxyz+i+SPWfwXzR+z+D8xf8zi/6T8MYv/k/PHLP6L5Y9Z/J+SP2bxXzx/zOL/1Pwxi//T8scs/kvkj1n8n54/ZvF/Rv6YxX9c/pjF/5n5Yxb/Z+WPWfyfnT9m8V8yf8ziv1T+mMX/OfljFv+l88cs/svkj1n8n5s/ZvF/Xv6Yxf/5+WMW/xfkj1n8l80fs/i/MH/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8V84fs/i/KH/M4r9K/pjFf9X8MYv/avljFv/V88cs/i/OH7P4r5E/ZvFfM3/M4v+S/DGL/0vzxyz+a+WPWfzH549Z/Cfkj1n8J+aPWfzXzh+z+K+TP2bxXzd/zOI/KX/M4j85f8ziv17+mMV//fwxi//L8scs/i/PH7P4b5A/ZvHfMH/M4r9R/pjF/xX5Yxb/jfPHLP6vzB+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/6vyxyz+W+SPWfy3zB+z+L86f8zi/5r8MYv/a/PHLP6vyx+z+L8+f8zi/4b8MYv/G/PHLP5b5Y9Z/LfOH7P4b5M/ZvF/U/6YxX/b/DGL/3b5Yxb/N+ePWfy3zx+z+L8lf8ziv0P+mMX/rfljFv+35Y9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjF/+35Yxb/d+SPWfx3zR+z+L8zf8ziv1v+mMX/XYPB4H0THq9B/etm8X935z9m8X9P/pjFf/f8MYv/HvljFv/35o9Z/N+XP2bxf3/+mMX/A/ljFv8P5o9Z/D+UP2bxn5I/ZvHfM3/M4v/h/DGL/0fyxyz+H80fs/jvlT9m8f9Y/pjFf+/8MYv/x/PHLP6fyB+z+O+TP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMV/3/wxi/9++WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW//3zxyz+B+SPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8T8wf8zi//X8MYv/N/LHLP4H5Y9Z/A/OHxs1cPgfkj9mOf8PzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/L+ZP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP7fyh+z+H87f8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+38kfs/iflj9m8T89f8zif0b+mMX/u/ljFv/v5Y9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+J+XP2bxPz9/zOL/0/wxi/8F+WMW/5/lj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+P88fs/j/In/M4v/L/DGL/6/yxyz+V+SPWfyvzB+z+P86f8zi/5v8MYv/VfljFv/f5o9Z/K/OH7P4X5M/ZvG/Nn/M4v+7/DGL/3X5Yxb/6/PHLP435I9Z/H+fP2bx/0P+mMX/j/ljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/T/ljFv/b88cs/nfkj1n8/5w/ZvG/M3/M4v+X/DGL/1/zxyz+f8sfs/j/PX/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8p+aPWfzvzx+z+D+QP2bxn5Y/JvEfPcgfs/gP5Y9Z/Eflj1n858gfs/jPmT9m8R+dP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvF/Qv6YxX+h/DGL/5j8MYv/wvljFv+x+WMW/0Xyxyz+i+aPWfyfmD9m8X9S/pjF/8n5Yxb/xfLHLP5PyR+z+C+eP2bxf2r+mMX/afljFv8l8scs/k/PH7P4PyN/zOI/Ln/M4v/M/DGL/7Pyxyz+z84fs/gvmT9m8V8qf8zi/5z8MYv/0vljFv9l8scs/s/NH7P4Py9/zOL//Pwxi/8L8scs/svmj1n8X5g/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8X5Q/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv8X549Z/NfIH7P4r5k/ZvF/Sf6Yxf+l+WMW/7Xyxyz+4/PHLP4T8scs/hPzx/5z/eeYdenotfPH/nP9H37+r5M/ZvFfN3/M4j8pf8ziPzl/zOK/Xv6YxX/9/DGL/8vyxyz+L88fs/hvkD9m8d8wf8ziv1H+mMX/FfljFv+N88cs/q/MH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/q/LHLP5b5I9Z/LfMH7P4vzp/zOL/mvwxi/9r88cs/q/LH7P4vz5/zOL/hvwxi/8b88cs/lvlj1n8t84fs/hvkz9m8X9T/pjFf9v8MYv/dvljFv83549Z/LfPH7P4vyV/zOK/Q/6Yxf+t+WMW/7flj1n8d8wfs/jvlD9m8d85f8ziv0v+c9JCi//b88cs/u/IH7P475o/ZvF/Z/6YxX+3/DGL/7vyxyz+784fs/i/J3/M4r97/pjFf4/8MYv/e/PHLP7vyx+z+L8/f8zi/4H8MYv/B/PHLP4fyh+z+E/JH7P475k/ZvH/cP6Yxf8j+WMW/4/mj1n898ofs/h/LH/M4r93/pjF/+P5Yxb/T+SPWfz3yR+z+H8yf8zi/6n8MYv/p/PHLP6fyR+z+H82f8ziv2/+mMV/v/wxi//n8scs/p/PH7P4fyF/zOL/xfwxi//++WMW/wPyxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/gfmD9m8f96/pjF/xv5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/h/M3/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8v5U/ZvH/dv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/L+TP2bxPy1/zOJ/ev6Yxf+M/DGL/3fzxyz+38sfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvE/L3/M4n9+/pjF/6f5Yxb/C/LHLP4/yx+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/IH7P4X5k/ZvH/df6Yxf83+WMW/6vyxyz+v80fs/hfnT9m8b8mf8zif23+mMX/d/ljFv/r8scs/tfnj1n8b8gfs/j/Pn/M4v+H/DGL/x/zxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/5/yxyz+t+ePWfzvyB+z+P85f8zif2f+mMX/L/ljFv+/5o9Z/P+WP2bx/3v+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+E/NH7P4358/ZvF/IH/M4j8tf0ziP9cgf8ziP5Q/ZvEflT9m8Z8jf8ziP2f+mMV/dP6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjF/wn5Yxb/hfLHLP5j8scs/gvnj1n8x+aPWfwXyR+z+C+aP2bxf2L+mMX/SfljFv8n549Z/BfLH7P4PyV/zOK/eP6Yxf+p+WMW/6flj1n8l8gfs/g/PX/M4v+M/DGL/7j8MYv/M/PHLP7Pyh+z+D87f8ziv2T+mMV/qfwxi/9z8scs/kvnj1n8l8kfs/g/N3/M4v+8/DGL//Pzxyz+L8gfs/gvmz9m8X9h/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8X9R/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8X5w/ZvFfI3/M4r9m/pjF/yX5Yxb/l+aPWfzXyh+z+I/PH7P4T8gfs/hPzB+z+K+dP2bxXyd/zOK/bv6YxX9S/pjFf3L+mMV/vfwxi//6+WMW/5flj1n8X54/ZvHfIH/M4r9h/pjFf6P8MYv/K/LHLP4b5w8t9v7BwOH/yvwxy/m/Sf6YxX/T/DGL/2b5Yxb/zfPHLP6vyh+z+G+RP2bx3zJ/zOL/6vwxi/9r8scs/q/NH7P4vy5/zOL/+vwxi/8b8scs/m/MH7P4b5U/ZvHfOn/M4r9N/pjF/035Yxb/bfX+d+BSi/92en/O4v/m/DGL//b5Yxb/t+SPWfx3yB+z+L81f8zi/7b8MYv/jvljFv+d8scs/jvnj1n8d8kfs/i/PX/M4v+O/DGL/675Yxb/d+aPWfx3yx+z+L8rf8zi/+78MYv/e/LHLP67549Z/PfIH7P4vzd/zOL/vvwxi//788cs/h/IH7P4fzB/zOL/ofwxi/+U/DGL/575Yxb/D+ePWfw/kj9m8f9o/pjFf6/8MYv/x/LHLP57549Z/D+eP2bx/0T+mMV/n/wxi/8n88cs/p/KH7P4fzp/zOL/mfwxi/9n88cs/vvmj1n898sfs/h/Ln/M4v/5/DGL/xfyxyz+X8wfs/jvnz9m8T8gf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zi/7X8MYv/gfljFv+v549Z/L+RP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/N/PHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/1v5Yxb/b+ePWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf87+WMW/9Pyxyz+p+ePWfzPyB+z+H83f8zi/738MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/8/LHLP7n549Z/H+aP2bxvyB/zOL/s/wxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf+K/DGL/5X5Yxb/X+ePWfx/kz9m8b8qf8zi/9v8MYv/1fljFv9r8scs/tfmj1n8f5c/ZvG/Ln/M4n99/pjF/4b8MYv/7/PHLP5/yB+z+P8xf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+P8pf8zif3v+mMX/jvwxi/+f88cs/nfmj1n8/5I/ZvH/a/6Yxf9v+WMW/7/nj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//U/DGL//35Yxb/B/LHLP7T8sck/nMP8scs/kP5Yxb/UfljFv858scs/nPmj1n8R+ePWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/J+QP2bxXyh/zOI/Jn/M4r9w/pjFf2z+mMV/kfwxi/+i+WMW/yfmj1n8n5Q/ZvF/cv6YxX+x/DGL/1Pyxyz+i+ePWfyfmj9m8X9a/pjFf4n8MYv/0/PHLP7PyB+z+I/LH7P4PzN/zOL/rPwxi/+z88cs/kvmj1n8l8ofs/g/J3/M4r90/pjFf5n8MYv/c/PHLP7Pyx+z+D8/f8zi/4L8MYv/svljFv8X5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv8X5Y9Z/FfJH7P4r5o/ZvFfLX/M4r96/pjF/8X5Yxb/NfLHLP5r5o9Z/F+SP2bxf2n+mMV/rfwxi//4/DGL/4T8MYv/xPwxi//a+WMW/3Xyxyz+6+aP/ef7T1efe1L+2H++//Tmnpw/ZvFfL3/M4r9+/pjF/2X5Yxb/l+ePWfw3yB+z+G+YP2bx3yh/zOL/ivwxi//G+WMW/1fmj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/VfljFv8t8scs/lvmj1n8X50/ZvF/Tf6Yxf+1+WMW/9flj1n8X58/ZvF/Q/6Yxf+N+WMW/63yxyz+W+ePWfy3yR+z+L8pf8ziv23+mMV/u/wxi/+b88cs/tvnj1n835I/ZvHfIX/M4v/W/DGL/9vyxyz+O+aPWfx3yh+z+O+cP2bx3yV/zOL/9vwxi/878scs/rvmj1n835k/ZvHfLX/M4v+u/DGL/7vzxyz+78kfs/jvnj9m8d8jf8zi/978MYv/+/LHLP7vzx+z+H8gf8zi/8H8MYv/h/LHLP5T8scs/nvmj1n8P5w/ZvH/SP6Yxf+j+WMW/73yxyz+H8sfs/jvnT9m8f94/pjF/xP5Yxb/ffLHLP6fzB+z+H8qf8zi/+n8MYv/Z/LHLP6fzR+z+O+bP2bx3y9/zOL/ufwxi//n88cs/l/IH7P4fzF/zOK/f/6Yxf+A/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+B+aPWfy/nj9m8f9G/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+38wfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/2/lj1n8v50/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/v5I9Z/E/LH7P4n54/ZvE/I3/M4v/d/DGL//fyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf/7+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8z8sfs/ifnz9m8f9p/pjF/4L8MYv/z/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv+f549Z/H+RP2bx/2X+mMX/V/ljFv8r8scs/lfmj1n8f50/ZvH/Tf6Yxf+q/DGL/2/zxyz+V+ePWfyvyR+z+F+bP2bx/13+mMX/uvwxi//1+WMW/xvyxyz+v88fs/j/IX/M4v/H/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4v+n/DGL/+35Yxb/O/LHLP5/zh+z+N+ZP2bx/0v+mMX/r/ljFv+/5Y9Z/P+eP2bxvyt/zOJ/9yP5z/t/NK5/0Sz+93T+Yxb/e/PHLP735Y9Z/Kfmj1n8788fs/g/kD9m8Z+WPybxn2eQP2bxH8ofs/iPyh+z+M+RP2bxnzN/zOI/On/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8zi/4T8MYv/QvljFv8x+WMW/4Xzxyz+Y/PHLP6L5I9Z/BfNH7P4PzF/zOL/pPwxi/+T88cs/ovlj1n8n5I/ZvFfPH/M4v/U/DGL/9Pyxyz+S+SPWfyfnj9m8X9G/pjFf1z+mMX/mfljFv9n5Y9Z/J+dP2bxXzJ/zOK/VP6Yxf85+WMW/6Xzxyz+y+SPWfyfmz9m8X9e/pjF//n5Yxb/F+SPWfyXzR+z+L8wf8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+L8of8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+L84fs/ivkT9m8V8zf8zi/5L8MYv/S/PHLP5r5Y9Z/Mfnj1n8J+SPWfwn5o9Z/NfOH7P4r5M/ZvFfN3/M4j8pf8ziPzl/zOK/Xv6YxX/9/DGL/8vyxyz+L88fs/hvkD9m8d8wf8ziv1H+mMX/FfljFv+N88cs/q/MH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/q/LHLP5b5I9Z/LfMH7P4vzp/zOL/mvwxi/9r88cs/q/LH7P4vz5/zOL/hvwxi/8b88cs/lvlj1n8t84fs/hvkz9m8X9T/pjFf9v8MYv/dvljFv83549Z/LfPH7P4vyV/zOK/Q/6Yxf+t+WMW/7flj1n8d8wfs/jvlD9m8d85f8ziv0v+mMX/7fljFv935I9Z/HfNH7P4vzN/zOK/W/6Yxf9d+WMW/3fnj1n835M/ZvHfPX/M4r9H/pjF/735Yxb/9+WPWfzfnz9m8f9A/pjF/4P5Yxb/D+WPWfyn5I9Z/PfMH7P4fzh/zOL/kfwxi/9H88cs/nvlj1n8P5Y/ZvHfO3/M4v/x/DGL/yfyxyz+++SPWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8d83f8ziv1/+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMV///wxi/8B+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/6/lj1n8D8wfs/h/PX/M4v+N/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8v5k/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/t/KH7P4fzt/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP7fyR+z+J+WP2bxPz1/zOJ/Rv6Yxf+7+WMW/+/lj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4n5c/ZvE/P3/M4v/T/DGL/wX5Yxb/n+WPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP4/zx+z+P8if8zi/8v8MYv/r/LHLP5X5I9Z/K/MH7P4/zp/zOL/m/wxi/9V+WMW/9/mj1n8r84fs/hfkz9m8b82f8zi/7v8MYv/dfljFv/r88cs/jfkj1n8f58/ZvH/Q/6Yxf+P+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf9P+WMW/9vzxyz+d+SPWfz/nD9m8b8zf8zi/5f8MYv/X/PHLP5/yx+z+P89f8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfyn5o9Z/O/PH7P4P5A/ZvGflj8m8Z93kD9m8R/KH7P4j8ofs/jPkT9m8Z8zf8ziPzp/zOI/V/6YxX/u/DGL/zz5Y7P4z/mf7D9v/pjl/J8vf8ziP3/+mMV/gfwxi/+C+WMW/yfkj1n8F8ofs/iPyR+z+C+cP2bxH5s/ZvFfJH/M4r9o/pjF/4n5Yxb/J+WPWfyfnD9m8V8sf8zi/5T8MYv/4vljFv+n5o9Z/J+WP2bxXyJ/zOL/9Pwxi/8z8scs/uPyxyz+z8wfs/g/K3/M4v/s/DGL/5L5Yxb/pfLHLP7PyR+z+C+dP2bxXyZ/zOL/3Pwxi//z8scs/s/PH7P4vyB/zOK/bP6Yxf+F+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6Yxf9F+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxf3H+mMV/jfwxi/+a+WMW/5fkj1n8X5o/ZvFfK3/M4j8+f8ziPyF/zOI/MX/M4r92/pjFf538MYv/uvljFv9J+WMW/8n5Yxb/9fLHLP7r549Z/F+WP2bxf3n+mMV/g/wxi/+G+WMW/43yxyz+r8gfs/hvnD9m8X9l/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8X5U/ZvHfIn/M4r9l/pjF/9X5Yxb/1+SPWfxfmz9m8X9d/pjF//X5Yxb/N+SPWfzfmD9m8d8qf8ziv3X+mMV/m/wxi/+b8scs/tvmj1n8t8sfs/i/OX/M4r99/pjF/y35Yxb/HfLHLP5vzR+z+L8tf8ziv2P+mMV/p/wxi//O+WMW/13yxyz+b88fs/i/I3/M4r9r/pjF/535Yxb/3fLHLP7vyh+z+L87f8zi/578MYv/7vljFv898scs/u/NH7P4vy9/zOL//vwxi/8H8scs/h/MH7P4fyh/zOI/JX/M4r9n/pjF/8P5Yxb/j+SPWfw/mj9m8d8rf8zi/7H8MYv/3vljFv+P549Z/D+RP2bx3yd/zOL/yfwxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi/+++WMW//3yxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+++ePWfwPyB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zif2D+mMX/6/ljFv9v5I9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zi/838MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8f9W/pjF/9v5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvH/Tv6Yxf+0/DGL/+n5Yxb/M/LHLP7fzR+z+H8vf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfy/nz9m8f9B/pjF/4f5Yxb/H+WPWfx/nD9m8f9J/pjF/7z8MYv/+fljFv+f5o9Z/C/IH7P4/yx/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvG/In/M4n9l/pjF/9f5Yxb/3+SPWfyvyh+z+P82f8zif3X+mMX/mvwxi/+1+WMW/9/lj1n8r8sfs/hfnz9m8b8hf8zi//v8MYv/H/LHLP5/zB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP5/yh+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7/kj1n8/5o/ZvH/W/6Yxf/v+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOI/NX/M4n9//pjF/4H8MYv/tPwxif98g/wxi/9Q/pjFf1T+mMV/jvwxi/+c+WMW/9H5Yxb/ufLHLP5z549Z/OfJH5P4Dw3yxyT+882XP2bxnz9/zOK/QP6YxX/B/DGL/xPyxyz+C+WPWfzH5I9Z/BfOH7P4j80fs/gvkj9m8V80f8zi/8T8MYv/k/LHLP5Pzh+z+C+WP2bxf0r+mMV/8fwxi/9T88cs/k/LH7P4L5E/ZvF/ev6Yxf8Z+WMW/3H5Yxb/Z+aPWfyflT9m8X92/pjFf8n8MYv/UvljFv/n5I9Z/JfOH7P4L5M/ZvF/bv6Yxf95+WMW/+fnj1n8X5A/ZvFfNn/M4v/C/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4v+i/DGL/yr5Yxb/VfPHLP6rPTb/tf7XxvUvmsV/9c5/zOL/4vwxi/8a+WMW/zXzxyz+L8kfs/i/NH/M4r9W/pjFf3z+mMV/Qv6YxX9i/pjFf+38MYv/OvljFv9188cs/pPyxyz+k/PHLP7r5Y9Z/NfPH7P4vyx/zOL/8vwxi/8G+WMW/w3zxyz+G+WPWfxfkT9m8d84f8zi/8r8MYv/JvljFv9N88cs/pvlj1n8N88fs/i/Kn/M4r9F/pjFf8v8MYv/q/PHLP6vyR+z+L82f8zi/7r8MYv/6/PHLP5vyB+z+L8xf8ziv1X+mMV/6/wxi/82+WMW/zflj1n8t80fs/hvlz9m8X9z/pjFf/v8MYv/W/LHLP475I9Z/N/6j/4v/T8d179oFv+3df5jFv8d88cs/jvlj1n8d84fs/jvkj9m8X97/pjF/x35Yxb/XfPHLP7vzB+z+O+WP2bxf1f+mMX/3fljFv/35I9Z/HfPH7P475E/ZvF/b/6Yxf99+WMW//fnj1n8P5A/ZvH/YP6Yxf9D+WMW/yn5Yxb/PfPH/nP9pw3N6v/h/LH/XP+Hn/8fyR+z+H80f8ziv1f+mMX/Y/ljFv+988cs/h/PH7P4fyJ/zOK/T/6Yxf+T+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/33zxyz+++WPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfz3zx+z+B+QP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/wPwxi//X88cs/t/IH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/m/ljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zi/638MYv/t/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4v+d/DGL/2n5Yxb/0/PHLP5n5I9Z/L+bP2bx/17+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+H8/f8zi/4P8MYv/D/PHLP4/yh+z+P84f8zi/5P8MYv/efljFv/z88cs/j/NH7P4X5A/ZvH/Wf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4n9F/pjF/8r8MYv/r/PHLP6/yR+z+F+VP2bx/23+mMX/6vwxi/81+WMW/2vzxyz+v8sfs/hflz9m8b8+f8zif0P+mMX/9/ljFv8/5I9Z/P+YP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/P+UP2bxvz1/zOJ/R/6Yxf/P+WMW/zvzxyz+f8kfs/j/NX/M4v+3/DGL/9/zxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6YxX9q/pjF//78MYv/A/ljFv9p+WMS//kH+WMW/6H8MYv/qPwxi/8c+WMW/znzxyz+o/PHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/k/IH7P4L5Q/ZvEfkz9m8V84f8ziPzZ/zOK/SP6YxX/R/DGL/xPzxyz+T8ofs/g/OX/M4r9Y/pjF/yn5Yxb/xfPHLP5PzR+z+D8tf8ziv0T+mMX/6fljFv9n5I9Z/Mflj1n8n5k/ZvF/Vv6Yxf/Z+WMW/yXzxyz+S+WPWfyfkz9m8V86f8ziv0z+mMX/ufljFv/n5Y9Z/J+fP2bxf0H+mMV/2fwxi/8L88cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/+L8scs/qvkj1n8V80fs/ivlj9m8V89f8zi/+L8MYv/GvljFv8188cs/i/JH7P4vzR/zOK/Vv6YxX98/pjFf0L+mMV/Yv6YxX/t/DGL/zr5Yxb/dfPHLP6T8scs/pPzxyz+6+WPWfzXzx+z+L8sf8zi//L8MYv/BvljFv8N88cs/hvlj1n8X5H/SAs97JXFf+P8MYv/K/PHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+q/DGL/xb5Yxb/LfPHLP6vzh+z+L8mf8zi/9r8MYv/6/LHLP6vzx+z+L8hf8zi/8b8MYv/VvljFv+t88cs/tvkj1n835Q/ZvHfNn/M4r9d/pjF/835Yxb/7fPHLP5vyR+z+O+QP2bxf2v+mMX/bfljFv8d88cs/jvlj1n8d84fs/jvkj9m8X97/pjF/x35Yxb/XfPHLP7vzB+z+O+WP2bxf1f+mMX/3fljFv/35I9Z/HfPH7P475E/ZvF/b/6Yxf99+WMW//fnj1n8P5A/ZvH/YP6Yxf9D+WMW/yn5Yxb/PfPHLP4fzh+z+H8kf8zi/9H8MYv/XvljFv+P5Y9Z/PfOH7P4fzx/zOL/ifwxi/8++WMW/0/mj1n8P5U/ZvH/dP6Yxf8z+WMW/8/mj1n8980fs/jvlz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8d8/f8zif0D+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv8D88cs/l/PH7P4fyN/zOJ/UP6Yxf/gh/znfFzG9S+axf+Qzn/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zi/838MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8f9W/pjF/9v5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvH/Tv6Yxf+0/DGL/+n5Yxb/M/LHLP7fzR+z+H8vf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfy/nz9m8f9B/pjF/4f5Yxb/H+WPWfx/nD9m8f9J/pjF/7z8MYv/+fljFv+f5o9Z/C/IH7P4/yx/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvG/In/M4n9l/pjF/9f5Yxb/3+SPWfyvyh+z+P82f8zif3X+mMX/mvwxi/+1+WMW/9/lj1n8r8sfs/hfnz9m8b8hf8zi//v8MYv/H/LHLP5/zB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP5/yh+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7/kj1n8/5o/ZvH/W/6Yxf/v+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOI/NX/M4n9//pjF/4H8MYv/tPwxif8Cg/wxi/9Q/pjFf1T+mMV/jvwxi/+c+WMW/9H5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv8n5I9Z/BfKH7P4j8kfs/gvnD9m8R+bP2bxXyR/zOK/aP6Yxf+J+WMW/yflj1n8n5w/ZvFfLH/M4v+U/DGL/+L5Yxb/p+aPWfyflj9m8V8if8zi//T8MYv/M/LHLP7j8scs/s/MH7P4Pyt/zOL/7Pwxi/+S+WMW/6Xyxyz+z8kfs/gvnT9m8V8mf8zi/9z8MYv/8/LHLP7Pzx+z+L8gf8ziv2z+mMX/hfljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/RfljFv9V8scs/qvmj1n8V8sfs/ivnj9m8X9x/pjFf438MYv/mvljFv+X5I9Z/F+aP2bxXyt/zOI/Pn/M4j8hf8ziPzF/zOK/dv6YxX+d/DGL/7r5Yxb/SfljFv/J+WMW//Xyxyz+6+ePWfxflj9m8X95/pjFf4P8MYv/hvljFv+N8scs/q/IH7P4b5w/ZvF/Zf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/F+VP2bx3yJ/zOK/Zf6Yxf/V+WMW/9fkj1n8X5s/ZvF/Xf6Yxf/1+WMW/zfkj1n835g/ZvHfKn/M4r91/pjFf5v8MYv/m/LHLP7b5o9Z/LfLH7P4vzl/zOK/ff6Yxf8t+WMW/x3yxyz+b80fs/i/LX/M4r9j/pjFf6f8MYv/zvljFv9d8scs/m/PH7P4vyN/zOK/a/6Yxf+d+WMW/93yxyz+78ofs/i/O3/M4v+e/DGL/+75Yxb/PfLHLP7vzR+z+L8vf8zi//78MYv/B/LHLP4fzB+z+H8of8ziPyV/zOK/Z/6Yxf/D+WMW/4/kj1n8P5o/ZvHfK3/M4v+x/DGL/975Yxb/j+ePWfw/kT9m8d8nf8zi/8n8MYv/p/LHLP6fzh+z+H8mf8zi/9n8MYv/vvljFv/98scs/p/LH7P4fz5/zOL/hfwxi/8X88cs/vvnj1n8D8gfs/h/KX/M4v/l/DGL/1fyxyz+X80fG/YfDAZT/tP9v5Y/Zjn/D8wfs/h/PX/M4v+N/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8v5k/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/t/KH7P4fzt/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP7fyR+z+J+WP2bxPz1/zOJ/Rv6Yxf+7+WMW/+/lj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4n5c/ZvE/P3/M4v/T/DGL/wX5Yxb/n+WPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP4/zx+z+P8if8zi/8v8MYv/r/LHLP5X5I9Z/K/MH7P4/zp/zOL/m/wxi/9V+WMW/9/mj1n8r84fs/hfkz9m8b82f8zi/7v8MYv/dfljFv/r88cs/jfkj1n8f58/ZvH/Q/6Yxf+P+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf9P+WMW/9vzxyz+d+SPWfz/nD9m8b8zf8zi/5f8MYv/X/PHLP5/yx+z+P89f8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfyn5o9Z/O/PH7P4P5A/ZvGflj8m8V9wkD9m8R/KH7P4j8ofs/jPkT9m8Z8zf8ziPzp/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v+E/DGL/0L5Yxb/MfljFv+F88cs/mPzxyz+i+SPWfwXzR+z+D8xf8zi/6T8MYv/k/PHLP6L5Y9Z/J+SP2bxXzx/zOL/1Pwxi//T8scs/kvkj1n8n54/ZvF/Rv6YxX9c/pjF/5n5Yxb/Z+WPWfyfnT+150Div2T+mOX8Xyp/zOL/nPwxi//S+WMW/2Xyxyz+z80fs/g/L3/M4v/8/DGL/wvyxyz+y+aPWfxfmD9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxflD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/xfnj1n818gfs/ivmT9m8X9J/pjF/6X5Yxb/tfLHLP7j88cs/hPyxyz+E/PHLP5r549Z/NfJH7P4r5s/ZvGflD9m8Z+cP2bxXy9/zOK/fv6Yxf9l+WMW/5fnj1n8N8gfs/hvmD9m8d8of8zi/4r8MYv/xvljFv9X5o9Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/1X5Yxb/LfLHLP5b5o9Z/F+dP2bxf03+mMX/tfljFv/X5Y9Z/F+fP2bxf0P+mMX/jfljFv+t8scs/lvnj1n8t8kfs/i/KX/M4r9t/pjFf7v8MYv/m/PHLP7b549Z/N+SP2bx3yF/zOL/1vwxi//b8scs/jvmj1n8d8ofs/jvnD9m8d8lf8zi//b8MYv/O/LHLP675o9Z/N+ZP2bx3y1/zOL/rvwxi/+788cs/u/JH7P4754/ZvHfI3/M4v/e/DGL//vyxyz+788fs/h/IH/M4v/B/DGL/4fyxyz+U/LHLP575o9Z/D+cP2bx/0j+mMX/o/ljFv+98scs/h/LH7P4750/ZvH/eP6Yxf8T+WMW/33yxyz+n8wfs/h/Kn/M4v/p/DGL/2fyxyz+n80fs/jvmz9m8d8vf8zi/7n8MYv/5/PHLP5fyB+z+H8xf8ziv3/+mMX/gPwxi/+X5P5zPcJyi/+X5f6PlMX/K/ljFv+v5o9Z/L+WP2bxPzB/zOL/9fwxi/838scs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bx/2b+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+H8rf8zi/+38MYv/SfljFv+T88cs/qfkj1n8T80fs/h/J3/M4n9a/pjF//T8MYv/GfljFv/v5o9Z/L+XP2bxPzP/GR1409gdZ3lp8T8rf8zif3b+mMX/nPwxi/+5+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvE/L3/M4n9+/pjF/6f5Yxb/C/LHLP4/yx+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y2b3n+f/eFz/oln8L+/8xyz+P88fs/j/In/M4