last executing test programs: 23.681195059s ago: executing program 1 (id=577): openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x40c0}}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 22.88942723s ago: executing program 1 (id=585): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x5, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 22.701378083s ago: executing program 1 (id=587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000d901"]) 22.320237749s ago: executing program 1 (id=593): r0 = syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000002440)=ANY=[], 0xff, 0xc19, &(0x7f0000002140)="$eJzs3VFsXeddAPD/d2zHToq2S9ek3Yim2yJ1IWPBdtamlSfRUGMxlrWmjjegPPQmvimXOPaV7XRpBVt46gNImCEhJIaEhIYqHiYjtAd4GhISrxbaG0IKYypFCOk+rNoLWtA597vxteM0IY5jJ/n9pOR/7jn/75zvfN/pOeee754mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICIX/rl06Njaa9rAQDcT6/MvDY67voPAI+Us77/AwAAAAAAAAAAAADAfpeiiA8ixdeOdtIb1eeukTOthctXZienti92MFUlB6r88s/I2PjJzz/3/KkXevGjy99rn4xXZ86err+8eKm91Fxebs7VZxda5xfnmne8hp2W3+p41QD1Sxcvz124sFwfP3Fy0+IrtfeHHztSmzg19vrhXu7s5NTUTF/O4NBdb/0mt3rD40AUcSFSXHzvg9SIiCJ23ha3OXZ228FqJ45XOzE7OVXtyHyrsbBSLpzuNUQRUesr9FKvje5DX+xIPeJqWf2ywsfL3ZtpN5Ya5+ab9enG0kprpbW4MJ26tU1VehEvpIh2RHSGb17dUBTx9Ujx7rc66VxEDPTa4bPVi8G3r0+xC/t4BwYjojYUsV48AH22jw1HEd+JFN/8xmicz+1aNduzEV8u45GIy2W8FrFaxk9HpPIAeSLiw22OJx4sg1HEH0SKH0100lyv76vzypmv1L+4cGGxL7d3Xrnr60M+V+z59eF+2ufnppEoolGd8Tvp7m92AAAAAADYf4r440jx9PePpXb0jym2Ft6sn22cm+8+Fe49+6/nUtevX79eS904muN0ju0cV3Ncy3G9jLGxglqRy+c4nWM7x9Uc13Jcz7GTY20gl89xOsd2jqs5ruW4nmMnx9pgLp/j9GBVs6vt/Hk1x7Uc13PsDO5FPwEAAAAAAADArR2MIr4aKZ79hbeq94qjei/94xOnXjvxq/3vjD91m/WUuSciYq24s3dyD+TXAafTdEp79A4x3ff/fi+///f7t0sFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeakUU8UykeOu7nRQpIuoRb0Q3Xhve69oBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3wkgq4sNI8adfGqk+rxcRvxkRP+kuHozr99re7i8AAAAAAAAAPJRSEW9Himde66RaRFypvT/82JHaxKmx1w8PxECkMqU//9WZs6frLy9eai81l5ebc/XZhdb5xbnmnW5u5Exr4fKV2cmpXdmZ2zq4y/U/OPLyYvvtpdabv72y7fJDI6fPLa8sNc5vvzgORhFR759zvKrw7ORUVen5VmOhKjqd7rTGAAAAAAAAADwKhlIRP4kU7/71ezfGnQe7Y/6DW3O//YWIIk9P5vHnG8PQ1e8GPlb9bqA7/fGJU782/qn+6W2HrI9XA+r12cmpqZm+2YNDN6eO5O2O7myX6VP2/0qk+MO/qKen87zN/T9wI/fbv7vR31e3rugWff7/6P9NPd7r/5/um1duM6Ui/jZS/MyvPxVPV/U8FDf9ZiLnfSlS/Mba0ZwXB8q8Z/Lyx6u/Ry605pujZe6VSPGPlzfnPptzP7GRO3an7fqgKPv/mUjx37+1dqNtcv/nHtjotf7+/9TWo2Pn/b/tf/+P982r5e3+7L3ZdSJi+e13Ljbm55tLj+LEwP6oxt5P/NmebL13PtgnjbAPJ+Lq3m19j09M3Bfl9f+rkeIf/uRfb9zv5Ov/T0V1W7Vx//fjr29c/ye2rmiXrv+f6Js3ke9GhgYjRlYutYeejBhZfvudz7UuNd5svtlcOHnqxefHR18cGz05dKB3c7cxtXXLN32/eRSV/f87keI7P/ib+Eyet/n+b/v7/0NbV7RL/f9E37xDm+5Xdrzr5P7/30jxz5Pfi2N53kfd//e+/x/LN+E37s93qf8P982rvuN9LOLn+uYdOxzx0H0pAwAAgHsspSK+l8dTR28znvpPkeKd//r5nJeOlHkv5eW16u+RVxYXPnd6fn7xfGOlcW6+WZ9pN843y7I/jBSdvzoao1FEiqIaX+2NN3fHeDfGYv8lUrz4K0fzdrpjsb1nU09s5I6VuScixR+9sjm39xzj8EbueJn7b5Fi7PXtc49s5J4sc/8zUvz4z+u93ENl7hdy7pMbuSfOL87P7UK3AAAAAADAjgylIp6PFH9/cjD1nm/fye8/b3rovUu//3uyb97cfXpfZfuW8j/cBeDhUV7/j5XXtl/8yxtj+Zuv/xvvyfRf/7fq/3cDbjV9N9f/2r3ZTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBHTooiFiPF14520rXh8nPXyJnWwuUrs5NT2xc7mKqSA1V++WdkbPzk5597/tQLvfjR5e+1T8arM2dP119evNReai4vN+fqswut84tzzTtew07Lb3W8aoD6pYuX5y5ciBg/cXLT4iu194cfO1KbODX2+uFe7uzk1NRMX87g0F1v/Sa9fi22zD8QRfxPpLj43gfp34fz8h22xW2Ond12MIr4u4god2J2cqrakflWY2GlXDjd1xC1vkIv9droPvTFjtQjrpbVLyt8vNy9mXZjqXFuvlmfbiyttFZaiwvTqVvbVKUX8UKKaEdEZ/jm1Q1FEUOR4t1vddIPhiMGeu3w2VdmXhsdv0UlRjYmtx5Q98lgRNSGItaLB6DP9rHhKOK5SPHNb4zGfwx327VqtmcjvlzGIxGXy3gtYrWMn45I5QHyRMSH2xxPPFgGo4jHI8WPJjrph8O576vzypmv1L+4cGGxL7d3Xnngrw/30z4/N41EER/EPqkMAAAAAAD3UBFPRYqnv38sVeODx2cnp65n9bONc/Pdx/q9Z//1XKpcXEvdOJrjdI7tHFdzXMtxPcdOjrUil89xOsd2jqs5ruW4nmMnx9pALp/jdI7tHFdzXMtxPcdOjrXBXD7H6RzbOa7muJbjeo6dwb3sLwAAAAAAAIDtFVHEZyLFW9/tpOvD3QHeN6Ibr3m/76H3fwEAAP//F35MkQ==") r1 = syz_clone(0x1080000, 0x0, 0xfffffe81, 0x0, 0x0, 0x0) r2 = gettid() pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r3, r0, 0x68000000}) 21.820100757s ago: executing program 1 (id=599): getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 21.046662649s ago: executing program 1 (id=604): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r0, 0x1, 0x9, &(0x7f0000000180)="6621daa6", 0x4) 20.673010704s ago: executing program 32 (id=604): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r0, 0x1, 0x9, &(0x7f0000000180)="6621daa6", 0x4) 7.408531076s ago: executing program 2 (id=683): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) syz_usb_connect(0x3, 0x50, &(0x7f0000000540)=ANY=[@ANYBLOB="12010003305abd40b8222564ae080102030109023e0001ae0510020904b20800020a0006052406000005240000000d240f010200000008000180090524"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) 5.797620311s ago: executing program 2 (id=699): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) 4.852833935s ago: executing program 2 (id=708): syz_open_dev$hidraw(&(0x7f0000000080), 0x6, 0x40000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) close(0x3) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xc, 0xbe6a, 0x81}, {0x6, 0x24, 0x1a, 0x401, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xfa, 0x4, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x0, 0xd8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x4, 0x1}}}}}}}]}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 3.88706677s ago: executing program 4 (id=722): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875", 0xec}], 0x1}}], 0x1, 0xc0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e40)=@delchain={0xe8, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x28}}, @filter_kind_options=@f_flower={{0xb}, {0x7c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_ACT={0x44, 0x3, [@m_ife={0x40, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "7dea7fdc03dc266b4394d770e179d0165e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.613307964s ago: executing program 4 (id=727): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x5, 0xfffffffffffffffd}) mq_getsetattr(r1, 0x0, 0x0) 3.486607646s ago: executing program 4 (id=728): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x5505, &(0x7f00000079c0)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2.428774572s ago: executing program 2 (id=737): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./file1\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xa23, &(0x7f0000001b00)="$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") ftruncate(0xffffffffffffffff, 0xc17a) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 2.348082544s ago: executing program 4 (id=738): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc89, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.108317978s ago: executing program 2 (id=742): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) symlink(0x0, 0x0) epoll_create1(0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000cc0)={{0x12, 0x1, 0x110, 0xd9, 0x39, 0xca, 0x8, 0x421, 0x42f, 0xc187, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x6, 0x20, 0x4, [{{0x9, 0x4, 0x1, 0x1, 0x0, 0x2, 0x2, 0xff, 0x3}}]}}]}}, 0x0) 1.739827763s ago: executing program 4 (id=749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write(r0, &(0x7f00000007c0)="240000001a005f0214f9f407000904ff81000000894f", 0x16) 1.627172845s ago: executing program 3 (id=751): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.557979355s ago: executing program 3 (id=753): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) close(r0) 1.448676437s ago: executing program 3 (id=754): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 1.447958687s ago: executing program 4 (id=755): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x0, 0x7b, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0xb}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000500)=0x18) 1.318256989s ago: executing program 3 (id=756): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.self_freezing\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @empty, 0x7}, 0x1c) 1.2686349s ago: executing program 0 (id=757): r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.26831523s ago: executing program 3 (id=758): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) 618.07196ms ago: executing program 2 (id=759): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x120) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f00000003c0)='./file1\x00', 0x44000, 0x1e8) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0, 0x12) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/117, 0x75, 0x41) 335.508684ms ago: executing program 3 (id=760): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000007300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYBLOB="34dd0f00135ea23c22845cc5474e7cd7e7ab01d33c4486b62e3b4f9822364f30c24779205bbd653e2b0e7bbbcba1e3dc78833fbb91474ba644d13b9a3bfddc66bfc8ba12f680d556b1b4d4a1ec5b55eeedc8454a11312f3025c08220a36ab6d8100e6a0836f341eb18f984b2a7feaef926859b77e733f9bb7220a2460746c81448ccc7a901e32427b8cc656a1b8a1c52fac1524d3a90fc424c1300000000aa1ea205ddd2b967de4068647f1a5fade5146a344fd31daeeaeede8f61b1066ca3a10599230edf07182401e51b"], 0xfe, 0x6178, &(0x7f000000ca40)="$eJzs3c1vHGcdB/DfvvqltLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288TjzW7t1PHO2s/nIzkzv3lmvM/4u7Mv2Zl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vByudiLj287RgKeIz0YvoRizU9XJELCwv5fX7EfFc7DTHsxExmIuot9/55+mIVyPio6citrbXV+vFFw/Zj+/+8e+/++ETb/3tD4Pz//3Tnd5rk9a7e/dX//nzvaPtMwAAAJSmqqqqk97mn0nv77ttdwoAmIr8/F8lefmpr3/9z7f+Mkv9UavVarV6CnVTNd69ZhERG81t6tcMPo4HgBNmIz5uuwu0SP5F60fEE213AphpnbY7wLHY2l5f7aR8O83ng+Xd9nwuyL78NzoPru+YND3I6Dkm07p/bUYvnpnQn4Up9WGW5Py7o/lf220fpvWOO/9pmZT/cPfSp+Lk/Huj+Y84Pfl3x+Zfqpx//5Hy78kfAAAAAABmWP7//6WWP/+dO/quHMonff67PKU+AAAAAAAAAMDjdtTx/x4w/h8AAADMrPq9eu03T+0tm/RdbPXyq52IJ0fWBwqTLpZZbLsfAAAAAAAAAAAAAFCS/u45vFc7EYOIeHJxsaqq+qdptH5UR93+pCt9/6FkbT/IAwDAro+eGrmWvxMxHxFXo7vzXX+DxcXFqppfWKwWq4W5/Hp2ODdfLTTe1+ZpvWxueIgXxP1hVf+y+cZ2TQe9Xz6offT31bc1rHqH6NhjMkh/zQnNLYUNAMnus9GWZ6RTpqqenvTiA/Zx/J9CS7HU9v2K2df23RQAAAA4flVVVZ30dd5n0vh+3bY7BQBMRX7+H/1c4Eh1d0J7xOP5/Wq1Wq1Wqz9V3VSNd69ZRMRGc5v6NYPh+AHghNmIj9vuAi2Sf9H6EfFc250AZlqn7Q5wLLa211c7Kd9O8/kgje+ezwXZl/9GZ2e7vP246UFGzzGZ1v1rM3rxzIT+PDulPsySnH93NP9ru+3DtN5x5z8tk/If7lwyV56cf280/xGnJ//u2PxLlfPvP1L+PfkDAAAAAMAMy///v+Tz37zLAAAAAAAAAHDibG2vr+brXvPn/58bs57rP0+nnH/nUfNfSPPyP9Fy/t2R/L88sl6vMX//zb3j/9/b66u/v/Ovz+bpYfOfyzOddM/qpHtEJ91Sp5+mR9m7h20OesP6lgadbq+fzvmpBu/EjbgZa3Fh37rd9PfYa1/Z1173dLCv/eK+9v5D7Zf2tQ/S9w5UC7n9XKzGT+JmvL3TXrfNHbD/8we0Vwe05/x7Hv+LlPPvN37q/BdTe2dkWrv/Yfeh4745HXc7b9z4/C8vHP/uHGgzeg/2ranev7Mt9Gfnb/LEMH52e+3WubvX79y5tRJpsm/pxUiTxyznP9j5mdt7/H9htz0/7jeP1/sfDh85/1mxGf2J+b/QmK/396Up960NOf9h+sn5v53axx//Jzn/ycf/yy30BwAAAAAAAAAAAAAAAD5JVVU7l4i+ERGX0/U/bV2bCQBMV37+r5K8XK1Wq9Vq9emrm6rxXm8WEfHX5jb1a4ZfjPtlAMAs+19E/KPtTtAa+Rcsf99fPX2x7c4AU3X7/Q9+dP3mzbVbt9vuCQAAAAAAAADwaeXxP5cb4z+/GBFLI+vtG//1zVg+6vif/TzzYIDRxzzQ9wSb3WGv2xhu/PnYGZ/73KTxv8/Gw+N/5zFxe839mGBwQPvwgPa5A9rnxy7dS2vshR4NOf/nG+Od1/mfGRl+vYTxX0fHvC9Bzv9s4/5c5/+lkfWa+Ve/nbn8Nw674mZ09+V//s57Pz1/+/0PXrnx3vV3195d+/GllZULly5fvnLlyvl3btxcu7D77/H0egbk/PPY184DLUvOP2cu/7Lk/L+QavmXJef/xVTLvyw5//x6T/5lyfnn9z7yL0vO/6VUy78sOf+vpFr+ZdnaXp+r83851fIvSz7+v5pq+Zcl5/9KquVflpz/uVTLvyw5//OpPkT+vh7+FMn550+4HP9lyfmvpFr+Zcn5X0y1/MuS87+UavmXJef/aqrlX5ac/9dSLf+y5Pwvp1r+Zcn5fz3V8i9Lzv9KquVflpz/N1It/7Lk/L+ZavmXJef/WqrlX5ac/7dSLf+y5Py/nWr5lyXn/51Uy78sOf/XUy3/sux9/78ZM2bM5Jm2H5kAAAAAAAAAAAAAgFHTOJ247X0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7PDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd3cxcp31GcDP7Ie9dggxEIKTGtgkJoRkya4/4g9aFxMI0AClQEKhH9iud20W/IXXLoEi2TRQImFUVFE1vWgLKGojVRVWxQWtKM1F1Y+r0l7Qm4qqElKjyqCAitRWNFvNnPd9PTM7OzPrHa9nz/v7Scnfu3Nmzpkz78zus/azAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECzO98897laURT1/xr/21IUL6r/edPklsbn3nCjjxAAAABYrf9r/P/5W9InDvZxpaZt/u5V//j1xcXFxeIDo787/qXFxXTBZFGMbyyKxmXR5X//YK15m+CJYqI20vTxSI/dj/a4fKzH5eM9Lt/Q4/KNPS6f6HH5khOwxKby5zGNG9ve+OOW8pQWtxbjjcu2d7jWE7WNIyPxZzkNtcZ1FsePFfPFiWKumGnZvty21tj+m3fW9/X2Iu5rpGlf2+or5IefOhqPoRbO8faWfV29zej7byomf/TDTx3943NXbu80e56Gltsrj/Peu+rH+ZnwmfJYa8XGdE7icY40Hee2Do/JaMtx1hrXq/+5/Tif7/M4R68e5ppqf8wnipHGn7/dOE9jzT/WS+dpW/jcf99dFMXFq4fdvs2SfRUjxeaWz4xcfXwmyhVZv436UnppMbaidXpnH+u0Pme3t67T9udEfPzvDNcbW+YYmh+m7396w5LHfaXrNKrf6+WeK+1rcNDPlWFZg3FdfLtxp5/suAa3h/v/qXuWX4Md106HNZjud9MavKvXGhzZMNo45vQg1BrXuboGd7RsP9rYU60xn7un+xqcPnfyzPTCJz75+vmTR47PHZ87tWvHjplde/bs27dv+tj8ibmZ8v/XeLaH3+ZiJD0H7grnLj4HXtu2bfNSXfzK4J6HE12eh1vath3083Cs/c7V1uYJuXRNl8+NR+snfeLSSLHMc6zx+Ny3+udhut9Nz8Oxpudhx68pHZ6HY308D+vbnLmvv+9Zxpr+63QM1+trwZamNdj+/Uj7Ghz09yPDsgYnwrr41/uW/1qwLRzvk1Mr/X5kdMkaTHc3vPbUP5O+35/Y1xid1uUd9Qtu2lCcX5g7+8DjR86dO7ujCGNNvKxprbSv181N96lYsl5HVrxeD86/6sk7Onx+SzhXE6+v/29i2ceqvs3uB7o/Vo2vbp3PZ8tndxZhDNhan89OX83r5zNlyS7ns77NZ6ZX/714yqVNr7/jy7z+xtz/Qrm/dFNPjI6Plc/f0XR2xltej1sfqrHGa1etse/np/t7PR4P/6316/GtXV6Pt7ZtO+jX4/H2Oxdfj2u9ftqxOu2P50RYJydmur8e17fZunOla3Ks6+vx3WHWwvl/XUgKKRc1rZ3l1m3a19jYeLhfY3EPret0V8v24yGb1ff1zM5rW6f33l3e1mi6d1et1TqdbNt20Os0vV4tt05rvX76dm3aH8+JsC5u3dV9nda3eXb36l87N8U/Nr12bui1BsdHN9SPeTwtwvL1fnFTXIMPFEeL08WJYrZx6YbGeqo19jX1YH9rcEP4b61fK7d2WYP3tm076DWYvo4tt/ZqY0vv/AC0P54TYV089WD3NVjf5i17B/u9673hM2mbpu9d23++ttzPvO5oO03X82de9eP8m73dfzZb3+bEvpXmzO7n6f7wmZs6nKf25+9yz6nZYm3O09ZwnFf2LX+e6sdT3+ZL+/tcTweLorjwsYcaP+8Nf7/y5+e/8/WWv3fp9Hc6Fz720A9uPva3Kzl+ANa/F8qxufxa1/Q3U/38/T8AAACwLsTcPxJmIv8DAABAZcTcH/9VeCL/AwAAQGXE3D8WZpJJ/t/6livzL1woUjN/MYiXp9PwSLld7LjOhI8nF6+qf/6hp+d+/JcX+tv3SFEUP3nkNzpuv/WReFylyXCclx9u/fzSK17oa/+HH7u6XXN//cvh9uP96XcZdKrgzhRF8c1bvtDYz+QHLzXms48cbsz3Xnzyifo2z+8vP47Xf+5l5fZ/EMq/B48dabn+c+E8fC/MmXd0Ph/xel+79Lpte99/dX/xerW7Xty42099qLzd+HtyvvhEuX08z8sd/199/pmv1bd//DWdj//CSOfjfybc7tMPX5mvr7j/eWW5ffNjUP84Xu+z4fjj/p4O13/gq9/qePyXP1duf+at5XaHw4z7vzd8vP2tV+abz9fjtSMt96t4W7ld3P/Md367cXm8vXj77cc/cehSy/loXx/P/nN5O9Nt28fPx/1Ef9G2//rtNK/PuP9nfutwy3nutf/L733ulfXbbd///W3bjbZdv/03Nv3hZ7/QcX/xeA7+2ZmW+3PwPeF5HPb/1IfCegyX/+/lL7TsNzr8ntbXn7j9l7dcaLk/0dt/VO7/8huPN+Z/TP7492960c0vvvjq+rkrim+/r7y9Xvs//kenW47/K7fd13g84uWxo9++/+XE/Z/9+NSp0wvn52ebzmrjd+e8szyejRObNteP95bw2tr+8aHT5z48d3ZyZnKmKCar+yv0rtlXw/xBOS6u9Pr3PRYezzt+75ub7/mnz8fP/8uj5ecvvaP8uvXasN0Xw+e3lI/fYm2V+3/qztsaz+/as+XHLT32Adi2/T/39bVhuP/t3xfE9X7m5R9unIf6ZY2vG/F5vcrj/+5seTvfCOd1Mfxm5rtuu7q/5u3j70a49L7y+b7q8xde5uLj+ifh8X7X98rbj8cV7+93w/cx39ra+noX18c3Loy0337jt3hcDK8nxcXy8rhVPN+Xnr+t4+HF30NSXLy98fHvpNu5fUV3czkLn1iYPjF/6vzj0+fmFs5NL3zik4dOnj5/6tyhxu/yPPSRXte/+vq0ufH6NDu3Z3cxs6koitPFzBq8YF2f46//qb/jP/PY0dm9M/fMzh07cv7YucfOzJ09fnRh4ejc7MI9R44dm/t4r+vPzx7YsXP/rr07p47Pzx7Yt3//rv1T86dO1w+jPKge9sx8dOrU2UONqywc2L1/x4MP7p6ZOnl6du7A3pmZqfO9rt/42jRVv/avT52dO3Hk3PzJuamF+U/OHdixf8+enT1/G+DJM8cWJqfPnj81fX5h7ux0eV8mzzU+Xf/a1+v6VNPCv5Xfz7arlb+Ir3j3/XvS72ete/rTy95UuUnbLxC9En4XzT+85My+fj6OuX88zCST/A8AAAA5iLl/Q5iJ/A8AAACVEXP/xjAT+R8AAAAqI+b+iTCTTPK//r/+f3/9//LyQfb/O/XnC/3/oer/n/lY2Std7/3/2J/X/8/DDe7/r3r/+v/6/9Xr//ffn1/vx6//r//PUsPW/4+5f1NRZJn/AQAAIAcx928OM5H/AQAAoDJi7r8pzET+BwAAgMqIuf9FYSaZ5H/9/776/zt7Fa6q3/8f/Pv/6//r/69J/z8+OPr/2Vhx//79j7Z8qP8f6P/r/+v/6//r/7Nq48tecqP6/zH33xxmkkn+BwAAgBzE3P/iMBP5HwAAACoj5v5bwkzkfwAAAKiMmPu3hJlkkv/1/73/v/6//n+l+/+rff//poPR/18fvP9/d/r/PVxz/39C/3899v/HB3v8w93/73n4+v9cF8P2/v8x978kzCST/A8AAAA5iLn/pWEm8j8AAABURsz9Lwszkf8BAACgMmLuvzXMJJP8r/+v/6//r/+v/995/73f/7/8k/7/cNH/707/vwfv/59X/3/Axz/c/f9Bv///+MPt19f/p5Nh6//H3P/yMJNM8j8AAADkIOb+28JM5H8AAACojJj7XxFmIv8DAABAZcTcvzXMJJP8r/+v/6//r/+v/995/737/yX9/+Gi/9+d/n8P+v/6//r//fX/O3zzq/9PJ8PW/4+5//Ywk0zyPwAAAOQg5v47wkzkfwAAAKiMmPt/KsxE/gcAAIDKiLl/W5hJJvlf/1//X/8/r/7//Rv0//X/q03/vzv9/x70//X/9f/7fP//pVbS/9/Y68aojGHr/8fc/8owk0zyPwAAAOQg5v5XhZnI/wAAAFAZMfe/OsxE/gcAAIDKiLl/Mswkk/yv/1+t/v+f/vVTry70//X/e+y/ov3/uAz0/zOn/9+d/n8P+v/6//r/a9L/Jx/D1v+Puf/OMJNM8j8AAADkIOb+u8JM5H8AAACojJj77w4zkf8BAACgMmLu3x5mkkn+1/+vVv8/0v/X/++2/4r2/xP9/7zp/3fQ9CTV/+9B/1//P/v+f/zuV/+fwRi2/n/M/a8JM8kk/wMAAEAOYu6/J8xE/gcAAIDKiLn/tWEm8j8AAABURsz994aZZJL/9f/1//X/9f/1/zvvX/9/fdL/726l/f8N+v/6//r/mfX/vf8/gzVs/f+Y+18XZpJJ/gcAAIAcxNx/X5iJ/A8AAACVEf/9ZvnvXuV/AAAAqKKY+6fCTDLJ//r/+v859f9r+v/6//r/laf/3533/+9B/1//X/9f/5+BGrb+f8z9rw8zyST/AwAAQA5i7n8gzET+BwAAgMqIuX86zET+BwAAgMqIuX8mzCST/K//r/+fU//f+//r/+v/V5/+f3f6/z3o/+v/V63/XxT6/9xQw9b/j7l/R5hJJvkfAAAAchBz/84wE/kfAAAAKiPm/l1hJvI/AAAAVEbM/bvDTDLJ//r/+v/6//r/+v+d96//vz7p/3en/9+D/r/+f9X6/97/nxts2Pr/Mfc/GGaSSf4HAACAHMTcvyfMRP4HAACAyoi5f2+YScj/nf5dNwAAALC+xNy/L8wkk7//1/+vSP//