last executing test programs: 19.684012616s ago: executing program 0 (id=420): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=remount-ro,noquota,nodiscard,iocharset=macturkish,errors=continue,errors=continue,nointegrity\x00iocharset=macgreek,quota,usrquota,usrquota,errors=remount-rocard,noquota,noquota,\x00\x00\x00\x00\x00'], 0x1, 0x60e3, &(0x7f000000f3c0)="$eJzs3b2PHGcdB/Dfvt6LiXNKEQULoYsTXkKIX4MxBEhSQEGTArlFti6XyMIBZBvkRBa+6BoKKv4CEBIlQpSIgj8gBS0dFRWWbCRQKgbN3fP4Zje73nPOt7O+5/ORzrO/eWZ2n7nvzu2uZ2afAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi+9/7wdlORFz+eZqxFvGZ6EV0I1bqej0iVtbX8vL9iHgudprj2YgYLEXU6+/883TEqxHx0fGIe/dvb9Szz+2zH9/9499/98Njb/3tD4PT//3Tzd5r05a7detX//nznYNtMwAAAJSmqqqqkz7mn0if77ttdwoAmIv8+l8lef6Rr3/9z7f+skj9UavVarV6DnVTNdmdZhERW8116vcMDscDwBNmKz5uuwu0SP5F60fEsbY7ASy0Ttsd4FDcu397o5Py7TRfD9Z32/O5ICP5b3UeXN8xbTrL+Dkm83p+bUcvnpnSn5U59WGR5Py74/lf3m0fpuUOO/95mZb/cPfSp+Lk/Hvj+Y85Ovl3J+Zfqpx//5Hy78kfAAAAAAAWWP7//7WWj/8uHXxT9uVhx3/X59QHAAAAAAAAAHjcDjr+3wPG/wMAAICFVX9Wr/3m+N68ad/FVs+/1Il4amx5oDDpYpnVtvsBAAAAAAAAAAAAACXp757De6kTMYiIp1ZXq6qqf5rG60d10PWfdKVvP5Ss7T/yAACw66PjY9fydyKWI+JS+q6/werqalUtr6xWq9XKUn4/O1xarlYan2vztJ63NNzHG+L+sKrvbLmxXtOsz8uz2sfvr36sYdXbR8cek0H6bU5pbilsAEh2X43ueUU6Yqrq6WlvPmCE/f/osf+zH20/TwEAAIDDV1VV1Ulf530iHfPvtt0pAGAu8uv/+HGBQ6kjDvf+1Wq1Wq1WP7Ruqia70ywiYqu5Tv2ewXD8APCE2YqP2+4CLZJ/0foR8VzbnQAWWqftDnAo7t2/vdFJ+XaarwdpfPd8LshI/ludnfXy+pOms4yfYzKv59d29OKZKf15dk59WCQ5/+54/pd324dpucPOf16m5V9v51oL/Wlbzr83nv+Yo5N/d2L+pcr59x8p/578AQAAAABggeX//19z/DdvMgAAAAAAAAA8ce7dv72Rr3vNx/8/N2E5138eTTn/jvyLlPPvjuX/5bHleo3bd9/cy//f929v/P7mvz6bp/vNfynfZSc9szrpGdFJj9Tpp+kBN3DM9qA3rB9p0On2+umcn2rwTlyNa7EZZ0aW7abfx1772ZH2uqeDkfZzI+39T7SfH2kfpO8dqFZy+6nYiJ/EtXh7p71uW5qx/csz2qsZ7Tn/nv2/SDn/fuOnzn81tXfGprW7H3Y/sd83p5Me542rn//lmcPfnJm2o/dg25rq7TvZQn92fifHhvGzG5vXT926cvPm9bORJiNzz0WaPGY5/8HOz9Le3/8Xdtvz3/3m/nr3w+Ej578otqM/Nf8XGrfr7X1pzn1rQ85/mH5y/m+n9sn7/5Oc//T9/+UW+gMAAAAAAAAAAAAAAAAPU1XVziWib0TEhXT9T1vXZgIA85Vf/6skz1er1Wq1Wn306qZqstebRUT8tblO/Z7hF5PuDABYZP+LiH+03QlaI/+C5e/7q6cvtt0ZYK5uvP/Bj65cu7Z5/UbbPQEAAAAAAAAAPq08/ud6Y/znFyNibWy5kfFf34z1g47/2c83Hgww+pgH+p5iuzvsdRvDjT8fO+Nzn5o2/vfJePj43/0ZjzeY0T6c0b40o3154ty9tCZe6NGQ83++Md55nf+JseHXSxj/dXzM+xLk/E82ns91/l8aW66Zf/Xbhct/a78Lbkd3JP/TN9/76ekb73/wytX3rry7+e7mj8+fPXvm/IULFy9ePP3O1WubZ3b/PZxeL4Ccfx772nmgZcn558zlX5ac/xdSLf+y5Py/mGr5lyXnn9/vyb8sOf/82Uf+Zcn5v5Rq+Zcl5/+VVMu/LDn/l1Mt/7Lk/L+aavmXJef/SqrlX5ac/6lUy78sOf/Tqd5H/r4e/gjJ+ecjXPb/suT885kN8i9Lzv9cquVflpz/+VTLvyw5/1dTLf+y5Py/lmr5lyXnfyHV8i9Lzv/rqZZ/WXL+F1Mt/7Lk/L+RavmXJef/zVTLvyw5/9dSLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5v55q+Zdl7/v/3XDDDTfyjbb/MgEAAAAAAAAAAAAA4+ZxOnHb2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5Drr+4Gf2Rd77RBiIAQnfwObxISQLNm1nfiFf11MgEADlAIJhb5gu961WfAbXrsEimRTQ4mEUVFF1fSCFhBqo1YVVsUFrSjNRdWXq9Je0JuKqhJSoyqggITUVpStZs7zPJ6ZnZ2z9o7Xs+f5fKT45905M+fMmWdm97vOdwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB2d75x7jONoiia/7X+2FIUL2j+fdPkltbnXnejjxAAAABYrf9t/fn8LekTB1ZwpbZt/u4V//j1xcXFxeJ9o787/oXFxXTBZFGMbyyK1mXR5X9/f6N9m+BiMdEYaft4pGL3oxWXj1VcPl5x+YaKyzdWXD5RcfmSE7DEpvLnMa0b297665bylBa3FuOty7b3uNbFxsaRkfiznJZG6zqL40eL+eJ4MVfMdGxfbttobf/NO5v7emsR9zXStq9tzRXyw08cicfQCOd4e8e+rtxm9P03FJM/+uEnjvzR2edu7zUrT0PH7ZXHee9dzeP8VPhMeayNYmM6J/E4R9qOc1uPx2S04zgbres1/959nM+v8DhHrxzmmup+zCeKkdbfv906T2PtP9ZL52lb+Nx/3V0UxYUrh929zZJ9FSPF5o7PjFx5fCbKFdm8jeZSenExdlXr9M4VrNPmnN3euU67nxPx8b8zXG9smWNof5i+/8kNSx73q12nUfNeL/dc6V6Dg36uDMsajOvi2607/WTPNbg93P9P3LP8Guy5dnqswXS/29bgXVVrcGTDaOuY04PQaF3nyhrc0bH9aGtPjdZ89p7+a3D67InT0wsf+/hr508cPjZ3bO7krh07Znbt3r13797po/PH52bKP6/xbA+/zcVIeg7cFc5dfA68umvb9qW6+OXBPQ8n+jwPt3RtO+jn4Vj3nWuszRNy6ZounxuPNU/6xKWRYpnnWOvxuW/1z8N0v9ueh2Ntz8OeX1N6PA/HVvA8bG5z+r6Vfc8y1vZfr2O4Xl8LtrStwe7vR7rX4KC/HxmWNTgR1sW/3rf814Jt4XifnLra70dGl6zBdHfDa0/zM+n7/Ym9rdFrXd7RvOCmDcW5hbkzDzxx+OzZMzuKMNbES9rWSvd63dx2n4ol63XkqtfrgflXPHlHj89vCedq4rXNPyaWfaya2zz4QP/HqvXVrff57PjsziKMAVvr89nrq3nzfKYs2ed8Nrf51PTqvxdPubTt9Xd8mdffmPt/Wu4v3dTF0fGx8vk7ms7OeMfrcedDNdZ67Wq09v389Mpej8fDf2v9enxrn9fjrV3bDvr1eLz7zsXX40bVTztWp/vxnAjr5PhM/9fj5jZbd17tmhzr+3p8d5iNcP5fE5JCykVta2e5dZv2NTY2Hu7XWNxD5zrd1bH9eMhmzX09vfPa1um9d5e3NZru3RVrtU4nu7Yd9DpNr1fLrdNG1U/frk334zkR1sWtu/qv0+Y2zzy4+tfOTfGvba+dG6rW4PjohuYxj6dFWL7eL26Ka/CB4khxqjhezLYu3dBaT43WvqYeWtka3BD+W+vXyq191uC9XdsOeg2mr2PLrb3G2NI7PwDdj+dEWBdPPdR/DTa3edOewX7vem/4TNqm7XvX7p+vLfczrzu6TtP1/JlX8zj/Zk//n802tzm+92pzZv/zdH/4zE09zlP383e559RssTbnaWs4zuf2Ln+emsfT3OYL+1a4ng4URXH+Iw+3ft4b/n3lz8995+sd/+7S6990zn/k4R/cfPRvr+b4AVj/flqOzeXXurZ/mVrJv/8DAAAA60LM/SNhJvI/AAAA1EbM/fH/Ck/kfwAAAKiNmPvHwkwyyf9b3/Tc/E/PF6mZvxjEy9NpeLTcLnZcZ8LHk4tXND//8FfnfvyX51e275GiKH7y6G/03H7ro/G4SpPhOC+/ufPzS694fkX7P/T4le3a++tfCrcf789Kl0GvCu5MURTfvOVzrf1Mvv9Saz7z6KHWfPeFJy82t3l+X/lxvP6zLym3/2Io/x44erjj+s+G8/C9MGfe1vt8xOt97dJrtu1575X9xes17nph624/9YHyduPvyfn8xXL7eJ6XO/6/+uzTX2tu/8Sreh//+ZHex/90uN2vhvnfLy+3b38Mmh/H6306HH/cX7zeA1/5Vs/jv/yZcvvTj5TbHQoz7v/e8PH2R56bbz9fTzQOd9yv4i3ldnH/M9/57dbl8fbi7Xcf/8TBSx3no3t9PPPP5e1Md20fPx/3E/1F1/6bt9O+PuP+n/6tQx3nuWr/l9/97Mubt9u9//u7thvtun73b2z6g09/ruf+4vEc+LPTHffnwLvC8zjs/6kPhPUYLv+fy5/r2G906F2drz9x+y9tOd9xf6K3/qjc/+XXH2vN/5j88e/f9IKbX3jhlc1zVxTffk95e1X7P/aHpzqO/8u33dd6POLlsaPfvf/lxP2f+ejUyVML5+Zn285q63fnvL08no0TmzY3j/eW8Nra/fHBU2c/OHdmcmZypigm6/sr9K7ZV8L8QTkuXO3173s8PJ53/N43N9/zT5+Nn/+Xx8rPX3pb+XXr1WG7z4fPbykfv8XGKvf/1J23tZ7fjWfKjzt67AOwbft/7l3RhuH+d39fENf76Zd+sHUempe1vm7E5/Uqj/+7s+XtfCOc18Xwm5nvuu3K/tq3j78b4dJ7yuf7qs9feJmLj+sfh8f7Hd8rbz8eV7y/3w3fx3xra+frXVwf3zg/0n37rd/icSG8nhQXysvjVvF8X3r+tp6HF38PSXHh9tbHv5Nu5/arupvLWfjYwvTx+ZPnnpg+O7dwdnrhYx8/eOLUuZNnD7Z+l+fBD1Vd/8rr0+bW69Ps3O4Hi5lNRVGcKmbW4AXr+hx/828rO/7Tjx+Z3TNzz+zc0cPnjp59/PTcmWNHFhaOzM0u3HP46NG5j1Zdf352/46d+3bt2Tl1bH52/959+3btm5o/eap5GOVBVdg98+Gpk2cOtq6ysP/BfTseeujBmakTp2bn9u+ZmZk6V3X91temqea1f33qzNzxw2fnT8xNLcx/fG7/jn27d++s/G2AJ04fXZicPnPu5PS5hbkz0+V9mTzb+nTza1/V9amnhX8rv5/t1ih/EV/xzvt3p9/P2vTVTy57U+UmXb9A9Lnwu2j+4UWn967k45j7x8NMMsn/AAAAkIOY+zeEmcj/AAAAUBsx928MM5H/AQAAoDZi7p8IM8kk/+v/6/+vrP9fXq7/n1f///RHyl7peu//x/68/n8ebnD/f9X71//X/69f/3/l/fn1fvz6//r/LDVs/f+Y+zcVRZb5HwAAAHIQc//mMBP5HwAAAGoj5v6bwkzkfwAAAKiNmPtfEGaSSf7X/19R/39nVeGq/v1/7/+v/1+sz/5/fHD0/7Nx1f379z7W8aH+f6D/r/+v/6//r//Pqo0ve8mN6v/H3H9zmEkm+R8AAAByEHP/C8NM5H8AAACojZj7bwkzkf8BAACgNmLu3xJmkkn+1//3/v/6//r/te7/r/b9/9sORv9/ffD+//3p/1e45v7/hP7/euz/jw/2+Ie7/195+Pr/XBfD9v7/Mfe/KMwkk/wPAAAAOYi5/8VhJvI/AAAA1EbM/S8JM5H/AQAAoDZi7r81zCST/K//r/+/wv7/l/T/9f+z7P/3ff//8m/6/8NF/78//f8K3v8/r/7/gI9/uPv/g37///E3d19f/59ehq3/H3P/S8NMMsn/AAAAkIOY+28LM5H/AQAAoDZi7n9ZmIn8DwAAALURc//WMJNM8r/+v/6/9//X/9f/773/6v5/Sf9/uOj/96f/X0H/X/9f/39l/f8e3/zq/9PLsPX/Y+6/Pcwkk/wPAAAAOYi5/44wE/kfAAAAaiPm/v8XZiL/AwAAQG3E3L8tzCST/K//r/+v/59X///+Dfr/+v/1pv/fn/5/Bf1//X/9/xW+//9SV9P/31h1Y9TGsPX/Y+5/eZhJJvkfAAAAchBz/yvCTOR/AAAAqI2Y+18ZZiL/AwAAQG3E3D8ZZpJJ/tf/r1f//0//+qlXFvr/+v8V+69p/z8uA/3/zOn/96f/X0H/X/9f/39N+v/kY9j6/zH33xlmkkn+BwAAgBzE3H9XmIn8DwAAALURc//dYSbyPwAAANRGzP3bw0wyyf/6//Xq/0f6/2vY///iI+l29P9L3v+/N/3/taH/30Pbk1T/v4L+v/5/9v3/+N2v/j+DMWz9/5j7XxVmkkn+BwAAgBzE3H9PmIn8DwAAALURc/+rw0zkfwAAAKiNmPvvDTPJJP/r/+v/6/97/3/9/9771/9fn/T/+9P/r6D/r/+fff/f+/8zWMPW/4+5/zVhJpnkfwAAAMhBzP33hZnI/wAAAFAb8f/fLP+/V/kfAAAA6ijm/qkwk0zyv/6//n9O/f+G/r/+v/5/7en/96f/X0H/X/9f/1//n4Eatv5/zP2vDTPJJP8DAABADmLufyDMRP4HAACA2oi5fzrMRP4HAACA2oi5fybMJJP8r/+v/59T/9/7/+v/6//Xn/5/f/r/FfT/9f/r1v8vCv1/bqhh6//H3L8jzCST/A8AAAA5iLl/Z5iJ/A8AAAC1EXP/rjAT+R8AAABqI+b+B8NMMsn/+v/6//r/+v/6/733r/+/Pun/96f/X0H/X/+/bv1/7//PDTZs/f+Y+x8KM8kk/wMAAEAOYu7fHWYi/wMAAEBtxNy/J8xE/gcAAIDaiLl/b5hJJvlf/78m/f/f/PuOfev/6//32/9g+v+b9P/D1P8fLjXt/3c/La6Z/n8F/X/9f/1//X8Gatj6/zH37wszyST/AwAAQA5i7n9dmElH/r/4J2t8WAAAAMAAxdz//8NM/Ps/AAAA1EbM/T8TZpJJ/tf/r0n/v4v+v/5/v/17/3/9/zqraf9/YPT/K+Ta/w8vaDe6P79aN/r49f/1/1nq+vf/499W1v+PuX9/mEkm+R8AAAByEHP/z4aZyP8AAABQGzH3vz7MRP4HAACA2oi5/0CYSSb5X/9f/1//X///+vT/X190G8b+f3Px6P/Xi/5/f/r/FXLt/wc3uj+/3o9f/1//n6WG7f3/Y+5/Q5hJJvkfAAAAchBz/8NhJvI/AAAA1EbM/W8MM5H/AQAAoDZi7n9TmEkm+V//X/9f/1//3/v/996//v/6pP/fn/5/Bf1//X/9f/1/BmrY+v8x9785zCST/A8AAAA5iLn/kTAT+R8AAABqI+b+t4SZyP8AAABQGzH3vzXMJJP8r/+v/6//r/+v/997//r/65P+f3/6/xX0//X/u4+/9WKv/6//z7Uatv5/zP0/F2aSSf4HAACAHMTc/2iYifwPAAAAtRFz/9vCTOR/AAAAqI2Y+98eZpJJ/tf/1//X/9f/1//vvX/9//VJ/78//f8K+v/6/97/X/+fgRq2/n/M/e8IM8kk/wMAAEAOYu7/+TAT+R8AAABqI+b+d4aZyP8AAABQGzH3/0KYSSb5X/9f/1//X/8/i/5/80r6/1nQ/+9P/79Cj/7/Rv1//X/9f/1/rtmw9f9j7n9XmEkm+R8AAAByEHP/u8NM5H8AAACojZj73xNmIv8DAABAbcTc/1iYSSb5X/8/y/5/usv6/yX9/wz6/97/Pxv6//3p/1fw/v/6//r/+v8M1LD1/2PufzzMJJP8DwAAADmIuf+9YSbyPwAAANRGzP2/GGYi/wMAAEBtxNz/vjCTTPK//n+W/X/v/79m/f+xjvWRU/9/ou3xTOtS/1//fw3o//en/19B/1//f5j7/2E1b1rm+vr/DKNh6//H3P/+MJNM8j8AAADkIOb+Xwozkf8BAACgNmLu/+UwE/kfAAAAaiPm/l8JM8kk/+v/6//r/3v/f+//33v/+v/rk/5/f/r/FfT/9f+Huf9fQf+fYTRs/f+Y+381zCST/A8AAAA5iLn/A2Em8j8AAADURsz9B8NM5H8AAACojZj7D4WZZJL/9f+7+//xHVX1//X/9f/1//X/16PB9f9fdnNR6P/r/+v/6//r/+v/sxrD1v+Puf9wmEkm+R8AAAByEHP/r4WZyP8AAABQGzH3Hwkzkf8BAACgNmLunw0zyST/6/97//9B9f9/ov+v/x/o//em/782vP9/f/r/FfT/9f/1//X/Gahh6//H3D8XZpJJ/gcAAIAaSz8Ojrn/aJiJ/A8AAAC1EXP/sTAT+R8AAABqI+b+D4aZZJL/9f/1/73//43o/491bK//X9L/1/8fBP3//vT/K+j/6//r/+v/M1DD1v+PuX8+zCST/A8AAAA5iLn/Q2Em8j8AAADURsz9Hw4zkf8BAACgNmLuPx5mkkn+1//X/8+9/98oigve/1//v9f+9f/XJ/3//vT/K+j/6//r/+v/M1DD1v+Puf9EmEkm+R8AAAByEHP/yTAT+R8AAABqI+b+U2Em8j8AAADURsz9p8NM/o+9+2i266zyOHzabVvSqPsjMGbEEEZ8BabMqGLMADA5GJMzmJyDyTnnZHLOOZuco4mGKlFcrbUs6R7tLfke3bP3u55nsloqq8+VfTH1R/Wrt8n+1//r/7v3/5u9vP9/7l+v/z9D/6//34VD/f2Vl/brL9j/3+GO19xN/6//1/9P0v/r//X/nG9p/X/u/nvGLU32PwAAAHSQu/9ecYv9DwAAAMPI3X/vuMX+BwAAgGHk7r8mbmmy//X/+n/9v/7/nP7/Rv2//n/dvP8/Tf8/Yzf9//9u9P/6f/2//p8DS+v/c/ffJ25psv8BAACgg9z9941b7H8AAAAYRu7++8Ut9j8AAAAMI3f//eOWJvtf/6//1//r/73/v/3z9f/rpP+fpv+f4f1//b/+X//PTi2t/8/d/4C4pcn+BwAAgA5y9z8wbrH/AQAAYBi5+x8Ut9j/AAAAMIzc/Q+OW5rsf/2//l//r//X/2//fP3/Ot2wufXfCfr/w/T/M2b6/81G/z/lovv57b+99Xz9F6D/1/9z2NL6/9z9D4lbmux/AAAA6CB3/0PjFvsfAAAAhpG7/9q4xf4HAACAYeTuf1jc0mT/6//1//p//b/+f/vn6//Xyfv/047e/9/+/+9x9779v/f/p3n/X/+v/+d8S+v/c/dfF7c02f8AAADQQe7+h8ct9j8AAAAMI3f/I+IW+x8AAACGkbv/kXFLk/2v/2/T/x/ULvp//b/+X/8/Ov3/NO//zzj419yp+qH+X/+v/9f/czRL6/9z9z8qbmmy/wEAAKCD3P2PjlvsfwAAABhG7v7HxC32PwAAAAwjd/9j45Ym+1//36b/9/6//l//r/9vQf8/Tf8/Y5T3/2/jd82++/mj2vfXr//X/3PY0vr/3P2Pi1ua7H8AAADoIHf/4+MW+x8AAACGkbv/CXGL/Q8AAADDyN3/xLilyf7X/+v/19H/5yfo//X/+n/9/zT9/zT9/4xR+v/baN/9/Nq/fv2//p/Dltb/5+5/UtzSZP8DAABAB7n7nxy32P8AAAAwjNz9T4lb7H8AAAAYRu7+p8YtTfa//l//v47+3/v/+n/9v/7/4uj/p+n/Z+j/9f/6f/0/O7W0/j93//VxS5P9DwAAAB3k7n9a3GL/AwAAwDBy9z89brH/AQAAYBi5+58RtzTZ//p//b/+X/+v/9/++fr/ddL/T9P/z9D/6//1//p/dmpB/f9Zv+rk5plxS5P9DwAAAB3k7n9W3GL/AwAAwDBy9z87brH/AQAAYBi5+58TtzTZ//r/xfT/BznfWP3/qc1mo//fNO3/T531z7O+L/X/+v9joP+fpv+fof/X/+v/9f/s1IL6/4Mf5+5/btzSZP8DAABAB7n7nxe32P8AAAAwjNz9z49b7H8AAAAYRu7+F8QtTfa//n8x/f+Bsfp/7/+f//3Rqf/3/v9h+v/jof+fpv+fof/X/+v/9f/s1NL6/9z9L4ybrr7qNv8WAQAAgIXJ3f+iuKXJn/8DAABAB7n7Xxy32P8AAACwUtcf+pnc/S+JW5rsf/3/bvv/q8/6Of2//v/87w/9v/5f/3/56f+n6f9n6P/1//p//T87tbT+P3f/S+OWJvsfAAAAOsjdf0PcYv8DAADAMHL3vyxusf8BAABgGLn7Xx63NNn/+n/v/+v/9f/6/+2fr/9fJ/3/NP3/DP2//n+//f+JW/9P/T9juIT+//Tp09de9v4/d/8r4pYm+x8AAAA6yN3/yrjF/gcAAIBh5O5/Vdxi/wMAAMAwcve/Om5psv/1/037//xW1/8f0P/r/7d9vv5/nfT/0/T/M/T/+n/v/+v/2amlvf+fu/81cUuT/Q8AAAAd5O5/bdxi/wMAAMAwcve/Lm6x/wEAAGAYuftfH7c02f/6/6b9v/f/9f/6/+Pu/2/Z6P+PxSr6/1MX/vyl9//X6f/1/xPa9f93udM5P9T/6/85bGn9f+7+N8QtTfY/AAAAdJC7/41xi/0PAAAAw8jd/6a4xf4HAACAYeTuf3PcdGWT/a//1//r//X/+v/tn3/M7/9fvdls9P87sIr+f8LS+3/v/+v/p7Tr/8+j/9f/c9jS+v/c/W+JW5rsfwAAAOggd/9b4xb7HwAAAIaRu/9tcYv9DwAAAMPI3f/2uKXJ/tf/6//1//r/4fv/61bR/3v/f0f0/9P0/zP0//p//b/+n2Oxr/4/d/874pYm+x8AAAA6yN3/zrjF/gcAAIBh5O5/V9xi/wMAAMAwcve/O25psv/1//p//b/+/8Ti+v+T5/z/a/L+v/5/R/T/05bY/5/97xD9v/5/zV//IP3/9fp/dmlp7//n7n9P3NJk/wMAAEAHufvfG7f+p1v7HwAAAIaRu/99cYv9DwAAAMPI3f/+uKXJ/tf/6//1//r/4d//1/+3ov+ftsT+/2z6f/3/mr/+Qfp/7/+zU0vr/3P3fyBuabL/AQAAoIPc/R+MW+x/AAAAGEbu/g/FLfY/AAAADCN3/41xS5P9r//X/+v/9f/6/zP/DPX/Y9D/Tzue/v+U/l//X/38/8R/CvT/+v+5X8+Yltb/5+7/cNzSZP8DAABAB7n7PxK32P8AAAAwjNz9H41b7H8AAABYpSu3/Fzu/o/FLU32v/5f/6//1//r/7d/vv5/nfT/07z/P0P/f4n9/O3O+dHa3v8//7+/9P/6f3Zvaf1/7v6Pxy1N9j8AAAB0kLv/E3GL/Q8AAADDyN3/ybjF/gcAAIBh5O7/VNzSZP/r//X/+n/9v/5/++fr/9dJ/z9N/z9D/7/X9/PX/vXr//X/HLa0/j93/6fjlib7HwAAADrI3f+ZuMX+BwAAgGHk7v9s3GL/AwAAwDAOdn/GZQ33v/5f/6//1//r/7d/vv5/nfT/0/T/M/T/+n/9v/6fnVpa//+5g191cvP5uKXJ/gcAAIAOcvd/IW6x/wEAAGAYufu/GLfY/wAAADCM3P1filua7H/9v/5/Hf3/6dOnr9X/6//P/f3c2v/fpP+n6P+n6f9n6P/1//p//T87tbT+P3f/l+OWJvsfAAAAOsjd/5W4xf4HAACAYeTu/2rcYv8DAADAMHL3fy1uabL/9f8L6P9P6v+9/6//33j/X/+/I/r/afr/GSP2/ycv/re/737+qPb99ev/9f8ctrT+P3f/1+OWJvsfAAAAOsjd/424xf4HAACAYeTu/2bcYv8DAADAMHL3fytuabL/9f/H1///9+9dl/f/T222f/36f/2//l//f7np/6fp/2eM2P9fgn3382v/+vX/+n8OW1r/n7v/23FLk/0PAAAAHeTu/07cYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v8FvP8/YP/v/f/t3x/6/0X3/1fo/8eg/5+m/5+h/9f/6/931P/nd7P+v7ul9f+5+78ftzTZ/wAAANBB7v4fxC32PwAAAAwjd/8P4xb7HwAAAIaRu/+muOWs/b+t7R6F/l//r//X/+v/t3++/n+d9P/TLrb/P7E5Wv+f9P/6f/1/1/7f+/+csbT+P3f/j+IWf/4PAAAAq3PVBX4+d/+P4xb7HwAAAIaRu/8ncYv9DwAAAMPI3f/TuOXmK/b1JR0r/b/+X/+v/9f/b/98/f866f+nef9/hv5/F/38nfX/Y/T/m43+n6NbWv+fu/9ncYs//wcAAIBh5O7/edxi/wMAAMAwcvf/Im6x/wEAAGAYuft/Gbc02f/6f/3/Efv/gzRT/3+G/v8M/f92+v/jof+fpv+fof/3/r/+3/v/7NTS+v/c/b+KW5rsfwAAAOggd/+v4xb7HwAAAIaRu/83cYv9DwAAAMPI3f/buKXJ/t9b/x9/q/X/q+//vf+v/9f/6/8XRf8/Tf8/Q/+v/9f/6//ZqaX1/7n7fxe3NNn/AAAA0EHu/t/HLfY/AAAADCN3/x/iFvsfAAAAhpG7/49xS5P97/1//b/+X/+v/9/++fr/ddL/T9P/b1f/oPT/+n/9v/6fnVpa/5+7/09xS5P9DwAAAB3k7v9z3GL/AwAAwDBy998ct9j/AAAAMIzc/X+JW5rsf/2//l//r//X/2//fP3/Oun/p+2z/7/r/81/rPf/997/55eg/9f/6//ZiaX1/7n7/xq3NNn/AAAA0EHu/r/FLfY/AAAADCN3/9/jFvsfAAAAhpG7/x9xS5P9P9P/n6i/UP8/Sf9/7tev/9/+/aH/1//r/y8//f807//P0P97/1//r/9np5bW/+fu/2fc0mT/AwAAQAe5+2+JW+x/AAAAGEbu/n/FLfY/AAAADCN3/7/jlib73/v/+n/9v/5f/7/98/X/66T/n6b/n6H/1//r//X/7NTS+v/c/f8JAAD//3fjYQc=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 15.742779407s ago: executing program 0 (id=442): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, 0x0, 0x0) 14.371867026s ago: executing program 0 (id=448): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/184, 0xb8}], 0x1, 0x0, 0x0) 14.031581877s ago: executing program 2 (id=449): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30000c0, &(0x7f00000008c0)=ANY=[@ANYBLOB="71756965742c63726561746f723dd4675f162c696f636861727365743d69736f383835392d322c71756965742c636f6465706167653d63703933362c00b24530a1a1e51b95228246cc65c972358b611490e09004a315011a4fe58392211f22a42390912061adb25c406e20585d9f060000002b201f39c5e48b745085abecadfbfbbcd03215c2cdd68151829c12d7be50cdd55aa9e506d9e28ad8ce2951dd1f560961e92e8d0cb6d4a3dd5f7e175e5cc87c7961198954d737b45262a26cc3bb46b70e1ad909d3b0c2d7fb8053f47884a9cc46a9d32ce04b2d00", @ANYRESOCT=0x0], 0x11, 0x2b6, &(0x7f0000000200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/43, 0x60) 13.939447329s ago: executing program 0 (id=451): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000300)={[{@errors_continue}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@acl}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {@compress_cache}, {@lfs_mode}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x41009432, &(0x7f0000000100)) 13.363830235s ago: executing program 2 (id=454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000104038a0000000000000000000000000a00020000000000020000000500010001"], 0x28}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x20, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0xff23, 0x1}}]}, 0x20}}, 0x0) 13.066042444s ago: executing program 1 (id=455): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000040)={0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000080)={0x2}, 0x0) 12.95563218s ago: executing program 5 (id=456): syz_mount_image$romfs(&(0x7f0000000200), &(0x7f0000000480)='./file0\x00', 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f3200000be550020080000198c3b790000c19e57fc847c52a1695a251b480e31f9126b9b0b247df0690ca7d757194d0335d8e8a065e069e1290c00000000000000988309e751e0eec20f77"], 0x1, 0x162, &(0x7f0000000780)="$eJzs2rFKw0AYB/Bv0LZ2EkenQiUK2iRNtK46ipu7Q6m5NnixJRGkXRzFSVA4B19C8Al8AunopksHXyJyzVGTqEWXJuj/t+QPX5J+vYPL8tX8rldnQY1oo3d9MFryu16lYW+3WJ01KbJHRBUZhmF4q9MnL5P6MCT9ixuytfIWXatrbbF/yVzuWFm3BAAAAAAAAAAAAAAAAAAAAAAAP6SVVSh3hHfBXO7UY9WgPzhucu74AVEp+WBpll1mR6uoGS5igt/J9bET9fUSFWlHJlfs+rJuJp+/UWG1I/hren2NU69nBP1BzfWabaftnFiW3TA3TXPLMsbvMtJv1O5VTzQMH8zYOJn+dCg702LzZs/T5s16C9FV7n+BaG7ZFVdn6V/72P+/Hhbz0UbmoaB2Pi/9/KtwPvWe+Rx0OAm/OELzbfz9GxFR0a4+yvNPb3X5kSrOYjmz/fsA8J33AAAA///CvDfq") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 12.814603623s ago: executing program 2 (id=457): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008000", @ANYRES32=0x0, @ANYBLOB="0000d3"], 0x24}}, 0x0) 12.564628963s ago: executing program 1 (id=458): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000140)) 12.319770489s ago: executing program 2 (id=459): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb) setsockopt$inet_opts(r0, 0x0, 0x17, &(0x7f0000000a80)='U', 0x1) 12.104365679s ago: executing program 1 (id=461): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, 0x0) 12.034954839s ago: executing program 5 (id=462): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) 11.663941006s ago: executing program 1 (id=464): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x84) 11.574428964s ago: executing program 2 (id=465): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)='#', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f00000001c0)) 11.425695975s ago: executing program 5 (id=466): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x26, 0x0) 11.148098042s ago: executing program 1 (id=468): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x2, {{0xa, 0x0, 0xffffffff, @mcast1={0xff, 0x7}, 0x1000000}}, {{0xa, 0x4e20, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000004c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 11.038263992s ago: executing program 5 (id=469): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 10.718224662s ago: executing program 1 (id=471): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r0, 0x8910, 0x1000000000000) 10.562870435s ago: executing program 5 (id=472): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xc}}, 0x0) 10.291902942s ago: executing program 2 (id=473): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/130, 0x82}, {&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f0000000040)=""/60, 0x3c}], 0xa}, 0x0) 9.589897219s ago: executing program 0 (id=474): r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f00000000c0)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 9.441452706s ago: executing program 5 (id=475): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)='}', 0x1}], 0x1}}], 0x1, 0x8040) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="1c3513000000", &(0x7f0000001100)=""/4085, 0x4, 0x20, 0x0, 0x0}) 9.283658691s ago: executing program 0 (id=476): creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='reiserfs\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0x0, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) 3.327494906s ago: executing program 4 (id=493): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r0, &(0x7f0000006800)="10", 0x1) write$char_usb(r0, 0x0, 0x0) 3.204435711s ago: executing program 3 (id=494): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x1) 3.087483699s ago: executing program 4 (id=495): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYBLOB="3db1bd3c9389ce300f92cc8091d7dfbdcfffeed8bb90e543382e29209562d6483c6fcfdf79d0b465e6bc8ea70762049054a683ca4394e098765d85fa3b798fc191119debc7d45cce724609d275eabc974abf88d2270db005808488efc289084aff3069b2b0a78cdfa1f780c10f6c51d7c9ced6ab3e8a7aa716d5ebe1e8cb6255366a32ca4bfad14e3b1315ec", @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRES64], 0x1, 0x620f, &(0x7f000000cb40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/202, 0xff4) 3.001611958s ago: executing program 3 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="170000000000000003000000ff7f000014"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) 2.808492371s ago: executing program 3 (id=497): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x10, 0x1) 2.569681338s ago: executing program 3 (id=498): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x808000, &(0x7f0000000d00)=ANY=[@ANYBLOB="75737271756f74612c6572726f72733d636f6e74696e75652c6e6f646973636172642c75737271756f74612c6572726f72733d72656d6f756e742d726f2c646973636172642c726573697a653d3078300000303030303030303030303030302c6e6f696e746567726974792c6572726f72733d636f6e74696e75652c6769643de87a9ff89424d906c75896a3b4f7e492d65e393da98543be1b04764bcad4d914f910e90a8a987e845137ac7679d7d022656e94f6d509c91388cd4bab43d7bf7bed", @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRES8, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES32=0x0], 0x1, 0x628f, &(0x7f0000026040)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f000001f780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 1.808463726s ago: executing program 4 (id=499): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)) ioctl$FBIO_WAITFORVSYNC(r0, 0x4601, 0x20000000) 1.040608914s ago: executing program 3 (id=500): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0x108, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x108}}, 0x0) 992.68744ms ago: executing program 4 (id=501): bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 792.202573ms ago: executing program 4 (id=502): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r1, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 436.628577ms ago: executing program 4 (id=504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001b"], 0x34}}, 0x0) 0s ago: executing program 3 (id=506): r0 = epoll_create(0x6) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x30000010}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 60.173363][ T5211] cgroup: Unknown subsys name 'net' [ 60.324644][ T5211] cgroup: Unknown subsys name 'cpuset' [ 60.333516][ T5211] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.738369][ T5211] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.190682][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.226506][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.235220][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.243641][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.251242][ T5244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.258671][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.267663][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.275230][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.282615][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.289879][ T5244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.298059][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.303302][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.306267][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.318829][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.320141][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.334173][ T5247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.334334][ T5248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.349485][ T5248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.356617][ T5246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.357427][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.371562][ T5248] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.371870][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.379418][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.393923][ T5248] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 64.398406][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.409916][ T5248] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.410139][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.417392][ T5248] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.424404][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.439246][ T5249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.439615][ T5248] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.448030][ T5249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.462440][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.462831][ T5248] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.469782][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.484529][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.940034][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 65.126452][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 65.137564][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 65.159926][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.168889][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.177746][ T5223] bridge_slave_0: entered allmulticast mode [ 65.185272][ T5223] bridge_slave_0: entered promiscuous mode [ 65.226226][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.233800][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.241123][ T5223] bridge_slave_1: entered allmulticast mode [ 65.247894][ T5223] bridge_slave_1: entered promiscuous mode [ 65.309471][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 65.322993][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.332592][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 65.399127][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.418705][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.426433][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.434010][ T5224] bridge_slave_0: entered allmulticast mode [ 65.441223][ T5224] bridge_slave_0: entered promiscuous mode [ 65.494789][ T5223] team0: Port device team_slave_0 added [ 65.501379][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.508607][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.515954][ T5224] bridge_slave_1: entered allmulticast mode [ 65.522937][ T5224] bridge_slave_1: entered promiscuous mode [ 65.585765][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 65.598139][ T5223] team0: Port device team_slave_1 added [ 65.635334][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.643287][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.651036][ T5232] bridge_slave_0: entered allmulticast mode [ 65.657818][ T5232] bridge_slave_0: entered promiscuous mode [ 65.698497][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.731202][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.738282][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.745962][ T5232] bridge_slave_1: entered allmulticast mode [ 65.753715][ T5232] bridge_slave_1: entered promiscuous mode [ 65.796775][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.804128][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.831597][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.845700][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.873971][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.881211][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.888477][ T5222] bridge_slave_0: entered allmulticast mode [ 65.895603][ T5222] bridge_slave_0: entered promiscuous mode [ 65.947005][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.954349][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.981274][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.000651][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.007752][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.015078][ T5222] bridge_slave_1: entered allmulticast mode [ 66.021915][ T5222] bridge_slave_1: entered promiscuous mode [ 66.031071][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.040240][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.047420][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.054605][ T5230] bridge_slave_0: entered allmulticast mode [ 66.061928][ T5230] bridge_slave_0: entered promiscuous mode [ 66.069757][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.076950][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.084163][ T5230] bridge_slave_1: entered allmulticast mode [ 66.091207][ T5230] bridge_slave_1: entered promiscuous mode [ 66.107320][ T5224] team0: Port device team_slave_0 added [ 66.133655][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.178684][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.185959][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.194312][ T5228] bridge_slave_0: entered allmulticast mode [ 66.201763][ T5228] bridge_slave_0: entered promiscuous mode [ 66.214791][ T5224] team0: Port device team_slave_1 added [ 66.231784][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.251274][ T5232] team0: Port device team_slave_0 added [ 66.274829][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.281960][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.289196][ T5228] bridge_slave_1: entered allmulticast mode [ 66.296556][ T5228] bridge_slave_1: entered promiscuous mode [ 66.326161][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.338027][ T5232] team0: Port device team_slave_1 added [ 66.357353][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.385768][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.393002][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.419234][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.461229][ T4616] Bluetooth: hci1: command tx timeout [ 66.461642][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.479182][ T5223] hsr_slave_0: entered promiscuous mode [ 66.485887][ T5223] hsr_slave_1: entered promiscuous mode [ 66.498196][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.510340][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.520413][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.527410][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.541461][ T4616] Bluetooth: hci0: command tx timeout [ 66.553637][ T5229] Bluetooth: hci3: command tx timeout [ 66.559049][ T5248] Bluetooth: hci2: command tx timeout [ 66.564317][ T5236] Bluetooth: hci5: command tx timeout [ 66.575575][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.589212][ T5222] team0: Port device team_slave_0 added [ 66.595652][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.602678][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.628910][ T5236] Bluetooth: hci4: command tx timeout [ 66.629281][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.670020][ T5222] team0: Port device team_slave_1 added [ 66.676418][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.683486][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.710014][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.738221][ T5230] team0: Port device team_slave_0 added [ 66.765770][ T5228] team0: Port device team_slave_0 added [ 66.774335][ T5228] team0: Port device team_slave_1 added [ 66.803489][ T5230] team0: Port device team_slave_1 added [ 66.892519][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.899504][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.925979][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.941619][ T5224] hsr_slave_0: entered promiscuous mode [ 66.948051][ T5224] hsr_slave_1: entered promiscuous mode [ 66.954445][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.962310][ T5224] Cannot create hsr debugfs directory [ 66.968265][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.975795][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.002183][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.034774][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.042049][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.068738][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.082544][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.089501][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.116053][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.136444][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.143703][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.169716][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.206378][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.213518][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.239946][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.254313][ T5232] hsr_slave_0: entered promiscuous mode [ 67.261351][ T5232] hsr_slave_1: entered promiscuous mode [ 67.267501][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.275518][ T5232] Cannot create hsr debugfs directory [ 67.306691][ T5228] hsr_slave_0: entered promiscuous mode [ 67.314469][ T5228] hsr_slave_1: entered promiscuous mode [ 67.321331][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.328913][ T5228] Cannot create hsr debugfs directory [ 67.483619][ T5230] hsr_slave_0: entered promiscuous mode [ 67.489961][ T5230] hsr_slave_1: entered promiscuous mode [ 67.496702][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.504565][ T5230] Cannot create hsr debugfs directory [ 67.525145][ T5222] hsr_slave_0: entered promiscuous mode [ 67.532454][ T5222] hsr_slave_1: entered promiscuous mode [ 67.538830][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.546669][ T5222] Cannot create hsr debugfs directory [ 67.797595][ T5223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.813520][ T5223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.844862][ T5223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.870436][ T5223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.941138][ T5232] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.958596][ T5232] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.968713][ T5232] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.986211][ T5232] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.034712][ T5224] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.063360][ T5224] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.088921][ T5224] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.110400][ T5224] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.131471][ T5228] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.153807][ T5228] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.165788][ T5228] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.176043][ T5228] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.273781][ T5222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.295151][ T5222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.305372][ T5222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.315168][ T5222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.333291][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.388356][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.422268][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.450234][ T5230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.462685][ T5230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.479323][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.491596][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.498808][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.509325][ T5230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.533481][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.540611][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.541320][ T5236] Bluetooth: hci1: command tx timeout [ 68.557353][ T5230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.573089][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.580165][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.621733][ T5236] Bluetooth: hci0: command tx timeout [ 68.622734][ T5229] Bluetooth: hci5: command tx timeout [ 68.627136][ T5236] Bluetooth: hci2: command tx timeout [ 68.632728][ T4616] Bluetooth: hci3: command tx timeout [ 68.667788][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.674954][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.701943][ T5236] Bluetooth: hci4: command tx timeout [ 68.718752][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.742545][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.759164][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.784586][ T5223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.815671][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.822844][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.881225][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.888338][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.912230][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.968129][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.993849][ T950] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.001016][ T950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.046015][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.125761][ T950] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.132929][ T950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.146406][ T950] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.153561][ T950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.162932][ T950] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.169998][ T950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.330360][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.346673][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.367185][ T5224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.399981][ T5222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.426901][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.492646][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.545300][ T950] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.552452][ T950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.587216][ T950] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.594378][ T950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.648154][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.666866][ T5223] veth0_vlan: entered promiscuous mode [ 69.775916][ T5223] veth1_vlan: entered promiscuous mode [ 69.815908][ T5232] veth0_vlan: entered promiscuous mode [ 69.875453][ T5232] veth1_vlan: entered promiscuous mode [ 69.926365][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.942759][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.002713][ T5223] veth0_macvtap: entered promiscuous mode [ 70.027278][ T5232] veth0_macvtap: entered promiscuous mode [ 70.070000][ T5223] veth1_macvtap: entered promiscuous mode [ 70.095558][ T5232] veth1_macvtap: entered promiscuous mode [ 70.118247][ T5222] veth0_vlan: entered promiscuous mode [ 70.188958][ T5222] veth1_vlan: entered promiscuous mode [ 70.226384][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.242110][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.258487][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.271748][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.291486][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.323934][ T5232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.334002][ T5232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.343257][ T5232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.352743][ T5232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.372457][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.384906][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.396618][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.430444][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.445718][ T5223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.456211][ T5223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.466438][ T5223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.475993][ T5223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.525266][ T5222] veth0_macvtap: entered promiscuous mode [ 70.550115][ T5222] veth1_macvtap: entered promiscuous mode [ 70.569994][ T5228] veth0_vlan: entered promiscuous mode [ 70.620948][ T5236] Bluetooth: hci1: command tx timeout [ 70.659741][ T5228] veth1_vlan: entered promiscuous mode [ 70.687693][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.699257][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.701229][ T5236] Bluetooth: hci2: command tx timeout [ 70.714613][ T5236] Bluetooth: hci5: command tx timeout [ 70.719764][ T5248] Bluetooth: hci3: command tx timeout [ 70.720001][ T5236] Bluetooth: hci0: command tx timeout [ 70.733080][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.743646][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.755803][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.777842][ T5230] veth0_vlan: entered promiscuous mode [ 70.782074][ T5236] Bluetooth: hci4: command tx timeout [ 