v/L/DGL/6/yxyz+V+SPWfyvzB+z+P86f8zi/5v8MYv/VfljFv/f5o9Z/K/OH7P4X5M/ZvG/Nn/M4v+7/DGL/3X5Yxb/6/PHLP435I9Z/H+fP2bx/0P+mMX/j/ljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/T/ljFv/b88cs/nfkj1n8/5w/ZvG/M3/M4v+X/DGL/1/zxyz+f8sfs/j/PX/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8p+aPWfzvzx+z+D+QP2bxn5Y/JvF/wiB/zOI/lD9m8R+VP2bxnyN/zOI/Z/6YxX90/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8ziv2D+mMX/CfljFv+F8scs/mPyxyz+C+ePWfzH5o9Z/BfJH7P4L5o/ZvF/Yv6Yxf9J+WMW/yfnj1n8F8sfs/g/JX/M4r94/pjF/6n5Yxb/p+WPWfyXyB+z+D89f8zi/4z8MYv/uPwxi/8z88cs/s/KH7P4Pzt/zOK/ZP6YxX+p/DGL/3Pyxyz+S+ePWfyXyR+z+D83f8zi/7z8MYv/8/PHLP4vyB+z+C+bP2bxf2H+mMV/ufwxi//y+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxf1H+mMV/lfwxi/+q+T+smXNj8V8tf8ziv3r+mMX/xfljFv818scs/mvmj1n8X5I/ZvF/af6YxX+t/DGL//j8MYv/hPwxi//E/DGL/9r5Yxb/dfLHLP7r5o9Z/Cflj1n8J+ePWfzXyx+z+K+fP2bxf1n+mMX/5fljFv8N8scs/hvmj1n8N8ofs/i/In/M4r9x/pjF/5X5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvF/Vf6YxX+L/DGL/5b5Yxb/V+ePWfxfkz9m8X9t/pjF/3X5Yxb/1+ePWfzfkD9m8X9j/pjFf6v8MYv/1vljFv9t8scs/m/KH7P4b5s/ZvHfLn/M4v/m/DGL//b5Yxb/t+SPWfx3yB+z+L81f8zi/7b8MYv/jvljFv+d8scs/jvnj1n8d8kfs/i/PX/M4v+O/DGL/675Yxb/d+aPWfx3yx+z+L8rf8zi/+78MYv/e/LHLP67549Z/PfIH7P4vzd/zOL/vvwxi//788cs/h/IH7P4fzB/zOL/ofwxi/+U/DGL/575Yxb/D+ePWfw/kj9m8f9o/pjFf6/8MYv/x/LHLP57549Z/D+eP2bx/0T+mMV/n/yHmzpttgUW/0/mj1n8P5U/ZvH/dP6Yxf8z+WMW/8/mj1n8980fs/jvlz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8d8/f8zif0D+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv8D88cs/l/PH7P4fyN/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9v5o9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/t/LHLP7fzh+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/3fyxyz+p+WPWfxPzx+z+J+RP2bx/27+mMX/e/ljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zi//38MYv/D/LHLP4/zB+z+P8of8zi/+P8MYv/T/LHLP7n5Y9Z/M/PH7P4/zR/zOJ/Qf6Yxf9n+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/xX5Yxb/K/PHLP6/zh+z+P8mf8zif1X+mMX/t/ljFv+r88cs/tfkj1n8r80fs/j/Ln/M4n9d/pjF//r8MYv/DfljFv/f549Z/P+QP2bx/2P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bx/1P+mMX/9vwxi/8d+WMW/z/nj1n878wfs/j/JX/M4v/X/DGL/9/yxyz+f88fs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW/6n5Yxb/+/PHLP4P5I9Z/Kflj0n8Fxrkj1n8h/LHLP6j8scs/nPkj1n858wfs/iPzh+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4PyF/zOK/UP6YxX9M/pjFf+H8MYv/2Pwxi/8i+WMW/0Xzxyz+T8wfs/g/KX/M4v/k/DGL/2L5Yxb/p+SPWfwXzx+z+D81f8zi/7T8MYv/EvljFv+n549Z/J+RP2bxH5c/ZvF/Zv6Yxf9Z+WMW/2fnj1n8l8wfs/gvlT9m8X9O/pjFf+n8MYv/MvljFv/n5o9Z/J+XP2bxf37+mMX/BfljFv9l88cs/i/MH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/i/KH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/i/PHLP5r5I9Z/NfMH7P4vyR/zOL/0vwxi/9a+WMW//H5Yxb/CfljFv+J+WMW/7Xzxyz+6zzMf8r//bj+RbP4r9v5j1n8J+WPWfwn549Z/NfLH7P4r58/ZvF/Wf6Yxf/l+WMW/w3yxyz+Gz5G/1H/W+P6F83iv1HnP2bxf0X+mMV/4/wxi/8r88cs/pvkj1n8N80fs/hvlj9m8d88f8zi/6r8MYv/FvljFv8t88cs/q/OH7P4vyZ/zOL/2vwxi//r8scs/q/PH7P4vyF/zOL/xvwxi/9W+WMW/63zxyz+2+SPWfzflD9m8d82f8ziv13+mMX/zfljFv/t88cs/m/JH7P475A/ZvF/a/6Yxf9t+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bxf3v+mMX/HfljFv9d88cs/u/MH7P475Y/ZvF/V/7/j3166APEMIA42q233NpubNu2bdvJGrFt27Zt27ZtJ5cc5xPsvHea+/83UUv/wfpHLf2H6B+19B+qf9TSf5j+UUv/4fpHLf1H6B+19B+pf9TSf5T+UUv/0fpHLf3H6B+19N9W/6il/3b6Ry39t9c/aum/g/5RS/8d9Y9a+u+kf9TSf2f9o5b+u+gftfTfVf+opf9u+kct/XfXP2rpv4f+UUv/PfWPWvrvpX/U0n9v/aOW/vvoH7X031f/qKX/fvpHLf331z9q6X+A/lFL/wP1j1r6H6R/1NL/YP2jlv6H6B+19D9U/6il/2H6Ry39D9c/aul/hP5RS/8j9Y9a+h+lf9TS/2j9o5b+x+gftfQ/Vv+opf9x+kct/Y/XP2rpf4L+UUv/E/WPWvqfpH/U0v9k/aOW/qfoH7X0P1X/qKX/afpHLf1P1z9q6X+G/lFL/zP1j1r6n6V/1NL/bP2jlv7n6B+19D9X/6il/3n6Ry39z9c/aul/gf5RS/8L9Y9a+l+kf9TS/2L9o5b+l+gftfS/VP+opf9l+kct/S/XP2rpf4X+UUv/K/WPWvpfpX/U0v9q/aOW/tfoH7X0v1b/qKX/dfpHLf2v1z9q6X+D/lFL/xv1j1r636R/1NL/Zv2jlv636B+19L9V/6il/236Ry39b9c/aul/h/5RS/879Y9a+t+lf9TS/279o5b+9+gftfS/V/+opf99+kct/e/XP2rp/4D+UUv/B/WPWvo/pH/U0v9h/aOW/o/oH7X0f1T/qKX/Y/pHLf0f1z9q6f+E/lFL/yf1j1r6P6V/1NL/af2jlv7P6B+19H9W/6il/3P6Ry39n9c/aun/gv5RS/8X9Y9a+r+kf9TS/2X9o5b+r+gftfR/Vf+opf9r+kct/V/XP2rp/4b+UUv/N/WPWvq/pX/U0v9t/aOW/u/oH7X0f1f/qKX/e/pHLf3f1z9q6f+B/lFL/w/1j1r6f6R/1NL/Y/2jlv6f6B+19P9U/6il/2f6Ry39P9c/aun/hf5RS/8v9Y9a+n+lf9TS/2v9o5b+3+gflfQf9D39o5b+A/SPWvp/X/+opf8P9I9a+v9Q/6il/4/0j1r6/1j/qKX/T/SPWvr/VP+opf9A/aOW/j/TP2rp/3P9o5b+v9A/aun/S/2jlv6/0j9q6f9r/aOW/oP0j1r6/0b/qKX/b/WPWvr/Tv+opf/v9Y9a+v9B/6il/x/1j1r6/0n/qKX/n/WPWvr/Rf+opf9f9Y9a+v9N/6il/9/1j1r6/0P/qKX/P/WPWvr/S/+opf+/9Y9a+v9H/6il/3/1j1r6/0//qKX///WPWvqPo3/U0n9c/aOW/uPpH7X0H1//qKX/BPpHLf0n1D9q6T+R/lFL/4n1j1r6T6J/1NJ/Uv2jlv6T6R+19J9c/6il/xT6Ry39p9Q/auk/lf5RS/+p9Y9a+k+jf9TSf1r9o5b+0+kftfSfXv+opf8M+kct/WfUP2rpP5P+UUv/mfWPWvrPon/U0n9W/aOW/rPpH7X0n13/qKX/HPpHLf3n1D9q6T+X/lFL/7n1j1r6z6N/1NJ/Xv2jlv7z6R+19J9f/6il/wL6Ry39F9Q/aum/kP5RS/+F9Y9a+i+if9TSf1H9o5b+i+kftfRfXP+opf8S+kct/ZfUP2rpv5T+UUv/pfWPWvovo3/U0n9Z/aOW/svpH7X0X17/qKX/CvpHLf1X1D9q6b+S/lFL/5X1j1r6r6J/1NJ/Vf2jlv6r6R+19F9d/6il/xr6Ry3919Q/aum/lv5RS/+19Y9a+q+jf9TSf139o5b+6+kftfRfX/+opf8G+kct/TfUP2rpv5H+0YCB342xvP/G+kct/99E/6il/6b6Ry39N9M/aum/uf5RS/8t9I9a+m+pf9TSfyv9o5b+W+sftfTfRv+opf9g/aOW/kP0j1r6D9U/auk/TP+opf9w/aOW/iP0j1r6j9Q/auk/Sv+opf9o/aOW/mP0j8a6/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAt+3YbW2dZ+HH87raOsT//ZMQFl6HJJhcKiTDbPWS8IGwyttVBN57HAEe3dmOj3WbXYVfAPbyYRAgPkkyyRImyZShhJjQSA8EKIhp0URMNPgCiEEXjRAi6JS7WnPa0tMeu8Vz1uhbl83nRc+777Hdva/LdfS8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP57NTQuPDK+Ztip8UMPPni4pe91ztGVNx/4bc+FA6/lj5eNcMlxQw96e3t75zw3e0f58JSiKEo/287y8aTKcen6O+u/0Nl/FBb0vLTk+JSfNx45sOb0R+q6j95f23e2trhp3YbWlo+NK4pwcW3RWTqoqymKsLi2uK90UF86WFJbPFI6mN13cGrx7dLB+Ws3tzaXTiyN/p7B/4qGxp3F+GHFFsP+NBja/876b9058DrKJQeuNqEo939F1/ffqvhswAn6H7h+WFjZf9W/QeCEquv/hQUDr6Nc8l/u/5OfWvXKSJ+duP+B64eP6x/SGeH5f1ijlc/9Fc//M0a45OD+qpqu46X+L73t2ZnlUxP+nef/d68fLq7sf9yw5//Sc/yigef/U4oiXDLGbwe8pzQ07joy2v1/9P4nTK/Y1Azt/4z2zftL/T++5HtPlE/VVtn/olHu/+OWVvxageo0NH65t+L+X0X/xUdGuORg/28/8euHS/0/9vsHzhzyWTX9X1LZ/6yOti2ztm7vOm9DW9P6lvUtm+pmz58zr75u3gVzZ/U9EvR/HeN3Bd4bxnb/LyZXbGqKomVwf033gadL/c998ME55VOTqux/8aj3/xnu/zCiD40rJk4sOps6Otrr+r8OHNb3f+3/YSP0X8Xf/886p/zDasuvNUUxbXB/15l3ryj1/86hZ3eXT02ssv8lo/a/YPDnBSKM8f7fXLEZ1v/BQy/1Pf8vu/fgGeVT1f79f+mo/b/q/g9j0dBY8T/8/IeV+t9VXBbZaWjw3/8gnRz9P/bODT1x6/AJ/UM6Ofr/3eeOnhu3Dsv0D+nk6H/Cxgeej1uHS/UP6eTof/nU+Svi1uEy/UM6Ofpf++q5f45bh0b9Qzo5+j/nS7s749Zhuf4hnRz9P9Q+Z1vcOqzQP6STo/+fnvbQa3HrcLn+IZ0c/R87ds+Ncetwhf4hnRz9d+85+wdx63Cl/iGdHP1fvm5hiFuHq/QP6eTof/q0Pz4etw5X6x/SydH/vD/9/bS4dbhG/5BOjv7v+PyKfXHrcK3+IZ0c/Y+//pUX49Zhpf4hnRz9Lz1728K4dbhO/5BOjv6bf9LcG7cOq/QP6eTof9bXf7Qhbh2u1z+kk6P/w8sf3RO3DjfoH9LJ0f+eumJK3DrcqH9IJ0f/X/vu6Yfi1uGT+od0cvT/m6eenB+3Dqv1D+nk6P+5D9z+jbh1uEn/kE6O/u9d8+JZcevQpH9IJ0f/D+99/otx67BG/5BOjv7feKPt/+LWYa3+IZ0c/U+edOrrcevQrH9IJ0f/C2/9SnvcOrToH9LJ0X/b7u4fxq3DOv1DOjn6//Dxaavi1mG9/iGdHP2vnLv3/XHrcLP+IZ0c/b9v2YW74tZhg/4hnRz9X9Tz0Yvi1mGj/iGdHP13PPPZr8atwy36h3Ry9L935muL49ahVf+QTo7+X1699Mdx69Cmf0gnR/9vPXrdprh12KR/SCdH/0/+7O1jceuwWf+QTo7+//+CRX+NW4ct+od0cvS/eMmba+PW4VP6h3Ry9L+x+x8vx61Du/4hnRz9zzx89bK4ddiqf0gnR//fOa9uf9w6dOgf0snR/51X7quPW4dt+od0cvS//+Bdd8etw636h3Ry9P/mL2ZMj1uHT+sf0snR//1TDl0btw6d+od0cvT/y021z8Stw3b9Qzo5+v/bvqk74tahS/+QTo7+n3695w9x63Cb/iGdHP2vnvCriXHrcLv+IZ0c/U/t2nJf3DrcoX9IJ0f/8+9pOj9uHT6jf0gnR/9b//LCN+PWYYf+IZ2t27tuaWptbWn3xhtvvBl8c7L/ZAJSezf6k/0rAQAAAAAAAAAAAAAATiTHPyc62b9HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH+yAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRO8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVwAAAP//B8jlBQ==") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x101) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x8040587f, 0x0) close_range(r3, r5, 0x2) 6.692957185s ago: executing program 4 (id=808): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(r0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2008480, &(0x7f0000000000), 0x0, 0x790, &(0x7f0000001040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r1, 0x0, 0x7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000440)=0x2, 0x4) fcntl$setsig(r1, 0xa, 0x21) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2481, 0x0) ioctl$BLKRRPART(r6, 0x125f, 0x0) 6.502583844s ago: executing program 2 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$usbfs(0x0, 0x75, 0x101301) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0xc0185500, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$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") 5.998509963s ago: executing program 5 (id=811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) 5.451000271s ago: executing program 5 (id=812): socket$nl_route(0x10, 0x3, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0], 0x50d) 4.687204848s ago: executing program 2 (id=813): r0 = socket$kcm(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000030601010000000000000000f40000000900000000000000000000000500010007"], 0x28}}, 0x20010004) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x61}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0x110) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, &(0x7f0000000140), &(0x7f0000000180)='GPL\x00', 0x8, 0xa7, &(0x7f0000000280)=""/167, 0x41000, 0x2, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x10, 0x80000001, @void, @value}, 0x94) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 4.575721487s ago: executing program 3 (id=814): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x22c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x8, r2}, 0x10) 4.273181046s ago: executing program 2 (id=815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x6, 0xf1, 0x0, 0x0, @str='+\x00'}]}, 0x18}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414ff"], 0x24}}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xffffffff, 0x0, 0x54, 0x5}, 0x9c) 4.211271086s ago: executing program 3 (id=816): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.879956474s ago: executing program 0 (id=817): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000001c0)='./file0\x00') 3.046378752s ago: executing program 4 (id=818): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xb5) 2.871306781s ago: executing program 0 (id=819): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e23, 0x3, 'sh\x00', 0x1, 0x4, 0x8000072}, 0x2c) setrlimit(0xb, &(0x7f0000000240)={0xff, 0x6}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x3, 'wlc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e2b, 0x2, 0x1, 0x12d5c, 0x12d5c}}, 0x44) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='cachefiles_prep_read\x00', 0xffffffffffffffff, 0x0, 0x10001}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 2.871122381s ago: executing program 4 (id=820): r0 = syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x1e3}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x40010, r1, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x5909, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.807794961s ago: executing program 2 (id=821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r3, &(0x7f00000001c0)={0x0, 0x10, 0x1, @thr={0x0, 0x0}}) 2.63969946s ago: executing program 4 (id=822): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c00000010000305000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804202004c00128008000100736974004000028008000200ac1414aa14000b002001000000000000000000000000000008000100", @ANYRES32, @ANYBLOB="060008001500000006000d000200"], 0x6c}}, 0x0) 2.52122267s ago: executing program 5 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$usbfs(0x0, 0x75, 0x101301) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0xc0185500, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$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") 2.223303718s ago: executing program 4 (id=824): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f00008e7000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048084}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) tgkill(0x0, r0, 0x1a) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r6, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0xfffffe90}}], 0x1, 0x8001) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) 1.385142406s ago: executing program 0 (id=825): syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0xa0282, 0x8, 0x10}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1002, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0x6000003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x2000009, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x3, 0x100, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r4, 0x0, r2, &(0x7f00000000c0)=0x10000, 0x10000001, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 353.644712ms ago: executing program 5 (id=826): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x4, 0x2, {0x5, @vbi={0x5, 0x0, 0x4, 0x34325842, [], [0x8200], 0x13a}}}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) syz_io_uring_setup(0x53e2, &(0x7f0000000140)={0x0, 0x804, 0x0, 0x8000, 0xfffffffe}, &(0x7f0000000240), 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a70000090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100100040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x1404c012, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x3, 0x2, {}, 0x40020800}) 287.485191ms ago: executing program 3 (id=827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x28, r1, 0xc4fc9e906872338b, 0x0, 0x1, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4c}}}}}, 0x28}}, 0x4040) 287.254841ms ago: executing program 3 (id=828): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(r0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2008480, &(0x7f0000000000), 0x0, 0x790, &(0x7f0000001040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r1, 0x0, 0x7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000440)=0x2, 0x4) fcntl$setsig(r1, 0xa, 0x21) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2481, 0x0) ioctl$BLKRRPART(r6, 0x125f, 0x0) 47.800851ms ago: executing program 2 (id=829): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x5452, &(0x7f00000003c0)) 0s ago: executing program 2 (id=830): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0, 0x0, 0x10000000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) kernel console output (not intermixed with test programs): forwarding state [ 73.713246][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.733713][ T4166] device veth0_vlan entered promiscuous mode [ 73.748354][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.757260][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.766579][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.812421][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.820619][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.830856][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.840313][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.850400][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.859788][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.867313][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.875057][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.884844][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.894180][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.903949][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.913742][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.924551][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.931856][ T4197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.940425][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.953057][ T4166] device veth1_vlan entered promiscuous mode [ 73.969676][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.000907][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.011018][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.021260][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.032418][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.042972][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.053063][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.061488][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.070273][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.079239][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.086317][ T4197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.094654][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.106171][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.147366][ T4169] device veth0_vlan entered promiscuous mode [ 74.165042][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.175318][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.192070][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.201356][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.210328][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.219363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.227582][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.236231][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.245240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.254168][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.274998][ T4169] device veth1_vlan entered promiscuous mode [ 74.287936][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.296230][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.311665][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.336430][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.357547][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.382952][ T4166] device veth0_macvtap entered promiscuous mode [ 74.398421][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.406651][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.416536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.425391][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.434864][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.444516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.453858][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.463014][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.484642][ T4166] device veth1_macvtap entered promiscuous mode [ 74.538915][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.552529][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.561496][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.570677][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.581854][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.590992][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.602114][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.612368][ T4169] device veth0_macvtap entered promiscuous mode [ 