N/++Zd/6//r/3fY/mP7/Jv3/MPX/h0tF+//tT4trpv/fg/7/devPFyMDOcQbdvz6//r/XJth6//H3L8/zCST/A8AAAA5iLn/DWEm8j8AAABURsz9Px1mIv8DAABAZcTc/zNhJpnkf/3/ivT/2+j/6/9327/3/9f/r7KK9v8HplL9/xH9//XU//f+//r/va5PNV3//n/8U3/9/5j7D4SZZJL/AQAAIAcx9/9smIn8DwAAAJURc/8bw0zkfwAAAKiMmPsPhplkkv/1//X/9f/1/69P//+NRbth7P/XF4/+f7UMcf9/vJ/96/97/3/9/zU5/vYvNQM5fv1//X+WGrb3/4+5/01hJpnkfwAAAMhBzP0PhZnI/wAAAFAZMfe/OcxE/gcAAIDKiLn/LWEmmeR//X/9f/1//X/v/995//r/69MQ9//7ov+v/6//v36PX/9f/5+lhq3/H3P/w2EmmeR/AAAAyEHM/W8NM5H/AQAAoDJi7n9bmIn8DwAAAJURc//bw0wyyf/6//r/+v/6//r/nfev/78+6f93p//fg/6//r/+v/4/AzVs/f+Y+38uzCST/A8AAAA5iLn/kTAT+R8AAAAqI+b+d4SZyP8AAABQGTH3vzPMJJP8r/+v/6//r/+v/995//r/65P+f3f6/z3o/+v/6//r/zNQw9b/j7n/XWEmmeR/AAAAyEHM/T8fZiL/AwAAQGXE3P/uMBP5HwAAACoj5v5fCDPJJP/r/+v/D1f/f/FC8/X0//X/i0H1/+tX0v/Pgv5/d/r/PXTo/2/U/9f/1//X/+eaDVv/P+b+94SZZJL/AQAAIAcx9783zET+BwAAgMqIuf99YSbyPwAAAFRGzP2Phplkkv/1/7Ps/6e7PHz9f+//r//v/f/1/1dH/787/f8evP+//r/+v/4/AzVs/f+Y+x8LM8kk/wMAAEAOYu5/f5iJ/A8AAACVEXP/L4aZyP8AAABQGTH3fyDMJJP8r/+fZf9/iN//v2r9/7GW9ZFT/3+i6fFM61L/X/9/Dej/d6f/34P+v/7/MPf/w2retMz19f8ZRsPW/4+5/4NhJpnkfwAAAMhBzP2/FGYi/wMAAEBlxNz/y2Em8j8AAABURsz9vxJmkkn+r2D//2Kh/6//PzT9/9b1kVP/3/v/L6X/vzb0/7vT/+9B/1//f5j7/z3o/zOMhq3/H3P/r4aZLBv8fvBffdxNAAAAYIjE3P+hMJNM/v4fAAAAchBz/6EwE/kfAAAAKiPm/sNhJpnk/wr2/1f5/v/xHVX1//X/B93/H9H/1//X/18Dg+v/v+LmotD/1//X/9f/1//X/2c1hq3/H3P/kTCTTPI/AAAA5CDm/l8LM5H/AQAAoDJi7j8aZiL/AwAAQGXE3D8bZpJJ/r+B/f/x4ez/e///a+3//0T/3/v/B/r/nen/rw3v/9+d/n8P+v/6//r/+v8M1LD1/2PunwszyST/AwAAQIWlHwfH3H8szET+BwAAgMqIuf94mIn8DwAAAJURc/+Hw0wyyf/e/1//3/v/34j+/1jL9vr/Jf1//f9B0P/vTv+/B/1//X/9f/1/BmrY+v8x98+HmWSS/wEAACAHMfd/JMxE/gcAAIDKiLn/o2Em8j8AAABURsz9J8JMMsn/+v/6/7n3/2tFcdH7/+v/d9q//v/6pP/fnf5/D/r/+v/6//r/DNSw9f9j7j8ZZpJJ/gcAAIAcxNx/KsxE/gf4f/buo0mu87rjcJsmEVb2R/DaKy/tFf0RvPXOVV67nOhsiaRylqicA5VzzonKOedM5RypSKkKKg7OOcBgGvciNKbvfc/zbI6BIjwNckjX36hfvQAAMIzc/f8ct9j/AAAAMIzc/f8StzTZ//p//X/3/n+zl/f/D//1+v+z9P/6/1040t9fv/2vu1gUftH+/6/++qZ/0P/r//X/k/T/+n/9PxdaWv+fu/9f45Ym+x8AAAA6yN3/b3GL/Q8AAADDyN3/73GL/Q8AAADDyN1/U9zSZP/r//X/+n/9/6H+/w79v/5/3bz/P03/P0P/r//X/+v/2aml9f+5+/8jbmmy/wEAAKCD3P3/GbfY/wAAADCM3P3/FbfY/wAAADCM3P3/Hbc02f/6f/2//n8t/f8J7/9f8PvR/+v/t9H/T9P/z9D/6//1//p/dmpp/X/u/v+JW5rsfwAAAOggd///xi32PwAAAAwjd///xS32PwAAAAwjd///xy1N9r/+X/+v/19L/39M7//r//X/K3f75tx/E/T/R+n/Z8z0/5uN/n/KJffz23976/n8F6H/1/9z1NL6/9z994pb/nazOXGlv0kAAABgUXL33ztuafLn/wAAANBB7v6b4xb7HwAAAIaRu/+WuKXJ/tf/6//1//p//f/2r6//Xyfv/0+7+v7/L//8n/6xb//v/f9p3v/fdf9/z3eG/p91W1r/n7v/1rilyf4HAACADnL33ydusf8BAABgGLn77xu32P8AAAAwjNz994tbmux//f9o/f+fHvp15/X/B7WL/l//r//X/49O/z/N+/8zDv4zd7p+qP/X/3v/X//P1Vla/5+7//5xS5P9DwAAAB3k7n9A3GL/AwAAwDBy9z8wbrH/AQAAYBi5+x8UtzTZ//r/0fr/w7/O+//6/21fX/+v/x+Z/n+a/n/GKO//X+F3zb77+au178+v/9f/c9TS+v/c/Q+OW5rsfwAAAOggd/9D4hb7HwAAAIaRu/+hcYv9DwAAAMPI3f+wuKXJ/tf/6//X0f/nV9D/6/+vff+f9P/rpP+fpv+fMUr/f4X23c+v/fPr//X/HLW0/j93/8Pjlib7HwAAADrI3f+IuMX+BwAAgGHk7n9k3GL/AwAAwDBy9z8qbmmy//X/+v919P/e/9f/e/9f/39p9P/T9P8z9P/6f/2//p+dWlr/n7v/trilyf4HAACADnL3Pzpusf8BAABgGLn7HxO32P8AAAAwjNz9j41bmux//b/+X/+v/9f/b//6+v910v9P0//PaN7/b27R/+v/9f/s1oL6//N+1anN4+KWJvsfAAAAOsjd//i4xf4HAACAYeTuf0LcYv8DAADAMHL3PzFuabL/9f+L6f8Pcr6x+v/Tm81G/79p2v+fPu+fZ31f6v/1/8dA/z9N/z+jef+/735+7Z9f/6//56gF9f8HP87d/6S4pcn+BwAAgA5y9z85brH/AQAAYBi5+58St9j/AAAAMIzc/U+NW5rsf/3/Yvr/A2P1/97/v/D7o1P/7/3/o/T/x0P/P03/P0P/r//X/+v/2aml9f+5+58WN5244Yp/iwAAAMDC5O5/etzS5M//AQAAoIPc/c+IW+x/AAAAWKnbjvxM7v5nxi1N9r/+f7f9/4nzfk7/r/+/8PtD/6//1/9fe/r/afr/Gfp//b/+X//PTi2t/8/d/6y4pcn+BwAAgA5y998et9j/AAAAMIzc/c+OW+x/AAAAGEbu/ufELU32v/7f+//6f/3/XP9/7jlU/b/+f/n0/9P0/zP0//r//fb/J8/9j/p/xnAZ/f+ZM2duvub9f+7+58YtTfY/AAAAdJC7/3lxi/0PAAAAw8jd//y4xf4HAACAYeTuf0Hc0mT/6/+b9v/5rb6u/v+WzUb/7/1//b/+f5r+f5r+f4b+X//v/X/9Pzu1tPf/c/e/MG5psv8BAACgg9z9L4pb7H8AAAAYRu7+F8ct9j8AAAAMI3f/S+KWJvtf/9+0//f+v/5f/3/c/f/dG/3/sVhF/3/64l9/6f3/rfp//f+Edv3/3/3NoR/q//X/HLW0/j93/0vjlib7HwAAADrI3f+yuMX+BwAAgGHk7n953GL/AwAAwDBy978ibrq+yf7X/+v/9f/6f/3/9q9/zO//n9hsNvr/HVhF/z9h6f3/bt7/v/Df8nP0//r/NX9+/b/+n6OW1v/n7n9l3NJk/wMAAEAHuftfFbfY/wAAADCM3P2vjlvsfwAAABhG7v7XxC1N9r/+X/+v/9f/D9//37qK/t/7/zui/5+2jP7/4vT/+v81f379v/6fS7ev/j93/2vjlib7HwAAADrI3f+6uMX+BwAAgGHk7n993GL/AwAAwDBy978hbmmy//X/+v/L6f/zc+r/x+r/Ty6u/z916H9fk/f/9f87ov+fpv+fof/X/+v/b9P/s0tLe/8/d/8b45Ym+x8AAAA6yN3/prj1/7q1/wEAAGAYufvfHLfY/wAAADCM3P1viVua7H/9v/7f+//6/+Hf/9f/t6L/n6b/n6H/1//r/73/z04trf/P3f/WuKXJ/gcAAIAOcve/LW6x/wEAAGAYufvfHrfY/wAAADCM3P13xC1N9r/+X/+v/9f/6//P/jPU/49B/z/tePr/0/p//X/1838S/xbo//X/c7+eMS2t/8/d/464pcn+BwAAgA5y978zbrH/AQAAYBi5+98Vt9j/AAAAsErXb/m53P3vjlua7H/9v/5f/6//1/9v//r6/3XaS/+f3xT6f+//hz79/18c+tHa3v+/8P9+6f/1/+ze0vr/3P3viVua7H8AAADoIHf/e+MW+x8AAACGkbv/fXGL/Q8AAADDyN3//rilyf7X/+v/9f/6f/3/9q+v/18n7/9P0//P0P/v9f38tX9+/b/+n6OW1v/n7v9A3NJk/wMAAEAHufs/GLfY/wAAADCM3P0filvsfwAAABjGwe7PuKzh/tf/6//1//p//f/2r6//Xyf9/zT9/wz9v/5f/6//Z6eW1v9/+OBXndp8JG5psv8BAACgg9z9H41b7H8AAAAYRu7+j8Ut9j8AAAAMI3f/x+OWJvtf/6//X0f/f+bMmZv1//r/w7+fc/3/nfp/iv5/mv5/hv5f/6//1/+zU0vr/3P3fyJuabL/AQAAoIPc/Z+MW+x/AAAAGEbu/k/FLfY/AAAADCN3/6fjlib7X/+/gP7/lP7f+//6/433/4/2/9ed/Y+y/v/y6P+n6f9njNj/n7r03/6++/mrte/Pr//X/3PU0vr/3P2fiVua7H8AAADoIHf/Z+MW+x8AAACGkbv/c3GL/Q8AAADDyN3/+bilyf7X/x9f/3/P37su7/+f3mz//Pp//b/+3/v/15r+f5r+f8aI/f9l2Hc/v/bPr//X/3PU0vr/3P1fiFsOD78bLu93CQAAACxJ7v4vxi1N/vwfAAAAOsjd/6W4xf4HAACAYeTu/3Lc0mT/6/8X8P7/gP2/9/+3f3/o/xfd/1+n/x+D/n+a/n+G/l//r//fUf+f3836/+6W1v/n7v9K3NJk/wMAAEAHufu/GrfY/wAAADCM3P1fi1vsfwAAABhG7v4745bz9v+2tnsU+n/9v/5f/6//3/719f/rpP+fdqn9/8nN1fX/Sf+v/9f/d+3/vf/PWUvr/3P3fz1u8ef/AAAAsDo3XOTnc/d/I26x/wEAAGAYufu/GbfY/wAAADCM3P3filvuum5fH+lY6f/1//p//b/+f/vX1/+vk/5/mvf/Z+j/d9HP36j/H6P/32z0/1y9pfX/ufu/Hbf4838AAAAYRu7+78Qt9j8AAAAMI3f/d+MW+x8AAACGkbv/e3FLk/2v/9f/X2X/f5Bm6v/P0v+fpf/fTv9/PPT/0/T/M/T/3v/X/3v/n51aWv+fu//7cUuT/Q8AAAAd5O7/Qdxi/wMAAMAwcvf/MG6x/wEAAGAYuft/FLc02f976//jb7X+f/X9v/f/9f/6f/3/ouj/p+n/Z+j/9f/6f/0/O7W0/j93/4/jlib7HwAAADrI3f+TuMX+BwAAgGHk7v9p3GL/AwAAwDBy9/8sbmmy/73/r//X/+v/9f/bv77+f530/9P0/9vVPyj9v/5f/6//Z6eW1v/n7v953NJk/wMAAEAHuft/EbfY/wAAADCM3P13xS32PwAAAAwjd/8v45Ym+1//r//X/+v/9f/bv77+f530/9P22f///Z/Nf1nv/++9/8+PoP/X/+v/2Yml9f+5+38VtzTZ/wAAANBB7v5fxy32PwAAAAwjd/9v4hb7HwAAAIaRu/+3cUuT/T/T/5+sv1D/P0n/f/jz6/+3f3/o//X/+v9rT/8/zfv/M/T/3v/X/+v/2aml9f+5+38XtzTZ/wAAANBB7v674xb7HwAAAIaRu//3cYv9DwAAAMPI3f+HuKXJ/vf+/5r6/xv1//p//b/+X/8/Q/8/Tf8/Q/+v/9f/6//ZqaX1/7n7/xgAAP//RD5ONQ==") open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 334.840264ms ago: executing program 0 (id=761): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$packet(r1, &(0x7f0000000440)="ac", 0x1, 0x8000, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18}], 0x1, 0x0) 226.196576ms ago: executing program 0 (id=762): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) 209.587106ms ago: executing program 0 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000500530001000000140004"], 0x60}}, 0x0) 105.826398ms ago: executing program 0 (id=764): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101a02, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 0s ago: executing program 0 (id=765): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500001c00000000040190"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd, 0x0, 0x51}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x8054}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000"], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): [ 70.845198][ T5770] Bluetooth: hci0: command tx timeout [ 70.863816][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.896134][ T5772] veth0_macvtap: entered promiscuous mode [ 70.908098][ T5764] veth1_vlan: entered promiscuous mode [ 70.920247][ T5770] Bluetooth: hci3: command tx timeout [ 70.925880][ T5774] Bluetooth: hci2: command tx timeout [ 70.943161][ T5772] veth1_macvtap: entered promiscuous mode [ 71.021814][ T5773] veth0_vlan: entered promiscuous mode [ 71.033040][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.044937][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.056413][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.092595][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.103222][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.116947][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.129332][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.138760][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.147828][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.157099][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.174520][ T5773] veth1_vlan: entered promiscuous mode [ 71.191813][ T5764] veth0_macvtap: entered promiscuous mode [ 71.203581][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.206988][ T5764] veth1_macvtap: entered promiscuous mode [ 71.215263][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.265866][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.276933][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.287298][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.298015][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.310565][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.342038][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.353227][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.364225][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.375011][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.389062][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.407493][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.420435][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.423805][ T5764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.438584][ T5764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.447672][ T5764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.459876][ T5764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.519627][ T5773] veth0_macvtap: entered promiscuous mode [ 71.590528][ T254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.603339][ T5773] veth1_macvtap: entered promiscuous mode [ 71.608783][ T254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.640414][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.646680][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.648235][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.658647][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.673805][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.685370][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.695593][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.708752][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.740005][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.759437][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.771061][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.781492][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.792016][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.802402][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.813074][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.826549][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.896390][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.898333][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.909001][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.924200][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.942595][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.951863][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.992582][ T5834] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.097585][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.124293][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.193632][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.218656][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.246964][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.262930][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.335089][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.359771][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.481312][ T5842] Illegal XDP return value 4294967274 on prog (id 3) dev N/A, expect packet loss! [ 72.918496][ T5770] Bluetooth: hci0: command tx timeout [ 72.925378][ T5770] Bluetooth: hci1: command tx timeout [ 72.996077][ T5774] Bluetooth: hci3: command tx timeout [ 73.001540][ T5774] Bluetooth: hci2: command tx timeout [ 73.049549][ T5867] syz.0.14[5867]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.059790][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 73.066844][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 73.142379][ T5867] loop0: detected capacity change from 0 to 256 [ 73.210308][ T5867] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 73.310699][ T5873] sctp: [Deprecated]: syz.2.17 (pid 5873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.310699][ T5873] Use struct sctp_sack_info instead [ 73.336013][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 73.342196][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 73.814936][ T5806] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.855022][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 73.861188][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 73.877956][ T5865] ceph: No mds server is up or the cluster is laggy [ 74.030920][ T5806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.065363][ T5806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.084870][ T5806] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.118445][ T5806] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.139363][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.157214][ T5877] loop0: detected capacity change from 0 to 32768 [ 74.168921][ T5806] usb 3-1: config 0 descriptor?? [ 74.262150][ T5877] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 74.280107][ T5877] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 74.348134][ T5880] loop1: detected capacity change from 0 to 40427 [ 74.364704][ T5880] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 74.393971][ T5880] F2FS-fs (loop1): invalid crc value [ 74.406707][ T5877] XFS (loop0): Ending clean mount [ 74.447913][ T5880] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.456134][ T5877] XFS (loop0): Quotacheck needed: Please wait. [ 74.552879][ T5877] XFS (loop0): Quotacheck: Done. [ 74.596835][ T5880] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 74.651191][ T5806] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xe [ 74.657039][ T27] audit: type=1804 audit(1750250358.593:2): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.19" name="/newroot/4/file0/memory.stat" dev="loop0" ino=4427 res=1 errno=0 [ 74.688260][ T5806] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 74.701019][ T5806] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 74.714830][ T5804] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.734462][ T5764] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 74.778598][ T5806] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 74.938912][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 74.973752][ T5804] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 74.995797][ T5774] Bluetooth: hci1: command tx timeout [ 75.001248][ T5774] Bluetooth: hci0: command tx timeout [ 75.017077][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.047058][ T5804] usb 4-1: config 0 descriptor?? [ 75.057116][ T5773] syz-executor: attempt to access beyond end of device [ 75.057116][ T5773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.076563][ T5774] Bluetooth: hci2: command tx timeout [ 75.076574][ T5770] Bluetooth: hci3: command tx timeout [ 75.102448][ T5773] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 75.184880][ T5765] usb 3-1: USB disconnect, device number 2 [ 75.280713][ T5804] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 75.311674][ T5804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 75.328327][ T5902] process 'syz.0.24' launched './file1' with NULL argv: empty string added [ 75.334355][ T5804] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 75.350155][ T5804] usb 4-1: media controller created [ 75.412057][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.486264][ T5804] az6027: usb out operation failed. (-71) [ 75.505617][ T5804] az6027: usb out operation failed. (-71) [ 75.523210][ T5804] stb0899_attach: Driver