last executing test programs: 31.950470946s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x24, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1051}], 0x1}}], 0x1, 0x0, 0x0) 31.032208726s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, 0x0, 0x32600) 27.850805212s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x15}, &(0x7f0000000300)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) 11.545768735s ago: executing program 0: msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xe81, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd2, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) syz_usb_connect(0x0, 0x3f, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904"], 0x0) 9.813209449s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x4, 0x3, 0x8}, 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 9.626173228s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000a39000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000a32000/0xe000)=nil, 0xe000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 9.601435192s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x15}, &(0x7f0000000300)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) 8.268668295s ago: executing program 2: syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000140), 0x4, 0x9655, &(0x7f000001c300)="$eJzs/QnYpnPhuP/fzzD2ZQyVlJqKaJE1S5SZwQyFZIl2RFKWkgptVFLaiGjPvmUrSyhbK8neQgmhkiXSYhvmfzwzzzDGyae+n8//p5zneRzPc9/3dV/X9bzv9+tankdzHG0xaZOJg8Fcg+mNG8zauddMnjLmqg1vP3LrhY5Z/pS793/kikuMH3mcMPI4cTAYjBp5e2j6srGDU08bNZh92vKHm3fueYbmHwxWGHk5sp/BKtMf5r98xnpTZ2nWgQ49/G3f6V/TWnD4Rww/OWz/vQ8fDAZjZtp+aDAY2vNRH1TaFhMmT3rY6iG3YavRI89n/ppj+tf8Fw0G858x4ONj5nWHnoCPNPwz93zhOaM3fAJ+9n9dW0yYvN4s/sPn4mwjy1YZPsdnPQeNzXqc37rklquNTOG0420wGL7EPeJc+a9oiwmT1h889nV+cOTqF+w7dfp1c87B9BvF3IPBYJ6R6+t8T7RL/e+aMHHFaffsGa9H2Gccy3vScXH8m096cPgmPRgMFh4Mxq47415QVVVV/x1NmLjiWnD/n+vx7v8nn7zYGd3/q6qq/ntbb8LEFYfv9bPc/+d7vPv/Lotd+NHp/+1//CrTt3rwif0QVVVV9W81aT28/495vPv/Kmtdun73/6qqqv/eNt5g2v1/vlnu/4s83v3/DSetvvjIejN+b3hgpl0OzfS/J9w/0/LZZlp+30zLR8+0n5nXn2Om5ffMtHzO4fdg/XGDwdgZ/15wysOLx44bfm9k+b0zLR//8L/TWWLtmZZPmGn5pJmWTxwZ6/DyyTMtnzzT+us+zlRXVVX9x7TxipPWGsz07+xHFi864326/59/5rXLPFHjraqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqv/OHrz9rHMGg8HQYDAYNRhMGYw8n/lxMHXq1KnDr08+77LLnrCB/mc0dO41k6eMuWrD24/ceqFjlj/l7v0fnqX/2v77P0H9bxr2n+u4cYPBTps90UOpJ6DOf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf34O1nnTNyDIwaDKYMRp7vOePxzP1e/8aRVVfb/JQ7D3p4yyXGbz/y7NxrJk/Z/gkY+xPQ0PBnHXPVhrcfufVCxyx/yt37PwnOnv/+T1D/m6b5bz80GIyc32OGz+UNJ2y86dKDweCgO0/ZfOXBQ++tOvze6mNnG8w2bdOlp31fZwne8Z7rTn8cP/xtkYf2cfK0/a839dDZhmYZxEy9/Nwbjnz7FnevNOvjUo/9OUbNeHL4daffNXXq1KmPWDjSXI+x8Yz9z/gss57nI2Nfenjsy+6647uWfc/ueyyz/Y5bbbftdtvutPyKq6608grLr7zaS5d92/Y7bLvc9O+PMWfjpn1f61+Zs/lmnbPbJ8w8Z7N+tseas3GPP2fT9jhlj6FNZ8zZ7P/mnK31+HM2bvuRH7TE+NGDLadNzdBgsMTaowe7Db9Yfs7BYIl1RtZddHjdNcaOGgz2e/iDDj+b86FjcGjP4XW2mLTJxIdH9uhP+Kjr9CNWXGL8yOOEkceJ04c4bvDwoTh2cOppo4bn4hHTPO/c8wzNPxisMPJyZD+D1UbePWTGelNnadaBDj38bd/pX9NacHgnw0/esdxZVw+fi7Ns//+P/p+u/4/yWnXooYkaGvkaWWe614TJ6z38s6ZNw/DczTaybJVhk1nn7P+yR4133OyDMY8z3knrTVxxePEs8z9jEzy+7ljygg9MP7bGrzJ9qwf/n1FovPM9znjXm4Djne/xxnvcBy85bfqu/s/GO8u1bv1p38f/K9e6weNf62ajHWx78eKzXute9dhDfMR5PGOO5pxlpce61u128Ap7Du9//ONf69YfHvvoR1zrRg0GS6w141o3fOGbNHqw3/CLFYZfTB49OGb4xYrTXsw9OG/4xUveuvMO2wwvWHfGnCw3vN/xY4emuV+wyi1LTT1g6tS1R8YyfuwjxzpyfIyb+X4+Yez0yZyx7Yz9Dq86Y783P236e5NG9jvh39jvjG1pvHcuOP29ySP7nTjLfkc/zn5nbPuo82HpoYcuXI9xvZk0y/Vm5G+cGT/uEV9zTP+a/6LBYP4zyHeWdf/Hayadv3M9zngnTFxxreHxzXL+PnQ40vl7yeSrhu8V8w8Gg4UHg7Hrzhj7v9nQY4139scf70QY7+yPN94rjt1xg/+D8Q5mGu8jjrMtNp5+rKw7cpxN/jeO3xnbznodGz3t3emX/XX/levYuEddx/aabdQskz1Tj/U72zaw/vTniz78e+41Jx49Y+5Hz7Lf/+l3tpk+yxBcx8bM8vf8qHWvHwzRnO953BqXDh34+HM+evDIvy1mzPmMbR9vzif/K3P+zMef83/19+Slnzf9/dGzjH/mOd/oM8/49Iw5n2OW/f5Pcz758e8dj57z8YPRNOfL3Td93h7vevpYcz5j2xlzPvwRVx87+2Cd4XvWyJxP+lfmfNH/m+N8Hlh/+vNtH1p09pGnvHbGnM86x//TnE/6d+d83EPH+RLT3nvuqMEccwx222rXXXdZfvr3GS9XmP6dr0X3XDN9nh/vXvpYRjO2fbzzYu1/xWjMv2Q09D8ZLTb7Yxk9fGodsfMuT/1/vRat/e8aDfhadNXR0+ft8X4veqw5n7Et3QcXmWn7Wf8O3XiDab93zzfLfXDGJngfPPvM9feZscuRzR6YZZgz7qv3z7R8tpmW3zfT8tEz7Wfm9eeYafk9My0f/ghzzLT+DNZxw3/zjiyf8vDqY4d/eRo3svzemZaPf3jbJdaeafmEmZZPmmn5xIcPjSUmz7R88kzrrzv4N5vx36S3n/UiX/9q/fdfd/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4h68/axzRo6BUYPBlMH050Mjj4M9hza6bc3hx8FgMHqVE6Zu9ESP9wlu6NxrJk8Zc9WGtx+59ULHLH/K3fs/Cc6e//5PUP+bpvlvPzQYjJzfY7YfDAYbTth406UHg8FGU09YZdTgofcWHX5vjbGjBoP9hh6xgzkfWmdoz+F1tpi0ycTBYK6RNcY96oc+6jx6xIpLjB95nDDyOHH69Wnc4OHjdezg1NNGDWaftvzh5p17nqH5B4MVRl6O7GewyvSH+S+fsd7UWZp1oEMPf9t3+te0Fhz+EcNPdttu8rOG52qW7f9jmnGt3n7U/7hq57+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe/D2s84ZOQZGDQZTBtOfD+058jgYOunUF4wcIqN3v/KoQ5/o8T7BDZ17zeQpY67a8PYjt17omOVPuXv/J8HZ89//Cep/0zT/7YcGg5Hze8z2g8Fgwwkbb7r0YDA49Kgrdx81eOi9RYffW2PsqMFgv6FH7GDOh9YZ2nN4nS0mbTJxMJhrZI1xj/qhjzqPHrHiEuNHHieMPE6cfn0aN3j4eB07OPW0UYPZpy1/uHnnnmdo/sFghZGXI/sZrDL9Yf7LZ6w3dZZmHejQw9/2nf41rQWHf8Twk73nu+ak4bmaZfv/mGZcq7cf9T+u2vnvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bsbWvOJHkE9kXX+i3vw9rPOGTkGRg0GUwbTn48aeRza86YbP7zp8OPw64XW3eeaJ3q8T3BD514zecqYqza8/citFzpm+VPu3v9JcPb893+C+t807D/XceMGg502e6KHUk9Anf/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7sHbzzpn5Omoh5eO2rPjAhs695rJU8ZcteHtR2690DHLn3L3/k/0gP63PYb/XvljFv+P5o9Z/D+WP2bx/3j+mMV/7/wxi/8n8scs/vvkj1n8P5k/ZvH/VP6YxX/f/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+++WPWfz3zx+z+H8hf8zif0D+mMX/wPwxi/8X88cs/gflj1n8D84fs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+38wfs/gfkj9m8T80f8zif9jj+e/1/8G4/kOz+B/e+Y9Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8sWH/Z488fzL7H5s/Zjn/j8sfs/h/K3/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8v50/ZvH/Tv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/L+bP2bxPyN/zOJ/Zv6Yxf+s/DGL//fyxyz+388fs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8f5o/ZvG/IH/M4n9h/pjF/2f5Yxb/ix7yn+2JGdd/aBb/n3f+Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/L/LHLP6/zB+z+P8qf8zi/+v8MYv/VfljFv+r88cs/r/JH7P4/zZ/zOJ/Tf6Yxf93+WMW/2vzxyz+1+WPWfyvzx+z+P8+f8zif0P+mMX/xvwxi/9N+WMW/z/kj1n8/5g/ZvH/U/6Yxf/m/DGL/5/zxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOL/l/wxi/8d+WMW/zvzxyz+f80fs/jflT9m8f9b/pjF/+/5Yxb/f+SPWfz/mT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+U/LHLP4P5I9Z/B/MH7P4T80fk/hP+z99yv/RWfyH8scs/qPyxyz+s+WPWfxnzx+z+I/OH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziPyZ/zOK/UP6YxX9s/pjFf+H8MYv/IvljFv+n5I9Z/J+aP2bxf1r+mMV/0fwxi//T88cs/ovlj1n8n5E/ZvF/Zv6YxX/x/DGL/7Pyxyz+z84fs/iPyx+z+D8nf8zi/9z8MYv/8/LHLP5L5I9Z/JfMH7P4Pz9/zOK/VP6YxX/p/DGL/wvyxyz+L8wfs/i/KH/M4v/i/DGL/zL5Yxb/l+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/l+aPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf9l+WMW/9Xzxyz+a+SPWfxfnj9m8X9F/pjFf838MYv/+Pwxi/+E/DGL/8T8MYv/WvljFv+188cs/uvkj1n8J+WPWfwn549Z/NfNH7P4r5c/ZvF/Zf6Yxf9V+WMW//Xzxyz+G+SPWfw3zB+z+L86f8ziv1H+mMX/NfljFv+N88cs/pvkj1n8N80fs/hvlj9m8X9t/pjFf/P8MYv/FvljFv/X5Y9Z/F+fP2bxf0P+mMX/jfljFv835Y9Z/N+cP2bxf0v+mMV/y/wxi/9W+WMW/63zxyz+b80fs/hvkz9m8d82f8zi/7b8MYv/dvljFv+3549Z/LfPH7P4vyN/zOL/zvwxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+L8rf8zi/+78MYv/LvljFv/35I9Z/HfNH7P4vzd/zOL/vvwxi//788cs/rvlj1n8d88fs/jvkT9m8f9A/pjF/4P5Yxb/D+WPWfw/nD9m8f9I/pjFf8/8MYv/XvljFv+P5o9Z/D+WP2bx/3j+mMV/7/wxi/8n8scs/vvkj1n8P5k/ZvH/VP6YxX/f/DGL/6fzxyz+n8kfexL6TyX/z+aPPQn98fz/XP6Yxf/z+WMW//3yxyz+++ePWfy/kD9m8T8gf8zif2D+mMX/i/ljFv+D8scs/gfnj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/2/mj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOL/rfwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bx/3b+mMX/O/ljFv9T8scs/qfmj1n8T8sfs/ifnj9m8f9u/pjF/4z8MYv/mfljFv+z8scs/t/LH7P4fz9/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/H+QP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bx/2n+mMX/gvwxi/+F+WMW/5/lj1n8L8ofs/j/PH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8b8qf8zif3X+mMX/N/ljFv/f5o9Z/K/JH7P4/y5/zOJ/bf6Yxf+6/DGL//X5Yxb/3+ePWfxvyB+z+N+YP2bxvyl/zOL/h/wxi/8f88cs/n/KH7P435w/ZvH/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/P+SP2bxvyN/zOJ/Z/6Yxf+v+WMW/7vyxyz+f8sfs/j/PX/M4v+P/DGL/z/zxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6YxX9K/pjF/4H8MYv/g/ljFv+p+WMS/9kH+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/iPyR+z+C+UP2bxH5s/ZvFfOH/M4r9I/pjF/yn5Yxb/p+aPWfyflj9m8V80f8zi//T8MYv/YvljFv9n5I9Z/J+ZP2bxXzx/zOL/rPwxi/+z88cs/uPyxyz+z8kfs/g/N3/M4v+8/DGL/xL5Yxb/JfPHLP7Pzx+z+C+VP2bxXzp/zOL/gvwxi/8L88cs/i/KH7P4vzh/zOK/TP6Yxf8l+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOK/Uv6Yxf+l+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxf1n+mMV/9fwxi/8a+WMW/5fnj1n8X5E/ZvFfM3/M4j8+f8ziPyF/zOI/MX/M4r9W/pjFf+38MYv/OvljFv9J+WMW/8n5Yxb/dfPHLP7r5Y9Z/F+ZP2bxf1X+mMV//fwxi/8G+WMW/w3zxyz+r84fs/hvlD9m8X9N/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8X5s/ZvHfPH/M4r9F/pjF/3X5Yxb/1+ePWfzfkD9m8X9j/pjF/035Yxb/N+ePWfzfkj9m8d8yf8ziv1X+mMV/6/wxi/9b88cs/tvkj1n8t80fs/i/LX/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvHfM3/M4r9X/pjF/6P5Yxb/j+WPWfw/nj9m8d87f8zi/4n8MYv/PvljFv9P5o9Z/D+VP2bx3zd/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOL/+fwxi/9++WMW//3zxyz+X8gfs/gfkD9m8T8wf8zi/8X8MYv/QfljFv+D88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi/8388cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bx/1b+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+H87f8zi/538MYv/KfljFv9T88cs/qflj1n8T88fs/h/N3/M4n9G/pjF/8z8MYv/WfljFv/v5Y9Z/L+fP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+P80f8zif0H+mMX/wvwxi//P8scs/hflj1n8f54/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/j/In/M4v/L/DGL/6/yxyz+v84fs/hflT9m8b86f8zi/5v8MYv/b/PHLP7X5I9Z/H+XP2bxvzZ/zOJ/Xf6Yxf/6/DGL/+/zxyz+N+SPWfxvzB+z+N+UP2bx/0P+mMX/j/ljFv8/5Y9Z/G/OH7P4/zl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP5/yR+z+N+RP2bxvzN/zOL/1/wxi/9d+WMW/7/lj1n8/54/ZvH/R/6Yxf+f+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOI/JX/M4v9A/pjF/8H8MYv/1Pwxif/oQf6YxX8of8ziPyp/zOI/W/6YxX/2/DGL/+j8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+Y/LHLP4L5Y9Z/Mfmj1n8F84fs/gvkj9m8X9K/pjF/6n5Yxb/p+WPWfwXzR+z+D89f8ziv1j+mMX/GfljFv9n5o9Z/BfPH7P4Pyt/zOL/7Pwxi/+4/DGL/3Pyxyz+z80fs/g/L3/M4r9E/pjFf8n8MYv/8/PHLP5L5Y9Z/JfOH7P4vyB/zOL/wvwxi/+L8scs/i/OH7P4L5M/ZvF/Sf6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvF/af6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/F+WP2bxXz1/zOK/Rv6Yxf/l+WMW/1fkj1n818wfs/iPzx+z+E/IH7P4T8wfs/ivlT9m8V87f8ziv07+mMV/Uv6YxX9y/pjFf938MYv/evljFv9X5o9Z/F+VP2bxXz9/zOK/Qf6YxX/D/DGL/6vzxyz+G+WPWfxfkz9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/9fmj1n8N88fs/hvkT9m8X9d/pjF//X5Yxb/N+SPWfzfmD9m8X9T/pjF/835Yxb/t+SPWfy3zB+z+G+VP2bx3zp/zOL/1vwxi/82+WMW/23zxyz+b8sfs/hvlz9m8X97/pjFf/v8MYv/O/LHLP7vzB+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/7vyxyz+784fs/jvkj9m8X9P/pjFf9f8MYv/e/PHLP7vyx+z+L8/f8ziv1v+mMV/9/wxi/8e+WMW/w/kj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n898wfs/jvlT9m8f9o/pjF/2P5Yxb/j+ePWfz3zh+z+H8if8ziv0/+mMX/k/ljFv9P5Y9Z/PfNH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4fz5/zOK/X/6YxX///DGL/xfyxyz+B+SPWfwPzB+z+H8xf8zif1D+mMX/4Pwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi//X8scs/l/PH7P4fyN/zOL/zfwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/L+VP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP7fzh+z+H8nf8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+380fs/ifkT9m8T8zf8zif1b+mMX/e/ljFv/v549Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/D/LHLP4/zB+z+P8of8zi/+P8MYv/T/LHLP4/zR+z+F+QP2bxvzB/zOL/s/wxi/9F+WMW/5+b/Ef966ta/C82+f8bWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/X+SPWfx/mT9m8f9V/pjF/9f5Yxb/q/LHLP5X549Z/H+TP2bx/23+mMX/mvwxi//v8scs/tfmj1n8r8sfs/hfnz9m8f99/pjF/4b8MYv/jfljFv+b8scs/n/IH7P4/zF/zOL/p/wxi//N+WMW/z/nj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/L/ljFv878scs/nfmj1n8/5o/ZvG/K3/M4v+3/DGL/9/zxyz+/8gfs/j/M3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8p+SPWfwfyB+z+D+YP2bxn5o/JvGfY5A/ZvEfyh+z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/5j8MYv/QvljFv+x+WMW/4Xzxyz+i+SPWfyfkj9m8X9q/pjF/2n5Yxb/RfPHLP5Pzx+z+C+WP2bxf0b+mMX/mfljFv/F88cs/s/KH7P4Pzt/zOI/Ln/M4v+c/DGL/3Pzxyz+z8sfs/gvkT9m8V8yf8zi//z8MYv/UvljFv+l88cs/i/IH7P4vzB/zOL/ovwxi/+L88cs/svkj1n8X5I/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8X5o/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv+X5Y9Z/FfPH7P4r5E/ZvF/ef6Yxf8V+WMW/zXzxyz+4/PHLP4T8scs/hPzxyz+a+WPWfzXzh+z+K+TP2bxn5Q/ZvGfnD9m8V83f8ziv17+mMX/lfljFv9X5Y9Z/NfPH7P4b5A/ZvHfMH/M4v/q/DGL/0b5Yxb/1+SPWfw3zh+z+G+SP2bx3zR/zOK/Wf6Yxf+1+WMW/83zxyz+W+SPWfxflz9m8X99/pjF/w35Yxb/N+aPWfzflD9m8X9z/pjF/y35Yxb/LfPHLP5b5Y9Z/LfOH7P4vzV/zOK/Tf6YxX/b/DGL/9vyxyz+2+WPWfzfnj9m8d8+f8zi/478MYv/O/PHLP475I9Z/HfMH7P475Q/ZvHfOX/M4v+u/DGL/7vzxyz+u+SPWfzfkz9m8d81f8zi/978MYv/+/LHLP7vzx+z+O+WP2bx3z1/zOK/R/6Yxf8D+WMW/w/mj1n8P5Q/ZvH/cP6Yxf8j+WMW/z3zxyz+e+WPWfw/mj9m8f9Y/pjF/+P5Yxb/vfPHLP6fyB+z+O+TP2bx/2T+mMX/U/ljFv9988cs/p/OH7P4fyZ/zOL/2fwxi//n8scs/p/PH7P475c/ZvHfP3/M4v+F/DGL/wH5Yxb/A/PHLP5fzB+z+B+UP2bxPzh/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4fzN/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv9v5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/t/PHLP7fyR+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/3fzxyz+Z+SPWfzPzB+z+J+VP2bx/17+mMX/+/ljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zi/4P8MYv/D/PHLP4/yh+z+P84f8zi/5P8Z2rhh55Z/H+aP2bxvyB/zOJ/Yf6Yxf9n+WMW/4vyxyz+P88fs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfx/kT9m8f9l/pjF/1f5Yxb/X+ePWfyvyh+z+F+dP2bx/03+mMX/t/ljFv9r8scs/r/LH7P4X5s/ZvG/Ln/M4n99/pjF//f5Yxb/G/LHLP435o9Z/G/KH7P4/yF/zOL/x/wxi/+f8scs/jfnj1n8/5w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv+/5I9Z/O/IH7P435k/ZvH/a/6Yxf+u/DGL/9/yxyz+f88fs/j/I3/M4v/P/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvGfkj9m8X8gf8zi/2D+mMV/av6YxH/OQf6YxX8of8ziPyp/zOI/W/6YxX/2/DGL/+j8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+Y/LHLP4L5Y9Z/Mfmj1n8F84fs/gvkj9m8X9K/pjF/6n5Yxb/p+WPWfwXzR+z+D89f8ziv1j+mMX/GfljFv9n5o9Z/BfPH7P4Pyt/zOL/7Pwxi/+4/DGL/3Pyxyz+z80fs/g/L3/M4r9E/pjFf8n8MYv/8/PHLP5L5Y9Z/JfOH7P4vyB/zOL/wvwxi/+L8scs/i/OH7P4L5M/ZvF/Sf6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvF/af6YxX/l/DGL/yr5Yxb/VfOfudEznlj8V8sfs/i/LH/M4r96/pjFf438MYv/y/PHLP6vyB+z+K+ZP2bxH58/ZvGfkD9m8Z+YP2bxXyt/zOK/dv6YxX+d/DGL/6T8MYv/5Pwxi/+6+WMW//Xyxyz+r8wfs/i/Kn/M4r9+/pjFf4P8MYv/hvljFv9X549Z/DfKH7P4vyZ/zOK/cf6YxX+T/DGL/6b5Yxb/zfLHLP6vzR+z+G+eP2bx3yJ/zOL/uvwxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4b5k/ZvHfKn/M4r91/pjF/635Yxb/bfLHLP7b5o9Z/N+WP2bx3y5/zOL/9vwxi//2+WMW/3fkj1n835k/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv935Y9Z/N+dP2bx3yV/zOL/nvwxi/+u+WMW//fmj1n835c/ZvF/f/6YxX+3/DGL/+75Yxb/PfLHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+O+ZP2bx3yt/zOL/0fwxi//H8scs/h/PH7P4750/ZvH/RP6YxX+f/DGL/yfzxyz+n8ofs/jvmz9m8f90/pjF/zP5Yxb/z+aPWfw/lz9m8f98/pjFf7/8MYv//vljFv8v5I9Z/A/IH7P4H5g/ZvH/Yv6Yxf+g/DGL/8H5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/5v5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/sye//sHr+j+7J7z+tOY/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/t/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/9v5Yxb/7+SPWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+7+WMW/zPyxyz+Z+aPWfzPyh+z+H8vf8zi//38MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8f9B/pjF/4f5Yxb/H+WPWfx/nD9m8f9J/pjF/6f5Yxb/C/LHLP4X5o9Z/H+WP2bxvyh/zOL/8/wxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf8X+WMW/1/mj1n8f5U/ZvH/df6Yxf+q/DGL/9X5Yxb/3+SPWfx/mz9m8b8mf8zi/7v8MYv/tfljFv/r8scs/tfnj1n8f58/ZvG/IX/M4n9j/pjF/6b8MYv/Hx7yn+OJGdd/aBb/P3b+Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/XIP8MYv/UP6YxX9U/pjFf7b8MYv/7PljFv/R+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/72P6T/3/Zlz/oVn85+v8xyz+8+ePWfwXyB+z+C+YP2bxH5M/ZvFfKH/M4j82f8ziv3D+mMV/kfwxi/9T8scs/k/NH7P4Py1/zOK/aP6Yxf/p+WMW/8Xyxyz+z8gfs/g/M3/M4r94/pjF/1n5Yxb/Z+ePWfzH5Y9Z/J+TP2bxf27+mMX/efljFv8l8scs/kvmj1n8n58/ZvFfKn/M4r90/pjF/wX5Yxb/F+aPWfxflD9m8X9x/pjFf5n8MYv/S/LHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjFf6X8MYv/S/PHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+y/DGL/+r5Yxb/NfLHLP4vzx+z+L8if8ziv2b+mMV/fP6YxX9C/pjFf2L+mMV/rfwxi//a+WMW/3Xyxyz+k/LHLP6T88cs/uvmj1n818sfs/i/Mn/M4v+q/DGL//r5Yxb/DfLHLP4b5o9Z/F+dP2bx3yh/zOL/mvwxi//G+WMW/03yxyz+m+aPWfw3yx+z+L82f8ziv3n+mMV/i/wxi//r8scs/q/PH7P4vyF/zOL/xvwxi/+b8scs/m/OH7P4vyV/zOK/Zf6YxX+r/DGL/9b5Yxb/t+aPWfy3yR+z+G+bP2bxf1v+mMV/u/wxi//b88cs/tvnj1n835E/ZvF/Z/6YxX+H/DGL/475Yxb/nfLHLP47549Z/N+VP2bxf3f+mMV/l/wxi/978scs/rvmj1n835s/ZvF/X/6Yxf/9+WMW/93yxyz+u+ePWfz3yB+z+H8gf8zi/8H8MYv/h/LHLP4fzh+z+H8kf8ziv2f+mMV/r/wxi/9H88cs/h/LH7P4fzx/zOK/d/6Yxf8T+WMW/33yxyz+n8wfs/h/Kn/M4r9v/pjF/9P5Yxb/z+SPWfw/mz9m8f9c/pjF//P5Yxb//fLHLP77549Z/L+QP2bxPyB/zOJ/YP6Yxf+L+WMW/4Pyxyz+B+ePWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/b+aPWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4v+t/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvH/dv6Yxf87+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bx/27+mMX/jPwxi/+Z+WMW/7Pyxyz+38sfs/h/P3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvH/af6Yxf+C/DGL/4X5Yxb/n+WPWfwvyh+z+P88f8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bx/0X+mMX/l/ljFv9f5Y9Z/H+dP2bxvyp/zOJ/df6Yxf83+WMW/9/mj1n8r8kfs/j/Ln/M4n9t/pjF/7r8MYv/9fljFv/f549Z/G/IH7P435g/ZvG/KX/M4v+H/DGL/x/zxyz+f8ofs/jfnD9m8f9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n8/5I/ZvG/I3/M4n9n/pjF/6/5Yxb/u/LHLP5/yx+z+P89f8zi/4/8MYv/P/PHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjFf0r+mMX