74.624133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.633515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.641299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.653621][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.662290][ T4168] device veth0_vlan entered promiscuous mode [ 74.675897][ T4169] device veth1_macvtap entered promiscuous mode [ 74.690440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.704951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.714859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.736078][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.752598][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.762256][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.773696][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.782872][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.795634][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.809184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.820361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.839947][ T4168] device veth1_vlan entered promiscuous mode [ 74.884101][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.901134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.913183][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.924892][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.938182][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.965858][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.983743][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.997326][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.020950][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.032674][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.045897][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.068710][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.077514][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.099724][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.109724][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.118706][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.129831][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.174506][ T4168] device veth0_macvtap entered promiscuous mode [ 75.204474][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.216508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.226222][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.236313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.249098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.257149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.269341][ T4168] device veth1_macvtap entered promiscuous mode [ 75.315825][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.328104][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.340670][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.351420][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.363393][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.371949][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.380328][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.389421][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.400151][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.409884][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.419508][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.429318][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.486574][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.499015][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.506437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.515649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.524754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.533361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.541855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.550643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.560586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.570892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.579672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.589095][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.600968][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.612278][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.623707][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.635894][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.644060][ T4211] Bluetooth: hci4: command 0x040f tx timeout [ 75.655027][ T4197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.664968][ T4173] device veth0_vlan entered promiscuous mode [ 75.675433][ T4197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.676639][ T4211] Bluetooth: hci3: command 0x040f tx timeout [ 75.695105][ T4167] device veth0_vlan entered promiscuous mode [ 75.701597][ T4211] Bluetooth: hci1: command 0x040f tx timeout [ 75.702155][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.708361][ T4211] Bluetooth: hci0: command 0x040f tx timeout [ 75.724334][ T4210] Bluetooth: hci2: command 0x040f tx timeout [ 75.726531][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.740323][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.755108][ T4168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.765326][ T4168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.775332][ T4168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.784343][ T4168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.821752][ T4173] device veth1_vlan entered promiscuous mode [ 75.864633][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.877269][ T4167] device veth1_vlan entered promiscuous mode [ 75.882633][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.910029][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.973135][ T4173] device veth0_macvtap entered promiscuous mode [ 75.985875][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.003977][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.054715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.064043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.074444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.086135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.115780][ T4173] device veth1_macvtap entered promiscuous mode [ 76.144729][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.155547][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.166030][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.208473][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.245771][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.256357][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.268610][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.291568][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.312478][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.330757][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.758627][ T4250] loop1: detected capacity change from 0 to 8 [ 76.912329][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.982494][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.059337][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.135357][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.301597][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.404065][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.506537][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.605858][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.721813][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.878333][ T4173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.953721][ T4173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.007635][ C0] sched: RT throttling activated [ 78.014179][ T4211] Bluetooth: hci1: command 0x0419 tx timeout [ 78.025348][ T4211] Bluetooth: hci3: command 0x0419 tx timeout [ 78.025560][ T4173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.031477][ T4211] Bluetooth: hci4: command 0x0419 tx timeout [ 78.031540][ T4211] Bluetooth: hci2: command 0x0419 tx timeout [ 78.031595][ T4211] Bluetooth: hci0: command 0x0419 tx timeout [ 78.090640][ T4173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.016403][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.031851][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.050524][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.112715][ T4167] device veth0_macvtap entered promiscuous mode [ 79.301685][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.328954][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.381778][ T4167] device veth1_macvtap entered promiscuous mode [ 79.442894][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.459524][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.508818][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.534536][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.566047][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.586250][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.597776][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.705749][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.717267][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.772288][ T4261] capability: warning: `syz.3.8' uses deprecated v2 capabilities in a way that may be insecure [ 80.123222][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.132494][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.143035][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.152239][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.162175][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.171408][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.198349][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.207411][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.217665][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 80.221203][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.226764][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 80.351892][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.385210][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.419400][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.990454][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.998016][ T4269] nbd1: detected capacity change from 0 to 10 [ 81.009014][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.029160][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.077348][ T4258] block nbd1: shutting down sockets [ 81.080416][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.104622][ C0] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.115595][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.124849][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.135846][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.145538][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.156720][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.164705][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.175684][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.183674][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.194504][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.202472][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.213298][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.225373][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.236337][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.244423][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.255487][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.263395][ T4160] ldm_validate_partition_table(): Disk read failed. [ 81.288642][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.299735][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.307746][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.319411][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.327555][ T4160] Dev nbd1: unable to read RDB block 0 [ 81.371226][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.381164][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.391771][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.402353][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.413290][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.423365][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.434107][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.445546][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.519137][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.527274][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.577840][ T4160] nbd1: unable to read partition table [ 81.600208][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.615154][ T4160] nbd1: partition table beyond EOD, truncated [ 81.628170][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.666074][ T4160] ldm_validate_partition_table(): Disk read failed. [ 81.671317][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.702711][ T4167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.132401][ T4160] Dev nbd1: unable to read RDB block 0 [ 82.225350][ T4160] nbd1: unable to read partition table [ 82.299496][ T4160] nbd1: partition table beyond EOD, truncated [ 82.365596][ T4167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.034218][ T4167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.043738][ T4167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.969702][ T4287] loop3: detected capacity change from 0 to 32768 [ 86.010941][ T4288] loop2: detected capacity change from 0 to 40427 [ 86.135910][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.172128][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.215190][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.243406][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.258299][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.295214][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.029521][ T21] cfg80211: failed to load regulatory.db [ 87.049774][ T4288] F2FS-fs (loop2): invalid crc value [ 87.126665][ T4288] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.230539][ T4294] loop0: detected capacity change from 0 to 2048 [ 87.435707][ T4294] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 87.443909][ T4294] UDF-fs: Scanning with blocksize 512 failed [ 87.525660][ T4294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.977876][ T4299] loop4: detected capacity change from 0 to 8 [ 90.709426][ T4303] loop0: detected capacity change from 0 to 2048 [ 90.717994][ T4302] loop3: detected capacity change from 0 to 2048 [ 91.566508][ T4303] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.588833][ T4302] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.815247][ T4311] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.985500][ T4322] loop4: detected capacity change from 0 to 64 [ 94.336913][ T4329] loop0: detected capacity change from 0 to 512 [ 95.302536][ T4329] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.320126][ T4329] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.568018][ T4245] attempt to access beyond end of device [ 101.568018][ T4245] loop4: rw=1048577, want=66, limit=64 [ 101.649532][ T4245] buffer_io_error: 25 callbacks suppressed [ 101.649552][ T4245] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 101.692989][ T4245] attempt to access beyond end of device [ 101.692989][ T4245] loop4: rw=1048577, want=67, limit=64 [ 101.739539][ T4245] Buffer I/O error on dev loop4, logical block 66, lost async page write [ 101.762794][ T4245] attempt to access beyond end of device [ 101.762794][ T4245] loop4: rw=1048577, want=68, limit=64 [ 101.817384][ T4245] Buffer I/O error on dev loop4, logical block 67, lost async page write [ 103.327769][ T4245] attempt to access beyond end of device [ 103.327769][ T4245] loop4: rw=1048577, want=69, limit=64 [ 103.885474][ T4245] Buffer I/O error on dev loop4, logical block 68, lost async page write [ 103.894798][ T4245] attempt to access beyond end of device [ 103.894798][ T4245] loop4: rw=1048577, want=73, limit=64 [ 103.906397][ T4245] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 103.918716][ T4245] attempt to access beyond end of device [ 103.918716][ T4245] loop4: rw=1048577, want=74, limit=64 [ 103.932203][ T4245] Buffer I/O error on dev loop4, logical block 73, lost async page write [ 103.941118][ T4245] attempt to access beyond end of device [ 103.941118][ T4245] loop4: rw=1048577, want=77, limit=64 [ 103.965207][ T4245] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 104.057898][ T4245] attempt to access beyond end of device [ 104.057898][ T4245] loop4: rw=1048577, want=78, limit=64 [ 104.148861][ T4245] Buffer I/O error on dev loop4, logical block 77, lost async page write [ 104.222772][ T4245] attempt to access beyond end of device [ 104.222772][ T4245] loop4: rw=1, want=302, limit=64 [ 104.849908][ T4371] loop3: detected capacity change from 0 to 2048 [ 104.863811][ T4374] loop4: detected capacity change from 0 to 2048 [ 106.069661][ T4371] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 106.078004][ T4371] UDF-fs: Scanning with blocksize 512 failed [ 106.081444][ T4374] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.118041][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 106.236004][ T4371] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.329416][ T4390] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 106.851781][ T4363] chnl_net:caif_netlink_parms(): no params data found [ 108.233704][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 108.346929][ T4405] loop0: detected capacity change from 0 to 40427 [ 108.515923][ T4405] F2FS-fs (loop0): invalid crc value [ 108.678766][ T4405] F2FS-fs (loop0): Found nat_bits in checkpoint [ 108.688970][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.736591][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.778246][ T4405] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 108.779724][ T4363] device bridge_slave_0 entered promiscuous mode [ 109.129194][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.136310][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.154974][ T4425] loop4: detected capacity change from 0 to 2048 [ 109.172779][ T4363] device bridge_slave_1 entered promiscuous mode [ 109.236022][ T4166] syz-executor (4166) used greatest stack depth: 19256 bytes left [ 109.275849][ T4425] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.386192][ T4245] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.522605][ T4363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.195373][ T4435] loop0: detected capacity change from 0 to 2048 [ 