70.817613][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.829751][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.837954][ T5228] veth0_macvtap: entered promiscuous mode [ 70.847419][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.858636][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.870767][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.880282][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.888643][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.890858][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.895099][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.912415][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.923814][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.940312][ T5222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.949869][ T5222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.968177][ T5222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.978586][ T5222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.999842][ T5230] veth1_vlan: entered promiscuous mode [ 71.027628][ T5228] veth1_macvtap: entered promiscuous mode [ 71.062181][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.073515][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.077252][ T5224] veth0_vlan: entered promiscuous mode [ 71.143121][ T5230] veth0_macvtap: entered promiscuous mode [ 71.150255][ T5224] veth1_vlan: entered promiscuous mode [ 71.163044][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.167145][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.176849][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.190595][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.203158][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.213790][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.223851][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.234372][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.245714][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.260334][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.271649][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.282894][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.293795][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.304617][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.315781][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.328881][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.356861][ T5228] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.368109][ T5228] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.372738][ T5223] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.377536][ T5228] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.405123][ T5228] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.431504][ T5230] veth1_macvtap: entered promiscuous mode [ 71.452281][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.460225][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.559513][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.587127][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.605005][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.619115][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.640536][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.664440][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.674594][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.685223][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.697781][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.789469][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.814686][ T5224] veth0_macvtap: entered promiscuous mode [ 71.836876][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.842450][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.874571][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.889876][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.911035][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.927324][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.938157][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.954182][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.967960][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.990749][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.017136][ T5341] gretap0: entered promiscuous mode [ 72.035973][ T5341] gretap0: left promiscuous mode [ 72.093351][ T5230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.112965][ T5230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.127594][ T5230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.138843][ T5230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.165213][ T5224] veth1_macvtap: entered promiscuous mode [ 72.181458][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.192536][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.203342][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.215007][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.249951][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.261369][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.280765][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.289835][ T5339] loop3: detected capacity change from 0 to 40427 [ 72.301034][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.327702][ T5339] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 72.329303][ T5345] cgroup: Unexpected value for 'cpuset_v2_mode' [ 72.338207][ T5339] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 72.349566][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.349642][ T5343] 9pnet: Could not find request transport: f [ 72.376352][ T5339] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x1fffff [ 72.380905][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.393359][ T5339] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 72.398857][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.420150][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.431693][ T5339] F2FS-fs (loop3): invalid crc value [ 72.438961][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.451323][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.463791][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.476009][ T5339] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.510615][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.538327][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.558913][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.569941][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.579841][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.590410][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.601691][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.636663][ T5339] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 72.681299][ T5339] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.709478][ T5236] Bluetooth: hci1: command tx timeout [ 72.717474][ T5224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.728901][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.736998][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.749049][ T5224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.758015][ T5224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.766778][ T5224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.791996][ T5236] Bluetooth: hci0: command tx timeout [ 72.796343][ T5229] Bluetooth: hci3: command tx timeout [ 72.797652][ T5236] Bluetooth: hci5: command tx timeout [ 72.802789][ T5229] Bluetooth: hci2: command tx timeout [ 72.864801][ T5236] Bluetooth: hci4: command tx timeout [ 72.890375][ T5232] syz-executor: attempt to access beyond end of device [ 72.890375][ T5232] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 72.912454][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.932273][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.114717][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.140652][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.211188][ T5232] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 73.287462][ T5360] loop0: detected capacity change from 0 to 40427 [ 73.310044][ T5360] F2FS-fs (loop0): invalid crc value [ 73.342088][ T5360] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.447903][ T5360] F2FS-fs (loop0): Start checkpoint disabled! [ 73.483425][ T5360] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 73.499353][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.517934][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.551225][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.562174][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.836716][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.845321][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.916576][ T74] kworker/u8:4: attempt to access beyond end of device [ 73.916576][ T74] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 73.944205][ T74] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 73.967905][ T74] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 74.194528][ T5375] loop2: detected capacity change from 0 to 256 [ 74.573940][ T5362] loop1: detected capacity change from 0 to 32768 [ 74.610965][ T5362] ======================================================= [ 74.610965][ T5362] WARNING: The mand mount option has been deprecated and [ 74.610965][ T5362] and is ignored by this kernel. Remove the mand [ 74.610965][ T5362] option from the mount to silence this warning. [ 74.610965][ T5362] ======================================================= [ 74.681631][ T5378] loop5: detected capacity change from 0 to 736 [ 74.867112][ T5362] JBD2: Ignoring recovery information on journal [ 74.876193][ T5378] rock: directory entry would overflow storage [ 74.947370][ T5382] loop0: detected capacity change from 0 to 1024 [ 74.954096][ T5378] rock: sig=0x3b10, size=4, remaining=3 [ 75.051986][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 75.061044][ T5386] openvswitch: netlink: Actions may not be safe on all matching packets [ 75.073344][ T5382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.120031][ T5390] loop4: detected capacity change from 0 to 16 [ 75.151939][ T5362] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 75.333402][ T5390] erofs: (device loop4): mounted with root inode @ nid 36. [ 75.431850][ T29] audit: type=1800 audit(1728261451.511:2): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.21" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 75.540743][ T60] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.649776][ T5222] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.706477][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.867003][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.892791][ T5223] ocfs2: Unmounting device (7,1) on (node local) [ 75.930813][ T60] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 75.978156][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.053559][ T60] usb 4-1: config 0 descriptor?? [ 76.061535][ T5236] Bluetooth: hci3: command tx timeout [ 76.513022][ T60] cypress 0003:04B4:07B1.0001: unknown main item tag 0x6 [ 76.520211][ T60] cypress 0003:04B4:07B1.0001: item fetching failed at offset 4/5 [ 76.581379][ T60] cypress 0003:04B4:07B1.0001: parse failed [ 76.587369][ T60] cypress 0003:04B4:07B1.0001: probe with driver cypress failed with error -22 [ 76.601776][ T5392] loop2: detected capacity change from 0 to 32768 [ 76.635449][ T5392] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.18 (5392) [ 76.744265][ T5290] usb 4-1: USB disconnect, device number 2 [ 76.850454][ T5392] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.870678][ T5392] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 76.899909][ T5392] BTRFS info (device loop2): using free-space-tree [ 77.266216][ T5411] loop5: detected capacity change from 0 to 32768 [ 77.278089][ T5411] XFS: ikeep mount option is deprecated. [ 77.557706][ T5411] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 78.109946][ T5464] loop0: detected capacity change from 0 to 32768 [ 78.206217][ T5464] (syz.0.40,5464,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xe8c22034. Applying ECC. [ 78.213055][ T5392] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 78.221638][ T5411] XFS (loop5): Ending clean mount [ 78.306163][ T5464] (syz.0.40,5464,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 78.350790][ T5411] XFS (loop5): Quotacheck needed: Please wait. [ 78.369267][ T5464] (syz.0.40,5464,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 78.448150][ T5411] XFS (loop5): Quotacheck: Done. [ 78.454287][ T5464] JBD2: Ignoring recovery information on journal [ 78.613624][ T5230] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.704310][ T5464] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 78.774527][ T5228] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 78.966684][ T5503] loop3: detected capacity change from 0 to 64 [ 79.008206][ T5464] ocfs2: Unmounting device (7,0) on (node local) [ 79.036421][ T5505] loop4: detected capacity change from 0 to 64 [ 79.360612][ T5503] syz.3.59: attempt to access beyond end of device [ 79.360612][ T5503] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 79.407131][ T5503] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 79.430290][ T5505] hfs: keylen 94 too large [ 79.530210][ T5503] Trying to free block not in datazone [ 79.812426][ T5517] loop5: detected capacity change from 0 to 32768 [ 79.824845][ T5517] XFS: ikeep mount option is deprecated. [ 79.830812][ T5517] XFS: noikeep mount option is deprecated. [ 79.941472][ T5520] loop4: detected capacity change from 0 to 32768 [ 80.149570][ T5517] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 80.240568][ T5290] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.258921][ T5520] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 80.273718][ T5517] XFS (loop5): Ending clean mount [ 80.289545][ T5517] XFS (loop5): Quotacheck needed: Please wait. [ 80.344237][ T5520] syz.4.66 (5520) used greatest stack depth: 17240 bytes left [ 80.401623][ T5224] ocfs2: Unmounting device (7,4) on (node local) [ 80.408085][ T5517] XFS (loop5): Quotacheck: Done. [ 80.433460][ T5290] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 80.463432][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.495286][ T5290] usb 2-1: config 0 descriptor?? [ 80.562885][ T5228] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 80.961780][ T5290] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0 [ 81.026092][ T5290] hid-alps 0003:044E:120B.0002: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.1-1/input0 [ 81.091837][ T5531] loop3: detected capacity change from 0 to 32768 [ 81.131401][ T929] cfg80211: failed to load regulatory.db [ 81.141046][ T5531] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.68 (5531) [ 81.209068][ T5290] usb 2-1: USB disconnect, device number 2 [ 81.327461][ T5560] loop4: detected capacity change from 0 to 64 [ 81.345264][ T5531] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 81.357155][ T5531] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 81.366323][ T5531] BTRFS info (device loop3): using free-space-tree [ 81.470618][ T5289] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.640773][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.658120][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.670045][ T5289] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 81.679296][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.736878][ T5289] usb 3-1: config 0 descriptor?? [ 82.061235][ T5232] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 82.206799][ T5289] steelseries 0003:1038:12B6.0003: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 82.354508][ T5597] capability: warning: `syz.3.90' uses deprecated v2 capabilities in a way that may be insecure [ 82.400589][ T5289] steelseries 0003:1038:12B6.0003: hid_hw_raw_request() failed with -71 [ 82.463305][ T5289] usb 3-1: USB disconnect, device number 2 [ 82.743023][ T5608] loop5: detected capacity change from 0 to 16 [ 82.756374][ T5608] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 82.763115][ T5609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 82.819063][ T5584] loop0: detected capacity change from 0 to 32768 [ 82.898955][ T5584] [ 82.898955][ T5584] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.898955][ T5584] [ 82.929131][ T5612] Bluetooth: MGMT ver 1.23 [ 83.047668][ T5584] [ 83.047668][ T5584] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.047668][ T5584] [ 83.114403][ T5584] [ 83.114403][ T5584] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.114403][ T5584] [ 83.155091][ T5617] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 83.189143][ T5617] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.100'. [ 83.195401][ T5584] [ 83.195401][ T5584] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.195401][ T5584] [ 83.229470][ T5617] netlink: 'syz.2.100': attribute type 2 has an invalid length. [ 83.269510][ T5619] [ 83.269510][ T5619] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.269510][ T5619] [ 83.289173][ T5617] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 83.301453][ T5584] [ 83.301453][ T5584] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.301453][ T5584] [ 83.342853][ T5584] [ 83.342853][ T5584] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.342853][ T5584] [ 83.370230][ T5619] [ 83.370230][ T5619] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.370230][ T5619] [ 83.396011][ T5584] [ 83.396011][ T5584] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.396011][ T5584] [ 83.457460][ T110] [ 83.457460][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.457460][ T110] [ 83.609061][ T5591] loop1: detected capacity change from 0 to 40427 [ 83.619891][ T5222] [ 83.619891][ T5222] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.619891][ T5222] [ 83.624719][ T5591] F2FS-fs (loop1): Invalid segment/section count (458776 != 24 * 1) [ 83.658014][ T5591] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 83.674549][ T5222] [ 83.674549][ T5222] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.674549][ T5222] [ 83.706574][ T5591] F2FS-fs (loop1): invalid crc value [ 83.736989][ T5591] F2FS-fs (loop1): Found nat_bits in checkpoint [ 83.761585][ T60] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.925526][ T5591] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 83.942590][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.954948][ T5591] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 83.966691][ T60] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 83.994202][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.031924][ T60] usb 4-1: config 0 descriptor?? [ 84.041582][ T5289] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.222013][ T5289] usb 3-1: Using ep0 maxpacket: 32 [ 84.259086][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 84.262990][ T5289] usb 3-1: unable to get BOS descriptor or descriptor too short [ 84.308404][ T5289] usb 3-1: config 127 has an invalid interface number: 25 but max is 0 [ 84.329155][ T5289] usb 3-1: config 127 has no interface number 0 [ 84.335603][ T5289] usb 3-1: config 127 interface 25 has no altsetting 0 [ 84.368410][ T5289] usb 3-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 84.422883][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.438610][ T5289] usb 3-1: Product: syz [ 84.443666][ T929] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 84.446493][ T5289] usb 3-1: Manufacturer: syz [ 84.463248][ T5289] usb 3-1: SerialNumber: syz [ 84.476213][ T60] hid-steam 0003:28DE:1205.0004: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 84.559243][ T5652] openvswitch: netlink: Actions may not be safe on all matching packets [ 84.590005][ T60] hid-steam 0003:28DE:1205.0004: Steam Controller 'XXXXXXXXXX' connected [ 84.602487][ T60] input: Steam Deck as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1205.0004/input/input5 [ 84.615985][ T60] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1205.0004/input/input6 [ 84.716686][ T929] usb 6-1: Using ep0 maxpacket: 32 [ 84.717677][ T5289] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 84.730372][ T929] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 251, using maximum allowed: 30 [ 84.730418][ T929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.730552][ T929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.730583][ T929] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 84.730633][ T929] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 84.730662][ T929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.732922][ T929] usb 6-1: config 0 descriptor?? [ 84.790364][ T60] hid-steam 0003:28DE:1205.0005: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 84.796350][ T60] usb 4-1: USB disconnect, device number 3 [ 85.044623][ T5663] netlink: 'syz.4.119': attribute type 1 has an invalid length. [ 85.044652][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'. [ 85.071816][ T60] hid-steam 0003:28DE:1205.0004: Steam Controller 'XXXXXXXXXX' disconnected [ 85.182918][ T929] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 85.186322][ T929] koneplus 0003:1E7D:2D51.