/gfwxi/+D+WMW/6n5YxL/uQf5Yxb/ofwxi/+o/DGL/2z5Yxb/2fPHLP6j88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+I/JH7P4L5Q/ZvEfmz9m8V84f8ziv0j+mMX/KfljFv+n5o9Z/J+WP2bxXzR/zOL/9Pwxi/9i+WMW/2fkj1n8n5k/ZvFfPH/M4v+s/DGL/7Pzxyz+4/LHLP7PyR+z+D83f8zi/7z8MYv/EvljFv8l88cs/s/PH7P4L5U/ZvFfOn/M4v+C/DGL/wvzxyz+L8ofs/i/OH/M4r9M/pjF/yX5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjF/6X5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvF/Wf6YxX/1/DGL/xr5Yxb/l+ePWfxfkT9m8V8zf8ziPz5/zOI/IX/M4j8xf8ziv1b+mMV/7fwxi/86+WMW/0n5Yxb/yfljFv9188cs/uvlj1n8X5k/ZvF/Vf6YxX/9/LEnp/90+Zn9N8gfe3L6T29m/w3zxyz+r84fs/hvlD9m8X9N/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8X5s/ZvHfPH/M4r9F/pjF/3X5Yxb/1+ePWfzfkD9m8X9j/pjF/035Yxb/N+ePWfzfkj9m8d8yf8ziv1X+mMV/6/wxi/9b88cs/tvkj1n8t80fs/i/LX/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvHfM3/M4r9X/pjF/6P5Yxb/j+WPWfw/nj9m8d87f8zi/4n8MYv/PvljFv9P5o9Z/D+VP2bx3zd/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOL/+fwxi/9++WMW//3zxyz+X8gfs/gfkD9m8T8wf8zi/8X8MYv/QfljFv+D88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi/8388cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bx/1b+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+H87f8zi/538MYv/KfljFv9T88cs/qflj1n8T88fs/h/N3/M4n9G/pjF/8z8MYv/WfljFv/v5Y9Z/L+fP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+P80f8zif0H+mMX/wvwxi//P8scs/hflj1n8f54/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/j/In/M4v/L/DGL/6/yxyz+v84fs/hflT9m8b86f8zi/5v8MYv/b/PHLP7X5I9Z/H+XP2bxvzZ/zOJ/Xf6Yxf/6/DGL/+/zxyz+N+SPWfxvzB+z+N+UP2bx/0P+mMX/j/ljFv8/5Y9Z/G/OH7P4/zl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP5/yR+z+N+RP2bxvzN/zOL/1/wxi/9d+WMW/7/lj1n8/54/ZvH/R/6Yxf+f+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOI/JX/M4v9A/pjF/8H8MYv/1Pwxif88g/wxi/9Q/pjFf1T+mMV/tvwxi//s+WMW/9H5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8x+SPWfwXyh+z+I/NH7P4L5w/ZvFfJH/M4v+U/DGL/1Pzxyz+T8sfs/gvmj9m8X96/pjFf7H8MYv/M/LHLP7PzB+z+C+eP2bxf1b+mMX/2fljFv9x+WMW/+fkj1n8n5s/ZvF/Xv6YxX+J/DGL/5L5Yxb/5+ePWfyXyh+z+C+dP2bxf0H+mMX/hfljFv8X5Y9Z/F+cP2bxXyZ/zOL/kvwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOL/0vwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+L8sf8ziv3r+mMV/jfwxi//L88cs/q/IH7P4r5k/ZvEfnz9m8Z+QP2bxn5g/ZvFfK3/M4r92/pjFf538MYv/pPwxi//k/DGL/7r5Yxb/9fLHLP6vzB+z+L8qf8ziv37+mMV/g/wxi/+G+WMW/1fnj1n8N8ofs/i/Jn/M4r9x/pjFf5P8MYv/pvljFv/N8scs/q/NH7P4b54/ZvHfIn/M4v+6/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/hvmT9m8d8qf8ziv3X+mMX/rfljFv9t8scs/tvmj1n835Y/ZvHfLn/M4v/2/DGL//b5Yxb/d+SPWfzfmT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3flj1n8350/ZvHfJX/M4v+e/DGL/675Yxb/9+aPWfzflz9m8X9//pjFf7f8MYv/7vljFv898scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P475k/ZvHfK3/M4v/R/DGL/8fyxyz+H88fs/jvnT9m8f9E/pjFf5/8MYv/J/PHLP6fyh+z+O+bP2bx/3T+mMX/M/ljFv/P5o9Z/D+XP2bx/3z+mMV/v/wxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/6D8MYv/wfljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8rf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/nT9m8f9O/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5s/ZvE/I3/M4n9m/pjF/6z8MYv/9/LHLP7fzx+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfx/mj9m8b8gf8zif2H+mMX/Z/ljFv+L8scs/j/PH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8f5E/ZvH/Zf6Yxf9X+WMW/1/nj1n8r8ofs/hfnT9m8f9N/pjF/7f5Yxb/a/LHLP6/yx+z+F+bP2bxvy5/zOJ/ff6Yxf/3+WMW/xvyxyz+N+aPWfxvyh+z+P8hf8zi/8f8MYv/n/LHLP43549Z/P+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/v+SPWfzvyB+z+N+ZP2bx/2v+mMX/rvwxi//f8scs/n/PH7P4/yN/zOL/z/wxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxn5I/ZvF/IH/M4v9g/pjFf2r+mMR/3kH+mMV/KH/M4j8qf8ziP1v+mMV/9vwxi//o/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/mPyxyz+C+WPWfzH5o9Z/BfOH7P4L5I/ZvF/Sv6Yxf+p+WMW/6flj1n8F80fs/g/PX/M4r9Y/pjF/xn5Yxb/Z+aPWfwXzx+z+D8rf8zi/+z8MYv/uPwxi/9z8scs/s/NH7P4Py9/zOK/RP6YxX/J/DGL//Pzxyz+S+WPWfyXzh+z+L8gf8zi/8L8MYv/i/LHLP4vzh+z+C+TP2bxf0n+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxf2n+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxflj9m8V89f8ziv0b+mMX/5fljFv9X5I9Z/NfMH7P4j88fs/hPyB+z+E/MH7P4r5U/ZvFfO3/M4r9O/pjFf1L+mMV/cv6YxX/d/DGL/3r5Yxb/V+aPWfxflT9m8V8/f8ziv0H+mMV/w/wxi/+r88cs/hvlj1n8X5M/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/X5o9Z/DfPH7P4b5E/ZvF/Xf6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n8t8wfs/hvlT9m8d86f8zi/9b8MYv/NvljFv9t88cs/m/LH7P4b5c/ZvF/e/6YxX/7/DGL/zvyxyz+78wfs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/+78scs/u/OH7P475I/ZvF/T/6YxX/X/DGL/3vzxyz+78sfs/i/P3/M4r9b/pjFf/f8MYv/HvljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/PfMH7P475U/ZvH/aP6Yxf9j+WMW/4/nj1n8984fs/h/In/M4r9P/pjF/5P5Yxb/T+WPWfz3zR+z+H86f8zi/5n8MYv/Z/PHLP6fyx+z+H8+f8ziv1/+mMV///wxi/8X8scs/gfkj1n8D8wfs/h/MX/M4n9Q/pjF/+D8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zi/838MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfy/lT9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+384fs/h/J3/M4n9K/pjF/9T8MYv/afljFv/T88cs/t/NH7P4n5E/ZvE/M3/M4n9W/pjF/3v5Yxb/7+ePWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+P80fs/hfkD9m8b8wf8zi/7P8MYv/RfljFv+f549Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/r/IH7P4/zJ/zOL/q/wxi/+v88cs/lflj1n8r84fs/j/Jn/M4v/b/DGL/zX5Yxb/3+WPWfyvzR+z+F+XP2bxvz5/zOL/+/wxi/8N+WMW/xvzxyz+N+WPWfz/kD9m8f9j/pjF/0/5Yxb/m/PHLP5/zh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/1/yxyz+d+SPWfzvzB+z+P81f8zif1f+mMX/b/ljFv+/549Z/P+RP2bx/2f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+E/JH7P4P5A/ZvF/MH/M4j81f0ziP98gf8ziP5Q/ZvEflT9m8Z8tf8ziP3v+mMV/dP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv8x+WMW/4Xyxyz+Y/PHLP4L549Z/BfJH7P4PyV/zOL/1Pwxi//T8scs/ovmj1n8n54/ZvFfLH/M4v+M/DGL/zPzxyz+i+ePWfyflT9m8X92/pjFf1z+mMX/OfljFv/n5o9Z/J+XP2bxXyJ/zOK/ZP6Yxf/5+WMW/6Xyxyz+S+ePWfxfkD9m8X9h/pjF/0X5Yxb/F+ePWfyXyR+z+L8kf8ziv2z+mMV/ufwxi//y+WMW/xXyxyz+K+aPWfxXyh+z+L80f8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+L8sfs/ivnj9m8V8jf8zi//L8MYv/K/LHLP5r5o9Z/Mfnj1n8J+SPWfwn5o9Z/NfKH7P4r50/ZvFfJ3/M4j8pf8ziPzl/zOK/bv6YxX+9/DGL/yvzxyz+r8ofs/ivnz9m8d8gf8ziv2H+mMX/1fljFv+N8scs/q/JH7P4b5w/ZvHfJH/M4r9p/pjFf7P8MYv/a/PHLP6b549Z/LfIH7P4vy5/zOL/+vwxi/8b8scs/m/MH7P4vyl/zOL/5vwxi/9b8scs/lvmj1n8t8ofs/hvnT9m8X9r/pjFf5v8MYv/tvljFv+35Y9Z/LfLH7P4vz1/zOK/ff6Yxf8d+WMW/3fmj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMX/XfljFv93549Z/HfJH7P4vyd/zOK/a/6Yxf+9+WMW//flj1n8358/ZvHfLX/M4r97/pjFf4/8MYv/B/LHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP575o89Wf3neuTS+fbKH3uy+g9mOf8/mj9m8f9Y/pjF/+P5Yxb/vfPHLP6fyB+z+O+TP2bx/2T+mMX/U/ljFv9988cs/p/OH7P4fyZ/zOL/2fwxi//n8scs/p/PH7P475c/ZvHfP3/M4v+F/DGL/wH5Yxb/A/PHLP5fzB+z+B+UP2bxPzh/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4fzN/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv9v5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/t/PHLP7fyR+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/3fzxyz+Z+SPWfzPzB+z+J+VP2bx/17+mMX/+/ljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zi/4P8MYv/D/PHLP4/yh+z+P84f8zi/5P8MYv/T/PHLP4X5I9Z/C/MH7P4/yx/zOJ/Uf6Yxf/n+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/y/yxyz+v8wfs/j/Kn/M4v/r/DGL/1X5Yxb/q/PHLP6/yR+z+P82f8zif03+mMX/d/ljFv9r88cs/tflj1n8r88fs/j/Pn/M4n9D/pjF/8b8MYv/TfljFv8/5I9Z/P+YP2bx/1P+mMX/5vwxi/+f88cs/rfkj1n8b80fs/jflj9m8b89f8zi/5f8MYv/HfljFv8788cs/n/NH7P435U/ZvH/W/6Yxf/v+WMW/3/kj1n8/5k/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/lPyxyz+D+SPWfwfzB+z+E/NH5P4zz/IH7P4D+WPWfxH5Y9Z/GfLH7P4z54/ZvEfnT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX9M/pjFf6H8MYv/2Pwxi//C+WMW/0Xyxyz+T8kfs/g/NX/M4v+0/DGL/6L5Yxb/p+ePWfwXyx+z+D8jf8zi/8z8MYv/4vljFv9n5Y9Z/J+dP2bxH5c/ZvF/Tv6Yxf+5+WMW/+flj1n8l8gfs/gvmT9m8X9+/pjFf6n8MYv/0vljFv8X5I9Z/F+YP2bxf1H+mMX/xfljFv9l8scs/i/JH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/i/NH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/y/LHLP6r549Z/NfIH7P4vzx/zOL/ivwxi/+a+WMW//H5Yxb/CfljFv+J+WMW/7Xyxyz+a+ePWfzXyR+z+E/KH7P4T84fs/ivmz9m8V8vf8zi/8r8MYv/q/LHLP7r549Z/DfIH7P4b5g/ZvF/df6YxX+j/DGL/2vyxyz+G+ePWfw3yR+z+G+aP2bx3yx/zOL/2vwxi//m+WMW/y3yxyz+r8sfs/i/Pn/M4v+G/DGL/xvzxyz+b8ofs/i/OX/M4v+W/DGL/5b5Yxb/rfLHLP5b549Z/N+aP2bx3yZ/zOK/bf6Yxf9t+WMW/+3yxyz+b88fs/hvnz9m8X9H/pjF/535Yxb/HfLHLP475o9Z/HfKH7P475w/ZvF/V/6Yxf/d+WMW/13yxyz+78kfs/jvmj9m8X9v/pjF/335Yxb/9+ePWfx3yx+z+O+eP2bx3yN/zOL/gfwxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/+e+WMW/73yxyz+H80fs/h/LH/M4v/x/DGL/975Yxb/T+SPWfz3yR+z+H8yf8zi/6n8MYv/vvljFv9P549Z/D+TP2bx/2z+mMX/c/ljFv/P549Z/PfLH7P4758/ZvH/Qv6Yxf+A/DGL/4H5Yxb/L+aPWfwPyh+z+B+cP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/6/ljFv9v5I9Z/L+ZP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/t/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/9v5Yxb/7+SPWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+7+WMW/zPyxyz+Z+aPWfzPyh+z+H8vf8zi//38MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8f9B/pjF/4f5Yxb/H+WPWfx/nD9m8f9J/pjF/6f5Yxb/C/LHLP4X5o9Z/H+WP2bxvyh/zOL/8/wxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf8X+WMW/1/mj1n8f5U/ZvH/df6Yxf+q/DGL/9X5Yxb/3+SPWfx/mz9m8b8mf8zi/7v8MYv/tfljFv/r8scs/tfnj1n8f58/ZvG/IX/M4n9j/pjF/6b8MYv/H/LHLP5/zB+z+P8pf8zif3P+mMX/z/ljFv9b8scs/rfmj1n8b8sfs/jfnj9m8f9L/pjF/478MYv/nfljFv+/5o9Z/O/KH7P4/y1/bDWJ/9/zxyzn/z/yxyz+/8wfs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/yn5Yxb/B/LHLP4P5o9Z/Kfmj0n8Fxjkj1n8h/LHLP6j8scs/rPlj1n8Z88fs/iPzh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4j8mf8ziv1D+mMV/bP6YxX/h/DGL/yL5Yxb/p+SPWfyfmj9m8X9a/pjFf9H8MYv/0/PHLP6L5Y9Z/J+RP2bxf2b+mMV/8fwxi/+z8scs/s/OH7P4j8sfs/g/J3/M4v/c/DGL//Pyxyz+S+SPWfyXzB+z+D8/f8ziv1T+mMV/6fwxi/8L8scs/i/MH7P4vyh/zOL/4vwxi/8y+WMW/5fkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5fmj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/ZfljFv/V88cs/mvkj1n8X54/ZvF/Rf6YxX/N/DGL//j8MYv/hPwxi//E/DGL/1r5Yxb/tfPHLP7r5I9Z/Cflj1n8J+ePWfzXzR+z+K+XP2bxf2X+mMX/VfljFv/188cs/hvkj1n8N8wfs/i/On/M4r9R/pjF/zX5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvF/bf6YxX/z/DGL/xb5Yxb/1+WPWfxfnz9m8X9D/pjF/435Yxb/N+WPWfzfnD9m8X9L/pjFf8v8MYv/VvljFv+t88cs/m/NH7P4b5M/ZvHfNn/M4v+2/DGL/3b5Yxb/t+ePWfy3zx+z+L8jf8zi/878MYv/DvljFv8d88cs/jvlj1n8d84fs/i/K3/M4v/u/DGL/y75Yxb/9+SPWfx3zR+z+L83f8zi/778MYv/+/PHLP675Y9Z/HfPH7P475E/ZvH/QP6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6YxX/P/DGL/175Yxb/j+aPWfw/lj9m8f94/pjFf+/8MYv/J/LHLP775I9Z/D+ZP2bx/1T+mMV/3/wxi/+n88cs/p/JH7P4fzZ/zOL/ufwxi//n88cs/vvlj1n8988fs/h/IX/M4n9A/pjF/8D8MYv/F/PHLP4H5Y9Z/A/OH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/t/MH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/W/ljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zi/+38MYv/d/LHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4v/d/DGL/xn5Yxb/M/PHLP5n5Y9Z/L+XP2bx/37+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zi/9P8MYv/BfljFv8L88cs/j/LH7P4X5Q/ZvH/ef6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4v+L/DGL/y/zxyz+v8ofs/j/On/M4n9V/pjF/+r8MYv/b/LHLP6/zR+z+F+TP2bx/13+2JPef+5pTxe4Nn/sSe8/vQWuyx+z+F+fP2bx/33+mMX/hvwxi/+N+WMW/5vyxyz+f8gfs/j/MX/M4v+n/DGL/835Yxb/P+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf8v+WMW/zvyxyz+d+aPWfz/mj9m8b8rf8zi/7f8MYv/3/PHLP7/yB+z+P8zf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfyn5I9Z/B/IH7P4P5g/ZvGfmj8m8V9wkD9m8R/KH7P4j8ofs/jPlj9m8Z89f8ziPzp/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/mPwxi/9C+WMW/7H5Yxb/hfPHLP6L5I9Z/J+SP2bxf2r+mMX/afljFv9F88cs/k/PH7P4L5Y/ZvF/Rv6Yxf+Z+WOP8J9t8KT1Xzx/zHL+Pyt/zOL/7Pwxi/+4/DGL/3Pyxyz+z80fs/g/L3/M4r9E/pjFf8n8MYv/8/PHLP5L5Y9Z/JfOH7P4vyB/zOL/wvwxi/+L8scs/i/OH7P4L5M/ZvF/Sf6YxX/Z/DGL/3L5Yxb/5fX+o3CpxX8FvT9n8V8xf8ziv1L+mMX/pfljFv+V88cs/qvkj1n8V80fs/ivlj9m8X9Z/pjFf/X8MYv/GvljFv+X549Z/F+RP2bxXzN/zOI/Pn/M4j8hf8ziPzF/zOK/Vv6YxX/t/DGL/zr5Yxb/SfljFv/J+WMW/3Xzxyz+6+WPWfxfmT9m8X9V/pjFf/38MYv/BvljFv8N88cs/q/OH7P4b5Q/ZvF/Tf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/F+bP2bx3zx/zOK/Rf6Yxf91+WMW/9fnj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvHfMn/M4r9V/pjFf+v8MYv/W/PHLP7b5I9Z/LfNH7P4vy1/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/8/9ugBARBCgQLgN+Jm27Zt27Zt72bbtm3btm3brgu8E/RmrjD+o5b/gf6jlv9B/qOW/z39Ry3/e/mPWv739h+1/O/jP2r539d/1PK/n/+o5X9//1HL/wH+o5b/A/1HLf8H+Y9a/g/2H7X8H+I/avk/1H/U8n+Y/6jl/3D/Ucv/Ef6jlv8j/Uct/0f5j1r+j/Yftfwf4z9q+T/Wf9Tyf5z/qOX/eP9Ry/8J/qOW/xP9Ry3/J/mPWv5P9h+1/J/iP2r5P9V/1PJ/mv+o5f90/1HL/xn+o5b/M/1HLf9n+Y9a/s/2H7X8n+M/avk/13/U8n+e/6jl/3z/Ucv/Bf6jlv8L/Uct/xf5j1r+L/Yftfxf4j9q+b/Uf9Tyf5n/qOX/cv9Ry/8V/qOW/yv9Ry3/V/mPWv6v9h+1/F/jP2r5v9Z/1PJ/nf+o5f96/1HL/w3+o5b/G/1HLf83+Y9a/m/2H7X83+I/avm/1X/U8n+b/6jl/3b/Ucv/Hf6jlv87/Uct/3f5j1r+7/Yftfzf4z9q+b/Xf9Tyf5//qOX/fv9Ry/8D/qOW/wf9Ry3/D/mPWv4f9h+1/D/iP2r5f9R/1PL/mP+o5f9x/1HL/xP+o5b/J/1HLf9P+Y9a/p/2H7X8P+M/avl/1n/U8v+c/6jl/3n/Ucv/C/6jlv8X/Uct/y/5j1r+X/Yftfy/4j9q+X/Vf9Ty/5r/qOX/df9Ry/8b/qOW/zf9Ry3/b/mPWv7f9h+1/L/jP2r5f9d/1PL/nv+o5f99/1HL/wf+o5b/D/1HLf8f+Y9a/j/2H7X8f+I/avn/1H/U8v+Z/6jl/3P/Ucv/F/6jlv8v/Uct/1/5j1r+v/Yftfx/4z9q+f/Wf9Ty/53/qOX/e/9Ry/8P/qOW/x/9Ry3/P/mPWv5/9h+1/P/iP2r5/9V/1PL/m/+o5f93/1HL/x/+o5L/AX/zH7X8/91/1PL/D/9Ry/8//Uct///yH7X8/9t/1PL/H/9Ry/9//Uct///zH7X8/99/1PI/mP+o5X9w/1HL/xD+o5b/If1HLf9D+Y9a/of2H7X8D/AftfwP4z9q+R/Wf9TyP5z/qOV/eP9Ry/8I/qOW/xH9Ry3/I/mPWv5H9h+1/I/iP2r5H9V/1PI/mv+o5X90/1HL/xj+o5b/Mf1HLf9j+Y9a/sf2H7X8j+M/avkf13/U8j+e/6jlf3z/Ucv/BP6jlv8J/Uct/xP5j1r+J/YftfxP4j9q+Z/Uf9TyP5n/qOV/cv9Ry/8U/qOW/yn9Ry3/U/mPWv6n9h+1/E/jP2r5n9Z/1PI/nf+o5X96/1HL/wz+o5b/Gf1HLf8z+Y9a/mf2H7X8z+I/avmf1X/U8j+b/6jlf3b/Ucv/HP6jlv85/Uct/3P5j1r+5/YftfzP4z9q+Z/Xf9TyP5//qOV/fv9Ry/8C/qOW/wX9Ry3/C/mPWv4X9h+1/C/iP2r5X9R/1PK/mP+o5X9x/1HL/xL+o5b/Jf1HLf9L+Y9a/pf2H7X8L+M/avlf1n/U8r+c/6jlf3n/Ucv/Cv6jlv8V/Uct/yv5j1r+V/Yftfyv4j9q+V/Vf9Tyv5r/qOV/df9Ry/8a/qOW/zX9Ry3/a/mPWv7X9h+1/K/jP2r5X9d/1PK/nv+o5X99/1HL/wb+o5b/Df1HLf8b+Y9a/jf2H7X8b+I/avnf1H/U8r+Z/6jlf3P/Ucv/Fv6jlv8t/Uct/1v5j1r+t/Yftfxv4z9q+d/Wf9Tyv53/qOV/e/9Ry/8O/qOW/x39Ry3/O/mPWv539h+1/O/iP2r539V/1PK/m/+o5X93/1HL/x7+o5b/gf6jlv9B/qO/3D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCf7NttbJ1l4cfxu9s6xv78kxEXXIYmm1woJMJs95DxgrDJ2FYH3XgeAxzd2o2Ndptdh10B9/BiEiE8SDLJEiXKlqGEmdBIDAQriGjQRU00+ACIQhSNEyHolrhYc9pzSnvsGnvV61qUz+dFz7nv7ndva/LtfTcwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/V0PjwiPja4acGj/44IOHW/pe5xxdefOB3/ZcWHktf3rZMJccN/igt7e3d85zs3eUD08piqL0u+0sH0+qHpeuv7P+C539R2FBz0tLjk/5eeORA2tOf6Su++j9tX1na4ub1m1obfnYuKIIF9cWnaWDupqiCItri/tKB/WlgyW1xSOlg9l9B6cW3y4dnL92c2tz6cTS6K8Z/K9oaNxZjB9SbDHku8Hg/nfWf+vOyusIl6xcbUJR7v+Kru+/VfW5ihP0X7l+WFjd/6j/gsAJja7/FxZUXke45L/c/yc/teqV4T534v4r1w8f1z+kM8zz/5BGq5/7q57/ZwxzyYH9VTVdx0v9X3rbszPLpyZUnv+n9R8P2/+71w8XV/c/bsjzf+k5flHl+f+UogiXjPXrAe8lDY27jox0/x+5/wnTqzY1g/s/o33z/lL/jy/53hPlU7X/zs//g/pfNML9f9zSqj8rMDoNjV/urbr/j6L/4iPDXHKg/7ef+PXDpf4f+/0DZw763Gj6v6S6/1kdbVtmbd3edd6Gtqb1LetbNtXNnj9nXn3dvAvmzup7JOj/OMavCrw3jO3+X0yu2tQURcvA/pruA0+X+p/74INzyqcmjbL/xSPe/2e4/8OwPjSumDix6Gzq6Giv6/9YOazv/9j/y4bpfxQ//591TvmX1ZZfa4pi2sD+rjPvXlHq/51Dz+4un5o4yv6XjNj/goHfF4gwxvt/c9VmSP8HD73U9/y/7N6DZ5RPjfbn/6Uj9v+q+z+MRUNj1f/w8x9W6n9XcVlkp6HBf/+DdHL0/9g7N/TErcMn9A/p5Oj/d587em7cOizTP6STo/8JGx94Pm4dLtU/pJOj/+VT56+IW4fL9A/p5Oh/7avn/jluHRr1D+nk6P+cL+3ujFuH5fqHdHL0/1D7nG1x67BC/5BOjv5/etpDr8Wtw+X6h3Ry9H/s2D03xq3DFfqHdHL0373n7B/ErcOV+od0cvR/+bqFIW4drtI/pJOj/+nT/vh43DpcrX9IJ0f/8/7099Pi1uEa/UM6Ofq/4/Mr9sWtw7X6h3Ry9D/++ldejFuHlfqHdHL0v/TsbQvj1uE6/UM6Ofpv/klzb9w6rNI/pJOj/1lf/9GGuHW4Xv+QTo7+Dy9/dE/cOtygf0gnR/976oopcetwo/4hnRz9f+27px+KW4dP6h/SydH/b556cn7cOqzWP6STo//nPnD7N+LW4Sb9Qzo5+r93zYtnxa1Dk/4hnRz9P7z3+S/GrcMa/UM6Ofp/4422/4tbh7X6h3Ry9D950qmvx61Ds/4hnRz9L7z1K+1x69Cif0gnR/9tu7t/GLcO6/QP6eTo/8PHp62KW4f1+od0cvS/cu7e98etw836h3Ry9P++ZRfuiluHDfqHdHL0f1HPRy+KW4eN+od0cvTf8cxnvxq3DrfoH9LJ0f/ema8tjluHVv1DOjn6f3n10h/HrUOb/iGdHP2/9eh1m+LWYZP+IZ0c/T/5s7ePxa3DZv1DOjn6//8LFv01bh226B/SydH/4iVvro1bh0/pH9LJ0f/G7n+8HLcO7fqHdHL0P/Pw1cvi1mGr/iGdHP1/57y6/XHr0KF/SCdH/3deua8+bh226R/SydH//oN33R23DrfqH9LJ0f+bv5gxPW4dPq1/SCdH//dPOXRt3Dp06h/SydH/LzfVPhO3Dtv1D+nk6P9v+6buiFuHLv1DOjn6f/r1nj/ErcNt+od0cvS/esKvJsatw+36h3Ry9D+1a8t9cetwh/4hnRz9z7+n6fy4dfiM/iGdHP1v/csL34xbhx36h3S2bu+6pam1taXdG2+88Wbgzcn+zgSk9m70J/tPAgAAAAAAAAAAAAAAnEiOf050sv+OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rYPo3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArwAAAP//vEngYw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f00000003c0)={0x1100, 0x0, 0x0, 0x392a}) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) 7.051662702s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000013c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f0000000e40)=ANY=[@ANYBLOB="c021050000000000000000000600000000000000000000000000000000000000cbeeca803c254242d2815ee33bfe939cd984621573f3e812ae02075d55886b21a0bace710f1a6a20aa09ce236a83f87ec72d4ad9cc211a04db34aac46e390d7ff270e3637e87868728a7c0a47dfc7d37db92b339e81f1632acae66b5d7da638c01913dc334ed701eaa8988498e8ddeef8f412fe5ea00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x795) 5.937825992s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x0, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x50}}, {}, [], {{0x6}, {0x5}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, 0x0, 0x32600) 5.448305137s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x18}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(r2) 3.115829443s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.87642647s ago: executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8f0cb97907081175f37538e486dd"], 0xfdef) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0xfdef) 2.799868022s ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) 2.61246656s ago: executing program 2: msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xe81, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd5, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) syz_usb_connect(0x0, 0x3f, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904"], 0x0) 2.608736321s ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private}, {@multicast1}, {@remote}, {@dev}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast}, {@multicast2}]}, @noop, @noop, @rr={0x7, 0xb, 0x0, [@multicast1, @private]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.463920933s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20}]}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000500)={@cgroup, 0x34, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=r1, 0x32, 0x0, 0x883, &(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500"], 0x54}}, 0x0) 2.340227952s ago: executing program 4: socket$inet6(0xa, 0x0, 0x0) dup(0xffffffffffffffff) msgrcv(0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) 2.326947374s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x800, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) 1.997046404s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="040046002c005180280000801100010002d0e86cbe4d68f75ce39f0dab9cd2a5ca5784c170ac0f0005000200000000000a0034000101010101010000080026006c09"], 0x60}}, 0x0) 1.866012704s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x4}], 0x4) 1.579500728s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000013c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x795) 1.408129144s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4087, 0xff7}], 0x1, 0x800, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x34, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x20004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) 1.387925107s ago: executing program 3: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000040)='./file1\x00', 0x0) 1.323245957s ago: executing program 3: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000480), 0x810a7c, r3}, 0x38) 231.336214ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, 0x0, &(0x7f0000000240)=@tcp6=r2, 0x2}, 0x20) 214.337747ms ago: executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 160.685065ms ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000292100003b000000000000000000010013537f279e70d0ccce5feedb85"], 0x18}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x81842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(r6, 0x0, 0xffdd) pipe2(&(0x7f0000000040), 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 148.460977ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_da_update_reserve_space\x00', r3}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x7) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 0s ago: executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): an invalid bInterval 0, changing to 7 [ 221.211510][ T3617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.221508][ T3617] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 221.229290][ T6156] loop1: detected capacity change from 0 to 512 [ 221.240712][ T3617] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 221.250253][ T3617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.267777][ T3617] usb 5-1: config 0 descriptor?? [ 221.277139][ T6156] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 221.333890][ T6156] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 221.374144][ T6156] EXT4-fs (loop1): Remounting filesystem read-only [ 221.434052][ T6156] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 1 (level 1) [ 221.462320][ T6156] EXT4-fs (loop1): 1 truncate cleaned up [ 221.470262][ T6156] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 221.578223][ T4205] EXT4-fs (loop1): unmounting filesystem. [ 221.815236][ T6169] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 221.854457][ T3617] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 221.854491][ T3617] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 221.854515][ T3617] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 221.854538][ T3617] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 221.854560][ T3617] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 221.857592][ T3617] ntrig 0003:1B96:000A.0007: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 222.074919][ T3617] usb 5-1: USB disconnect, device number 10 [ 222.226319][ T6180] loop1: detected capacity change from 0 to 256 [ 222.234413][ T6180] exfat: Deprecated parameter 'namecase' [ 222.272345][ T6180] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 222.452698][ T3576] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 222.686428][ T6184] overlayfs: failed to resolve './file0': -2 [ 222.699088][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.729484][ T6186] device veth0_to_bond entered promiscuous mode [ 222.780047][ T6190] loop1: detected capacity change from 0 to 512 [ 222.797264][ T6190] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.828623][ T6190] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 222.851462][ T6190] EXT4-fs (loop1): Remounting filesystem read-only [ 222.858810][ T3645] wlan1: Trigger new scan to find an IBSS to join [ 222.867038][ T9] wlan1: Trigger new scan to find an IBSS to join [ 222.877035][ T6190] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 1 (level 1) [ 222.902765][ T6190] EXT4-fs (loop1): 1 truncate cleaned up [ 222.908814][ T6190] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 223.006012][ T4205] EXT4-fs (loop1): unmounting filesystem. [ 223.176830][ T6204] loop2: detected capacity change from 0 to 2048 [ 223.194766][ T6210] loop0: detected capacity change from 0 to 256 [ 223.202254][ T6210] exfat: Deprecated parameter 'namecase' [ 223.229789][ T6204] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 223.262338][ T6204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.280700][ T6210] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 223.353693][ T6213] loop3: detected capacity change from 0 to 128 [ 223.430975][ T6213] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 223.452933][ T6213] ext4 filesystem being mounted at /root/syzkaller-testdir1472457218/syzkaller.oK3Qme/7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 223.488413][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.596087][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.688377][ T5936] EXT4-fs (loop3): unmounting filesystem. [ 223.813887][ T6225] loop3: detected capacity change from 0 to 512 [ 223.831189][ T6225] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.865223][ T4724] wlan1: Creating new IBSS network, BSSID e6:e7:79:b6:ba:c4 [ 223.896593][ T6225] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 223.897790][ T6228] overlayfs: failed to resolve './file0': -2 [ 223.923037][ T6225] EXT4-fs (loop3): Remounting filesystem read-only [ 223.934837][ T6225] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 1 (level 1) [ 223.963782][ T6225] EXT4-fs (loop3): 1 truncate cleaned up [ 223.969792][ T6225] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 224.107168][ T5936] EXT4-fs (loop3): unmounting filesystem. [ 224.212299][ T6232] loop1: detected capacity change from 0 to 8192 [ 224.250562][ T6232] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 224.288056][ T6232] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 224.339039][ T6241] loop0: detected capacity change from 0 to 256 [ 224.354060][ T6241] exfat: Deprecated parameter 'namecase' [ 224.399833][ T6241] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 224.781658][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 224.797288][ T6254] loop0: detected capacity change from 0 to 128 [ 224.830369][ T6255] device veth0_to_bond entered promiscuous mode [ 224.842153][ T6254] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 224.882088][ T6254] ext4 filesystem being mounted at /root/syzkaller-testdir3825416521/syzkaller.Xz0lFc/42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 225.110728][ T6265] loop1: detected capacity change from 0 to 512 [ 225.120608][ T6265] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.138670][ T6265] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 225.154497][ T6265] EXT4-fs (loop1): Remounting filesystem read-only [ 225.161756][ T6265] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 1 (level 1) [ 225.178363][ T6265] EXT4-fs (loop1): 1 truncate cleaned up [ 225.184546][ T6265] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 225.209032][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 225.233457][ T4205] EXT4-fs (loop1): unmounting filesystem. [ 225.302610][ T3617] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 225.338310][ T6270] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 225.392712][ T6270] device bond1 entered promiscuous mode [ 225.395944][ T6273] loop1: detected capacity change from 0 to 256 [ 225.406366][ T6273] exfat: Deprecated parameter 'namecase' [ 225.420359][ T6273] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 225.473966][ T6274] bond1: (slave ip6gretap1): making interface the new active one [ 225.482274][ T6274] device ip6gretap1 entered promiscuous mode [ 225.527477][ T6274] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 225.833556][ T3645] wlan1: Creating new IBSS network, BSSID 76:b2:af:bb:c0:bf [ 226.053776][ T3617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.130846][ T3617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.331544][ T3617] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.455000][ T3617] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 226.487873][ T3617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.521746][ T3617] usb 4-1: config 0 descriptor?? [ 226.688243][ T6286] loop2: detected capacity change from 0 to 8192 [ 226.710847][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.734220][ T6286] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 226.773993][ T6286] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 226.934108][ T6296] loop1: detected capacity change from 0 to 128 [ 226.964249][ T6298] loop0: detected capacity change from 0 to 512 [ 226.981696][ T6296] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 226.992879][ T6298] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 227.009008][ T6296] ext4 filesystem being mounted at /root/syzkaller-testdir1410418890/syzkaller.alS3pr/170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 227.045504][ T6303] loop2: detected capacity change from 0 to 256 [ 227.055385][ T3617] logitech 0003:046D:C293.0008: item fetching failed at offset 5/7 [ 227.061409][ T6303] exfat: Deprecated parameter 'namecase' [ 227.089539][ T3617] logitech 0003:046D:C293.0008: parse failed [ 227.099994][ T6298] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 227.118617][ T3617] logitech: probe of 0003:046D:C293.0008 failed with error -22 [ 227.133032][ T6303] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 227.145417][ T6298] EXT4-fs (loop0): Remounting filesystem read-only [ 227.153973][ T6298] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 1 (level 1) [ 227.155250][ T4205] EXT4-fs (loop1): unmounting filesystem. [ 227.178340][ T6298] EXT4-fs (loop0): 1 truncate cleaned up [ 227.184634][ T6298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 227.189617][ T6306] loop4: detected capacity change from 0 to 2048 [ 227.205721][ T6306] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 227.246465][ T6306] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.246967][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 227.275959][ T7] usb 4-1: USB disconnect, device number 14 [ 227.628584][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.890650][ T6326] loop3: detected capacity change from 0 to 512 [ 227.990231][ T6326] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 228.004175][ T6326] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1803c01c, mo2=0002] [ 228.040329][ T6326] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 228.071272][ T6326] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 228.133736][ T6326] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 229.112225][ T5936] EXT4-fs (loop3): unmounting filesystem. [ 229.180308][ T6338] loop3: detected capacity change from 0 to 512 [ 229.219865][ T6338] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.245730][ T6342] loop0: detected capacity change from 0 to 256 [ 229.253104][ T6341] loop2: detected capacity change from 0 to 128 [ 229.262562][ T6342] exfat: Deprecated parameter 'namecase' [ 229.290303][ T6342] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 229.329161][ T6341] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 229.329934][ T6338] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 229.354342][ T6338] EXT4-fs (loop3): Remounting filesystem read-only [ 229.361469][ T6341] ext4 filesystem being mounted at /root/syzkaller-testdir2424991458/syzkaller.UpM9B3/64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 229.394174][ T6338] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 1 (level 1) [ 229.411845][ T6338] EXT4-fs (loop3): 1 truncate cleaned up [ 229.424034][ T6338] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 229.501421][ T5936] EXT4-fs (loop3): unmounting filesystem. [ 229.629465][ T5322] EXT4-fs (loop2): unmounting filesystem. [ 229.746069][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.928848][ T6357] loop0: detected capacity change from 0 to 512 [ 229.985701][ T6357] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 230.001561][ T6357] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 230.012154][ T6357] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 230.061880][ T6357] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 230.070426][ T6357] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 230.085801][ T6357] EXT4-fs (loop0): Remounting filesystem read-only [ 230.092905][ T6357] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 230.108569][ T6357] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 231.561986][ T6380] loop2: detected capacity change from 0 to 256 [ 231.587248][ T6380] exfat: Deprecated parameter 'namecase' [ 231.616525][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 231.635753][ T6380] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 231.662099][ T6381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.758140][ T7] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 231.917987][ T26] audit: type=1800 audit(2000000042.480:47): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 232.154188][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.181484][ T7] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 232.985226][ T6403] loop1: detected capacity change from 0 to 2048 [ 233.077172][ T6403] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 233.094489][ T6403] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.320458][ T6415] loop0: detected capacity change from 0 to 512 [ 233.373324][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.384187][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.485471][ T6415] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.542875][ T7] usb 4-1: Product: syz [ 233.625321][ T7] usb 4-1: Manufacturer: syz [ 233.723214][ T7] usb 4-1: SerialNumber: syz [ 233.961395][ T6415] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 234.040717][ T6415] EXT4-fs (loop0): Remounting filesystem read-only [ 234.073099][ T6415] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 1 (level 1) [ 234.113021][ T6415] EXT4-fs (loop0): 1 truncate cleaned up [ 234.118876][ T6415] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 234.228957][ T6374] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.308579][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 234.320870][ T6423] loop2: detected capacity change from 0 to 512 [ 234.407498][ T6423] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 234.424109][ T6423] ext4 filesystem being mounted at /root/syzkaller-testdir2424991458/syzkaller.UpM9B3/71/file1 supports timestamps until 2038 (0x7fffffff) [ 234.933404][ T6374] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.998338][ T6444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.272874][ T7] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 235.279542][ T7] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 235.337316][ T7] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 236.303714][ T7] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 236.315983][ T7] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 236.332720][ T7] usb 4-1: USB disconnect, device number 15 [ 236.339356][ T7] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 236.452887][ T5322] EXT4-fs (loop2): unmounting filesystem. [ 236.685842][ T6457] loop3: detected capacity change from 0 to 512 [ 236.729033][ T6457] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 236.787205][ T6457] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 237.172322][ T6457] EXT4-fs (loop3): Remounting filesystem read-only [ 237.389428][ T6457] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 1 (level 1) [ 237.487934][ T6457] EXT4-fs (loop3): 1 truncate cleaned up [ 237.524438][ T6457] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 