110.349066][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 110.370399][ T4363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.885201][ T4245] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.914047][ T4435] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.136481][ T4445] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.194649][ T4245] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.420661][ T4363] team0: Port device team_slave_0 added [ 111.467052][ T4363] team0: Port device team_slave_1 added [ 111.535530][ T4245] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.763121][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.811517][ T4443] loop2: detected capacity change from 0 to 32768 [ 111.818310][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.844221][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.852666][ T4213] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.854593][ T4363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.887333][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.896812][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.925529][ T4363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.949633][ T4443] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.50 (4443) [ 112.081541][ T4443] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 112.124132][ T4443] BTRFS info (device loop2): metadata ratio 2 [ 112.133242][ T4213] usb 5-1: Using ep0 maxpacket: 32 [ 112.165679][ T4443] BTRFS info (device loop2): enabling ssd optimizations [ 112.168141][ T4363] device hsr_slave_0 entered promiscuous mode [ 112.192137][ T4443] BTRFS info (device loop2): using spread ssd allocation scheme [ 112.211099][ T4443] BTRFS info (device loop2): enabling disk space caching [ 112.225929][ T4443] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 112.243762][ T4443] BTRFS info (device loop2): use zstd compression, level 3 [ 112.254761][ T4363] device hsr_slave_1 entered promiscuous mode [ 112.261225][ T4213] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 112.279592][ T4443] BTRFS info (device loop2): force clearing of disk cache [ 112.291847][ T4213] usb 5-1: config 0 has no interface number 0 [ 112.303788][ T4443] BTRFS info (device loop2): max_inline at 8 [ 112.312446][ T4443] BTRFS info (device loop2): disk space caching is enabled [ 112.326011][ T4443] BTRFS info (device loop2): has skinny extents [ 112.352539][ T4363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.361447][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 112.377469][ T4363] Cannot create hsr debugfs directory [ 113.288098][ T4213] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 113.346088][ T4213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.375031][ T4213] usb 5-1: Product: syz [ 113.385261][ T4213] usb 5-1: Manufacturer: syz [ 113.395524][ T4213] usb 5-1: SerialNumber: syz [ 113.443128][ T4468] loop3: detected capacity change from 0 to 40427 [ 113.475855][ T4213] usb 5-1: config 0 descriptor?? [ 113.535472][ T4468] F2FS-fs (loop3): invalid crc value [ 113.537014][ T4213] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 113.618935][ T4468] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.667266][ T4468] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.691164][ T4443] BTRFS info (device loop2): clearing free space tree [ 113.715523][ T4443] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.727018][ T4443] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.143893][ T4363] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.177858][ T4363] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.389290][ T4363] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.492136][ T4363] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.731657][ T4495] loop0: detected capacity change from 0 to 32768 [ 114.778275][ T4495] ======================================================= [ 114.778275][ T4495] WARNING: The mand mount option has been deprecated and [ 114.778275][ T4495] and is ignored by this kernel. Remove the mand [ 114.778275][ T4495] option from the mount to silence this warning. [ 114.778275][ T4495] ======================================================= [ 114.797821][ T4214] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.824433][ T4516] loop2: detected capacity change from 0 to 2048 [ 114.828323][ T4363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.837914][ T4213] gspca_topro: reg_w err -71 [ 114.877823][ T4213] gspca_topro: Sensor soi763a [ 114.921386][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.941193][ T4516] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 114.954850][ T4213] usb 5-1: USB disconnect, device number 2 [ 114.958733][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.971412][ T4495] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 114.983142][ T4516] UDF-fs: Scanning with blocksize 512 failed [ 115.005221][ T4363] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.069601][ T4495] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 115.091245][ T4516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.887787][ T4214] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.922992][ T4214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.995558][ T4214] usb 4-1: Product: syz [ 117.027681][ T4168] ocfs2: Unmounting device (7,0) on (node local) [ 117.037735][ T4214] usb 4-1: Manufacturer: syz [ 117.042462][ T4214] usb 4-1: SerialNumber: syz [ 117.142010][ T4214] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 117.197296][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.238006][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.315236][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.322435][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.397124][ T4213] usb 4-1: USB disconnect, device number 2 [ 117.407762][ T4214] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 117.418018][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.426799][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.432653][ T4213] usb 4-1: ath9k_htc: USB layer deinitialized [ 117.508286][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.515618][ T4263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.524742][ T4542] xt_l2tp: invalid flags combination: 8 [ 117.558739][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.593102][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.622998][ T4546] loop0: detected capacity change from 0 to 2048 [ 117.630964][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.786877][ T4363] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.805711][ T4363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.895090][ T4546] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.401892][ T4560] loop4: detected capacity change from 0 to 40427 [ 119.445848][ T4560] F2FS-fs (loop4): invalid crc value [ 119.511471][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.546614][ T4560] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.582541][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.737845][ T4560] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.809050][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.838930][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.871739][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.895250][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.905551][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.914828][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.926588][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.973782][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.250777][ T4582] loop0: detected capacity change from 0 to 2048 [ 120.316057][ T4245] device hsr_slave_0 left promiscuous mode [ 120.329571][ T4582] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 120.337262][ T4582] UDF-fs: Scanning with blocksize 512 failed [ 120.375286][ T4245] device hsr_slave_1 left promiscuous mode [ 120.440578][ T4582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.496336][ T4586] syz.4.71 uses obsolete (PF_INET,SOCK_PACKET) [ 120.538244][ T4245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.556171][ T4245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.729670][ T4245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.743782][ T4245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.315366][ T1110] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.331169][ T4245] device bridge_slave_1 left promiscuous mode [ 121.339118][ T4245] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.471614][ T4245] device bridge_slave_0 left promiscuous mode [ 121.491141][ T4245] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.502796][ T4599] loop3: detected capacity change from 0 to 2048 [ 121.559365][ T4245] device veth1_macvtap left promiscuous mode [ 121.565990][ T4245] device veth0_macvtap left promiscuous mode [ 121.599076][ T4245] device veth1_vlan left promiscuous mode [ 121.605185][ T4245] device veth0_vlan left promiscuous mode [ 121.635170][ T4599] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 121.666677][ T4599] UDF-fs: Scanning with blocksize 512 failed [ 121.692168][ T4599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.988022][ T1110] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 122.009283][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.017537][ T1110] usb 3-1: Product: syz [ 122.026801][ T1110] usb 3-1: Manufacturer: syz [ 122.069541][ T1110] usb 3-1: SerialNumber: syz [ 122.338995][ T1110] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 122.538087][ T4245] team0 (unregistering): Port device team_slave_1 removed [ 122.589726][ T4245] team0 (unregistering): Port device team_slave_0 removed [ 122.605950][ T4245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.670283][ T4245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.847237][ T4245] bond0 (unregistering): Released all slaves [ 122.927886][ T1110] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 123.222043][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.068732][ T1110] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 124.076088][ T1110] ath9k_htc: Failed to initialize the device [ 124.093023][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.130333][ T4589] loop2: detected capacity change from 0 to 512 [ 124.235594][ T4624] loop3: detected capacity change from 0 to 40427 [ 124.437939][ T4363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.448844][ T4589] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 124.481902][ T4624] F2FS-fs (loop3): invalid crc value [ 124.493010][ T4624] F2FS-fs (loop3): Found nat_bits in checkpoint [ 124.533716][ T4589] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.558290][ T4213] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.567317][ T4624] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 124.620859][ T4589] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.74: bad orphan inode 131083 [ 124.665568][ T4589] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 124.928006][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 124.952994][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 125.130183][ T4503] usb 3-1: USB disconnect, device number 2 [ 125.158141][ T4213] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 125.173841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.191020][ T4503] usb 3-1: ath9k_htc: USB layer deinitialized [ 125.197388][ T4213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.229009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.282076][ T4213] usb 1-1: Product: syz [ 125.296541][ T4213] usb 1-1: Manufacturer: syz [ 125.314542][ T4213] usb 1-1: SerialNumber: syz [ 125.352229][ T4213] usb 1-1: config 0 descriptor?? [ 125.396434][ T4213] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 125.490536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.758670][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.040030][ T4363] device veth0_vlan entered promiscuous mode [ 126.199160][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.246524][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.334924][ T4363] device veth1_vlan entered promiscuous mode [ 126.578312][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.598456][ T4213] usb 1-1: USB disconnect, device number 2 [ 126.600326][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.675319][ T4363] device veth0_macvtap entered promiscuous mode [ 126.741648][ T4363] device veth1_macvtap entered promiscuous mode [ 126.801884][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.875874][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.083157][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.103445][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.114581][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.167655][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.201763][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.242688][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.259470][ T4676] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 127.301168][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.497686][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.911711][ T4697] loop0: detected capacity change from 0 to 40427 [ 127.925091][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.976771][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.020699][ T4695] process 'syz.3.95' launched '/dev/fd/3' with NULL argv: empty string added [ 128.029020][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.046601][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.061200][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.087663][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.097556][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.150778][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.209231][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.222434][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.253764][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.270288][ T4697] F2FS-fs (loop0): invalid crc value [ 128.306010][ T4697] F2FS-fs (loop0): Found nat_bits in checkpoint [ 128.368966][ T4697] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 128.390696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.442627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.478182][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.487120][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.516933][ T4363] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.596765][ T4363] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.633837][ T4363] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.643370][ T4363] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.868633][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.876829][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.947770][ T4221] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.979953][ T4394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.995435][ T4394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.108402][ T4213] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.117959][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.307792][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.008152][ T4221] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 130.037659][ T4221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.097129][ T4221] usb 4-1: Product: syz [ 130.119473][ T4221] usb 4-1: Manufacturer: syz [ 130.133230][ T4221] usb 4-1: SerialNumber: syz [ 130.137801][ T4213] usb 5-1: Using ep0 maxpacket: 16 [ 130.219224][ T4221] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 130.257854][ T4213] usb 5-1: config 0 has no interfaces? [ 130.269002][ T4213] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 130.327787][ T4213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.403287][ T4213] usb 5-1: config 0 descriptor?? [ 130.983086][ T4751] loop0: detected capacity change from 0 to 2048 [ 130.992758][ T21] usb 5-1: USB disconnect, device number 3 [ 131.138121][ T4751] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 131.178143][ T4221] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 131.192292][ T4751] UDF-fs: Scanning with blocksize 512 failed [ 131.274890][ T4751] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.082065][ T4725] loop3: detected capacity change from 0 to 512 [ 132.146218][ T4725] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.212150][ T4725] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.100: bad orphan inode 131083 [ 132.240948][ T4725] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 132.287663][ T4221] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 132.294755][ T4221] ath9k_htc: Failed to initialize the device [ 132.353469][ T4741] loop5: detected capacity change from 0 to 32768 [ 132.720523][ T21] usb 4-1: USB disconnect, device number 3 [ 132.741820][ T21] usb 4-1: ath9k_htc: USB layer deinitialized [ 132.859724][ T4741] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 132.859724][ T4741] [ 132.904143][ T4741] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 132.904143][ T4741] [ 132.921627][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.928074][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.966280][ T4741] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 132.966280][ T4741] [ 133.021138][ T4777] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 133.021138][ T4777] [ 133.081400][ T4741] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 133.081400][ T4741] [ 133.138079][ T4777] ialloc: diAlloc returned -5! [ 133.163227][ T4741] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 133.163227][ T4741] [ 133.194588][ T4741] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 133.194588][ T4741] [ 133.303055][ T4741] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 133.303055][ T4741] [ 133.327828][ T4741] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 133.327828][ T4741] [ 133.378193][ T4741] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 133.378193][ T4741] [ 133.424101][ T4741] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 133.424101][ T4741] [ 133.552204][ T4251] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 133.552204][ T4251] [ 134.360768][ T4806] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 135.505795][ T4819] loop5: detected capacity change from 0 