disabled by Kconfig [ 75.543486][ T5804] az6027: no front-end attached [ 75.543486][ T5804] [ 75.572095][ T5804] az6027: usb out operation failed. (-71) [ 75.595058][ T5804] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 75.619745][ T5804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 75.651903][ T5804] dvb-usb: schedule remote query interval to 400 msecs. [ 75.674676][ T5804] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 75.701382][ T5804] usb 4-1: USB disconnect, device number 2 [ 75.740037][ T5804] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 75.944985][ T5808] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.015825][ T5915] loop2: detected capacity change from 0 to 2048 [ 76.050744][ T5915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.086590][ T27] audit: type=1800 audit(1750250360.033:3): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.29" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 76.162933][ T5808] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 76.185075][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.204485][ T5808] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.222476][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 76.231538][ T5808] usb 2-1: SerialNumber: syz [ 76.614372][ T5926] loop2: detected capacity change from 0 to 4096 [ 76.666597][ T5926] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 76.715811][ T5926] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 76.822192][ T5926] ntfs: volume version 3.1. [ 76.874128][ T5926] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 76.932225][ T5808] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 76.938202][ T5926] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 77.416577][ T5808] usb 2-1: USB disconnect, device number 2 [ 77.423774][ T5808] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 78.102237][ T5935] loop3: detected capacity change from 0 to 32768 [ 78.364187][ T5935] jfs_lookup: iget failed on inum 32 [ 78.385382][ T5935] jfs_lookup: iget failed on inum 32 [ 78.479289][ T5935] find_entry called with index = 0 [ 78.502741][ T5935] find_entry called with index = 0 [ 78.714600][ C1] sched: RT throttling activated [ 78.942299][ T5968] loop0: detected capacity change from 0 to 64 [ 79.900520][ T5949] loop2: detected capacity change from 0 to 262144 [ 79.908383][ T5949] ======================================================= [ 79.908383][ T5949] WARNING: The mand mount option has been deprecated and [ 79.908383][ T5949] and is ignored by this kernel. Remove the mand [ 79.908383][ T5949] option from the mount to silence this warning. [ 79.908383][ T5949] ======================================================= [ 79.947687][ T5949] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.38 (5949) [ 80.009572][ T5949] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 80.020208][ T5949] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 80.030232][ T5949] BTRFS info (device loop2): using free space tree [ 80.177251][ T5949] BTRFS info (device loop2): enabling ssd optimizations [ 80.324174][ T6007] input: syz1 as /devices/virtual/input/input6 [ 80.616833][ T5772] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 80.827928][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.041876][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 81.075160][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 81.103453][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.135850][ T23] usb 4-1: config 0 descriptor?? [ 81.157762][ T6025] loop2: detected capacity change from 0 to 2048 [ 81.221467][ T6025] loop2: p1 < > p4 [ 81.243832][ T6025] loop2: p4 size 8388608 extends beyond EOD, truncated [ 81.275409][ T5142] loop2: p1 < > p4 [ 81.289757][ T5142] loop2: p4 size 8388608 extends beyond EOD, truncated [ 81.327196][ T6028] loop1: detected capacity change from 0 to 128 [ 81.337471][ T6028] ADFS-fs (loop1): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 81.394746][ T5765] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.418680][ T5142] loop2: p1 < > p4 [ 81.436798][ T5142] loop2: p4 size 8388608 extends beyond EOD, truncated [ 81.590764][ T23] wacom 0003:056A:0307.0002: hidraw0: USB HID v0.00 Device [HID 056a:0307] on usb-dummy_hcd.3-1/input0 [ 81.626182][ T5765] usb 1-1: Using ep0 maxpacket: 8 [ 81.647460][ T5765] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 81.667320][ T5765] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.687474][ T5765] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.712579][ T5765] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.728373][ T6032] loop1: detected capacity change from 0 to 128 [ 81.745550][ T5765] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.776487][ T6032] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 81.806725][ T5765] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.838242][ T6032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.854658][ T5765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.862256][ T5807] usb 4-1: USB disconnect, device number 3 [ 81.946581][ T28] cfg80211: failed to load regulatory.db [ 82.104924][ T5765] usb 1-1: GET_CAPABILITIES returned 0 [ 82.110479][ T5765] usbtmc 1-1:16.0: can't read capabilities [ 82.443940][ T5765] usb 1-1: USB disconnect, device number 2 [ 82.454827][ T6027] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 82.713084][ T6048] netlink: 'syz.2.63': attribute type 29 has an invalid length. [ 82.933181][ T5898] udevd[5898]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 82.936801][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 83.011999][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 83.012195][ T5898] udevd[5898]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 83.067143][ T6048] netlink: 'syz.2.63': attribute type 29 has an invalid length. [ 83.100864][ T6053] netlink: 'syz.2.63': attribute type 29 has an invalid length. [ 83.127474][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 83.140998][ T5898] udevd[5898]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 83.770554][ T6080] loop8: detected capacity change from 0 to 7 [ 83.784308][ T5898] Dev loop8: unable to read RDB block 7 [ 83.801798][ T5898] loop8: unable to read partition table [ 83.808882][ T5898] loop8: partition table beyond EOD, truncated [ 83.848285][ T6080] Dev loop8: unable to read RDB block 7 [ 83.856859][ T6080] loop8: unable to read partition table [ 83.874466][ T6080] loop8: partition table beyond EOD, truncated [ 83.885255][ T6080] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 84.018554][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 84.060841][ T6086] ipvlan2: entered promiscuous mode [ 84.083875][ T6086] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 84.123732][ T6086] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 84.152456][ T6086] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 84.280667][ T6096] batadv_slave_1: entered promiscuous mode [ 84.331052][ T6095] batadv_slave_1: left promiscuous mode [ 84.523948][ T6105] loop2: detected capacity change from 0 to 512 [ 84.619052][ T6105] EXT4-fs error (device loop2): ext4_quota_enable:7125: comm syz.2.88: Bad quota inum: 1, type: 2 [ 84.669512][ T6105] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 84.681815][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 84.687048][ T5770] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 84.704845][ T5770] CPU: 1 PID: 5770 Comm: kworker/u5:4 Not tainted 6.6.93-syzkaller #0 [ 84.713034][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.723090][ T5770] Workqueue: hci2 hci_rx_work [ 84.727804][ T5770] Call Trace: [ 84.731083][ T5770] [ 84.734013][ T5770] dump_stack_lvl+0x16c/0x230 [ 84.738698][ T5770] ? show_regs_print_info+0x20/0x20 [ 84.744015][ T5770] ? load_image+0x3b0/0x3b0 [ 84.748526][ T5770] sysfs_create_dir_ns+0x256/0x280 [ 84.753631][ T5770] ? hci_rx_work+0x43a/0xd80 [ 84.758229][ T5770] ? sysfs_warn_dup+0xa0/0xa0 [ 84.762928][ T5770] ? do_raw_spin_unlock+0x121/0x230 [ 84.768139][ T5770] kobject_add_internal+0x6b8/0xc70 [ 84.773339][ T5770] kobject_add+0x156/0x220 [ 84.777745][ T5770] ? __rwlock_init+0x150/0x150 [ 84.782513][ T5770] ? kobject_init+0x1e0/0x1e0 [ 84.787183][ T5770] ? _raw_spin_unlock+0x28/0x40 [ 84.792039][ T5770] ? get_device_parent+0x366/0x390 [ 84.797143][ T5770] device_add+0x408/0xc20 [ 84.801469][ T5770] hci_conn_add_sysfs+0xd5/0x1e0 [ 84.806405][ T5770] le_conn_complete_evt+0xc37/0x1220 [ 84.811683][ T5770] ? hci_event_packet+0x4a7/0x1210 [ 84.816793][ T5770] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 84.823024][ T5770] ? __copy_skb_header+0xa7/0x550 [ 84.828044][ T5770] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 84.833677][ T5770] ? skb_pull_data+0xfb/0x200 [ 84.838353][ T5770] hci_le_conn_complete_evt+0x187/0x440 [ 84.843898][ T5770] ? hci_remote_host_features_evt+0x160/0x160 [ 84.849960][ T5770] hci_event_packet+0x795/0x1210 [ 84.854902][ T5770] ? bis_list+0x290/0x290 [ 84.859225][ T5770] ? lockdep_hardirqs_on+0x98/0x150 [ 84.864416][ T5770] ? hci_send_to_monitor+0xd7/0x4f0 [ 84.869613][ T5770] hci_rx_work+0x43a/0xd80 [ 84.874036][ T5770] ? process_scheduled_works+0x957/0x15b0 [ 84.879754][ T5770] process_scheduled_works+0xa45/0x15b0 [ 84.885314][ T5770] ? assign_work+0x400/0x400 [ 84.889905][ T5770] ? assign_work+0x39e/0x400 [ 84.894491][ T5770] worker_thread+0xa55/0xfc0 [ 84.899082][ T5770] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 84.904980][ T5770] ? _raw_spin_unlock+0x40/0x40 [ 84.909834][ T5770] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 84.915759][ T5770] kthread+0x2fa/0x390 [ 84.919840][ T5770] ? pr_cont_work+0x560/0x560 [ 84.924610][ T5770] ? kthread_blkcg+0xd0/0xd0 [ 84.929209][ T5770] ret_from_fork+0x48/0x80 [ 84.933620][ T5770] ? kthread_blkcg+0xd0/0xd0 [ 84.938202][ T5770] ret_from_fork_asm+0x11/0x20 [ 84.943001][ T5770] [ 84.947447][ T5770] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 84.961716][ T5770] Bluetooth: hci2: failed to register connection device [ 84.987402][ T6105] EXT4-fs (loop2): mount failed [ 85.088892][ T6105] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.559812][ T6133] loop0: detected capacity change from 0 to 8192 [ 85.575462][ T6133] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.590796][ T6133] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 85.600968][ T6133] REISERFS (device loop0): using ordered data mode [ 85.607840][ T6133] reiserfs: using flush barriers [ 85.616072][ T6133] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.643192][ T6133] REISERFS (device loop0): checking transaction log (loop0) [ 85.674187][ T6133] REISERFS (device loop0): Using r5 hash to sort names [ 85.691781][ T6133] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 85.805019][ T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.006491][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.030702][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.043628][ T28] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 86.053311][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.072343][ T28] usb 2-1: config 0 descriptor?? [ 86.550719][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.572578][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.595104][ T28] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 86.601993][ T28] sony 0003:054C:024B.0003: unexpected long global item [ 86.610832][ T28] sony 0003:054C:024B.0003: parse failed [ 86.617222][ T28] sony: probe of 0003:054C:024B.0003 failed with error -22 [ 86.794694][ T3505] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.837455][ T28] usb 2-1: USB disconnect, device number 3 [ 86.995299][ T3505] usb 4-1: Using ep0 maxpacket: 16 [ 87.003346][ T3505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.019717][ T3505] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 87.029186][ T3505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.046159][ T3505] usb 4-1: config 0 descriptor?? [ 87.098011][ T6172] loop0: detected capacity change from 0 to 128 [ 87.340321][ T6177] loop0: detected capacity change from 0 to 256 [ 87.483921][ T3505] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0004/input/input10 [ 87.641524][ T3505] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 87.727524][ T3505] usb 4-1: USB disconnect, device number 4 [ 87.851376][ T6184] fido_id[6184]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 88.090189][ T6192] mmap: syz.2.118 (6192) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.138973][ T6195] loop0: detected capacity change from 0 to 256 [ 88.179071][ T6195] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 88.840035][ T6214] loop0: detected capacity change from 0 to 512 [ 88.990577][ T6214] EXT4-fs error (device loop0): ext4_quota_enable:7125: comm syz.0.134: Bad quota inum: 1, type: 2 [ 89.084782][ T6214] EXT4-fs warning (device loop0): ext4_enable_quotas:7173: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 89.133733][ T6214] EXT4-fs (loop0): mount failed [ 89.447007][ T6208] loop1: detected capacity change from 0 to 40427 [ 89.470629][ T6208] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 89.483747][ T6228] loop2: detected capacity change from 0 to 256 [ 89.484346][ T6208] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 89.505137][ T6208] F2FS-fs (loop1): invalid crc value [ 89.540440][ T6208] F2FS-fs (loop1): Found nat_bits in checkpoint [ 89.597930][ T27] audit: type=1804 audit(1750250373.533:4): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.137" name="/newroot/29/file1/file0" dev="loop2" ino=1048594 res=1 errno=0 [ 89.712373][ T6208] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 89.750968][ T6208] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 89.902527][ T6208] syz.1.131: attempt to access beyond end of device [ 89.902527][ T6208] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 89.952667][ T6208] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 89.958232][ T6220] loop3: detected capacity change from 0 to 32768 [ 90.018669][ T6220] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 90.068613][ T6220] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 90.160567][ T6241] loop2: detected capacity change from 0 to 1024 [ 90.205224][ T3505] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.266432][ T27] audit: type=1800 audit(1750250374.203:5): pid=6220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.135" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 90.312359][ T6241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.394822][ T3505] usb 1-1: Using ep0 maxpacket: 16 [ 90.406350][ T3505] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.432415][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.444427][ T3505] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 90.473484][ T3505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.504376][ T3505] usb 1-1: config 0 descriptor?? [ 90.541718][ T6220] syz.3.135 (6220) used greatest stack depth: 18096 bytes left [ 90.634517][ T6246] loop2: detected capacity change from 0 to 512 [ 90.657327][ T5768] ocfs2: Unmounting device (7,3) on (node local) [ 90.687370][ T6246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 90.710152][ T6246] System zones: 1-12 [ 90.734719][ T6246] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.142: corrupted in-inode xattr: invalid ea_ino [ 90.779976][ T6246] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.142: couldn't read orphan inode 15 (err -117) [ 90.814219][ T6246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.946421][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.987800][ T3505] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0005/input/input11 [ 91.015808][ T6252] Zero length message leads to an empty skb [ 91.093662][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 91.131641][ T3505] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 91.333131][ T8] usb 1-1: USB disconnect, device number 3 [ 91.518297][ T6265] loop3: detected capacity change from 0 to 64 [ 91.543217][ T6265] hfs: unable to parse mount options [ 91.694210][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 91.863254][ T6255] loop2: detected capacity change from 0 to 32768 [ 91.904198][ T6255] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.144 (6255) [ 91.959978][ T6255] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 91.990732][ T6255] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 92.016750][ T6255] BTRFS info (device loop2): setting nodatacow, compression disabled [ 92.038536][ T6255] BTRFS info (device loop2): force clearing of disk cache [ 92.051292][ T6255] BTRFS info (device loop2): setting datacow [ 92.074526][ T6255] BTRFS info (device loop2): enabling disk space caching [ 92.094657][ T6255] BTRFS info (device loop2): turning on sync discard [ 92.101408][ T6255] BTRFS info (device loop2): disabling disk space caching [ 92.129549][ T6255] BTRFS info (device loop2): turning off discard [ 92.161488][ T6255] BTRFS info (device loop2): use no compression [ 92.286808][ T6255] BTRFS info (device loop2): rebuilding free space tree [ 92.321808][ T6255] BTRFS info (device loop2): disabling free space tree [ 92.328967][ T6255] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.341526][ T6255] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.572681][ T5772] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.078140][ T6306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.085810][ T6306] IPv6: NLM_F_CREATE should be set when creating new route [ 93.095118][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.211808][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 93.284742][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 93.291713][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 93.310974][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.331756][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.354302][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.364942][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.372965][ T9] usb 3-1: Product: syz [ 93.384624][ T9] usb 3-1: Manufacturer: syz [ 93.389404][ T9] usb 3-1: SerialNumber: syz [ 93.804388][ T6319] loop3: detected capacity change from 0 to 1024 [ 93.832964][ T6319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.846858][ T9] usb 3-1: 0:2 : does not exist [ 93.934752][ T5807] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.017936][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.134798][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 94.151583][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.162951][ T5807] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 94.172142][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.192654][ T5807] usb 2-1: config 0 descriptor?? [ 94.462196][ T9] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 94.578207][ T9] usb 3-1: USB disconnect, device number 3 [ 94.609681][ T6329] Bluetooth: MGMT ver 1.22 [ 94.656428][ T5807] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0006/input/input12 [ 94.769762][ T6324] loop3: detected capacity change from 0 to 32768 [ 94.792782][ T5807] appleir 0003:05AC:8241.0006: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 94.857071][ T5807] usb 2-1: USB disconnect, device number 4 [ 94.900931][ T6324] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.023363][ T6324] XFS (loop3): Ending clean mount [ 95.038633][ T6337] fido_id[6337]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 95.166673][ T6343] loop0: detected capacity change from 0 to 512 [ 95.253343][ T5768] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.341101][ T6343] EXT4-fs (loop0): Test dummy encryption mode enabled [ 95.414076][ T6343] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.168: corrupted in-inode xattr: invalid ea_ino [ 95.476145][ T6343] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.168: couldn't read orphan inode 15 (err -117) [ 95.536243][ T6343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.712682][ T6356] loop1: detected capacity change from 0 to 4096 [ 95.819320][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.760737][ T6386] loop3: detected capacity change from 0 to 1024 [ 96.770589][ T6386] ext3: Unknown parameter 'fowner<00000000000000000000' [ 96.805347][ T6388] syz.2.184 uses obsolete (PF_INET,SOCK_PACKET) [ 96.820192][ T6388] warning: `syz.2.184' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.838609][ T5898] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.139711][ T6396] loop0: detected capacity change from 0 to 512 [ 97.217500][ T6396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.253622][ T6404] Invalid ELF header len 8 [ 97.307586][ T6396] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.440665][ T6411] capability: warning: `syz.3.194' uses deprecated v2 capabilities in a way that may be insecure [ 97.501741][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.705805][ T6420] syzkaller1: entered promiscuous mode [ 97.711342][ T6420] syzkaller1: entered allmulticast mode [ 97.939327][ T6430] loop1: detected capacity change from 0 to 2048 [ 97.963838][ T6430] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.413162][ T6442] loop1: detected capacity change from 0 to 512 [ 98.520196][ T6442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 98.545272][ T6442] System zones: 1-12 [ 98.555649][ T6442] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.206: corrupted in-inode xattr: invalid ea_ino [ 98.594147][ T6442] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.206: couldn't read orphan inode 15 (err -117) [ 98.693994][ T6442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.803314][ T6438] loop0: detected capacity change from 0 to 32768 [ 98.838329][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.846512][ T6438] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 98.886951][ T6438] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 98.933803][ T27] audit: type=1800 audit(1750250382.873:6): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.205" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 99.477046][ T5764] ocfs2: Unmounting device (7,0) on (node local) [ 99.630685][ T6455] loop2: detected capacity change from 0 to 32768 [ 99.692890][ T6455] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 99.759150][ T11] (kworker/u4:0,11,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 99.853045][ T27] audit: type=1800 audit(1750250383.783:7): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.212" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 99.908226][ T6455] (syz.2.212,6455,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 99.977441][ T6455] (syz.2.212,6455,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 100.017063][ T6455] (syz.2.212,6455,0):__ocfs2_prepare_orphan_dir:2171 ERROR: status = -2 [ 100.047841][ T6455] (syz.2.212,6455,0):ocfs2_prepare_orphan_dir:2213 ERROR: status = -2 [ 100.067060][ T6455] (syz.2.212,6455,0):ocfs2_prepare_orphan_dir:2229 ERROR: status = -2 [ 100.083730][ T6470] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 100.098326][ T6455] (syz.2.212,6455,0):ocfs2_rename:1466 ERROR: status = -2 [ 100.105908][ T6455] (syz.2.212,6455,0):ocfs2_rename:1690 ERROR: status = -2 [ 100.207525][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 100.353944][ T6479] loop3: detected capacity change from 0 to 256 [ 100.398189][ T6479] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 100.635896][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.224'. [ 100.884159][ T6494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.228'. [ 101.109612][ T6478] loop1: detected capacity change from 0 to 32768 [ 101.139728][ T6478] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 101.230175][ T6478] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 101.361649][ T27] audit: type=1800 audit(1750250385.303:8): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.222" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 101.784518][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 102.854799][ T5807] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.054694][ T5807] usb 1-1: Using ep0 maxpacket: 8 [ 103.061217][ T5807] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 103.069622][ T5807] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.079602][ T5807] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.089451][ T5807] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.100973][ T5807] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.114301][ T5807] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.123518][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.354972][ T5807] usb 1-1: usb_control_msg returned -32 [ 103.360655][ T5807] usbtmc 1-1:16.0: can't read capabilities [ 103.793780][ T6567] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 103.827890][ T5765] usb 1-1: USB disconnect, device number 4 [ 104.360053][ T6571] loop3: detected capacity change from 0 to 32768 [ 104.475687][ T6571] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 104.639255][ T6600] batadv_slave_1: entered allmulticast mode [ 104.648452][ T6599] batadv_slave_1: left allmulticast mode [ 104.732534][ T6602] loop2: detected capacity change from 0 to 128 [ 104.773421][ T6602] FAT-fs (loop2): bogus logical sector size 65535 [ 104.786546][ T6571] XFS (loop3): Ending clean mount [ 104.795154][ T6602] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 104.823491][ T6602] FAT-fs (loop2): Can't find a valid FAT filesystem [ 104.961085][ T6605] overlayfs: failed to resolve './bus': -2 [ 105.042705][ T6607] loop0: detected capacity change from 0 to 1024 [ 105.101425][ T6609] netlink: 404 bytes leftover after parsing attributes in process `syz.2.271'. [ 105.120276][ T6611] loop1: detected capacity change from 0 to 512 [ 105.121617][ T5768] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.196320][ T6611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.234886][ T6611] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.505958][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 105.675939][ T6626] syzkaller1: entered promiscuous mode [ 105.691354][ T5807] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.715125][ T6626] syzkaller1: entered allmulticast mode [ 105.908782][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.932406][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.961275][ T5807] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.998531][ T5807] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.025501][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.056181][ T5807] usb 3-1: config 0 descriptor?? [ 106.331174][ T27] audit: type=1326 audit(1750250390.273:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70478e929 code=0x7ffc0000 [ 106.396307][ T27] audit: type=1326 audit(1750250390.273:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fe70478e929 code=0x7ffc0000 [ 106.433786][ T27] audit: type=1326 audit(1750250390.273:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70478e929 code=0x7ffc0000 [ 106.465603][ T6640] loop3: detected capacity change from 0 to 32768 [ 106.467683][ T27] audit: type=1326 audit(1750250390.273:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70478e929 code=0x7ffc0000 [ 106.494553][ T5142] udevd[5142]: worker [5898] terminated by signal 33 (Unknown signal 33) [ 106.506709][ T6640] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.282 (6640) [ 106.520704][ T5142] udevd[5142]: worker [5898] failed while handling '/devices/virtual/block/loop3' [ 106.528477][ T5807] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 106.546658][ T6640] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 106.558999][ T5807] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 106.572477][ T6640] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 106.585058][ T5807] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 106.592508][ T5807] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 106.601201][ T6640] BTRFS info (device loop3): setting nodatasum [ 106.607943][ T6640] BTRFS info (device loop3): doing ref verification [ 106.615211][ T5807] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 106.624689][ T6640] BTRFS info (device loop3): use zlib compression, level 3 [ 106.634772][ T5807] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 106.646655][ T6640] BTRFS info (device loop3): force clearing of disk cache [ 106.655241][ T5807] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 106.664344][ T6640] BTRFS info (device loop3): doing ref verification [ 106.673651][ T5807] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 106.704052][ T6640] BTRFS info (device loop3): using free space tree [ 106.758313][ T6664] loop0: detected capacity change from 0 to 8 [ 106.792381][ T6640] BTRFS info (device loop3): enabling ssd optimizations [ 106.839010][ T6640] BTRFS info (device loop3): auto enabling async discard [ 106.857579][ T6640] BTRFS info (device loop3): rebuilding free space tree [ 106.869647][ T6664] SQUASHFS error: zlib decompression failed, data probably corrupt [ 106.888934][ T6664] SQUASHFS error: Failed to read block 0x9b: -5 [ 106.902199][ T6664] SQUASHFS error: Unable to read metadata cache entry [99] [ 106.911032][ T6664] SQUASHFS error: Unable to read inode 0x127 [ 107.019610][ T5768] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 107.348534][ T6672] loop0: detected capacity change from 0 to 128 [ 107.396094][ T6672] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.585966][ T2937] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.794454][ T6668] loop1: detected capacity change from 0 to 32768 [ 107.838839][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 107.852391][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 107.857495][ T6680] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.887550][ T6668] JBD2: Ignoring recovery information on journal [ 108.040674][ T6668] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 108.068508][ T27] audit: type=1326 audit(1750250392.013:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.3.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 108.137879][ T27] audit: type=1326 audit(1750250392.013:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.3.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 108.231290][ T27] audit: type=1326 audit(1750250392.013:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.3.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 108.285848][ T27] audit: type=1326 audit(1750250392.013:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.3.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 108.311393][ T27] audit: type=1326 audit(1750250392.013:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.3.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 108.335800][ T27] audit: type=1326 audit(1750250392.013:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.3.