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 85.342656][ T5289] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 85.351425][ T60] usb 6-1: USB disconnect, device number 2 [ 85.520202][ T5671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.123'. [ 85.540246][ T5669] loop0: detected capacity change from 0 to 2048 [ 85.567619][ T5289] usb 3-1: unable to get BOS descriptor or descriptor too short [ 85.606137][ T5289] usb 3-1: device firmware changed [ 85.622143][ T5669] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 85.627548][ T5289] ueagle-atm 3-1:127.25: usbatm_usb_probe: bind failed: -19! [ 85.710118][ T5289] usb 3-1: USB disconnect, device number 3 [ 85.891768][ T5665] loop1: detected capacity change from 0 to 32768 [ 86.089352][ T5667] loop4: detected capacity change from 0 to 40427 [ 86.115695][ T5665] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.139117][ T5667] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.154887][ T5691] IPVS: Error joining to the multicast group [ 86.200736][ T5289] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.391564][ T5697] netlink: 'syz.0.130': attribute type 1 has an invalid length. [ 86.414465][ T5698] loop5: detected capacity change from 0 to 8 [ 86.489819][ T5665] XFS (loop1): Ending clean mount [ 86.495103][ T5667] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 86.564752][ T5289] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 86.574070][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.582725][ T5289] usb 4-1: Product: syz [ 86.583660][ T5665] XFS (loop1): Quotacheck needed: Please wait. [ 86.586884][ T5289] usb 4-1: Manufacturer: syz [ 86.586908][ T5289] usb 4-1: SerialNumber: syz [ 86.605663][ T5289] usb 4-1: config 0 descriptor?? [ 86.620034][ T5698] SQUASHFS error: xz decompression failed, data probably corrupt [ 86.629464][ T5698] SQUASHFS error: Failed to read block 0xa8: -5 [ 86.631570][ T5289] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 86.644488][ T5698] SQUASHFS error: xz decompression failed, data probably corrupt [ 86.652763][ T5698] SQUASHFS error: Failed to read block 0xa8: -5 [ 86.659706][ T29] audit: type=1800 audit(1728261462.741:3): pid=5698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.131" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 86.732622][ T5702] loop2: detected capacity change from 0 to 2048 [ 86.767536][ T5665] XFS (loop1): Quotacheck: Done. [ 86.796315][ T5702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.810516][ T29] audit: type=1800 audit(1728261462.891:4): pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.120" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 86.882868][ T5702] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.990347][ T5223] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.001590][ T5702] fscrypt (loop2, inode 13): Error -61 getting encryption context [ 87.059324][ T5230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.084411][ T5289] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 87.405747][ T5289] usb 4-1: USB disconnect, device number 4 [ 87.733882][ T5731] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 87.745292][ T5733] loop5: detected capacity change from 0 to 1024 [ 87.786588][ T5733] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c02c, mo2=0003] [ 87.795147][ T5733] System zones: 0-1, 3-36 [ 87.814731][ T5733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.870133][ T5737] loop4: detected capacity change from 0 to 256 [ 87.947619][ T5741] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2793: inode #2: comm syz.5.145: corrupted in-inode xattr: bad e_name length [ 87.992367][ T5741] EXT4-fs (loop5): Remounting filesystem read-only [ 87.999233][ T5741] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 88.193667][ T5228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.303196][ T5753] loop2: detected capacity change from 0 to 1024 [ 88.391480][ T5289] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.569813][ T5289] usb 2-1: Using ep0 maxpacket: 16 [ 88.596569][ T5289] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 88.608561][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.634212][ T5289] usb 2-1: Product: syz [ 88.651443][ T5289] usb 2-1: Manufacturer: syz [ 88.656091][ T5289] usb 2-1: SerialNumber: syz [ 88.679497][ T5289] r8152-cfgselector 2-1: Unknown version 0x0000 [ 88.686557][ T5289] r8152-cfgselector 2-1: config 0 descriptor?? [ 88.768179][ T5770] netlink: 'syz.4.160': attribute type 30 has an invalid length. [ 89.025926][ T5773] loop2: detected capacity change from 0 to 4096 [ 89.121653][ T929] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 89.156410][ T29] audit: type=1326 audit(1728261465.241:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.5.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb550f7dff9 code=0x7fc00000 [ 89.165260][ T5773] ntfs3: loop2: failed to convert "0000" to cp949 [ 89.247312][ T5773] ntfs3: loop2: failed to convert name for inode 1e. [ 89.673530][ T5794] loop5: detected capacity change from 0 to 1024 [ 89.762574][ T5794] hfsplus: request for non-existent node 3 in B*Tree [ 89.769479][ T5794] hfsplus: request for non-existent node 3 in B*Tree [ 89.772370][ T5777] loop3: detected capacity change from 0 to 32768 [ 89.807100][ T5797] loop1: detected capacity change from 0 to 512 [ 89.828728][ T5799] loop2: detected capacity change from 0 to 16 [ 89.863591][ T5797] EXT4-fs (loop1): 1 truncate cleaned up [ 89.876728][ T5799] erofs: (device loop2): mounted with root inode @ nid 36. [ 89.892837][ T5797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.951740][ T5802] process 'syz.0.175' launched '/dev/fd/3' with NULL argv: empty string added [ 89.963398][ T5799] erofs: (device loop2): erofs_map_blocks_flatmode: inline data across blocks @ nid 36 [ 89.980740][ T5799] syz.2.174: attempt to access beyond end of device [ 89.980740][ T5799] loop2: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 90.195281][ T5223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.339279][ T5812] usb usb1: usbfs: process 5812 (syz.0.181) did not claim interface 0 before use [ 91.279957][ T5832] pimreg: entered allmulticast mode [ 91.307645][ T5832] pimreg: left allmulticast mode [ 91.476900][ T5836] capability: warning: `syz.4.192' uses 32-bit capabilities (legacy support in use) [ 91.617239][ T5816] loop1: detected capacity change from 0 to 32768 [ 91.626963][ T5838] loop3: detected capacity change from 0 to 256 [ 91.637052][ T5816] btrfs: Deprecated parameter 'usebackuproot' [ 91.679586][ T5816] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 91.742362][ T5816] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.180 (5816) [ 91.812341][ T5819] loop5: detected capacity change from 0 to 32768 [ 91.849393][ T5821] loop2: detected capacity change from 0 to 32768 [ 91.872383][ T5816] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 91.888529][ T5819] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.185 (5819) [ 91.914418][ T5823] loop0: detected capacity change from 0 to 32768 [ 91.940699][ T5816] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 91.978714][ T5816] BTRFS info (device loop1): disk space caching is enabled [ 91.997438][ T5847] loop4: detected capacity change from 0 to 256 [ 92.006689][ T5816] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 92.061642][ T5847] exfat: Deprecated parameter 'utf8' [ 92.088818][ T5847] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 92.174013][ T5854] ucma_write: process 64 (syz.3.197) changed security contexts after opening file descriptor, this is not allowed. [ 92.302759][ T5819] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.318129][ T5823] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 92.319408][ T5819] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 92.336289][ T5819] BTRFS info (device loop5): using free-space-tree [ 92.340917][ T5821] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 92.492235][ T5222] ocfs2: Unmounting device (7,0) on (node local) [ 92.560209][ T5821] XFS (loop2): Ending clean mount [ 92.590978][ T5821] XFS (loop2): Quotacheck needed: Please wait. [ 92.723789][ T5899] warning: `syz.4.204' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.802416][ T5897] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.203'. [ 92.846939][ T5897] openvswitch: netlink: Actions may not be safe on all matching packets [ 92.862041][ T5819] BTRFS error (device loop5): balance: invalid convert data profile raid1c4 [ 92.907650][ T5816] BTRFS info (device loop1): rebuilding free space tree [ 93.028781][ T5228] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.043697][ T5821] XFS (loop2): Quotacheck: Done. [ 93.054446][ T5816] BTRFS info (device loop1): disabling free space tree [ 93.061729][ T5816] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 93.072466][ T5816] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 93.355009][ T5230] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 93.471344][ T5223] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.610131][ T5908] loop0: detected capacity change from 0 to 32768 [ 93.617446][ T5908] XFS: attr2 mount option is deprecated. [ 93.623270][ T5908] XFS: ikeep mount option is deprecated. [ 93.628931][ T5908] XFS: noikeep mount option is deprecated. [ 93.721206][ T5908] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 94.223079][ T5908] XFS (loop0): Ending clean mount [ 94.246482][ T5908] XFS (loop0): Quotacheck needed: Please wait. [ 94.304585][ T5908] XFS (loop0): Quotacheck: Done. [ 94.442007][ T60] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.498636][ T5222] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 94.510949][ T929] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.620727][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 94.631828][ T60] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 94.640647][ T60] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 94.649276][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 94.671120][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 94.706574][ T929] usb 2-1: Using ep0 maxpacket: 8 [ 94.714369][ T929] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 94.725901][ T929] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 94.738040][ T60] usb 5-1: config 1 has no interface number 0 [ 94.746694][ T60] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.767992][ T929] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.786087][ T60] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 94.817271][ T929] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.833381][ T929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.843253][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 94.857186][ T929] usb 2-1: Product: syz [ 94.862126][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.882023][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.892232][ T60] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 94.901822][ T929] usb 2-1: Manufacturer: syz [ 94.906442][ T929] usb 2-1: SerialNumber: syz [ 94.918380][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.926681][ T25] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 94.948532][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.986248][ T60] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 95.009596][ T25] usb 6-1: config 0 descriptor?? [ 95.029901][ T5959] loop0: detected capacity change from 0 to 256 [ 95.061059][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.250155][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 95.277716][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 95.301311][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 95.320560][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.348300][ T8] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 95.355195][ T929] usb 2-1: 0:2 : does not exist [ 95.358045][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.396031][ T8] usb 3-1: Product: syz [ 95.412982][ T8] usb 3-1: Manufacturer: syz [ 95.417608][ T8] usb 3-1: SerialNumber: syz [ 95.446600][ T8] usb 3-1: config 0 descriptor?? [ 95.472552][ T25] savu 0003:1E7D:2D5A.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 95.486483][ T8] redrat3 3-1:0.0: Couldn't find all endpoints [ 95.528614][ T5967] loop0: detected capacity change from 0 to 512 [ 95.562986][ T8] usb 2-1: USB disconnect, device number 4 [ 95.572166][ T60] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 95.631714][ T5967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.678570][ T60] usb 6-1: USB disconnect, device number 3 [ 95.685949][ T5967] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.697509][ T1161] usb 3-1: USB disconnect, device number 4 [ 95.793394][ T8] usb 5-1: USB disconnect, device number 2 [ 95.812120][ T8] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 95.955082][ T5222] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.230600][ T1161] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.247216][ T5980] loop3: detected capacity change from 0 to 4096 [ 96.321942][ T5980] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 96.409508][ T5980] ntfs3: loop3: Failed to load $MFT (-22). [ 96.433501][ T5986] loop0: detected capacity change from 0 to 512 [ 96.436425][ T1161] usb 3-1: Using ep0 maxpacket: 16 [ 96.450401][ T1161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.474506][ T1161] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.530705][ T1161] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 96.550503][ T1161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.560269][ T1161] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 96.642482][ T5986] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 96.662100][ T1161] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 96.671328][ T1161] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 96.704260][ T1161] usb 3-1: Product: syz [ 96.711993][ T1161] usb 3-1: Manufacturer: syz [ 96.716701][ T1161] usb 3-1: SerialNumber: syz [ 96.793872][ T1161] usb 3-1: config 0 descriptor?? [ 96.856004][ T1161] usb 3-1: NFC: intf ffff88805b05c000 id ffffffff8f31a3c0 [ 96.969936][ T1161] nfcmrvl 3-1:0.0: NFC: registered with nci successfully [ 97.068825][ T1161] usb 3-1: USB disconnect, device number 5 [ 97.119473][ T6009] loop0: detected capacity change from 0 to 64 [ 97.124657][ T1161] usb 3-1: NFC: intf ffff88805b05c000 [ 97.595994][ T5994] loop5: detected capacity change from 0 to 32768 [ 97.763067][ T5994] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 97.775142][ T6006] loop3: detected capacity change from 0 to 32768 [ 97.828748][ T6020] loop0: detected capacity change from 0 to 4096 [ 97.841374][ T6020] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 97.906922][ T6030] Option ' ' to dns_resolver key: bad/missing value [ 98.090361][ T5994] XFS (loop5): Ending clean mount [ 98.216722][ T6016] loop1: detected capacity change from 0 to 40427 [ 98.232727][ T6020] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 98.235719][ T6016] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 98.247664][ T6016] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 98.262458][ T6016] F2FS-fs (loop1): Found nat_bits in checkpoint [ 98.281782][ T5228] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 98.337376][ T6020] ntfs3: loop0: ino=1b, "file0" failed to parse mft record [ 98.398826][ T6013] loop4: detected capacity change from 0 to 32768 [ 98.400644][ T6020] ntfs3: loop0: ino=1b, "file0" attr_set_size [ 98.423500][ T6013] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.247 (6013) [ 98.465493][ T6013] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.476060][ T6013] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 98.526235][ T6013] BTRFS info (device loop4): using free-space-tree [ 98.667024][ T6051] netlink: 256 bytes leftover after parsing attributes in process `syz.2.256'. [ 98.759335][ T6016] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 98.787602][ T6016] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.131872][ T6040] loop3: detected capacity change from 0 to 32768 [ 99.160620][ T25] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 99.219948][ T6040] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.333385][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.368749][ T25] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 99.402603][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.421556][ T5224] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.462837][ T25] usb 3-1: config 0 descriptor?? [ 99.528357][ T6040] XFS (loop3): Ending clean mount [ 99.535625][ T6040] XFS (loop3): Quotacheck needed: Please wait. [ 99.630806][ T6040] XFS (loop3): Quotacheck: Done. [ 99.869162][ T5232] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.894742][ T25] mcp2221 0003:04D8:00DD.0008: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 100.104293][ T25] usb 3-1: USB disconnect, device number 6 [ 100.616859][ T6102] nbd: must specify at least one socket [ 100.893422][ T6116] loop0: detected capacity change from 0 to 8 [ 101.047486][ T6090] loop5: detected capacity change from 0 to 32768 [ 101.062297][ T6090] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.265 (6090) [ 101.084925][ T6116] SQUASHFS error: xz decompression failed, data probably corrupt [ 101.130752][ T6116] SQUASHFS error: Failed to read block 0xa8: -5 [ 101.150670][ T60] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.179199][ T6116] SQUASHFS error: xz decompression failed, data probably corrupt [ 101.220658][ T6090] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 101.248002][ T6116] SQUASHFS error: Failed to read block 0xa8: -5 [ 101.322634][ T6090] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 101.333945][ T29] audit: type=1800 audit(1728261477.361:6): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.276" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 101.353621][ T6090] BTRFS info (device loop5): using free-space-tree [ 101.397177][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 101.465123][ T6123] ip6gretap1: entered allmulticast mode [ 101.496744][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 101.508990][ T60] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 101.521833][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.547995][ T60] usb 4-1: Product: syz [ 101.565029][ T60] usb 4-1: Manufacturer: syz [ 101.573267][ T6105] loop4: detected capacity change from 0 to 40427 [ 101.620767][ T6105] F2FS-fs (loop4): Found nat_bits in checkpoint [ 101.691138][ T60] usb 4-1: SerialNumber: syz [ 101.727749][ T60] usb 4-1: config 0 descriptor?? [ 101.767037][ T60] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.781120][ T6090] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 101.819636][ T6105] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 101.894817][ T6146] loop0: detected capacity change from 0 to 256 [ 102.022626][ T60] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 102.030627][ T6146] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 102.051542][ T5228] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 102.080114][ T5224] syz-executor: attempt to access beyond end of device [ 102.080114][ T5224] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.137744][ T5224] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 102.143728][ T5251] udevd[5251]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.267563][ T60] usb 4-1: USB disconnect, device number 5 [ 102.565205][ T6133] loop1: detected capacity change from 0 to 32768 [ 102.726442][ T6133] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 102.856689][ T6133] (syz.1.280,6133,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 102.978616][ T6170] Bluetooth: MGMT ver 1.23 [ 102.980328][ T6133] (syz.1.280,6133,0):__ocfs2_delete_entry:1149 ERROR: status = -5 [ 103.083698][ T6133] (syz.1.280,6133,0):ocfs2_unlink:989 ERROR: status = -5 [ 103.170724][ T6133] (syz.1.280,6133,1):ocfs2_unlink:1042 ERROR: status = -5 [ 103.361108][ T6156] loop0: detected capacity change from 0 to 32768 [ 103.362398][ T5223] ocfs2: Unmounting device (7,1) on (node local) [ 103.443571][ T6156] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.286 (6156) [ 103.530117][ T6156] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 103.550729][ T6187] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 103.555356][ T6156] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 103.557428][ T6187] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.574368][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.585871][ T6187] vhci_hcd vhci_hcd.0: Device attached [ 103.608700][ T6156] BTRFS info (device loop0): using free-space-tree [ 103.647550][ T6189] vhci_hcd: connection closed [ 103.671655][ T11] vhci_hcd: stop threads [ 103.689384][ T11] vhci_hcd: release socket [ 103.758182][ T11] vhci_hcd: disconnect device [ 104.085982][ T5293] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.220693][ T29] audit: type=1800 audit(1728261480.291:7): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.286" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 104.363793][ T5222] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 104.441462][ T5293] usb 5-1: Using ep0 maxpacket: 32 [ 104.451872][ T5293] usb 5-1: config 0 has an invalid interface number: 111 but max is 0 [ 104.467896][ T5293] usb 5-1: config 0 has no interface number 0 [ 104.489637][ T5293] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 104.501139][ T60] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 104.517073][ T5293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.528531][ T5293] usb 5-1: Product: syz [ 104.549685][ T5293] usb 5-1: Manufacturer: syz [ 104.565826][ T5293] usb 5-1: SerialNumber: syz [ 104.582771][ T5293] usb 5-1: config 0 descriptor?? [ 104.670776][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 104.702942][ T5289] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 104.710329][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.739535][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.820707][ T60] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 104.839252][ T5293] snd-usb-6fire 5-1:0.111: unable to receive device firmware state. [ 104.839364][ T6237] loop1: detected capacity change from 0 to 256 [ 104.862101][ T5293] snd-usb-6fire 5-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 104.880598][ T5289] usb 4-1: Using ep0 maxpacket: 16 [ 104.888054][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.897358][ T60] usb 6-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 104.923558][ T5293] usb 5-1: USB disconnect, device number 3 [ 104.936450][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.949175][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.962543][ T5289] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 104.993687][ T60] usb 6-1: config 0 descriptor?? [ 105.005224][ T6237] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.030640][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.047325][ T6237] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 105.061253][ T5289] usb 4-1: config 0 descriptor?? [ 105.098109][ T6237] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 105.172739][ T29] audit: type=1800 audit(1728261481.261:8): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.315" name="bus" dev="loop1" ino=1048635 res=0 errno=0 [ 105.459959][ T60] apple 0003:05AC:0274.0009: item fetching failed at offset 6/70 [ 105.483355][ T60] apple 0003:05AC:0274.0009: parse failed [ 105.489165][ T60] apple 0003:05AC:0274.0009: probe with driver apple failed with error -22 [ 105.508918][ T6248] loop2: detected capacity change from 0 to 2048 [ 105.521289][ T5289] waltop 0003:172F:0037.000A: item fetching failed at offset 4/6 [ 105.567608][ T5289] waltop 0003:172F:0037.000A: probe with driver waltop failed with error -22 [ 105.787870][ T5289] usb 6-1: USB disconnect, device number 4 [ 105.822128][ T1161] usb 4-1: USB disconnect, device number 6 [ 105.905462][ T29] audit: type=1326 audit(1728261481.821:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.0.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c817dff9 code=0x7ffc0000 [ 105.945483][ T6257] loop2: detected capacity change from 0 to 512 [ 105.947887][ T29] audit: type=1326 audit(1728261481.821:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.0.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c817dff9 code=0x7ffc0000 [ 105.985076][ T6257] EXT4-fs: Ignoring removed i_version option [ 106.000904][ T29] audit: type=1326 audit(1728261481.821:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.0.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f54c817dff9 code=0x7ffc0000 [ 106.050792][ T29] audit: type=1326 audit(1728261481.821:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.0.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c817dff9 code=0x7ffc0000 [ 106.088085][ T6261] netlink: 64126 bytes leftover after parsing attributes in process `syz.4.327'. [ 106.095904][ T29] audit: type=1326 audit(1728261481.821:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.0.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c817dff9 code=0x7ffc0000 [ 106.192720][ T6258] loop1: detected capacity change from 0 to 32768 [ 106.460429][ T6257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.474738][ T6257] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.523713][ T6258] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 106.652158][ T5230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.149601][ T6258] XFS (loop1): Ending clean mount [ 107.189753][ T6305] loop2: detected capacity change from 0 to 4096 [ 107.375306][ T5223] XFS (loop1): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 107.412574][ T6305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.465908][ T6297] loop5: detected capacity change from 0 to 32768 [ 107.489714][ T6297] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.338 (6297) [ 107.534587][ T6297] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.556022][ T6297] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 107.591166][ T6297] BTRFS info (device loop5): using free-space-tree [ 107.685655][ T29] audit: type=1800 audit(1728261483.771:14): pid=6305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.336" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 108.054428][ T5230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.323869][ T6357] netlink: 'syz.1.357': attribute type 16 has an invalid length. [ 108.345239][ T5228] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.361173][ T5240] udevd[5240]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [6354] terminated by signal 33 (Unknown signal 33) [ 108.450833][ T5289] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.536988][ T6361] loop2: detected capacity change from 0 to 8 [ 108.553617][ T6361] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 108.620777][ T5289] usb 4-1: Using ep0 maxpacket: 16 [ 108.661784][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.726173][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.756102][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.800529][ T5289] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 108.813811][ T6365] loop2: detected capacity change from 0 to 256 [ 108.844573][ T6364] loop1: detected capacity change from 0 to 1024 [ 108.870524][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.909931][ T6365] FAT-fs (loop2): Directory bread(block 64) failed [ 108.922125][ T5289] usb 4-1: config 0 descriptor?? [ 108.965852][ T6365] FAT-fs (loop2): Directory bread(block 65) failed [ 109.011128][ T6365] FAT-fs (loop2): Directory bread(block 66) failed [ 109.021589][ T6316] loop0: detected capacity change from 0 to 40427 [ 109.042699][ T6365] FAT-fs (loop2): Directory bread(block 67) failed [ 109.053265][ T6316] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 109.060295][ T6316] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 109.060678][ T6364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.090743][ T6365] FAT-fs (loop2): Directory bread(block 68) failed [ 109.137452][ T6316] F2FS-fs (loop0): invalid crc value [ 109.152636][ T6365] FAT-fs (loop2): Directory bread(block 69) failed [ 109.152763][ T6364] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.159446][ T6365] FAT-fs (loop2): Directory bread(block 70) failed [ 109.236142][ T6365] FAT-fs (loop2): Directory bread(block 71) failed [ 109.300679][ T6365] FAT-fs (loop2): Directory bread(block 72) failed [ 109.302164][ T6352] loop4: detected capacity change from 0 to 32768 [ 109.329966][ T6365] FAT-fs (loop2): Directory bread(block 73) failed [ 109.336840][ T6352] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.356 (6352) [ 109.355936][ T5289] ryos 0003:1E7D:31CE.000B: unknown main item tag 0x0 [ 109.363428][ T5289] ryos 0003:1E7D:31CE.000B: unbalanced delimiter at end of report description [ 109.386747][ T6352] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 109.397599][ T6352] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 109.397716][ T5289] ryos 0003:1E7D:31CE.000B: parse failed [ 109.407412][ T6352] BTRFS info (device loop4): using free-space-tree [ 109.434881][ T6316] F2FS-fs (loop0): Found nat_bits in checkpoint [ 109.454668][ T5289] ryos 0003:1E7D:31CE.000B: probe with driver ryos failed with error -22 [ 109.519252][ T5223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.607143][ T5289] usb 4-1: USB disconnect, device number 7 [ 109.711083][ T6316] F2FS-fs (loop0): Start checkpoint disabled! [ 109.794998][ T6316] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 109.821341][ T6316] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 110.226305][ T3007] kworker/u8:8: attempt to access beyond end of device [ 110.226305][ T3007] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 110.229480][ T5224] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 110.424827][ T3007] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 110.432104][ T3007] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 110.439922][ T3007] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 110.446896][ T3007] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 110.930840][ T6407] loop5: detected capacity change from 0 to 40427 [ 110.955249][ T6425] loop3: detected capacity change from 0 to 1024 [ 110.983834][ T6407] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 110.992347][ T6407] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 111.010730][ T6407] F2FS-fs (loop5): invalid crc value [ 111.023739][ T6407] F2FS-fs (loop5): Found nat_bits in checkpoint [ 111.060081][ T6425] EXT4-fs: Ignoring removed orlov option [ 111.071383][ T6425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.246232][ T6407] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 111.271812][ T6407] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 111.307884][ T6425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.570830][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 111.587539][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 111.621812][ T6443] loop0: detected capacity change from 0 to 4096 [ 111.641982][ T11] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 111.701677][ T5232] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.740029][ T11] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 111.761633][ T6443] ntfs3: loop0: ino=0, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 111.790857][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.990693][ T60] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.024496][ T6454] loop4: detected capacity change from 0 to 32768 [ 114.120152][ T6454] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.391 (6454) [ 114.190658][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 114.217291][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.291231][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.367658][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.453992][ T60] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 114.470901][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 114.527499][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.558791][ T6450] loop1: detected capacity change from 0 to 40427 [ 114.613573][ T60] usb 3-1: config 0 descriptor?? [ 114.633318][ T6450] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 114.660584][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 114.676079][ T6450] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 114.711750][ T25] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 114.764731][ T25] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 114.793867][ T6450] F2FS-fs (loop1): invalid crc value [ 114.843168][ T6450] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 114.870930][ T25] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 114.920606][ T25] usb 6-1: config 250 has no interface number 0 [ 114.980683][ T25] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 115.075971][ T60] wacom 0003:056A:0022.000C: unbalanced collection at end of report description [ 115.118766][ T25] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 115.178333][ T60] wacom 0003:056A:0022.000C: parse failed [ 115.212499][ T25] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 115.247351][ T60] wacom 0003:056A:0022.000C: probe with driver wacom failed with error -22 [ 115.301127][ T25] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 115.336995][ T60] usb 3-1: USB disconnect, device number 7 [ 115.424302][ T25] usb 6-1: config 250 interface 228 has no altsetting 0 [ 115.490016][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 115.570717][ T25] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 115.633007][ T25] usb 6-1: Product: syz [ 115.637224][ T25] usb 6-1: SerialNumber: syz [ 115.732626][ T25] hub 6-1:250.228: bad descriptor, ignoring hub [ 115.790547][ T25] hub 6-1:250.228: probe with driver hub failed with error -5 [ 115.992573][ T25] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 116.160913][ T25] usb 6-1: USB disconnect, device number 5 [ 116.178588][ T6507] loop3: detected capacity change from 0 to 4096 [ 116.240106][ T25] usblp0: removed [ 116.272342][ T6507] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 116.598496][ T6507] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 116.605741][ T929] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 116.708316][ T6511] loop0: detected capacity change from 0 to 4096 [ 116.858598][ T929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.946008][ T929] usb 3-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 117.041477][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.062218][ T6513] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.152111][ T929] usb 3-1: config 0 descriptor?? [ 117.685999][ T929] wacom 0003:056A:00B3.000D: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 117.793156][ T929] wacom 0003:056A:00B3.000D: hidraw0: USB HID v0.01 Device [HID 056a:00b3] on usb-dummy_hcd.2-1/input0 [ 117.909146][ T929] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B3.000D/input/input9 [ 118.074097][ T6523] loop3: detected capacity change from 0 to 1024 [ 118.110802][ T929] usb 3-1: USB disconnect, device number 8 [ 118.138504][ T6504] loop4: detected capacity change from 0 to 32768 [ 118.220462][ C0] sched: DL replenish lagged too much [ 118.243412][ T6504] (syz.4.412,6504,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xe8c22034. Applying ECC. [ 118.388471][ T6504] (syz.4.412,6504,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 118.578302][ T6504] (syz.4.412,6504,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 118.908732][ T6504] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 118.910879][ T6504] (syz.4.412,6504,1):ocfs2_initialize_super:2281 ERROR: status = -12 [ 118.987412][ T6531] loop2: detected capacity change from 0 to 8 [ 119.034407][ T6504] (syz.4.412,6504,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 119.364590][ T6531] SQUASHFS error: xz decompression failed, data probably corrupt [ 119.470653][ T6531] SQUASHFS error: Failed to read block 0xa8: -5 [ 119.538816][ T6531] SQUASHFS error: xz decompression failed, data probably corrupt [ 119.618854][ T6531] SQUASHFS error: Failed to read block 0xa8: -5 [ 119.680329][ T29] audit: type=1800 audit(1728261495.741:15): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.425" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 120.723280][ T6520] loop0: detected capacity change from 0 to 32768 [ 120.816127][ T6520] read_mapping_page failed! [ 120.871549][ T6520] jfs_mount: dbMount failed w/rc = -5 [ 120.916693][ T6520] Mount JFS Failure: -5 [ 120.970762][ T6520] jfs_mount failed w/return code = -5 [ 121.419763][ T6562] netlink: 'syz.3.440': attribute type 142 has an invalid length. [ 123.291783][ T6585] loop2: detected capacity change from 0 to 64 [ 124.391779][ T6598] loop5: detected capacity change from 0 to 24 [ 124.461466][ T6598] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 124.584596][ T6598] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 124.752810][ T6598] romfs: read error for inode 0x70040 [ 126.734459][ T6631] sp0: Synchronizing with TNC [ 126.828229][ T6635] loop5: detected capacity change from 0 to 512 [ 126.987955][ T6635] Quota error (device loop5): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 127.066030][ T6635] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 127.113987][ T6635] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.472: Failed to acquire dquot type 1 [ 127.231473][ T6635] EXT4-fs (loop5): 1 truncate cleaned up [ 127.271760][ T6635] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.337312][ T6635] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.371717][ T6630] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 127.385134][ T6630] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 127.518465][ T6630] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.561534][ T6630] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 127.645536][ T5228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.691910][ T6630] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.727262][ T6630] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 127.791003][ T6630] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.835121][ T6630] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 127.935292][ T6630] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 127.966099][ T6645] syz.0.476: attempt to access beyond end of device [ 127.966099][ T6645] nbd0: rw=0, sector=16, nr_sectors = 8 limit=0 [ 127.979619][ T6630] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 128.002040][ T6623] loop4: detected capacity change from 0 to 32768 [ 128.016099][ T6645] REISERFS warning (device nbd0): sh-2006 read_super_block: bread failed (dev nbd0, block 2, size 4096) [ 128.037069][ T6623] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.467 (6623) [ 128.074173][ T6645] syz.0.476: attempt to access beyond end of device [ 128.074173][ T6645] nbd0: rw=0, sector=128, nr_sectors = 8 limit=0 [ 128.095898][ T6630] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 128.127012][ T6630] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 128.139701][ T6623] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.162739][ T6645] REISERFS warning (device nbd0): sh-2006 read_super_block: bread failed (dev nbd0, block 16, size 4096) [ 128.175528][ T6623] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 128.208976][ T6645] REISERFS warning (device nbd0): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd0 [ 128.240126][ T6623] BTRFS info (device loop4): using free-space-tree [ 128.593911][ T5224] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.056229][ T6683] loop4: detected capacity change from 0 to 1024 [ 131.529364][ T6687] loop4: detected capacity change from 0 to 32768 [ 131.568738][ T6687] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.488 (6687) [ 131.650102][ T6687] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.700665][ T6687] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 131.709175][ T6687] BTRFS info (device loop4): using free-space-tree [ 131.958430][ T6681] loop3: detected capacity change from 0 to 65536 [ 132.028086][ T5224] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.080846][ T6681] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 132.310581][ T6681] XFS (loop3): Ending clean mount [ 132.331050][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.337457][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.504919][ T5232] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 132.524038][ T6713] loop4: detected capacity change from 0 to 2048 [ 132.647810][ T6713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.735959][ T6713] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.889855][ T6713] fscrypt (loop4, inode 13): Error -61 getting encryption context [ 133.121831][ T5224] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.367492][ T6733] ptrace attach of "./syz-executor exec"[5232] was attempted by "./syz-executor exec"[6733] [ 135.017562][ T6729] loop4: detected capacity change from 0 to 32768 [ 135.093749][ T6729] [ 135.093749][ T6729] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.093749][ T6729] [ 135.270866][ T950] [ 135.270866][ T950] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.270866][ T950] [ 135.308525][ T950] [ 135.308525][ T950] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.308525][ T950] [ 135.337833][ T110] [ 135.337833][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.337833][ T110] [ 135.348785][ T5224] [ 135.348785][ T5224] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.348785][ T5224] [ 135.389420][ T5224] [ 135.389420][ T5224] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.389420][ T5224] [ 135.657945][ T6735] loop3: detected capacity change from 0 to 32768 [ 135.816019][ T6735] ERROR: (device loop3): dbAlloc: unable to allocate blocks [ 135.816019][ T6735] [ 135.858358][ T6735] ERROR: (device loop3): remounting filesystem as read-only [ 135.877348][ T6735] jfs_mkdir: dtInsert returned -EIO [ 135.890715][ T6735] ERROR: (device loop3): jfs_mkdir: [ 135.890715][ T6735] [ 137.433880][ T5248] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 137.444181][ T5248] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 137.454704][ T5248] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 137.467352][ T5248] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 137.479886][ T5248] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 137.489754][ T5248] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 137.532517][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 137.541302][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 137.556702][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 137.575521][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 137.583488][ T5236] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 137.592641][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 137.971749][ T5248] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 137.983476][ T5248] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 137.992262][ T5248] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 138.016131][ T5248] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 138.024077][ T5248] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 138.031483][ T5248] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 139.016422][ T5248] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 139.025717][ T5248] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 139.033561][ T5248] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 139.042327][ T5248] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 139.050045][ T5248] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 139.076892][ T5248] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 139.234002][ T5248] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 139.244513][ T5248] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 139.254000][ T5248] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 139.262200][ T5248] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 139.269988][ T5248] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 139.281738][ T5248] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 139.660872][ T5248] Bluetooth: hci6: command tx timeout [ 140.060721][ T5248] Bluetooth: hci7: command tx timeout [ 141.180770][ T5248] Bluetooth: hci8: command tx timeout [ 141.341557][ T5248] Bluetooth: hci9: command tx timeout [ 141.740809][ T5248] Bluetooth: hci6: command tx timeout [ 142.140668][ T5248] Bluetooth: hci7: command tx timeout [ 143.260722][ T5248] Bluetooth: hci8: command tx timeout [ 143.420725][ T5248] Bluetooth: hci9: command tx timeout [ 143.825399][ T5248] Bluetooth: hci6: command tx timeout [ 144.220648][ T5248] Bluetooth: hci7: command tx timeout [ 145.340748][ T5248] Bluetooth: hci8: command tx timeout [ 145.502446][ T5248] Bluetooth: hci9: command tx timeout [ 145.900652][ T5248] Bluetooth: hci6: command tx timeout [ 146.305622][ T5248] Bluetooth: hci7: command tx timeout [ 147.354607][ T5236] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 147.366988][ T5236] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 147.375538][ T5236] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 147.384040][ T5236] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 147.395623][ T5236] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 147.416337][ T5236] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 147.424974][ T5236] Bluetooth: hci8: command tx timeout [ 147.581369][ T5236] Bluetooth: hci9: command tx timeout [ 147.876618][ T5229] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 147.885551][ T5229] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 147.893671][ T5229] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 147.903406][ T5229] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 147.912717][ T5229] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 147.921258][ T5229] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 149.500815][ T5229] Bluetooth: hci10: command tx timeout [ 149.980687][ T5229] Bluetooth: hci11: command tx timeout [ 151.580825][ T5229] Bluetooth: hci10: command tx timeout [ 152.070525][ T5229] Bluetooth: hci11: command tx timeout [ 153.664395][ T5229] Bluetooth: hci10: command tx timeout [ 154.140670][ T5229] Bluetooth: hci11: command tx timeout [ 155.740612][ T5229] Bluetooth: hci10: command tx timeout [ 156.220715][ T5229] Bluetooth: hci11: command tx timeout [ 193.761243][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.767756][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.490855][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.503561][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.511374][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.519783][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.532324][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 199.539809][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.807706][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.820826][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.828612][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.838896][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.846557][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 199.854122][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.139336][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.149062][ T5229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.165227][ T5229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 200.173382][ T5229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 200.181717][ T5229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 200.195354][ T5229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.258143][ T5236] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 200.269221][ T5236] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 200.278093][ T5236] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 200.286532][ T5236] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 200.294692][ T5236] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 200.310969][ T5236] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 201.580719][ T5236] Bluetooth: hci0: command tx timeout [ 201.900593][ T5236] Bluetooth: hci3: command tx timeout [ 202.220591][ T5236] Bluetooth: hci5: command tx timeout [ 202.383201][ T5236] Bluetooth: hci12: command tx timeout [ 203.660633][ T5236] Bluetooth: hci0: command tx timeout [ 203.987951][ T5236] Bluetooth: hci3: command tx timeout [ 204.300731][ T5236] Bluetooth: hci5: command tx timeout [ 204.460734][ T5236] Bluetooth: hci12: command tx timeout [ 205.746223][ T5236] Bluetooth: hci0: command tx timeout [ 206.060686][ T5236] Bluetooth: hci3: command tx timeout [ 206.380588][ T5236] Bluetooth: hci5: command tx timeout [ 206.540629][ T5236] Bluetooth: hci12: command tx timeout [ 207.821140][ T5236] Bluetooth: hci0: command tx timeout [ 207.885082][ T5229] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 207.894045][ T5229] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 207.903398][ T5229] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 207.913204][ T5229] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 207.921154][ T5229] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 207.929570][ T5229] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 208.140809][ T5229] Bluetooth: hci3: command tx timeout [ 208.456739][ T5236] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 208.464476][ T5248] Bluetooth: hci5: command tx timeout [ 208.472485][ T5236] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 208.484609][ T5236] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 208.492820][ T5236] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 208.501641][ T5236] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 208.508997][ T5236] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 208.625003][ T5236] Bluetooth: hci12: command tx timeout [ 209.983624][ T5236] Bluetooth: hci13: command tx timeout [ 210.540630][ T5236] Bluetooth: hci14: command tx timeout [ 212.060665][ T5236] Bluetooth: hci13: command tx timeout [ 212.620545][ T5236] Bluetooth: hci14: command tx timeout [ 214.140560][ T5236] Bluetooth: hci13: command tx timeout [ 214.700635][ T5236] Bluetooth: hci14: command tx timeout [ 216.220592][ T5236] Bluetooth: hci13: command tx timeout [ 216.780655][ T5236] Bluetooth: hci14: command tx timeout [ 255.191586][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.197951][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.960862][ T5229] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 259.971058][ T5229] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 259.982356][ T5229] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 259.991320][ T5229] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 259.999187][ T5229] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 260.007461][ T5229] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 260.167638][ T5236] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 260.177437][ T5236] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 260.186033][ T5236] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 260.194542][ T5236] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 260.202888][ T5236] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 260.213175][ T5236] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 260.438930][ T5249] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 260.454919][ T5249] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 260.480993][ T5249] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 260.489258][ T5249] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 260.497460][ T5249] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 260.508156][ T5249] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 260.587570][ T5246] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 260.599907][ T5246] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 260.608984][ T5246] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 260.619369][ T5246] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 260.627740][ T5246] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 260.635200][ T5246] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 262.060715][ T5246] Bluetooth: hci15: command tx timeout [ 262.300724][ T5246] Bluetooth: hci16: command tx timeout [ 262.460801][ T5249] Bluetooth: hci7: command 0x0406 tx timeout [ 262.467504][ T5249] Bluetooth: hci8: command 0x0406 tx timeout [ 262.473723][ T5243] Bluetooth: hci9: command 0x0406 tx timeout [ 262.479968][ T5246] Bluetooth: hci6: command 0x0406 tx timeout [ 262.552578][ T4616] Bluetooth: hci17: command tx timeout [ 262.700735][ T4616] Bluetooth: hci18: command tx timeout [ 264.140531][ T4616] Bluetooth: hci15: command tx timeout [ 264.380544][ T4616] Bluetooth: hci16: command tx timeout [ 264.620718][ T4616] Bluetooth: hci17: command tx timeout [ 264.782905][ T4616] Bluetooth: hci18: command tx timeout [ 266.220582][ T4616] Bluetooth: hci15: command tx timeout [ 266.460652][ T4616] Bluetooth: hci16: command tx timeout [ 266.700635][ T4616] Bluetooth: hci17: command tx timeout [ 266.860604][ T4616] Bluetooth: hci18: command tx timeout [ 268.319261][ T4616] Bluetooth: hci15: command tx timeout [ 268.500901][ T5236] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 268.511657][ T5236] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 268.519411][ T5236] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 268.527758][ T5236] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 268.538534][ T5236] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 268.545786][ T5248] Bluetooth: hci16: command tx timeout [ 268.556936][ T5248] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 268.791595][ T5248] Bluetooth: hci17: command tx timeout [ 268.941252][ T5248] Bluetooth: hci18: command tx timeout [ 268.994351][ T4616] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 269.005101][ T4616] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 269.023327][ T4616] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 269.031753][ T4616] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 269.039904][ T4616] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 269.048755][ T4616] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 270.620608][ T4616] Bluetooth: hci19: command tx timeout [ 271.101716][ T4616] Bluetooth: hci20: command tx timeout [ 272.640486][ T4616] Bluetooth: hci11: command 0x0406 tx timeout [ 272.646642][ T4616] Bluetooth: hci10: command 0x0406 tx timeout [ 272.700672][ T5248] Bluetooth: hci19: command tx timeout [ 273.180647][ T5248] Bluetooth: hci20: command tx timeout [ 274.780794][ T5248] Bluetooth: hci19: command tx timeout [ 275.260603][ T5248] Bluetooth: hci20: command tx timeout [ 276.860715][ T5248] Bluetooth: hci19: command tx timeout [ 277.340640][ T5248] Bluetooth: hci20: command tx timeout [ 285.260811][ T30] INFO: task syz.1.471:6629 blocked for more than 143 seconds. [ 285.268736][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 285.310546][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.319257][ T30] task:syz.1.471 state:D stack:23808 pid:6629 tgid:6629 ppid:5223 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 285.406598][ T30] Call Trace: [ 285.409934][ T30] [ 285.510455][ T30] __schedule+0x1895/0x4b30 [ 285.515073][ T30] ? __pfx___schedule+0x10/0x10 [ 285.519993][ T30] ? __pfx_lock_release+0x10/0x10 [ 285.610552][ T30] ? schedule+0x90/0x320 [ 285.614888][ T30] schedule+0x14b/0x320 [ 285.619103][ T30] schedule_timeout+0xb0/0x310 [ 285.670480][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 285.675933][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 285.745954][ T30] ? wait_for_completion+0x2fe/0x620 [ 285.777947][ T30] ? wait_for_completion+0x2fe/0x620 [ 285.807282][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 285.840599][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.846293][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 285.885785][ T30] ? wait_for_completion+0x2fe/0x620 [ 285.901097][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=-20 stuck for 159s! [ 285.911012][ C0] Showing busy workqueues and worker pools: [ 285.916929][ C0] workqueue events: flags=0x0 [ 285.921703][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=23 refcnt=24 [ 285.921759][ C0] pending: nsim_dev_trap_report_work, drm_fb_helper_damage_work, free_obj_work, 2*nsim_dev_trap_report_work, psi_avgs_work, 4*nsim_dev_hwstats_traffic_work, nsim_dev_trap_report_work, send_dm_alert, nsim_dev_trap_report_work, psi_avgs_work, vmstat_shepherd, send_dm_alert, ovs_dp_masks_rebalance, 2*nsim_dev_hwstats_traffic_work, nsim_dev_trap_report_work, 3*ovs_dp_masks_rebalance [ 285.922254][ C0] workqueue events_highpri: flags=0x10 [ 285.930538][ T30] wait_for_completion+0x355/0x620 [ 285.965507][ C0] pwq 3: cpus=0 node=0 flags=0x0 nice=-20 active=1 refcnt=3 [ 285.965571][ C0] pending: flush_backlog BAR(6629) [ 285.965627][ C0] workqueue events_long: flags=0x0 [ 285.994516][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 285.994578][ C0] pending: defense_work_handler [ 285.994632][ C0] workqueue events_power_efficient: flags=0x80 [ 286.013406][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=5 refcnt=6 [ 286.013459][ C0] in-flight: 9:neigh_periodic_work [ 286.013511][ C0] pending: wg_ratelimiter_gc_entries, fb_flashcursor, 2*neigh_managed_work [ 286.013622][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 286.013671][ C0] in-flight: 60:reg_check_chans_work [ 286.013726][ C0] workqueue mm_percpu_wq: flags=0x8 [ 286.053613][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.053636][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 286.053695][ C0] pending: vmstat_update [ 286.053804][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 286.059291][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 286.066583][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=10 [ 286.066624][ C0] in-flight: 2923:addrconf_verify_work [ 286.066673][ C0] inactive: 6*addrconf_verify_work [ 286.066716][ C0] workqueue bat_events: flags=0x6000a [ 286.066741][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 [ 286.066776][ C0] pending: batadv_nc_worker [ 286.066822][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.066837][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 286.066886][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 286.066961][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.066976][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 286.067026][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 286.067093][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.081516][ T30] ? __flush_work+0xe7/0xc50 [ 286.082983][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 286.083044][ C0] pending: wg_packet_encrypt_worker [ 286.083091][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.089865][ T30] __flush_work+0xa37/0xc50 [ 286.095737][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 286.095800][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 286.095883][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.095900][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 286.095949][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker [ 286.096046][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.109338][ T30] ? __flush_work+0xe7/0xc50 [ 286.113966][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 286.114026][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 286.114131][ C0] workqueue wg-kex-wg1: flags=0x24 [ 286.120712][ T30] ? __pfx___flush_work+0x10/0x10 [ 286.124240][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 286.124299][ C0] pending: wg_packet_handshake_receive_worker [ 286.124348][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.138627][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 286.138794][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 286.138849][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker [ 286.138948][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.144753][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.151384][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 286.151437][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 286.151508][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.151524][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 286.151572][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 286.151641][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.151657][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 286.151705][ C0] pending: wg_packet_decrypt_worker, wg_packet_tx_worker [ 286.151774][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.176720][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.181822][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 286.181878][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker [ 286.181980][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.191047][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.191772][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 286.191825][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 286.191896][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.199212][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 286.206347][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 286.206398][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker [ 286.206497][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.238692][ T30] ? __mutex_trylock_common+0x183/0x2e0 [ 286.245955][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 286.246018][ C0] pending: wg_packet_encrypt_worker [ 286.246099][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=11s workers=8 idle: 5289 1161 8 5290 5292 5301 5291 [ 286.246253][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=0s workers=10 idle: 5325 929 25 5293 5318 5367 5397 5288 5231 [ 286.246427][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=0s workers=9 idle: 3007 51 33 74 950 991 11 12 [ 286.246581][ C0] Showing backtraces of running workers in stalled CPU-bound worker pools: [ 286.263438][ T30] ? __pfx___might_resched+0x10/0x10 [ 286.556640][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 286.572377][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 286.578340][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.590110][ T30] ? rcu_is_watching+0x15/0xb0 [ 286.596474][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.608125][ T30] ? trace_contention_end+0x3c/0x120 [ 286.616958][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.628972][ T30] ? __mutex_lock+0x2ef/0xd70 [ 286.637818][ T30] ? mark_lock+0x9a/0x360 [ 286.644844][ T30] unregister_netdevice_queue+0x303/0x370 [ 286.656803][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 286.666448][ T30] ? _raw_write_unlock_irq+0x23/0x50 [ 286.678108][ T30] unregister_netdev+0x1c/0x30 [ 286.685489][ T30] sixpack_close+0x19b/0x240 [ 286.690145][ T30] tty_ldisc_kill+0xa3/0x1a0 [ 286.699746][ T30] tty_ldisc_release+0x1a1/0x200 [ 286.707328][ T30] tty_release_struct+0x2b/0xe0 [ 286.717102][ T30] tty_release+0xd06/0x12c0 [ 286.725203][ T30] ? __pfx_tty_release+0x10/0x10 [ 286.736396][ T30] __fput+0x241/0x880 [ 286.742967][ T30] task_work_run+0x251/0x310 [ 286.747693][ T30] ? __pfx_task_work_run+0x10/0x10 [ 286.759237][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 286.767726][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 286.778740][ T30] do_syscall_64+0x100/0x230 [ 286.789836][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.800467][ T30] RIP: 0033:0x7fb04c97dff9 [ 286.804914][ T30] RSP: 002b:00007ffc392495d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 286.819676][ T30] RAX: 0000000000000000 RBX: 00007fb04cb37a80 RCX: 00007fb04c97dff9 [ 286.827928][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 286.844934][ T30] RBP: 00007fb04cb37a80 R08: 0000000000000006 R09: 00007ffc392498cf [ 286.855406][ T30] R10: 00000000005f8ff8 R11: 0000000000000246 R12: 000000000001f18c [ 286.869402][ T30] R13: 00007ffc392496e0 R14: 0000000000000032 R15: ffffffffffffffff [ 286.878894][ T30] [ 286.889826][ T30] INFO: task syz.2.473:6640 blocked for more than 144 seconds. [ 286.898908][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 286.911067][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.919758][ T30] task:syz.2.473 state:D stack:26168 pid:6640 tgid:6639 ppid:5230 flags:0x00000004 [ 286.937382][ T30] Call Trace: [ 286.942400][ T30] [ 286.945382][ T30] __schedule+0x1895/0x4b30 [ 286.949960][ T30] ? __pfx___schedule+0x10/0x10 [ 286.961698][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.966821][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 286.979348][ T30] ? schedule+0x90/0x320 [ 286.983918][ T30] schedule+0x14b/0x320 [ 286.988159][ T30] schedule_preempt_disabled+0x13/0x30 [ 287.000456][ T30] __mutex_lock+0x6a7/0xd70 [ 287.005096][ T30] ? __mutex_lock+0x52a/0xd70 [ 287.009813][ T30] ? rtnl_dumpit+0x99/0x200 [ 287.033012][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 287.039153][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.049793][ T30] ? __alloc_skb+0x28f/0x440 [ 287.056972][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 287.069414][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 287.077409][ T30] rtnl_dumpit+0x99/0x200 [ 287.086651][ T30] netlink_dump+0x649/0xd80 [ 287.093776][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 287.098866][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 287.110441][ T30] __netlink_dump_start+0x5a2/0x790 [ 287.115700][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 287.129520][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 287.134779][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.148289][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 287.153556][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 287.158973][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.173097][ T30] ? ref_tracker_free+0x643/0x7e0 [ 287.178198][ T30] netlink_rcv_skb+0x1e5/0x430 [ 287.191876][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.197399][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.210168][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.216234][ T30] netlink_unicast+0x7f8/0x990 [ 287.228109][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 287.234718][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.248792][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.254892][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.269602][ T30] ? __check_object_size+0x48e/0x900 [ 287.275287][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 287.280110][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.291743][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.297414][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 287.309216][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.315172][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.326359][ T30] __sock_sendmsg+0x223/0x270 [ 287.333862][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 287.338680][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.353694][ T30] __sys_sendmsg+0x292/0x380 [ 287.358885][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.368297][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.379025][ T30] ? do_syscall_64+0x100/0x230 [ 287.386475][ T30] ? do_syscall_64+0xb6/0x230 [ 287.395531][ T30] do_syscall_64+0xf3/0x230 [ 287.400086][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.409981][ T30] RIP: 0033:0x7f5aef57dff9 [ 287.419558][ T30] RSP: 002b:00007f5af02ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.433322][ T30] RAX: ffffffffffffffda RBX: 00007f5aef735f80 RCX: 00007f5aef57dff9 [ 287.448378][ T30] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 287.459296][ T30] RBP: 00007f5aef5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 287.473074][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.486269][ T30] R13: 0000000000000000 R14: 00007f5aef735f80 R15: 00007ffc8899c668 [ 287.497046][ T30] [ 287.500223][ T30] INFO: task syz.4.504:6744 blocked for more than 145 seconds. [ 287.511039][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 287.516992][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.537377][ T30] task:syz.4.504 state:D stack:25984 pid:6744 tgid:6743 ppid:5224 flags:0x00000004 [ 287.553512][ T30] Call Trace: [ 287.556824][ T30] [ 287.559781][ T30] __schedule+0x1895/0x4b30 [ 287.568934][ T30] ? __pfx___schedule+0x10/0x10 [ 287.578604][ T30] ? __pfx_lock_release+0x10/0x10 [ 287.591807][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 287.597343][ T30] ? schedule+0x90/0x320 [ 287.610101][ T30] schedule+0x14b/0x320 [ 287.614683][ T30] schedule_preempt_disabled+0x13/0x30 [ 287.620198][ T30] __mutex_lock+0x6a7/0xd70 [ 287.630534][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.636301][ T30] ? netdev_get_by_name+0x7c/0xb0 [ 287.648832][ T30] ? __mutex_lock+0x52a/0xd70 [ 287.656683][ T30] ? ethnl_default_set_doit+0x394/0x910 [ 287.670421][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 287.675535][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.689710][ T30] ? ethnl_set_coalesce_validate+0x211/0x340 [ 287.696566][ T30] ethnl_default_set_doit+0x394/0x910 [ 287.711323][ T30] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 287.717300][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.730232][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.736282][ T30] genl_rcv_msg+0xb16/0xec0 [ 287.747975][ T30] ? mark_lock+0x9a/0x360 [ 287.752743][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.758474][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 287.773363][ T30] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 287.780302][ T30] ? __pfx___might_resched+0x10/0x10 [ 287.785711][ T30] netlink_rcv_skb+0x1e5/0x430 [ 287.798514][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.803964][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.809327][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 287.822300][ T30] genl_rcv+0x28/0x40 [ 287.829604][ T30] netlink_unicast+0x7f8/0x990 [ 287.850913][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 287.859789][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.870415][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.876103][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.890824][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.896642][ T30] ? __check_object_size+0x48e/0x900 [ 287.908103][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 287.915656][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.925920][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.934225][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 287.939224][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.954062][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.960867][ T30] __sock_sendmsg+0x223/0x270 [ 287.965611][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 287.977636][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.983480][ T30] __sys_sendmsg+0x292/0x380 [ 287.988163][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.000608][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 288.006752][ T30] ? call_rcu+0x731/0xa70 [ 288.019277][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.026096][ T30] ? do_syscall_64+0x100/0x230 [ 288.038084][ T30] ? do_syscall_64+0xb6/0x230 [ 288.043113][ T30] do_syscall_64+0xf3/0x230 [ 288.047658][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.060726][ T30] RIP: 0033:0x7fbac177dff9 [ 288.065851][ T30] RSP: 002b:00007fbac24ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.083529][ T30] RAX: ffffffffffffffda RBX: 00007fbac1935f80 RCX: 00007fbac177dff9 [ 288.098716][ T30] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 288.108221][ T30] RBP: 00007fbac17f0296 R08: 0000000000000000 R09: 0000000000000000 [ 288.120957][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.129147][ T30] R13: 0000000000000000 R14: 00007fbac1935f80 R15: 00007ffcc9e6a2e8 [ 288.147228][ T30] [ 288.152932][ T30] INFO: task syz-executor:6750 blocked for more than 146 seconds. [ 288.166413][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 288.175224][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.188479][ T30] task:syz-executor state:D stack:24128 pid:6750 tgid:6750 ppid:1 flags:0x00000004 [ 288.204608][ T30] Call Trace: [ 288.207941][ T30] [ 288.216101][ T30] __schedule+0x1895/0x4b30 [ 288.223435][ T30] ? __pfx___schedule+0x10/0x10 [ 288.228348][ T30] ? __pfx_lock_release+0x10/0x10 [ 288.238062][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 288.247082][ T30] ? schedule+0x90/0x320 [ 288.256113][ T30] schedule+0x14b/0x320 [ 288.260332][ T30] schedule_preempt_disabled+0x13/0x30 [ 288.270793][ T30] __mutex_lock+0x6a7/0xd70 [ 288.275348][ T30] ? __mutex_lock+0x52a/0xd70 [ 288.280069][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 288.290877][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 288.299642][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 288.310972][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 288.316149][ T30] ? __lock_acquire+0x1384/0x2050 [ 288.328477][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.334316][ T30] netlink_rcv_skb+0x1e5/0x430 [ 288.339136][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.350479][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.355907][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.367818][ T30] netlink_unicast+0x7f8/0x990 [ 288.375747][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 288.388367][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.394429][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.408539][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.414808][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.427792][ T30] ? __check_object_size+0x48e/0x900 [ 288.435249][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 288.440085][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.450958][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.456835][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 288.468430][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.476851][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.492163][ T30] __sock_sendmsg+0x223/0x270 [ 288.496901][ T30] __sys_sendto+0x39b/0x4f0 [ 288.506791][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 288.514448][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.520212][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 288.530855][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.537266][ T30] ? exc_page_fault+0x590/0x8c0 [ 288.550849][ T30] __x64_sys_sendto+0xde/0x100 [ 288.555674][ T30] do_syscall_64+0xf3/0x230 [ 288.560218][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.570431][ T30] RIP: 0033:0x7fa8fd37fe8c [ 288.579928][ T30] RSP: 002b:00007ffc5288f890 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 288.591304][ T30] RAX: ffffffffffffffda RBX: 00007fa8fe064620 RCX: 00007fa8fd37fe8c [ 288.599392][ T30] RDX: 0000000000000028 RSI: 00007fa8fe064670 RDI: 0000000000000003 [ 288.616514][ T30] RBP: 0000000000000000 R08: 00007ffc5288f8e4 R09: 000000000000000c [ 288.630413][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 288.638435][ T30] R13: 0000000000000000 R14: 00007fa8fe064670 R15: 0000000000000000 [ 288.656500][ T30] [ 288.659747][ T30] INFO: task syz-executor:6752 blocked for more than 146 seconds. [ 288.670348][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 288.685144][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.698698][ T30] task:syz-executor state:D stack:24128 pid:6752 tgid:6752 ppid:1 flags:0x00000004 [ 288.716626][ T30] Call Trace: [ 288.719967][ T30] [ 288.728583][ T30] __schedule+0x1895/0x4b30 [ 288.736540][ T30] ? __pfx___schedule+0x10/0x10 [ 288.746427][ T30] ? __pfx_lock_release+0x10/0x10 [ 288.754142][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 288.759663][ T30] ? schedule+0x90/0x320 [ 288.768970][ T30] schedule+0x14b/0x320 [ 288.777452][ T30] schedule_preempt_disabled+0x13/0x30 [ 288.789228][ T30] __mutex_lock+0x6a7/0xd70 [ 288.796704][ T30] ? __mutex_lock+0x52a/0xd70 [ 288.804732][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 288.810068][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 288.820510][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 288.825495][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 288.839361][ T30] ? __lock_acquire+0x1384/0x2050 [ 288.845310][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.858060][ T30] netlink_rcv_skb+0x1e5/0x430 [ 288.863817][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.869337][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.886058][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.895856][ T30] netlink_unicast+0x7f8/0x990 [ 288.905433][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 288.914585][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.920262][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.930411][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.936106][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.948594][ T30] ? __check_object_size+0x48e/0x900 [ 288.955786][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 288.967588][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.974587][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.980275][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 288.990437][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.996173][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.009609][ T30] __sock_sendmsg+0x223/0x270 [ 289.016052][ T30] __sys_sendto+0x39b/0x4f0 [ 289.027665][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 289.033030][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.038708][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 289.050612][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 289.057112][ T30] ? exc_page_fault+0x590/0x8c0 [ 289.069941][ T30] __x64_sys_sendto+0xde/0x100 [ 289.075048][ T30] do_syscall_64+0xf3/0x230 [ 289.079602][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.090412][ T30] RIP: 0033:0x7f4ead17fe8c [ 289.094863][ T30] RSP: 002b:00007ffcadb594a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 289.111603][ T30] RAX: ffffffffffffffda RBX: 00007f4eade64620 RCX: 00007f4ead17fe8c [ 289.119615][ T30] RDX: 0000000000000028 RSI: 00007f4eade64670 RDI: 0000000000000003 [ 289.137139][ T30] RBP: 0000000000000000 R08: 00007ffcadb594f4 R09: 000000000000000c [ 289.146651][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 289.160664][ T30] R13: 0000000000000000 R14: 00007f4eade64670 