to 40427 [ 136.258470][ T4806] kvm: pic: non byte read [ 136.309352][ T4819] F2FS-fs (loop5): invalid crc value [ 136.337241][ T4819] F2FS-fs (loop5): Found nat_bits in checkpoint [ 136.467785][ T4819] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 137.679224][ T4853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.126'. [ 137.751803][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 137.879745][ T4853] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.889027][ T4853] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.897803][ T4853] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.906507][ T4853] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.923510][ T4853] device vxlan0 entered promiscuous mode [ 140.128285][ T4887] loop5: detected capacity change from 0 to 40427 [ 141.178781][ T4887] F2FS-fs (loop5): invalid crc value [ 141.287460][ T4890] loop0: detected capacity change from 0 to 40427 [ 141.364834][ T4890] F2FS-fs (loop0): invalid crc value [ 141.445649][ T4887] F2FS-fs (loop5): Found nat_bits in checkpoint [ 141.507119][ T4890] F2FS-fs (loop0): Found nat_bits in checkpoint [ 141.572263][ T4887] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 141.608027][ T4890] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 141.990486][ T4907] loop4: detected capacity change from 0 to 2048 [ 142.017907][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 142.057916][ T4907] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 142.069413][ T4907] UDF-fs: Scanning with blocksize 512 failed [ 142.140186][ T4907] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.201700][ T4908] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 142.618431][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.703951][ T21] usb 3-1: config 0 has no interfaces? [ 142.898085][ T21] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.953338][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.034447][ T21] usb 3-1: config 0 descriptor?? [ 143.608187][ T4936] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 143.820272][ T4940] loop5: detected capacity change from 0 to 16 [ 144.242415][ T4945] loop4: detected capacity change from 0 to 32768 [ 144.275426][ T4940] erofs: Unknown parameter 'Le⾦ xHI!Zitp-@gft6UG&w&0_͏c7ZoN eɔǸd\Qz7r' [ 144.340769][ T4945] JBD2: Ignoring recovery information on journal [ 144.383141][ T4945] (syz.4.146,4945,1):ocfs2_clear_journal_error:1063 ERROR: File system error -33024 recorded in journal 0. [ 144.394741][ T4945] (syz.4.146,4945,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop4 needs checking. [ 144.410077][ T4945] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 144.604707][ T4167] ocfs2: Unmounting device (7,4) on (node local) [ 145.459807][ T4214] usb 3-1: USB disconnect, device number 3 [ 145.642947][ T4963] loop0: detected capacity change from 0 to 40427 [ 145.757798][ T4975] loop4: detected capacity change from 0 to 40427 [ 145.776204][ T4963] F2FS-fs (loop0): invalid crc value [ 145.806122][ T4975] F2FS-fs (loop4): invalid crc value [ 145.834199][ T4975] F2FS-fs (loop4): Found nat_bits in checkpoint [ 145.835478][ T4963] F2FS-fs (loop0): Found nat_bits in checkpoint [ 145.907815][ T4975] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 145.920201][ T4963] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 147.997195][ T5038] kvm: emulating exchange as write [ 148.143727][ T5043] loop0: detected capacity change from 0 to 2048 [ 148.323447][ T5053] mmap: syz.5.170 (5053): VmData 37474304 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 149.351518][ T5057] loop3: detected capacity change from 0 to 40427 [ 149.380643][ T5043] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.753896][ T5057] F2FS-fs (loop3): invalid crc value [ 149.810369][ T5057] F2FS-fs (loop3): Found nat_bits in checkpoint [ 149.866997][ T5057] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 150.134692][ T5060] syz.4.169 (5060): drop_caches: 2 [ 154.025001][ T5128] loop4: detected capacity change from 0 to 40427 [ 154.277560][ T5128] F2FS-fs (loop4): invalid crc value [ 154.454050][ T5128] F2FS-fs (loop4): Found nat_bits in checkpoint [ 154.575676][ T5128] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 155.893473][ T5155] kvm: pic: non byte read [ 155.938488][ T5155] kvm: pic: level sensitive irq not supported [ 155.938640][ T5155] kvm: pic: non byte read [ 155.992185][ T5155] kvm: pic: level sensitive irq not supported [ 155.992253][ T5155] kvm: pic: non byte read [ 157.314906][ T5177] loop4: detected capacity change from 0 to 2048 [ 157.462321][ T5140] loop2: detected capacity change from 0 to 32768 [ 157.469943][ T5177] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.492570][ T5191] loop5: detected capacity change from 0 to 40427 [ 158.604668][ T5191] F2FS-fs (loop5): invalid crc value [ 158.644347][ T5191] F2FS-fs (loop5): Found nat_bits in checkpoint [ 158.794266][ T5191] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 159.799285][ T5180] loop0: detected capacity change from 0 to 32768 [ 159.939905][ T5180] XFS (loop0): Mounting V5 Filesystem [ 160.145615][ T5180] XFS (loop0): Ending clean mount [ 160.279489][ T5231] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.479492][ T4168] XFS (loop0): Unmounting Filesystem [ 161.342261][ T5251] loop5: detected capacity change from 0 to 40427 [ 161.351236][ T4214] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 161.473240][ T5251] F2FS-fs (loop5): invalid crc value [ 161.494966][ T5251] F2FS-fs (loop5): Found nat_bits in checkpoint [ 161.583151][ T5251] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 161.807114][ T4214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 161.854516][ T4214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.028033][ T4214] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 162.077666][ T4214] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 162.106813][ T4214] usb 3-1: Manufacturer: syz [ 162.130131][ T5270] netlink: 132 bytes leftover after parsing attributes in process `syz.0.215'. [ 162.188106][ T4214] usb 3-1: config 0 descriptor?? [ 162.200981][ T5261] loop3: detected capacity change from 0 to 40427 [ 162.298166][ T5261] F2FS-fs (loop3): invalid crc value [ 162.315746][ T5261] F2FS-fs (loop3): Found nat_bits in checkpoint [ 162.402945][ T5261] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 162.912096][ T5262] loop4: detected capacity change from 0 to 32768 [ 163.696007][ T4214] cougar 0003:060B:700A.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 163.758216][ T5262] XFS (loop4): Mounting V5 Filesystem [ 163.854574][ T5312] bridge0: port 3(vlan2) entered blocking state [ 163.927802][ T5312] bridge0: port 3(vlan2) entered disabled state [ 163.935424][ T5312] device vlan2 entered promiscuous mode [ 163.971218][ T5318] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 164.008536][ T26] audit: type=1326 audit(1738506193.218:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02633e3da9 code=0x7ffc0000 [ 164.151701][ T26] audit: type=1326 audit(1738506193.268:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f02633e3da9 code=0x7ffc0000 [ 164.178274][ T5262] XFS (loop4): Ending clean mount [ 164.219575][ T26] audit: type=1326 audit(1738506193.268:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02633e3da9 code=0x7ffc0000 [ 164.220336][ T5262] XFS (loop4): Quotacheck needed: Please wait. [ 164.241630][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.366118][ T26] audit: type=1326 audit(1738506193.268:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f02633e3da9 code=0x7ffc0000 [ 164.394979][ T5262] XFS (loop4): Quotacheck: Done. [ 164.449202][ T26] audit: type=1326 audit(1738506193.268:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02633e3da9 code=0x7ffc0000 [ 164.471789][ T26] audit: type=1326 audit(1738506193.268:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f02633e3da9 code=0x7ffc0000 [ 164.501264][ T26] audit: type=1326 audit(1738506193.268:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02633e3da9 code=0x7ffc0000 [ 164.957764][ T4221] usb 3-1: reset full-speed USB device number 4 using dummy_hcd [ 167.440544][ T5369] loop2: detected capacity change from 0 to 40427 [ 167.450824][ T4213] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 168.035991][ T5369] F2FS-fs (loop2): invalid crc value [ 168.045425][ T4172] usb 3-1: USB disconnect, device number 4 [ 168.082905][ T5369] F2FS-fs (loop2): Found nat_bits in checkpoint [ 168.158391][ T5369] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 168.237851][ T4213] usb 1-1: Using ep0 maxpacket: 8 [ 168.376312][ T5377] loop5: detected capacity change from 0 to 2048 [ 168.383963][ T4213] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.421597][ T4213] usb 1-1: config 0 has no interfaces? [ 168.458312][ T4213] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 168.538701][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.549869][ T5377] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 168.568098][ T4213] usb 1-1: config 0 descriptor?? [ 168.574773][ T5377] UDF-fs: Scanning with blocksize 512 failed [ 168.654562][ T5377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.685807][ T4172] usb 1-1: USB disconnect, device number 3 [ 169.985673][ T4214] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 170.257752][ T4214] usb 6-1: Using ep0 maxpacket: 32 [ 170.418776][ T4214] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 170.758194][ T4214] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 170.767280][ T4214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.847183][ T4214] usb 6-1: Product: syz [ 170.857311][ T4214] usb 6-1: Manufacturer: syz [ 170.877786][ T4214] usb 6-1: SerialNumber: syz [ 170.921460][ T4214] usb 6-1: config 0 descriptor?? [ 170.957980][ T5392] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 170.989671][ T4214] hub 6-1:0.0: bad descriptor, ignoring hub [ 170.995645][ T4214] hub: probe of 6-1:0.0 failed with error -5 [ 171.031422][ T4214] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input5 [ 171.230872][ T4172] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 172.656916][ T5435] loop2: detected capacity change from 0 to 2048 [ 172.753936][ T5435] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 172.794266][ T5435] UDF-fs: Scanning with blocksize 512 failed [ 172.846008][ T5435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.945359][ T4214] usb 6-1: USB disconnect, device number 2 [ 172.967633][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 173.060861][ T4172] usb 4-1: string descriptor 0 read error: -71 [ 173.067162][ T4172] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 174.529165][ T5445] loop0: detected capacity change from 0 to 40427 [ 175.113532][ T4172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.167981][ T4172] usb 4-1: can't set config #1, error -71 [ 175.188962][ T5448] loop3: detected capacity change from 0 to 2048 [ 175.199295][ T5445] F2FS-fs (loop0): invalid crc value [ 175.239795][ T4172] usb 4-1: USB disconnect, device number 4 [ 175.249168][ T5445] F2FS-fs (loop0): Found nat_bits in checkpoint [ 175.302650][ T5445] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 175.360099][ T5448] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 175.412412][ T4167] XFS (loop4): Unmounting Filesystem [ 175.430377][ T5448] UDF-fs: Scanning with blocksize 512 failed [ 175.564721][ T5448] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.948037][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 176.594247][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 176.728064][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.923020][ T7] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 176.937922][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.967470][ T7] usb 3-1: Product: syz [ 176.995470][ T7] usb 3-1: Manufacturer: syz [ 177.023875][ T7] usb 3-1: SerialNumber: syz [ 177.051817][ T7] usb 3-1: config 0 descriptor?? [ 177.119870][ T7] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 178.390000][ T5505] loop4: detected capacity change from 0 to 2048 [ 178.485882][ T5505] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 178.493762][ T7] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 178.501954][ T5483] loop3: detected capacity change from 0 to 32768 [ 178.511601][ T7] gspca_pac7302: probe of 3-1:0.0 failed with error -71 [ 178.524978][ T5505] UDF-fs: Scanning with blocksize 512 failed [ 178.553579][ T7] usb 3-1: USB disconnect, device number 5 [ 178.584751][ T5505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.270809][ T5483] XFS (loop3): Mounting V5 Filesystem [ 179.450808][ T5483] XFS (loop3): Ending clean mount [ 179.500810][ T5483] XFS (loop3): Quotacheck needed: Please wait. [ 179.764287][ T5483] XFS (loop3): Quotacheck: Done. [ 180.748259][ T5540] loop4: detected capacity change from 0 to 2048 [ 180.777207][ T5541] loop2: detected capacity change from 0 to 40427 [ 180.823339][ T5541] F2FS-fs (loop2): invalid crc value [ 180.828584][ T5540] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 180.870148][ T5541] F2FS-fs (loop2): Found nat_bits in checkpoint [ 180.880389][ T4169] XFS (loop3): Unmounting Filesystem [ 180.889678][ T5540] UDF-fs: Scanning with blocksize 512 failed [ 180.931604][ T5515] loop0: detected capacity change from 0 to 32768 [ 180.941843][ T5540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.950856][ T5541] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 181.098009][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 181.281188][ T5515] XFS (loop0): Mounting V5 Filesystem [ 181.530442][ T5515] XFS (loop0): Ending clean mount [ 181.537541][ T5515] XFS (loop0): Quotacheck needed: Please wait. [ 181.696210][ T5515] XFS (loop0): Quotacheck: Done. [ 181.777406][ T4168] XFS (loop0): Unmounting Filesystem [ 181.903263][ T5557] mmap: syz.4.263 (5557) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 181.957896][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 182.087793][ T23] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.115660][ T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.126687][ T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.159521][ T23] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.188920][ T23] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.207772][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.528125][ T23] usb 6-1: GET_CAPABILITIES returned 0 [ 182.534679][ T23] usbtmc 6-1:16.0: can't read capabilities [ 182.761655][ T5577] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 183.606066][ T4172] usb 6-1: USB disconnect, device number 3 [ 184.068079][ T5587] loop0: detected capacity change from 0 to 2048 [ 184.210416][ T5587] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 184.577106][ T4214] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 185.389211][ T5597] loop5: detected capacity change from 0 to 32768 [ 185.436605][ T5601] loop4: detected capacity change from 0 to 2048 [ 185.462681][ T5597] XFS (loop5): Mounting V5 Filesystem [ 185.487921][ T5601] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 185.573731][ T5601] UDF-fs: Scanning with blocksize 512 failed [ 185.587959][ T4214] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 185.623734][ T4214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.626389][ T5601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.632839][ T4214] usb 3-1: Product: syz [ 185.645069][ T4214] usb 3-1: Manufacturer: syz [ 185.650083][ T4214] usb 3-1: SerialNumber: syz [ 185.676099][ T5597] XFS (loop5): Ending clean mount [ 185.684326][ T5597] XFS (loop5): Quotacheck needed: Please wait. [ 185.709426][ T4214] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 185.783659][ T5597] XFS (loop5): Quotacheck: Done. [ 186.107671][ T4213] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 186.717785][ T4213] usb 4-1: Using ep0 maxpacket: 8 [ 187.857765][ T4214] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 187.866730][ T4213] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 187.877903][ T4503] usb 3-1: USB disconnect, device number 6 [ 187.911533][ T4213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.924405][ T4503] usb 3-1: ath9k_htc: USB layer deinitialized [ 188.006697][ T4213] usb 4-1: config 0 has no interfaces? [ 188.199850][ T5642] loop4: detected capacity change from 0 to 2048 [ 188.224875][ T4213] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 188.244049][ T4213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.256149][ T4213] usb 4-1: Product: syz [ 188.261865][ T4213] usb 4-1: Manufacturer: syz [ 188.266825][ T4213] usb 4-1: SerialNumber: syz [ 188.302231][ T4213] usb 4-1: config 0 descriptor?? [ 188.323210][ T5642] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 189.292123][ T5647] loop2: detected capacity change from 0 to 40427 [ 189.407950][ T4213] usb 4-1: can't set config #0, error -71 [ 189.492895][ T4213] usb 4-1: USB disconnect, device number 5 [ 189.520151][ T5647] F2FS-fs (loop2): invalid crc value [ 189.902516][ T5647] F2FS-fs (loop2): Found nat_bits in checkpoint [ 189.966617][ T5647] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 190.000580][ T5651] loop3: detected capacity change from 0 to 2048 [ 190.230757][ T5651] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.966790][ T5670] loop4: detected capacity change from 0 to 2048 [ 191.248888][ T5670] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 191.490436][ T5670] UDF-fs: Scanning with blocksize 512 failed [ 191.571694][ T5670] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.779133][ T4363] XFS (loop5): Unmounting Filesystem [ 193.576555][ T5698] loop0: detected capacity change from 0 to 2048 [ 193.698789][ T5698] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 193.798108][ T4214] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 195.156641][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.166906][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.358192][ T4214] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 195.397083][ T4214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.703910][ T4214] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 195.721609][ T4214] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 195.751046][ T4214] usb 3-1: Manufacturer: syz [ 195.766125][ T4214] usb 3-1: config 0 descriptor?? [ 196.062914][ T5728] loop3: detected capacity change from 0 to 16 [ 196.097763][ T4214] rc_core: IR keymap rc-hauppauge not found [ 196.103749][ T4214] Registered IR keymap rc-empty [ 196.163392][ T5729] loop5: detected capacity change from 0 to 40427 [ 196.184373][ T4214] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 196.196467][ T5728] erofs: Unknown parameter 'Le⾦ xHI!Zitp-@gft6UG&w&0_͏c7ZoN eɔǸd\Qz7r' [ 196.212258][ T4214] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 196.230005][ T5729] F2FS-fs (loop5): invalid crc value [ 196.242423][ T5729] F2FS-fs (loop5): Found nat_bits in checkpoint [ 196.322003][ T5729] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 196.478658][ T5742] loop4: detected capacity change from 0 to 2048 [ 196.646063][ T4214] usb 3-1: USB disconnect, device number 7 [ 196.709565][ T5742] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.158008][ T4346] Bluetooth: hci0: command 0x0406 tx timeout [ 197.166651][ T4346] Bluetooth: hci4: command 0x0406 tx timeout [ 197.792690][ T4213] Bluetooth: hci3: command 0x0406 tx timeout [ 197.800579][ T4213] Bluetooth: hci2: command 0x0406 tx timeout [ 198.251504][ T5764] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 199.039247][ T5765] loop2: detected capacity change from 0 to 40427 [ 199.115195][ T5765] F2FS-fs (loop2): invalid crc value [ 199.147000][ T5765] F2FS-fs (loop2): Found nat_bits in checkpoint [ 199.239902][ T5765] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 200.583904][ T5778] loop3: detected capacity change from 0 to 8 [ 201.377350][ T5780] loop5: detected capacity change from 0 to 2048 [ 201.648704][ T5780] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 202.855582][ T5789] loop3: detected capacity change from 0 to 16 [ 202.908260][ T5789] erofs: Unknown parameter 'Le⾦ xHI!Zitp-@gft6UG&w&0_͏c7ZoN eɔǸd\Qz7r' [ 204.366894][ T5799] loop2: detected capacity change from 0 to 40427 [ 204.487081][ T5799] F2FS-fs (loop2): invalid crc value [ 204.541601][ T5799] F2FS-fs (loop2): Found nat_bits in checkpoint [ 204.594167][ T5799] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 206.122088][ T5816] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 206.759221][ T5829] trusted_key: encrypted_key: keylen parameter is missing [ 207.239384][ T5836] loop5: detected capacity change from 0 to 2048 [ 207.331028][ T5834] loop4: detected capacity change from 0 to 2048 [ 207.394263][ T5836] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 207.521387][ T5834] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.740585][ T5833] sctp: failed to load transform for md5: -2 [ 207.936968][ T5856] input: syz1 as /devices/virtual/input/input7 [ 208.907746][ T5861] loop0: detected capacity change from 0 to 40427 [ 209.152034][ T5861] F2FS-fs (loop0): invalid crc value [ 209.183471][ T5861] F2FS-fs (loop0): Found nat_bits in checkpoint [ 209.394218][ T5861] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 211.017740][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 211.437747][ T23] usb 3-1: config 0 has no interfaces? [ 211.578904][ T5897] loop3: detected capacity change from 0 to 2048 [ 211.717864][ T23] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 211.758548][ T5897] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 211.774784][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.836606][ T23] usb 3-1: Product: syz [ 211.863766][ T23] usb 3-1: Manufacturer: syz [ 211.912400][ T23] usb 3-1: SerialNumber: syz [ 211.968447][ T23] usb 3-1: config 0 descriptor?? [ 214.022347][ T1110] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 214.178950][ T5923] loop0: detected capacity change from 0 to 40427 [ 214.289018][ T5923] F2FS-fs (loop0): invalid crc value [ 214.327688][ T1110] usb 5-1: Using ep0 maxpacket: 32 [ 214.334344][ T5923] F2FS-fs (loop0): Found nat_bits in checkpoint [ 214.417899][ T5923] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 214.467935][ T1110] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 214.481666][ T1110] usb 5-1: config 0 has no interface number 0 [ 214.521480][ T1110] usb 5-1: config 0 interface 12 has no altsetting 0 [ 214.768685][ T1110] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 214.861728][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.882095][ T1110] usb 5-1: Product: syz [ 214.886313][ T1110] usb 5-1: Manufacturer: syz [ 215.257693][ T1110] usb 5-1: SerialNumber: syz [ 215.266283][ T1110] usb 5-1: config 0 descriptor?? [ 216.896328][ T4503] usb 3-1: USB disconnect, device number 8 [ 216.948485][ T5947] loop0: detected capacity change from 0 to 2048 [ 216.998228][ T1110] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 217.016407][ T1110] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 217.066403][ T1110] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 217.089292][ T5947] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.117948][ T1110] f81534: probe of 5-1:0.12 failed with error -71 [ 217.154891][ T5953] loop5: detected capacity change from 0 to 2048 [ 217.190866][ T1110] usb 5-1: USB disconnect, device number 4 [ 217.343748][ T5963] usb usb7: usbfs: process 5963 (syz.2.375) did not claim interface 0 before use [ 217.542992][ T26] audit: type=1326 audit(1738506246.758:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.2.375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f0c70eda9 code=0x0 [ 217.586806][ T5953] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 218.516160][ T26] audit: type=1326 audit(1738506247.728:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02633e3da9 code=0x7ffc0000 [ 218.704717][ T26] audit: type=1326 audit(1738506247.728:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f02633e3da9 code=0x7ffc0000 [ 219.549690][ T26] audit: type=1326 audit(1738506247.738:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f026337ffa9 code=0x7ffc0000 [ 219.666248][ T26] audit: type=1326 audit(1738506247.738:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f026337ffa9 code=0x7ffc0000 [ 219.717148][ T5990] rdma_op ffff888079d4e1f0 conn xmit_rdma 0000000000000000 [ 219.727906][ T26] audit: type=1326 audit(1738506247.738:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f026337ffa9 code=0x7ffc0000 [ 219.753835][ T26] audit: type=1326 audit(1738506247.738:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f026337ffa9 code=0x7ffc0000 [ 219.785061][ T26] audit: type=1326 audit(1738506247.738:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f026337ffa9 code=0x7ffc0000 [ 219.859283][ T26] audit: type=1326 audit(1738506247.738:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f026337ffa9 code=0x7ffc0000 [ 220.186911][ T5992] loop2: detected capacity change from 0 to 16 [ 220.204400][ T26] audit: type=1326 audit(1738506247.738:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f026337ffa9 code=0x7ffc0000 [ 220.232890][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.248396][ T5992] erofs: Unknown parameter 'Le⾦ xHI!Zitp-@gft6UG&w&0_͏c7ZoN eɔǸd\Qz7r' [ 221.007655][ T4346] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 221.284854][ T4346] usb 3-1: Using ep0 maxpacket: 16 [ 221.837926][ T4346] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 222.278011][ T4346] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 222.325767][ T4346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.430243][ T4346] usb 3-1: Product: syz [ 222.488095][ T4346] usb 3-1: Manufacturer: syz [ 222.551414][ T4346] usb 3-1: SerialNumber: syz [ 222.877237][ T4346] usb 3-1: config 0 descriptor?? [ 223.159686][ T1110] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 224.117868][ T1110] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 224.167624][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.207876][ T1110] usb 4-1: config 0 descriptor?? [ 225.879454][ T1110] usb 4-1: can't set config #0, error -71 [ 225.928759][ T1110] usb 4-1: USB disconnect, device number 6 [ 225.935850][ T7] usb 3-1: USB disconnect, device number 9 [ 226.212264][ T6033] loop4: detected capacity change from 0 to 2048 [ 226.251944][ T6038] loop3: detected capacity change from 0 to 16 [ 226.488748][ T6038] erofs: Unknown parameter 'Le⾦ xHI!Zitp-@gft6UG&w&0_͏c7ZoN eɔǸd\Qz7r' [ 226.571751][ T6033] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 226.623543][ T6043] loop5: detected capacity change from 0 to 2048 [ 226.714637][ T6043] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.157926][ T4346] Bluetooth: hci5: command 0x0406 tx timeout [ 229.327673][ T6066] Zero length message leads to an empty skb [ 231.887726][ T6085] loop2: detected capacity change from 0 to 512 [ 232.091176][ T6085] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 232.103164][ T6085] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.916312][ T6095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.411'. [ 233.234437][ T6095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.411'. [ 233.378301][ T6095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.411'. [ 233.407758][ T1110] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 233.937783][ T1110] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 233.946937][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.002086][ T1110] usb 5-1: Product: syz [ 234.011092][ T1110] usb 5-1: Manufacturer: syz [ 234.026656][ T1110] usb 5-1: SerialNumber: syz [ 234.828730][ T1110] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 234.839359][ T6116] netlink: 'syz.5.417': attribute type 5 has an invalid length. [ 236.179880][ T6128] loop0: detected capacity change from 0 to 2048 [ 236.229831][ T1110] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 236.337017][ T4346] usb 5-1: USB disconnect, device number 5 [ 236.346439][ T6128] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.549796][ T6140] loop4: detected capacity change from 0 to 2048 [ 236.870026][ T6140] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 237.317898][ T1110] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 237.337773][ T1110] ath9k_htc: Failed to initialize the device [ 238.067240][ T4346] usb 5-1: ath9k_htc: USB layer deinitialized [ 238.387863][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 238.637714][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 238.757944][ T7] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 238.781052][ T7] usb 4-1: config 0 has no interface number 0 [ 238.978598][ T7] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 239.008558][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.068320][ T7] usb 4-1: Product: syz [ 239.102198][ T7] usb 4-1: Manufacturer: syz [ 239.122230][ T7] usb 4-1: SerialNumber: syz [ 239.169399][ T7] usb 4-1: config 0 descriptor?? [ 239.240679][ T7] smsc95xx v2.0.0 [ 240.066151][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 240.107825][ T7] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 240.126714][ T7] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 240.458115][ T6197] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 241.085170][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 241.090626][ T6206] loop4: detected capacity change from 0 to 2048 [ 241.124011][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 241.147752][ T7] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 241.155987][ T6208] netlink: 'syz.2.448': attribute type 19 has an invalid length. [ 241.186797][ T7] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 241.224305][ T7] usb 4-1: USB disconnect, device number 7 [ 241.286006][ T6206] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 243.932469][ T6254] loop0: detected capacity change from 0 to 40427 [ 244.006378][ T6254] F2FS-fs (loop0): invalid crc value [ 244.074786][ T6254] F2FS-fs (loop0): Found nat_bits in checkpoint [ 244.160028][ T6254] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 248.248496][ T6292] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 248.589686][ T6280] loop5: detected capacity change from 0 to 32768 [ 248.770014][ T6280] XFS (loop5): Mounting V5 Filesystem [ 248.775977][ T6295] loop4: detected capacity change from 0 to 40427 [ 248.830380][ T6295] F2FS-fs (loop4): invalid crc value [ 248.844990][ T6280] XFS (loop5): Ending clean mount [ 248.908545][ T6295] F2FS-fs (loop4): Found nat_bits in checkpoint [ 248.973188][ T6295] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 249.354226][ T4363] XFS (loop5): Unmounting Filesystem [ 251.558074][ T4503] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 252.648128][ T4503] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.661344][ T4503] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 252.672527][ T4503] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.687733][ T4503] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 252.705950][ T4503] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 252.839616][ T4503] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.861328][ T4503] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.942009][ T4503] usb 1-1: Product: syz [ 252.975651][ T4503] usb 1-1: Manufacturer: syz [ 253.058826][ T4503] cdc_wdm 1-1:1.0: skipping garbage [ 253.064832][ T4503] cdc_wdm 1-1:1.0: skipping garbage [ 253.139444][ T4503] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 253.167776][ T4503] cdc_wdm 1-1:1.0: Unknown control protocol [ 253.301070][ T6346] loop4: detected capacity change from 0 to 40427 [ 253.455882][ T1110] usb 1-1: USB disconnect, device number 4 [ 253.470884][ T6326] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 253.500207][ T6346] F2FS-fs (loop4): invalid crc value [ 253.662407][ T6365] loop2: detected capacity change from 0 to 8 [ 253.813362][ T6346] F2FS-fs (loop4): Found nat_bits in checkpoint [ 253.930031][ T6346] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 255.721520][ T6384] loop0: detected capacity change from 0 to 2048 [ 255.800901][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.807384][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.830554][ T6384] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 255.877772][ T6384] UDF-fs: Scanning with blocksize 512 failed [ 255.902988][ T6384] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.176742][ T6391] loop3: detected capacity change from 0 to 2048 [ 256.326312][ T6391] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 256.695057][ T6401] loop4: detected capacity change from 0 to 40427 [ 256.748817][ T6401] F2FS-fs (loop4): invalid crc value [ 256.820222][ T6401] F2FS-fs (loop4): Found nat_bits in checkpoint [ 256.862225][ T6401] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 258.253540][ T6414] loop3: detected capacity change from 0 to 2048 [ 258.477904][ T6414] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.022583][ T6415] loop4: detected capacity change from 0 to 32768 [ 259.154601][ T6415] JBD2: Ignoring recovery information on journal [ 259.496143][ T6415] (syz.4.509,6415,0):ocfs2_clear_journal_error:1063 ERROR: File system error -33024 recorded in journal 0. [ 259.510907][ T6431] netlink: 24 bytes leftover after parsing attributes in process `syz.5.513'. [ 259.517830][ T6415] (syz.4.509,6415,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop4 needs checking. [ 260.043746][ T6415] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 261.571970][ T4167] ocfs2: Unmounting device (7,4) on (node local) [ 262.317730][ T4503] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 262.334505][ T6443] netlink: 32 bytes leftover after parsing attributes in process `syz.4.515'. [ 262.379134][ T6443] netlink: 32 bytes leftover after parsing attributes in process `syz.4.515'. [ 262.567812][ T4503] usb 1-1: Using ep0 maxpacket: 32 [ 262.718009][ T4503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.737976][ T4503] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.777778][ T4503] usb 1-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 262.800656][ T4503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.826932][ T4503] usb 1-1: config 0 descriptor?? [ 262.876440][ T6449] loop4: detected capacity change from 0 to 2048 [ 263.024338][ T6449] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 265.983984][ T4503] usbhid 1-1:0.0: can't add hid device: -71 [ 266.019596][ T4503] usbhid: probe of 1-1:0.0 failed with error -71 [ 266.063244][ T4503] usb 1-1: USB disconnect, device number 5 [ 266.241188][ T6485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.528'. [ 266.297750][ T6488] loop3: detected capacity change from 0 to 512 [ 268.439251][ T6488] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 268.461998][ T6488] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.152320][ T6504] loop2: detected capacity change from 0 to 2048 [ 269.471110][ T6504] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.395795][ T6528] loop5: detected capacity change from 0 to 8 [ 272.982847][ T6533] loop0: detected capacity change from 0 to 512 [ 273.544000][ T6533] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 273.556666][ T6533] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.867647][ T4172] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 275.977848][ T4172] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 276.002812][ T6558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.548'. [ 276.012115][ T4172] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 276.089360][ T4172] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 276.955130][ T4172] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 276.968318][ T4172] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 277.027749][ T4172] usb 6-1: string descriptor 0 read error: -71 [ 277.034118][ T4172] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 277.047614][ T4172] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 277.087829][ T4172] usb 6-1: can't set config #1, error -71 [ 277.099502][ T4172] usb 6-1: USB disconnect, device number 4 [ 277.775287][ T6577] loop2: detected capacity change from 0 to 2048 [ 277.892970][ T6558] loop3: detected capacity change from 0 to 32768 [ 277.923289][ T6577] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 277.963680][ T6583] loop0: detected capacity change from 0 to 512 [ 278.232286][ T6583] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 278.244056][ T6583] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.279320][ T6558] XFS (loop3): Mounting V5 Filesystem [ 278.482295][ T6558] XFS (loop3): Ending clean mount [ 278.703150][ T4169] XFS (loop3): Unmounting Filesystem [ 281.479811][ T6625] overlayfs: failed to