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 108.392343][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 108.538208][ T6693] loop0: detected capacity change from 0 to 2048 [ 108.627299][ T6693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.683484][ T9] usb 3-1: USB disconnect, device number 4 [ 108.830133][ T6693] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 108.859544][ T6693] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 108.874250][ T6693] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.874250][ T6693] [ 108.887433][ T6693] EXT4-fs (loop0): Total free blocks count 0 [ 108.893470][ T6693] EXT4-fs (loop0): Free/Dirty block details [ 108.904758][ T6693] EXT4-fs (loop0): free_blocks=2415919504 [ 108.910671][ T6693] EXT4-fs (loop0): dirty_blocks=80 [ 108.920137][ T6693] EXT4-fs (loop0): Block reservation details [ 108.927412][ T6693] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 108.989051][ T6691] loop3: detected capacity change from 0 to 32768 [ 109.002246][ T6691] XFS: ikeep mount option is deprecated. [ 109.032795][ T254] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 109.055402][ T6691] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.224774][ T6691] XFS (loop3): Ending clean mount [ 109.245104][ T6691] XFS (loop3): Quotacheck needed: Please wait. [ 109.303681][ T6691] XFS (loop3): Quotacheck: Done. [ 109.439607][ T5768] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.787236][ T6712] loop2: detected capacity change from 0 to 7 [ 109.797270][ T6712] Dev loop2: unable to read RDB block 7 [ 109.802901][ T6712] loop2: unable to read partition table [ 109.824040][ T6712] loop2: partition table beyond EOD, truncated [ 109.845142][ T6712] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 109.983132][ T6717] loop2: detected capacity change from 0 to 512 [ 110.042730][ T6717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 110.084945][ T6717] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.246398][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 110.812120][ T6733] loop3: detected capacity change from 0 to 4096 [ 110.860810][ T6733] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 111.061044][ T6743] loop2: detected capacity change from 0 to 512 [ 111.116398][ T6743] EXT4-fs error (device loop2): ext4_quota_enable:7129: comm syz.2.313: inode #9652224: comm syz.2.313: iget: illegal inode # [ 111.158993][ T6743] EXT4-fs (loop2): Remounting filesystem read-only [ 111.215254][ T6743] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=2, err=-117, ino=9652224). Please run e2fsck to fix. [ 111.255482][ T6743] EXT4-fs (loop2): mount failed [ 111.435593][ T6743] loop2: detected capacity change from 0 to 128 [ 111.469772][ T6743] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.930789][ T6741] loop0: detected capacity change from 0 to 32768 [ 111.971718][ T6741] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.314 (6741) [ 112.113504][ T6741] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.142574][ T6741] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 112.180486][ T6741] BTRFS info (device loop0): force clearing of disk cache [ 112.214237][ T6741] BTRFS info (device loop0): enabling auto defrag [ 112.238989][ T6741] BTRFS info (device loop0): max_inline at 0 [ 112.254957][ T6741] BTRFS info (device loop0): enabling disk space caching [ 112.272233][ T6741] BTRFS info (device loop0): disk space caching is enabled [ 112.404869][ T6741] BTRFS info (device loop0): enabling ssd optimizations [ 112.443960][ T6741] BTRFS info (device loop0): rebuilding free space tree [ 112.527954][ T6741] BTRFS info (device loop0): disabling free space tree [ 112.554925][ T6741] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.576320][ T6781] loop2: detected capacity change from 0 to 2048 [ 112.582881][ T6741] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.619671][ T6757] loop1: detected capacity change from 0 to 32768 [ 112.638454][ T6781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.665158][ T5807] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.681024][ T6757] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 112.822719][ T6757] XFS (loop1): Ending clean mount [ 112.875813][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 112.907264][ T5807] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 112.908238][ T5764] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.924255][ T5807] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.956429][ T5807] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.982578][ T5807] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.014715][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.022767][ T5807] usb 4-1: Product: syz [ 113.037048][ T5807] usb 4-1: Manufacturer: syz [ 113.041920][ T5807] usb 4-1: SerialNumber: syz [ 113.178834][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 113.178848][ T27] audit: type=1326 audit(1750250397.123:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.324" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd76cd8e929 code=0x0 [ 113.222014][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.360016][ T6797] netlink: 176 bytes leftover after parsing attributes in process `syz.0.323'. [ 113.494066][ T5807] usb 4-1: 0:2 : does not exist [ 113.641550][ T6801] loop1: detected capacity change from 0 to 512 [ 113.689421][ T6801] EXT4-fs error (device loop1): ext4_quota_enable:7129: comm syz.1.327: inode #9652224: comm syz.1.327: iget: illegal inode # [ 113.709930][ T6801] EXT4-fs (loop1): Remounting filesystem read-only [ 113.719125][ T6801] EXT4-fs warning (device loop1): ext4_enable_quotas:7173: Failed to enable quota tracking (type=2, err=-117, ino=9652224). Please run e2fsck to fix. [ 113.739857][ T6801] EXT4-fs (loop1): mount failed [ 113.861618][ T6801] loop1: detected capacity change from 0 to 128 [ 113.879628][ T6801] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.121405][ T6799] loop0: detected capacity change from 0 to 40427 [ 114.125841][ T5807] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 114.134467][ T6799] F2FS-fs (loop0): heap/no_heap options were deprecated [ 114.189789][ T5807] usb 4-1: USB disconnect, device number 5 [ 114.436024][ T27] audit: type=1326 audit(1750250398.373:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052278e929 code=0x7ffc0000 [ 114.493321][ T27] audit: type=1326 audit(1750250398.373:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052278e929 code=0x7ffc0000 [ 114.565478][ T27] audit: type=1326 audit(1750250398.383:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f052278e929 code=0x7ffc0000 [ 114.627382][ T27] audit: type=1326 audit(1750250398.383:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052278e929 code=0x7ffc0000 [ 114.655678][ T27] audit: type=1326 audit(1750250398.383:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052278e929 code=0x7ffc0000 [ 114.703912][ T27] audit: type=1326 audit(1750250398.393:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f052278e929 code=0x7ffc0000 [ 114.758399][ T27] audit: type=1326 audit(1750250398.413:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052278e929 code=0x7ffc0000 [ 114.800337][ T27] audit: type=1326 audit(1750250398.423:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052278e929 code=0x7ffc0000 [ 114.845486][ T27] audit: type=1326 audit(1750250398.453:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f052278e929 code=0x7ffc0000 [ 114.898844][ T6825] loop1: detected capacity change from 0 to 256 [ 114.918389][ T6825] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.949551][ T6825] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 115.003712][ T6825] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 115.110391][ T6831] netlink: 'syz.2.341': attribute type 39 has an invalid length. [ 115.536014][ T6846] capability: warning: `syz.1.348' uses 32-bit capabilities (legacy support in use) [ 115.571168][ T6846] loop1: detected capacity change from 0 to 2048 [ 115.688372][ T6848] batadv0: entered promiscuous mode [ 115.717069][ T6848] batadv0: left promiscuous mode [ 115.881061][ T6852] loop2: detected capacity change from 0 to 64 [ 116.256629][ T6863] netlink: 'syz.0.356': attribute type 39 has an invalid length. [ 117.154768][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 117.154855][ T5770] Bluetooth: hci4: command 0x1003 tx timeout [ 117.197819][ T6878] loop2: detected capacity change from 0 to 32768 [ 117.269619][ T6878] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 117.456668][ T6882] loop0: detected capacity change from 0 to 32768 [ 117.523967][ T6882] JBD2: Ignoring recovery information on journal [ 117.593270][ T6878] XFS (loop2): Starting recovery (logdev: internal) [ 117.667469][ T6882] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 117.693036][ T6878] XFS (loop2): Ending recovery (logdev: internal) [ 117.944544][ T5764] ocfs2: Unmounting device (7,0) on (node local) [ 118.036719][ T6898] loop1: detected capacity change from 0 to 4096 [ 118.048647][ T6900] syzkaller1: entered promiscuous mode [ 118.054179][ T6900] syzkaller1: entered allmulticast mode [ 118.066608][ T5772] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 118.431745][ T6903] loop0: detected capacity change from 0 to 512 [ 118.484842][ T6903] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.528158][ T6903] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.602854][ T6903] EXT4-fs (loop0): 1 truncate cleaned up [ 118.627950][ T6908] loop1: detected capacity change from 0 to 1764 [ 118.647380][ T6903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.771300][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 118.771315][ T27] audit: type=1800 audit(1750250402.703:40): pid=6903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.369" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 118.800751][ T6903] EXT4-fs error (device loop0): mb_free_blocks:1943: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 118.940324][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.943096][ T6919] loop1: detected capacity change from 0 to 256 [ 119.452125][ T6938] loop0: detected capacity change from 0 to 2048 [ 119.466948][ T6938] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.499500][ T6938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.534521][ T6938] EXT4-fs error (device loop0): ext4_read_inline_dir:1565: inode #12: block 9: comm syz.0.383: path /106/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 119.565898][ T6938] EXT4-fs (loop0): Remounting filesystem read-only [ 119.595431][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.220563][ T6959] netlink: 'syz.3.392': attribute type 39 has an invalid length. [ 120.300389][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'. [ 120.631236][ T6976] loop2: detected capacity change from 0 to 512 [ 120.658370][ T6976] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.398: casefold flag without casefold feature [ 120.689971][ T2937] Bluetooth: hci4: Frame reassembly failed (-84) [ 120.694373][ T6976] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.398: couldn't read orphan inode 15 (err -117) [ 120.721678][ T2937] Bluetooth: hci4: Frame reassembly failed (-90) [ 120.739418][ T6976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.757676][ T6975] Bluetooth: hci4: Frame reassembly failed (-84) [ 120.907231][ T6976] EXT4-fs (loop2): shut down requested (0) [ 121.027597][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.679212][ T6999] loop0: detected capacity change from 0 to 32768 [ 121.688170][ T6999] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.408 (6999) [ 121.723047][ T6999] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.733842][ T6999] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 121.742636][ T6999] BTRFS info (device loop0): using free space tree [ 121.784311][ T6999] BTRFS info (device loop0): enabling ssd optimizations [ 121.791585][ T6999] BTRFS info (device loop0): auto enabling async discard [ 122.003879][ T5764] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.143227][ T5759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5759) [ 122.506127][ T7035] loop1: detected capacity change from 0 to 2048 [ 122.606493][ T7040] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.759688][ T5774] Bluetooth: hci4: command 0x1003 tx timeout [ 122.767804][ T5776] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 122.953102][ T7048] loop0: detected capacity change from 0 to 4096 [ 123.235795][ T7055] netlink: 'syz.3.425': attribute type 27 has an invalid length. [ 123.369062][ T7052] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 123.492102][ T7048] overlayfs: upper fs does not support tmpfile. [ 123.504189][ T7048] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 123.918078][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.927557][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.094812][ T5806] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.203417][ T7043] loop2: detected capacity change from 0 to 65536 [ 124.237205][ T7043] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 124.289821][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.308564][ T7043] XFS (loop2): Ending clean mount [ 124.324490][ T7043] XFS (loop2): Quotacheck needed: Please wait. [ 124.327189][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.374437][ T7043] XFS (loop2): Quotacheck: Done. [ 124.384755][ T5806] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.417117][ T5806] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.440081][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.459926][ T5806] usb 2-1: config 0 descriptor?? [ 124.499074][ T5772] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 124.676450][ T7055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.747058][ T7055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.892428][ T5806] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 124.936069][ T5806] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 125.109578][ T7055] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.136797][ T7055] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.147326][ T7055] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.156521][ T7055] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.219960][ T5806] usb 2-1: USB disconnect, device number 5 [ 125.922629][ T7100] batadv0: entered promiscuous mode [ 125.930492][ T7100] batadv_slave_1: entered promiscuous mode [ 125.942247][ T7099] batadv_slave_1: left promiscuous mode [ 125.950339][ T7099] batadv0: left promiscuous mode [ 126.004706][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.145665][ T7105] loop0: detected capacity change from 0 to 512 [ 126.193996][ T7105] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.438: casefold flag without casefold feature [ 126.266604][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.284287][ T7105] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.438: couldn't read orphan inode 15 (err -117) [ 126.284636][ T8] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 126.321838][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.332318][ T8] usb 3-1: config 0 descriptor?? [ 126.362501][ T7105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.410194][ T27] audit: type=1800 audit(1750250410.353:41): pid=7105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.438" name="file2" dev="loop0" ino=18 res=0 errno=0 [ 126.603163][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.797292][ T8] uclogic 0003:5543:0003.0009: unknown main item tag 0x0 [ 126.804402][ T8] uclogic 0003:5543:0003.0009: item fetching failed at offset 1/5 [ 126.835916][ T8] uclogic 0003:5543:0003.0009: parse failed [ 126.842114][ T8] uclogic: probe of 0003:5543:0003.0009 failed with error -22 [ 127.146693][ T8] usb 3-1: USB disconnect, device number 5 [ 127.210485][ T7132] netlink: 'syz.3.445': attribute type 2 has an invalid length. [ 127.252270][ T7135] loop1: detected capacity change from 0 to 8 [ 127.321328][ T7135] SQUASHFS error: lzo decompression failed, data probably corrupt [ 127.379001][ T7135] SQUASHFS error: Failed to read block 0x0: -5 [ 127.426621][ T7135] SQUASHFS error: lzo decompression failed, data probably corrupt [ 127.475744][ T7135] SQUASHFS error: Failed to read block 0x0: -5 [ 127.513604][ T27] audit: type=1800 audit(1750250411.453:42): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.446" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 127.533682][ T7143] loop0: detected capacity change from 0 to 256 [ 128.355859][ T7164] syz.3.454 (7164) used greatest stack depth: 17960 bytes left [ 128.720895][ T7186] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 128.961330][ T7173] loop1: detected capacity change from 0 to 32768 [ 129.000385][ T7173] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.087330][ T7173] XFS (loop1): Ending clean mount [ 129.109654][ T7173] XFS (loop1): Quotacheck needed: Please wait. [ 129.221865][ T7173] XFS (loop1): Quotacheck: Done. [ 129.455580][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.704642][ T27] audit: type=1326 audit(1750250413.633:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 129.784651][ T27] audit: type=1326 audit(1750250413.633:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 129.820259][ T7203] loop2: detected capacity change from 0 to 32768 [ 129.839297][ T27] audit: type=1326 audit(1750250413.633:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 129.896843][ T27] audit: type=1326 audit(1750250413.633:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 129.906947][ T7212] loop3: detected capacity change from 0 to 1024 [ 129.947134][ T27] audit: type=1326 audit(1750250413.633:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 129.975977][ T27] audit: type=1326 audit(1750250413.633:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 129.985227][ T7203] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.056665][ T27] audit: type=1326 audit(1750250413.633:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 130.079720][ T27] audit: type=1326 audit(1750250413.633:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 130.276448][ T7203] XFS (loop2): Ending clean mount [ 130.299782][ T7203] XFS (loop2): Quotacheck needed: Please wait. [ 130.362886][ T7203] XFS (loop2): Quotacheck: Done. [ 130.485539][ T3505] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.574190][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.583340][ T7235] loop1: detected capacity change from 0 to 128 [ 130.622509][ T7235] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.651002][ T7235] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.689603][ T3505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.750940][ T3505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.771014][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.799089][ T3505] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.836068][ T3505] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.883719][ T3505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.910055][ T3505] usb 4-1: config 0 descriptor?? [ 131.195539][ T7249] loop1: detected capacity change from 0 to 512 [ 131.207735][ T7249] EXT4-fs: Ignoring removed bh option [ 131.213176][ T7249] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.232682][ T7249] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 131.247067][ T7249] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 131.285815][ T7249] EXT4-fs (loop1): orphan cleanup on readonly fs [ 131.327027][ T7249] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.482: Failed to acquire dquot type 1 [ 131.362385][ T3505] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 131.384163][ T7249] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.482: Invalid block bitmap block 0 in block_group 0 [ 131.414026][ T3505] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 131.415174][ T7249] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.482: Invalid block bitmap block 0 in block_group 0 [ 131.480186][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'. [ 131.489116][ T7249] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.482: Invalid block bitmap block 0 in block_group 0 [ 131.492284][ T7249] __quota_error: 8 callbacks suppressed [ 131.492298][ T7249] Quota error (device loop1): write_blk: dquota write failed [ 131.505416][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 131.533417][ T7257] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.533503][ T7249] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 131.533539][ T7249] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.482: Failed to acquire dquot type 1 [ 131.565283][ T7257] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.574020][ T7257] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.583269][ T7257] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.600511][ T7249] Quota error (device loop1): write_blk: dquota write failed [ 131.612353][ T7249] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 131.624515][ T7249] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.482: Failed to acquire dquot type 1 [ 131.650091][ T7249] EXT4-fs (loop1): 1 orphan inode deleted [ 131.677023][ T3505] usb 4-1: USB disconnect, device number 6 [ 131.726670][ T7249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.827842][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.960524][ T7262] pim6reg1: entered allmulticast mode [ 132.182967][ T7268] loop0: detected capacity change from 0 to 256 [ 132.234707][ T27] audit: type=1800 audit(1750250416.173:57): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.490" name="file1" dev="loop0" ino=1048604 res=0 errno=0 [ 132.258001][ T7270] loop1: detected capacity change from 0 to 8 [ 132.264971][ T7268] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 132.307462][ T7270] SQUASHFS error: zlib decompression failed, data probably corrupt [ 132.325202][ T7270] SQUASHFS error: Failed to read block 0x9b: -5 [ 132.350727][ T7270] SQUASHFS error: Unable to read metadata cache entry [99] [ 132.379973][ T7270] SQUASHFS error: Unable to read inode 0x127 [ 132.505808][ T7276] loop0: detected capacity change from 0 to 256 [ 132.664141][ T9] IPVS: starting estimator thread 0... [ 132.765841][ T7279] IPVS: using max 17 ests per chain, 40800 per kthread [ 132.889320][ T7289] loop3: detected capacity change from 0 to 256 [ 132.958779][ T7284] xt_bpf: check failed: parse error [ 133.009415][ T7288] loop1: detected capacity change from 0 to 8192 [ 133.046839][ T7288] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.090318][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.104445][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.115149][ T7288] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 133.186124][ T7288] REISERFS (device loop1): using ordered data mode [ 133.192767][ T7288] reiserfs: using flush barriers [ 133.261517][ T7288] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.275740][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 133.325750][ T7288] REISERFS (device loop1): checking transaction log (loop1) [ 133.509277][ T7288] REISERFS (device loop1): Using tea hash to sort names [ 133.519206][ T7286] loop0: detected capacity change from 0 to 32768 [ 133.521985][ T7288] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 133.540781][ T28] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.577799][ T7286] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 133.605640][ T7286] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 133.695981][ T7286] XFS (loop0): Ending clean mount [ 133.719302][ T7286] XFS (loop0): Quotacheck needed: Please wait. [ 133.731785][ T7288] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 133.748086][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.777382][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.797071][ T5808] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 133.815938][ T28] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.829065][ T5808] XFS (loop0): Unmount and run xfs_repair [ 133.839728][ T5808] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 133.849460][ T28] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.862893][ T5808] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 133.872110][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.882737][ T5808] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 133.901037][ T5808] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 133.913708][ T28] usb 3-1: config 0 descriptor?? [ 133.919086][ T5808] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 133.928370][ T5808] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 133.940057][ T5808] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 133.951964][ T5808] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 133.967558][ T5808] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 133.980124][ T3004] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74 [ 134.014920][ T7286] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 134.073043][ T7311] loop3: detected capacity change from 0 to 256 [ 134.140269][ T7286] XFS (loop0): User initiated shutdown received. [ 134.191871][ T7286] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 134.213013][ T7286] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 134.352287][ T5764] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 134.362281][ T7318] loop3: detected capacity change from 0 to 2048 [ 134.400731][ T28] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 134.446767][ T28] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 134.451287][ T7318] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.564946][ T27] audit: type=1800 audit(1750250418.503:58): pid=7318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.509" name="file1" dev="loop3" ino=1335 res=0 errno=0 [ 134.757049][ T28] usb 3-1: USB disconnect, device number 6 [ 135.069142][ T7317] loop1: detected capacity change from 0 to 40427 [ 135.119723][ T7317] F2FS-fs (loop1): invalid crc value [ 135.147962][ T7317] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.211641][ T7331] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 135.236766][ T7330] IPVS: stopping master sync thread 7331 ... [ 135.252878][ T7317] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.468212][ T7335] loop8: detected capacity change from 0 to 7 [ 135.478017][ T5759] Dev loop8: unable to read RDB block 7 [ 135.483637][ T5759] loop8: unable to read partition table [ 135.495812][ T5759] loop8: partition table beyond EOD, truncated [ 135.502706][ T7337] loop2: detected capacity change from 0 to 512 [ 135.509571][ T7335] Dev loop8: unable to read RDB block 7 [ 135.515751][ T7337] EXT4-fs: Ignoring removed bh option [ 135.519266][ T7335] loop8: unable to read partition table [ 135.524760][ T7337] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.536079][ T7335] loop8: partition table beyond EOD, truncated [ 135.542400][ T7335] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 135.568307][ T7337] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 135.626582][ T7337] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 135.662783][ T7337] EXT4-fs (loop2): orphan cleanup on readonly fs [ 135.728615][ T7337] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 135.761324][ T7337] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 135.773863][ T7337] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.516: Failed to acquire dquot type 1 [ 135.795107][ T7337] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.516: Invalid block bitmap block 0 in block_group 0 [ 135.825922][ T7337] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.516: Invalid block bitmap block 0 in block_group 0 [ 135.856593][ T7337] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.516: Invalid block bitmap block 0 in block_group 0 [ 135.873696][ T7337] Quota error (device loop2): write_blk: dquota write failed [ 135.887014][ T7337] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 135.898239][ T7337] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.516: Failed to acquire dquot type 1 [ 135.907186][ T7333] syz.1.510: attempt to access beyond end of device [ 135.907186][ T7333] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.916938][ T7337] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.516: Failed to acquire dquot type 1 [ 135.927101][ T7333] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 135.939401][ T7337] EXT4-fs (loop2): 1 orphan inode deleted [ 135.954912][ T7337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.054512][ T7349] loop0: detected capacity change from 0 to 1024 [ 136.131412][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.153148][ T7349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.182834][ T7349] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.343698][ T7349] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 136.506433][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.734529][ T7364] loop1: detected capacity change from 0 to 256 [ 136.978037][ T7369] loop2: detected capacity change from 0 to 128 [ 137.009387][ T7369] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 138.159549][ T7403] loop2: detected capacity change from 0 to 256 [ 138.192192][ T7404] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 138.260077][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 139.281018][ T7438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.557'. [ 139.372026][ T7417] loop0: detected capacity change from 0 to 32768 [ 139.405050][ T7417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.548 (7417) [ 139.464738][ T7417] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.505781][ T7417] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 139.527552][ T7417] BTRFS info (device loop0): force clearing of disk cache [ 139.550851][ T7417] BTRFS info (device loop0): metadata ratio 0 [ 139.575120][ T7417] BTRFS info (device loop0): enabling ssd optimizations [ 139.602456][ T7417] BTRFS info (device loop0): using spread ssd allocation scheme [ 139.633607][ T7417] BTRFS info (device loop0): using free space tree [ 139.877966][ T7417] BTRFS info (device loop0): auto enabling async discard [ 139.923452][ T7417] BTRFS info (device loop0): rebuilding free space tree [ 140.062059][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.565'. [ 140.085636][ T7471] tipc: Started in network mode [ 140.090585][ T7471] tipc: Node identity 1, cluster identity 4711 [ 140.115838][ T7471] tipc: Node number set to 1 [ 140.396122][ T7454] loop1: detected capacity change from 0 to 32768 [ 140.426712][ T7454] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.562 (7454) [ 140.497735][ T7454] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.514155][ T5764] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.525834][ T7454] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 140.538743][ T7454] BTRFS info (device loop1): doing ref verification [ 140.563615][ T7454] BTRFS info (device loop1): turning on async discard [ 140.572386][ T7454] BTRFS info (device loop1): force clearing of disk cache [ 140.601888][ T7454] BTRFS info (device loop1): doing ref verification [ 140.663583][ T7454] BTRFS info (device loop1): disabling free space tree [ 140.703484][ T7454] BTRFS info (device loop1): max_inline at 4096 [ 140.978381][ T7454] BTRFS info (device loop1): rebuilding free space tree [ 141.068435][ T7454] BTRFS info (device loop1): disabling free space tree [ 141.101236][ T7454] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.142320][ T7479] loop3: detected capacity change from 0 to 32768 [ 141.144700][ T7454] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.208122][ T7479] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 141.471700][ T5768] ocfs2: Unmounting device (7,3) on (node local) [ 141.592048][ T5773] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.628687][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.576'. [ 141.648943][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.576'. [ 142.085958][ T7524] loop0: detected capacity change from 0 to 2048 [ 142.185905][ T7524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.340063][ T7524] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 142.389374][ T7524] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 142.425404][ T7524] EXT4-fs (loop0): This should not happen!! Data will be lost [ 142.425404][ T7524] [ 142.457709][ T7524] EXT4-fs (loop0): Total free blocks count 0 [ 142.480274][ T7524] EXT4-fs (loop0): Free/Dirty block details [ 142.494734][ T7524] EXT4-fs (loop0): free_blocks=2415919504 [ 142.500526][ T7524] EXT4-fs (loop0): dirty_blocks=32 [ 142.510995][ T7524] EXT4-fs (loop0): Block reservation details [ 142.519313][ T7524] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 142.619989][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.008557][ T7559] loop1: detected capacity change from 0 to 2048 [ 143.032301][ T7559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.081541][ T7557] loop3: detected capacity change from 0 to 4096 [ 143.136203][ T7557] ntfs3: loop3: It is recommened to use chkdsk. [ 143.162738][ T7557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 