last executing test programs: 7.190965787s ago: executing program 4: syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000009880), 0x1, 0x97f5, &(0x7f00000098c0)="$eJzs3QW4bHXBsP19DodOsRDr0KAiXWIAKoggSAqKCtJKSSihCIjSipLS3d3d3d3d3Z3fdTjnKOINj37vc728z3Pf93XtPTNr1qy95v9bs/aes+bMLDXvYvMMDEwwMLyRp//ojMnWf3K5Hea6cc+lNz7j5C1O+PiIyaMNPxkydMTpJCNOJx0YGBg0YjmDhk8bPOSEEwcPjDEwMPjdyx1nzLEHjTMwsMKIi3ONOJ1t+Mm4146c7+33xCs6bDUGbT38a/gPHRgYGHPYmScXfmasdy9nxHpN/y93VNpSc8837z+s/u42bPyGjDj/7q/Rhn+Ne/nAwLiXDfD2MejDvUfv/PwJLh14e4oPeT3+R7TU3PPN/x7/YY/FUUZMm23YY/y9j0Fj793Ot1r1xqtGDOEg3HH+D2mpueddcOD99/MDR+y18HZvv7PfHDzWwMDgsQcGBo8zMDB43IGBweMNDAwe/8N2qf+zPtSNr6qqqj6U5p5npnmGPd97z98DY4z8u5b+Ljx3t33XGxgYGHX4PINnHflcsKqqqqqqqqr+32zueWb6Jjz/n+CDnv9Pc+fHNun5f1VVVVVVVdX/nOafe56Zhj2Pf8/z/4k+6Pn/xJtNdMGI1/7PNvxWb324d6KqqqqqqqqqPrBFv/fO8/+x3/P8f+gHPf9fe5mVFxox38h/N3jzXYsc9K7XE7z+rumjvGv+1941fci7pr97/tEGBgYPGTH9jX9MHjzWsOv+df7BEwxb7xHTX33X9On/8f+bh0z+rukzvGv6lO+aPuOIdR02fap3TZ/lXfNP/e+MbVVVVVVVVVVVVVVVVVVV1f+t3nrytLP+8Z7vnxt41/u3//193Ee8LmDQMedcc82HtqL/bzToX18PscmHvU7/pw1zHuOwoQMDayzxYa9KfQh92J/XUB9u+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uPc5/v/39/9f4tgdpx0x62yjX7nMA+++7arvOj/G/9W1/tD633r8f2DVQQMDI3wnGOa60NyLLj71wMDAA8tcOfrMA3+/bvZh18054Sgj3iBh+NsgTDGEF7zJiE9F32TErCOWccw7y5//7X1HGfSelXhXu8341CarLPXyzO89ner978fgkWcWWvKOcUe+l8Xg98z0ftvpyOWPvC/vdR6x7lMPW/fp1l19renW2WDDaVddfbmVV1x5xTVmmmnW2WafZY5Z5ph+upVWXW3FEd/fZ8yGvvN9sn9nzCZ675g9Ofe7x+y99+39xmzoB4/ZO0scdeh5C40cs/eu2n81ZpN98JgNXXXEDxoydNSBZd8ZmkEDA0MmH3Vg/WEXZhh9YGDIFCPmnWjYvF+dcPDAwPb/uKPDzo3+921w0CbD5llq3sXm+cfH7v/rx++/z+fZjzb8ZMiIIRkyyYjTSYf/mAkG/rEpDh5ywomDh933fxrmccYce9A4AwMrjLg414jTOUZce9XI+d7nc9bfs6LvvM3K1sO//u4x5rAzx37+mq3fvZz3Ifjv6P/X7/9/8Zp90N8HatBIs+HzDPeae775//Gz3hmGuUa+J8yw3y3DTP4PPsb+v+xf1nfoGO+8ye37re8HvC/uO9H2dca202753/W+uLzvWPCd70P/nX3HwAfvO0b5x9l/TF3xys++d9+xwPuv4j89LkaO0ejvmen99h3XnH7yuu/smz5437HgqiM+aOgf+47BAwNDJhu57xi2I5ly1IHth12YcdiFqUYdOGTYhZneuTDmwDnDLnx5+TVXW2HQO2/bM2K50w9b7lwTDnrnzi/73R1ffnuHt9+efMS6TP+eHeuI7WPou38/zj3h8GEbeVta7tBZhl835YjlzvAfLHfkbWm553xj+HVTjVjujO9Z7igfsNyRtx35eBg26zuPh6kH/dMLP+HxO+97Hr+DRu7W33WTkV+jDf8a9/KRnw0Fj5f/aL9Dj98JPmB9P+BzrXB7GzbtU9NMNuF/1+da0fqO8cHr+36fw/2+6/vsGjs//N+wvoPetb7/tJ1tv+bwbWXqEdvZLP/B9jvytu/dj436zrXDGab+d/Zjc/3LfmzTUQa/Z+Xf1fv9DbQCzD/8/ER/X9pVh2++/MixH/U9y/2v/gaa+oP3YxOs+p7bzbvPwCAc86cvXeOt/2LMRx3457/V/z7mI277QWM+1b+O+aB/GfPZP3jM/92/O6eebPj1o3zAmF+z2t0vjxzz0f7DMZ/qPx3zuQZGoTE/5urh4/ZB+9P3G/ORt/3nMR8y8O2BgYHJR4z5lP/Odj79f892PhbMP/z8g3+fdOAuq63+rn3MoP9kzKf8T8d86N+388nfuW7SwQOjjTaw/nLrrrv2DMO/j7w44/DvvC9a5bzh4/xBv0vfz2jkbT/ocTH5v2M09L/HaOIh/zr/yCcdIy9/epe7Lvv/uy+a/D8zGjTvAO+LDrl5+Lh90N9F7zfmI29LvweHvuv2731e9wHvR4n3adi0cd/eaN2Rixxxs96P8t/vnzbbkf/Gt+p7d/L1v7X+/d9d/u7yd5e/u/zFvc/x/7+///+y03x99xFPkke9bodtJvuw1/dD7n/18f8Rvv90/H+ybXa4bthTwRHXfeDx2eHz/D95fHa24SfjXjtyvvceH+QVff/js3Pe8ez4A/93js/+/2rkY/XfeB7f/t9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7n2O/498jfLQ1Z8d97URB0JH3emORXb9sNf3Q+5/9fH/Eb7/dPx/10Xu2GnwwN+v+8Dj/8PncRz/X+yGBR4Z+H/4+P/Ix2rH/+u/KH93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yF/c+x//nGvk6gGmOuPLwka8HuPeYcc7/sNf3Q+5/6/H/Pv/fW/t/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7gRx/8H3vOxjt9vu8Dg+P//7N7Hf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/gvmT9m8f9B/pjFf6n8MYv/0vljFv8f5o9Z/H+UP2bxXyZ/zOL/4/wxi/9P8scs/j/NH7P4L5s/ZvFfLn/M4v+z/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+f5Yxb/X+SPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/y/zxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOL/q/wxi/+v88cs/uvnj1n8N8gfs/hvmD9m8d8of8zi/5v8MYv/b/PHLP4b549Z/H+XP2bx3yR/zOK/af6YxX+z/DGL/+/zxyz+m+ePWfz/kD9m8f9j/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8zi/6f8MYv/n/PHLP7b549Z/P+SP2bx/2v+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+O+aP2bx/1v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dPybxHzSQP2bxH5Q/ZvEfnD9m8R8lf8ziPyR/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/h/JH7P4T5g/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvH/ZP6YxX+i/DGL/6fyxyz+E+ePWfw/nT9m8f9M/pjF/7P5Yxb/z+WPWfw/nz9m8R+aP2bxnyR/zOI/af6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4T50/ZvGfJn/M4v+F/DGL/xfzxyz+X8ofs/hPmz9m8f9y/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/znyxyz+X8kfs/jPmT9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8Z8rf8ziP3f+mMV/nvwxi/8388cs/t/KH7P4fzt/zOI/b/6YxX++/DGL/3fyxyz+8+ePWfy/mz9m8V8gf8ziv2D+mMX/e/ljFv+F8scs/gvnj1n8v58/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8f5A/ZvFfKn/M4r90/pjF/4f5Yxb/H+WPWfyXyR+z+P84f8zi/5P8MYv/T/PHLP7L5o9Z/JfLH7P4/yx/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvH/ef6Yxf8X+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOL/y/wxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+P8qf8zi/+v8MYv/+vljFv8N8scs/hvmj1n8N8ofs/j/Jn/M4v/b/DGL/8b5Yxb/3+WPWfw3yR+z+G+aP2bx3yx/zOL/+/wxi//m+WMW/z/kj1n8/5g/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/j/KX/M4v/n/DGL//b5Yxb/v+SPWfz/mj9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/13yxyz+u+aPWfz/lj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePSfzfOZv/v2bxH5Q/ZvEfnD9m8R8lf8ziPyR/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/h/JH7P4T5g/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvH/ZP6YxX+i/DGL/6fyxyz+E+ePWfw/nT9m8f9M/pjF/7P5Yxb/z+WPWfw/nz9m8R+aP2bxnyR/zOI/af6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4T50/ZvGfJn/M4v+F/DGL/xfzxyz+X8ofs/hPmz9m8f9y/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/znyxyz+X8kfs/jPmT9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8Z8rf8ziP3f+mMV/nvwxi/8388cs/t/KH7P4fzt/zOI/b/6YxX++/DGL/3fyxyz+8+ePWfy/mz9m8V8gf8ziv2D+mMX/e/ljFv+F8scs/gvnj1n8v58/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8f5A/ZvFfKn/M4r90/pjF/4f5Yxb/H+WPWfyXyR+z+P84f8zi/5P8MYv/T/PHLP7L5o9Z/JfLH7P4/yx/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvH/ef6Yxf8X+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOL/y/wxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+P8qf8zi/+v8MYv/+vljFv8N8scs/hvmj1n8N8ofs/j/Jn/M4v/b/DGL/8b5Yxb/3+WPWfw3yR+z+G+aP2bx3yx/zOL/+/wxi//m+WMW/z/kj1n8/5g/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/j/KX/M4v/n/DGL//b5Yxb/v+SPWfz/mj9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/13yxyz+u+aPWfz/lj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePSfxHGcgfs/gPyh+z+A/OH7P4j5I/ZvEfkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/j+SPWfwnzB+z+H80f8zi/7H8MYv/x/PHLP6fyB+z+H8yf8ziP1H+mMX/U/ljFv+J88cs/p/OH7P4fyZ/zOL/2fwxi//n8scs/p/PH7P4D80fs/hPkj9m8Z80f8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bx/0L+mMX/i/ljFv8v5Y9Z/KfNH7P4fzl/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv+v5I9Z/OfMH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4z5U/ZvGfO3/M4j9P/pjF/5v5Yxb/b+WPWfy/nT9m8Z83f8ziP1/+mMX/O/ljFv/588cs/t/NH7P4L5A/ZvFfMH/M4v+9/DGL/0L5Yxb/hfPHLP7fzx+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP4/yB+z+C+VP2bxXzp/zOL/w/wxi/+P8scs/svkj1n8f5w/ZvH/Sf6Yxf+n+WMW/2Xzxyz+y+WPWfx/lj9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+P88f8zi/4v8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8f9l/pjFf+38MYv/OvljFv9188cs/uvlj1n8f5U/ZvH/df6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/H+TP2bx/23+mMV/4/wxi//v8scs/pvkj1n8N80fs/hvlj9m8f99/pjFf/P8MYv/H/LHLP5/zB+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/P+UP2bx/3P+mMV/+/wxi/9f8scs/n/NH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/n/LH7P475Y/ZvHfPX/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388ck/kMG8scs/oPyxyz+g/PHLP6j5I9Z/Ifkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6Yxf8j+WMW/wnzxyz+H80fs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/hPlD9m8f9U/pjFf+L8MYv/p/PHLP6fyR+z+H82f8zi/7n8MYv/5/PHLP5D88cs/pPkj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/9U+WMW/6nzxyz+0+SPWfy/kD9m8f9i/pjF/0v5Yxb/afPHLP5fzh+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjF/yv5Yxb/OfPHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP5z5Y9Z/OfOH7P4z5M/ZvH/Zv6Yxf9b+WMW/2/nj1n8580fs/jPlz9m8f9O/pjFf/78MYv/d/PHLP4L5I9Z/BfMH7P4fy9/zOK/UP6YxX/h/DGL//fzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/w/yxyz+S+WPWfyXzh+z+P8wf8zi/6P8MYv/MvljFv8f549Z/H+SP2bx/2n+mMV/2fwxi/9y+WMW/5/lj1n8l88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+P88fs/j/In/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8f5k/ZvFfO3/M4r9O/pjFf938MYv/evljFv9f5Y9Z/H+dP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/3+SPWfx/mz9m8d84f8zi/7v8MYv/JvljFv9N88cs/pvlj1n8f58/ZvHfPH/M4v+H/DGL/x/zxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/P+WPWfz/nD9m8d8+f8zi/5f8MYv/X/PHLP475I9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/3/LHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYn/qAP5Yxb/QfljFv/B+WMW/1Hyxyz+Q/LHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8zi/5H8MYv/hPljFv+P5o9Z/D+WP2bx/3j+mMX/E/ljFv9P5o9Z/CfKH7P4fyp/zOI/cf6Yxf/T+WMW/8/kj1n8P5s/ZvH/XP6Yxf/z+WMW/6H5Yxb/SfLHLP6T5o9Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/1PljFv9p8scs/l/IH7P4fzF/zOL/pfwxi/+0+WMW/y/nj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOL/lfwxi/+c+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/7nyxyz+c+ePWfznyR+z+H8zf8zi/638MYv/t/PHLP7z5o9Z/OfLH7P4fyd/zOI/f/6Yxf+7+WMW/wXyxyz+C+aPWfy/lz9m8V8of8ziv3D+mMX/+/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMX/B/ljFv+l8scs/kvnj1n8f5g/ZvH/Uf6YxX+Z/DGL/4/zxyz+P8kfs/j/NH/M4r9s/pjFf7n8MYv/z/LHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+f549Z/H+RP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP6/zB+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL/6/yxyz+v84fs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/9v8scs/r/NH7P4b5w/ZvH/Xf6YxX+T/DGL/6b5Yxb/zfLHLP6/zx+z+G+eP2bx/0P+mMX/j/ljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi/+f8scs/n/OH7P4b58/ZvH/S/6Yxf+v+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bx3yV/zOK/a/6Yxf9v+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6YxH+0gfwxi/+g/DGL/+D8MYv/KPljFv8h+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvH/SP6YxX/C/DGL/0fzxyz+H8sfs/h/PH/M4v+J/DGL/yfzxyz+E+WPWfw/lT9m8Z84f8zi/+n8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/0Pwxi/8k+WMW/0nzxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOI/Vf6YxX/q/DGL/zT5Yxb/L+SPWfy/mD9m8f9S/pjFf9r8MYv/l/PHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8f9K/pjFf878MYv/V/PHLP5fyx+z+H89f8zi/438MYv/XPljFv+588cs/vPkj1n8v5k/ZvH/Vv6Yxf/b+WMW/3nzxyz+8+WPWfy/kz9m8Z8/f8zi/938MYv/AvljFv8F88cs/t/LH7P4L5Q/ZvFfOH/M4v/9/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4v+D/DGL/1L5Yxb/pfPHLP4/zB+z+P8of8ziv0z+mMX/x/ljFv+f5I9Z/H+aP2bxXzZ/zOK/XP6Yxf9n+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/8/zxyz+v8gfs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/1/mj1n8184fs/ivkz9m8V83f8ziv17+mMX/V/ljFv9f549Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/zf5Yxb/3+aPWfw3zh+z+P8uf8ziv0n+mMV/0/wxi/9m+WMW/9/nj1n8N88fs/j/IX/M4v/H/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/0/5Yxb/P+ePWfy3zx+z+P8lf8zi/9f8MYv/DvljFv8d88cs/jvlj1n8d84fs/jvkj9m8d81f8zi/7f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f0ziP/pA/pjFf1D+mMV/cP6YxX+U/DGL/5D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+H8kf8ziP2H+mMX/o/ljFv+P5Y9Z/D+eP2bx/0T+mMX/k/ljFv+J8scs/p/KH7P4T5w/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvH/fP6YxX9o/pjFf5L8MYv/pPljFv/J8scs/pPnj1n8p8gfs/hPmT9m8Z8qf8ziP3X+mMV/mvwxi/8X8scs/l/MH7P4fyl/zOI/bf6Yxf/L+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4fyV/zOI/Z/6Yxf+r+WMW/6/lj1n8v54/ZvH/Rv6YxX+u/DGL/9z5Yxb/efLHLP7fzB+z+H8rf8zi/+38MYv/vPljFv/58scs/t/JH7P4z58/ZvH/bv6YxX+B/DGL/4L5Yxb/7+WPWfwXyh+z+C+cP2bx/37+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bx/0H+mMV/qfwxi//S+WMW/x/mj1n8f5Q/ZvFfJn/M4v/j/DGL/0/yxyz+P80fs/gvmz9m8V8uf8zi/7P8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMX/5/ljFv9f5I9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/L/PHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4v+r/DGL/6/zxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOL/m/wxi/9v88cs/hvnj1n8f5c/ZvHfJH/M4r9p/pjFf7P8MYv/7/PHLP6b549Z/P+QP2bx/2P+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/p/wxi/+f88cs/tvnj1n8/5I/ZvH/a/6YxX+H/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvH/W/6YxX+3/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/JvEfYyB/zOI/KH/M4j84f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8P5I/ZvGfMH/M4v/R/DGL/8fyxyz+H88fs/h/In/M4v/J/DGL/0T5Yxb/T+WPWfwnzh+z+H86f8zi/5n8MYv/Z/PHLP6fyx+z+H8+f8ziPzR/zOI/Sf6YxX/S/DGL/2T5Yxb/yfPHLP5T5I9Z/KfMH7P4T5U/ZvGfOn/M4j9N/pjF/wv5Yxb/L+aPWfy/lD9m8Z82f8zi/+X8MYv/dPljFv/p88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfy/kj9m8Z8zf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8ziP1f+mMV/7vwxi/88+WMW/2/mj1n8v5U/ZvH/dv6YxX/e/DGL/3z5Yxb/7+SPWfznzx+z+H83f8ziv0D+mMV/wfwxi//38scs/gvlj1n8F84fs/h/P3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjFf+n8MYv/D/PHLP4/yh+z+C+TP2bx/3H+mMX/J/ljFv+f5o9Z/JfNH7P4L5c/ZvH/Wf6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/z/DGL/y/yxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6Yxf+X+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bx/1X+mMX/1/ljFv/188cs/hvkj1n8N8wfs/hvlD9m8f9N/pjF/7f5Yxb/jfPHLP6/yx+z+G+SP2bx3zR/zOK/Wf6Yxf/3+WMW/83zxyz+f8gfs/j/MX/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8f9T/pjF/8/5Yxb/7fPHLP5/yR+z+P81f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+P8tf8ziv1v+mMV/9/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+T+I85kD9m8R+UP2bxH5w/ZvEfJX/M4j8kf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4fyR+z+E+YP2bx/2j+mMX/Y/ljFv+P549Z/D+RP2bx/2T+mMV/ovwxi/+n8scs/hPnj1n8P50/ZvH/TP6Yxf+z+WMW/8/lj1n8P58/ZvEfmj9m8Z8kf8ziP2n+mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOL/hfwxi/8X88cs/l/KH7P4T5s/ZvH/cv6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv858scs/l/JH7P4z5k/ZvH/av6Yxf9r+WMW/6/nj1n8v5E/ZvGfK3/M4j93/pjFf578MYv/N/PHLP7fyh+z+H87f8ziP2/+mMV/vvwxi/938scs/vPnj1n8v5s/ZvFfIH/M4r9g/pjF/3v5Yxb/hfLHLP4L549Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOK/dP6Yxf+H+WMW/x/lj1n8l8kfs/j/OH/M4v+T/DGL/0/zxyz+y+aPWfyXyx+z+P8sf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bx/3n+mMX/F/ljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8zi/8v8MYv/2vljFv918scs/uvmj1n818sfs/j/Kn/M4v/r/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4/yZ/zOL/2/wxi//G+WMW/9/lj1n8N8kfs/hvmj9m8d8sf8zi//v8MYv/5vljFv8/5I9Z/P+YP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4/yl/zOL/5/wxi//2+WMW/7/kj1n8/5o/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv9d8scs/rvmj1n8/5Y/ZvHfLX/M4r97/pjFf4/8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj0n8xxrIH7P4D8ofs/gPzh+z+I+SP2bxH5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/4/kj1n8J8wfs/h/NH/M4v+x/DGL/8fzxyz+n8gfs/h/Mn/M4j9R/pjF/1P5Yxb/ifPHLP6fzh+z+H8mf8zi/9n8MYv/5/LHLP6fzx+z+A/NH7P4T5I/ZvGfNH/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8f9C/pjF/4v5Yxb/L+WPWfynzR+z+H85f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/r+SPWfznzB+z+H81f8zi/7X8MYv/1/PHLP7fyB+z+M+VP2bxnzt/zOI/T/6Yxf+b+WMW/2/lj1n8v50/ZvGfN3/M4j9f/pjF/zv5Yxb/+fPHLP7fzR+z+C+QP2bxXzB/zOL/vfwxi/9C+WMW/4Xzxyz+388fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+P8gfs/gvlT9m8V86f8zi/8P8MYv/j/LHLP7L5I9Z/H+cP2bx/0n+mMX/p/ljFv9l88cs/svlj1n8f5Y/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/j/PH/M4v+L/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvH/Zf6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/H+VP2bx/3X+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfx/kz9m8f9t/pjFf+P8MYv/7/LHLP6b5I9Z/DfNH7P4b5Y/ZvH/ff6YxX/z/DGL/x/yxyz+f8wfs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfz/lD9m8f9z/pjFf/v8MYv/X/LHLP5/zR+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP5/yx+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHJP5jD+SPWfwH5Y9Z/Afnj1n8R8kfs/gPyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/R/LHLP4T5o9Z/D+aP2bx/1j+mMX/4/ljFv9P5I9Z/D+ZP2bxnyh/zOL/qfwxi//E+WMW/0/nj1n8P5M/ZvH/bP6Yxf9z+WMW/8/nj1n8h+aPWfwnyR+z+E+aP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP5T549Z/KfJH7P4fyF/zOL/xfwxi/+X8scs/tPmj1n8v5w/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/9X8scs/nPmj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n858ofs/jPnT9m8Z8nf8zi/838MYv/t/LHLP7fzh+z+M+bP2bxny9/zOL/nfwxi//8+WMW/+/mj1n8F8gfs/gvmD9m8f9e/pjFf6H8MYv/wvljFv/v549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv8f5I9Z/JfKH7P4L50/ZvH/Yf6Yxf9H+WMW/2Xyxyz+P84fs/j/JH/M4v/T/DGL/7L5Yxb/5fLHLP4/yx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/H+eP2bx/0X+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+P8yf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+v8ofs/j/On/M4r9+/pjFf4P8MYv/hvljFv+N8scs/r/JH7P4/zZ/zOK/cf6Yxf93+WMW/03yxyz+m+aPWfw3yx+z+P8+f8ziv3n+mMX/D/ljFv8/5o9Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/n/KH7P4/zl/zOK/ff6Yxf8v+WMW/7/mj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/7/lj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMS/3EG8scs/oPyxyz+g/PHLP6j5I9Z/Ifkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6Yxf8j+WMW/wnzxyz+H80fs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/hPlD9m8f9U/pjFf+L8MYv/p/PHLP6fyR+z+H82f8zi/7n8MYv/5/PHLP5D88cs/pPkj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/9U+WMW/6nzxyz+0+SPWfy/kD9m8f9i/pjF/0v5Yxb/afPHLP5fzh+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjF/yv5Yxb/OfPHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP5z5Y9Z/OfOH7P4z5M/ZvH/Zv6Yxf9b+WMW/2/nj1n8580fs/jPlz9m8f9O/pjFf/78MYv/d/PHLP4L5I9Z/BfMH7P4fy9/zOK/UP6YxX/h/DGL//fzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/w/yxyz+S+WPWfyXzh+z+P8wf8zi/6P8MYv/MvljFv8f549Z/H+SP2bx/2n+mMV/2fwxi/9y+WMW/5/lj1n8l88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+P88fs/j/In/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8f5k/ZvFfO3/M4r9O/pjFf938MYv/evljFv9f5Y9Z/H+dP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/3+SPWfx/mz9m8d84f8zi/7v8MYv/JvljFv9N88cs/pvlj1n8f58/ZvHfPH/M4v+H/DGL/x/zxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/P+WPWfz/nD9m8d8+f8zi/5f8MYv/X/PHLP475I9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/3/LHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYn/uAP5Yxb/QfljFv/B+WMW/1Hyxyz+Q/LHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8zi/5H8MYv/hPljFv+P5o9Z/D+WP2bx/3j+mMX/E/ljFv9P5o9Z/CfKH7P4fyp/zOI/cf6Yxf/T+WMW/8/kj1n8P5s/ZvH/XP6Yxf/z+WMW/6H5Yxb/SfLHLP6T5o9Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/1PljFv9p8scs/l/IH7P4fzF/zOL/pfwxi/+0+WMW/y/nj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOL/lfwxi/+c+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/7nyxyz+c+ePWfznyR+z+H8zf8zi/638MYv/t/PHLP7z5o9Z/OfLH7P4fyd/zOI/f/6Yxf+7+WMW/wXyxyz+C+aPWfy/lz9m8V8of8ziv3D+mMX/+/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMX/B/ljFv+l8scs/kvnj1n8f5g/ZvH/Uf6YxX+Z/DGL/4/zxyz+P8kfs/j/NH/M4r9s/pjFf7n8MYv/z/LHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+f549Z/H+RP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP6/zB+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL/6/yxyz+v84fs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/9v8scs/r/NH7P4b5w/ZvH/Xf6YxX+T/DGL/6b5Yxb/zfLHLP6/zx+z+G+eP2bx/0P+mMX/j/ljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi/+f8scs/n/OH7P4b58/ZvH/S/6Yxf+v+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bx3yV/zOK/a/6Yxf9v+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6YxH+8gfwxi/+g/DGL/+D8MYv/KPljFv8h+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvH/SP6YxX/C/DGL/0fzxyz+H8sfs/h/PH/M4v+J/DGL/yfzxyz+E+WPWfw/lT9m8Z84f8zi/+n8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/0Pwxi/8k+WMW/0nzxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOI/Vf6YxX/q/DGL/zT5Yxb/L+SPWfy/mD9m8f9S/pjFf9r8MYv/l/PHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8f9K/pjFf878MYv/V/PHLP5fyx+z+H89f8zi/438MYv/XPljFv+588cs/vPkj1n8v5k/ZvH/Vv6Yxf/b+WMW/3nzxyz+8+WPWfy/kz9m8Z8/f8zi/938MYv/AvljFv8F88cs/t/LH7P4L5Q/ZvFfOH/M4v/9/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4v+D/DGL/1L5Yxb/pfPHLP4/zB+z+P8of8ziv0z+mMX/x/ljFv+f5I9Z/H+aP2bxXzZ/zOK/XP6Yxf9n+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/8/zxyz+v8gfs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/1/mj1n8184fs/ivkz9m8V83f8ziv17+mMX/V/ljFv9f549Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/zf5Yxb/3+aPWfw3zh+z+P8uf8ziv0n+mMV/0/wxi/9m+WMW/9/nj1n8N88fs/j/IX/M4v/H/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/0/5Yxb/P+ePWfy3zx+z+P8lf8zi/9f8MYv/DvljFv8d88cs/jvlj1n8d84fs/jvkj9m8d81f8zi/7f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f0ziP/5A/pjFf1D+mMV/cP6YxX+U/DGL/5D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+H8kf8zi//+xc/fhXtf1Hcd/4OcosGldbS3UOdGD4j1yp6JpWqYeiKOlqeBNMkBiQaaeGTjnsEir3VjDYnTjDKXMatagsdRWlulSKkqyxcrGmlpspGstit2w68A5xDm9O5fny3dfr3o/Hn9wzu93ev9SntfVi9/hOr1A/1CW/r+hfyhL/9/UP5Sl/wv1D2Xp/1v6h7L0f5H+oSz9R+ofytJ/X/1DWfrvp38oS//99Q9l6f/b+oey9D9A/1CW/r+jfyhL/wP1D2XpP0r/UJb+B+kfytL/YP1DWfq36x/K0n+0/qEs/Q/RP5Sl/6H6h7L0H6N/KEv/w/QPZel/uP6hLP2P0D+Upf+R+oey9D9K/1CW/kfrH8rS/xj9Q1n6j9U/lKX/sfqHsvQfp38oS//x+oey9J+gfyhL/4n6h7L0n6R/KEv/4/QPZel/vP6hLP1P0D+Upf9k/UNZ+p+ofyhL/5P0D2Xp/2L9Q1n6n6x/KEv/U/QPZen/Ev1DWfqfqn8oS//T9A9l6f9S/UNZ+r9M/1CW/qfrH8rS/+X6h7L0P0P/UJb+Z+ofytL/LP1DWfp36B/K0n+K/qEs/afqH8rS/xX6h7L0n6Z/KEv/Tv1DWfqfrX8oS/9z9A9l6f9K/UNZ+r9K/1CW/ufqH8rS/zz9Q1n6v1r/UJb+5+sfytL/Av1DWfpfqH8oS//p+oey9J+hfyhL/4v0D2Xpf7H+oSz9L9E/lKX/pfqHsvR/jf6hLP0v0z+Upf9M/UNZ+v+u/qEs/WfpH8rSf7b+oSz95+gfytL/cv1DWfrP1T+Upf9r9Q9l6T9P/1CW/r+nfyhL/9fpH8rSf77+oSz9F+gfytL/9fqHsvS/Qv9Qlv5v0D+Upf+V+oey9L9K/1CW/lfrH8rSv0v/UJb+v69/KEv/a/QPZen/Rv1DWfov1D+Upf8i/UNZ+l+rfyhL/z/QP5Sl/3X6h7L0/0P9Q1n6X69/KEv/P9I/lKX/Yv1DWfrfoH8oS/836R/K0v/N+oey9F+ifyhL/7foH8rS/0b9Q1n636R/KEv/t+ofytL/bfqHsvR/u/6hLP3/WP9Qlv5/on8oS/8/1T+Upf+f6R/K0v9m/UNZ+r9D/1CW/u/UP5Sl/5/rH8rSf6n+oSz9b9E/lKX/u/QPZen/bv1DWfov0z+Upf9f6B/K0n+5/qEs/d+jfyhL//fqH8rS/336h7L0f7/+oSz9b9U/lKX/X+ofytL/Nv1DWfp/QP9Qlv4r9A9l6X+7/qEs/e/QP5Sl/0r9Q1n6f1D/UJb+H9I/lKX/nfqHsvT/sP6hLP3v0j+Upf9H9A9l6f9R/UNZ+n9M/1CW/n+lfyhL/7v1D2Xp/3H9Q1n6f0L/UJb+f61/KEv/VfqHsvRfrX8oS/9P6h/K0v9v9A9l6b9G/1CW/n+rfyhL/0/pH8rS/x79Q1n636t/KEv/+/QPZen/af1DWfr/nf6hLP0/o38oS//P6h/K0v9+/UNZ+n9O/1CW/p/XP5Sl/wP6h7L0/4L+oSz9H9Q/lKX/Q/qHsvT/e/1DWfp/Uf9Qlv4P6x/K0v8R/UNZ+q/VP5Sl/5f0D2Xp/2X9Q1n6f0X/UJb+6/QPZen/Vf1DWfp/Tf9Qlv6P6h/K0n+9/qEs/b+ufyhL/8f0D2Xp/w39Q1n6/4P+oSz9v6l/KEv/DfqHsvT/R/1DWfp/S/9Qlv7f1j+Upf/j+oey9P+O/qEs/f9J/1CW/hv1D2Xp/8/6h7L0/67+oSz9/0X/UJb+T+gfytL/Sf1DWfo/pX8oS//v6R/K0v/7+oey9N+kfyhL/3/VP5Sl/7/pH8rSf7P+oSz9f6B/KEv/p/UPZen/jP6hLP3/Xf9Qlv4/1D+Upf9/6B/K0v9H+oey9P9P/UNZ+v9Y/1CW/lv0D2Xp/xP9Q1n6/1T/UJb+W/UPZen/X/qHsvT/b/1DWfr/j/6hLP3/V/9Qlv7b9A8l6f/8lv6hLP2H6B/K0n+o/qEs/ffQP5Slf9E/lKV/m/6hLP331D+Upf9e+oey9B+mfyhL/+H6h7L0H6F/KEv/X9M/lKX/r+sfytJ/b/1DWfrvo38oS//n6R/6lesPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALRaHZ2nbd5jSJ+n9tj1wQFfmrP948QtF7528Q/Gv6f3Y8+XpwYvOXTXB9u2bdt2+7L3Lex5uFer1er+b3t+z+Nh/Y+7X79rzb3rdjwqo+5rX7h55tJTv/7+6dfft+am1S9s2/5sW+uyy+fNn3Ps0FartLe1FnY/GDek1SqHtrXe0f1gfPeDMW2tO7sfTNj+YHjrs90Pjpl1xfzZ3U8cVvn3DAB+2XV0Lm7t0WexW33+NLDr/net2fTx3o8DvGTvq5VWz/6/9y2Tj+z3tV6/YP97X78c1H//B/0vCAD8nMHt/9Zzej8O8JI/9/6/45RHT4y+9ov3v/f1y8H2HwDqF3z/v89G9/++f7/v/48KXnLnfefnRrV17/9BH13/gp6nyrP5/v/PXr+099//oX2+/z+k1Sqje7//v1erVQ7Zzd8OAEiho/OGzQO9/x94/8t+/W6G7Lr/Dz++bP/u/V+xeupXep5qG+T+jx7o/f8Z/f5ZAYBnp6PzA9v6vf8fxP63xgQvuXP/9/7W+Z3d+7/27oXX7fK1wez/If33f2zXgjeMvXrRtUfPWzBz7py5c14/YcJxx58wafKkyceO3f4tgR2/7ubvCgD8atu99/+tEf1uhrRaT+y8XzB/2cru/R/24OPTe54aNsj9P3TA9/+jvP8HgD4OHtrac8/WwpldXVeN2/Fr78PxO37d8R8L9n8Qf//f3vtDdL0/Mzik1Rq5837Ld+av697/S29/+1E9T+05yP0fM+D+n9r3ZxUBgGdnN9//z+5302f/Zy35yJe79//pe2ed2/PUYP/+/7AB9/827/8BoIqOztb/65vo7v0/62t3PVLtuhzu5/8AoH5N7P/oz6+/ptp1OcL+A0D9mtj/uzfO2Fjtuhxp/wGgfk3s/97LHhhe7bocZf8BoH5N7P+Nn5xya7XrcrT9B4D6NbH/m+6Y2F7tuhxj/wGgfk3s/8wb71ld7bqMtf8AUL8m9v/dj71tZbXrcqz9B4D6NbH/B/xor/HVrss4+w8A9Wti/698YtHN1a7LePsPAPVrYv+3PrRlZLXrMsH+A0D9mtj/Cz8x75lq12Wi/QeA+jWx/48ufWputesyyf4DQP2a2P/PvGn5hmrX5Tj7DwD1a2L/J972omnVrsvx9h8A6tfE/o/Yt2OfatflBPsPAPVrYv9vOOmh5dWuy2T7DwD1a2L/Nx/xqdHVrsuJ9h8A6tfE/l8+7PhV1a7LSfYfAOrXxP4/cP2HL6p2XV5s/wGgfk3s/9kXj1lb7bqcbP8BoH5N7H/7tOlXVrsup9h/AKhfE/t/5xXfeLLadXmJ/QeA+jWx/yNPnn1gtetyqv0HgPo1sf9LD9z01mrX5TT7DwD1a2L/t+1zy6Rq1+Wl9h8A6tfE/ncdtd+KatflZfYfAOrXxP4/NmPJlGrX5XT7DwD1a2L/L1k44tvVrsvL7T8A1K+J/R83r+uyatflDPsPAPVrYv/vmbp1S7Xrcqb9B4D6NbH/S354x+pq1+Us+w8A9Wti/5+37oj2atelw/4DQP2a2P9Z9593a7XrMsX+A0D9mtj/7313w/Bq12Wq/QeA+jWx/1PedfrGatflFfYfAOrXxP7fv+bha6pdl2n2HwDq18T+f+yDqx+pdl067T8A1K+J/T90yYkXV7suZ9t/AKhfE/v/1fXDp1W7LufYfwCoXxP7P+PHN22odl1eaf8BoH5N7P9xT/10brXr8ir7DwD1a2L/P/2FNz5T7bqca/8BoH5N7P+Bq74/stp1Oc/+A0D9mtj/W9459+Zq1+XV9h8A6tfE/v9k8b7jq12X8+0/ANSvif2/esWyldWuywX2HwDq18T+T9v/i09Wuy4X2n8AqF8T+//g5DOvrHZdptt/AKhfE/t/12GT11a7LjPsPwDUr4n9P2jEmouqXZeL7D8A1K+J/X/zdYevqnZdLrb/AFC/JvZ/2KUfGl3tulxi/wGgfk3s/+yzv7m82nW51P4DQP2a2P+nF1ywT7Xr8hr7DwD1u3rRta+bOX/+nKt84hOf+GTnJ8/1/zIBAAB1+9kf+p/rfxIAAAAAAAAAAAAAAAAAAADIq4n/O7Hn+t8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAQ5G+9wgAFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfAQAA///Q5ocT") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x22) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003a00)=ANY=[@ANYBLOB="540100001900010000000000000000001d01000008000500000800001500010000000000000000000eabdac5a3619b2c040000001e0106000400fe"], 0x154}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) r3 = syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x10, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES32=0x0], 0x0, 0xc52, &(0x7f0000000180)="$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") pidfd_getfd(0xffffffffffffffff, r3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000340)=0x10) r7 = dup3(r6, r5, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x8) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r8, @ANYBLOB="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"/270], 0x114}}, 0x0) 4.848483634s ago: executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000006c0)=ANY=[], 0x18) sendmmsg$inet6(r0, &(0x7f0000002900)=[{{&(0x7f0000000900)={0xa, 0x4e22, 0x0, @local, 0x4}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000940)="90810b43f995b4ae5ce67d333966db9167c744f7ffe3b951af1bbb6b25512e700dc6b5b0f563a6fa02d845e735e1af6a342c7cf2e64c2fc6f55e98cee4767cdb106583eddb735fa253", 0x49}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000a40)="5c9ae44641a37f58d6068b7635a38382a5aa17a708d9fbb7927c4090992b72f41ebfee207944f32f513b67119007121aa09777dd3ed82b4370375487afcda4b7dd764bfae63dbf0f91795cc413a2c55900b407208b1547a35cf05be518e5008ba3b02344f6525701199a73ab48d118332673334a58fbef6cf248851664d1dc5d537a3e8f0f303ae7c94c6ebec057ebbd195b7973872a743b", 0x98}, {&(0x7f0000000b00)="a655615a47d94f3f0147f7c5d2e8d9a339fa14cfef28cb25ad4a0a72d3eb55cfae7ec5805864da3abddebbbe2a285ad5", 0x30}, {&(0x7f0000000b40)="1b92ac56dc44b35301d5d90578fb7570b7692dc87e0be9ca90", 0x19}, {&(0x7f0000000b80)="109334fdd37ae13b4d0944e78f199d7d82690be26ec60929cf60f2f11e93c6fe898e6475ce719746f8edd55f3876eb73a52bd3cd12427e395f132a4d1f9d5760818b3089bf1718470f6da2491981a4703bd6f0031ef5c8ddc71b3cd46870ea57f844a1c09ec0", 0x66}, {&(0x7f0000000c00)="7e4396ae392a54491d1ede5ff2f81e61842f05a4e9b1af0cd70359d729c90a2885aa48edfec1de33f0ef112d", 0x2c}, {&(0x7f0000000c40)="60c7544177903fd2a508064e4305675d331b5ac239efdc87421d1edb1ac494e9e21dcd381b12955eda389b2731c098c3200710a239ec5eca59c36a787615f207f0a62bd30bfcbb9d53201bf557611646337091618e0579ae359270651fc863b711e05738555f551e803b310ac1454e102466fb5b493ffdef165a24b508177477effc66", 0x83}, {&(0x7f0000000180)="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", 0x1d0}, {&(0x7f0000000e00)}, {&(0x7f0000000ec0)="b2bd298e8278ef27fe27f141530ab8cd5a39daf8e4e09e4cd3e3df3efc23f0b77ec81496e77c702fc28d663ef724ceebe31f", 0x32}, {&(0x7f0000000f00)="ffe1c717f7f3aa6afd9d7309f06e3fc0d7fa15746a3ebea8319aa60753fc1fb2556a341fd62e38da213973d7fe8c2810c9474cf6c47be09a42b25e47666531bac265b3c28d1720e9eda68a1aab7fd0e949ba0635fdba0704703006dbbb25df94068bd1031fb72206faf9d126de0915bcbf5ffdce4dea", 0x76}], 0xa}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000012c0)="fa982cb7ac55dc428400286bd0ba9a06", 0x10}, {&(0x7f0000000380)="186459e4ae9670857792897ee9f075636f61eefafd2c44a34dfbdae68e4a012ba457da", 0x23}], 0x2, &(0x7f0000000040)=ANY=[], 0xf8}}], 0x3, 0x8004) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000029c0)="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", 0x572}], 0x1}, 0x0) 4.775478056s ago: executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffffef8}}, './file0\x00'}) preadv2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/171, 0xab}], 0x1, 0x79f8, 0x7f80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800700, &(0x7f00000019c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000"], 0x7c}}, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x100, 0xfff) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000300), &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x8, 0x0, 0x1) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000200)='./file0\x00', 0x6c842, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x110, 0xd}}], 0x18, 0x4c00}, 0x0) 4.710999396s ago: executing program 1: creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xc593, &(0x7f0000000100)=ANY=[@ANYRES16], 0x1, 0x1207, &(0x7f0000001b80)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x1, 0x0, 0x0, 0xb) 4.694465458s ago: executing program 4: epoll_create1(0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) timerfd_create(0x0, 0x0) mprotect(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) 4.185317573s ago: executing program 2: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f0000000480)='./file0/file0\x00', r0, &(0x7f00000000c0)='./file1\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000340)='./file0\x00') stat(&(0x7f00000000c0)='./file0\x00', 0x0) 4.096286109s ago: executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {}, 0x1b}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000000)) 4.084013469s ago: executing program 1: pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000600, 0x0, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x800000009) lseek(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0xfffb) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, 0x0, 0x18041) close(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@flushpolicy={0x84, 0x1d, 0x8, 0x70bd26, 0x25dfdbfc, "", [@srcaddr={0x14, 0xd, @in=@rand_addr=0x64010100}, @algo_auth_trunc={0x5e, 0x14, {{'sha512-arm\x00'}, 0x90, 0xa0, "58b8768008a9b3d70b5ea3fc8c455f05c7cb"}}]}, 0x84}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, &(0x7f0000000440)={0xa, 0x2, 0x0, @loopback}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6800000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001c0007800c000280080001c0000000020c00018008000140ac1414bb05000500020000000500010006"], 0x68}}, 0x0) shutdown(r0, 0x1) 3.918958722s ago: executing program 2: timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r0 = socket(0x15, 0x5, 0x0) read$alg(r0, &(0x7f0000000000)=""/46, 0x2e) 3.773279771s ago: executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x64) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) dup3(r3, r2, 0x0) sendmsg$netlink(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffff52}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x3ff) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) 2.875538204s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c000480280001800a00010071756f7461000000180002800c000140000000000000000008000240020000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 2.736144101s ago: executing program 4: timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) splice(r0, 0x0, r2, 0x0, 0x80, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) 2.496344007s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=ANY=[], 0x12f0}}, 0x0) 2.296404231s ago: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x18, &(0x7f0000000880)={@flat=@binder={0x66642a85}, @fd, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.066190644s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000f4000040"]) 1.347539267s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800009502"]) 1.265860615s ago: executing program 0: epoll_create1(0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) timerfd_create(0x0, 0x0) mprotect(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) 1.106202541s ago: executing program 0: msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) msgsnd(0x0, &(0x7f0000000280)={0x3}, 0x8, 0x0) 1.022322725s ago: executing program 1: syz_emit_ethernet(0x67, &(0x7f0000000280)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x31, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @local, @mcast2, [{0x0, 0x1, "3078ba7be04314"}]}}}}}}, 0x0) 902.185187ms ago: executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x64) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) dup3(r3, r2, 0x0) sendmsg$netlink(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffff52}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x3ff) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) 893.643316ms ago: executing program 3: r0 = add_key$user(&(0x7f0000002100), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000280)="623eea3bc904678fb02ec53addafdfee", 0x10, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000400)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f69e05e361e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12861b45225bdbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7886d069c0ad7b77adcd5488684872b1bb9eb84586549e11b0804", 0xc0, r1) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r2, r0}, 0x0, 0x0, 0x0) 808.825581ms ago: executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0xffa, "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"}}, 0x1000) 766.792367ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c000100000008001c004802000005000b"], 0x44}}, 0x0) 729.547123ms ago: executing program 3: r0 = socket$inet6(0xa, 0x200000000003, 0x87) r1 = epoll_create1(0x0) r2 = mq_open(&(0x7f00000008c0)='\x12\xa7\xd3y\x87\xc2\xa0\xb44\x0e!