resolve './file1': -2 [ 283.348434][ T6618] loop5: detected capacity change from 0 to 32768 [ 283.370546][ T6638] loop0: detected capacity change from 0 to 512 [ 283.405655][ T6639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.569'. [ 283.467134][ T6618] (syz.5.566,6618,1):ocfs2_initialize_super:2310 ERROR: status = -12 [ 283.518121][ T6638] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 283.529891][ T6638] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.543049][ T6618] (syz.5.566,6618,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 284.126798][ T6639] loop2: detected capacity change from 0 to 32768 [ 285.004973][ T6639] XFS (loop2): Mounting V5 Filesystem [ 285.188715][ T6639] XFS (loop2): Ending clean mount [ 285.385628][ T6645] loop4: detected capacity change from 0 to 32768 [ 285.425418][ T6673] loop3: detected capacity change from 0 to 2048 [ 285.510421][ T6675] overlayfs: failed to resolve './file1': -2 [ 285.724895][ T6645] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 285.753597][ T4173] XFS (loop2): Unmounting Filesystem [ 285.799056][ T6673] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.840538][ T6645] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 288.734392][ T6693] loop2: detected capacity change from 0 to 40427 [ 288.892674][ T6693] F2FS-fs (loop2): invalid crc value [ 288.978478][ T6693] F2FS-fs (loop2): Found nat_bits in checkpoint [ 289.038376][ T6693] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 289.631862][ T6706] loop5: detected capacity change from 0 to 512 [ 289.654014][ T4167] ocfs2: Unmounting device (7,4) on (node local) [ 289.774416][ T6706] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 289.786261][ T6706] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.066570][ T6720] netlink: 'syz.5.589': attribute type 9 has an invalid length. [ 291.205500][ T6720] netlink: 'syz.5.589': attribute type 6 has an invalid length. [ 291.233665][ T6720] netlink: 'syz.5.589': attribute type 7 has an invalid length. [ 291.273487][ T6720] netlink: 'syz.5.589': attribute type 8 has an invalid length. [ 291.672661][ T6729] overlayfs: failed to resolve './file1': -2 [ 293.050055][ T6736] netlink: 24 bytes leftover after parsing attributes in process `syz.5.591'. [ 293.834874][ T6749] loop5: detected capacity change from 0 to 512 [ 293.953060][ T6749] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 293.965381][ T6749] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.749223][ T4346] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 295.318193][ T4346] usb 1-1: unable to get BOS descriptor or descriptor too short [ 295.372651][ T4346] usb 1-1: not running at top speed; connect to a high speed hub [ 295.407084][ T6738] loop4: detected capacity change from 0 to 32768 [ 295.423905][ T6768] loop3: detected capacity change from 0 to 2048 [ 295.493849][ T4346] usb 1-1: config 17 has an invalid interface number: 8 but max is 1 [ 295.525047][ T6738] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 295.553790][ T4346] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 295.599929][ T6768] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 295.630810][ T6738] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 295.648080][ T4346] usb 1-1: config 17 has no interface number 0 [ 295.850423][ T4346] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 295.868957][ T4346] usb 1-1: config 17 interface 8 has no altsetting 0 [ 296.057955][ T4346] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 296.072827][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.093621][ T4346] usb 1-1: Product: syz [ 296.117720][ T4346] usb 1-1: Manufacturer: syz [ 296.122369][ T4346] usb 1-1: SerialNumber: syz [ 298.339877][ T4346] usb 1-1: selecting invalid altsetting 0 [ 298.412873][ T4346] usb 1-1: USB disconnect, device number 6 [ 299.006419][ T6180] udevd[6180]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.040707][ T6794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.608'. [ 299.109443][ T4167] ocfs2: Unmounting device (7,4) on (node local) [ 300.086614][ T6789] loop5: detected capacity change from 0 to 32768 [ 300.114070][ T6802] loop4: detected capacity change from 0 to 512 [ 300.262264][ T6789] JBD2: Ignoring recovery information on journal [ 300.306373][ T6789] (syz.5.607,6789,1):ocfs2_clear_journal_error:1063 ERROR: File system error -33024 recorded in journal 0. [ 300.318159][ T6789] (syz.5.607,6789,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop5 needs checking. [ 300.341399][ T6789] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 300.354428][ T6802] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 300.366200][ T6802] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.382791][ T6812] loop0: detected capacity change from 0 to 2048 [ 300.454948][ T4363] ocfs2: Unmounting device (7,5) on (node local) [ 300.464996][ T6812] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 300.488072][ T6812] UDF-fs: Scanning with blocksize 512 failed [ 300.511086][ T6812] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.629076][ T6842] netlink: 24 bytes leftover after parsing attributes in process `syz.5.620'. [ 303.112765][ T6850] loop4: detected capacity change from 0 to 16 [ 303.219132][ T6850] erofs: (device loop4): mounted with root inode @ nid 36. [ 303.742084][ T6851] loop3: detected capacity change from 0 to 512 [ 303.940613][ T6851] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 303.953137][ T6851] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.400041][ T6842] loop5: detected capacity change from 0 to 32768 [ 304.560541][ T6842] XFS (loop5): Mounting V5 Filesystem [ 305.157766][ T6842] XFS (loop5): Ending clean mount [ 305.510565][ T4363] XFS (loop5): Unmounting Filesystem [ 305.645975][ T6897] loop3: detected capacity change from 0 to 512 [ 305.738961][ T6898] loop0: detected capacity change from 0 to 16 [ 305.930884][ T6898] erofs: (device loop0): mounted with root inode @ nid 36. [ 306.123862][ T6897] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 306.317988][ T6897] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.169503][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'. [ 307.424048][ T6931] netlink: 24 bytes leftover after parsing attributes in process `syz.5.648'. [ 307.515815][ T6934] loop0: detected capacity change from 0 to 16 [ 307.723363][ T6934] erofs: (device loop0): mounted with root inode @ nid 36. [ 308.495083][ T6938] loop0: detected capacity change from 0 to 22 [ 308.501866][ T6938] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 308.516503][ T6938] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 309.344676][ T6918] loop3: detected capacity change from 0 to 32768 [ 309.594652][ T6933] loop5: detected capacity change from 0 to 32768 [ 309.623994][ T6918] XFS (loop3): Mounting V5 Filesystem [ 309.667182][ T6948] loop4: detected capacity change from 0 to 2048 [ 309.776413][ T6948] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 309.787855][ T6948] UDF-fs: Scanning with blocksize 512 failed [ 309.831582][ T6948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.853056][ T6933] XFS (loop5): Mounting V5 Filesystem [ 309.853320][ T6918] XFS (loop3): Ending clean mount [ 309.872120][ T6918] XFS (loop3): Quotacheck needed: Please wait. [ 310.002439][ T6918] XFS (loop3): Quotacheck: Done. [ 310.058468][ T4169] XFS (loop3): Unmounting Filesystem [ 310.067882][ T6933] XFS (loop5): Ending clean mount [ 310.313558][ T4363] XFS (loop5): Unmounting Filesystem [ 311.202662][ T6970] loop3: detected capacity change from 0 to 512 [ 311.488511][ T6970] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 311.598530][ T6970] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.815036][ T6968] loop0: detected capacity change from 0 to 32768 [ 311.930427][ T6968] JBD2: Ignoring recovery information on journal [ 312.095466][ T6968] (syz.0.655,6968,1):ocfs2_clear_journal_error:1063 ERROR: File system error -33024 recorded in journal 0. [ 312.137686][ T6968] (syz.0.655,6968,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop0 needs checking. [ 312.184191][ T6968] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 312.351248][ T4168] ocfs2: Unmounting device (7,0) on (node local) [ 312.984312][ T6996] loop4: detected capacity change from 0 to 16 [ 314.832673][ T6996] erofs: (device loop4): mounted with root inode @ nid 36. [ 315.343686][ T7008] loop4: detected capacity change from 0 to 512 [ 315.540535][ T7010] loop2: detected capacity change from 0 to 22 [ 315.568293][ T7010] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 315.602601][ T7010] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 315.650854][ T7008] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 315.674097][ T7008] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.743715][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'. [ 315.870416][ T7001] loop3: detected capacity change from 0 to 32768 [ 316.053215][ T7001] XFS (loop3): Mounting V5 Filesystem [ 316.404002][ T7030] loop5: detected capacity change from 0 to 8 [ 317.052649][ T7001] XFS (loop3): Ending clean mount [ 317.071380][ T7001] XFS (loop3): Quotacheck needed: Please wait. [ 317.224863][ T7001] XFS (loop3): Quotacheck: Done. [ 317.240790][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.247199][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.214320][ T7035] loop4: detected capacity change from 0 to 32768 [ 318.300264][ T7035] JBD2: Ignoring recovery information on journal [ 318.332575][ T7035] (syz.4.670,7035,1):ocfs2_clear_journal_error:1063 ERROR: File system error -33024 recorded in journal 0. [ 318.344090][ T7035] (syz.4.670,7035,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop4 needs checking. [ 318.356274][ T7035] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 318.460337][ T4167] ocfs2: Unmounting device (7,4) on (node local) [ 318.624273][ T4169] XFS (loop3): Unmounting Filesystem [ 319.615669][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 319.625337][ T7054] loop3: detected capacity change from 0 to 2048 [ 319.744728][ T7057] loop2: detected capacity change from 0 to 16 [ 319.788950][ T7057] erofs: (device loop2): mounted with root inode @ nid 36. [ 320.043221][ T7054] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 320.223738][ T7054] UDF-fs: Scanning with blocksize 512 failed [ 320.423913][ T7054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.581805][ T7063] ALSA: mixer_oss: invalid OSS volume '' [ 320.619205][ T7066] loop5: detected capacity change from 0 to 512 [ 320.767717][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 321.007974][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.044461][ T7066] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 321.065601][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 321.086196][ T7066] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.105812][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE1, skipping [ 321.175371][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 321.205685][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 321.235021][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 321.427981][ T7] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 321.447310][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.457464][ T7] usb 5-1: Product: syz [ 321.530436][ T7] usb 5-1: Manufacturer: syz [ 321.538019][ T7] usb 5-1: SerialNumber: syz [ 321.556889][ T7] usb 5-1: config 0 descriptor?? [ 321.601014][ T7048] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 321.876103][ T7090] delete_channel: no stack [ 321.881829][ T7] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 321.901002][ T7] usb 5-1: USB disconnect, device number 6 [ 322.231602][ T7098] loop0: detected capacity change from 0 to 16 [ 322.366436][ T7098] erofs: (device loop0): mounted with root inode @ nid 36. [ 322.975126][ T7077] loop3: detected capacity change from 0 to 32768 [ 323.192804][ T7111] loop0: detected capacity change from 0 to 2048 [ 323.218537][ T7077] XFS (loop3): Mounting V5 Filesystem [ 323.232482][ T7112] loop4: detected capacity change from 0 to 512 [ 323.256415][ T7111] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 323.277599][ T7111] UDF-fs: Scanning with blocksize 512 failed [ 323.363594][ T7112] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 323.368162][ T7111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.377874][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.5.691'. [ 323.387740][ T7112] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.524990][ T7077] XFS (loop3): Ending clean mount [ 323.546813][ T7077] XFS (loop3): Quotacheck needed: Please wait. [ 323.670512][ T7077] XFS (loop3): Quotacheck: Done. [ 325.561661][ T4169] XFS (loop3): Unmounting Filesystem [ 325.807323][ T7140] loop5: detected capacity change from 0 to 32768 [ 325.896554][ T7140] JBD2: Ignoring recovery information on journal [ 325.962116][ T7140] (syz.5.702,7140,1):ocfs2_clear_journal_error:1063 ERROR: File system error -33024 recorded in journal 0. [ 325.975003][ T7140] (syz.5.702,7140,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop5 needs checking. [ 325.987734][ T7140] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 326.001915][ T7150] loop0: detected capacity change from 0 to 512 [ 326.105297][ T7150] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 326.117283][ T7150] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.155234][ T4363] ocfs2: Unmounting device (7,5) on (node local) [ 326.813672][ T7163] loop5: detected capacity change from 0 to 22 [ 326.968419][ T7163] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 326.985775][ T7163] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 327.110617][ T7165] loop3: detected capacity change from 0 to 16 [ 327.240580][ T7165] erofs: (device loop3): mounted with root inode @ nid 36. [ 327.889945][ T7167] loop0: detected capacity change from 0 to 2048 [ 328.009511][ T7167] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 328.058066][ T7167] UDF-fs: Scanning with blocksize 512 failed [ 328.078949][ T7167] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.301161][ T4214] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 328.727718][ T4214] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 328.917888][ T4214] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 328.937367][ T4214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.978010][ T4214] usb 4-1: Product: syz [ 328.982233][ T4214] usb 4-1: Manufacturer: syz [ 329.027714][ T4214] usb 4-1: SerialNumber: syz [ 329.317825][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 329.329812][ T4214] gspca_main: pac207-2.14.0 probing 093a:2476 [ 329.356678][ T7187] loop2: detected capacity change from 0 to 2048 [ 329.363488][ T4214] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 329.388916][ T4214] usb 4-1: USB disconnect, device number 8 [ 329.430085][ T7187] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 329.449905][ T7187] UDF-fs: Scanning with blocksize 512 failed [ 329.493010][ T7187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.176006][ T7195] loop3: detected capacity change from 0 to 32768 [ 330.281057][ T7195] JBD2: Ignoring recovery information on journal [ 330.337700][ T7195] (syz.3.718,7195,1):ocfs2_clear_journal_error:1063 ERROR: File system error -33024 recorded in journal 0. [ 330.341897][ T7184] loop0: detected capacity change from 0 to 32768 [ 330.349167][ T7195] (syz.3.718,7195,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop3 needs checking. [ 330.350271][ T7195] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 330.549514][ T4169] ocfs2: Unmounting device (7,3) on (node local) [ 330.722195][ T7184] XFS (loop0): Mounting V5 Filesystem [ 330.920950][ T7184] XFS (loop0): Ending clean mount [ 330.951502][ T7184] XFS (loop0): Quotacheck needed: Please wait. [ 331.054258][ T7184] XFS (loop0): Quotacheck: Done. [ 331.914771][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.720'. [ 332.217714][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 332.477683][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 332.548545][ T7226] loop4: detected capacity change from 0 to 2048 [ 332.600395][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.639266][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.692805][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 332.705670][ T7226] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 332.719896][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.728038][ T7226] UDF-fs: Scanning with blocksize 512 failed [ 332.770911][ T7] usb 3-1: config 0 descriptor?? [ 332.773266][ T7226] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.104581][ T7218] loop3: detected capacity change from 0 to 32768 [ 333.659327][ T7] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 333.672697][ T7] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 333.715356][ T7] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 333.786302][ T7218] XFS (loop3): Mounting V5 Filesystem [ 333.803885][ T7] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 333.859298][ T7] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 333.935652][ T7] appleir 0003:05AC:8241.0002: No inputs registered, leaving [ 333.994467][ T7218] XFS (loop3): Ending clean mount [ 334.014409][ T7] appleir 0003:05AC:8241.