143.173262][ T7557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 143.208511][ T7557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 143.244369][ T7557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 143.267762][ T7557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 143.324871][ T7557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 143.332773][ T7557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 143.363274][ T7557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 143.389537][ T7557] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 143.408155][ T5773] UDF-fs: error (device loop1): udf_read_inode: (ino 1329) failed !bh [ 143.417186][ T7569] loop2: detected capacity change from 0 to 512 [ 143.450900][ T5773] UDF-fs: error (device loop1): udf_read_inode: (ino 1329) failed !bh [ 143.466992][ T7569] EXT4-fs: Ignoring removed bh option [ 143.546033][ T7569] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 143.641220][ T7569] EXT4-fs (loop2): 1 truncate cleaned up [ 143.695393][ T7569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.983076][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.039141][ T7577] loop0: detected capacity change from 0 to 4096 [ 144.110738][ T7577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.240527][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 144.253346][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 144.253360][ T27] audit: type=1800 audit(1750250428.193:59): pid=7577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.602" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 144.309248][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.479152][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.492515][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.632312][ T7591] input: syz1 as /devices/virtual/input/input16 [ 144.688528][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.879934][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.957623][ T7601] netlink: 'syz.0.610': attribute type 16 has an invalid length. [ 144.974686][ T7601] netlink: 'syz.0.610': attribute type 3 has an invalid length. [ 145.014732][ T7601] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.610'. [ 145.272550][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.277636][ T7613] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.297159][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.307522][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.318871][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.333945][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.342998][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.727552][ T27] audit: type=1326 audit(1750250429.663:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.3.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a278e929 code=0x7fc00000 [ 145.847429][ T7620] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 146.524424][ T7609] chnl_net:caif_netlink_parms(): no params data found [ 146.631807][ T7638] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 146.842713][ T7609] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.857210][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.866951][ T7609] bridge_slave_0: entered allmulticast mode [ 146.874272][ T7609] bridge_slave_0: entered promiscuous mode [ 146.907857][ T7609] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.915374][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.923129][ T7609] bridge_slave_1: entered allmulticast mode [ 146.931378][ T7609] bridge_slave_1: entered promiscuous mode [ 147.027034][ T7609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.041283][ T7609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.169275][ T7609] team0: Port device team_slave_0 added [ 147.179950][ T7609] team0: Port device team_slave_1 added [ 147.333727][ T48] hsr_slave_0: left promiscuous mode [ 147.394760][ T5774] Bluetooth: hci2: command tx timeout [ 147.402657][ T48] hsr_slave_1: left promiscuous mode [ 147.429514][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.453409][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.498239][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.514724][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.545302][ T48] bridge_slave_1: left allmulticast mode [ 147.551022][ T48] bridge_slave_1: left promiscuous mode [ 147.578386][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.613673][ T48] bridge_slave_0: left allmulticast mode [ 147.621986][ T48] bridge_slave_0: left promiscuous mode [ 147.637944][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.757296][ T48] veth1_macvtap: left promiscuous mode [ 147.765163][ T48] veth0_macvtap: left promiscuous mode [ 147.787071][ T7655] loop3: detected capacity change from 0 to 512 [ 147.794282][ T7655] EXT4-fs: Ignoring removed bh option [ 147.804307][ T48] veth1_vlan: left promiscuous mode [ 147.816497][ T48] veth0_vlan: left promiscuous mode [ 147.867917][ T7655] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 147.925271][ T7655] EXT4-fs (loop3): 1 truncate cleaned up [ 147.936270][ T7647] loop2: detected capacity change from 0 to 32768 [ 147.961558][ T7655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.997304][ T7647] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.089264][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.203836][ T7647] XFS (loop2): Ending clean mount [ 148.258362][ T7647] XFS (loop2): Quotacheck needed: Please wait. [ 148.336922][ T7647] XFS (loop2): Quotacheck: Done. [ 148.413810][ T27] audit: type=1800 audit(1750250432.353:61): pid=7647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.626" name="bus" dev="loop2" ino=9291 res=0 errno=0 [ 148.483835][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.001257][ T48] team0 (unregistering): Port device team_slave_1 removed [ 149.049589][ T48] team0 (unregistering): Port device team_slave_0 removed [ 149.098708][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.147113][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.477525][ T5774] Bluetooth: hci2: command tx timeout [ 149.657428][ T48] bond0 (unregistering): Released all slaves [ 149.766868][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.774010][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.801301][ T7609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.835566][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.842557][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.918681][ T7609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.072503][ T27] audit: type=1326 audit(1750250434.013:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70478e929 code=0x7ffc0000 [ 150.101511][ T27] audit: type=1326 audit(1750250434.013:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70478e929 code=0x7ffc0000 [ 150.123640][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.153570][ T27] audit: type=1326 audit(1750250434.043:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe70478e929 code=0x7ffc0000 [ 150.163522][ T7683] loop3: detected capacity change from 0 to 512 [ 150.175695][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.176879][ T27] audit: type=1326 audit(1750250434.043:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70478e929 code=0x7ffc0000 [ 150.183697][ T7609] hsr_slave_0: entered promiscuous mode [ 150.188741][ T27] audit: type=1326 audit(1750250434.043:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70478e929 code=0x7ffc0000 [ 150.260915][ T27] audit: type=1326 audit(1750250434.073:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 150.285626][ T7683] EXT4-fs (loop3): orphan cleanup on readonly fs [ 150.292669][ T27] audit: type=1326 audit(1750250434.073:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 150.318853][ T7683] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.639: bg 0: block 248: padding at end of block bitmap is not set [ 150.321719][ T7609] hsr_slave_1: entered promiscuous mode [ 150.336126][ T7683] Quota error (device loop3): write_blk: dquota write failed [ 150.346897][ T7683] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 150.357128][ T7683] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.639: Failed to acquire dquot type 1 [ 150.369689][ T7609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.385277][ T27] audit: type=1326 audit(1750250434.073:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f75a278e929 code=0x7ffc0000 [ 150.392712][ T7683] EXT4-fs (loop3): 1 truncate cleaned up [ 150.407366][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.432222][ T7609] Cannot create hsr debugfs directory [ 150.467512][ T7683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.641664][ T7677] loop2: detected capacity change from 0 to 40427 [ 150.680702][ T7677] F2FS-fs (loop2): invalid crc value [ 150.699995][ T7677] F2FS-fs (loop2): Found nat_bits in checkpoint [ 150.723984][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.872710][ T7677] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 150.952497][ T7690] loop3: detected capacity change from 0 to 256 [ 151.009180][ T7690] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 151.092020][ T7609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.130761][ T7609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.201682][ T7609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.220922][ T7609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.542306][ T7693] syz.2.636: attempt to access beyond end of device [ 151.542306][ T7693] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.545882][ T7609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.560357][ T5774] Bluetooth: hci2: command tx timeout [ 151.592834][ T7693] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 151.644417][ T7609] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.769316][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.776518][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.807136][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.814284][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.999831][ T7695] loop3: detected capacity change from 0 to 32768 [ 152.090209][ T7695] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 152.418596][ T7609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.565063][ T5768] ocfs2: Unmounting device (7,3) on (node local) [ 152.625952][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 152.657320][ T7710] bridge_slave_1: left allmulticast mode [ 152.663179][ T7710] bridge_slave_1: left promiscuous mode [ 152.696603][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.740362][ T7710] bridge_slave_0: left allmulticast mode [ 152.757562][ T7710] bridge_slave_0: left promiscuous mode [ 152.763334][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.900287][ T7714] loop3: detected capacity change from 0 to 512 [ 152.941060][ T7714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.064381][ T7714] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.106305][ T7700] loop0: detected capacity change from 0 to 32768 [ 153.219177][ T7700] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.263981][ T7714] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.646: invalid size [ 153.290503][ T7609] veth0_vlan: entered promiscuous mode [ 153.345425][ T7714] EXT4-fs (loop3): Remounting filesystem read-only [ 153.356441][ T7609] veth1_vlan: entered promiscuous mode [ 153.411740][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.449016][ T2960] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 153.501542][ T7609] veth0_macvtap: entered promiscuous mode [ 153.553749][ T7609] veth1_macvtap: entered promiscuous mode [ 153.626065][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.637899][ T5774] Bluetooth: hci2: command tx timeout [ 153.679152][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.704871][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.754472][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.788655][ T7609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.833098][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.858600][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.878927][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.900007][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.911781][ T7609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.935519][ T7700] XFS (loop0): Ending clean mount [ 153.936899][ T7609] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.975011][ T7609] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.983754][ T7609] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.003297][ T7700] XFS (loop0): Quotacheck needed: Please wait. [ 154.004422][ T7609] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.109252][ T7700] XFS (loop0): Quotacheck: Done. [ 154.240391][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.271996][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.352152][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.370973][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.574159][ T5764] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.799983][ T7754] loop4: detected capacity change from 0 to 2048 [ 154.886602][ T7754] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.088285][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 155.088299][ T27] audit: type=1326 audit(1750250439.033:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76cd8e929 code=0x7ffc0000 [ 155.164817][ T27] audit: type=1326 audit(1750250439.063:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76cd8e929 code=0x7ffc0000 [ 155.180277][ T7760] macvlan1: entered promiscuous mode [ 155.210631][ T7760] ipvlan0: entered promiscuous mode [ 155.233112][ T27] audit: type=1326 audit(1750250439.133:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd76cd8e929 code=0x7ffc0000 [ 155.236594][ T7760] ipvlan0: left promiscuous mode [ 155.312300][ T27] audit: type=1326 audit(1750250439.133:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76cd8e929 code=0x7ffc0000 [ 155.344504][ T27] audit: type=1326 audit(1750250439.133:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76cd8e929 code=0x7ffc0000 [ 155.344629][ T7760] macvlan1: left promiscuous mode [ 155.372084][ T27] audit: type=1326 audit(1750250439.143:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd76cd8e929 code=0x7ffc0000 [ 155.451788][ T27] audit: type=1326 audit(1750250439.143:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76cd8e929 code=0x7ffc0000 [ 155.480341][ T27] audit: type=1326 audit(1750250439.143:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76cd8e929 code=0x7ffc0000 [ 155.512015][ T27] audit: type=1326 audit(1750250439.143:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd76cd8e929 code=0x7ffc0000 [ 155.553580][ T27] audit: type=1326 audit(1750250439.143:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76cd8e929 code=0x7ffc0000 [ 155.742057][ T7773] loop4: detected capacity change from 0 to 1024 [ 155.795793][ T7773] EXT4-fs: Ignoring removed orlov option [ 155.806055][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 155.843269][ T7773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.399864][ T7793] loop3: detected capacity change from 0 to 512 [ 156.453321][ T7793] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.488269][ T7793] EXT4-fs (loop3): 1 truncate cleaned up [ 156.513420][ T7795] loop2: detected capacity change from 0 to 2048 [ 156.520858][ T7793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.577430][ T7795] loop2: p1 < > p3 [ 156.590678][ T7795] loop2: p3 size 134217728 extends beyond EOD, truncated [ 156.730522][ T7609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.842283][ T7784] loop0: detected capacity change from 0 to 32768 [ 156.933225][ T7784] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.967247][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.131344][ T7812] loop3: detected capacity change from 0 to 256 [ 157.185839][ T7784] XFS (loop0): Ending clean mount [ 157.203968][ T7784] XFS (loop0): Quotacheck