237.712797][ T5936] EXT4-fs (loop3): unmounting filesystem. [ 237.818129][ T6481] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.841040][ T6479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.092105][ T6491] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.843528][ T6520] loop0: detected capacity change from 0 to 2048 [ 238.908679][ T6520] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 238.976731][ T6520] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.320500][ T6533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.362536][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 239.742801][ T7] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 239.769832][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.839558][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 239.919115][ T7] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 239.972518][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.029717][ T7] usb 3-1: config 0 descriptor?? [ 240.103948][ T7] usb-storage 3-1:0.0: USB Mass Storage device detected [ 240.116360][ T6539] loop4: detected capacity change from 0 to 128 [ 240.141277][ T7] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 240.191727][ T6539] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 240.204351][ T6539] ext4 filesystem being mounted at /root/syzkaller-testdir2716813946/syzkaller.fqGlxJ/32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 240.306680][ T152] usb 3-1: USB disconnect, device number 9 [ 240.337945][ T5882] EXT4-fs (loop4): unmounting filesystem. [ 240.732593][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 240.790689][ T6568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.930976][ T6573] loop2: detected capacity change from 0 to 2048 [ 240.950105][ T6573] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 240.964675][ T6573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.128098][ T6579] loop0: detected capacity change from 0 to 128 [ 241.148666][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.161308][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.179198][ T6579] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 241.208556][ T6579] ext4 filesystem being mounted at /root/syzkaller-testdir3825416521/syzkaller.Xz0lFc/79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 241.211993][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.299323][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 241.319586][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.341946][ T7] usb 2-1: config 0 descriptor?? [ 241.372215][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 241.599558][ T6585] overlayfs: missing 'lowerdir' [ 241.975742][ T6597] loop4: detected capacity change from 0 to 512 [ 241.999164][ T6597] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 242.024562][ T7] logitech 0003:046D:C293.0009: item fetching failed at offset 5/7 [ 242.040991][ T6597] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 242.061614][ T7] logitech 0003:046D:C293.0009: parse failed [ 242.073187][ T7] logitech: probe of 0003:046D:C293.0009 failed with error -22 [ 242.086988][ T6597] EXT4-fs (loop4): Remounting filesystem read-only [ 242.099522][ T6597] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 1 (level 1) [ 242.158639][ T6597] EXT4-fs (loop4): 1 truncate cleaned up [ 242.165707][ T6597] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 242.221353][ T5882] EXT4-fs (loop4): unmounting filesystem. [ 242.241431][ T7] usb 2-1: USB disconnect, device number 17 [ 242.272484][ T2964] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 242.803303][ T2964] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 242.869974][ T2964] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.941005][ T6616] loop0: detected capacity change from 0 to 128 [ 242.961061][ T2964] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 243.221895][ T2964] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 243.265203][ T2964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.314469][ T2964] usb 3-1: config 0 descriptor?? [ 243.329686][ T6616] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 243.358263][ T6616] ext4 filesystem being mounted at /root/syzkaller-testdir3825416521/syzkaller.Xz0lFc/84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 243.410296][ T6617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.421531][ T2964] usb-storage 3-1:0.0: USB Mass Storage device detected [ 243.453802][ T2964] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 243.564600][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 243.624153][ T155] usb 3-1: USB disconnect, device number 10 [ 243.699434][ T6630] overlayfs: missing 'lowerdir' [ 243.799241][ T6632] loop4: detected capacity change from 0 to 2048 [ 243.829596][ T6632] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 243.855646][ T6632] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.084277][ T6640] loop1: detected capacity change from 0 to 512 [ 244.094996][ T6640] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 244.157268][ T6640] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 244.206836][ T6640] EXT4-fs (loop1): Remounting filesystem read-only [ 244.214400][ T6640] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 1 (level 1) [ 244.237195][ T6640] EXT4-fs (loop1): 1 truncate cleaned up [ 244.245943][ T6640] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 244.347743][ T4205] EXT4-fs (loop1): unmounting filesystem. [ 244.481296][ T6652] loop1: detected capacity change from 0 to 128 [ 244.574197][ T6652] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 244.629719][ T6652] ext4 filesystem being mounted at /root/syzkaller-testdir1410418890/syzkaller.alS3pr/187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 244.911112][ T6662] overlayfs: missing 'lowerdir' [ 244.913481][ T4205] EXT4-fs (loop1): unmounting filesystem. [ 244.956948][ T6663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.131897][ T6678] loop4: detected capacity change from 0 to 512 [ 245.147271][ T6678] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 245.182265][ T6678] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 245.206739][ T6678] EXT4-fs (loop4): Remounting filesystem read-only [ 245.214253][ T6678] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 1 (level 1) [ 245.240598][ T6678] EXT4-fs (loop4): 1 truncate cleaned up [ 245.252566][ T6678] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 245.282544][ T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 245.308241][ T5882] EXT4-fs (loop4): unmounting filesystem. [ 245.451905][ T6697] loop0: detected capacity change from 0 to 128 [ 245.466917][ T6693] loop2: detected capacity change from 0 to 2048 [ 245.506034][ T6697] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 245.522950][ T6697] ext4 filesystem being mounted at /root/syzkaller-testdir3825416521/syzkaller.Xz0lFc/94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 245.561762][ T6693] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 245.578182][ T6693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.609296][ T6700] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 245.618238][ T6700] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 245.669583][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 245.712728][ T7] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 245.749529][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.782305][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.814852][ T7] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 245.839326][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.877024][ T7] usb 2-1: config 0 descriptor?? [ 245.923659][ T7] usb-storage 2-1:0.0: USB Mass Storage device detected [ 245.938420][ T6713] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.956252][ T7] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 245.986507][ T6717] loop0: detected capacity change from 0 to 512 [ 246.016239][ T6717] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.077509][ T6717] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 246.125941][ T4322] usb 2-1: USB disconnect, device number 18 [ 246.233858][ T6717] EXT4-fs (loop0): Remounting filesystem read-only [ 246.254111][ T6717] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 1 (level 1) [ 246.329782][ T6717] EXT4-fs (loop0): 1 truncate cleaned up [ 246.352046][ T6717] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 246.669683][ T6724] device veth0_vlan left promiscuous mode [ 246.679069][ T6724] device veth0_vlan entered promiscuous mode [ 246.680019][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 246.842037][ T6737] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 246.896916][ T6737] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 246.952197][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.985230][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.010371][ T6729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.022777][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.190836][ T6754] loop4: detected capacity change from 0 to 512 [ 247.218816][ T6754] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 247.260717][ T6754] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 247.299434][ T6754] EXT4-fs (loop4): Remounting filesystem read-only [ 247.319553][ T6754] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 1 (level 1) [ 247.324545][ T6760] loop0: detected capacity change from 0 to 2048 [ 247.351077][ T6754] EXT4-fs (loop4): 1 truncate cleaned up [ 247.357213][ T6754] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 247.370952][ T6760] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 247.395030][ T6760] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.433443][ T5882] EXT4-fs (loop4): unmounting filesystem. [ 247.692589][ T7] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 247.740032][ T6774] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 247.763738][ T6774] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 248.112981][ T7] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 248.145144][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.177599][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 248.223796][ T7] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 248.258522][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.290167][ T7] usb 2-1: config 0 descriptor?? [ 248.343527][ T7] usb-storage 2-1:0.0: USB Mass Storage device detected [ 248.372496][ T7] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 248.617452][ T7] usb 2-1: USB disconnect, device number 19 [ 249.421532][ T6803] loop1: detected capacity change from 0 to 1024 [ 249.423135][ T6799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.440804][ T6803] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 249.964997][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.094337][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.246767][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.340094][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.880534][ T3583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.890595][ T3583] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.898794][ T3583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.910394][ T3571] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.921358][ T3571] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 250.930123][ T3571] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.092862][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 251.113734][ T6831] loop3: detected capacity change from 0 to 512 [ 251.471189][ T6831] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 251.609398][ T6831] ext4 filesystem being mounted at /root/syzkaller-testdir1472457218/syzkaller.oK3Qme/34/file0 supports timestamps until 2038 (0x7fffffff) [ 251.910806][ T5936] EXT4-fs (loop3): unmounting filesystem. [ 252.057950][ T6840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.111135][ T6827] chnl_net:caif_netlink_parms(): no params data found [ 252.118469][ T6846] overlayfs: missing 'lowerdir' [ 252.191154][ T6848] loop2: detected capacity change from 0 to 2048 [ 252.222103][ T6848] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 252.244767][ T6848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.254107][ T7] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 252.268564][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.279196][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 252.292614][ T7] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 252.301795][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.312135][ T7] usb 1-1: config 0 descriptor?? [ 252.352321][ T6827] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.363596][ T7] usb-storage 1-1:0.0: USB Mass Storage device detected [ 252.373055][ T6827] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.386517][ T7] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 252.402741][ T6827] device bridge_slave_0 entered promiscuous mode [ 252.449423][ T9] device hsr_slave_0 left promiscuous mode [ 252.474686][ T9] device hsr_slave_1 left promiscuous mode [ 252.486034][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.502587][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.525384][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.534063][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.554542][ T9] device bridge_slave_1 left promiscuous mode [ 252.560971][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.570541][ T2964] usb 1-1: USB disconnect, device number 12 [ 252.589013][ T9] device bridge_slave_0 left promiscuous mode [ 252.602642][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.630920][ T9] device veth0_to_bond left promiscuous mode [ 252.645627][ T9] device veth1_macvtap left promiscuous mode [ 252.651707][ T9] device veth0_macvtap left promiscuous mode [ 252.665749][ T9] device veth1_vlan left promiscuous mode [ 252.671683][ T9] device veth0_vlan left promiscuous mode [ 252.725757][ T26] audit: type=1804 audit(2000000063.290:48): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2716813946/syzkaller.fqGlxJ/67/file1" dev="sda1" ino=1955 res=1 errno=0 [ 252.822544][ T26] audit: type=1804 audit(2000000063.320:49): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2716813946/syzkaller.fqGlxJ/67/file1" dev="sda1" ino=1955 res=1 errno=0 [ 253.012649][ T3583] Bluetooth: hci2: command tx timeout [ 254.302138][ T9] team0 (unregistering): Port device team_slave_1 removed [ 254.350146][ T9] team0 (unregistering): Port device team_slave_0 removed [ 254.377801][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.422128][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.534283][ T6887] overlayfs: missing 'lowerdir' [ 254.664917][ T9] bond0 (unregistering): Released all slaves [ 254.785456][ T6827] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.792878][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.801166][ T6827] device bridge_slave_1 entered promiscuous mode [ 254.824174][ T6889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.895053][ T6827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.960665][ T6827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.067645][ T6827] team0: Port device team_slave_0 added [ 255.081951][ T6827] team0: Port device team_slave_1 added [ 255.102437][ T3583] Bluetooth: hci2: command tx timeout [ 255.162137][ T6827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.172756][ T6827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.259821][ T6827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.281317][ T6827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.289577][ T6827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.339989][ T6827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.410434][ T6827] device hsr_slave_0 entered promiscuous mode [ 255.424076][ T6827] device hsr_slave_1 entered promiscuous mode [ 255.431058][ T6827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.450544][ T6827] Cannot create hsr debugfs directory [ 255.556904][ T26] audit: type=1804 audit(2000000066.110:50): pid=6912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2716813946/syzkaller.fqGlxJ/70/file1" dev="sda1" ino=1951 res=1 errno=0 [ 255.583147][ T152] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 255.654385][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.661297][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.972631][ T152] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 256.194886][ T152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.217275][ T26] audit: type=1804 audit(2000000066.110:51): pid=6912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2716813946/syzkaller.fqGlxJ/70/file1" dev="sda1" ino=1951 res=1 errno=0 [ 256.281671][ T152] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 256.373351][ T152] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 256.432184][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.493398][ T6917] loop0: detected capacity change from 0 to 512 [ 256.494107][ T152] usb 3-1: config 0 descriptor?? [ 256.555972][ T6919] overlayfs: missing 'workdir' [ 256.563730][ T152] usb-storage 3-1:0.0: USB Mass Storage device detected [ 