\xc9\x87K2\xea\xe5Ii\xd8\xd6\xe0S\x80\xaf\x9c?\xdf\x9f_\x1bS\x04G\xd9e\x8d\xf3\xca,\"x\x7f\xc3\xd0K\xbf\xa0\xfc\xc1\xd1\x82&&y\x04\xd1r\x8e\xd1\x10\'\xe5\xc4)\xf1O\xf7\x1f\xc1\xc4[\xe6\x8f\x82\x93\xa6S\xea\xe6\xd3\xc4\x06k\x85\x1e\x903\xd2\xf1\xdb\x90\x01\xb2\x88?4\xd94\xa3\xa7\x8c\x03\x00\x00\x00\x00\x00\x00\x00\x15\xf7\xe3\xd3\vl\x92n#\xdc \x88\xd2\xcb\x9b\x02\x81\xf3]\xfd\xa3\xd9\xcen\xee\xfe\x8d\x9d\x03\xe6>h\xf9\x14\x1c\xa9\xf2\x9b6\x93\xcb\"\x11\xd0\xdb\x9b\x9c6\xbd\'\x98\t\x1d\x9cM9\xe4\xc2\bA\x98\'g#\xf1\xd5}r\x82\x01@U\x17\x99\xce\xbf\x1f\x92', 0x40, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000000c0)={0x20000000}) 684.108943ms ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800008504"]) 654.449067ms ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e00030010000000028000001294", 0x2e}], 0x1}, 0x0) 488.115468ms ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000000)=""/64, 0x2}], 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) 444.238739ms ago: executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021020000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = gettid() process_vm_writev(r1, &(0x7f0000000200)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0xd931d3864d39dc83) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) stat(0x0, &(0x7f0000004e80)) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000e80)=[{{0x0, 0xfffffffffffffefa, 0x0, 0x0, 0x0, 0x1000000000002}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}], 0x40000000000033a, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) socket$packet(0x11, 0x2, 0x300) 398.739147ms ago: executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) lsm_set_self_attr(0x0, 0x0, 0x5a, 0x0) 0s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800001f0001c0"]) kernel console output (not intermixed with test programs): t [ 537.669338][T12567] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 537.702192][T12566] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 537.714966][T12566] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 537.735113][T12566] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 537.830778][ T29] audit: type=1326 audit(1718528215.428:8215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12553 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ee67cea9 code=0x7fc00000 [ 537.957749][T11834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.112135][T12570] loop1: detected capacity change from 0 to 1024 [ 538.259743][T12339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.384109][T12339] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.444569][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.451721][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.494572][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.501725][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.506625][T12573] loop3: detected capacity change from 0 to 1024 [ 538.554613][T12573] hfsplus: failed to load extents file [ 538.976842][T12454] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 539.109806][T12454] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 539.167710][ T11] hfsplus: b-tree write err: -5, ino 4 [ 539.176782][T12454] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 539.197635][T12573] loop3: detected capacity change from 0 to 8192 [ 539.223647][T12454] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 539.408672][T12339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.483262][T12454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.538638][T12454] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.584909][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.592130][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.637359][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.644574][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.940485][T12339] veth0_vlan: entered promiscuous mode [ 539.972849][T12339] veth1_vlan: entered promiscuous mode [ 540.083842][T12339] veth0_macvtap: entered promiscuous mode [ 540.114418][T12339] veth1_macvtap: entered promiscuous mode [ 540.193995][T12454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.213352][T12339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.230063][T12339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.240583][T12339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.260823][T12339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.272469][T12339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.289690][T12339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.309638][T12339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.353926][T12339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.371700][T12339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.396456][T12339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.415235][T12339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.427591][T12339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.441747][T12339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.465219][T12339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.548053][T12339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.563264][T12339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.587096][T12595] loop3: detected capacity change from 0 to 32768 [ 540.598543][T12339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.609665][T12339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.631299][T12454] veth0_vlan: entered promiscuous mode [ 540.635347][T12595] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 540.646104][T12454] veth1_vlan: entered promiscuous mode [ 540.774078][T12454] veth0_macvtap: entered promiscuous mode [ 540.812449][T12595] XFS (loop3): Ending clean mount [ 540.828316][T12454] veth1_macvtap: entered promiscuous mode [ 540.884522][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.900135][T12454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.920515][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.924723][T12454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.945531][T12454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.961542][T12454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.979149][T12454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.994792][T12454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.010718][T12454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.022220][T12454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.039127][T12454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.052513][T12454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.072585][T12454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.090633][T12454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.101299][T12454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.119341][T12454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.137942][T12454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.147978][T12454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.163559][ T29] audit: type=1326 audit(1718528218.758:8216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12609 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6116c7cea9 code=0x7fc00000 [ 541.205907][T12454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.230162][T12454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.253987][T12626] loop1: detected capacity change from 0 to 1024 [ 541.356643][T12454] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.389510][T12454] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.422999][T12454] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.465207][T12454] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.491309][T11337] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 541.516706][T10330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.534404][T10330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.756572][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.775655][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.846555][T10330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.885837][T10330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.545437][T12645] can0: slcan on ptm0. [ 542.774120][T10357] hfsplus: b-tree write err: -5, ino 4 [ 542.785561][T12652] loop2: detected capacity change from 0 to 256 [ 542.994554][T12635] can0 (unregistered): slcan off ptm0. [ 543.126194][T12658] loop1: detected capacity change from 0 to 2048 [ 543.175609][T12658] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 543.196546][T12658] NILFS (loop1): mounting unchecked fs [ 543.209580][T12658] NILFS (loop1): recovery required for readonly filesystem [ 543.228401][T12662] ptrace attach of "/root/syz-executor.2 exec"[12454] was attempted by "/root/syz-executor.2 exec"[12662] [ 543.231727][T12658] NILFS (loop1): write access will be enabled during recovery [ 543.301249][T12658] NILFS (loop1): recovery complete [ 543.377536][T12665] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 544.244606][ T5157] IPVS: starting estimator thread 0... [ 544.863632][T12662] loop2: detected capacity change from 0 to 262144 [ 544.931329][T12664] IPVS: using max 33 ests per chain, 79200 per kthread [ 544.948721][T12668] loop1: detected capacity change from 0 to 512 [ 544.992905][T12650] loop3: detected capacity change from 0 to 32768 [ 545.001472][T12650] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (12650) [ 545.429726][T12650] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 545.476878][T12668] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 545.493739][T12650] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 545.502389][T12650] BTRFS info (device loop3): using free-space-tree [ 545.533949][T12668] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 545.566679][T12668] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 545.659796][T12668] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 545.703114][T12668] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 545.733305][T12650] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 545.750397][T12668] EXT4-fs (loop1): Remounting filesystem read-only [ 545.779216][T12668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.908252][T11337] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 546.020776][T12702] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 546.051385][T12702] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 546.068806][T12702] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 546.279903][T12707] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 546.336367][T12707] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 546.363009][T12707] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 546.462463][ T29] audit: type=1326 audit(1718528224.058:8217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12667 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ee67cea9 code=0x7fc00000 [ 546.712977][T12706] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 546.737319][T12706] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 546.758589][T12706] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 547.050219][T11834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.889838][T12700] loop2: detected capacity change from 0 to 32768 [ 549.450692][T12742] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.464035][T12742] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.471260][T12742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.652187][T12751] process 'syz-executor.3' launched './file0' with NULL argv: empty string added [ 549.749426][T12742] loop3: detected capacity change from 0 to 2048 [ 549.806037][T12742] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 549.838629][T12754] loop4: detected capacity change from 0 to 512 [ 549.907764][T12754] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 549.981703][T12754] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 550.029273][T12754] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 550.131218][T12754] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 550.155114][T12754] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 550.201931][T12754] EXT4-fs (loop4): Remounting filesystem read-only [ 550.243014][T12754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.341751][T12744] loop2: detected capacity change from 0 to 32768 [ 550.366066][T12744] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12744) [ 550.410340][T12744] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 550.430918][T12744] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 550.460406][T12744] BTRFS info (device loop2): using free-space-tree [ 550.477868][T12754] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 550.512893][T12754] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 550.549896][T12754] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 550.673818][T12785] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 550.706573][T12785] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 550.762586][T12785] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 550.855654][T12791] loop3: detected capacity change from 0 to 64 [ 550.905174][T12788] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 550.917072][T12788] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 550.932888][T12788] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 551.052896][ T29] audit: type=1326 audit(1718528228.618:8218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12752 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67827cea9 code=0x7fc00000 [ 551.142963][ T29] audit: type=1326 audit(1718528228.618:8219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12752 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc67827cea9 code=0x7fc00000 [ 551.168945][T12339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.443705][T12454] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 552.010996][T12816] loop3: detected capacity change from 0 to 1024 [ 552.107631][T12816] EXT4-fs: Ignoring removed orlov option [ 552.131719][T12816] EXT4-fs (loop3): Test dummy encryption mode enabled [ 552.145147][T12816] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 552.242518][T12816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.680193][T11337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.961873][T12838] loop3: detected capacity change from 0 to 512 [ 553.017973][T12838] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 553.038805][T12838] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 553.100421][T12838] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 554.255888][T12838] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 554.316425][T12838] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 554.373600][T12838] EXT4-fs (loop3): Remounting filesystem read-only [ 554.404798][T12838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.763213][T12857] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 554.813436][T12857] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 554.825027][T12857] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 554.835009][T12836] loop4: detected capacity change from 0 to 32768 [ 556.098811][T12836] workqueue: Failed to create a rescuer kthread for wq "bcachefs_journal": -EINTR [ 556.099113][T12836] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 556.133441][T12859] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 556.165882][ T29] audit: type=1326 audit(1718528233.768:8220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12837 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3f27cea9 code=0x7fc00000 [ 556.193233][T12859] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 556.219599][T12859] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 556.343580][T12865] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 556.387782][T12865] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 556.527121][T12865] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 556.669979][T12856] loop1: detected capacity change from 0 to 32768 [ 556.804664][T11337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.974877][T12856] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nocow [ 557.035874][T12856] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 557.112211][T12856] bcachefs (loop1): alloc_read... done [ 557.242940][T12856] bcachefs (loop1): stripes_read... done [ 557.248960][T12856] bcachefs (loop1): snapshots_read... done [ 557.265408][T12856] bcachefs (loop1): journal_replay... done [ 557.271288][T12856] bcachefs (loop1): resume_logged_ops... done [ 