needed: Please wait. [ 157.271971][ T7812] FAT-fs (loop3): Directory bread(block 64) failed [ 157.293080][ T7784] XFS (loop0): Quotacheck: Done. [ 157.306299][ T7812] FAT-fs (loop3): Directory bread(block 65) failed [ 157.328570][ T7812] FAT-fs (loop3): Directory bread(block 66) failed [ 157.351236][ T7812] FAT-fs (loop3): Directory bread(block 67) failed [ 157.371824][ T7812] FAT-fs (loop3): Directory bread(block 68) failed [ 157.382502][ T7812] FAT-fs (loop3): Directory bread(block 69) failed [ 157.413846][ T7812] FAT-fs (loop3): Directory bread(block 70) failed [ 157.454058][ T7812] FAT-fs (loop3): Directory bread(block 71) failed [ 157.464345][ T7812] FAT-fs (loop3): Directory bread(block 72) failed [ 157.481554][ T5764] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.490798][ T7812] FAT-fs (loop3): Directory bread(block 73) failed [ 157.571472][ T7805] loop4: detected capacity change from 0 to 32768 [ 158.144864][ T5807] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 158.180360][ T7832] loop3: detected capacity change from 0 to 16 [ 158.212995][ T7832] erofs: (device loop3): mounted with root inode @ nid 36. [ 158.260713][ T7832] overlayfs: upper fs does not support file handles, falling back to index=off. [ 158.263079][ T7834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.281584][ T7832] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 158.333763][ T5807] usb 3-1: unable to get BOS descriptor or descriptor too short [ 158.351363][ T5807] usb 3-1: config 174 has an invalid interface number: 178 but max is 0 [ 158.363170][ T5807] usb 3-1: config 174 has an invalid descriptor of length 0, skipping remainder of the config [ 158.376379][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.688'. [ 158.378537][ T5807] usb 3-1: config 174 has no interface number 0 [ 158.392289][ T5807] usb 3-1: config 174 interface 178 has no altsetting 0 [ 158.413550][ T5807] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.ae [ 158.423758][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.432015][ T5807] usb 3-1: Product: syz [ 158.436488][ T5807] usb 3-1: Manufacturer: syz [ 158.441082][ T5807] usb 3-1: SerialNumber: syz [ 158.743796][ T5807] usb 3-1: bad CDC descriptors [ 158.763209][ T5807] usb 3-1: unsupported MDLM descriptors [ 158.794911][ T5807] usb 3-1: USB disconnect, device number 7 [ 159.081391][ T7851] loop3: detected capacity change from 0 to 1024 [ 159.146557][ T7851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.192783][ T7851] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.273455][ T254] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 8) [ 159.306167][ T254] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117 [ 159.349857][ T254] EXT4-fs (loop3): This should not happen!! Data will be lost [ 159.349857][ T254] [ 159.396018][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.718727][ T7875] loop3: detected capacity change from 0 to 1024 [ 159.743665][ T7873] loop0: detected capacity change from 0 to 2048 [ 159.753248][ T7875] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.777168][ T7875] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #3: block 1: comm syz.3.702: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.803359][ T7873] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.841111][ T7875] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.702: Failed to acquire dquot type 0 [ 159.854494][ T7875] EXT4-fs error (device loop3): ext4_free_blocks:6681: comm syz.3.702: Freeing blocks not in datazone - block = 0, count = 4096 [ 159.892018][ T7875] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.702: Invalid inode bitmap blk 0 in block_group 0 [ 159.914743][ T7875] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 159.918045][ T254] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.940242][ T7875] EXT4-fs (loop3): 1 orphan inode deleted [ 159.950224][ T7875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.032636][ T254] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:6: Failed to release dquot type 0 [ 160.071584][ T7875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.204324][ T7884] loop0: detected capacity change from 0 to 512 [ 160.220462][ T7884] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.256838][ T7884] EXT4-fs (loop0): 1 truncate cleaned up [ 160.266051][ T7884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.286657][ T7887] loop4: detected capacity change from 0 to 256 [ 160.305174][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 160.305187][ T27] audit: type=1800 audit(1750250444.253:113): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.706" name="file1" dev="loop4" ino=1048619 res=0 errno=0 [ 160.511148][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.694745][ T3505] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 160.914653][ T3505] usb 3-1: Using ep0 maxpacket: 8 [ 160.931375][ T3505] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.958499][ T3505] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 160.973751][ T3505] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 160.993603][ T3505] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 161.009986][ T3505] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 161.020635][ T3505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.044756][ T3505] hub 3-1:1.0: bad descriptor, ignoring hub [ 161.053453][ T3505] hub: probe of 3-1:1.0 failed with error -5 [ 161.071982][ T3505] cdc_wdm 3-1:1.0: skipping garbage [ 161.081605][ T3505] cdc_wdm 3-1:1.0: skipping garbage [ 161.093560][ T3505] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 161.110273][ T3505] cdc_wdm 3-1:1.0: Unknown control protocol [ 161.583305][ T7917] loop3: detected capacity change from 0 to 32768 [ 161.595151][ T7917] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.719 (7917) [ 161.617730][ T7917] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.621989][ T3505] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 161.638251][ T7917] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 161.654811][ T7917] BTRFS info (device loop3): turning on sync discard [ 161.671823][ T7917] BTRFS info (device loop3): doing ref verification [ 161.683217][ T7917] BTRFS info (device loop3): use zlib compression, level 3 [ 161.691627][ T7917] BTRFS info (device loop3): force clearing of disk cache [ 161.698889][ T7917] BTRFS info (device loop3): setting nodatacow, compression disabled [ 161.707213][ T7917] BTRFS info (device loop3): doing ref verification [ 161.713822][ T7917] BTRFS info (device loop3): doing ref verification [ 161.720974][ T7917] BTRFS info (device loop3): using free space tree [ 161.790059][ T7917] BTRFS info (device loop3): enabling ssd optimizations [ 161.803832][ T7917] BTRFS info (device loop3): rebuilding free space tree [ 161.882542][ T27] audit: type=1800 audit(1750250445.823:114): pid=7917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.719" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 161.932650][ T27] audit: type=1800 audit(1750250445.843:115): pid=7917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.719" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 162.008601][ T5768] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 162.117923][ T7955] loop0: detected capacity change from 0 to 512 [ 162.208552][ T7955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.238544][ T7940] loop4: detected capacity change from 0 to 40427 [ 162.251211][ T7955] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.288184][ T7940] F2FS-fs (loop4): invalid crc value [ 162.344922][ T3505] usb 3-1: USB disconnect, device number 8 [ 162.349365][ T7940] F2FS-fs (loop4): Found nat_bits in checkpoint [ 162.436926][ T7940] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 162.553457][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.722719][ T7968] syz.4.728: attempt to access beyond end of device [ 162.722719][ T7968] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 162.748540][ T7968] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 162.797677][ T7977] loop0: detected capacity change from 0 to 512 [ 162.807329][ T7977] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 162.875433][ T7977] EXT4-fs (loop0): 1 truncate cleaned up [ 162.882302][ T7977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.884301][ T7980] loop2: detected capacity change from 0 to 1024 [ 162.938928][ T7980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.993533][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.504861][ T5807] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.520096][ T8003] loop0: detected capacity change from 0 to 1024 [ 163.543476][ T8003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.556179][ T8003] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.642697][ T59] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 8) [ 163.665368][ T59] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117 [ 163.680984][ T59] EXT4-fs (loop0): This should not happen!! Data will be lost [ 163.680984][ T59] [ 163.695952][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.707270][ T5807] usb 3-1: Using ep0 maxpacket: 8 [ 163.726751][ T5807] usb 3-1: config 7 has an invalid interface number: 1 but max is 0 [ 163.744758][ T5807] usb 3-1: config 7 has no interface number 0 [ 163.750901][ T5807] usb 3-1: config 7 interface 1 has no altsetting 0 [ 163.770970][ T5807] usb 3-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=c1.87 [ 163.785191][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.799267][ T5807] usb 3-1: Product: syz [ 163.810233][ T5807] usb 3-1: Manufacturer: syz [ 163.821136][ T5807] usb 3-1: SerialNumber: syz [ 164.052557][ T5807] usb 3-1: bad CDC descriptors [ 164.070154][ T5807] usb 3-1: bad CDC descriptors [ 164.075382][ T5807] cdc_acm 3-1:7.1: Zero length descriptor references [ 164.082088][ T5807] cdc_acm: probe of 3-1:7.1 failed with error -22 [ 164.090866][ T5807] usb 3-1: USB disconnect, device number 9 [ 164.304703][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 164.504759][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 164.513983][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.529111][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 164.541604][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.550881][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.562093][ T9] usb 5-1: Product: syz [ 164.566385][ T9] usb 5-1: Manufacturer: syz [ 164.571000][ T9] usb 5-1: SerialNumber: syz [ 164.802291][ T9] cdc_ncm 5-1:1.0: bind() failure [ 164.811391][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 164.818558][ T9] cdc_ncm 5-1:1.1: bind() failure [ 164.827406][ T9] usb 5-1: USB disconnect, device number 2 [ 165.077137][ T8044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.763'. [ 165.201442][ T8038] loop3: detected capacity change from 0 to 32768 [ 165.238331][ T27] audit: type=1804 audit(1750250449.183:116): pid=8038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.760" name="/newroot/204/file0/file1" dev="loop3" ino=4 res=1 errno=0 [ 165.271879][ T111] ------------[ cut here ]------------ [ 165.277700][ T111] WARNING: CPU: 1 PID: 111 at fs/jfs/jfs_dmap.c:2882 dbAdjTree+0x448/0x4d0 [ 165.286488][ T111] Modules linked in: [ 165.290429][ T111] CPU: 1 PID: 111 Comm: jfsCommit Not tainted 6.6.93-syzkaller #0 [ 165.298286][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.298489][ T8048] netlink: 104 bytes leftover after parsing attributes in process `syz.0.765'. [ 165.308753][ T111] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 165.323621][ T111] Code: e8 6d 32 e0 fe e9 5a ff ff ff e8 d3 8d 87 fe eb 05 e8 cc 8d 87 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b8 8d 87 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 165.343951][ T111] RSP: 0018:ffffc900024efac8 EFLAGS: 00010293 [ 165.350120][ T111] RAX: ffffffff82fe0928 RBX: ffff88805cc3e010 RCX: ffff888019333c00 [ 165.358460][ T111] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 165.366545][ T111] RBP: 0000000000020056 R08: ffffea0001730f87 R09: 1ffffd40002e61f0 [ 165.374697][ T111] R10: dffffc0000000000 R11: fffff940002e61f1 R12: ffff88805cc3e018 [ 165.382691][ T111] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 165.390714][ T111] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 165.399820][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.406445][ T111] CR2: 00007fe7054ed680 CR3: 0000000063e2b000 CR4: 00000000003506e0 [ 165.414409][ T111] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.422396][ T111] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.430447][ T111] Call Trace: [ 165.433739][ T111] [ 165.436705][ T111] ? lock_page+0x2a0/0x2a0 [ 165.441145][ T111] dbJoin+0x238/0x300 [ 165.445177][ T111] dbFreeBits+0x4e2/0xdb0 [ 165.449515][ T111] dbFree+0x332/0x650 [ 165.453815][ T111] txFreeMap+0x7ff/0xde0 [ 165.458207][ T111] txUpdateMap+0x306/0x890 [ 165.462667][ T111] jfs_lazycommit+0x42b/0xa60 [ 165.467396][ T111] ? txFreelock+0x5a0/0x5a0 [ 165.471918][ T111] ? do_task_dead+0xd0/0xd0 [ 165.476473][ T111] ? __kthread_parkme+0x7a/0x1c0 [ 165.481444][ T111] kthread+0x2fa/0x390 [ 165.485614][ T111] ? txFreelock+0x5a0/0x5a0 [ 165.490134][ T111] ? kthread_blkcg+0xd0/0xd0 [ 165.494760][ T111] ret_from_fork+0x48/0x80 [ 165.499197][ T111] ? kthread_blkcg+0xd0/0xd0 [ 165.503798][ T111] ret_from_fork_asm+0x11/0x20 [ 165.508624][ T111] [ 165.511645][ T111] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 165.518902][ T111] CPU: 1 PID: 111 Comm: jfsCommit Not tainted 6.6.93-syzkaller #0 [ 165.526686][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.536831][ T111] Call Trace: [ 165.540122][ T111] [ 165.543051][ T111] dump_stack_lvl+0x16c/0x230 [ 165.547741][ T111] ? show_regs_print_info+0x20/0x20 [ 165.552943][ T111] ? load_image+0x3b0/0x3b0 [ 165.557451][ T111] panic+0x2c0/0x710 [ 165.561346][ T111] ? bpf_jit_dump+0xd0/0xd0 [ 165.565848][ T111] ? ret_from_fork_asm+0x11/0x20 [ 165.570780][ T111] __warn+0x2e0/0x470 [ 165.574749][ T111] ? dbAdjTree+0x448/0x4d0 [ 165.579153][ T111] ? dbAdjTree+0x448/0x4d0 [ 165.583551][ T111] report_bug+0x2be/0x4f0 [ 165.587870][ T111] ? dbAdjTree+0x448/0x4d0 [ 165.592270][ T111] ? dbAdjTree+0x448/0x4d0 [ 165.596667][ T111] ? dbAdjTree+0x44a/0x4d0 [ 165.601068][ T111] handle_bug+0xcf/0x120 [ 165.605301][ T111] exc_invalid_op+0x1a/0x50 [ 165.609792][ T111] asm_exc_invalid_op+0x1a/0x20 [ 165.614637][ T111] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 165.619645][ T111] Code: e8 6d 32 e0 fe e9 5a ff ff ff e8 d3 8d 87 fe eb 05 e8 cc 8d 87 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b8 8d 87 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 165.639235][ T111] RSP: 0018:ffffc900024efac8 EFLAGS: 00010293 [ 165.645289][ T111] RAX: ffffffff82fe0928 RBX: ffff88805cc3e010 RCX: ffff888019333c00 [ 165.653245][ T111] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 165.661200][ T111] RBP: 0000000000020056 R08: ffffea0001730f87 R09: 1ffffd40002e61f0 [ 165.669156][ T111] R10: dffffc0000000000 R11: fffff940002e61f1 R12: ffff88805cc3e018 [ 165.677111][ T111] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 165.685083][ T111] ? dbAdjTree+0x448/0x4d0 [ 165.689493][ T111] ? dbAdjTree+0x448/0x4d0 [ 165.693891][ T111] ? lock_page+0x2a0/0x2a0 [ 165.698295][ T111] dbJoin+0x238/0x300 [ 165.702264][ T111] dbFreeBits+0x4e2/0xdb0 [ 165.706584][ T111] dbFree+0x332/0x650 [ 165.710557][ T111] txFreeMap+0x7ff/0xde0 [ 165.714799][ T111] txUpdateMap+0x306/0x890 [ 165.719218][ T111] jfs_lazycommit+0x42b/0xa60 [ 165.723883][ T111] ? txFreelock+0x5a0/0x5a0 [ 165.728375][ T111] ? do_task_dead+0xd0/0xd0 [ 165.732869][ T111] ? __kthread_parkme+0x7a/0x1c0 [ 165.737809][ T111] kthread+0x2fa/0x390 [ 165.741862][ T111] ? txFreelock+0x5a0/0x5a0 [ 165.746351][ T111] ? kthread_blkcg+0xd0/0xd0 [ 165.750924][ T111] ret_from_fork+0x48/0x80 [ 165.755326][ T111] ? kthread_blkcg+0xd0/0xd0 [ 165.759898][ T111] ret_from_fork_asm+0x11/0x20 [ 165.764661][ T111] [ 165.767903][ T111] Kernel Offset: disabled [ 165.772282][ T111] Rebooting in 86400 seconds..