256.599098][ T6917] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 256.612749][ T6917] ext4 filesystem being mounted at /root/syzkaller-testdir3825416521/syzkaller.Xz0lFc/107/file0 supports timestamps until 2038 (0x7fffffff) [ 256.633895][ T152] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 256.752008][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 256.772660][ T4044] usb 3-1: USB disconnect, device number 11 [ 256.895911][ T6933] loop3: detected capacity change from 0 to 512 [ 256.920932][ T6933] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 256.929757][ T6931] loop0: detected capacity change from 0 to 2048 [ 256.957105][ T6933] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 256.975205][ T6931] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 256.989825][ T6933] EXT4-fs (loop3): Remounting filesystem read-only [ 256.996795][ T6933] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 1 (level 1) [ 257.018566][ T6933] EXT4-fs (loop3): 1 truncate cleaned up [ 257.025989][ T6933] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 257.026415][ T6931] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.122139][ T5936] EXT4-fs (loop3): unmounting filesystem. [ 257.181355][ T3583] Bluetooth: hci2: command tx timeout [ 257.233720][ T6827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 257.271425][ T6827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 257.316057][ T6827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 257.359655][ T6827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 258.144163][ T6942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.304994][ T6827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.402143][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.420818][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.471192][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 258.496673][ T6959] overlayfs: missing 'workdir' [ 258.498608][ T6827] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.731977][ T6962] loop2: detected capacity change from 0 to 512 [ 258.790032][ T6827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.817788][ T6962] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 258.861693][ T6827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.878167][ T6962] ext4 filesystem being mounted at /root/syzkaller-testdir2424991458/syzkaller.UpM9B3/107/file0 supports timestamps until 2038 (0x7fffffff) [ 259.010717][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.059149][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.090549][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.097859][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.143905][ T6973] loop3: detected capacity change from 0 to 512 [ 259.155390][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.174357][ T6973] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 259.180747][ T5322] EXT4-fs (loop2): unmounting filesystem. [ 259.188989][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.203055][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.210252][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.223843][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.232072][ T6973] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 259.247989][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.256962][ T6973] EXT4-fs (loop3): Remounting filesystem read-only [ 259.257314][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.263722][ T3583] Bluetooth: hci2: command tx timeout [ 259.274296][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.286347][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.296857][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.297960][ T6973] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 1 (level 1) [ 259.305864][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.327295][ T6973] EXT4-fs (loop3): 1 truncate cleaned up [ 259.333294][ T6973] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 259.352544][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.378425][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.406721][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.432832][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.462022][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.495666][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.550368][ T5936] EXT4-fs (loop3): unmounting filesystem. [ 259.703664][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.711270][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.925313][ T6827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.062498][ T3650] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 260.463433][ T3650] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 260.510175][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.580165][ T6998] overlayfs: failed to resolve './file2': -2 [ 260.590398][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.609966][ T3650] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.667273][ T3650] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 260.684433][ T7000] overlayfs: missing 'workdir' [ 260.719633][ T6827] device veth0_vlan entered promiscuous mode [ 260.768359][ T3650] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 260.789384][ T6827] device veth1_vlan entered promiscuous mode [ 260.807832][ T3650] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.843579][ T3650] usb 3-1: config 0 descriptor?? [ 260.866151][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.881898][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.893023][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 260.901517][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 260.910592][ T3650] usb-storage 3-1:0.0: USB Mass Storage device detected [ 260.924409][ T6827] device veth0_macvtap entered promiscuous mode [ 260.952685][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.960871][ T3650] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 260.972088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.012952][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.023010][ T7001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.040734][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.053636][ T6827] device veth1_macvtap entered promiscuous mode [ 261.078611][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.087855][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 261.100442][ T6827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.116667][ T3617] usb 3-1: USB disconnect, device number 12 [ 261.125326][ T6827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.135794][ T6827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.146430][ T6827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.156490][ T6827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.167906][ T6827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.178045][ T6827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.190280][ T6827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.202699][ T6827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.214067][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.228201][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.247112][ T6827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.259996][ T6827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.270544][ T6827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.281222][ T6827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.291080][ T6827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.303861][ T6827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.313991][ T6827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.325112][ T6827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.336997][ T6827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.357451][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.366457][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.378118][ T6827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.387632][ T6827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.396798][ T6827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.405879][ T6827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.512721][ T4752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.528416][ T4752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.567469][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 261.590128][ T3665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.603559][ T3665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.640212][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 261.746766][ T7018] loop0: detected capacity change from 0 to 512 [ 261.764859][ T7018] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 261.805520][ T7018] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 261.864464][ T7018] EXT4-fs (loop0): Remounting filesystem read-only [ 261.895438][ T7018] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 1 (level 1) [ 261.915111][ T7018] EXT4-fs (loop0): 1 truncate cleaned up [ 261.924473][ T7018] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 262.029362][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 262.098570][ T7033] device syzkaller0 entered promiscuous mode [ 262.259361][ T7040] kvm: emulating exchange as write [ 262.329447][ T7043] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 262.977393][ T7043] loop1: detected capacity change from 0 to 256 [ 263.030881][ T7043] exfat: Bad value for 'dmask' [ 263.216411][ T7043] loop1: detected capacity change from 0 to 512 [ 263.299099][ T7043] loop1: detected capacity change from 0 to 512 [ 263.329772][ T7043] EXT4-fs warning (device loop1): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 263.406887][ T26] audit: type=1326 audit(2000000073.970:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b727cee9 code=0x7ffc0000 [ 263.462854][ T26] audit: type=1326 audit(2000000073.970:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1b727cee9 code=0x7ffc0000 [ 263.493232][ T3650] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 263.515371][ T7066] loop3: detected capacity change from 0 to 512 [ 263.540265][ T7066] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 263.562559][ T26] audit: type=1326 audit(2000000073.970:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b727cee9 code=0x7ffc0000 [ 263.601344][ T7066] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 263.605981][ T7071] loop4: detected capacity change from 0 to 2048 [ 263.622534][ T7066] EXT4-fs (loop3): Remounting filesystem read-only [ 263.629463][ T7066] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 1 (level 1) [ 263.650680][ T7066] EXT4-fs (loop3): 1 truncate cleaned up [ 263.657099][ T7066] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 263.695567][ T26] audit: type=1326 audit(2000000073.970:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fb1b727cee9 code=0x7ffc0000 [ 263.721284][ T26] audit: type=1326 audit(2000000073.970:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b727cee9 code=0x7ffc0000 [ 263.765022][ T7071] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.785517][ T26] audit: type=1326 audit(2000000073.970:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b727cee9 code=0x7ffc0000 [ 263.859541][ T5936] EXT4-fs (loop3): unmounting filesystem. [ 263.974458][ T3650] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 264.002960][ T3650] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.026582][ T3650] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 264.055458][ T3650] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 264.064899][ T3650] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.100383][ T3650] usb 1-1: config 0 descriptor?? [ 264.163654][ T3650] usb-storage 1-1:0.0: USB Mass Storage device detected [ 264.204597][ T3650] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 264.899058][ T3650] usb 1-1: USB disconnect, device number 13 [ 265.230607][ T7104] loop3: detected capacity change from 0 to 2048 [ 265.294112][ T7104] loop3: p2 < > [ 265.351514][ C1] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 265.385857][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.492967][ T4322] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 265.549154][ T7112] loop3: detected capacity change from 0 to 512 [ 265.598546][ T7112] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 265.707424][ T7112] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 265.730606][ T7112] EXT4-fs (loop3): Remounting filesystem read-only [ 265.750158][ T7112] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 1 (level 1) [ 265.791343][ T7112] EXT4-fs (loop3): 1 truncate cleaned up [ 265.805399][ T7112] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 265.890948][ T5936] EXT4-fs (loop3): unmounting filesystem. [ 265.922761][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.951387][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.989657][ T4322] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 266.022279][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.060853][ T4322] usb 1-1: config 0 descriptor?? [ 266.459804][ T26] audit: type=1800 audit(2000000077.020:58): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 266.730345][ T4322] hid (null): bogus close delimiter [ 268.008098][ T7140] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.057001][ T7140] FAT-fs (loop3): unable to read boot sector [ 268.172555][ T4322] usb 1-1: string descriptor 0 read error: -71 [ 268.192548][ T4322] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 268.232558][ T4322] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 268.240798][ T4322] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 268.277246][ T7144] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.285027][ T4322] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 268.303311][ T4322] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 268.327542][ T7144] FAT-fs (loop1): unable to read boot sector [ 268.334267][ T4322] usb 1-1: USB disconnect, device number 14 [ 268.414454][ T7146] loop1: detected capacity change from 0 to 2048 [ 268.484177][ T7146] loop1: p2 < > [ 268.511968][ C1] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 268.556062][ T7154] loop0: detected capacity change from 0 to 256 [ 268.584460][ T7154] exfat: Unknown parameter 'ÜøW¡2Ô*œ×5šóý¯ÛîªE‰ÆM˜uIÉÇ!Ë' [ 268.759358][ T26] audit: type=1326 audit(2000000079.320:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9da7cee9 code=0x7ffc0000 [ 268.816868][ T26] audit: type=1326 audit(2000000079.360:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a9da7cee9 code=0x7ffc0000 [ 268.899374][ T26] audit: type=1326 audit(2000000079.360:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9da7cee9 code=0x7ffc0000 [ 268.935350][ T7157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.957089][ T26] audit: type=1326 audit(2000000079.360:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a9da7cee9 code=0x7ffc0000 [ 268.999117][ T26] audit: type=1326 audit(2000000079.360:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9da7cee9 code=0x7ffc0000 [ 269.101703][ T26] audit: type=1326 audit(2000000079.360:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f0a9da7cee9 code=0x7ffc0000 [ 269.142509][ T26] audit: type=1326 audit(2000000079.360:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9da7cee9 code=0x7ffc0000 [ 269.965972][ T26] audit: type=1326 audit(2000000080.530:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b727cee9 code=0x7ffc0000 [ 270.006048][ T7176] syz-executor.2[7176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.006156][ T7176] syz-executor.2[7176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.037901][ T26] audit: type=1326 audit(2000000080.530:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fb1b727cee9 code=0x7ffc0000 [ 270.090122][ T26] audit: type=1326 audit(2000000080.530:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b727cee9 code=0x7ffc0000 [ 270.124584][ T7176] syz-executor.2[7176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.124693][ T7176] syz-executor.2[7176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.332700][ T4044] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 272.657429][ T7204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.952717][ T4044] usb 4-1: Using ep0 maxpacket: 32 [ 273.272601][ T4044] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 273.287382][ T4044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.324562][ T4044] usb 4-1: Product: syz [ 273.337821][ T4044] usb 4-1: Manufacturer: syz [ 273.351767][ T4044] usb 4-1: SerialNumber: syz [ 273.372065][ T4044] usb 4-1: config 0 descriptor?? [ 273.385027][ T155] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 273.893323][ T155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.042449][ T155] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.511631][ T155] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.562488][ T155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.623818][ T155] usb 3-1: config 0 descriptor?? [ 275.134729][ T155] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 275.164215][ T155] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 275.182334][ T155] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 275.195971][ T155] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 275.964786][ T4322] usb 3-1: USB disconnect, device number 13 [ 276.053194][ T7256] loop0: detected capacity change from 0 to 512 [ 276.117225][ T7256] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 276.131661][ T7256] ext4 filesystem being mounted at /root/syzkaller-testdir3825416521/syzkaller.Xz0lFc/122/file0 supports timestamps until 2038 (0x7fffffff) [ 276.321546][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 276.332268][ T7260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.414146][ T7273] Illegal XDP return value 1415479296 on prog (id 303) dev syz_tun, expect packet loss! [ 277.701377][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 277.701395][ T26] audit: type=1800 audit(2000000088.260:71): pid=7294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 277.729473][ T7295] loop3: detected capacity change from 0 to 128 [ 277.752018][ T7297] loop4: detected capacity change from 0 to 512 [ 277.797510][ T7295] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 277.830613][ T7295] ext4 filesystem being mounted at /root/syzkaller-testdir1472457218/syzkaller.oK3Qme/75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 277.888409][ T7297] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 277.941980][ T7297] ext4 filesystem being mounted at /root/syzkaller-testdir2716813946/syzkaller.fqGlxJ/104/file0 supports timestamps until 2038 (0x7fffffff) [ 277.962351][ T4044] rtl8150 4-1:0.0: couldn't reset the device [ 277.968939][ T4044] rtl8150: probe of 4-1:0.0 failed with error -5 [ 278.012333][ T4044] usb 4-1: USB disconnect, device number 16 [ 278.167032][ T5882] EXT4-fs (loop4): unmounting filesystem. [ 278.210749][ T5936] EXT4-fs (loop3): unmounting filesystem. [ 278.330914][ T7319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.303177][ T7338] loop4: detected capacity change from 0 to 2048 [ 280.340664][ T7338] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 280.364307][ T7338] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.566824][ T7343] loop1: detected capacity change from 0 to 128 [ 280.607311][ T7343] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 280.629537][ T7343] ext4 filesystem being mounted at /root/syzkaller-testdir503953547/syzkaller.s8qlYT/24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 280.810788][ T6827] EXT4-fs (loop1): unmounting filesystem. [ 281.145338][ T7366] Bluetooth: MGMT ver 1.22 [ 281.172615][ T3650] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 281.422805][ T3650] usb 4-1: Using ep0 maxpacket: 32 [ 281.702972][ T3650] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 281.780154][ T3650] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.827610][ T3650] usb 4-1: Product: syz [ 281.851364][ T3650] usb 4-1: Manufacturer: syz [ 281.876921][ T3650] usb 4-1: SerialNumber: syz [ 281.945037][ T3650] usb 4-1: config 0 descriptor?? [ 281.994551][ T7371] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.040543][ T7374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.231186][ T7381] loop2: detected capacity change from 0 to 128 [ 282.268486][ T7381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 282.298505][ T7381] ext4 filesystem being mounted at /root/syzkaller-testdir2424991458/syzkaller.UpM9B3/137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 282.417940][ T5322] EXT4-fs (loop2): unmounting filesystem. [ 282.772496][ T7396] ceph: No mds server is up or the cluster is laggy [ 284.062171][ T7421] loop0: detected capacity change from 0 to 128 [ 284.090493][ T7421] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 284.105320][ T7421] ext4 filesystem being mounted at /root/syzkaller-testdir3825416521/syzkaller.Xz0lFc/137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 284.181457][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 284.258609][ T7428] loop2: detected capacity change from 0 to 2048 [ 284.284199][ T7428] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 284.316275][ T7428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.329544][ T7432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.433249][ T7433] ceph: No mds server is up or the cluster is laggy [ 285.008650][ T7458] loop4: detected capacity change from 0 to 128 [ 285.109967][ T7458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 285.156371][ T7458] ext4 filesystem being mounted at /root/syzkaller-testdir2716813946/syzkaller.fqGlxJ/114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 285.331464][ T5882] EXT4-fs (loop4): unmounting filesystem. [ 285.472599][ T3650] rtl8150 4-1:0.0: couldn't reset the device [ 285.485975][ T3650] rtl8150: probe of 4-1:0.0 failed with error -5 [ 285.520187][ T7469] ceph: No mds server is up or the cluster is laggy [ 285.541875][ T3650] usb 4-1: USB disconnect, device number 17 [ 285.890094][ T7448] loop3: detected capacity change from 0 to 32768 [ 285.934616][ T7448] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7448) [ 285.957884][ T7482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.980373][ T7448] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 286.038518][ T7448] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 286.072590][ T7448] BTRFS info (device loop3): using free space tree [ 286.279638][ T7448] BTRFS info (device loop3): enabling ssd optimizations [ 286.395688][ T5936] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 286.715280][ T7522] ceph: No mds server is up or the cluster is laggy [ 287.100276][ T7557] loop3: detected capacity change from 0 to 128 [ 287.163845][ T7557] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 287.175912][ T7560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.182877][ T7557] ext4 filesystem being mounted at /root/syzkaller-testdir1472457218/syzkaller.oK3Qme/82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 287.246020][ T7566] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.294799][ T5936] EXT4-fs (loop3): unmounting filesystem. [ 287.457066][ T7569] ceph: No mds server is up or the cluster is laggy [ 287.956511][ T7598] loop2: detected capacity change from 0 to 128 [ 288.015503][ T7598] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 288.031463][ T7598] ext4 filesystem being mounted at /root/syzkaller-testdir2424991458/syzkaller.UpM9B3/145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 288.127344][ T4044] libceph: connect (1)[c::]:6789 error -101 [ 288.136105][ T4044] libceph: mon0 (1)[c::]:6789 connect error [ 288.179219][ T5322] EXT4-fs (loop2): unmounting filesystem. [ 288.205117][ T7608] ceph: No mds server is up or the cluster is laggy [ 288.299076][ T7615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.371346][ T3616] kernel write not supported for file /input/event0 (pid: 3616 comm: kworker/1:5) [ 288.462186][ T26] audit: type=1800 audit(2000000099.020:72): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1943 res=0 errno=0 [ 289.359471][ T7639] loop1: detected capacity change from 0 to 1024 [ 289.473207][ T7639] hfsplus: extend alloc file! (8192,65536,366) [ 289.584909][ T7646] loop4: detected capacity change from 0 to 512 [ 289.654602][ T7646] EXT4-fs (loop4): orphan cleanup on readonly fs [ 289.665588][ T7646] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 289.710937][ T7646] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 289.748567][ T7651] loop0: detected capacity change from 0 to 128 [ 289.755916][ T7646] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz-executor.4: Failed to acquire dquot type 1 [ 289.785124][ T7646] EXT4-fs (loop4): 1 truncate cleaned up [ 289.799952][ T7646] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 289.801814][ T7651] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 289.820812][ T7651] ext4 filesystem being mounted at /root/syzkaller-testdir3825416521/syzkaller.Xz0lFc/153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 289.863099][ T5882] EXT4-fs (loop4): unmounting filesystem. [ 289.950640][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 290.050258][ T7660] ceph: No mds server is up or the cluster is laggy [ 290.175121][ T7672] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.227690][ T7673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.269084][ T7680] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 290.304789][ T7676] loop3: detected capacity change from 0 to 4096 [ 290.336124][ T7676] NILFS (loop3): invalid segment: Checksum error in segment payload [ 290.360672][ T7676] NILFS (loop3): trying rollback from an earlier position [ 290.428933][ T7676] NILFS (loop3): recovery complete [ 290.445702][ T7689] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.470150][ T7687] loop2: detected capacity change from 0 to 512 [ 290.489038][ T7688] loop1: detected capacity change from 0 to 512 [ 290.508544][ T7687] EXT4-fs (loop2): orphan cleanup on readonly fs [ 290.529850][ T7688] EXT4-fs (loop1): orphan cleanup on readonly fs [ 290.560415][ T7687] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 290.574357][ T7693] loop4: detected capacity change from 0 to 128 [ 290.594362][ T7693] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 290.595159][ T7688] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 290.621078][ T7687] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 290.621073][ T7688] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 290.621107][ T7687] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz-executor.2: Failed to acquire dquot type 1 [ 290.631619][ T7688] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz-executor.1: Failed to acquire dquot type 1 [ 290.642187][ T7693] ext4 filesystem being mounted at /root/syzkaller-testdir2716813946/syzkaller.fqGlxJ/133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 290.709320][ T7687] EXT4-fs (loop2): 1 truncate cleaned up [ 290.735810][ T7688] EXT4-fs (loop1): 1 truncate cleaned up [ 290.744299][ T7687] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 290.754618][ T7688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 290.766478][ T5882] EXT4-fs (loop4): unmounting filesystem. [ 290.849125][ T6827] EXT4-fs (loop1): unmounting filesystem. [ 290.905960][ T5322] EXT4-fs (loop2): unmounting filesystem. [ 291.054221][ T3650] libceph: connect (1)[c::]:6789 error -101 [ 291.063104][ T3650] libceph: mon0 (1)[c::]:6789 connect error [ 291.101441][ T7718] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.143474][ T7712] ceph: No mds server is up or the cluster is laggy [ 291.198991][ T26] audit: type=1800 audit(2000000101.760:73): pid=7726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 291.474047][ T7733] loop1: detected capacity change from 0 to 128 [ 291.521904][ T7733] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 291.553821][ T7733] ext4 filesystem being mounted at /root/syzkaller-testdir503953547/syzkaller.s8qlYT/58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 291.742890][ T6827] EXT4-fs (loop1): unmounting filesystem. [ 291.751863][ T7698] loop3: detected capacity change from 0 to 32768 [ 291.800577][ T7698] XFS (loop3): Mounting V5 Filesystem [ 291.840589][ T7750] tipc: Started in network mode [ 291.869225][ T7750] tipc: Node identity aaaaaaaaaa3b, cluster identity 4711 [ 291.906489][ T7750] tipc: Enabled bearer , priority 10 [ 291.980554][ T7698] XFS (loop3): Ending clean mount [ 292.009638][ T7736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.068621][ T7752] loop0: detected capacity change from 0 to 512 [ 292.088743][ T7752] EXT4-fs (loop0): orphan cleanup on readonly fs [ 292.098900][ T7752] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 292.124495][ T5936] XFS (loop3): Unmounting Filesystem [ 292.129899][ T7758] loop4: detected capacity change from 0 to 512 [ 292.130035][ T7752] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 292.146624][ T7752] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz-executor.0: Failed to acquire dquot type 1 [ 292.159146][ T7758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.163142][ T7752] EXT4-fs (loop0): 1 truncate cleaned up [ 292.173751][ T7752] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 292.189286][ T7758] EXT4-fs (loop4): orphan cleanup on readonly fs [ 292.221688][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 292.231452][ T7758] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 248: padding at end of block bitmap is not set [ 292.262114][ T7758] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz-executor.4: Failed to acquire dquot type 1 [ 292.303807][ T7758] EXT4-fs (loop4): 1 truncate cleaned up [ 292.321646][ T7758] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 292.340739][ T7766] ieee802154 phy0 wpan0: encryption failed: -22 [ 292.340880][ T7758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.364700][ T7758] EXT4-fs error (device loop4): __ext4_remount:6425: comm syz-executor.4: Abort forced by user [ 292.409006][ T7758] syz-executor.4 (7758) used greatest stack depth: 18784 bytes left [ 292.419709][ T5882] EXT4-fs (loop4): unmounting filesystem. [ 292.429242][ T7763] ceph: No mds server is up or the cluster is laggy [ 292.516095][ T7773] loop1: detected capacity change from 0 to 128 [ 292.561362][ T7773] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 292.592175][ T7773] ext4 filesystem being mounted at /root/syzkaller-testdir503953547/syzkaller.s8qlYT/64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 292.600149][ T7780] ieee802154 phy0 wpan0: encryption failed: -22 [ 292.676916][ T6827] EXT4-fs (loop1): unmounting filesystem. [ 292.925188][ T4044] tipc: Node number set to 9546410 [ 293.126030][ T7805] loop0: detected capacity change from 0 to 512 [ 293.143028][ T7805] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.166389][ T7805] EXT4-fs (loop0): orphan cleanup on readonly fs [ 293.214165][ T7805] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 248: padding at end of block bitmap is not set [ 293.285490][ T7805] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz-executor.0: Failed to acquire dquot type 1 [ 293.313360][ T7805] EXT4-fs (loop0): 1 truncate cleaned up [ 293.325440][ T7805] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 293.381691][ T7805] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.392533][ T7805] EXT4-fs error (device loop0): __ext4_remount:6425: comm syz-executor.0: Abort forced by user [ 293.493850][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 293.579448][ T7819] loop2: detected capacity change from 0 to 128 [ 293.598870][ T7821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.615668][ T7819] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 293.638978][ T7827] loop4: detected capacity change from 0 to 16 [ 293.641069][ T7819] ext4 filesystem being mounted at /root/syzkaller-testdir2424991458/syzkaller.UpM9B3/157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 293.698081][ T7827] erofs: (device loop4): mounted with root inode @ nid 36. [ 293.727211][ T7827] syz-executor.4: attempt to access beyond end of device [ 293.727211][ T7827] loop4: rw=0, sector=40, nr_sectors = 8 limit=16 [ 293.764039][ T5322] EXT4-fs (loop2): unmounting filesystem. [ 294.104026][ T7810] ceph: No mds server is up or the cluster is laggy [ 294.348137][ T7848] loop2: detected capacity change from 0 to 512 [ 294.410369][ T4326] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 294.517037][ T7848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.518122][ T7827] syz-executor.4 (7827): drop_caches: 2 [ 294.539061][ T7848] EXT4-fs (loop2): orphan cleanup on readonly fs [ 294.568975][ T7848] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 248: padding at end of block bitmap is not set [ 294.593872][ T4326] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 294.608864][ T7848] __quota_error: 5 callbacks suppressed [ 294.608884][ T7848] Quota error (device loop2): write_blk: dquota write failed [ 294.624834][ T7848] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 294.639226][ T7848] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz-executor.2: Failed to acquire dquot type 1 [ 294.655210][ T7848] EXT4-fs (loop2): 1 truncate cleaned up [ 294.665978][ T7848] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 294.680432][ T7848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.689150][ T7848] EXT4-fs error (device loop2): __ext4_remount:6425: comm syz-executor.2: Abort forced by user [ 294.732281][ T5322] EXT4-fs (loop2): unmounting filesystem. [ 294.781999][ T26] audit: type=1800 audit(2000000105.340:75): pid=7858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 294.867090][ T7863] loop2: detected capacity change from 0 to 128 [ 294.925136][ T7863] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 294.952751][ T7863] ext4 filesystem being mounted at /root/syzkaller-testdir2424991458/syzkaller.UpM9B3/161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 295.002704][ T4326] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 295.021722][ T4326] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.032545][ T4326] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 295.045776][ T4326] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 295.069080][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.082030][ T4326] usb 4-1: config 0 descriptor?? [ 295.096645][ T5322] EXT4-fs (loop2): unmounting filesystem. [ 295.149201][ T4326] usb-storage 4-1:0.0: USB Mass Storage device detected [ 295.189095][ T4326] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 295.315841][ T7880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.346919][ T3650] usb 4-1: USB disconnect, device number 18 [ 295.818726][ T7877] loop2: detected capacity change from 0 to 32768 [ 295.846322][ T7900] loop1: detected capacity change from 0 to 16 [ 295.849591][ T7877] XFS (loop2): Mounting V5 Filesystem [ 295.858704][ T7900] erofs: (device loop1): mounted with root inode @ nid 36. [ 295.886147][ T7900] syz-executor.1: attempt to access beyond end of device [ 295.886147][ T7900] loop1: rw=0, sector=40, nr_sectors = 8 limit=16 [ 295.976783][ T7877] XFS (loop2): Ending clean mount [ 296.022339][ T7914] loop3: detected capacity change from 0 to 128 [ 296.307065][ T7914] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 296.319461][ T7914] ext4 filesystem being mounted at /root/syzkaller-testdir1472457218/syzkaller.oK3Qme/98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 296.496987][ T7911] syz-executor.1 (7911): drop_caches: 2 [ 296.510546][ T5936] EXT4-fs (loop3): unmounting filesystem. [ 296.538127][ T7893] ceph: No mds server is up or the cluster is laggy [ 296.750163][ T5322] XFS (loop2): Unmounting Filesystem [ 296.775532][ T3650] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 297.640228][ T3616] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 297.658101][ T7911] syz-executor.1 (7911): drop_caches: 2 [ 297.710801][ T7932] loop0: detected capacity change from 0 to 512 [ 297.721290][ T7932] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 297.783885][ T7932] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz-executor.0: iget: bad i_size value: -67835469387268086 [ 297.810957][ T7932] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 297.828141][ T7938] overlayfs: failed to resolve './file2': -2 [ 297.858898][ T26] audit: type=1800 audit(2000000108.420:76): pid=7939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 297.920843][ T7932] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 297.979169][ T7932] ext2 filesystem being mounted at /root/syzkaller-testdir3825416521/syzkaller.Xz0lFc/170/file0 supports timestamps until 2038 (0x7fffffff) [ 298.442844][ T4326] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 298.533798][ T7957] ptrace attach of "/root/syz-executor.0 exec"[5641] was attempted by "/root/syz-executor.0 exec"[7957] [ 298.697046][ T3571] Bluetooth: hci1: command 0x0406 tx timeout [ 298.736456][ T7953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.838371][ T4326] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 298.839192][ T7964] loop1: detected capacity change from 0 to 64 [ 298.858913][ T4326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.877968][ T4326] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 298.892769][ T4326] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 298.909673][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.921286][ T4326] usb 5-1: config 0 descriptor?? [ 298.963816][ T4326] usb-storage 5-1:0.0: USB Mass Storage device detected [ 298.994472][ T4326] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 299.166447][ T4044] usb 5-1: USB disconnect, device number 11 [ 299.438678][ T5641] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 299.456569][ T5641] EXT4-fs error (device loop0): ext4_readdir:220: inode #2: comm syz-executor.0: path /root/syzkaller-testdir3825416521/syzkaller.Xz0lFc/170/file0: directory fails checksum at offset 0 [ 299.509057][ T5641] EXT4-fs (loop0): unmounting filesystem. [ 299.536264][ T7966] loop1: detected capacity change from 0 to 32768 [ 299.555140][ T7966] XFS (loop1): Mounting V5 Filesystem [ 299.646087][ T7966] XFS (loop1): Ending clean mount [ 299.777169][ T3650] libceph: connect (1)[c::]:6789 error -101 [ 299.784745][ T3650] libceph: mon0 (1)[c::]:6789 connect error [ 299.945959][ T3665] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.099388][ T3648] libceph: connect (1)[c::]:6789 error -101 [ 300.105679][ T3648] libceph: mon0 (1)[c::]:6789 connect error [ 300.141872][ T6827] XFS (loop1): Unmounting Filesystem [ 300.160422][ T3665] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.273939][ T3665] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.566654][ T7983] ceph: No mds server is up or the cluster is laggy [ 300.618063][ T3650] libceph: connect (1)[c::]:6789 error -101 [ 300.645393][ T3650] libceph: mon0 (1)[c::]:6789 connect error [ 301.023113][ T26] audit: type=1800 audit(2000000111.390:77): pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 301.743411][ T3665] bond1: (slave ip6gretap1): Releasing active interface [ 301.756902][ T3583] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.764428][ T3665] device ip6gretap1 left promiscuous mode [ 301.770705][ T3576] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.789952][ T3576] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.799510][ T3576] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.809869][ T3576] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 301.822695][ T3576] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.877692][ T8023] loop3: detected capacity change from 0 to 1024 [ 301.941582][ T8023] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2504106137 (5008212274 ns) > initial count (4114034220 ns). Using initial count to start timer. [ 301.949220][ T8026] loop1: detected capacity change from 0 to 1024 [ 301.959685][ T4326] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 301.992165][ T8026] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 302.015038][ T8026] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 302.041891][ T8026] EXT4-fs (loop1): orphan cleanup on readonly fs [ 302.055393][ T8026] EXT4-fs error (device loop1): ext4_free_blocks:6211: comm syz-executor.1: Freeing blocks not in datazone - block = 0, count = 4096 [ 302.091427][ T8026] EXT4-fs (loop1): Remounting filesystem read-only [ 302.102102][ T8026] EXT4-fs (loop1): 1 orphan inode deleted [ 302.108592][ T8026] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 302.177501][ T6827] EXT4-fs (loop1): unmounting filesystem. [ 302.209419][ T8020] chnl_net:caif_netlink_parms(): no params data found [ 302.353360][ T4326] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 302.378300][ T4326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.390781][ T4326] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 302.404135][ T4326] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 302.413506][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.423416][ T4326] usb 5-1: config 0 descriptor?? [ 302.432246][ T8020] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.440227][ T8020] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.449175][ T8020] device bridge_slave_0 entered promiscuous mode [ 302.458449][ T8020] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.466794][ T4326] usb-storage 5-1:0.0: USB Mass Storage device detected [ 302.475173][ T8020] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.484432][ T8020] device bridge_slave_1 entered promiscuous mode [ 302.491720][ T4326] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 302.580421][ T8020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.595477][ T8020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.683538][ T3616] usb 5-1: USB disconnect, device number 12 [ 302.713370][ T8020] team0: Port device team_slave_0 added [ 302.721342][ T8020] team0: Port device team_slave_1 added [ 302.780777][ T3665] device hsr_slave_0 left promiscuous mode [ 302.795791][ T3665] device hsr_slave_1 left promiscuous mode [ 302.810241][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.820627][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.838694][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.850570][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.873668][ T3665] device bridge_slave_1 left promiscuous mode [ 302.880987][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.901554][ T3665] device bridge_slave_0 left promiscuous mode [ 302.910866][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.922706][ T8047] loop3: detected capacity change from 0 to 32768 [ 302.931296][ T8047] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (8047) [ 302.944964][ T3665] device veth0_to_bond left promiscuous mode [ 302.951736][ T3665] device veth1_macvtap left promiscuous mode [ 302.958154][ T3665] device veth0_macvtap left promiscuous mode [ 302.964637][ T3665] device veth1_vlan left promiscuous mode [ 302.972073][ T8047] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 302.972648][ T3665] device veth0_vlan left promiscuous mode [ 302.982664][ T8047] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 302.996922][ T8047] BTRFS info (device loop3): using free space tree [ 303.091483][ T4752] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0x9aad7bef227776301125427a4dc34d91d9289b7716fb2ed168f265ae3392bdd6 level 0 [ 303.138176][ T3665] bond1 (unregistering): Released all slaves [ 303.152200][ T8047] BTRFS warning (device loop3): couldn't read tree root [ 303.365706][ T8047] BTRFS error (device loop3): open_ctree failed [ 303.476535][ T4326] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 303.501182][ T3665] team0 (unregistering): Port device team_slave_1 removed [ 303.525501][ T3665] team0 (unregistering): Port device team_slave_0 removed [ 303.595758][ T3665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.635853][ T3665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.781732][ T3665] bond0 (unregistering): Released all slaves [ 303.782735][ T8084] loop2: detected capacity change from 0 to 1024 [ 303.864410][ T8084] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2504106137 (5008212274 ns) > initial count (4114034220 ns). Using initial count to start timer. [ 303.864828][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.892733][ T3576] Bluetooth: hci4: command tx timeout [ 303.942521][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.972686][ T8020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.995553][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.017820][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.049755][ T8020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.103331][ T8020] device hsr_slave_0 entered promiscuous mode [ 304.115434][ T8020] device hsr_slave_1 entered promiscuous mode [ 304.245136][ T8073] ceph: No mds server is up or the cluster is laggy [ 304.928703][ T8071] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 304.934296][ T8020] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 304.986085][ T8020] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 305.402858][ T8071] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 305.434769][ T8020] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 305.566885][ T8071] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.812891][ T8071] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 305.879971][ T8071] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 305.915645][ T8071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.949264][ T8071] usb 5-1: config 0 descriptor?? [ 305.964087][ T8020] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 305.982810][ T3576] Bluetooth: hci4: command tx timeout [ 305.993661][ T8071] usb-storage 5-1:0.0: USB Mass Storage device detected [ 306.020179][ T8071] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 306.100515][ T8129] loop1: detected capacity change from 0 to 1024 [ 306.175325][ T8020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.199659][ T8071] usb 5-1: USB disconnect, device number 13 [ 306.228704][ T8129] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2504106137 (5008212274 ns) > initial count (4114034220 ns). Using initial count to start timer. [ 306.252012][ T8020] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.267691][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.278273][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.295859][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.310989][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.329636][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.336857][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.353247][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.362242][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.378019][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.385216][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.415343][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.424779][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.434359][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.454471][ T4322] libceph: connect (1)[c::]:6789 error -101 [ 306.458407][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.465496][ T4322] libceph: mon0 (1)[c::]:6789 connect error [ 306.484089][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.506979][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.537254][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.558297][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.584854][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.609024][ T8020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.631845][ T8020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.649101][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.666498][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.679934][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.748902][ T4322] libceph: connect (1)[c::]:6789 error -101 [ 306.756298][ T4322] libceph: mon0 (1)[c::]:6789 connect error [ 307.212855][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.228796][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.237357][ T8136] ceph: No mds server is up or the cluster is laggy [ 307.256823][ T8020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.336031][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.358605][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.400858][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.414062][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.433428][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.453936][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.469499][ T8020] device veth0_vlan entered promiscuous mode [ 307.495903][ T8020] device veth1_vlan entered promiscuous mode [ 307.539446][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 307.554043][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 307.563459][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.575019][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.586454][ T8020] device veth0_macvtap entered promiscuous mode [ 307.600222][ T8020] device veth1_macvtap entered promiscuous mode [ 307.660565][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.697639][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.728170][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.728195][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.728211][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.728226][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.728241][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.728255][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.731206][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.822593][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.840273][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.850469][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.873445][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.957560][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.988718][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.019476][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.028772][ T8185] loop3: detected capacity change from 0 to 1024 [ 308.037875][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.060837][ T3576] Bluetooth: hci4: command tx timeout [ 308.073970][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.087898][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 308.108766][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.117749][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.139196][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.174652][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.201078][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.225965][ T8020] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.236744][ T8020] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.256373][ T8020] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.265500][ T4322] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 308.282505][ T8020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.412925][ T8189] device syzkaller0 entered promiscuous mode [ 308.588945][ T3753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.603122][ T3753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.634522][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 308.653676][ T4752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.675306][ T4752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.694647][ T4322] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 308.720207][ T4322] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.731934][ T4322] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 308.745186][ T4322] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 308.757061][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.770029][ T4322] usb 3-1: config 0 descriptor?? [ 308.778334][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.823495][ T4322] usb-storage 3-1:0.0: USB Mass Storage device detected [ 308.866328][ T4322] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 308.907264][ T8213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.076768][ T8071] usb 3-1: USB disconnect, device number 14 [ 309.426456][ T8199] ceph: No mds server is up or the cluster is laggy [ 309.751851][ T4044] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 310.031210][ T8227] loop1: detected capacity change from 0 to 1024 [ 310.132829][ T3576] Bluetooth: hci4: command tx timeout [ 310.242553][ T8071] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 310.412604][ T8239] device syzkaller0 entered promiscuous mode [ 310.485900][ T8071] usb 3-1: Using ep0 maxpacket: 16 [ 310.602914][ T8071] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 310.782801][ T8071] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 310.791903][ T8071] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.803137][ T8071] usb 3-1: Product: syz [ 310.807388][ T8071] usb 3-1: Manufacturer: syz [ 310.812007][ T8071] usb 3-1: SerialNumber: syz [ 310.834672][ T8071] usb 3-1: config 0 descriptor?? [ 310.869239][ T8252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.882692][ T8071] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 310.891398][ T8071] usb 3-1: Detected FT232R [ 310.902646][ T3650] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 311.112671][ T8071] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 311.262565][ T3650] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 311.275646][ T3650] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.286199][ T3650] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 311.299624][ T3650] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 311.308772][ T3650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.318409][ T3650] usb 5-1: config 0 descriptor?? [ 311.363303][ T3650] usb-storage 5-1:0.0: USB Mass Storage device detected [ 311.371680][ T3650] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 311.385785][ T8071] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 311.566457][ T4044] usb 5-1: USB disconnect, device number 14 [ 311.585950][ T4322] usb 3-1: USB disconnect, device number 15 [ 311.609863][ T4322] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 311.622463][ T4322] ftdi_sio 3-1:0.0: device disconnected [ 311.691853][ T8273] loop1: detected capacity change from 0 to 1024 [ 312.181591][ T8281] device syzkaller0 entered promiscuous mode [ 312.558433][ T8294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.344964][ T8316] loop3: detected capacity change from 0 to 1024 [ 314.662523][ T4322] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 314.820284][ T8328] device syzkaller0 entered promiscuous mode [ 315.088263][ T4322] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 315.118130][ T4322] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.143624][ T4322] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 315.183719][ T4322] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 315.212444][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.249032][ T4322] usb 3-1: config 0 descriptor?? [ 315.309031][ T4322] usb-storage 3-1:0.0: USB Mass Storage device detected [ 315.468462][ T4322] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 316.298225][ T4322] usb 3-1: USB disconnect, device number 16 [ 316.586474][ T8301] syz-executor.1 (8301): drop_caches: 1 [ 316.633079][ T8354] loop2: detected capacity change from 0 to 1024 [ 316.660612][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 316.725484][ T8354] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2504106137 (5008212274 ns) > initial count (4114034220 ns). Using initial count to start timer. [ 316.923132][ T8348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.938444][ T8366] device syzkaller0 entered promiscuous mode [ 317.094146][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.101098][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.792647][ T7] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 322.383023][ T7] usb 4-1: unable to read config index 0 descriptor/all [ 322.394674][ T7] usb 4-1: can't read configurations, error -71 [ 322.462251][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 322.579519][ T8404] loop3: detected capacity change from 0 to 1024 [ 322.579729][ T8406] loop4: detected capacity change from 0 to 2048 [ 322.618806][ T8406] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 322.653741][ T8404] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2504106137 (5008212274 ns) > initial count (4114034220 ns). Using initial count to start timer. [ 322.668997][ T8406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.689225][ T8408] device syzkaller0 entered promiscuous mode [ 323.068914][ T8412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.654842][ T26] audit: type=1326 audit(2000000135.220:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1b727cee9 code=0x0 [ 324.762589][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 326.093128][ T7] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 326.541300][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.997549][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 327.012200][ T7] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 327.021323][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.031513][ T7] usb 3-1: config 0 descriptor?? [ 327.072644][ T7] usb 3-1: can't set config #0, error -71 [ 327.085222][ T7] usb 3-1: USB disconnect, device number 17 [ 327.180688][ T8453] loop3: detected capacity change from 0 to 1024 [ 327.289005][ T26] audit: type=1326 audit(2000000137.850:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a9da7cee9 code=0x0 [ 327.484076][ T8456] device syzkaller0 entered promiscuous mode [ 329.422241][ T8472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.783355][ T8478] loop2: detected capacity change from 0 to 128 [ 329.843311][ T8478] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 329.859924][ T8478] ext4 filesystem being mounted at /root/syzkaller-testdir2424991458/syzkaller.UpM9B3/196/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 330.121674][ T5322] EXT4-fs (loop2): unmounting filesystem. [ 333.142550][ T4324] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 333.568329][ T4324] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 333.593695][ T4324] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.614710][ T4324] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 333.638949][ T4324] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 333.654889][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.673121][ T4324] usb 1-1: config 0 descriptor?? [ 333.724802][ T4324] usb-storage 1-1:0.0: USB Mass Storage device detected [ 333.754375][ T4324] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 333.927187][ T4326] usb 1-1: USB disconnect, device number 15 [ 334.181930][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 334.471468][ T8515] loop3: detected capacity change from 0 to 128 [ 334.488383][ T8507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.506520][ T8515] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 334.516243][ T8515] ext4 filesystem being mounted at /root/syzkaller-testdir1472457218/syzkaller.oK3Qme/136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 334.555522][ T3571] Bluetooth: hci3: command 0x0406 tx timeout [ 334.618309][ T5936] EXT4-fs (loop3): unmounting filesystem. [ 334.952435][ T26] audit: type=1326 audit(2000000145.480:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a9da7cee9 code=0x0 [ 336.171534][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.113861][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 337.250621][ T8541] loop2: detected capacity change from 0 to 32768 [ 337.408218][ T8562] loop1: detected capacity change from 0 to 128 [ 337.413905][ T8541] XFS (loop2): Mounting V5 Filesystem [ 337.644987][ T8562] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 337.844804][ T8562] ext4 filesystem being mounted at /root/syzkaller-testdir503953547/syzkaller.s8qlYT/129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 338.134773][ T8541] XFS (loop2): Ending clean mount [ 338.292573][ T7] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 338.321907][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.386281][ T6827] EXT4-fs (loop1): unmounting filesystem. [ 338.392541][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 338.442424][ T7] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 338.451554][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.496059][ T7] usb 5-1: config 0 descriptor?? [ 338.563495][ T7] usb-storage 5-1:0.0: USB Mass Storage device detected [ 338.593167][ T7] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 338.765873][ T4326] usb 5-1: USB disconnect, device number 15 [ 339.847734][ T5322] XFS (loop2): Unmounting Filesystem [ 339.883348][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.746974][ T8595] device bridge0 entered promiscuous mode [ 340.877191][ T8597] loop4: detected capacity change from 0 to 128 [ 340.931307][ T8597] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 340.951728][ T8597] ext4 filesystem being mounted at /root/syzkaller-testdir2716813946/syzkaller.fqGlxJ/185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 341.187899][ T5882] EXT4-fs (loop4): unmounting filesystem. [ 341.657343][ T8610] device syzkaller0 entered promiscuous mode [ 341.913340][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 342.032613][ T8069] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 342.402671][ T8069] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 342.427558][ T8069] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.458362][ T8069] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 342.497144][ T8069] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 342.515772][ T8069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.542111][ T8069] usb 3-1: config 0 descriptor?? [ 342.583546][ T8069] usb-storage 3-1:0.0: USB Mass Storage device detected [ 342.614507][ T8069] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 342.774076][ T8637] loop1: detected capacity change from 0 to 128 [ 342.786236][ T3648] usb 3-1: USB disconnect, device number 18 [ 342.799162][ T8637] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 342.808557][ T8637] ext4 filesystem being mounted at /root/syzkaller-testdir503953547/syzkaller.s8qlYT/132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 342.891998][ T6827] EXT4-fs (loop1): unmounting filesystem. [ 343.242716][ T8645] loop3: detected capacity change from 0 to 2048 [ 343.380663][ T8645] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 343.779616][ T8645] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.429723][ T8649] [ 344.432314][ T8649] ============================================ [ 344.438484][ T8649] WARNING: possible recursive locking detected [ 344.444636][ T8649] 6.1.92-syzkaller #0 Not tainted [ 344.449878][ T8649] -------------------------------------------- [ 344.456022][ T8649] syz-executor.4/8649 is trying to acquire lock: [ 344.462358][ T8649] ffffc900035d10d8 (&rb->spinlock){..-.}-{2:2}, at: __bpf_ringbuf_reserve+0x20d/0x4f0 [ 344.471954][ T8649] [ 344.471954][ T8649] but task is already holding lock: [ 344.479331][ T8649] ffffc900035d10d8 (&rb->spinlock){..-.}-{2:2}, at: __bpf_ringbuf_reserve+0x20d/0x4f0 [ 344.488894][ T8649] [ 344.488894][ T8649] other info that might help us debug this: [ 344.497029][ T8649] Possible unsafe locking scenario: [ 344.497029][ T8649] [ 344.504568][ T8649] CPU0 [ 344.507843][ T8649] ---- [ 344.511109][ T8649] lock(&rb->spinlock); [ 344.515431][ T8649] lock(&rb->spinlock); [ 344.519664][ T8649] [ 344.519664][ T8649] *** DEADLOCK *** [ 344.519664][ T8649] [ 344.527881][ T8649] May be due to missing lock nesting notation [ 344.527881][ T8649] [ 344.536358][ T8649] 3 locks held by syz-executor.4/8649: [ 344.541803][ T8649] #0: ffffffff8d12ac80 (rcu_read_lock){....}-{1:2}, at: bpf_test_timer_enter+0x19/0x140 [ 344.551833][ T8649] #1: ffffc900035d10d8 (&rb->spinlock){..-.}-{2:2}, at: __bpf_ringbuf_reserve+0x20d/0x4f0 [ 344.561924][ T8649] #2: ffffffff8d12ac80 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x110/0x410 [ 344.571409][ T8649] [ 344.571409][ T8649] stack backtrace: [ 344.577292][ T8649] CPU: 1 PID: 8649 Comm: syz-executor.4 Not tainted 6.1.92-syzkaller #0 [ 344.585605][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 344.595835][ T8649] Call Trace: [ 344.599109][ T8649] [ 344.602035][ T8649] dump_stack_lvl+0x1e3/0x2cb [ 344.606819][ T8649] ? nf_tcp_handle_invalid+0x642/0x642 [ 344.612366][ T8649] ? panic+0x764/0x764 [ 344.616447][ T8649] validate_chain+0x4711/0x5950 [ 344.621428][ T8649] ? validate_chain+0x112/0x5950 [ 344.626370][ T8649] ? reacquire_held_locks+0x660/0x660 [ 344.631960][ T8649] ? reacquire_held_locks+0x660/0x660 [ 344.637342][ T8649] ? mark_lock+0x9a/0x340 [ 344.641760][ T8649] ? __lock_acquire+0x125b/0x1f80 [ 344.646812][ T8649] ? mark_lock+0x9a/0x340 [ 344.651166][ T8649] __lock_acquire+0x125b/0x1f80 [ 344.656029][ T8649] lock_acquire+0x1f8/0x5a0 [ 344.660551][ T8649] ? __bpf_ringbuf_reserve+0x20d/0x4f0 [ 344.666031][ T8649] ? read_lock_is_recursive+0x10/0x10 [ 344.671435][ T8649] ? finish_task_switch+0x1c5/0x810 [ 344.676656][ T8649] ? mark_lock+0x9a/0x340 [ 344.681017][ T8649] ? __lock_acquire+0x125b/0x1f80 [ 344.686324][ T8649] _raw_spin_lock_irqsave+0xd1/0x120 [ 344.691608][ T8649] ? __bpf_ringbuf_reserve+0x20d/0x4f0 [ 344.697062][ T8649] ? _raw_spin_lock+0x40/0x40 [ 344.701750][ T8649] __bpf_ringbuf_reserve+0x20d/0x4f0 [ 344.707032][ T8649] ? bpf_ringbuf_notify+0x20/0x20 [ 344.712049][ T8649] ? try_to_wake_up+0x7dd/0x12e0 [ 344.716986][ T8649] ? __cant_sleep+0x270/0x270 [ 344.721679][ T8649] bpf_ringbuf_output+0x63/0x1e0 [ 344.726611][ T8649] bpf_prog_a3e2825f60354855+0x3d/0x41 [ 344.732275][ T8649] bpf_trace_run2+0x1fd/0x410 [ 344.736948][ T8649] ? bpf_trace_run2+0x110/0x410 [ 344.741792][ T8649] ? bpf_trace_run1+0x3d0/0x3d0 [ 344.746721][ T8649] ? mark_lock+0x9a/0x340 [ 344.751171][ T8649] trace_contention_end+0x14c/0x190 [ 344.756369][ T8649] __pv_queued_spin_lock_slowpath+0x935/0xc50 [ 344.762458][ T8649] ? __pv_queued_spin_unlock_slowpath+0x2e0/0x2e0 [ 344.768887][ T8649] queued_spin_lock_slowpath+0x42/0x50 [ 344.774365][ T8649] do_raw_spin_lock+0x269/0x370 [ 344.779217][ T8649] ? __rwlock_init+0x140/0x140 [ 344.783982][ T8649] ? _raw_spin_lock_irqsave+0xac/0x120 [ 344.789447][ T8649] _raw_spin_lock_irqsave+0xdd/0x120 [ 344.794731][ T8649] ? _raw_spin_lock+0x40/0x40 [ 344.799424][ T8649] ? ktime_get+0x7f/0x270 [ 344.803775][ T8649] ? seqcount_lockdep_reader_access+0x153/0x220 [ 344.810016][ T8649] __bpf_ringbuf_reserve+0x20d/0x4f0 [ 344.815304][ T8649] ? bpf_ringbuf_notify+0x20/0x20 [ 344.820327][ T8649] ? migrate_enable+0x1a2/0x290 [ 344.825198][ T8649] ? __cant_sleep+0x270/0x270 [ 344.829869][ T8649] bpf_ringbuf_output+0x63/0x1e0 [ 344.834806][ T8649] bpf_prog_a3e2825f60354855+0x3d/0x41 [ 344.840262][ T8649] bpf_test_run+0x40f/0x8b0 [ 344.844787][ T8649] ? convert___skb_to_skb+0x610/0x610 [ 344.850155][ T8649] ? eth_type_trans+0x3cd/0x7a0 [ 344.855027][ T8649] ? eth_get_headlen+0x240/0x240 [ 344.859961][ T8649] ? convert___skb_to_skb+0x41/0x610 [ 344.865335][ T8649] ? build_skb+0x112/0x250 [ 344.869760][ T8649] bpf_prog_test_run_skb+0xaf1/0x13a0 [ 344.875137][ T8649] ? cpu_online+0xb0/0xb0 [ 344.879481][ T8649] ? cpu_online+0xb0/0xb0 [ 344.883805][ T8649] bpf_prog_test_run+0x32f/0x3a0 [ 344.888746][ T8649] __sys_bpf+0x3eb/0x6c0 [ 344.892994][ T8649] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 344.898370][ T8649] ? print_irqtrace_events+0x210/0x210 [ 344.903825][ T8649] ? print_irqtrace_events+0x210/0x210 [ 344.909279][ T8649] ? syscall_enter_from_user_mode+0x2e/0x230 [ 344.915250][ T8649] ? lockdep_hardirqs_on+0x94/0x130 [ 344.920455][ T8649] __x64_sys_bpf+0x78/0x90 [ 344.924956][ T8649] do_syscall_64+0x3b/0xb0 [ 344.929376][ T8649] ? clear_bhb_loop+0x45/0xa0 [ 344.934047][ T8649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.939942][ T8649] RIP: 0033:0x7f0a9da7cee9 [ 344.944350][ T8649] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 344.963948][ T8649] RSP: 002b:00007f0a9e8dc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.972442][ T8649] RAX: ffffffffffffffda RBX: 00007f0a9dbb3fa0 RCX: 00007f0a9da7cee9 [ 344.980407][ T8649] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000000a [ 344.988369][ T8649] RBP: 00007f0a9dac947f R08: 0000000000000000 R09: 0000000000000000 [ 344.996329][ T8649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.004290][ T8649] R13: 000000000000000b R14: 00007f0a9dbb3fa0 R15: 00007ffd9d65d828 [ 345.012284][ T8649]