557.281076][T12856] bcachefs (loop1): going read-write [ 557.300077][T12856] bcachefs (loop1): done starting filesystem [ 557.613294][T11834] bcachefs (loop1): shutting down [ 557.625664][T11834] bcachefs (loop1): going read-only [ 557.643480][T11834] bcachefs (loop1): finished waiting for writes to stop [ 557.683944][T11834] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 557.730806][ T29] audit: type=1326 audit(1718528235.328:8221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12887 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6116c7cea9 code=0x7fc00000 [ 557.784731][ T29] audit: type=1326 audit(1718528235.328:8222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12887 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6116c7cea9 code=0x7fc00000 [ 557.808369][T11834] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 12 [ 557.902842][T11834] bcachefs (loop1): shutdown complete, journal seq 13 [ 557.947089][T11834] bcachefs (loop1): marking filesystem clean [ 558.074458][T11834] bcachefs (loop1): shutdown complete [ 558.317627][T12898] loop4: detected capacity change from 0 to 32768 [ 558.374412][T12910] ptrace attach of "/root/syz-executor.3 exec"[11337] was attempted by "/root/syz-executor.3 exec"[12910] [ 558.455810][T12898] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 558.767326][T12924] loop2: detected capacity change from 0 to 8 [ 558.787692][T12924] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 558.856946][T12898] XFS (loop4): Ending clean mount [ 558.873790][T12927] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 558.948280][T12930] loop1: detected capacity change from 0 to 512 [ 558.976634][T12898] XFS (loop4): Quotacheck needed: Please wait. [ 559.190216][T12898] XFS (loop4): Quotacheck: Done. [ 559.387092][T12930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.428865][T12930] ext4 filesystem being mounted at /root/syzkaller-testdir4084653937/syzkaller.oR1YKG/45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.553760][T12339] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 559.593496][T12930] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 256: padding at end of block bitmap is not set [ 560.003527][T12930] Quota error (device loop1): write_blk: dquota write failed [ 560.011343][T12930] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 560.049727][T12936] loop2: detected capacity change from 0 to 1024 [ 560.057617][T12936] EXT4-fs: Ignoring removed orlov option [ 560.076057][T12936] EXT4-fs (loop2): Test dummy encryption mode enabled [ 560.084601][T12946] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 560.092971][T12930] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 560.109131][T12930] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz-executor.1: Failed to acquire dquot type 1 [ 560.132908][T12936] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 560.168948][T12951] Quota error (device loop1): do_check_range: Getting block 4128768 out of range 0-5 [ 560.300644][T12936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.374837][T11834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.405874][T12956] loop4: detected capacity change from 0 to 512 [ 560.436971][T12956] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 560.462513][T12956] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 560.504040][T12956] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 560.540866][T12956] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 560.565895][T12956] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 560.588015][T12956] EXT4-fs (loop4): Remounting filesystem read-only [ 560.610555][T12956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.679830][T12964] can0: slcan on ptm0. [ 560.699101][T12454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.824774][T12972] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 560.983515][T12972] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 561.002903][T12972] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 562.169177][T12973] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 562.219384][T12973] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 562.239522][T12973] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 562.303181][T12958] can0 (unregistered): slcan off ptm0. [ 562.328233][T12984] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 562.389035][T12980] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 562.418169][T12980] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 562.431354][ T29] audit: type=1326 audit(1718528240.018:8223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67827cea9 code=0x7fc00000 [ 562.515633][T12980] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 562.530729][T12969] kexec: Could not allocate control_code_buffer [ 562.547651][ T29] audit: type=1326 audit(1718528240.018:8224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc67827cea9 code=0x7fc00000 [ 562.591307][ T29] audit: type=1326 audit(1718528240.018:8225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67827cea9 code=0x7fc00000 [ 562.629528][ T29] audit: type=1326 audit(1718528240.018:8226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67827cea9 code=0x7fc00000 [ 562.672597][ T29] audit: type=1326 audit(1718528240.018:8227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67827cea9 code=0x7fc00000 [ 562.832944][ T29] audit: type=1326 audit(1718528240.018:8228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67827cea9 code=0x7fc00000 [ 562.835379][T12994] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.207668][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.214609][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.825984][ T29] audit: type=1326 audit(1718528240.018:8229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67827cea9 code=0x7fc00000 [ 563.935471][ T29] audit: type=1326 audit(1718528240.018:8230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67827cea9 code=0x7fc00000 [ 563.957891][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.032861][ T29] audit: type=1326 audit(1718528240.018:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67827cea9 code=0x7fc00000 [ 564.122180][ T29] audit: type=1326 audit(1718528240.018:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67827cea9 code=0x7fc00000 [ 564.144439][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.244638][T12994] loop3: detected capacity change from 0 to 8 [ 564.313820][T12339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.484729][T12994] SQUASHFS error: zlib decompression failed, data probably corrupt [ 565.516733][T12994] SQUASHFS error: Failed to read block 0x13e: -5 [ 565.526800][T12994] SQUASHFS error: Unable to read metadata cache entry [13c] [ 565.553220][T12994] SQUASHFS error: Unable to read directory block [13c:26] [ 566.150231][T13019] loop1: detected capacity change from 0 to 512 [ 566.216487][T13019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.233647][T13019] ext4 filesystem being mounted at /root/syzkaller-testdir4084653937/syzkaller.oR1YKG/49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 566.342799][ T5157] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 566.403719][T13019] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 566.500587][T13011] loop2: detected capacity change from 0 to 32768 [ 566.537240][T11834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.553594][ T5157] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 566.585746][T13011] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 566.599761][ T5157] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 566.620842][ T5157] usb 1-1: can't read configurations, error -22 [ 566.680063][T13011] XFS (loop2): Ending clean mount [ 566.773095][ T5157] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 566.875249][T13034] can0: slcan on ptm0. [ 566.975360][ T5157] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 566.993803][ T5157] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 567.013838][ T5157] usb 1-1: can't read configurations, error -22 [ 567.033938][ T5157] usb usb1-port1: attempt power cycle [ 567.163476][T12454] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 567.491224][ T5157] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 567.554224][ T5157] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 567.584283][ T5157] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 567.584728][ T5111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 567.593046][ T5157] usb 1-1: can't read configurations, error -22 [ 567.609929][ T5111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 567.618295][ T5111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 567.654295][ T5111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 567.678839][ T5111] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 567.693050][ T5111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 567.808341][ T5157] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 567.885971][ T5157] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 567.949192][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.977064][ T5157] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 567.987905][ T5157] usb 1-1: can't read configurations, error -22 [ 568.021704][ T5157] usb usb1-port1: unable to enumerate USB device [ 568.082250][T13032] can0 (unregistered): slcan off ptm0. [ 568.103782][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.286159][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.310662][T13047] loop2: detected capacity change from 0 to 512 [ 568.350679][T13047] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 568.382873][T13047] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 568.397613][T13047] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 568.421985][T13039] kexec: Could not allocate control_code_buffer [ 568.446890][T13047] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 568.455343][T13047] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 568.473173][T13047] EXT4-fs (loop2): Remounting filesystem read-only [ 568.480369][T13047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.501893][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.630876][T13053] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 568.656509][T13053] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 568.680882][T13053] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 568.716700][ T11] bridge_slave_1: left allmulticast mode [ 568.730857][ T11] bridge_slave_1: left promiscuous mode [ 568.740298][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.748492][T13057] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 568.771285][ T11] bridge_slave_0: left allmulticast mode [ 568.778418][ T11] bridge_slave_0: left promiscuous mode [ 568.788388][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.795834][T13057] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 568.806405][T13057] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 568.911640][T13053] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 568.936191][T13053] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 568.966655][T13053] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 569.119154][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 569.119174][ T29] audit: type=1326 audit(1718528246.718:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13046 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585b67cea9 code=0x7fc00000 [ 569.152851][ T5152] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 569.204186][T12454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.352182][T13074] loop2: detected capacity change from 0 to 512 [ 569.365582][ T5152] usb 2-1: Using ep0 maxpacket: 32 [ 569.372594][ T5152] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.388119][ T5152] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 569.400253][ T5152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.404823][T13074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.411461][ T5152] usb 2-1: config 0 descriptor?? [ 569.426339][T13074] ext4 filesystem being mounted at /root/syzkaller-testdir3064451090/syzkaller.0GNSEr/25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 569.449329][T13078] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.470908][ T5152] hub 2-1:0.0: bad descriptor, ignoring hub [ 569.479257][ T5152] hub 2-1:0.0: probe with driver hub failed with error -5 [ 569.598230][T13074] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 569.750416][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.763042][ T5111] Bluetooth: hci3: command tx timeout [ 569.783351][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.802783][ T11] bond0 (unregistering): Released all slaves [ 569.807469][ T60] usb 2-1: USB disconnect, device number 4 [ 569.856756][T13040] chnl_net:caif_netlink_parms(): no params data found [ 569.988508][T12454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.242516][T13087] tc_dump_action: action bad kind [ 570.265234][T13040] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.272442][T13040] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.334163][T13040] bridge_slave_0: entered allmulticast mode [ 570.345271][T13040] bridge_slave_0: entered promiscuous mode [ 570.381252][T13040] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.394228][T13040] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.445393][T13040] bridge_slave_1: entered allmulticast mode [ 570.485257][T13040] bridge_slave_1: entered promiscuous mode [ 570.849984][T13094] can0: slcan on ptm0. [ 570.970879][ T11] hsr_slave_0: left promiscuous mode [ 571.016788][ T11] hsr_slave_1: left promiscuous mode [ 571.043169][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.086963][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.116192][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.133035][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.201743][ T11] veth1_macvtap: left promiscuous mode [ 571.220403][ T11] veth0_macvtap: left promiscuous mode [ 571.229944][ T11] veth1_vlan: left promiscuous mode [ 571.237827][ T11] veth0_vlan: left promiscuous mode [ 571.853085][ T5111] Bluetooth: hci3: command tx timeout [ 572.180163][ T29] audit: type=1326 audit(1718528249.768:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13115 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6116c7cea9 code=0x7fc00000 [ 572.312866][ T29] audit: type=1326 audit(1718528249.768:8292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13115 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6116c7cea9 code=0x7fc00000 [ 572.762112][T13125] loop2: detected capacity change from 0 to 32768 [ 572.903502][T13125] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 572.991144][T13125] XFS (loop2): Ending clean mount [ 573.213657][ T11] team0 (unregistering): Port device team_slave_1 removed [ 573.357318][ T11] team0 (unregistering): Port device team_slave_0 removed [ 573.624427][T13102] kexec: Could not allocate control_code_buffer [ 573.924157][ T5111] Bluetooth: hci3: command tx timeout [ 574.029765][T13040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.089966][T13088] can0 (unregistered): slcan off ptm0. [ 574.115596][T13040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.232905][T12454] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 574.297594][T13040] team0: Port device team_slave_0 added [ 574.360305][T13040] team0: Port device team_slave_1 added [ 574.571653][T13040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.588985][T13040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.649012][T13040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.235435][T13040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.249631][T13040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.281323][T13040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.003093][ T5111] Bluetooth: hci3: command tx timeout [ 577.330122][ T5109] Bluetooth: hci2: command 0x0406 tx timeout [ 577.607757][T13040] hsr_slave_0: entered promiscuous mode [ 577.703489][T13040] hsr_slave_1: entered promiscuous mode [ 577.826823][T13040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 577.868334][T13040] Cannot create hsr debugfs directory [ 578.109274][T13167] tc_dump_action: action bad kind [ 578.223764][T13173] loop1: detected capacity change from 0 to 8 [ 578.252095][T13173] unable to read inode lookup table [ 578.774826][T13177] loop4: detected capacity change from 0 to 64 [ 578.826719][T13177] hfs: unable to open extent tree [ 578.863753][T13177] hfs: can't find a HFS filesystem on dev loop4 [ 578.989467][T13040] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 578.997258][T13177] loop4: detected capacity change from 0 to 1024 [ 579.025660][T13177] ext4: Unknown parameter 'euid<00000000000000000000' [ 