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 334.166981][ T7] usb 3-1: USB disconnect, device number 10 [ 334.265718][ T4168] XFS (loop0): Unmounting Filesystem [ 334.421428][ T4169] XFS (loop3): Unmounting Filesystem [ 336.306625][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'. [ 336.683873][ T7283] loop3: detected capacity change from 0 to 2048 [ 336.739174][ T7287] loop0: detected capacity change from 0 to 22 [ 336.768147][ T7287] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 336.779691][ T7287] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 336.862599][ T7283] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 336.890919][ T7283] UDF-fs: Scanning with blocksize 512 failed [ 336.908678][ T7286] loop5: detected capacity change from 0 to 2048 [ 336.936642][ T7283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.140779][ T7286] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 337.585864][ T7270] loop2: detected capacity change from 0 to 32768 [ 337.765518][ T7270] XFS (loop2): Mounting V5 Filesystem [ 337.949547][ T7270] XFS (loop2): Ending clean mount [ 337.985046][ T7270] XFS (loop2): Quotacheck needed: Please wait. [ 338.099241][ T7270] XFS (loop2): Quotacheck: Done. [ 338.558944][ T7306] netlink: 52 bytes leftover after parsing attributes in process `syz.4.743'. [ 338.577695][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 340.492447][ T4173] XFS (loop2): Unmounting Filesystem [ 340.511702][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 341.109838][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.753'. [ 341.992661][ T7352] loop4: detected capacity change from 0 to 2048 [ 342.247877][ T7352] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.543876][ T7347] loop2: detected capacity change from 0 to 32768 [ 343.637281][ T7347] JBD2: Ignoring recovery information on journal [ 343.795674][ T7347] (syz.2.754,7347,0):ocfs2_clear_journal_error:1063 ERROR: File system error -33024 recorded in journal 0. [ 343.817481][ T7347] (syz.2.754,7347,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop2 needs checking. [ 343.842358][ T7347] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 343.962380][ T4173] ocfs2: Unmounting device (7,2) on (node local) [ 344.626272][ T7386] device veth0_to_team entered promiscuous mode [ 344.903965][ T7395] kvm: pic: non byte write [ 345.033741][ T7390] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 345.058107][ T7390] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 346.453640][ T7411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.773'. [ 346.593184][ T2284] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 347.137924][ T2284] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 347.152340][ T2284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.161900][ T2284] usb 4-1: Product: syz [ 347.167320][ T2284] usb 4-1: Manufacturer: syz [ 347.177464][ T2284] usb 4-1: SerialNumber: syz [ 347.248733][ T2284] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 347.977682][ T2284] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 348.045065][ T7414] loop4: detected capacity change from 0 to 32768 [ 348.244542][ T7414] XFS (loop4): Mounting V5 Filesystem [ 348.429330][ T7414] XFS (loop4): Ending clean mount [ 348.592759][ T7406] loop3: detected capacity change from 0 to 512 [ 348.645571][ T4167] XFS (loop4): Unmounting Filesystem [ 348.660507][ T26] kauditd_printk_skb: 881 callbacks suppressed [ 348.660522][ T26] audit: type=1326 audit(1738506377.878:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f0c70eda9 code=0x0 [ 348.709166][ T7406] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 348.809098][ T7406] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.774: bad orphan inode 131083 [ 348.840463][ T7406] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 349.172764][ T7] usb 4-1: USB disconnect, device number 9 [ 349.237627][ T2284] usb 4-1: Service connection timeout for: 256 [ 349.243845][ T2284] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 349.265962][ T2284] ath9k_htc: Failed to initialize the device [ 349.286500][ T7] usb 4-1: ath9k_htc: USB layer deinitialized [ 350.828500][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'. [ 351.165399][ T7447] loop5: detected capacity change from 0 to 2048 [ 351.292500][ T7447] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 352.858143][ T7471] loop0: detected capacity change from 0 to 32768 [ 353.018789][ T7471] JBD2: Ignoring recovery information on journal [ 353.658807][ T7471] (syz.0.789,7471,0):ocfs2_clear_journal_error:1063 ERROR: File system error -33024 recorded in journal 0. [ 353.687774][ T7471] (syz.0.789,7471,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop0 needs checking. [ 353.770665][ T7471] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 353.817942][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 353.903678][ T4168] ocfs2: Unmounting device (7,0) on (node local) [ 354.397835][ T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 354.427359][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.484214][ T7] usb 4-1: Product: syz [ 354.497899][ T7] usb 4-1: Manufacturer: syz [ 354.508517][ T7] usb 4-1: SerialNumber: syz [ 354.588731][ T7] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 355.275620][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.800'. [ 355.867689][ T7] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 356.019234][ T7523] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 356.027178][ T7523] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 356.323638][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.807'. [ 356.363112][ T7533] loop4: detected capacity change from 0 to 2048 [ 356.482355][ T7494] loop3: detected capacity change from 0 to 512 [ 356.608538][ T7494] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 356.668584][ T7533] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 356.768300][ T7543] overlayfs: failed to resolve './file0': -2 [ 356.959756][ T7494] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.795: bad orphan inode 131083 [ 357.225918][ T7494] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 357.677620][ T7] usb 4-1: Service connection timeout for: 256 [ 357.677645][ T7] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 358.364247][ T4503] usb 4-1: USB disconnect, device number 10 [ 358.393295][ T7] ath9k_htc: Failed to initialize the device [ 358.430753][ T4503] usb 4-1: ath9k_htc: USB layer deinitialized [ 358.569279][ T7531] loop0: detected capacity change from 0 to 32768 [ 358.734248][ T7531] XFS (loop0): Mounting V5 Filesystem [ 358.882477][ T7531] XFS (loop0): Ending clean mount [ 359.076752][ T4168] XFS (loop0): Unmounting Filesystem [ 359.087597][ T4503] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 359.347607][ T4503] usb 4-1: Using ep0 maxpacket: 32 [ 359.477840][ T4503] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 359.525611][ T4503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 359.537183][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'. [ 359.867605][ T4503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 360.077937][ T4503] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 360.107695][ T4503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.143868][ T4503] usb 4-1: Product: syz [ 360.159634][ T4503] usb 4-1: Manufacturer: syz [ 360.195069][ T4503] usb 4-1: SerialNumber: syz [ 360.342168][ T4503] usb 4-1: config 0 descriptor?? [ 360.397371][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.822'. [ 360.456040][ T7586] IPv6: sit1: Disabled Multicast RS [ 360.811388][ T7593] overlayfs: failed to resolve './file0': -2 [ 360.860867][ T7593] loop5: detected capacity change from 0 to 8 [ 362.612709][ T4213] usb 4-1: USB disconnect, device number 11 [ 362.842559][ T7602] loop3: detected capacity change from 0 to 2048 [ 362.917873][ T4503] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 363.038226][ T7602] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 363.080011][ T7613] [ 363.082384][ T7613] ============================= [ 363.101231][ T7613] WARNING: suspicious RCU usage [ 363.106139][ T7613] 5.15.178-syzkaller #0 Not tainted [ 363.255213][ T7613] ----------------------------- [ 363.276107][ T7613] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 363.307989][ T7613] [ 363.307989][ T7613] other info that might help us debug this: [ 363.307989][ T7613] [ 363.359354][ T7613] [ 363.359354][ T7613] rcu_scheduler_active = 2, debug_locks = 1 [ 363.383375][ T7613] 1 lock held by syz.2.830/7613: [ 363.403946][ T7613] #0: ffffffff8dc42788 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15e/0x1540 [ 363.464940][ T7613] [ 363.464940][ T7613] stack backtrace: [ 363.493748][ T7613] CPU: 1 PID: 7613 Comm: syz.2.830 Not tainted 5.15.178-syzkaller #0 [ 363.501874][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 363.511976][ T7613] Call Trace: [ 363.515276][ T7613] [ 363.518222][ T7613] dump_stack_lvl+0x1e3/0x2d0 [ 363.522932][ T7613] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 363.528594][ T7613] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 363.534164][ T7613] rhltable_lookup+0x7e5/0x7f0 [ 363.538967][ T7613] ? release_firmware_map_entry+0x190/0x190 [ 363.544940][ T7613] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 363.550946][ T7613] ? local_bh_enable+0x20/0x20 [ 363.555733][ T7613] ? mr_mfc_find_parent+0x190/0x190 [ 363.560952][ T7613] ? local_bh_enable+0x20/0x20 [ 363.565731][ T7613] ? preempt_schedule+0xd9/0xe0 [ 363.570695][ T7613] ? print_irqtrace_events+0x210/0x210 [ 363.576177][ T7613] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 363.582184][ T7613] mr_mfc_find_any_parent+0xb4/0x1e0 [ 363.587489][ T7613] ? local_bh_enable+0x20/0x20 [ 363.592274][ T7613] ip_mr_forward+0x213/0x1010 [ 363.596991][ T7613] ? ipmr_mfc_add+0x1e9b/0x2df0 [ 363.601866][ T7613] ipmr_mfc_add+0x243a/0x2df0 [ 363.606590][ T7613] ? ipmr_mfc_delete+0x660/0x660 [ 363.611542][ T7613] ? plist_check_list+0x20d/0x220 [ 363.616638][ T7613] ip_mroute_setsockopt+0xfa9/0x1540 [ 363.621961][ T7613] ? ipmr_rule_default+0x70/0x70 [ 363.626946][ T7613] ip_setsockopt+0x5b3/0x3fb0 [ 363.631658][ T7613] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 363.637063][ T7613] ? aa_af_perm+0x350/0x350 [ 363.641723][ T7613] ? __fget_files+0x413/0x480 [ 363.646457][ T7613] ? aa_sock_opt_perm+0x79/0x110 [ 363.651431][ T7613] ? sock_common_setsockopt+0x33/0xc0 [ 363.656845][ T7613] ? raw_setsockopt+0x100/0x180 [ 363.661725][ T7613] ? sock_common_recvmsg+0x240/0x240 [ 363.667029][ T7613] __sys_setsockopt+0x57e/0x990 [ 363.672021][ T7613] ? __ia32_sys_recv+0xb0/0xb0 [ 363.676904][ T7613] ? syscall_enter_from_user_mode+0x2e/0x240 [ 363.683083][ T7613] __x64_sys_setsockopt+0xb1/0xc0 [ 363.688133][ T7613] do_syscall_64+0x3b/0xb0 [ 363.692570][ T7613] ? clear_bhb_loop+0x15/0x70 [ 363.697259][ T7613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 363.703174][ T7613] RIP: 0033:0x7f9f0c70eda9 [ 363.707607][ T7613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.727244][ T7613] RSP: 002b:00007f9f0a578038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 363.735684][ T7613] RAX: ffffffffffffffda RBX: 00007f9f0c927fa0 RCX: 00007f9f0c70eda9 [ 363.743691][ T7613] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 363.751863][ T7613] RBP: 00007f9f0c7902a0 R08: 000000000000003c R09: 0000000000000000 [ 363.759851][ T7613] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 363.767833][ T7613] R13: 0000000000000000 R14: 00007f9f0c927fa0 R15: 00007ffea36b8d08 [ 363.775836][ T7613] [ 363.837682][ T4503] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 363.854964][ T4503] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.876151][ T4503] usb 1-1: Product: syz [ 363.898915][ T4503] usb 1-1: Manufacturer: syz [ 363.915180][ T4503] usb 1-1: SerialNumber: syz [ 363.990005][ T4503] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 364.238471][ T7613] [ 364.240882][ T7613] ============================= [ 364.251509][ T7613] WARNING: suspicious RCU usage [ 364.271301][ T7613] 5.15.178-syzkaller #0 Not tainted [ 364.291688][ T7613] ----------------------------- [ 364.311291][ T7613] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 364.529065][ T7613] [ 364.529065][ T7613] other info that might help us debug this: [ 364.529065][ T7613] [ 364.539960][ T7613] [ 364.539960][ T7613] rcu_scheduler_active = 2, debug_locks = 1 [ 364.554274][ T7613] 1 lock held by syz.2.830/7613: [ 364.567401][ T7613] #0: ffffffff8dc42788 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15e/0x1540 [ 364.578068][ T7613] [ 364.578068][ T7613] stack backtrace: [ 364.583981][ T7613] CPU: 1 PID: 7613 Comm: syz.2.830 Not tainted 5.15.178-syzkaller #0 [ 364.592069][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 364.602146][ T7613] Call Trace: [ 364.605443][ T7613] [ 364.608384][ T7613] dump_stack_lvl+0x1e3/0x2d0 [ 364.613082][ T7613] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 364.618743][ T7613] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 364.624316][ T7613] rhltable_lookup+0x582/0x7f0 [ 364.629115][ T7613] ? local_bh_enable+0x20/0x20 [ 364.633904][ T7613] ? mr_mfc_find_parent+0x190/0x190 [ 364.639128][ T7613] ? local_bh_enable+0x20/0x20 [ 364.643910][ T7613] ? preempt_schedule+0xd9/0xe0 [ 364.648793][ T7613] ? print_irqtrace_events+0x210/0x210 [ 364.654277][ T7613] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 364.660284][ T7613] mr_mfc_find_any_parent+0xb4/0x1e0 [ 364.665597][ T7613] ? local_bh_enable+0x20/0x20 [ 364.670386][ T7613] ip_mr_forward+0x213/0x1010 [ 364.675095][ T7613] ? ipmr_mfc_add+0x1e9b/0x2df0 [ 364.679972][ T7613] ipmr_mfc_add+0x243a/0x2df0 [ 364.684688][ T7613] ? ipmr_mfc_delete+0x660/0x660 [ 364.689903][ T7613] ? plist_check_list+0x20d/0x220 [ 364.694978][ T7613] ip_mroute_setsockopt+0xfa9/0x1540 [ 364.700301][ T7613] ? ipmr_rule_default+0x70/0x70 [ 364.705280][ T7613] ip_setsockopt+0x5b3/0x3fb0 [ 364.709986][ T7613] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 364.715387][ T7613] ? aa_af_perm+0x350/0x350 [ 364.719916][ T7613] ? __fget_files+0x413/0x480 [ 364.724620][ T7613] ? aa_sock_opt_perm+0x79/0x110 [ 364.729582][ T7613] ? sock_common_setsockopt+0x33/0xc0 [ 364.734974][ T7613] ? raw_setsockopt+0x100/0x180 [ 364.739847][ T7613] ? sock_common_recvmsg+0x240/0x240 [ 364.745153][ T7613] __sys_setsockopt+0x57e/0x990 [ 364.750033][ T7613] ? __ia32_sys_recv+0xb0/0xb0 [ 364.754826][ T7613] ? syscall_enter_from_user_mode+0x2e/0x240 [ 364.760830][ T7613] __x64_sys_setsockopt+0xb1/0xc0 [ 364.765860][ T7613] do_syscall_64+0x3b/0xb0 [ 364.770275][ T7613] ? clear_bhb_loop+0x15/0x70 [ 364.774979][ T7613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 364.780882][ T7613] RIP: 0033:0x7f9f0c70eda9 [ 364.785293][ T7613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.804908][ T7613] RSP: 002b:00007f9f0a578038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 364.813344][ T7613] RAX: ffffffffffffffda RBX: 00007f9f0c927fa0 RCX: 00007f9f0c70eda9 [ 364.821315][ T7613] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 364.829308][ T7613] RBP: 00007f9f0c7902a0 R08: 000000000000003c R09: 0000000000000000 [ 364.837282][ T7613] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 364.838070][ T4503] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 364.845255][ T7613] R13: 0000000000000000 R14: 00007f9f0c927fa0 R15: 00007ffea36b8d08 [ 364.862169][ T7613] [ 364.886807][ T7613] [ 364.890688][ T7613] ============================= [ 364.895578][ T7613] WARNING: suspicious RCU usage [ 364.901088][ T7613] 5.15.178-syzkaller #0 Not tainted [ 364.906464][ T7613] ----------------------------- [ 364.911957][ T7613] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 364.921307][ T7613] [ 364.921307][ T7613] other info that might help us debug this: [ 364.921307][ T7613] [ 364.931741][ T7613] [ 364.931741][ T7613] rcu_scheduler_active = 2, debug_locks = 1 [ 364.966536][ T7613] 1 lock held by syz.2.830/7613: [ 364.977432][ T7613] #0: ffffffff8dc42788 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15e/0x1540 [ 364.997644][ T7613] [ 364.997644][ T7613] stack backtrace: [ 365.003631][ T7613] CPU: 1 PID: 7613 Comm: syz.2.830 Not tainted 5.15.178-syzkaller #0 [ 365.011720][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 365.021797][ T7613] Call Trace: [ 365.025085][ T7613] [ 365.028034][ T7613] dump_stack_lvl+0x1e3/0x2d0 [ 365.032741][ T7613] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 365.038413][ T7613] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 365.044009][ T7613] rhltable_lookup+0x676/0x7f0 [ 365.048795][ T7613] ? local_bh_enable+0x20/0x20 [ 365.053591][ T7613] ? mr_mfc_find_parent+0x190/0x190 [ 365.058808][ T7613] ? local_bh_enable+0x20/0x20 [ 365.063580][ T7613] ? preempt_schedule+0xd9/0xe0 [ 365.068431][ T7613] ? print_irqtrace_events+0x210/0x210 [ 365.073890][ T7613] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 365.079902][ T7613] mr_mfc_find_any_parent+0xb4/0x1e0 [ 365.085209][ T7613] ? local_bh_enable+0x20/0x20 [ 365.089982][ T7613] ip_mr_forward+0x213/0x1010 [ 365.094662][ T7613] ? ipmr_mfc_add+0x1e9b/0x2df0 [ 365.099521][ T7613] ipmr_mfc_add+0x243a/0x2df0 [ 365.104233][ T7613] ? ipmr_mfc_delete+0x660/0x660 [ 365.109182][ T7613] ? plist_check_list+0x20d/0x220 [ 365.114220][ T7613] ip_mroute_setsockopt+0xfa9/0x1540 [ 365.119607][ T7613] ? ipmr_rule_default+0x70/0x70 [ 365.124581][ T7613] ip_setsockopt+0x5b3/0x3fb0 [ 365.129262][ T7613] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 365.134639][ T7613] ? aa_af_perm+0x350/0x350 [ 365.139165][ T7613] ? __fget_files+0x413/0x480 [ 365.143947][ T7613] ? aa_sock_opt_perm+0x79/0x110 [ 365.148886][ T7613] ? sock_common_setsockopt+0x33/0xc0 [ 365.154275][ T7613] ? raw_setsockopt+0x100/0x180 [ 365.159156][ T7613] ? sock_common_recvmsg+0x240/0x240 [ 365.164459][ T7613] __sys_setsockopt+0x57e/0x990 [ 365.169309][ T7613] ? __ia32_sys_recv+0xb0/0xb0 [ 365.174102][ T7613] ? syscall_enter_from_user_mode+0x2e/0x240 [ 365.180105][ T7613] __x64_sys_setsockopt+0xb1/0xc0 [ 365.185129][ T7613] do_syscall_64+0x3b/0xb0 [ 365.189541][ T7613] ? clear_bhb_loop+0x15/0x70 [ 365.194229][ T7613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 365.200130][ T7613] RIP: 0033:0x7f9f0c70eda9 [ 365.204568][ T7613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.224181][ T7613] RSP: 002b:00007f9f0a578038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 365.232592][ T7613] RAX: ffffffffffffffda RBX: 00007f9f0c927fa0 RCX: 00007f9f0c70eda9 [ 365.240561][ T7613] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 365.248536][ T7613] RBP: 00007f9f0c7902a0 R08: 000000000000003c R09: 0000000000000000 [ 365.256527][ T7613] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 365.264495][ T7613] R13: 0000000000000000 R14: 00007f9f0c927fa0 R15: 00007ffea36b8d08 [ 365.272475][ T7613] [ 365.448000][ T7598] loop0: detected capacity change from 0 to 512 [ 365.511792][ T7598] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 365.531391][ T7598] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.825: bad orphan inode 131083 [ 365.546379][ T7598] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 365.845836][ T7] usb 1-1: USB disconnect, device number 7 [ 366.117587][ T4503] usb 1-1: Service connection timeout for: 256 [ 366.123804][ T4503] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 366.147930][ T4503] ath9k_htc: Failed to initialize the device [ 366.154165][ T7] usb 1-1: ath9k_htc: USB layer deinitialized