last executing test programs: 24.148285387s ago: executing program 2 (id=535): syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0x0, {[@sack={0x5, 0x6, [0x6]}, @nop]}}}}}}}, 0x0) 23.981878332s ago: executing program 2 (id=536): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000f300e6d902000000000000000000000001"}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x4, @desc3}) 23.038595129s ago: executing program 2 (id=540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_getaffinity(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 21.501956879s ago: executing program 2 (id=547): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x70}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCSACTIVE(r0, 0x40047451, &(0x7f0000000040)={0x0, 0x0}) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000000c0)=0x3) 11.532801473s ago: executing program 1 (id=575): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x22, 0x6, "5e14071f2620"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000e00)={0x0, 0x31, 0x1, '~'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f00000010c0)={0x84, &(0x7f0000000c00)={0x20, 0x17, 0x3, "13d125"}, 0x0, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x40, 0x21, 0x1, 0xc}}) 9.661428985s ago: executing program 3 (id=579): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x10000000, {}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x30}}, 0x0) 9.485824211s ago: executing program 3 (id=580): memfd_create(&(0x7f0000000040)='rootmode', 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x6d503000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000400)) 7.286023872s ago: executing program 1 (id=586): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 7.285143303s ago: executing program 0 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty, 0x8}, 0x1c) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setitimer(0x2, &(0x7f0000000340)={{0x77359400}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000080)) 7.148499295s ago: executing program 0 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_getaffinity(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 6.163253305s ago: executing program 0 (id=589): syz_emit_ethernet(0x0, 0x0, 0x0) 5.942796066s ago: executing program 0 (id=590): socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) r5 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) write$sndseq(r5, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0xae}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.493067007s ago: executing program 4 (id=591): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xaa) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x9) 5.279800587s ago: executing program 1 (id=592): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x39d0, 0xf) bind$packet(r0, &(0x7f0000000080)={0x11, 0x16, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f00000002c0)="913dcf3296db5d6d52d2f3b42d66", 0xe, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) 4.26677376s ago: executing program 4 (id=593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180)="200b5fefbcc15d", 0x7, 0x4000010, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/130, 0x82, 0x10141, 0x0, 0x0) 4.25562509s ago: executing program 1 (id=594): r0 = io_uring_setup(0x6cfb, &(0x7f00000001c0)={0x0, 0x0, 0x10}) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000500)=""/255, 0xff}], 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) close_range(r0, 0xffffffffffffffff, 0x0) 4.165336219s ago: executing program 3 (id=595): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x22, 0x6, "5e14071f2620"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000e00)={0x0, 0x31, 0x1, '~'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000bc0)={0x2c, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f00000010c0)={0x84, &(0x7f0000000c00)={0x20, 0x17, 0x3, "13d125"}, 0x0, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x40, 0x21, 0x1, 0xc}}) 4.005297223s ago: executing program 4 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0xd, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x20000000) 3.954825748s ago: executing program 1 (id=597): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xaa) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x9) 3.874964025s ago: executing program 4 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_getaffinity(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2.817692002s ago: executing program 4 (id=599): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e7000905", @ANYRES32], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r2, 0x40480923, 0x20000001) 2.598512422s ago: executing program 2 (id=548): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000e00)=ANY=[@ANYRES64=0x0, @ANYBLOB="c3649be801cfa9d37b32e5a81bd8ef65d2d6ae7c55dce6f28d147bd4743ac27b", @ANYRESHEX=0x0, @ANYBLOB="91f895dd7ebcc2b83a83fb121e4e844e5d7a09e7d4a4979f3fdfe200b83e593144c1cf15b5624e3448b3b40065bc381005ed653b2e5aeafdfb38eeddb8c08b04fb2e46eba33d22f32db6a9608832f35ee976140648653030c5dd9306f90fc9f46534c6d9f2b37f945ba052c7197494046b00916b8f07b5b9f05f77f79225aa0700a01e414c5352def7a6078229384108c95320a4abf33afd65548efaf0b3dc54c4c10995d3e08a9017ae0c8828c59983d23cf29ff4ff4a16908f199ba7"], 0x1, 0x556c, &(0x7f000000b980)="$eJzs3MtvG0UYAPBZp2npkwhxgFNXqpASqbbqtKngFqAVD5Eq4nHgVBzbsdza3ih2nJATEhxRD/wnCCROHPkbOHDmhjiAuCGBvLMmhPIosvNqfz9p/e3Mjr+dWa1afbuRA/DEmkt/+SkJl8LZEMJMCOFCEvL9pNhyyzE8F0K4HEIo/WlLiv4/Ok6HEM6FEC6NksecSX7o7vMxy5s/f/3tmVPnP//quyNaMnAMvBBC6G7E/e1ujFkrxntFf23YzmP3xrCI8UD3ftHOYtxuruUZtmvjcbU8Xm/F8dnGVn8U1zu1+ii22ut5/0YvnrA/bI3z5F+4V9vM243mWh7b/SyPrd04r53d+G/bbn8Q8zSKfB/m6cNgMI6xv7nTjOvZuJ/Hem9Q9Me8WaO5M4rDIhanC/Ws08jnsTbJlT7e3mr3tnbSYXOz38566VKl+mKlerNc3cwazUHzRrnWbdy8kc63OqNh5UGz1l1uZVmr06zUs+5COt+q18vVajp/q7nWrvXSarVyvXKtvLRQ7F1NX7vzXtpppPOj+Eq7t3W63emn69lmGr+xkC5Wrr+0kF6ppu+srKarb9++vbL67t1b7995eeWNV4tBD00rnV+8trhYrl4rL1YXjsH6R//vPuL6B5Os/5Ni0v9j/clklwf+3d4N9uBI5wFwgjxU/4eDqv9D+Ozq8MrSj+p/YGtf6yTW/2Ga9f+opFL//3f9W5q8/p+o/j2u9f8JXj9MxAMmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAn1vezX7ye78zF9vmi/2LR9UzRTkIIpRDCb39jJpzel3OmyDP7D+Nn/zKHb5KQZxid40yxnQshLBfbr08f9FUAAACAx9eXH11+EKv1+DF31BPiMMWHNqULH0wpXxJCmJ37YUrZSqOPZ6eULL+/T4WdKWXLH2A9NaVk8ZHbqWlleyQz4/Dxxb3OfEFJDKVDnQ4AAHAoZvaFw61CAAAAOEyf7m9O7bUWx1wSxq8yx++C87+837sHzu47BgAAAJxAyVFPAAAAADhwef3v9/8AAADg8RZ//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+J2du7lRG4gCAPxscID8KCjKPV3knBuUkRJyzDFQQJqgBNJCGkApgdy2hBWssEdoba0ldrGXXfR9kgeeMW9mgMubQQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPv0v1vM/v778br9iclKe3f483c0IAAAAaNoW63n5ZFrF79L5D+nUpxRnEZFHxEO1+yDe1HIOUp6i5fqiMYa/EWWGQx+jdLyNiG/puP3Y96cAAAAA12uzXM2qar1qppceEM+pWrTJ33/vKF8WEcX0pqNs+aH53FGy8vc9jJ/HeD96ZILaCle5gDXuaGjVktvwhG67M6g9pJmMF+WXWEZ5P/0CAACXVK8EWqoQAAAArsCPp7+1+UduXpZ/X+9HzT297Ngc9xnTrmjaEJzUIgAAAOAVyi49AAAAAKB3Zf3v/n8AAABw3ar7/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCnbbGeb5arWdvrixPz7Pbn6W5GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMf+vKNACIRBGOxd35nM/Q8rDRoam1SB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv3zxtHEQUA/O3e7eUPoBiDXBhQkCigIfYlJKSEAmRR8BGQLOccDA6BxAWJLJAbqJDrNAhKhJBApst3SB1LaUKXwoWRqIN2b9deJ4acEmv34vx+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFS23o9X0zLu5IeJYVy9dnt7dSHvNx/oczfX70znLY+TR030/XsHn/wYS7rxWv385FTt5Nvm8wEAAOAQ2qcY71T1fUTczTbm8j6dKOr/rLomr/l/emHvEA/W/Zvbq0fLL01X9f+ff9x7eWeiieE8+aCLS8uD2YdT6R7UMp82Jx55Rbe488XvXjrFG5J+tPbSVlbcz+SHW7c+6BXhkSayBQAex6mqL4Pq56G877eZGADPjG6t8K7q/85EuzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANGFrLZ6r4iQipru7cW5ze3Vhv/7m+p3pqp27cWO9PmY+RBYRi0vLg6zBtYy7q9eufz6/vDy40nxwMiLam70MPhnhmoj/v6b8eEZ7q/jvIBmPNFoN0vL9GZd8doP7JyKebJzqs3fwGbb0DQkAgEMrK1te19/NNuby15LJiPs/763/36zFMWL9f+/Tc7frc9Xr/35jKxx/MyuXvpy5eu3620uX5i8OLg6+eOd0/93+mfNnz56fye/V7MxipIPZttMEAADgKdYrW73+Tycf3v8/XotjxPr/qx/739Tn6qj/97W76dd2JgAAAM+i3k704uv//J3sc0XS68XX8ysrV/rD48756eGx0XQf05Gy1ev/zmTbWQEAAABN2FpL9uz/X6jFMeL+//O/vPJbfcxORByLuBwRg1MLl5cvNLecsdbE3zkXE/XaXikAAABtOVa2+v5/Vjz/n+488pBGxFtvDOPqf12NUv93Pvzu1/pc9ef/zzS3xLGUTg3vR9FPRXSn2s4IAACAw+xo2fJi/69sY+6z349/3PP8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDT/g0AAP//SAE1oA==") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) 1.706904414s ago: executing program 0 (id=600): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 1.576112086s ago: executing program 0 (id=601): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000100)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@noquota}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000302, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mkdir(0x0, 0x0) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000140)='y', 0x1}], 0x1, 0x0, 0x0, 0x0) 1.134991866s ago: executing program 1 (id=602): syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0x1000010, &(0x7f0000000140)=ANY=[@ANYBLOB="008252ed6493d7e433c5eebd696eccff301b3e4e92f3d4dd19291d59af9a226bcca149e53a11a91a8d34f94def62947afea70942277724b0f1eec98f4fece5f63b2cea3f630aac65edf72206739d7bf5d6e991a0c4891894a8b611b9470d1b6460c24aa18310a677e9a1b9ec59328e806e645b523b8ca6908f672db9b0752bd2da3eb796d939083b077024fa6123ed19917ab6c588af31aaadf8d9ded9043aa5a7aca2dcf9"], 0xfe, 0xbf6, &(0x7f00000022c0)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utime(&(0x7f0000000200)='.\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0xa1) 1.013675888s ago: executing program 3 (id=603): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x1}]}, @enum={0xc, 0x4, 0x0, 0x6, 0x4, [{0xd, 0x800}, {0x6, 0x4}, {0x9, 0xba6d}, {0x5, 0x7}]}]}, {0x0, [0x30, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/224, 0x5d, 0xe0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) pipe2$9p(0x0, 0x80080) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @lirc_mode2, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 981.27189ms ago: executing program 4 (id=604): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400), 0x0, &(0x7f00000018c0)=[{&(0x7f0000008480)=""/95, 0x5f}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f0000000680)=""/209, 0xd1}, {&(0x7f0000001940)=""/147, 0x93}, {&(0x7f0000000840)=""/122, 0x7a}], 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = getpgrp(r0) syz_pidfd_open(r6, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="ac00000012000105b43000"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000040002005c00010000581ba2d3a96b429bd1a36bf75c7a3aea9218910e90e1e3b3a1fea71dab2e015afc056601ebc0b9a6022723b32a3f39954c7920d060d0d3635dad7e9f401813f85becbe9fa1e61dd8cfbf4e9ec19f65b315b616c5023fd7"], 0xac}}, 0x0) 794.783268ms ago: executing program 2 (id=605): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r1 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000", 0x36}], 0x1) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 161.856385ms ago: executing program 3 (id=606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b}, @delba={0x3, 0x2, {{0x0, 0x1, 0x3}, 0x24, {0xbd, 0x6, @device_b}}}}}]}, 0x48}}, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) 0s ago: executing program 3 (id=607): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000680)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) kernel console output (not intermixed with test programs): 581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.791017][ T3581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.802051][ T3581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.812150][ T3581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.823983][ T3581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.834100][ T3581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.844796][ T3581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.855995][ T3581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.870311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.879582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.888368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.897027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.905995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.915368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.924597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.943032][ T3569] device veth0_macvtap entered promiscuous mode [ 60.967903][ T3581] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.979924][ T3581] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.997088][ T3581] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.008411][ T3581] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.066643][ T3569] device veth1_macvtap entered promiscuous mode [ 61.116883][ T701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.135620][ T701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.147823][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.160624][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.167247][ T3644] loop0: detected capacity change from 0 to 4096 [ 61.178591][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.194288][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.204620][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.215744][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.225744][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.240587][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.252473][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.270315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.276128][ T3644] ======================================================= [ 61.276128][ T3644] WARNING: The mand mount option has been deprecated and [ 61.276128][ T3644] and is ignored by this kernel. Remove the mand [ 61.276128][ T3644] option from the mount to silence this warning. [ 61.276128][ T3644] ======================================================= [ 61.286062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.331257][ T3644] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 61.331393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.351665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.376632][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.394445][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.399543][ T3644] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 61.405031][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.434938][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.456519][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.467303][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.477665][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.488847][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.500927][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.553594][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.562406][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.570351][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.593919][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.603290][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.616958][ T3569] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.627426][ T3569] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.636695][ T3569] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.645715][ T3569] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.775007][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.794423][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.814451][ T3646] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.835158][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.853099][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.861085][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.897508][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.009570][ T1198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.035379][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.064167][ T1198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.079481][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.096903][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.137237][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.166593][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.211635][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.244428][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.551877][ T3559] Bluetooth: hci0: command 0x0419 tx timeout [ 62.632600][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 62.638854][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 62.650259][ T3648] loop0: detected capacity change from 0 to 32768 [ 62.659167][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 62.703217][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 62.742950][ T3648] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.6 (3648) [ 62.831616][ T3648] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 62.876086][ T3648] BTRFS info (device loop0): setting nodatacow, compression disabled [ 62.912179][ T3648] BTRFS info (device loop0): turning on flush-on-commit [ 62.937265][ T3648] BTRFS info (device loop0): enabling auto defrag [ 62.967165][ T3648] BTRFS info (device loop0): max_inline at 0 [ 62.987555][ T3648] BTRFS info (device loop0): using free space tree [ 63.008821][ T3648] BTRFS info (device loop0): has skinny extents [ 63.075838][ T3654] loop4: detected capacity change from 0 to 32768 [ 63.129383][ T3652] loop2: detected capacity change from 0 to 32768 [ 63.197086][ T3657] loop3: detected capacity change from 0 to 32768 [ 63.211196][ T3654] XFS (loop4): Mounting V5 Filesystem [ 63.248283][ T3648] BTRFS info (device loop0): enabling ssd optimizations [ 63.252689][ T3657] XFS: ikeep mount option is deprecated. [ 63.396483][ T3657] XFS (loop3): Mounting V5 Filesystem [ 63.406586][ T26] audit: type=1800 audit(1727332209.064:2): pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 63.465448][ T3700] loop1: detected capacity change from 0 to 2048 [ 63.499712][ T3700] NILFS (loop1): invalid segment: Sequence number mismatch [ 63.508493][ T3700] NILFS (loop1): trying rollback from an earlier position [ 63.533067][ T3700] NILFS (loop1): recovery complete [ 63.572614][ T3654] XFS (loop4): Ending clean mount [ 63.593182][ T3652] XFS (loop2): Mounting V5 Filesystem [ 63.608494][ T3707] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.724797][ T3654] XFS (loop4): Quotacheck needed: Please wait. [ 63.784489][ T3657] XFS (loop3): Ending clean mount [ 63.817544][ T3657] XFS (loop3): Quotacheck needed: Please wait. [ 63.958267][ T3652] XFS (loop2): Ending clean mount [ 63.988299][ T3654] XFS (loop4): Quotacheck: Done. [ 64.016691][ T3652] XFS (loop2): Quotacheck needed: Please wait. [ 64.122964][ T3657] XFS (loop3): Quotacheck: Done. [ 64.172622][ T3652] XFS (loop2): Quotacheck: Done. [ 64.375919][ T3581] XFS (loop3): Unmounting Filesystem [ 64.391304][ T3568] XFS (loop2): Unmounting Filesystem [ 64.543574][ T3725] block nbd0: NBD_DISCONNECT [ 64.557769][ T3724] block nbd0: Disconnected due to user request. [ 64.582302][ T3578] XFS (loop4): Unmounting Filesystem [ 64.610961][ T3724] block nbd0: shutting down sockets [ 64.706424][ T3642] Bluetooth: hci4: command 0x0405 tx timeout [ 65.494808][ T3737] loop3: detected capacity change from 0 to 4096 [ 65.589658][ T3737] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 65.685598][ T3737] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 65.831554][ T3728] loop0: detected capacity change from 0 to 32768 [ 66.037985][ T3728] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 66.129611][ T3730] loop2: detected capacity change from 0 to 32768 [ 66.295995][ T3749] loop4: detected capacity change from 0 to 2048 [ 66.411202][ T3749] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.448925][ T3753] overlayfs: missing 'lowerdir' [ 66.476859][ T3730] XFS (loop2): Mounting V5 Filesystem [ 66.495100][ T3575] ocfs2: Unmounting device (7,0) on (node local) [ 66.820376][ T3730] XFS (loop2): Ending clean mount [ 66.886967][ T3730] XFS (loop2): Quotacheck needed: Please wait. [ 67.029997][ T3730] XFS (loop2): Quotacheck: Done. [ 67.161669][ T3774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 67.189419][ T3774] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 67.242894][ T3778] loop4: detected capacity change from 0 to 1024 [ 67.254902][ T3774] bond0: (slave bond_slave_0): Releasing backup interface [ 67.316891][ T3779] attempt to access beyond end of device [ 67.316891][ T3779] loop2: rw=4096, want=11945515059154812928, limit=32768 [ 67.337445][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.361207][ T3778] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.418648][ T26] audit: type=1800 audit(1727332213.074:3): pid=3778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.24" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 67.569909][ T3568] XFS (loop2): Unmounting Filesystem [ 68.222267][ T3799] loop2: detected capacity change from 0 to 2048 [ 68.429059][ T3799] NILFS (loop2): invalid segment: Sequence number mismatch [ 68.436603][ T3799] NILFS (loop2): trying rollback from an earlier position [ 68.472594][ T3799] NILFS (loop2): recovery complete [ 68.508707][ T3800] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.755049][ T3802] loop4: detected capacity change from 0 to 2048 [ 68.941386][ T3789] loop1: detected capacity change from 0 to 40427 [ 68.964895][ T3802] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.986767][ T3807] overlayfs: missing 'lowerdir' [ 68.996719][ T3789] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 69.048452][ T3789] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 69.152777][ T3789] F2FS-fs (loop1): invalid crc value [ 69.204530][ T3798] loop3: detected capacity change from 0 to 32768 [ 69.206446][ T3789] F2FS-fs (loop1): Found nat_bits in checkpoint [ 69.253437][ T3798] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.32 (3798) [ 69.325896][ T3798] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 69.352232][ T3798] BTRFS info (device loop3): metadata ratio 4 [ 69.358580][ T3798] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 69.405369][ T3798] BTRFS info (device loop3): force lzo compression, level 0 [ 69.417348][ T3789] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 69.424858][ T3798] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 69.442122][ T3789] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 69.461927][ T3798] BTRFS info (device loop3): trying to use backup root at mount time [ 69.470122][ T3798] BTRFS info (device loop3): doing ref verification [ 69.522127][ T3798] BTRFS info (device loop3): disabling tree log [ 69.552036][ T3798] BTRFS info (device loop3): using free space tree [ 69.558575][ T3798] BTRFS info (device loop3): has skinny extents [ 69.864608][ T701] BTRFS warning (device loop3): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 69.907640][ T3798] BTRFS warning (device loop3): couldn't read tree root [ 69.948566][ T3765] BTRFS warning (device loop3): checksum verify failed on 5324800 wanted 0x9f73850b found 0x78ca8373 level 0 [ 70.004666][ T3814] loop4: detected capacity change from 0 to 32768 [ 70.022362][ T3798] BTRFS warning (device loop3): couldn't read tree root [ 70.041581][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 70.057836][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 70.081737][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 70.090687][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 70.099571][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.108443][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.117319][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.126168][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.135147][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.144076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.180164][ T3798] BTRFS error (device loop3): parent transid verify failed on 5255168 wanted 5 found 7 [ 70.192524][ T3798] BTRFS warning (device loop3): couldn't read tree root [ 70.202083][ T3814] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.34 (3814) [ 70.252135][ T3798] BTRFS info (device loop3): enabling ssd optimizations [ 70.264388][ T3814] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 70.275630][ T3798] BTRFS info (device loop3): clearing free space tree [ 70.289312][ T3814] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 70.289409][ T3798] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 70.311821][ T3814] BTRFS info (device loop4): trying to use backup root at mount time [ 70.318693][ T3798] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 70.319998][ T3814] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 70.380672][ T3798] BTRFS info (device loop3): creating free space tree [ 70.412750][ T3798] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 70.451835][ T3798] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 70.480163][ T3814] BTRFS info (device loop4): use lzo compression, level 0 [ 70.548198][ T3814] BTRFS info (device loop4): max_inline at 4096 [ 70.556626][ T3814] BTRFS info (device loop4): enabling ssd optimizations [ 70.564522][ T3814] BTRFS info (device loop4): using spread ssd allocation scheme [ 70.573539][ T3814] BTRFS info (device loop4): enabling disk space caching [ 70.580681][ T3814] BTRFS error (device loop4): cannot disable free space tree [ 70.642629][ T3814] BTRFS error (device loop4): open_ctree failed [ 70.705844][ T26] audit: type=1804 audit(1727332216.364:4): pid=3798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.32" name="/newroot/5/file1/bus" dev="loop3" ino=257 res=1 errno=0 [ 70.786395][ T3850] netlink: 104 bytes leftover after parsing attributes in process `syz.1.39'. [ 70.938082][ T3642] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.193565][ T1399] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.200392][ T1399] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.261656][ T3861] loop1: detected capacity change from 0 to 2048 [ 71.465424][ T3861] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.912016][ T3718] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.962055][ T3877] overlayfs: missing 'lowerdir' [ 72.062441][ T3642] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.077885][ T3642] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.098632][ T3880] loop0: detected capacity change from 0 to 2048 [ 72.171957][ T3642] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 72.183706][ T3642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 72.199886][ T3880] NILFS (loop0): invalid segment: Sequence number mismatch [ 72.200503][ T3642] usb 3-1: SerialNumber: syz [ 72.208142][ T3880] NILFS (loop0): trying rollback from an earlier position [ 72.267166][ T3880] NILFS (loop0): recovery complete [ 72.280330][ T3883] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.451874][ T3718] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.468290][ T3718] usb 5-1: config 0 has no interfaces? [ 72.610912][ T3559] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.668999][ T3887] loop3: detected capacity change from 0 to 1024 [ 72.672081][ T3718] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 72.694072][ T3718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.702540][ T3718] usb 5-1: Product: syz [ 72.707826][ T3718] usb 5-1: Manufacturer: syz [ 72.712765][ T3718] usb 5-1: SerialNumber: syz [ 72.748891][ T3887] EXT4-fs (loop3): Ignoring removed orlov option [ 72.753348][ T3718] usb 5-1: config 0 descriptor?? [ 72.770302][ T3887] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 72.819324][ T3887] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 73.037748][ T3718] usb 5-1: USB disconnect, device number 2 [ 73.065210][ T3559] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 73.084842][ T3559] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 73.115526][ T3642] usb 3-1: 0:2 : does not exist [ 73.180996][ T3642] usb 3-1: USB disconnect, device number 2 [ 73.285588][ T3559] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 73.305571][ T3894] loop3: detected capacity change from 0 to 2048 [ 73.320274][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.328816][ T3559] usb 2-1: Product: syz [ 73.339618][ T3559] usb 2-1: Manufacturer: syz [ 73.345414][ T3559] usb 2-1: SerialNumber: syz [ 73.352281][ T3559] usb 2-1: config 0 descriptor?? [ 73.373247][ T3882] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 73.380644][ T3882] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 73.415186][ T3894] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.427800][ T3894] ext4 filesystem being mounted at /9/bus supports timestamps until 2038 (0x7fffffff) [ 73.487168][ T3894] fs-verity: sha512 using implementation "sha512-avx2" [ 73.614260][ T3882] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 73.652054][ T3882] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 73.826422][ T3902] loop0: detected capacity change from 0 to 16 [ 73.886053][ T3902] erofs: (device loop0): mounted with root inode @ nid 36. [ 73.961251][ T3902] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 74.164031][ T3909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 74.174098][ T3898] loop4: detected capacity change from 0 to 32768 [ 74.187703][ T3909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 74.244413][ T3898] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.53 (3898) [ 74.324955][ T3911] autofs4:pid:3911:autofs_fill_super: called with bogus options [ 74.364423][ T3898] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 74.365129][ T3911] loop0: detected capacity change from 0 to 2048 [ 74.394060][ T3898] BTRFS info (device loop4): ignoring bad roots [ 74.426818][ T3898] BTRFS info (device loop4): doing ref verification [ 74.449773][ T3898] BTRFS info (device loop4): setting nodatacow, compression disabled [ 74.494930][ T3898] BTRFS info (device loop4): turning off barriers [ 74.501573][ T3898] BTRFS info (device loop4): enabling ssd optimizations [ 74.551897][ T3898] BTRFS info (device loop4): using spread ssd allocation scheme [ 74.559671][ T3898] BTRFS info (device loop4): not using ssd optimizations [ 74.580741][ T3911] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.601123][ T3898] BTRFS info (device loop4): not using spread ssd allocation scheme [ 74.609302][ T3898] BTRFS error (device loop4): ignorebadroots must be used with ro mount option [ 74.753269][ T3898] BTRFS error (device loop4): open_ctree failed [ 74.842908][ T3907] loop2: detected capacity change from 0 to 32768 [ 74.900119][ T3907] (syz.2.56,3907,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 74.942936][ T3907] (syz.2.56,3907,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 74.998730][ T3907] JBD2: Ignoring recovery information on journal [ 75.150198][ T3907] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 75.222210][ T3907] ocfs2: Unmounting device (7,2) on (node local) [ 75.250027][ T3923] overlayfs: missing 'lowerdir' [ 75.634399][ T3934] loop3: detected capacity change from 0 to 2048 [ 75.682694][ T3934] NILFS (loop3): invalid segment: Sequence number mismatch [ 75.689938][ T3934] NILFS (loop3): trying rollback from an earlier position [ 75.704373][ T3934] NILFS (loop3): recovery complete [ 