R15: 0000000000000000 [ 289.168699][ T30] [ 289.178190][ T30] INFO: task syz-executor:6756 blocked for more than 147 seconds. [ 289.197242][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 289.203848][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.222148][ T30] task:syz-executor state:D stack:24128 pid:6756 tgid:6756 ppid:1 flags:0x00000004 [ 289.239375][ T30] Call Trace: [ 289.244530][ T30] [ 289.247502][ T30] __schedule+0x1895/0x4b30 [ 289.259384][ T30] ? __pfx___schedule+0x10/0x10 [ 289.264724][ T30] ? __pfx_lock_release+0x10/0x10 [ 289.269805][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 289.284196][ T30] ? schedule+0x90/0x320 [ 289.288808][ T30] schedule+0x14b/0x320 [ 289.298057][ T30] schedule_preempt_disabled+0x13/0x30 [ 289.309843][ T30] __mutex_lock+0x6a7/0xd70 [ 289.319370][ T30] ? __mutex_lock+0x52a/0xd70 [ 289.327896][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 289.336790][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 289.347349][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 289.356079][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 289.366540][ T30] ? __lock_acquire+0x1384/0x2050 [ 289.375561][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 289.384956][ T30] netlink_rcv_skb+0x1e5/0x430 [ 289.389871][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 289.400182][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.409292][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.418224][ T30] netlink_unicast+0x7f8/0x990 [ 289.429535][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 289.438549][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.447979][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.457892][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.467352][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.476729][ T30] ? __check_object_size+0x48e/0x900 [ 289.487471][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 289.495583][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.506185][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.514344][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 289.519325][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.530834][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.536175][ T30] __sock_sendmsg+0x223/0x270 [ 289.549425][ T30] __sys_sendto+0x39b/0x4f0 [ 289.554326][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 289.559433][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.570434][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 289.576521][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 289.589951][ T30] ? exc_page_fault+0x590/0x8c0 [ 289.596776][ T30] __x64_sys_sendto+0xde/0x100 [ 289.609819][ T30] do_syscall_64+0xf3/0x230 [ 289.614763][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.628914][ T30] RIP: 0033:0x7faa9b57fe8c [ 289.633676][ T30] RSP: 002b:00007ffd6b62d810 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 289.649286][ T30] RAX: ffffffffffffffda RBX: 00007faa9c264620 RCX: 00007faa9b57fe8c [ 289.659328][ T30] RDX: 0000000000000028 RSI: 00007faa9c264670 RDI: 0000000000000003 [ 289.670445][ T30] RBP: 0000000000000000 R08: 00007ffd6b62d864 R09: 000000000000000c [ 289.678458][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 289.696818][ T30] R13: 0000000000000000 R14: 00007faa9c264670 R15: 0000000000000000 [ 289.706254][ T30] [ 289.709389][ T30] INFO: task syz-executor:6758 blocked for more than 147 seconds. [ 289.727148][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 289.735887][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.754068][ T30] task:syz-executor state:D stack:24128 pid:6758 tgid:6758 ppid:1 flags:0x00000004 [ 289.768076][ T30] Call Trace: [ 289.776776][ T30] [ 289.779757][ T30] __schedule+0x1895/0x4b30 [ 289.788223][ T30] ? __pfx___schedule+0x10/0x10 [ 289.797529][ T30] ? __pfx_lock_release+0x10/0x10 [ 289.807532][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 289.817253][ T30] ? schedule+0x90/0x320 [ 289.825206][ T30] schedule+0x14b/0x320 [ 289.829422][ T30] schedule_preempt_disabled+0x13/0x30 [ 289.844586][ T30] __mutex_lock+0x6a7/0xd70 [ 289.849154][ T30] ? __mutex_lock+0x52a/0xd70 [ 289.857825][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 289.866750][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 289.875531][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 289.884215][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 289.889383][ T30] ? __lock_acquire+0x1384/0x2050 [ 289.899631][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 289.910567][ T30] netlink_rcv_skb+0x1e5/0x430 [ 289.915416][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 289.928203][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.935079][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.940357][ T30] netlink_unicast+0x7f8/0x990 [ 289.952893][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 289.958315][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.970507][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.976187][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.988134][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.994197][ T30] ? __check_object_size+0x48e/0x900 [ 289.999558][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 290.010995][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.016358][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.033211][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 290.038213][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.050710][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.056034][ T30] __sock_sendmsg+0x223/0x270 [ 290.069541][ T30] __sys_sendto+0x39b/0x4f0 [ 290.074443][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 290.079534][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.090441][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 290.096482][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.110856][ T30] ? exc_page_fault+0x590/0x8c0 [ 290.115764][ T30] __x64_sys_sendto+0xde/0x100 [ 290.129799][ T30] do_syscall_64+0xf3/0x230 [ 290.135796][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.147702][ T30] RIP: 0033:0x7f1dfff7fe8c [ 290.153648][ T30] RSP: 002b:00007ffdcf6d33a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 290.168411][ T30] RAX: ffffffffffffffda RBX: 00007f1e00c64620 RCX: 00007f1dfff7fe8c [ 290.179621][ T30] RDX: 0000000000000028 RSI: 00007f1e00c64670 RDI: 0000000000000003 [ 290.193869][ T30] RBP: 0000000000000000 R08: 00007ffdcf6d33f4 R09: 000000000000000c [ 290.204710][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 290.218504][ T30] R13: 0000000000000000 R14: 00007f1e00c64670 R15: 0000000000000000 [ 290.232117][ T30] [ 290.236377][ T30] [ 290.236377][ T30] Showing all locks held in the system: [ 290.250572][ T30] 3 locks held by kworker/0:1/9: [ 290.255558][ T30] 1 lock held by khungtaskd/30: [ 290.267580][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 290.278018][ T30] 3 locks held by kworker/1:1/60: [ 290.290345][ T30] #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 290.312086][ T30] #1: ffffc900015b7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 290.329615][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 290.342142][ T30] 3 locks held by kworker/u8:7/2923: [ 290.348520][ T30] #0: ffff88802db66948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 290.369623][ T30] #1: ffffc90009477d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 290.396639][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 290.406716][ T30] 2 locks held by getty/4982: [ 290.417195][ T30] #0: ffff8880320010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 290.433844][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 290.447865][ T30] 1 lock held by syz.5.215/5938: [ 290.457806][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 290.469834][ T30] 4 locks held by syz.1.471/6629: [ 290.480867][ T30] #0: ffff8880312930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x5c/0x200 [ 290.496840][ T30] #1: ffff88803159d0a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x80/0x200 [ 290.507316][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdev+0x12/0x30 [ 290.520311][ T30] #3: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 290.539547][ T30] 2 locks held by syz.2.473/6640: [ 290.546185][ T30] #0: ffff8880120486c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 290.560726][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 290.569631][ T30] 1 lock held by syz.0.476/6645: [ 290.581745][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 290.598993][ T30] 2 locks held by syz.4.504/6744: [ 290.605569][ T30] #0: ffffffff8fd37a30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 290.619865][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: ethnl_default_set_doit+0x394/0x910 [ 290.639084][ T30] 1 lock held by syz.3.506/6748: [ 290.646930][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 290.660657][ T30] 1 lock held by syz-executor/6750: [ 290.665887][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 290.682195][ T30] 1 lock held by syz-executor/6752: [ 290.687433][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 290.702371][ T30] 1 lock held by syz-executor/6756: [ 290.707647][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 290.726508][ T30] 1 lock held by syz-executor/6758: [ 290.737619][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 290.749650][ T30] 1 lock held by syz-executor/6761: [ 290.763659][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 290.778259][ T30] 1 lock held by syz-executor/6766: [ 290.789950][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 290.804350][ T30] 1 lock held by syz-executor/6772: [ 290.809579][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 290.823342][ T30] 1 lock held by syz-executor/6776: [ 290.829572][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 290.845210][ T30] 1 lock held by syz-executor/6778: [ 290.855631][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 290.874270][ T30] 1 lock held by syz-executor/6780: [ 290.879522][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 290.894499][ T30] 1 lock held by syz-executor/6783: [ 290.899766][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 290.912375][ T30] 1 lock held by syz-executor/6789: [ 290.918137][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 290.935820][ T30] 1 lock held by syz-executor/6801: [ 290.948054][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 290.966404][ T30] 1 lock held by syz-executor/6805: [ 290.973102][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 290.990184][ T30] 1 lock held by syz-executor/6807: [ 290.996888][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 291.010440][ T30] 1 lock held by syz-executor/6809: [ 291.015716][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 291.045658][ T30] 1 lock held by syz-executor/6812: [ 291.056847][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 291.069162][ T30] 1 lock held by syz-executor/6817: [ 291.079702][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 291.098221][ T30] [ 291.100957][ T30] ============================================= [ 291.100957][ T30] [ 291.109390][ T30] NMI backtrace for cpu 1 [ 291.113733][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller #0 [ 291.122522][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 291.132605][ T30] Call Trace: [ 291.135902][ T30] [ 291.138852][ T30] dump_stack_lvl+0x241/0x360 [ 291.143565][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.149066][ T30] ? __pfx__printk+0x10/0x10 [ 291.153713][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 291.158698][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 291.164192][ T30] ? _printk+0xd5/0x120 [ 291.168388][ T30] ? __pfx__printk+0x10/0x10 [ 291.173018][ T30] ? __wake_up_klogd+0xcc/0x110 [ 291.177919][ T30] ? __pfx__printk+0x10/0x10 [ 291.182554][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.188215][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 291.193288][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 291.199326][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 291.205352][ T30] watchdog+0xff4/0x1040 [ 291.209642][ T30] ? watchdog+0x1ea/0x1040 [ 291.214107][ T30] ? __pfx_watchdog+0x10/0x10 [ 291.218823][ T30] kthread+0x2f2/0x390 [ 291.222917][ T30] ? __pfx_watchdog+0x10/0x10 [ 291.227634][ T30] ? __pfx_kthread+0x10/0x10 [ 291.232251][ T30] ret_from_fork+0x4d/0x80 [ 291.236707][ T30] ? __pfx_kthread+0x10/0x10 [ 291.241704][ T30] ret_from_fork_asm+0x1a/0x30 [ 291.246523][ T30] [ 291.250186][ T30] Sending NMI from CPU 1 to CPUs 0: [ 291.255770][ C0] NMI backtrace for cpu 0 [ 291.255785][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc2-syzkaller #0 [ 291.255810][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 291.255825][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 291.255860][ C0] RIP: 0010:memset+0xf/0x20 [ 291.255887][ C0] Code: 44 88 1f e9 4e a1 2a 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 e9 22 a1 2a 00 0f 1f 80 00 00 00 00 90 90 90 90 90 [ 291.255907][ C0] RSP: 0018:ffffc90000007728 EFLAGS: 00000202 [ 291.255927][ C0] RAX: ffffc90000007b00 RBX: ffffc90000007838 RCX: 000000000000000f [ 291.255944][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000007851 [ 291.255961][ C0] RBP: dffffc0000000000 R08: ffffc9000000785f R09: ffffc90000007850 [ 291.255979][ C0] R10: dffffc0000000000 R11: fffff52000000f0c R12: ffffc90000008000 [ 291.255997][ C0] R13: ffffc90000007800 R14: ffffffff81f2b0f2 R15: ffffc90000007850 [ 291.256018][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 291.256037][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.256054][ C0] CR2: 0000001b3241dff8 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 291.256072][ C0] Call Trace: [ 291.256080][ C0] [ 291.256090][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 291.256119][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 291.256159][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 291.256187][ C0] ? nmi_handle+0x2a/0x5a0 [ 291.256222][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 291.256257][ C0] ? nmi_handle+0x151/0x5a0 [ 291.256282][ C0] ? nmi_handle+0x2a/0x5a0 [ 291.256311][ C0] ? memset+0xf/0x20 [ 291.256333][ C0] ? default_do_nmi+0x63/0x160 [ 291.256362][ C0] ? exc_nmi+0x123/0x1f0 [ 291.256391][ C0] ? end_repeat_nmi+0xf/0x53 [ 291.256413][ C0] ? kmem_cache_free+0x1a2/0x420 [ 291.256453][ C0] ? memset+0xf/0x20 [ 291.256476][ C0] ? memset+0xf/0x20 [ 291.256500][ C0] ? memset+0xf/0x20 [ 291.256522][ C0] [ 291.256530][ C0] [ 291.256538][ C0] unwind_next_frame+0xcfb/0x22d0 [ 291.256567][ C0] ? __kasan_slab_free+0x59/0x70 [ 291.256595][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 291.256626][ C0] arch_stack_walk+0x11c/0x150 [ 291.256655][ C0] ? kmem_cache_free+0x1a2/0x420 [ 291.256692][ C0] stack_trace_save+0x118/0x1d0 [ 291.256721][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 291.256752][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.256777][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 291.256815][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.256854][ C0] kasan_save_track+0x3f/0x80 [ 291.256882][ C0] ? kasan_save_track+0x3f/0x80 [ 291.256904][ C0] ? kasan_save_free_info+0x40/0x50 [ 291.256941][ C0] ? __kasan_slab_free+0x59/0x70 [ 291.256995][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 291.257032][ C0] kasan_save_free_info+0x40/0x50 [ 291.257066][ C0] __kasan_slab_free+0x59/0x70 [ 291.257091][ C0] ? dst_destroy+0x2ac/0x460 [ 291.257113][ C0] kmem_cache_free+0x1a2/0x420 [ 291.257145][ C0] ? dst_destroy+0x2ac/0x460 [ 291.257170][ C0] dst_destroy+0x2ac/0x460 [ 291.257193][ C0] ? rcu_core+0xa37/0x17a0 [ 291.257216][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 291.257239][ C0] rcu_core+0xaac/0x17a0 [ 291.257273][ C0] ? __pfx_rcu_core+0x10/0x10 [ 291.257297][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.257325][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 291.257363][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.257404][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 291.257438][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.257462][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 291.257498][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.257522][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 291.257556][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 291.257593][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.257622][ C0] handle_softirqs+0x2c7/0x980 [ 291.257659][ C0] ? do_softirq+0x11b/0x1e0 [ 291.257695][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 291.257733][ C0] ? rcu_is_watching+0x15/0xb0 [ 291.257762][ C0] do_softirq+0x11b/0x1e0 [ 291.257792][ C0] [ 291.257800][ C0] [ 291.257809][ C0] ? __pfx_do_softirq+0x10/0x10 [ 291.257841][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 291.257880][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.257904][ C0] ? rcu_is_watching+0x15/0xb0 [ 291.257931][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 291.257964][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 291.257993][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 291.258026][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.258050][ C0] ? neigh_destroy+0x423/0x580 [ 291.258077][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.258106][ C0] neigh_periodic_work+0xb35/0xd50 [ 291.258141][ C0] ? process_scheduled_works+0x976/0x1850 [ 291.258176][ C0] process_scheduled_works+0xa65/0x1850 [ 291.258227][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 291.258267][ C0] ? assign_work+0x364/0x3d0 [ 291.258302][ C0] worker_thread+0x870/0xd30 [ 291.258348][ C0] ? __kthread_parkme+0x169/0x1d0 [ 291.258386][ C0] ? __pfx_worker_thread+0x10/0x10 [ 291.258420][ C0] kthread+0x2f2/0x390 [ 291.258443][ C0] ? __pfx_worker_thread+0x10/0x10 [ 291.258476][ C0] ? __pfx_kthread+0x10/0x10 [ 291.258500][ C0] ret_from_fork+0x4d/0x80 [ 291.258535][ C0] ? __pfx_kthread+0x10/0x10 [ 291.258558][ C0] ret_from_fork_asm+0x1a/0x30 [ 291.258601][ C0] [ 291.852458][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 291.859386][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller #0 [ 291.868175][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 291.878769][ T30] Call Trace: [ 291.882324][ T30] [ 291.885270][ T30] dump_stack_lvl+0x241/0x360 [ 291.890067][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.895296][ T30] ? __pfx__printk+0x10/0x10 [ 291.899933][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 291.905970][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.911631][ T30] ? vscnprintf+0x5d/0x90 [ 291.915994][ T30] panic+0x349/0x880 [ 291.919994][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.925710][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 291.932003][ T30] ? __pfx_panic+0x10/0x10 [ 291.936483][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 291.941905][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.947571][ T30] ? __irq_work_queue_local+0x137/0x410 [ 291.953160][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.958819][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 291.964219][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 291.970408][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 291.976600][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.982259][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 291.988449][ T30] watchdog+0x1033/0x1040 [ 291.992817][ T30] ? watchdog+0x1ea/0x1040 [ 291.997276][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.001988][ T30] kthread+0x2f2/0x390 [ 292.006083][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.010798][ T30] ? __pfx_kthread+0x10/0x10 [ 292.015419][ T30] ret_from_fork+0x4d/0x80 [ 292.019874][ T30] ? __pfx_kthread+0x10/0x10 [ 292.024494][ T30] ret_from_fork_asm+0x1a/0x30 [ 292.029753][ T30] [ 292.033043][ T30] Kernel Offset: disabled [ 292.037369][ T30] Rebooting in 86400 seconds..