75.722446][ T3937] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.934423][ T3939] loop2: detected capacity change from 0 to 256 [ 76.104744][ T3944] loop4: detected capacity change from 0 to 128 [ 76.510997][ T3943] xt_CT: No such helper "netbios-ns" [ 76.573693][ T1075] cfg80211: failed to load regulatory.db [ 76.811969][ T3559] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 76.830367][ T3559] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 5e:14:07:1f:26:20 [ 76.832854][ T3944] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 76.845167][ T3559] usb 2-1: USB disconnect, device number 2 [ 76.855570][ T3944] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 77.024001][ T3559] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 77.462187][ T3963] program syz.1.69 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.734950][ T3976] autofs4:pid:3976:autofs_fill_super: called with bogus options [ 78.900571][ T3976] loop4: detected capacity change from 0 to 2048 [ 79.159249][ T3976] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.417470][ T3960] loop3: detected capacity change from 0 to 32768 [ 79.486805][ T3983] overlayfs: missing 'lowerdir' [ 79.645601][ T3960] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.70 (3960) [ 79.779830][ T3960] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 79.802333][ T3960] BTRFS info (device loop3): setting nodatacow, compression disabled [ 79.811858][ T3960] BTRFS info (device loop3): enabling auto defrag [ 79.818348][ T3960] BTRFS info (device loop3): max_inline at 0 [ 79.846861][ T3990] loop4: detected capacity change from 0 to 128 [ 79.862582][ T3960] BTRFS info (device loop3): using free space tree [ 79.878620][ T3960] BTRFS info (device loop3): has skinny extents [ 79.928961][ T3992] loop0: detected capacity change from 0 to 2048 [ 79.978262][ T3992] NILFS (loop0): invalid segment: Sequence number mismatch [ 79.987399][ T3992] NILFS (loop0): trying rollback from an earlier position [ 80.026318][ T3992] NILFS (loop0): recovery complete [ 80.149858][ T3997] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.697253][ T3960] BTRFS error (device loop3): open_ctree failed [ 80.919409][ T4019] loop4: detected capacity change from 0 to 2048 [ 81.029486][ T4019] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.191921][ T3859] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.778479][ T4022] loop2: detected capacity change from 0 to 32768 [ 81.888025][ T4022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.82 (4022) [ 82.153297][ T4022] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 82.165500][ T4022] BTRFS info (device loop2): setting nodatacow, compression disabled [ 82.177860][ T4022] BTRFS info (device loop2): enabling auto defrag [ 82.186770][ T4022] BTRFS info (device loop2): max_inline at 0 [ 82.193498][ T4022] BTRFS info (device loop2): using free space tree [ 82.200289][ T4022] BTRFS info (device loop2): has skinny extents [ 82.481243][ T4056] program syz.0.86 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.612015][ T3859] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 82.661480][ T3859] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 82.938839][ T4022] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4) [ 83.122126][ T3859] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 83.151034][ T3859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.334439][ T3859] usb 2-1: Product: syz [ 83.338656][ T3859] usb 2-1: Manufacturer: syz [ 83.345060][ T3859] usb 2-1: SerialNumber: syz [ 83.351673][ T3859] usb 2-1: config 0 descriptor?? [ 83.382153][ T3859] usb 2-1: can't set config #0, error -71 [ 83.394129][ T4070] Zero length message leads to an empty skb [ 83.453282][ T4069] overlayfs: missing 'lowerdir' [ 83.778938][ T3859] usb 2-1: USB disconnect, device number 3 [ 84.349045][ T4081] loop0: detected capacity change from 0 to 2048 [ 84.396857][ T4081] NILFS (loop0): invalid segment: Sequence number mismatch [ 84.404195][ T4081] NILFS (loop0): trying rollback from an earlier position [ 84.420803][ T4081] NILFS (loop0): recovery complete [ 84.437192][ T4082] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.925325][ T4061] loop4: detected capacity change from 0 to 32768 [ 85.531577][ T4061] XFS (loop4): Mounting V5 Filesystem [ 85.759819][ T4061] XFS (loop4): Ending clean mount [ 85.803349][ T4061] XFS (loop4): Quotacheck needed: Please wait. [ 86.022396][ T4061] XFS (loop4): Quotacheck: Done. [ 86.079580][ T3578] XFS (loop4): Unmounting Filesystem [ 86.477614][ T4084] loop2: detected capacity change from 0 to 40427 [ 86.578108][ T4084] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 86.596279][ T4084] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 86.790233][ T4084] F2FS-fs (loop2): Found nat_bits in checkpoint [ 86.935994][ T4101] loop1: detected capacity change from 0 to 32768 [ 87.041261][ T4084] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 87.051291][ T4084] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.351677][ T4101] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 88.225341][ T3569] ocfs2: Unmounting device (7,1) on (node local) [ 88.377209][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 88.572932][ T4134] overlayfs: missing 'lowerdir' [ 89.155534][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 89.462097][ T3859] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.832339][ T3859] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 89.848918][ T3859] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 90.235790][ T4152] loop3: detected capacity change from 0 to 40427 [ 90.286865][ T3859] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 90.296688][ T3859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.304776][ T3859] usb 3-1: Product: syz [ 90.308950][ T3859] usb 3-1: Manufacturer: syz [ 90.313567][ T3859] usb 3-1: SerialNumber: syz [ 90.325229][ T4152] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 90.355225][ T4152] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 90.445715][ T4152] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.649342][ T4152] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 90.669281][ T4152] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.691028][ T3859] usb 3-1: config 0 descriptor?? [ 90.712378][ T4143] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.727658][ T4143] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.002275][ T4143] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.014341][ T4143] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.070001][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 91.181901][ T4074] Bluetooth: hci5: command 0x1003 tx timeout [ 91.188259][ T3574] Bluetooth: hci5: sending frame failed (-49) [ 91.481896][ T1075] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.527540][ T4180] loop3: detected capacity change from 0 to 32768 [ 91.575268][ T4180] Dev loop3 Sun disklabel: Csum bad, label corrupted [ 91.583842][ T4180] loop3: unable to read partition table [ 91.589824][ T4180] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 91.707021][ T3859] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 92.128287][ T4187] overlayfs: missing 'lowerdir' [ 92.202234][ T1075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.230172][ T1075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.251853][ T1075] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 92.269513][ T1075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.456580][ T1075] usb 1-1: config 0 descriptor?? [ 92.707525][ T3859] usb 3-1: USB disconnect, device number 3 [ 93.907886][ T4074] Bluetooth: hci5: command 0x1001 tx timeout [ 93.915003][ T3574] Bluetooth: hci5: sending frame failed (-49) [ 94.008889][ T4201] program syz.3.125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.322056][ T1075] usbhid 1-1:0.0: can't add hid device: -71 [ 94.331365][ T1075] usbhid: probe of 1-1:0.0 failed with error -71 [ 94.516834][ T1075] usb 1-1: USB disconnect, device number 2 [ 95.240298][ T4208] loop3: detected capacity change from 0 to 40427 [ 95.405078][ T4208] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 95.416580][ T4208] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 95.608429][ T4208] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.622408][ T4222] loop4: detected capacity change from 0 to 32768 [ 95.701551][ T4208] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 95.708832][ T4208] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.778671][ T26] audit: type=1800 audit(1727332241.434:5): pid=4222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.131" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 95.982800][ T4015] Bluetooth: hci5: command 0x1009 tx timeout [ 96.018638][ T4234] overlayfs: missing 'lowerdir' [ 96.186106][ T4239] loop2: detected capacity change from 0 to 7 [ 96.207986][ T4239] Dev loop2: unable to read RDB block 7 [ 96.222935][ T4239] loop2: AHDI p1 p3 p4 [ 96.227377][ T4239] loop2: partition table partially beyond EOD, truncated [ 96.241553][ T4239] loop2: p1 start 2048 is beyond EOD, truncated [ 96.247997][ T4239] loop2: p3 size 16779293 extends beyond EOD, truncated [ 96.605533][ T4243] program syz.0.138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.834231][ T4270] overlayfs: missing 'lowerdir' [ 99.611258][ T4263] loop4: detected capacity change from 0 to 40427 [ 99.686217][ T4281] program syz.0.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.691576][ T4263] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 99.778776][ T4263] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 99.847698][ T4263] F2FS-fs (loop4): Found nat_bits in checkpoint [ 99.909859][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.068440][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.090348][ T4263] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 101.227006][ T4263] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 101.363564][ T4074] Bluetooth: hci1: command 0x0409 tx timeout [ 101.455923][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.272077][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.649813][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 102.718141][ T4312] overlayfs: missing 'lowerdir' [ 103.336380][ T4324] program syz.0.159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.422210][ T1077] Bluetooth: hci1: command 0x041b tx timeout [ 103.618533][ T4331] loop2: detected capacity change from 0 to 8 [ 103.677593][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.692550][ T4331] squashfs: Unknown parameter '' [ 103.692556][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.709076][ T4273] device bridge_slave_0 entered promiscuous mode [ 103.745937][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.780484][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.838182][ T4273] device bridge_slave_1 entered promiscuous mode [ 104.330220][ T4351] loop2: detected capacity change from 0 to 256 [ 104.437359][ T4351] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 104.464713][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.501652][ T4351] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 104.512237][ T4351] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 104.519889][ T4351] UDF-fs: Scanning with blocksize 512 failed [ 104.528504][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.539790][ T4351] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 104.556633][ T4351] UDF-fs: warning (device loop2): udf_fill_super: No fileset found [ 105.497260][ T4273] team0: Port device team_slave_0 added [ 105.502246][ T4015] Bluetooth: hci1: command 0x040f tx timeout [ 105.514366][ T4273] team0: Port device team_slave_1 added [ 105.809041][ T4373] overlayfs: missing 'lowerdir' [ 105.820526][ T4334] loop3: detected capacity change from 0 to 40427 [ 105.855824][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.871824][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.909747][ T4334] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 105.927296][ T4334] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 106.034922][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.088785][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.113897][ T4334] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.134185][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.258087][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.384750][ T4385] loop0: detected capacity change from 0 to 2048 [ 106.410099][ T4390] program syz.4.172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.487304][ T4334] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 106.510418][ T4385] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.535523][ T3704] udevd[3704]: incorrect nilfs2 checksum on /dev/loop0 [ 106.549153][ T4334] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 106.650628][ T4393] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.023772][ T26] audit: type=1800 audit(1727332252.684:6): pid=4385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.173" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 107.060775][ T4273] device hsr_slave_0 entered promiscuous mode [ 107.074004][ T4273] device hsr_slave_1 entered promiscuous mode [ 107.081205][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.095383][ T4273] Cannot create hsr debugfs directory [ 107.152005][ T4015] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.257309][ T4411] loop2: detected capacity change from 0 to 1024 [ 107.401857][ T4015] usb 1-1: Using ep0 maxpacket: 8 [ 107.411363][ T4411] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.532012][ T4015] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.582174][ T1077] Bluetooth: hci1: command 0x0419 tx timeout [ 107.712229][ T4015] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.746058][ T4015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.795125][ T4015] usb 1-1: Product: syz [ 107.809567][ T4015] usb 1-1: Manufacturer: syz [ 107.852254][ T4015] usb 1-1: SerialNumber: syz [ 107.937435][ T4417] syz.2.177 (pid 4417) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 109.129241][ T154] device hsr_slave_0 left promiscuous mode [ 109.184071][ T154] device hsr_slave_1 left promiscuous mode [ 109.225173][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.272666][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.298000][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.305795][ T4015] cdc_ncm 1-1:1.0: bind() failure [ 109.314358][ T4015] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 109.321170][ T4015] cdc_ncm 1-1:1.1: bind() failure [ 109.338997][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.350943][ T4015] usb 1-1: USB disconnect, device number 3 [ 109.384135][ T154] device bridge_slave_1 left promiscuous mode [ 109.392452][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.458351][ T154] device bridge_slave_0 left promiscuous mode [ 109.483228][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.559775][ T154] device veth1_macvtap left promiscuous mode [ 109.584103][ T154] device veth0_macvtap left promiscuous mode [ 109.638200][ T154] device veth1_vlan left promiscuous mode [ 109.671665][ T154] device veth0_vlan left promiscuous mode [ 110.421782][ T3718] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.569023][ T154] team0 (unregistering): Port device team_slave_1 removed [ 110.600369][ T154] team0 (unregistering): Port device team_slave_0 removed [ 110.618658][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.654178][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.782032][ T3718] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 110.804161][ T3718] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 110.860439][ T154] bond0 (unregistering): Released all slaves [ 111.004965][ T3718] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 111.021264][ T4446] loop2: detected capacity change from 0 to 32768 [ 111.030871][ T3718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.069284][ T3718] usb 1-1: Product: syz [ 111.082166][ T3718] usb 1-1: Manufacturer: syz [ 111.099395][ T3718] usb 1-1: SerialNumber: syz [ 111.117185][ T4446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.183 (4446) [ 111.151441][ T3718] usb 1-1: config 0 descriptor?? [ 111.162808][ T4450] loop3: detected capacity change from 0 to 2048 [ 111.192150][ T4439] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.206970][ T4439] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.246263][ T4450] NILFS (loop3): invalid segment: Sequence number mismatch [ 111.253923][ T4450] NILFS (loop3): trying rollback from an earlier position [ 111.269585][ T4446] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 111.281720][ T4450] NILFS (loop3): recovery complete [ 111.302090][ T4446] BTRFS info (device loop2): setting nodatacow, compression disabled [ 111.321667][ T4454] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.361834][ T4446] BTRFS info (device loop2): enabling auto defrag [ 111.368433][ T4446] BTRFS info (device loop2): max_inline at 0 [ 111.412029][ T4446] BTRFS info (device loop2): using free space tree [ 111.418695][ T4446] BTRFS info (device loop2): has skinny extents [ 111.521014][ T4439] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.548881][ T4439] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.427594][ T4488] autofs4:pid:4488:autofs_fill_super: called with bogus options [ 112.549619][ T4488] loop3: detected capacity change from 0 to 2048 [ 112.581979][ T3718] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 112.796697][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.824923][ T4488] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.072641][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.167651][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.209345][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.384605][ T4508] loop3: detected capacity change from 0 to 1024 [ 113.528678][ T4508] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.587323][ T1077] usb 1-1: USB disconnect, device number 4 [ 114.026725][ T4526] loop4: detected capacity change from 0 to 1024 [ 114.614557][ T4526] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.182875][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.989527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.044035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.065778][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.110236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.133702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.175452][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.182592][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.233868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.348708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.359511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.368226][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.375347][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.384573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.438515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.464770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.505773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.518987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.519880][ T4546] loop3: detected capacity change from 0 to 2048 [ 116.535993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.558120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.563399][ T4546] NILFS (loop3): invalid segment: Sequence number mismatch [ 116.572738][ T4546] NILFS (loop3): trying rollback from an earlier position [ 116.573762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.592830][ T4546] NILFS (loop3): recovery complete [ 116.608956][ T4548] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.676623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.726415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.775371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.806553][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.249549][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.304964][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.323686][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.380353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.407843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.562535][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.616901][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.673690][ T4273] device veth0_vlan entered promiscuous mode [ 117.683299][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.768063][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.848015][ T4273] device veth1_vlan entered promiscuous mode [ 118.055062][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.104792][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.164062][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.242774][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.299937][ T4273] device veth0_macvtap entered promiscuous mode [ 118.335070][ T4273] device veth1_macvtap entered promiscuous mode [ 118.437951][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.509481][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.551367][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.652876][ T4588] program syz.2.198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.680121][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.769569][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.856362][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.935484][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.021475][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.175950][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.224267][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.411085][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.421738][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.432626][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.442736][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.453423][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.465439][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.482373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.512178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.556103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.582766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.634782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.669446][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.706164][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.742958][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.777651][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.041250][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.070757][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.171023][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.436389][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.464272][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.538368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.561487][ T4615] loop2: detected capacity change from 0 to 1024 [ 120.941807][ T4615] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.199044][ T4626] loop4: detected capacity change from 0 to 1024 [ 121.270921][ T4632] overlayfs: missing 'lowerdir' [ 121.861060][ T4626] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.737763][ T4663] program syz.0.209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.884851][ T4669] loop2: detected capacity change from 0 to 2048 [ 123.920975][ T4669] NILFS (loop2): invalid segment: Sequence number mismatch [ 123.928287][ T4669] NILFS (loop2): trying rollback from an earlier position [ 123.964491][ T4669] NILFS (loop2): recovery complete [ 123.983754][ T4673] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.595783][ T4497] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.392780][ T4497] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 126.486555][ T4497] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 126.876196][ T4497] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 126.949662][ T4497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.107257][ T4497] usb 4-1: Product: syz [ 127.154126][ T4497] usb 4-1: Manufacturer: syz [ 127.158769][ T4497] usb 4-1: SerialNumber: syz [ 127.202594][ T4497] usb 4-1: config 0 descriptor?? [ 127.238456][ T4690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.259999][ T4690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.542101][ T4690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.549197][ T4690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.625661][ T4708] loop2: detected capacity change from 0 to 1024 [ 127.747597][ T4708] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.140202][ T4717] overlayfs: missing 'lowerdir' [ 128.227985][ T4497] Error reading MAC address [ 129.665374][ T4497] usb 4-1: USB disconnect, device number 2 [ 129.761130][ T4727] loop3: detected capacity change from 0 to 1024 [ 129.895372][ T4727] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.358145][ T4738] program syz.1.226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.579822][ T4747] loop4: detected capacity change from 0 to 2048 [ 132.609513][ T4747] NILFS (loop4): invalid segment: Sequence number mismatch [ 132.616897][ T4747] NILFS (loop4): trying rollback from an earlier position [ 132.625984][ T1399] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.626083][ T1399] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.656497][ T4747] NILFS (loop4): recovery complete [ 132.672338][ T4748] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.911748][ T4770] overlayfs: missing 'lowerdir' [ 136.338132][ T4776] loop4: detected capacity change from 0 to 1024 [ 136.637994][ T4776] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.651886][ T4074] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.022479][ T4074] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 139.073225][ T4074] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 139.361918][ T4074] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 139.392765][ T4074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.400892][ T4074] usb 3-1: Product: syz [ 139.428161][ T4074] usb 3-1: Manufacturer: syz [ 139.446189][ T4074] usb 3-1: SerialNumber: syz [ 139.468989][ T4074] usb 3-1: config 0 descriptor?? [ 139.492090][ T4794] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.523745][ T4794] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.569326][ T4796] loop1: detected capacity change from 0 to 1024 [ 139.668973][ T4796] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.896124][ T4794] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.944733][ T4794] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 140.871983][ T4074] Error reading MAC address [ 142.079980][ T4817] program syz.3.246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.117257][ T1075] usb 3-1: USB disconnect, device number 4 [ 142.238625][ T4820] loop2: detected capacity change from 0 to 2048 [ 142.284561][ T4820] NILFS (loop2): invalid segment: Sequence number mismatch [ 142.291979][ T4820] NILFS (loop2): trying rollback from an earlier position [ 142.311452][ T4820] NILFS (loop2): recovery complete [ 142.321628][ T4821] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.525049][ T4841] loop0: detected capacity change from 0 to 1024 [ 144.721018][ T4841] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.444526][ T4861] overlayfs: missing 'lowerdir' [ 148.286155][ T4863] loop4: detected capacity change from 0 to 1024 [ 148.353568][ T4863] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.618074][ T4872] loop1: detected capacity change from 0 to 2048 [ 148.672374][ T4872] NILFS (loop1): invalid segment: Sequence number mismatch [ 148.679713][ T4872] NILFS (loop1): trying rollback from an earlier position [ 149.456117][ T4872] NILFS (loop1): recovery complete [ 149.471855][ T4874] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.721775][ T4497] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 152.296272][ T4497] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 152.438865][ T4497] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 152.741687][ C0] sched: RT throttling activated [ 153.212398][ T4497] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 153.221469][ T4497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.229685][ T4497] usb 5-1: Product: syz [ 153.233877][ T4497] usb 5-1: Manufacturer: syz [ 153.238479][ T4497] usb 5-1: SerialNumber: syz [ 153.257247][ T4497] usb 5-1: config 0 descriptor?? [ 153.401112][ T4891] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 153.414182][ T4891] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 153.539930][ T4908] program syz.0.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.947303][ T4891] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.082052][ T4891] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.324686][ T4910] loop0: detected capacity change from 0 to 1024 [ 154.479875][ T4910] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.712077][ T4497] Error reading MAC address [ 156.151548][ T3864] usb 5-1: USB disconnect, device number 3 [ 157.805545][ T4938] loop4: detected capacity change from 0 to 1024 [ 157.946411][ T4938] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 161.545596][ T4965] program syz.4.281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.118208][ T4981] loop0: detected capacity change from 0 to 1024 [ 164.549832][ T4990] overlayfs: missing 'lowerdir' [ 165.370916][ T4981] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.592210][ T4497] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 167.699154][ T5009] loop3: detected capacity change from 0 to 1024 [ 168.025683][ T5009] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.408680][ T5020] program syz.0.293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.011930][ T4497] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 169.051967][ T4497] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 170.712065][ T4497] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 170.773199][ T4497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.148991][ T4497] usb 5-1: config 0 descriptor?? [ 171.457012][ T5038] loop0: detected capacity change from 0 to 4096 [ 171.495206][ T4497] usb 5-1: can't set config #0, error -71 [ 171.525376][ T4497] usb 5-1: USB disconnect, device number 4 [ 171.546357][ T5038] NILFS (loop0): invalid segment: Checksum error in segment payload [ 171.586262][ T5038] NILFS (loop0): trying rollback from an earlier position [ 171.671271][ T5038] NILFS (loop0): recovery complete [ 171.725583][ T5047] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.338801][ T5068] program syz.3.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.201822][ T4497] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 177.632824][ T4497] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 177.650514][ T4497] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 177.892074][ T4497] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 177.911444][ T4497] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.941984][ T4497] usb 2-1: Product: syz [ 177.946200][ T4497] usb 2-1: Manufacturer: syz [ 177.950823][ T4497] usb 2-1: SerialNumber: syz [ 177.977597][ T4497] usb 2-1: config 0 descriptor?? [ 178.032099][ T5081] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.042225][ T5081] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.104755][ T5098] loop3: detected capacity change from 0 to 128 [ 178.184120][ T5098] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.287395][ T5081] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.312589][ T5081] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.337720][ T5094] loop0: detected capacity change from 0 to 32768 [ 178.460190][ T5094] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.314 (5094) [ 178.514013][ T5094] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 178.571891][ T5094] BTRFS info (device loop0): setting nodatacow, compression disabled [ 178.602744][ T5094] BTRFS info (device loop0): enabling auto defrag [ 178.629701][ T5094] BTRFS info (device loop0): max_inline at 0 [ 178.653984][ T5094] BTRFS info (device loop0): using free space tree [ 178.699207][ T5094] BTRFS info (device loop0): has skinny extents [ 178.831975][ T4497] Error reading MAC address [ 179.009602][ T5119] loop2: detected capacity change from 0 to 2048 [ 179.236925][ T5119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.097999][ T4074] usb 2-1: USB disconnect, device number 4 [ 180.933852][ T4074] Bluetooth: hci0: command 0x0406 tx timeout [ 180.941222][ T4074] Bluetooth: hci2: command 0x0406 tx timeout [ 180.948733][ T4074] Bluetooth: hci4: command 0x0406 tx timeout [ 180.955301][ T4074] Bluetooth: hci3: command 0x0406 tx timeout [ 182.121877][ T5133] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 182.183602][ T5142] loop1: detected capacity change from 0 to 40427 [ 182.283757][ T5142] F2FS-fs (loop1): Unrecognized mount option "errors=continue" or missing value [ 182.332056][ T5142] process 'syz.1.322' launched './file2' with NULL argv: empty string added [ 182.580051][ T5133] usb 1-1: Using ep0 maxpacket: 32 [ 182.749838][ T5133] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 182.780027][ T5133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.858709][ T5133] usb 1-1: config 0 descriptor?? [ 182.872721][ T5163] program syz.4.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.141871][ T5133] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 183.157428][ T5133] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.212462][ T5133] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 183.231493][ T5133] usb 1-1: media controller created [ 183.268367][ T5133] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.560388][ T5166] loop2: detected capacity change from 0 to 1024 [ 183.704826][ T5166] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.872164][ T5133] az6027: usb out operation failed. (-71) [ 183.881773][ T5133] stb0899_attach: Driver disabled by Kconfig [ 183.887796][ T5133] az6027: no front-end attached [ 183.887796][ T5133] [ 183.982121][ T5133] az6027: usb out operation failed. (-71) [ 184.008431][ T5133] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 184.063946][ T5133] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 184.142213][ T5133] dvb-usb: schedule remote query interval to 400 msecs. [ 184.167789][ T5133] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 184.204232][ T5133] usb 1-1: USB disconnect, device number 5 [ 184.356145][ T5133] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 184.650191][ T5176] loop4: detected capacity change from 0 to 2048 [ 185.121849][ T5176] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.034705][ T5214] program syz.0.343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.191378][ T5216] loop2: detected capacity change from 0 to 2048 [ 188.358153][ T5216] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.320744][ T5236] loop2: detected capacity change from 0 to 1024 [ 189.453155][ T5236] EXT4-fs (loop2): Ignoring removed orlov option [ 189.459687][ T5236] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 189.540277][ T5236] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 190.693460][ T5238] loop1: detected capacity change from 0 to 32768 [ 190.889227][ T5238] JBD2: Ignoring recovery information on journal [ 191.183209][ T5238] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 191.330650][ T5238] overlayfs: upper fs does not support tmpfile. [ 191.391031][ T5238] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 191.432940][ T5238] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 0 [ 191.484875][ T5238] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 191.517874][ T5238] OCFS2: File system is now read-only. [ 191.548073][ T5238] (syz.1.353,5238,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 191.601106][ T5238] (syz.1.353,5238,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 191.629701][ T5238] (syz.1.353,5238,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 191.649914][ T5238] (syz.1.353,5238,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 191.679783][ T5238] (syz.1.353,5238,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 191.698352][ T5238] (syz.1.353,5238,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 191.728751][ T5238] (syz.1.353,5238,0):ocfs2_block_group_alloc_contig:433 ERROR: status = -30 [ 191.752422][ T5238] (syz.1.353,5238,0):ocfs2_block_group_alloc:705 ERROR: status = -30 [ 191.781203][ T5238] (syz.1.353,5238,0):ocfs2_block_group_alloc:758 ERROR: status = -30 [ 191.811856][ T5238] (syz.1.353,5238,0):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30 [ 191.820338][ T5238] (syz.1.353,5238,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 191.871290][ T5238] (syz.1.353,5238,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 191.889394][ T5238] (syz.1.353,5238,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 191.931611][ T5238] (syz.1.353,5238,0):ocfs2_init_xattr_set_ctxt:3276 ERROR: status = -30 [ 191.940392][ T5238] (syz.1.353,5238,0):ocfs2_xattr_set:3633 ERROR: status = -30 [ 191.968414][ T5238] overlayfs: failed to set xattr on upper [ 191.988571][ T5238] overlayfs: ...falling back to index=off,metacopy=off. [ 192.008831][ T5238] overlayfs: upper fs missing required features. [ 192.100072][ T4273] ocfs2: Unmounting device (7,1) on (node local) [ 192.458880][ T5267] loop2: detected capacity change from 0 to 2048 [ 192.486007][ T5269] autofs4:pid:5269:autofs_fill_super: called with bogus options [ 192.558157][ T5269] loop1: detected capacity change from 0 to 2048 [ 192.589928][ T5267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.753584][ T5269] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.967154][ T5263] loop3: detected capacity change from 0 to 32768 [ 193.113042][ T5263] XFS (loop3): Mounting V5 Filesystem [ 193.316217][ T5263] XFS (loop3): Ending clean mount [ 193.353217][ T5263] XFS (loop3): Quotacheck needed: Please wait. [ 193.399972][ T3655] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 193.471801][ T3655] XFS (loop3): Unmount and run xfs_repair [ 193.477599][ T3655] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 193.522529][ T3655] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 193.531514][ T3655] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 193.559587][ T3655] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 193.584268][ T3655] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 193.616400][ T3655] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 193.651783][ T3655] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 193.683166][ T3655] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 193.706821][ T5279] loop1: detected capacity change from 0 to 32768 [ 193.719663][ T3655] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 193.751182][ T3655] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x224/0x3e0" at daddr 0x3 len 1 error 74 [ 193.779280][ T5263] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 193.923283][ T5279] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.364 (5279) [ 193.944860][ T5263] XFS (loop3): Unmounting Filesystem [ 194.082246][ T1399] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.090075][ T1399] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.348572][ T5279] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 194.408080][ T5279] BTRFS info (device loop1): setting nodatacow, compression disabled [ 194.433859][ T5295] loop2: detected capacity change from 0 to 32768 [ 194.440489][ T5279] BTRFS info (device loop1): enabling auto defrag [ 194.447081][ T5279] BTRFS info (device loop1): max_inline at 0 [ 194.453275][ T5279] BTRFS info (device loop1): using free space tree [ 194.460482][ T5279] BTRFS info (device loop1): has skinny extents [ 194.574590][ T5295] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.368 (5295) [ 194.691825][ T5295] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 194.781432][ T5295] BTRFS info (device loop2): using free space tree [ 194.842975][ T5295] BTRFS info (device loop2): has skinny extents [ 195.853679][ T5341] autofs4:pid:5341:autofs_fill_super: called with bogus options [ 195.935868][ T5341] loop0: detected capacity change from 0 to 2048 [ 196.060026][ T5346] loop3: detected capacity change from 0 to 2048 [ 196.101115][ T5346] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.239135][ T5341] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.280509][ T5295] BTRFS info (device loop2): enabling ssd optimizations [ 196.609845][ T5358] loop3: detected capacity change from 0 to 1024 [ 196.746337][ T5358] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.860733][ T5368] loop2: detected capacity change from 0 to 4096 [ 198.551095][ T5378] loop4: detected capacity change from 0 to 128 [ 198.667523][ T5378] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.682110][ T5378] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 199.521856][ T1075] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 199.783829][ T1075] usb 5-1: Using ep0 maxpacket: 8 [ 199.939218][ T1075] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 199.953704][ T5382] loop1: detected capacity change from 0 to 32768 [ 199.957826][ T1075] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.000783][ T1075] usb 5-1: config 0 has no interface number 0 [ 200.016071][ T1075] usb 5-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 200.020887][ T5382] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.382 (5382) [ 200.057842][ T1075] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.090164][ T1075] usb 5-1: config 0 interface 52 has no altsetting 0 [ 200.107417][ T1075] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 200.127713][ T1075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.159167][ T1075] usb 5-1: config 0 descriptor?? [ 200.185931][ T5382] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 200.221424][ T5382] BTRFS info (device loop1): setting nodatacow, compression disabled [ 200.261878][ T5382] BTRFS info (device loop1): enabling auto defrag [ 200.268818][ T5382] BTRFS info (device loop1): max_inline at 0 [ 200.321781][ T5382] BTRFS info (device loop1): using free space tree [ 200.348781][ T5382] BTRFS info (device loop1): has skinny extents [ 200.551937][ T1075] usb 5-1: Can not set alternate setting to 1, error: -71 [ 200.559490][ T1075] synaptics_usb: probe of 5-1:0.52 failed with error -71 [ 200.640377][ T1075] usb 5-1: USB disconnect, device number 5 [ 200.748043][ T5408] loop0: detected capacity change from 0 to 64 [ 200.840827][ T5412] loop2: detected capacity change from 0 to 2048 [ 200.991170][ T5412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.052474][ T5408] hfs: unable to locate alternate MDB [ 201.080195][ T5408] hfs: continuing without an alternate MDB [ 201.293086][ T26] audit: type=1800 audit(1727332346.944:7): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.385" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 201.576468][ T5419] autofs4:pid:5419:autofs_fill_super: called with bogus options [ 201.718263][ T5419] loop2: detected capacity change from 0 to 2048 [ 201.787373][ T5422] Cannot find add_set index 0 as target [ 201.855088][ T5419] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 202.116611][ T4501] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 202.532029][ T4501] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 202.564820][ T4501] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 202.782015][ T4501] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 202.805344][ T4501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.869522][ T4501] usb 2-1: Product: syz [ 202.885426][ T5438] loop4: detected capacity change from 0 to 1024 [ 202.891857][ T4501] usb 2-1: Manufacturer: syz [ 202.891881][ T4501] usb 2-1: SerialNumber: syz [ 202.932181][ T4501] usb 2-1: config 0 descriptor?? [ 202.953696][ T5424] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 202.967506][ T5424] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 203.008299][ T5438] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.031315][ T5440] loop3: detected capacity change from 0 to 1024 [ 203.205968][ T5424] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 203.221836][ T5424] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 203.253189][ T5440] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.345186][ T5434] loop2: detected capacity change from 0 to 40427 [ 203.445932][ T5434] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 203.473780][ T5434] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 203.564834][ T5434] F2FS-fs (loop2): invalid crc value [ 203.629417][ T5434] F2FS-fs (loop2): Found nat_bits in checkpoint [ 203.739525][ T4501] Error reading MAC address [ 203.776983][ T5434] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 203.791758][ T5434] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 203.908937][ T5434] attempt to access beyond end of device [ 203.908937][ T5434] loop2: rw=2049, want=45224, limit=40427 [ 203.989737][ T5434] attempt to access beyond end of device [ 203.989737][ T5434] loop2: rw=34817, want=45224, limit=40427 [ 204.025858][ T5434] attempt to access beyond end of device [ 204.025858][ T5434] loop2: rw=34817, want=78576, limit=40427 [ 204.070676][ T5434] attempt to access beyond end of device [ 204.070676][ T5434] loop2: rw=0, want=45224, limit=40427 [ 204.110245][ T5434] attempt to access beyond end of device [ 204.110245][ T5434] loop2: rw=0, want=45224, limit=40427 [ 204.241170][ T4017] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 204.256237][ T4017] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 205.028809][ T21] usb 2-1: USB disconnect, device number 5 [ 205.579232][ T5471] loop4: detected capacity change from 0 to 2048 [ 205.690634][ T5471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.754148][ T5474] loop0: detected capacity change from 0 to 4096 [ 205.938951][ T5476] autofs4:pid:5476:autofs_fill_super: called with bogus options [ 206.045110][ T5476] loop4: detected capacity change from 0 to 2048 [ 206.151111][ T5476] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 206.178049][ T5462] loop1: detected capacity change from 0 to 32768 [ 206.310213][ T5462] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.397 (5462) [ 206.404684][ T5462] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 206.421872][ T3713] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 206.438505][ T5462] BTRFS info (device loop1): using free space tree [ 206.459642][ T5462] BTRFS info (device loop1): has skinny extents [ 206.661766][ T3713] usb 1-1: Using ep0 maxpacket: 16 [ 206.688219][ T5462] BTRFS info (device loop1): enabling ssd optimizations [ 206.911845][ T3713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.931833][ T3713] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 206.951800][ T3713] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 206.960965][ T3713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.979386][ T3713] usb 1-1: config 0 descriptor?? [ 207.459222][ T3713] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 207.495017][ T3713] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 207.514146][ T3713] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 207.539684][ T3713] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 207.552020][ T3713] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 207.569620][ T3713] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 207.588300][ T3713] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 207.601827][ T3713] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 207.619338][ T3713] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 207.631781][ T3713] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 207.651173][ T3713] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 207.709558][ T3713] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 207.731587][ T3713] microsoft 0003:045E:07DA.0001: no inputs found [ 207.741841][ T3713] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 207.934051][ T3876] usb 1-1: USB disconnect, device number 6 [ 208.595697][ T5524] loop0: detected capacity change from 0 to 1024 [ 208.751325][ T5524] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 208.872585][ T3712] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 208.935250][ T5532] loop3: detected capacity change from 0 to 2048 [ 209.188237][ T5532] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.981839][ T3712] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 209.991624][ T3712] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 210.041186][ T5540] loop4: detected capacity change from 0 to 64 [ 210.094843][ T5542] loop3: detected capacity change from 0 to 2048 [ 210.172541][ T3712] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 210.214624][ T5542] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.242964][ T3712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.255508][ T3712] usb 2-1: Product: syz [ 210.260007][ T3712] usb 2-1: Manufacturer: syz [ 210.295381][ T3712] usb 2-1: SerialNumber: syz [ 210.338254][ T3712] usb 2-1: config 0 descriptor?? [ 210.362199][ T5526] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.369260][ T5526] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.668398][ T5526] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.688976][ T5526] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 211.172007][ T3712] Error reading MAC address [ 211.628549][ T5593] loop0: detected capacity change from 0 to 2048 [ 211.704774][ T5593] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.893059][ T4501] usb 2-1: USB disconnect, device number 6 [ 213.093132][ T5605] loop1: detected capacity change from 0 to 1024 [ 213.173639][ T5607] loop0: detected capacity change from 0 to 2048 [ 213.216797][ T5605] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 213.435232][ T5607] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.776777][ T5617] loop0: detected capacity change from 0 to 1024 [ 214.058538][ T5623] loop3: detected capacity change from 0 to 16 [ 214.169330][ T5623] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x3e7468d6, 0x5438428d expected [ 214.331240][ T5623] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 214.428096][ T5623] CIFS mount error: No usable UNC path provided in device string! [ 214.428096][ T5623] [ 214.458232][ T5623] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 214.707837][ T5614] loop4: detected capacity change from 0 to 32768 [ 214.852469][ T5614] XFS (loop4): Mounting V5 Filesystem [ 215.014508][ T5614] XFS (loop4): Ending clean mount [ 215.033601][ T5614] XFS (loop4): Quotacheck needed: Please wait. [ 215.174929][ T5614] XFS (loop4): Quotacheck: Done. [ 215.321525][ T3578] XFS (loop4): Unmounting Filesystem [ 215.853161][ T5644] No such timeout policy "syz1" [ 216.753308][ T5652] loop3: detected capacity change from 0 to 2048 [ 216.851842][ T5652] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.876702][ T5658] loop0: detected capacity change from 0 to 4096 [ 217.033012][ T5648] loop4: detected capacity change from 0 to 40427 [ 217.057793][ T5663] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.127394][ T5648] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 217.136859][ T5648] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 217.150680][ T5658] loop_set_status: loop0 () has still dirty pages (nrpages=2) [ 217.151273][ T5665] loop3: detected capacity change from 0 to 1024 [ 217.230716][ T5648] F2FS-fs (loop4): Found nat_bits in checkpoint [ 217.294876][ T5665] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 217.341109][ T5648] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 217.349076][ T5648] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 218.289713][ T5682] loop0: detected capacity change from 0 to 4096 [ 218.437669][ T5682] EXT4-fs error (device loop0): ext4_quota_enable:6383: comm syz.0.449: Bad quota inum: 1, type: 2 [ 218.508252][ T5682] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 218.551597][ T5682] EXT4-fs (loop0): mount failed [ 218.941374][ T5697] loop0: detected capacity change from 0 to 1024 [ 219.073817][ T5697] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 220.333853][ T5711] loop1: detected capacity change from 0 to 2048 [ 220.562881][ T5711] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.636223][ T5723] loop1: detected capacity change from 0 to 2048 [ 221.741781][ T3720] Bluetooth: hci1: command 0x0406 tx timeout [ 221.803437][ T5723] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,sysvgroups,,errors=continue. Quota mode: none. [ 222.038123][ T5723] loop_set_status: loop1 () has still dirty pages (nrpages=3) [ 222.110201][ T5721] loop2: detected capacity change from 0 to 40427 [ 222.135545][ T5731] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 222.170284][ T5731] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 222.186799][ T5721] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 222.219216][ T5731] EXT4-fs (loop1): This should not happen!! Data will be lost [ 222.219216][ T5731] [ 222.221296][ T5721] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 222.258165][ T5731] EXT4-fs (loop1): Total free blocks count 0 [ 222.266149][ T5731] EXT4-fs (loop1): Free/Dirty block details [ 222.274333][ T5731] EXT4-fs (loop1): free_blocks=2415919104 [ 222.292277][ T5731] EXT4-fs (loop1): dirty_blocks=32 [ 222.300461][ T5731] EXT4-fs (loop1): Block reservation details [ 222.318089][ T5731] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 222.347677][ T5721] F2FS-fs (loop2): Found nat_bits in checkpoint [ 222.481359][ T5721] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 222.497347][ T5721] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 222.521888][ T3720] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 222.653715][ T5730] loop4: detected capacity change from 0 to 32768 [ 222.706670][ T5730] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.460 (5730) [ 222.757289][ T5730] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 222.771743][ T3720] usb 4-1: Using ep0 maxpacket: 16 [ 222.782772][ T5730] BTRFS info (device loop4): using free space tree [ 222.797393][ T5730] BTRFS info (device loop4): has skinny extents [ 222.892011][ T3720] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 222.904771][ T3720] usb 4-1: config 0 has no interface number 0 [ 222.917844][ T3720] usb 4-1: config 0 interface 4 has no altsetting 0 [ 223.013168][ T5730] BTRFS info (device loop4): enabling ssd optimizations [ 223.091854][ T3720] usb 4-1: New USB device found, idVendor=0408, idProduct=ea42, bcdDevice=62.6b [ 223.106439][ T3720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.114793][ T3720] usb 4-1: Product: syz [ 223.119075][ T3720] usb 4-1: Manufacturer: syz [ 223.123793][ T3720] usb 4-1: SerialNumber: syz [ 223.138549][ T3720] usb 4-1: config 0 descriptor?? [ 223.389701][ T3720] usb 4-1: USB disconnect, device number 3 [ 224.622404][ T5766] loop1: detected capacity change from 0 to 40427 [ 224.714152][ T5766] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 224.779383][ T5766] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 225.136837][ T5766] F2FS-fs (loop1): Found nat_bits in checkpoint [ 225.380150][ T5766] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 225.451916][ T5766] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 225.676809][ T26] audit: type=1800 audit(1727332371.334:8): pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.465" name="bus" dev="loop1" ino=14 res=0 errno=0 [ 225.762715][ T5788] loop3: detected capacity change from 0 to 1024 [ 226.431563][ T5788] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 226.623023][ T3655] attempt to access beyond end of device [ 226.623023][ T3655] loop1: rw=2049, want=40984, limit=40427 [ 226.667732][ T5766] VFS:Filesystem freeze failed [ 226.729837][ T5798] loop4: detected capacity change from 0 to 2048 [ 226.844797][ T5798] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.530081][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 227.585029][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 227.603382][ T5803] loop0: detected capacity change from 0 to 32768 [ 227.625892][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 227.672696][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 227.743998][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 227.786473][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 227.822012][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 227.837599][ T5819] loop4: detected capacity change from 0 to 512 [ 227.848900][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 227.861037][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 227.891169][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 227.898980][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 227.945391][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 227.960033][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 227.970892][ T5819] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 227.985345][ T5815] loop2: detected capacity change from 0 to 32768 [ 227.992146][ T5819] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038 (0x7fffffff) [ 227.993912][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.016831][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.019856][ T5819] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 228.026750][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.037581][ T5815] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.476 (5815) [ 228.084014][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.093669][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.101406][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.119577][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.127472][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.135380][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.143294][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.156361][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.166675][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.179397][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.189644][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.204932][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.216361][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.227831][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.239265][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.251845][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 228.278724][ T21] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 228.301215][ T5803] XFS (loop0): Mounting V5 Filesystem [ 228.309358][ T5815] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 228.318971][ T5815] BTRFS info (device loop2): setting nodatacow, compression disabled [ 228.328287][ T5815] BTRFS info (device loop2): enabling auto defrag [ 228.335399][ T5815] BTRFS info (device loop2): max_inline at 0 [ 228.341404][ T5815] BTRFS info (device loop2): using free space tree [ 228.349518][ T5815] BTRFS info (device loop2): has skinny extents [ 228.378592][ T5803] XFS (loop0): Ending clean mount [ 228.386552][ T5803] XFS (loop0): Quotacheck needed: Please wait. [ 228.478478][ T5803] XFS (loop0): Quotacheck: Done. [ 228.607097][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 228.818102][ T21] usb 2-1: device descriptor read/64, error -71 [ 229.112066][ T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 229.231348][ T3575] XFS (loop0): Unmounting Filesystem [ 229.281712][ T1293] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 229.331727][ T21] usb 2-1: device descriptor read/64, error -71 [ 229.450504][ T21] usb usb2-port1: attempt power cycle [ 229.522098][ T1293] usb 5-1: Using ep0 maxpacket: 32 [ 229.644433][ T1293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.670670][ T1293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.699760][ T1293] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 229.727955][ T1293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.766205][ T1293] usb 5-1: config 0 descriptor?? [ 229.814455][ T5873] loop0: detected capacity change from 0 to 128 [ 229.845199][ T5871] program syz.3.484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.881743][ T21] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 229.993298][ T21] usb 2-1: device descriptor read/8, error -71 [ 230.029199][ T26] audit: type=1804 audit(1727332375.684:9): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.485" name="/newroot/122/file0/bus" dev="loop0" ino=1048594 res=1 errno=0 [ 230.074107][ T26] audit: type=1800 audit(1727332375.684:10): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.485" name="bus" dev="loop0" ino=1048594 res=0 errno=0 [ 230.264496][ T1293] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 230.299693][ T1293] ft260 0003:0403:6030.0003: hidraw1: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 230.409339][ T21] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 230.480796][ T1293] ft260 0003:0403:6030.0003: chip code: 5e81 abf2 [ 230.521980][ T21] usb 2-1: device descriptor read/8, error -71 [ 230.657944][ T21] usb usb2-port1: unable to enumerate USB device [ 230.912496][ T1293] ft260 0003:0403:6030.0003: failed to retrieve status: -32 [ 231.234352][ T1293] usb 5-1: USB disconnect, device number 6 [ 231.357943][ T5887] loop2: detected capacity change from 0 to 1024 [ 231.503367][ T5887] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.795301][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 232.205813][ T5885] loop3: detected capacity change from 0 to 32768 [ 232.291883][ T5885] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.490 (5885) [ 232.349845][ T5885] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 232.380896][ T5885] BTRFS info (device loop3): setting nodatacow, compression disabled [ 232.405408][ T5885] BTRFS info (device loop3): enabling auto defrag [ 232.419651][ T5885] BTRFS info (device loop3): max_inline at 0 [ 232.433281][ T5885] BTRFS info (device loop3): using free space tree [ 232.447317][ T5885] BTRFS info (device loop3): has skinny extents [ 234.706085][ T5955] program syz.3.500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.352722][ T5965] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 235.665670][ T5968] device syzkaller0 entered promiscuous mode [ 235.866705][ T4498] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 236.083113][ T4498] usb 4-1: device descriptor read/64, error -71 [ 236.278852][ T5984] autofs4:pid:5984:autofs_fill_super: called with bogus options [ 236.371844][ T4498] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 236.426070][ T5984] loop0: detected capacity change from 0 to 2048 [ 236.675919][ T5984] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.707524][ T4498] usb 4-1: device descriptor read/64, error -71 [ 236.906613][ T4498] usb usb4-port1: attempt power cycle [ 237.414257][ T4498] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 237.724362][ T5977] loop2: detected capacity change from 0 to 32768 [ 237.732460][ T4498] usb 4-1: device descriptor read/8, error -71 [ 238.022086][ T4498] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 238.132278][ T4498] usb 4-1: device descriptor read/8, error -71 [ 238.262704][ T4498] usb usb4-port1: unable to enumerate USB device [ 238.703269][ T5977] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.512 (5977) [ 238.719197][ T6001] loop0: detected capacity change from 0 to 1024 [ 238.732895][ T26] audit: type=1326 audit(1727332384.384:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.3.521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a5e9c9f39 code=0x0 [ 238.774740][ T5977] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 238.791768][ T5977] BTRFS info (device loop2): setting nodatacow, compression disabled [ 238.810868][ T5977] BTRFS info (device loop2): enabling auto defrag [ 238.835553][ T6001] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.868657][ T5977] BTRFS info (device loop2): max_inline at 0 [ 238.880122][ T5977] BTRFS info (device loop2): using free space tree [ 238.891926][ T5977] BTRFS info (device loop2): has skinny extents [ 239.299778][ T5998] loop1: detected capacity change from 0 to 40427 [ 239.386616][ T5998] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 239.424797][ T5998] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 239.528319][ T5998] F2FS-fs (loop1): Found nat_bits in checkpoint [ 239.659789][ T5998] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 239.661952][ T5977] BTRFS error (device loop2): open_ctree failed [ 239.678824][ T5998] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 239.731890][ T5997] loop4: detected capacity change from 0 to 32768 [ 239.775680][ T5997] XFS: noikeep mount option is deprecated. [ 239.962024][ T5997] XFS (loop4): Mounting V5 Filesystem [ 240.026924][ T6007] loop3: detected capacity change from 0 to 40427 [ 240.101772][ T5997] XFS (loop4): Ending clean mount [ 240.133001][ T5997] XFS (loop4): Quotacheck needed: Please wait. [ 240.271334][ T5997] XFS (loop4): Quotacheck: Done. [ 240.456337][ T3578] XFS (loop4): Unmounting Filesystem [ 241.069261][ T6057] autofs4:pid:6057:autofs_fill_super: called with bogus options [ 241.098462][ T6057] loop1: detected capacity change from 0 to 2048 [ 241.964272][ T6057] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.281836][ T4495] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 243.494139][ T4495] usb 2-1: device descriptor read/64, error -71 [ 243.582573][ T6062] loop4: detected capacity change from 0 to 32768 [ 243.652554][ T6062] XFS: noikeep mount option is deprecated. [ 243.763255][ T6062] XFS (loop4): Mounting V5 Filesystem [ 243.782009][ T4495] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 243.874440][ T6088] loop2: detected capacity change from 0 to 128 [ 243.899050][ T6074] loop3: detected capacity change from 0 to 32768 [ 243.934065][ T6062] XFS (loop4): Ending clean mount [ 243.947881][ T6062] XFS (loop4): Quotacheck needed: Please wait. [ 243.978241][ T6074] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.533 (6074) [ 243.991289][ T4495] usb 2-1: device descriptor read/64, error -71 [ 244.020150][ T6062] XFS (loop4): Quotacheck: Done. [ 244.052684][ T6088] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.082382][ T6088] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038 (0x7fffffff) [ 244.094368][ T3578] XFS (loop4): Unmounting Filesystem [ 244.131924][ T4495] usb usb2-port1: attempt power cycle [ 244.148782][ T6074] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 244.171833][ T6074] BTRFS info (device loop3): setting nodatacow, compression disabled [ 244.194970][ T6074] BTRFS info (device loop3): enabling auto defrag [ 244.208114][ T6074] BTRFS info (device loop3): max_inline at 0 [ 244.214721][ T6088] loop_set_status: loop2 () has still dirty pages (nrpages=2) [ 244.260779][ T6074] BTRFS info (device loop3): using free space tree [ 244.265550][ T6076] loop0: detected capacity change from 0 to 40427 [ 244.277637][ T6074] BTRFS info (device loop3): has skinny extents [ 244.340836][ T6076] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 244.348711][ T6076] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 244.400368][ T6076] F2FS-fs (loop0): Found nat_bits in checkpoint [ 244.472538][ T6076] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 244.479721][ T6076] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 244.591741][ T4495] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 244.691964][ T4495] usb 2-1: device descriptor read/8, error -71 [ 244.888423][ T3568] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /104/file0/lost+found: directory fails checksum at offset 1024 [ 244.952541][ T3568] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /104/file0/lost+found: directory fails checksum at offset 8192 [ 244.973677][ T4495] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 245.034864][ T3568] EXT4-fs error (device loop2): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 245.082539][ T3568] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /104/file0/lost+found: directory fails checksum at offset 1024 [ 245.092089][ T4495] usb 2-1: device descriptor read/8, error -71 [ 245.126661][ T3568] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /104/file0/lost+found: directory fails checksum at offset 8192 [ 245.203576][ T3568] EXT4-fs error (device loop2): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 245.236763][ T3568] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /104/file0/lost+found: directory fails checksum at offset 1024 [ 245.266344][ T4495] usb usb2-port1: unable to enumerate USB device [ 245.270724][ T6125] autofs4:pid:6125:autofs_fill_super: called with bogus options [ 245.288088][ T3568] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /104/file0/lost+found: directory fails checksum at offset 8192 [ 245.334716][ T3568] EXT4-fs error (device loop2): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 245.363093][ T6125] loop4: detected capacity change from 0 to 2048 [ 245.370283][ T3568] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /104/file0/lost+found: directory fails checksum at offset 1024 [ 245.534087][ T6125] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 245.731004][ T6121] loop0: detected capacity change from 0 to 32768 [ 245.811012][ T6121] ialloc: diAlloc returned -5! [ 246.289881][ T6137] loop0: detected capacity change from 0 to 1024 [ 246.309289][ T3765] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.424996][ T6137] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 246.445102][ T3765] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.541169][ T3765] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.822748][ T3765] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.761091][ T6157] loop4: detected capacity change from 0 to 2048 [ 247.873831][ T6147] chnl_net:caif_netlink_parms(): no params data found [ 247.980708][ T6157] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 248.293515][ T6145] loop1: detected capacity change from 0 to 32768 [ 248.392701][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.441398][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.486489][ T6145] XFS (loop1): Mounting V5 Filesystem [ 248.492672][ T6147] device bridge_slave_0 entered promiscuous mode [ 248.601903][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.623254][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.666157][ T6147] device bridge_slave_1 entered promiscuous mode [ 248.692917][ T6145] XFS (loop1): Ending clean mount [ 248.702271][ T6145] XFS (loop1): Quotacheck needed: Please wait. [ 248.794277][ T6145] XFS (loop1): Quotacheck: Done. [ 248.897021][ T6147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.938399][ T4273] XFS (loop1): Unmounting Filesystem [ 248.957798][ T6147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.108258][ T6147] team0: Port device team_slave_0 added [ 249.171229][ T6147] team0: Port device team_slave_1 added [ 249.181966][ T4495] Bluetooth: hci0: command 0x0409 tx timeout [ 249.196685][ T6192] loop3: detected capacity change from 0 to 1024 [ 249.236158][ T6192] EXT4-fs (loop3): Ignoring removed nobh option [ 249.317176][ T6192] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.556: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 249.422371][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.429346][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.491910][ T6192] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.556: couldn't read orphan inode 11 (err -117) [ 249.571873][ T6147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.611244][ T6192] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 249.686406][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.698021][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.763002][ T6192] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.556: Invalid block bitmap block 0 in block_group 0 [ 249.798572][ T6147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.811892][ T6192] Quota error (device loop3): write_blk: dquota write failed [ 249.821772][ T6192] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 249.863349][ T6192] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.556: Failed to acquire dquot type 0 [ 249.986737][ T6147] device hsr_slave_0 entered promiscuous mode [ 250.081752][ T4495] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 250.093698][ T6147] device hsr_slave_1 entered promiscuous mode [ 250.107407][ T6147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.126684][ T6147] Cannot create hsr debugfs directory [ 250.270304][ T6216] loop3: detected capacity change from 0 to 512 [ 250.291801][ T4495] usb 2-1: device descriptor read/64, error -71 [ 250.446410][ T6216] EXT4-fs (loop3): inline encryption not supported [ 250.471302][ T3765] device hsr_slave_0 left promiscuous mode [ 250.490130][ T6216] EXT4-fs (loop3): Test dummy encryption mode enabled [ 250.498317][ T3765] device hsr_slave_1 left promiscuous mode [ 250.556488][ T3765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.581842][ T4495] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 250.589714][ T6216] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 250.601988][ T3765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.620866][ T3765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.628760][ T6216] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 250.649281][ T3765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.674736][ T3765] device bridge_slave_1 left promiscuous mode [ 250.688688][ T6216] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #17: comm syz.3.558: corrupted in-inode xattr [ 250.703437][ T3765] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.712530][ T6216] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.558: couldn't read orphan inode 17 (err -117) [ 250.771294][ T3765] device bridge_slave_0 left promiscuous mode [ 250.778351][ T4495] usb 2-1: device descriptor read/64, error -71 [ 250.802395][ T6216] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,nodelalloc,jqfmt=vfsold,test_dummy_encryption,block_validity,quota,,errors=continue. Quota mode: writeback. [ 250.832030][ T3765] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.901337][ T3765] device veth1_macvtap left promiscuous mode [ 250.916142][ T6216] EXT4-fs (loop3): Test dummy encryption mode enabled [ 250.923379][ T4495] usb usb2-port1: attempt power cycle [ 250.937366][ T3765] device veth0_macvtap left promiscuous mode [ 250.952845][ T6216] EXT4-fs (loop3): re-mounted. Opts: usrjquota=t,nodelalloc,jqfmt=vfsold,test_dummy_encryption,block_validity,quota,. Quota mode: writeback. [ 250.971943][ T3765] device veth1_vlan left promiscuous mode [ 250.984152][ T3765] device veth0_vlan left promiscuous mode [ 251.092943][ T6235] loop0: detected capacity change from 0 to 2048 [ 251.191095][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 251.286731][ T6235] UDF-fs: warning (device loop0): udf_fill_super: No fileset found [ 251.320177][ T5858] Bluetooth: hci0: command 0x041b tx timeout [ 251.547347][ T4495] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 253.393013][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 253.482753][ T4495] usb 2-1: device descriptor read/8, error -71 [ 253.507288][ T6253] loop4: detected capacity change from 0 to 128 [ 253.571562][ T6253] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 253.631873][ T6253] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 253.652515][ T6256] loop1: detected capacity change from 0 to 1024 [ 253.884832][ T6256] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 254.130184][ T3765] team0 (unregistering): Port device team_slave_1 removed [ 254.147681][ T3765] team0 (unregistering): Port device team_slave_0 removed [ 254.163494][ T3765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.180229][ T3765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.396162][ T6269] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 254.498540][ T3765] bond0 (unregistering): Released all slaves [ 255.421967][ T4495] Bluetooth: hci0: command 0x0419 tx timeout [ 255.507301][ T1399] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.514174][ T1399] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.328071][ T6147] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 257.337573][ T4495] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 257.389645][ T6147] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 257.481045][ T6147] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 257.561712][ T4495] usb 2-1: device descriptor read/64, error -71 [ 257.659026][ T6147] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 257.852320][ T4495] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 258.064299][ T6147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.082309][ T4495] usb 2-1: device descriptor read/64, error -71 [ 258.141133][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.158782][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.190418][ T6147] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.217382][ T4495] usb usb2-port1: attempt power cycle [ 258.253433][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.292043][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.322733][ T701] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.329837][ T701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.391258][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.516542][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.590017][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.640806][ T701] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.648106][ T701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.671783][ T4495] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 258.696925][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.759072][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.771832][ T4495] usb 2-1: device descriptor read/8, error -71 [ 258.800577][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.840488][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.894481][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.915574][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.944794][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.972882][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.000013][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.039306][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.062479][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.072492][ T4495] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 259.094049][ T6147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.199263][ T4495] usb 2-1: device descriptor read/8, error -71 [ 259.331899][ T4495] usb usb2-port1: unable to enumerate USB device [ 259.490078][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.518682][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.629691][ T6147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.775131][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.905784][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.562999][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.571484][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.663107][ T6147] device veth0_vlan entered promiscuous mode [ 260.697792][ T6147] device veth1_vlan entered promiscuous mode [ 261.505893][ T6372] loop4: detected capacity change from 0 to 1024 [ 261.574531][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.680917][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.703513][ T6372] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.395783][ T6147] device veth0_macvtap entered promiscuous mode [ 262.516396][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.542621][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.590462][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.719694][ T6147] device veth1_macvtap entered promiscuous mode [ 262.791837][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.263962][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.471663][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.524220][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.591925][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.646375][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 263.681209][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.735761][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.766248][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.802595][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.866462][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.897907][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.938824][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.989859][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.051115][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.062160][ T3610] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 264.103337][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.143938][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.184449][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.272203][ T3610] usb 4-1: device descriptor read/64, error -71 [ 264.280018][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.322729][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.362146][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.417632][ T6416] program syz.0.590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.510906][ T6147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.552257][ T3610] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 264.580932][ T6147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.633480][ T6147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.683758][ T6147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.771760][ T3610] usb 4-1: device descriptor read/64, error -71 [ 264.903219][ T3610] usb usb4-port1: attempt power cycle [ 265.029040][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.071663][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.128977][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.146205][ T701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.165406][ T701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.182394][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.331754][ T3610] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 265.352784][ T4495] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 265.432632][ T3610] usb 4-1: device descriptor read/8, error -71 [ 265.611753][ T4495] usb 5-1: Using ep0 maxpacket: 8 [ 265.711981][ T3610] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 265.755127][ T4495] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 265.771961][ T4495] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.801943][ T4495] usb 5-1: config 0 has no interface number 0 [ 265.818405][ T4495] usb 5-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 265.830335][ T3610] usb 4-1: device descriptor read/8, error -71 [ 265.891803][ T4495] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.921787][ T4495] usb 5-1: config 0 interface 52 has no altsetting 0 [ 265.949051][ T4495] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 265.972094][ T3610] usb usb4-port1: unable to enumerate USB device [ 265.980746][ T4495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.018892][ T4495] usb 5-1: config 0 descriptor?? [ 266.244269][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 266.369427][ T4495] usb 5-1: Can not set alternate setting to 1, error: -71 [ 266.389678][ T4495] synaptics_usb: probe of 5-1:0.52 failed with error -71 [ 266.428157][ T4495] usb 5-1: USB disconnect, device number 7 [ 266.446051][ T6434] loop2: detected capacity change from 0 to 40427 [ 266.534385][ T6434] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 266.551740][ T6434] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 266.633403][ T6434] F2FS-fs (loop2): Found nat_bits in checkpoint [ 266.762889][ T6434] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 266.782641][ T6434] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 266.897378][ T6476] loop1: detected capacity change from 0 to 2048 [ 267.106649][ T6476] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 267.211452][ T6485] overlayfs: missing 'lowerdir' [ 267.445279][ T6460] loop0: detected capacity change from 0 to 40427 [ 267.790889][ T6460] F2FS-fs (loop0): Found nat_bits in checkpoint [ 267.898039][ T6476] ------------[ cut here ]------------ [ 267.926436][ T6476] WARNING: CPU: 1 PID: 6476 at fs/inode.c:364 inc_nlink+0x120/0x130 [ 267.951570][ T6460] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 267.958784][ T6476] Modules linked in: [ 267.967267][ T6460] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 267.971006][ T6476] CPU: 1 PID: 6476 Comm: syz.1.602 Not tainted 5.15.167-syzkaller #0 [ 268.018427][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 268.068527][ T6476] RIP: 0010:inc_nlink+0x120/0x130 [ 268.077410][ T6460] attempt to access beyond end of device [ 268.077410][ T6460] loop0: rw=2049, want=45104, limit=40427 [ 268.090448][ T6476] Code: ed ff e9 37 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 49 ff ff ff 4c 89 ef e8 ca 9e ed ff e9 3c ff ff ff e8 b0 d4 a3 ff <0f> 0b eb 80 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 41 56 53 48 [ 268.161849][ T6476] RSP: 0018:ffffc900033dfc08 EFLAGS: 00010287 [ 268.181926][ T6476] RAX: ffffffff81dc85c0 RBX: 1ffff1100c1ca032 RCX: 0000000000040000 [ 268.242033][ T6476] RDX: ffffc9000fae5000 RSI: 00000000000126fe RDI: 00000000000126ff [ 268.275262][ T6476] RBP: 0000000000000000 R08: ffffffff81dc853a R09: ffffed100c1ca106 [ 268.283830][ T6502] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 268.300892][ T6476] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 268.330595][ T6476] R13: ffff888060e50190 R14: ffff888060e50148 R15: 0000000000000007 [ 268.364070][ T6476] FS: 00007f90f63216c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 268.405464][ T6476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.425338][ T6476] CR2: 0000000000000000 CR3: 0000000029e6a000 CR4: 00000000003506f0 [ 268.454154][ T6476] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 268.494195][ T6476] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 268.502489][ T6476] Call Trace: [ 268.505782][ T6476] [ 268.508719][ T6476] ? __warn+0x15b/0x300 [ 268.513639][ T6476] ? inc_nlink+0x120/0x130 [ 268.518081][ T6476] ? report_bug+0x1b7/0x2e0 [ 268.523114][ T6476] ? handle_bug+0x3d/0x70 [ 268.527618][ T6476] ? exc_invalid_op+0x16/0x40 [ 268.532759][ T6476] ? asm_exc_invalid_op+0x16/0x20 [ 268.537939][ T6476] ? inc_nlink+0x9a/0x130 [ 268.574928][ T6476] ? inc_nlink+0x120/0x130 [ 268.579405][ T6476] ? inc_nlink+0x120/0x130 [ 268.596308][ T6476] ? inc_nlink+0x120/0x130 [ 268.600779][ T6476] v9fs_vfs_mkdir_dotl+0x6c9/0x870 [ 268.616864][ T6476] ? v9fs_vfs_symlink_dotl+0x580/0x580 [ 268.631722][ T6476] ? do_proc_doulongvec_minmax+0x140/0xf20 [ 268.642151][ T6476] ? generic_permission+0x27c/0x4f0 [ 268.647398][ T6476] ? inode_permission+0xf7/0x450 [ 268.662719][ T6476] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 268.667787][ T6476] ? security_inode_mkdir+0xb4/0x100 [ 268.691743][ T6476] vfs_mkdir+0x3b6/0x590 [ 268.696183][ T6476] do_mkdirat+0x260/0x520 [ 268.716462][ T6476] ? vfs_mkdir+0x590/0x590 [ 268.720964][ T6476] ? getname_flags+0x1ec/0x4e0 [ 268.742942][ T6499] loop3: detected capacity change from 0 to 32768 [ 268.746971][ T6476] ? lockdep_hardirqs_on+0x94/0x130 [ 268.767256][ T6476] __x64_sys_mkdir+0x6a/0x80 [ 268.787536][ T6476] do_syscall_64+0x3b/0xb0 [ 268.801764][ T6476] ? clear_bhb_loop+0x15/0x70 [ 268.806582][ T6476] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.819409][ T6476] RIP: 0033:0x7f90f7ea8f39 [ 268.830570][ T6499] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.607 (6499) [ 268.846435][ T6476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.884665][ T6499] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 268.895031][ T6499] BTRFS info (device loop3): setting nodatacow, compression disabled [ 268.906616][ T6476] RSP: 002b:00007f90f6321038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 268.915639][ T6499] BTRFS info (device loop3): setting datacow [ 268.922160][ T6476] RAX: ffffffffffffffda RBX: 00007f90f8060f80 RCX: 00007f90f7ea8f39 [ 268.930325][ T6499] BTRFS info (device loop3): doing ref verification [ 268.937593][ T6476] RDX: 0000000000000000 RSI: 00000000000000a1 RDI: 0000000020000280 [ 268.955541][ T6499] BTRFS info (device loop3): force clearing of disk cache [ 268.966911][ T6476] RBP: 00007f90f7f1b216 R08: 0000000000000000 R09: 0000000000000000 [ 268.975420][ T6499] BTRFS info (device loop3): turning off barriers [ 268.984485][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.992969][ T6499] BTRFS info (device loop3): enabling ssd optimizations [ 269.000080][ T6476] R13: 0000000000000000 R14: 00007f90f8060f80 R15: 00007ffef1d413e8 [ 269.009332][ T6499] BTRFS info (device loop3): using spread ssd allocation scheme [ 269.017735][ T6476] [ 269.020927][ T6476] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 269.028213][ T6476] CPU: 0 PID: 6476 Comm: syz.1.602 Not tainted 5.15.167-syzkaller #0 [ 269.036384][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 269.046453][ T6476] Call Trace: [ 269.049740][ T6476] [ 269.052677][ T6476] dump_stack_lvl+0x1e3/0x2d0 [ 269.057381][ T6476] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 269.063047][ T6476] ? panic+0x860/0x860 [ 269.067143][ T6476] ? inc_nlink+0x60/0x130 [ 269.071493][ T6476] ? inc_nlink+0x60/0x130 [ 269.075835][ T6476] panic+0x318/0x860 [ 269.079757][ T6476] ? __warn+0x16a/0x300 [ 269.083925][ T6476] ? fb_is_primary_device+0xd0/0xd0 [ 269.089154][ T6476] ? inc_nlink+0x120/0x130 [ 269.093587][ T6476] __warn+0x2b2/0x300 [ 269.097595][ T6476] ? inc_nlink+0x120/0x130 [ 269.102026][ T6476] report_bug+0x1b7/0x2e0 [ 269.106389][ T6476] handle_bug+0x3d/0x70 [ 269.110565][ T6476] exc_invalid_op+0x16/0x40 [ 269.115083][ T6476] asm_exc_invalid_op+0x16/0x20 [ 269.119946][ T6476] RIP: 0010:inc_nlink+0x120/0x130 [ 269.124984][ T6476] Code: ed ff e9 37 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 49 ff ff ff 4c 89 ef e8 ca 9e ed ff e9 3c ff ff ff e8 b0 d4 a3 ff <0f> 0b eb 80 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 41 56 53 48 [ 269.144688][ T6476] RSP: 0018:ffffc900033dfc08 EFLAGS: 00010287 [ 269.150780][ T6476] RAX: ffffffff81dc85c0 RBX: 1ffff1100c1ca032 RCX: 0000000000040000 [ 269.158768][ T6476] RDX: ffffc9000fae5000 RSI: 00000000000126fe RDI: 00000000000126ff [ 269.166763][ T6476] RBP: 0000000000000000 R08: ffffffff81dc853a R09: ffffed100c1ca106 [ 269.174793][ T6476] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 269.183248][ T6476] R13: ffff888060e50190 R14: ffff888060e50148 R15: 0000000000000007 [ 269.192646][ T6476] ? inc_nlink+0x9a/0x130 [ 269.197788][ T6476] ? inc_nlink+0x120/0x130 [ 269.202660][ T6476] ? inc_nlink+0x120/0x130 [ 269.207715][ T6476] v9fs_vfs_mkdir_dotl+0x6c9/0x870 [ 269.212869][ T6476] ? v9fs_vfs_symlink_dotl+0x580/0x580 [ 269.218373][ T6476] ? do_proc_doulongvec_minmax+0x140/0xf20 [ 269.224553][ T6476] ? generic_permission+0x27c/0x4f0 [ 269.230059][ T6476] ? inode_permission+0xf7/0x450 [ 269.231252][ T6499] BTRFS info (device loop3): not using ssd optimizations [ 269.235025][ T6476] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 269.235053][ T6476] ? security_inode_mkdir+0xb4/0x100 [ 269.235082][ T6476] vfs_mkdir+0x3b6/0x590 [ 269.251716][ T6499] BTRFS info (device loop3): not using spread ssd allocation scheme [ 269.252529][ T6476] do_mkdirat+0x260/0x520 [ 269.256755][ T6499] BTRFS info (device loop3): using free space tree [ 269.264714][ T6476] ? vfs_mkdir+0x590/0x590 [ 269.264738][ T6476] ? getname_flags+0x1ec/0x4e0 [ 269.264761][ T6476] ? lockdep_hardirqs_on+0x94/0x130 [ 269.269922][ T6499] BTRFS info (device loop3): has skinny extents [ 269.275557][ T6476] __x64_sys_mkdir+0x6a/0x80 [ 269.275583][ T6476] do_syscall_64+0x3b/0xb0 [ 269.275604][ T6476] ? clear_bhb_loop+0x15/0x70 [ 269.275625][ T6476] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.275651][ T6476] RIP: 0033:0x7f90f7ea8f39 [ 269.275671][ T6476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.275691][ T6476] RSP: 002b:00007f90f6321038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 269.275716][ T6476] RAX: ffffffffffffffda RBX: 00007f90f8060f80 RCX: 00007f90f7ea8f39 [ 269.275733][ T6476] RDX: 0000000000000000 RSI: 00000000000000a1 RDI: 0000000020000280 [ 269.275748][ T6476] RBP: 00007f90f7f1b216 R08: 0000000000000000 R09: 0000000000000000 [ 269.275762][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.275775][ T6476] R13: 0000000000000000 R14: 00007f90f8060f80 R15: 00007ffef1d413e8 [ 269.275804][ T6476] [ 269.275920][ T6476] Kernel Offset: disabled [ 269.395602][ T6476] Rebooting in 86400 seconds..