579.037433][T13040] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 579.090193][T13040] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 579.150292][T13187] can0: slcan on ptm0. [ 579.150361][T13040] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 579.441873][ T29] audit: type=1326 audit(1718528257.038:8293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13194 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6116c7cea9 code=0x7ffc0000 [ 579.532602][ T29] audit: type=1326 audit(1718528257.038:8294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13194 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6116c7cea9 code=0x7ffc0000 [ 579.605158][T13040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.622483][ T29] audit: type=1326 audit(1718528257.078:8295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13194 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6116c7cea9 code=0x7ffc0000 [ 579.644753][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.674685][T13040] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.738224][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.745357][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.771205][ T29] audit: type=1326 audit(1718528257.078:8296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13194 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6116c7cea9 code=0x7ffc0000 [ 579.778771][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.793382][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.806474][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.215316][ T29] audit: type=1326 audit(1718528257.078:8297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13194 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6116c7cea9 code=0x7ffc0000 [ 580.307312][ T29] audit: type=1326 audit(1718528257.078:8298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13194 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6116c7cea9 code=0x7ffc0000 [ 580.407457][ T29] audit: type=1326 audit(1718528257.078:8299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13194 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6116c7a627 code=0x7ffc0000 [ 580.504455][T13209] loop4: detected capacity change from 0 to 4096 [ 580.508439][ T29] audit: type=1326 audit(1718528257.078:8300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13194 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6116c40309 code=0x7ffc0000 [ 580.548593][T13184] can0 (unregistered): slcan off ptm0. [ 580.554210][T13209] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 580.591182][T13186] loop2: detected capacity change from 0 to 32768 [ 580.601956][ T29] audit: type=1326 audit(1718528257.088:8301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13194 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6116c7a627 code=0x7ffc0000 [ 580.709907][ T29] audit: type=1326 audit(1718528257.088:8302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13194 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6116c40309 code=0x7ffc0000 [ 580.742810][T13209] ntfs3: loop4: failed to convert "c46c" to maccroatian [ 580.771906][T13186] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 580.838688][T13040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.900194][T13192] kexec: Could not allocate control_code_buffer [ 580.916840][T13186] XFS (loop2): Ending clean mount [ 581.165321][T13040] veth0_vlan: entered promiscuous mode [ 581.181268][T13228] tc_dump_action: action bad kind [ 581.235535][T13232] loop1: detected capacity change from 0 to 8 [ 581.265467][T12454] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 581.303800][T13232] unable to read inode lookup table [ 581.348738][T13040] veth1_vlan: entered promiscuous mode [ 581.456178][T13040] veth0_macvtap: entered promiscuous mode [ 581.484487][T13040] veth1_macvtap: entered promiscuous mode [ 581.537135][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.548860][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.560274][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.574285][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.595475][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.628861][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.640554][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.656507][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.699335][T13040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.746089][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.790817][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.821417][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.844642][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.866822][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.879276][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.890515][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.901279][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.915156][T13040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.953116][T13240] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 581.976542][T13237] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 582.015170][T13040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.037027][T13040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.047111][T13040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.058018][T13040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.134630][T13244] overlayfs: failed to resolve './file0': -2 [ 582.316962][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.340479][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.423153][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.480682][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.630109][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 582.992863][ T5152] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 583.398717][T13276] loop1: detected capacity change from 0 to 2048 [ 583.468511][T13276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.535484][T13276] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 583.607290][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 583.983917][T13262] kexec: Could not allocate control_code_buffer [ 585.004874][T13289] loop2: detected capacity change from 0 to 8 [ 585.057435][T13289] unable to read inode lookup table [ 585.117181][T11834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.094409][ T29] kauditd_printk_skb: 680 callbacks suppressed [ 586.094427][ T29] audit: type=1326 audit(1718528263.698:8983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13310 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585b67cea9 code=0x7ffc0000 [ 586.134716][ T29] audit: type=1326 audit(1718528263.698:8984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13310 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585b67cea9 code=0x7ffc0000 [ 586.195523][ T29] audit: type=1326 audit(1718528263.698:8985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13310 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585b67cea9 code=0x7ffc0000 [ 586.219556][ T29] audit: type=1326 audit(1718528263.698:8986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13310 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585b67cea9 code=0x7ffc0000 [ 586.244013][ T29] audit: type=1326 audit(1718528263.698:8987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13310 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585b67cea9 code=0x7ffc0000 [ 586.400605][ T29] audit: type=1326 audit(1718528263.788:8988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13310 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585b67cea9 code=0x7ffc0000 [ 586.473320][ T29] audit: type=1326 audit(1718528263.788:8989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13310 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f585b67a627 code=0x7ffc0000 [ 586.527375][ T29] audit: type=1326 audit(1718528263.788:8990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13310 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f585b640309 code=0x7ffc0000 [ 586.549486][ C0] vkms_vblank_simulate: vblank timer overrun [ 586.627113][ T29] audit: type=1326 audit(1718528263.808:8991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13310 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585b67cea9 code=0x7ffc0000 [ 586.649463][ C0] vkms_vblank_simulate: vblank timer overrun [ 586.749963][ T29] audit: type=1326 audit(1718528263.808:8992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13310 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f585b67a627 code=0x7ffc0000 [ 587.052509][T13341] loop2: detected capacity change from 0 to 2048 [ 587.099444][T13309] Smack: duplicate mount options [ 587.308194][T13341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.405852][T13341] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 587.491396][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 587.737279][T13323] loop1: detected capacity change from 0 to 32768 [ 587.783547][ T5111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 587.801824][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.814384][ T5111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 587.824668][ T5111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 587.834188][ T5111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 587.843013][ T5111] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 587.850373][ T5111] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 587.970097][T12454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.068088][T13355] can0: slcan on ptm0. [ 588.229531][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.297553][T13351] loop3: detected capacity change from 0 to 32768 [ 588.321382][T13351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13351) [ 588.338830][T13323] netlink: 'syz-executor.1': attribute type 64 has an invalid length. [ 588.349228][T13323] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 588.379456][T13351] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 588.383931][T13367] loop2: detected capacity change from 0 to 512 [ 588.393546][T13351] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 588.418431][T13367] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 588.419977][T13351] BTRFS info (device loop3): using free-space-tree [ 588.510604][T13367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.534472][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.553025][T13367] ext4 filesystem being mounted at /root/syzkaller-testdir3064451090/syzkaller.0GNSEr/40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.755852][T13380] loop1: detected capacity change from 0 to 1024 [ 588.777558][T13367] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz-executor.2: corrupted xattr block 32: bad e_name length [ 588.846400][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.935574][T13367] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz-executor.2: corrupted xattr block 32: bad e_name length [ 589.163754][T13352] can0 (unregistered): slcan off ptm0. [ 589.305322][T13361] kexec: Could not allocate control_code_buffer [ 589.334928][T13040] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 589.353498][T13367] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz-executor.2: corrupted xattr block 32: bad e_name length [ 589.403285][T13367] EXT4-fs error (device loop2): ext4_xattr_block_list:768: inode #15: comm syz-executor.2: corrupted xattr block 32: bad e_name length [ 589.487503][ T12] hfsplus: b-tree write err: -5, ino 4 [ 589.614846][T12454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.699905][T13356] chnl_net:caif_netlink_parms(): no params data found [ 589.748804][ T11] bridge_slave_1: left allmulticast mode [ 589.754975][ T11] bridge_slave_1: left promiscuous mode [ 589.779480][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.811477][ T11] bridge_slave_0: left allmulticast mode [ 589.827838][ T11] bridge_slave_0: left promiscuous mode [ 589.845198][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.931678][ T5111] Bluetooth: hci4: command tx timeout [ 590.547380][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.558786][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.569598][ T11] bond0 (unregistering): Released all slaves [ 590.616026][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 590.933728][T13420] loop1: detected capacity change from 0 to 8192 [ 590.991359][T13420] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 591.002179][T13424] can0: slcan on ptm0. [ 591.120932][ T11] hsr_slave_0: left promiscuous mode [ 591.196179][ T11] hsr_slave_1: left promiscuous mode [ 591.235069][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.257652][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.293779][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.333221][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.382297][ T11] veth1_macvtap: left promiscuous mode [ 591.439064][ T11] veth0_macvtap: left promiscuous mode [ 591.453504][ T11] veth1_vlan: left promiscuous mode [ 591.462256][ T11] veth0_vlan: left promiscuous mode [ 592.003486][ T5111] Bluetooth: hci4: command tx timeout [ 592.754495][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 592.754508][ T29] audit: type=1326 audit(1718528270.358:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13447 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ee67cea9 code=0x7ffc0000 [ 592.931284][ T29] audit: type=1326 audit(1718528270.358:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13447 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ee67cea9 code=0x7ffc0000 [ 593.040872][ T29] audit: type=1326 audit(1718528270.388:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13447 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ee67cea9 code=0x7ffc0000 [ 593.148947][ T29] audit: type=1326 audit(1718528270.388:9145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13447 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ee67cea9 code=0x7ffc0000 [ 593.269110][ T29] audit: type=1326 audit(1718528270.388:9146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13447 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ee67cea9 code=0x7ffc0000 [ 593.894071][ T29] audit: type=1326 audit(1718528270.388:9147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13447 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ee67cea9 code=0x7ffc0000 [ 593.989398][ T29] audit: type=1326 audit(1718528270.388:9148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13447 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93ee67a627 code=0x7ffc0000 [ 594.048928][ T29] audit: type=1326 audit(1718528270.388:9149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13447 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93ee640309 code=0x7ffc0000 [ 594.095238][ T5111] Bluetooth: hci4: command tx timeout [ 594.276334][ T29] audit: type=1326 audit(1718528270.438:9150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13447 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ee67cea9 code=0x7ffc0000 [ 594.321754][ T29] audit: type=1326 audit(1718528270.438:9151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13447 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93ee67a627 code=0x7ffc0000 [ 595.495416][ T11] team0 (unregistering): Port device team_slave_1 removed [ 595.582340][ T11] team0 (unregistering): Port device team_slave_0 removed [ 596.162821][ T5111] Bluetooth: hci4: command tx timeout [ 596.266725][T13424] kexec: Could not allocate control_code_buffer [ 596.753515][T13356] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.760764][T13356] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.769533][T13356] bridge_slave_0: entered allmulticast mode [ 596.776966][T13356] bridge_slave_0: entered promiscuous mode [ 596.840183][T13356] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.847993][T13356] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.856156][T13418] can0 (unregistered): slcan off ptm0. [ 596.862066][T13356] bridge_slave_1: entered allmulticast mode [ 596.883658][T13356] bridge_slave_1: entered promiscuous mode [ 597.044519][T13356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.071199][T13356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.084699][T13474] loop2: detected capacity change from 0 to 256 [ 597.111422][T13474] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 597.154829][T13475] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 597.307750][T13356] team0: Port device team_slave_0 added [ 597.359849][T13356] team0: Port device team_slave_1 added [ 597.664511][T13356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.678028][T13356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.716115][T13356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.787307][T13356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.800627][T13356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.881143][T13356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.046981][T13356] hsr_slave_0: entered promiscuous mode [ 598.059199][T13356] hsr_slave_1: entered promiscuous mode [ 598.065594][T13356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.078872][T13356] Cannot create hsr debugfs directory [ 598.558759][T13494] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 598.573790][T13494] nbd: must specify at least one socket [ 598.599931][T13488] loop2: detected capacity change from 0 to 32768 [ 598.621857][T13494] loop3: detected capacity change from 0 to 16 [ 598.673872][T13494] erofs: (device loop3): mounted with root inode @ nid 36. [ 598.683867][T13488] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 598.724980][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 598.724997][ T29] audit: type=1326 audit(1718528276.328:9197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ee67cea9 code=0x7ffc0000 [ 598.858248][T13508] pimreg: entered allmulticast mode [ 598.868933][T13488] XFS (loop2): Ending clean mount [ 598.919693][ T29] audit: type=1326 audit(1718528276.328:9198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ee67cea9 code=0x7ffc0000 [ 599.380206][ T29] audit: type=1326 audit(1718528276.358:9199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ee67cea9 code=0x7ffc0000 [ 599.445148][T13494] pimreg: left allmulticast mode [ 599.498509][ T29] audit: type=1326 audit(1718528276.368:9200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ee67cea9 code=0x7ffc0000 [ 599.574476][ T29] audit: type=1326 audit(1718528276.368:9201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ee67cea9 code=0x7ffc0000 [ 599.603282][ T29] audit: type=1326 audit(1718528276.368:9202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ee67cea9 code=0x7ffc0000 [ 599.648839][ T29] audit: type=1326 audit(1718528276.378:9203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ee67cea9 code=0x7ffc0000 [ 599.712844][ T29] audit: type=1326 audit(1718528276.378:9204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93ee67a627 code=0x7ffc0000 [ 599.759277][ T29] audit: type=1326 audit(1718528276.378:9205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93ee640309 code=0x7ffc0000 [ 599.823459][T13513] loop3: detected capacity change from 0 to 512 [ 599.834762][ T29] audit: type=1326 audit(1718528276.378:9206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ee67cea9 code=0x7ffc0000 [ 599.868947][T12454] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 599.893145][T13513] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 599.909839][T13513] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 599.921189][T13513] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 599.966944][T13356] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 599.980387][T13513] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 599.997749][T13513] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 600.022654][T13513] EXT4-fs (loop3): Remounting filesystem read-only [ 600.030320][T13513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.066593][T13356] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 600.090000][T13356] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 600.130620][T13356] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 600.163689][T13517] loop1: detected capacity change from 0 to 2048 [ 600.184923][T13517] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 600.212832][T13517] NILFS (loop1): mounting unchecked fs [ 600.229137][T13517] NILFS (loop1): recovery required for readonly filesystem [ 600.239697][T13517] NILFS (loop1): write access will be enabled during recovery [ 600.271011][T13517] NILFS (loop1): recovery complete [ 600.329294][T13519] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 600.354778][T13519] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 600.377367][T13519] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 600.504743][T13524] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 600.521733][T13524] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 600.540963][T13356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.560783][T13524] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 600.596978][T13356] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.597946][T13530] loop1: detected capacity change from 0 to 1024 [ 600.646239][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.653462][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.715036][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.722172][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.789289][T13530] hfsplus: request for non-existent node 2048 in B*Tree [ 600.797880][T13530] hfsplus: request for non-existent node 2048 in B*Tree [ 600.816810][T13519] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 600.866326][T13519] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 600.898915][T13519] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 601.011447][T13539] loop2: detected capacity change from 0 to 1024 [ 601.055297][T13539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.167613][T13040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.251810][T13356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.777643][T12454] EXT4-fs error (device loop2): ext4_empty_dir:3083: inode #11: comm syz-executor.2: invalid size [ 601.802521][T12454] EXT4-fs error (device loop2): ext4_empty_dir:3083: inode #11: comm syz-executor.2: invalid size [ 601.815321][T12454] EXT4-fs error (device loop2): ext4_empty_dir:3083: inode #11: comm syz-executor.2: invalid size [ 601.830868][T12454] EXT4-fs error (device loop2): ext4_empty_dir:3083: inode #11: comm syz-executor.2: invalid size [ 601.851346][T12454] EXT4-fs error (device loop2): ext4_empty_dir:3083: inode #11: comm syz-executor.2: invalid size [ 601.861651][T13356] veth0_vlan: entered promiscuous mode [ 601.864013][T12454] EXT4-fs error (device loop2): ext4_empty_dir:3083: inode #11: comm syz-executor.2: invalid size [ 601.876767][T13356] veth1_vlan: entered promiscuous mode [ 601.886690][T12454] EXT4-fs error (device loop2): ext4_empty_dir:3083: inode #11: comm syz-executor.2: invalid size [ 601.904336][T12454] EXT4-fs error (device loop2): ext4_empty_dir:3083: inode #11: comm syz-executor.2: invalid size [ 601.930549][T12454] EXT4-fs error (device loop2): ext4_empty_dir:3083: inode #11: comm syz-executor.2: invalid size [ 601.949372][T12454] EXT4-fs error (device loop2): ext4_empty_dir:3083: inode #11: comm syz-executor.2: invalid size [ 601.973657][T13356] veth0_macvtap: entered promiscuous mode [ 602.000819][T13356] veth1_macvtap: entered promiscuous mode [ 602.091398][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.134332][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.144417][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.157027][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.168391][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.204082][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.232463][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.247989][T13567] loop1: detected capacity change from 0 to 2048 [ 602.256695][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.275781][T13356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.290862][T13567] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 602.313784][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.343899][T13567] NILFS (loop1): mounting unchecked fs [ 602.358557][T13567] NILFS (loop1): recovery required for readonly filesystem [ 602.359877][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.379242][T13567] NILFS (loop1): write access will be enabled during recovery [ 602.398345][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.437434][T13567] NILFS (loop1): recovery complete [ 602.438130][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.458014][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.469426][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.479701][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.492512][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.504832][T13356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.558283][T13356] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.583711][T13356] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.603660][T13356] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.612388][T13356] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.815248][T10330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.830141][T10330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.145204][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.184992][T13572] loop3: detected capacity change from 0 to 16 [ 603.197284][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.248969][T13573] loop1: detected capacity change from 0 to 256 [ 603.272190][T13573] exfat: Deprecated parameter 'namecase' [ 603.307429][T13573] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 603.353955][T13580] loop4: detected capacity change from 0 to 1024 [ 603.392020][T13580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.483138][T12454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.587011][T13586] loop1: detected capacity change from 0 to 2048 [ 603.601073][T13356] EXT4-fs error (device loop4): ext4_empty_dir:3083: inode #11: comm syz-executor.4: invalid size [ 603.626995][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.634631][T13356] EXT4-fs error (device loop4): ext4_empty_dir:3083: inode #11: comm syz-executor.4: invalid size [ 603.658299][T13586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.706731][T13356] EXT4-fs error (device loop4): ext4_empty_dir:3083: inode #11: comm syz-executor.4: invalid size [ 603.726522][T13586] ext4 filesystem being mounted at /root/syzkaller-testdir4084653937/syzkaller.oR1YKG/80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 603.738553][T13356] EXT4-fs error (device loop4): ext4_empty_dir:3083: inode #11: comm syz-executor.4: invalid size [ 603.779107][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.800166][T13356] EXT4-fs error (device loop4): ext4_empty_dir:3083: inode #11: comm syz-executor.4: invalid size [ 603.851788][T13356] EXT4-fs error (device loop4): ext4_empty_dir:3083: inode #11: comm syz-executor.4: invalid size [ 603.877177][T11834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.895709][T13356] EXT4-fs error (device loop4): ext4_empty_dir:3083: inode #11: comm syz-executor.4: invalid size [ 603.922485][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.941492][T13356] EXT4-fs error (device loop4): ext4_empty_dir:3083: inode #11: comm syz-executor.4: invalid size [ 604.013817][T13356] EXT4-fs error (device loop4): ext4_empty_dir:3083: inode #11: comm syz-executor.4: invalid size [ 604.088767][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.111129][T13356] EXT4-fs error (device loop4): ext4_empty_dir:3083: inode #11: comm syz-executor.4: invalid size [ 604.307776][ T35] bridge_slave_1: left allmulticast mode [ 604.313654][ T35] bridge_slave_1: left promiscuous mode [ 604.319466][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.329409][ T35] bridge_slave_0: left allmulticast mode [ 604.335523][ T35] bridge_slave_0: left promiscuous mode [ 604.355834][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.373846][T13600] loop3: detected capacity change from 0 to 128 [ 604.418908][T13600] FAT-fs (loop3): Unrecognized mount option "chetrict" or missing value [ 604.831028][ T5109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 604.854307][ T5109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 604.862525][ T5109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 604.886107][ T5109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 604.905112][ T5109] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 604.915520][ T5109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 604.934190][T13610] overlayfs: failed to resolve './file0': -2 [ 605.626862][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 606.103045][T13612] loop3: detected capacity change from 0 to 32768 [ 606.179318][T13612] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 606.261806][T13612] XFS (loop3): Ending clean mount [ 606.436426][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.461718][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.497964][ T35] bond0 (unregistering): Released all slaves [ 606.682621][T13626] loop1: detected capacity change from 0 to 32768 [ 606.776974][T13040] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 606.885767][T13626] jfs_strtoUCS: char2uni returned -22. [ 606.891827][T13626] charset = utf8, char = 0xbb [ 606.932185][T13356] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.966147][ T5109] Bluetooth: hci1: command tx timeout [ 607.196367][ T35] hsr_slave_0: left promiscuous mode [ 607.268773][ T35] hsr_slave_1: left promiscuous mode [ 607.291820][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.333210][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.362868][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.370608][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.452266][ T35] veth1_macvtap: left promiscuous mode [ 607.458001][ T35] veth0_macvtap: left promiscuous mode [ 607.513912][ T35] veth1_vlan: left promiscuous mode [ 607.524003][ T35] veth0_vlan: left promiscuous mode [ 607.782768][ T5153] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 607.860641][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 607.888131][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 607.899560][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 607.911421][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 607.919757][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 607.933159][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 607.954012][ T5153] usb 4-1: device descriptor read/64, error -71 [ 608.057033][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 608.252933][ T5153] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 608.255747][ T8] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 608.276880][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.303655][ T8] usb 1-1: config 0 descriptor?? [ 608.310417][ T8] cp210x 1-1:0.0: cp210x converter detected [ 608.328795][ T35] team0 (unregistering): Port device team_slave_1 removed [ 608.377601][ T35] team0 (unregistering): Port device team_slave_0 removed [ 608.414304][ T5153] usb 4-1: device descriptor read/64, error -71 [ 608.533190][ T5153] usb usb4-port1: attempt power cycle [ 608.941272][T13650] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 608.952927][ T5153] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 608.958409][T13650] gretap1: entered promiscuous mode [ 608.968472][T13650] gretap1: entered allmulticast mode [ 608.986114][ T5153] usb 4-1: device descriptor read/8, error -71 [ 609.052759][ T5109] Bluetooth: hci1: command tx timeout [ 609.263411][ T5153] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 609.307430][ T5153] usb 4-1: device descriptor read/8, error -71 [ 609.317317][ T8] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 609.360513][T13607] chnl_net:caif_netlink_parms(): no params data found [ 609.360929][ T8] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 609.412774][ T8] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 609.421919][ T29] kauditd_printk_skb: 1038 callbacks suppressed [ 609.421937][ T29] audit: type=1800 audit(1718528287.018:10245): pid=13664 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1954 res=0 errno=0 [ 609.458819][ T5153] usb usb4-port1: unable to enumerate USB device [ 609.467757][ T8] usb 1-1: cp210x converter now attached to ttyUSB0 [ 609.468615][ T29] audit: type=1804 audit(1718528287.018:10246): pid=13664 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3480388180/syzkaller.j2BRuf/236/file0" dev="sda1" ino=1954 res=1 errno=0 [ 609.514941][ T8] usb 1-1: USB disconnect, device number 18 [ 609.530423][T13656] chnl_net:caif_netlink_parms(): no params data found [ 609.543318][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 609.553139][ T8] cp210x 1-1:0.0: device disconnected [ 609.620394][ T35] IPVS: stop unused estimator thread 0... [ 609.662316][T13607] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.673494][T13607] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.685739][T13607] bridge_slave_0: entered allmulticast mode [ 609.693315][T13607] bridge_slave_0: entered promiscuous mode [ 609.762414][T13607] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.777588][T13607] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.786422][T13607] bridge_slave_1: entered allmulticast mode [ 609.797986][T13607] bridge_slave_1: entered promiscuous mode [ 609.928773][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.956787][ T5111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 609.969684][ T5111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 609.979221][ T5111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 609.991285][ T5111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 610.002346][ T5111] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 610.009428][ T5104] Bluetooth: hci0: command tx timeout [ 610.015763][ T5111] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 610.063922][T13607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.078559][T13607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.112138][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.139259][T13656] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.150837][T13656] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.158124][T13656] bridge_slave_0: entered allmulticast mode [ 610.166683][T13656] bridge_slave_0: entered promiscuous mode [ 610.198749][T13656] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.207208][T13656] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.214776][T13656] bridge_slave_1: entered allmulticast mode [ 610.221488][T13656] bridge_slave_1: entered promiscuous mode [ 610.268057][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.386879][T13679] binder_alloc: 13676: binder_alloc_buf size 1500523191332350224 failed, no address space [ 610.397768][T13679] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 610.429040][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.455905][T13607] team0: Port device team_slave_0 added [ 610.465598][T13656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.481707][T13607] team0: Port device team_slave_1 added [ 610.495723][T13656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.572985][T13607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.579945][T13607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.606383][T13607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.621274][T13607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.628321][T13607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.654748][T13607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.673754][ T5221] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 610.677209][T13656] team0: Port device team_slave_0 added [ 610.692453][T13656] team0: Port device team_slave_1 added [ 610.776349][T13656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.783552][T13656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.809703][T13656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.820674][ T5154] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 610.836469][T13607] hsr_slave_0: entered promiscuous mode [ 610.843159][T13607] hsr_slave_1: entered promiscuous mode [ 610.849171][T13607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 610.858435][T13607] Cannot create hsr debugfs directory [ 610.863906][ T5221] usb 1-1: Using ep0 maxpacket: 8 [ 610.875126][T13656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.877039][ T5221] usb 1-1: too many configurations: 180, using maximum allowed: 8 [ 610.883648][T13656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.919174][ T5221] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 610.923102][T13656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.927000][ T5221] usb 1-1: can't read configurations, error -61 [ 611.007107][T13656] hsr_slave_0: entered promiscuous mode [ 611.013023][ T5154] usb 4-1: Using ep0 maxpacket: 32 [ 611.019973][ T5154] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.030285][T13656] hsr_slave_1: entered promiscuous mode [ 611.036479][T13656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 611.044383][ T5154] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 611.053541][T13656] Cannot create hsr debugfs directory [ 611.064735][ T5154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.078882][ T5154] usb 4-1: config 0 descriptor?? [ 611.088358][ T5154] hub 4-1:0.0: bad descriptor, ignoring hub [ 611.092954][ T5221] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 611.094468][ T5154] hub 4-1:0.0: probe with driver hub failed with error -5 [ 611.124460][ T5109] Bluetooth: hci1: command tx timeout [ 611.152658][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.266134][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.287205][ T5221] usb 1-1: Using ep0 maxpacket: 8 [ 611.300588][ T5221] usb 1-1: too many configurations: 180, using maximum allowed: 8 [ 611.311172][ T5221] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 611.325147][ T5221] usb 1-1: can't read configurations, error -61 [ 611.344504][ T5221] usb usb1-port1: attempt power cycle [ 611.380710][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.474930][ T60] usb 4-1: USB disconnect, device number 15 [ 611.484670][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.576526][T13674] chnl_net:caif_netlink_parms(): no params data found [ 611.682245][T13674] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.689980][T13674] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.697244][T13674] bridge_slave_0: entered allmulticast mode [ 611.705081][T13674] bridge_slave_0: entered promiscuous mode [ 611.718241][T13674] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.726209][T13674] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.733498][T13674] bridge_slave_1: entered allmulticast mode [ 611.740266][T13674] bridge_slave_1: entered promiscuous mode [ 611.762948][ T5221] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 611.801726][T13674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.814866][ T5221] usb 1-1: Using ep0 maxpacket: 8 [ 611.823596][T13674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.825721][ T5221] usb 1-1: too many configurations: 180, using maximum allowed: 8 [ 611.857103][ T5221] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 611.871781][ T5221] usb 1-1: can't read configurations, error -61 [ 611.890980][ T35] bridge_slave_1: left allmulticast mode [ 611.901009][ T35] bridge_slave_1: left promiscuous mode [ 611.907173][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.920615][ T35] bridge_slave_0: left allmulticast mode [ 611.928128][ T35] bridge_slave_0: left promiscuous mode [ 611.934118][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.935902][T13687] loop3: detected capacity change from 0 to 8 [ 611.951881][T13687] SQUASHFS error: lzo decompression failed, data probably corrupt [ 611.959833][T13687] SQUASHFS error: Failed to read block 0x91: -5 [ 611.961712][ T35] bridge_slave_1: left allmulticast mode [ 611.967126][T13687] SQUASHFS error: Unable to read metadata cache entry [8f] [ 611.980022][T13687] SQUASHFS error: Unable to read inode 0x11f [ 611.982624][ T35] bridge_slave_1: left promiscuous mode [ 611.991846][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.002308][ T35] bridge_slave_0: left allmulticast mode [ 612.008402][ T35] bridge_slave_0: left promiscuous mode [ 612.015196][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.042907][ T5221] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 612.082976][ T5109] Bluetooth: hci4: command tx timeout [ 612.084571][ T5111] Bluetooth: hci0: command tx timeout [ 612.097169][ T5221] usb 1-1: Using ep0 maxpacket: 8 [ 612.103067][ T5221] usb 1-1: too many configurations: 180, using maximum allowed: 8 [ 612.116524][ T5221] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 612.124590][ T5221] usb 1-1: can't read configurations, error -61 [ 612.131911][ T5221] usb usb1-port1: unable to enumerate USB device [ 612.757390][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.771972][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.782491][ T35] bond0 (unregistering): Released all slaves [ 612.927323][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.939080][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.949432][ T35] bond0 (unregistering): Released all slaves [ 612.982953][T13674] team0: Port device team_slave_0 added [ 613.008399][T13674] team0: Port device team_slave_1 added [ 613.101979][T13674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.111287][T13674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.157804][T13674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.178083][T13674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.194940][T13674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.231552][ T5111] Bluetooth: hci1: command tx timeout [ 613.238915][T13674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.361946][T13674] hsr_slave_0: entered promiscuous mode [ 613.379225][T13674] hsr_slave_1: entered promiscuous mode [ 613.389047][T13674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.406559][T13674] Cannot create hsr debugfs directory [ 613.447627][T13700] overlayfs: failed to resolve './file0': -2 [ 613.705303][T13607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 613.859523][T13607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 613.886127][T13607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 613.936551][T13607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 614.162892][ T5111] Bluetooth: hci0: command tx timeout [ 614.163042][ T5109] Bluetooth: hci4: command tx timeout [ 614.231492][ T35] hsr_slave_0: left promiscuous mode [ 614.258635][ T35] hsr_slave_1: left promiscuous mode [ 614.279582][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.298481][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.308897][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.322538][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.348208][ T35] hsr_slave_0: left promiscuous mode [ 614.370249][ T35] hsr_slave_1: left promiscuous mode [ 614.378639][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.394962][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.418905][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.428165][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.444809][ T29] audit: type=1800 audit(1718528292.048:10247): pid=13716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1947 res=0 errno=0 [ 614.536753][ T35] veth1_macvtap: left promiscuous mode [ 614.552875][ T35] veth0_macvtap: left promiscuous mode [ 614.572973][ T35] veth1_vlan: left promiscuous mode [ 614.578319][ T35] veth0_vlan: left promiscuous mode [ 614.603551][ T35] veth1_macvtap: left promiscuous mode [ 614.609218][ T35] veth0_macvtap: left promiscuous mode [ 614.619438][ T35] veth1_vlan: left promiscuous mode [ 614.635236][ T35] veth0_vlan: left promiscuous mode [ 614.786780][T13714] loop3: detected capacity change from 0 to 32768 [ 614.945415][T13714] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 614.960317][T13714] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 615.010975][T13714] bcachefs (loop3): alloc_read... done [ 615.017398][T13714] bcachefs (loop3): stripes_read... done [ 615.023395][T13714] bcachefs (loop3): snapshots_read... done [ 615.032149][T13714] bcachefs (loop3): journal_replay... done [ 615.039938][T13714] bcachefs (loop3): resume_logged_ops... done [ 615.048153][T13714] bcachefs (loop3): going read-write [ 615.061307][T13714] bcachefs (loop3): done starting filesystem [ 615.076355][ T29] audit: type=1800 audit(1718528292.678:10248): pid=13714 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1073741824 res=0 errno=0 [ 615.100879][ T29] audit: type=1800 audit(1718528292.698:10249): pid=13714 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1073741824 res=0 errno=0 [ 615.123532][ T29] audit: type=1800 audit(1718528292.718:10250): pid=13714 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1073741824 res=0 errno=0 [ 615.248346][T13040] bcachefs (loop3): shutting down [ 615.255336][T13040] bcachefs (loop3): going read-only [ 615.275962][T13040] bcachefs (loop3): finished waiting for writes to stop [ 615.302175][T13040] bcachefs (loop3): flushing journal and stopping allocators, journal seq 9 [ 615.372896][T13040] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 615.386214][T13040] bcachefs (loop3): shutdown complete, journal seq 13 [ 615.394121][T13040] bcachefs (loop3): marking filesystem clean [ 615.434034][T13040] bcachefs (loop3): shutdown complete [ 615.842309][ T35] team0 (unregistering): Port device team_slave_1 removed [ 615.928802][ T35] team0 (unregistering): Port device team_slave_0 removed [ 616.136441][T13728] loop3: detected capacity change from 0 to 4096 [ 616.220483][T13728] fuse: Bad value for 'user_id' [ 616.250522][ T5104] Bluetooth: hci0: command tx timeout [ 616.258451][ T5104] Bluetooth: hci4: command tx timeout [ 616.851529][T13732] loop3: detected capacity change from 0 to 32768 [ 616.911511][T13732] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 616.959329][T13732] XFS (loop3): Ending clean mount [ 617.232986][ T35] team0 (unregistering): Port device team_slave_1 removed [ 617.283114][ T35] team0 (unregistering): Port device team_slave_0 removed [ 617.916005][T13040] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 618.062539][ T29] audit: type=1804 audit(1718528295.658:10251): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3480388180/syzkaller.j2BRuf/242/bus" dev="sda1" ino=1944 res=1 errno=0 [ 618.115047][T13656] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 618.248775][T13656] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 618.292038][T13656] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 618.326086][ T5104] Bluetooth: hci4: command tx timeout [ 618.349461][T13607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.467593][T13656] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 618.559374][T13607] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.597918][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.605117][ T5116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.674586][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.681788][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.014059][T13674] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 619.030866][T13674] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 619.052508][T13674] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 619.077998][T13674] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 619.093938][T13656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.110549][T13607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.157830][T13656] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.185842][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.193057][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.208914][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.216094][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.311541][T13607] veth0_vlan: entered promiscuous mode [ 619.329864][T13765] loop3: detected capacity change from 0 to 512 [ 619.363976][T13765] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 619.365557][T13607] veth1_vlan: entered promiscuous mode [ 619.388623][T13765] EXT4-fs (loop3): Remounting filesystem read-only [ 619.395952][T13765] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 619.417706][T13765] EXT4-fs (loop3): mount failed [ 619.432364][T13674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.508841][T13674] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.548532][T13607] veth0_macvtap: entered promiscuous mode [ 619.581322][T13607] veth1_macvtap: entered promiscuous mode [ 619.595668][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.602857][ T5116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.638632][T13765] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 619.663978][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.671137][ T5116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.707654][T13607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.721935][T13607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.732312][T13607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.742812][T13607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.755076][T13607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.772596][T13656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.807253][T13607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.819590][T13607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.829500][T13607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.840172][T13607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.851803][T13607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.889309][T13607] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.904659][T13607] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.918062][T13607] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.927112][T13607] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.150151][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.172867][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.267939][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.302768][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.428206][T13656] veth0_vlan: entered promiscuous mode [ 620.444276][T13674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.478301][T13656] veth1_vlan: entered promiscuous mode [ 620.555761][T13788] fuse: Bad value for 'user_id' [ 620.569618][T13790] loop2: detected capacity change from 0 to 2048 [ 620.597402][T13656] veth0_macvtap: entered promiscuous mode [ 620.613211][T13790] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 620.627362][T13674] veth0_vlan: entered promiscuous mode [ 620.640394][T13674] veth1_vlan: entered promiscuous mode [ 620.642823][T13790] NILFS (loop2): mounting unchecked fs [ 620.651342][T13790] NILFS (loop2): recovery required for readonly filesystem [ 620.656557][T13656] veth1_macvtap: entered promiscuous mode [ 620.694816][T13790] NILFS (loop2): write access will be enabled during recovery [ 620.727121][T13778] loop3: detected capacity change from 0 to 32768 [ 620.738983][T13656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.756370][T13656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.756646][T13790] NILFS (loop2): recovery complete [ 620.767634][T13656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.782329][T13656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.796154][T13656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.807779][T13656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.820404][T13656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.860550][T13674] veth0_macvtap: entered promiscuous mode [ 620.906769][T13656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.935765][T13656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.958674][T13656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.992462][T13656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.008787][T13778] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 621.030809][T13656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.041372][T13656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.057535][T13778] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 621.067183][T13656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.098351][T13674] veth1_macvtap: entered promiscuous mode [ 621.112250][T13656] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.125599][T13656] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.135518][T13656] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.145238][T13656] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.157549][T13778] bcachefs (loop3): alloc_read... done [ 621.164125][T13778] bcachefs (loop3): stripes_read... done [ 621.169874][T13778] bcachefs (loop3): snapshots_read... done [ 621.206743][T13778] bcachefs (loop3): journal_replay... done [ 621.228289][T13778] bcachefs (loop3): resume_logged_ops... done [ 621.245670][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.258654][T13778] bcachefs (loop3): going read-write [ 621.264280][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.274353][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.285966][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.297766][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.300518][T13778] bcachefs (loop3): done starting filesystem [ 621.308294][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.308310][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.308326][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.309989][T13674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.360518][ T29] audit: type=1800 audit(1718528298.958:10252): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=4102 res=0 errno=0 [ 621.404038][ T29] audit: type=1800 audit(1718528299.008:10253): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=4102 res=0 errno=0 [ 621.410159][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.444028][ T29] audit: type=1800 audit(1718528299.048:10254): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=4102 res=0 errno=0 [ 621.444745][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.480814][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.491352][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.509177][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.519653][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.537155][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.548079][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.571009][T13674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.574892][T13040] bcachefs (loop3): shutting down [ 621.584556][T13040] bcachefs (loop3): going read-only [ 621.589900][T13040] bcachefs (loop3): finished waiting for writes to stop [ 621.590497][T13674] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.608826][T13674] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.617909][T13674] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.626758][T13674] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.636489][T13040] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 621.672846][T13040] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11 [ 621.683028][ T5111] Bluetooth: hci4: command 0x0405 tx timeout [ 621.685097][T13040] bcachefs (loop3): shutdown complete, journal seq 12 [ 621.713598][T13040] bcachefs (loop3): marking filesystem clean [ 621.747124][T13040] bcachefs (loop3): shutdown complete [ 621.822915][T10330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.830747][T10330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.841715][ T2787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.863119][ T2787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.919710][ T2787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.929969][ T2787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.966372][T10358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.988618][T10358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.658647][T13840] loop1: detected capacity change from 0 to 512 [ 622.689124][T13826] fuse: Bad value for 'user_id' [ 622.698062][T13840] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 622.741806][T13840] EXT4-fs (loop1): orphan cleanup on readonly fs [ 622.773032][T13840] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 622.834924][T13840] EXT4-fs error (device loop1): ext4_quota_enable:7037: comm syz-executor.1: Bad quota inode: 3, type: 0 [ 622.859253][T13840] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 622.883159][T13840] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 622.891255][T13840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 623.059505][T13674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.300956][T13853] syz-executor.2: attempt to access beyond end of device [ 623.300956][T13853] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 623.321427][T13853] vxfs: unable to read disk superblock at 1 [ 623.330499][T13853] syz-executor.2: attempt to access beyond end of device [ 623.330499][T13853] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 623.349381][T13853] vxfs: unable to read disk superblock at 8 [ 623.355572][T13853] vxfs: can't find superblock. [ 623.553135][ T784] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 623.784078][ T784] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=8d.4e [ 623.817628][ T784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.872470][ T784] usb 1-1: Product: syz [ 623.896495][ T784] usb 1-1: Manufacturer: syz [ 623.930638][ T784] usb 1-1: SerialNumber: syz [ 623.959544][ T784] usb 1-1: config 0 descriptor?? [ 623.988404][ T784] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 624.017903][ T784] imon 1-1:0.0: unable to initialize intf0, err -19 [ 624.648957][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.655352][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.873862][ T784] imon:imon_probe: failed to initialize context! [ 626.880272][ T784] imon 1-1:0.0: unable to register, err -19 [ 626.952810][T13604] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 628.252976][ T784] usb 1-1: USB disconnect, device number 23 [ 628.476528][T13869] loop3: detected capacity change from 0 to 4096 [ 628.510094][T13874] loop2: detected capacity change from 0 to 512 [ 628.538092][T13874] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 628.581960][T13874] EXT4-fs (loop2): orphan cleanup on readonly fs [ 628.588539][T13874] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 628.612780][T13874] EXT4-fs error (device loop2): ext4_quota_enable:7037: comm syz-executor.2: Bad quota inode: 3, type: 0 [ 628.633315][T13874] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 628.653300][T13874] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 628.661674][T13874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 628.903774][T13882] fuse: Bad value for 'user_id' [ 628.947762][T13607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.783419][T13883] loop1: detected capacity change from 0 to 1024 [ 629.809853][T13883] EXT4-fs: Ignoring removed orlov option [ 629.819057][T13883] EXT4-fs (loop1): Test dummy encryption mode enabled [ 629.829230][T13883] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 629.941716][T13883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.099025][ T29] audit: type=1326 audit(1718528307.698:10255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13888 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698c27cea9 code=0x7fc00000 [ 630.179600][ T29] audit: type=1800 audit(1718528307.698:10256): pid=13893 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1943 res=0 errno=0 [ 630.258976][ T29] audit: type=1326 audit(1718528307.698:10257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13888 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f698c27cea9 code=0x7fc00000 [ 630.554195][T13674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.691368][ T29] audit: type=1804 audit(1718528308.288:10258): pid=13901 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3480388180/syzkaller.j2BRuf/258/bus" dev="sda1" ino=1953 res=1 errno=0 [ 630.838329][ T29] audit: type=1326 audit(1718528308.428:10259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13888 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698c27cea9 code=0x7fc00000 [ 631.022849][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 631.041637][T13900] loop2: detected capacity change from 0 to 40427 [ 631.143025][T13900] F2FS-fs (loop2): heap/no_heap options were deprecated [ 631.178500][T13900] F2FS-fs (loop2): invalid crc value [ 631.185890][T13900] F2FS-fs (loop2): Found nat_bits in checkpoint [ 631.206698][T13910] can0: slcan on ptm0. [ 631.259424][ T8] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=8d.4e [ 631.299307][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.309247][T13900] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 631.343135][ T8] usb 2-1: Product: syz [ 631.352822][ T8] usb 2-1: Manufacturer: syz [ 631.376331][ T8] usb 2-1: SerialNumber: syz [ 631.399881][ T8] usb 2-1: config 0 descriptor?? [ 631.420288][ T8] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 631.467200][ T8] imon 2-1:0.0: unable to initialize intf0, err -19 [ 631.511374][ T8] imon:imon_probe: failed to initialize context! [ 631.524406][ T8] imon 2-1:0.0: unable to register, err -19 [ 632.038922][T13607] syz-executor.2: attempt to access beyond end of device [ 632.038922][T13607] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 634.283087][T13607] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 635.883242][T13908] can0 (unregistered): slcan off ptm0. [ 635.976121][ T784] usb 2-1: USB disconnect, device number 5 [ 636.062190][T13917] kexec: Could not allocate control_code_buffer [ 636.635227][ T29] audit: type=1800 audit(1718528314.228:10260): pid=13942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1944 res=0 errno=0 [ 636.701583][ T29] audit: type=1804 audit(1718528314.238:10261): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3480388180/syzkaller.j2BRuf/263/file0" dev="sda1" ino=1943 res=1 errno=0 [ 636.737333][T13945] loop4: detected capacity change from 0 to 512 [ 636.761846][T13946] loop2: detected capacity change from 0 to 2048 [ 636.781092][T13945] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 636.798959][T13945] UDF-fs: Scanning with blocksize 512 failed [ 636.815950][T13945] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 636.837254][T13945] UDF-fs: Scanning with blocksize 1024 failed [ 636.838177][T13948] nbd: socks must be embedded in a SOCK_ITEM attr [ 636.874099][T13945] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 636.912134][T13945] UDF-fs: Scanning with blocksize 2048 failed [ 636.929861][T13946] loop2: detected capacity change from 0 to 1024 [ 636.938492][T13945] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 636.960725][T13945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 636.966359][T13946] hfsplus: unable to parse mount options [ 637.016498][ T29] audit: type=1800 audit(1718528314.618:10262): pid=13945 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=42 res=0 errno=0 [ 638.832112][T13989] loop4: detected capacity change from 0 to 2048 [ 639.021184][T13989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.060348][T13989] ext4 filesystem being mounted at /root/syzkaller-testdir2329252867/syzkaller.5Tje0Y/12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.164981][T13656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.640374][T14013] loop1: detected capacity change from 0 to 32768 [ 641.024189][T14041] loop3: detected capacity change from 0 to 512 [ 641.036055][T14041] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 641.125345][ T5104] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 641.136122][ T5104] Bluetooth: hci1: Injecting HCI hardware error event [ 641.146169][ T4478] Bluetooth: hci1: hardware error 0x00 [ 641.245442][T14041] EXT4-fs (loop3): 1 truncate cleaned up [ 641.252343][T14041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.548835][T13040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.283268][ T4478] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 643.310770][T14092] loop2: detected capacity change from 0 to 4096 [ 645.227123][T14099] loop4: detected capacity change from 0 to 256 [ 645.251364][T14099] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 646.200292][T14107] loop1: detected capacity change from 0 to 32768 [ 646.434987][T14114] loop3: detected capacity change from 0 to 32768 [ 646.553863][T14118] loop4: detected capacity change from 0 to 32768 [ 646.676506][T14118] XFS (loop4): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 646.733718][T14114] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names [ 646.753728][T14114] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 646.779709][T14118] XFS (loop4): Ending clean mount [ 646.807864][T14114] bcachefs (loop3): alloc_read... done [ 646.828072][T14114] bcachefs (loop3): stripes_read... done [ 646.838683][T14114] bcachefs (loop3): snapshots_read... done [ 646.853438][T14114] bcachefs (loop3): journal_replay... done [ 646.898345][T14114] bcachefs (loop3): resume_logged_ops... done [ 646.904763][T14114] bcachefs (loop3): going read-write [ 646.907516][T14119] loop2: detected capacity change from 0 to 65536 [ 646.926901][T14114] bcachefs (loop3): done starting filesystem [ 647.576997][T14118] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 647.768782][T13040] bcachefs (loop3): shutting down [ 647.793706][T13040] bcachefs (loop3): going read-only [ 647.823149][T13040] bcachefs (loop3): finished waiting for writes to stop [ 647.874133][T13656] XFS (loop4): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 647.889832][T13040] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8 [ 647.916514][T13040] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8 [ 648.016996][T13040] bcachefs (loop3): shutdown complete, journal seq 9 [ 648.050450][T13040] bcachefs (loop3): marking filesystem clean [ 648.224372][T13040] bcachefs (loop3): shutdown complete [ 648.250591][T14158] loop1: detected capacity change from 0 to 8192 [ 648.536176][T14165] input: syz0 as /devices/virtual/input/input8 [ 648.545578][ T29] audit: type=1800 audit(1718528326.148:10263): pid=14166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 649.958827][T14195] loop3: detected capacity change from 0 to 512 [ 650.104978][T14195] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 650.175538][T14195] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 650.204313][T14195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.631070][ T29] audit: type=1800 audit(1718528328.208:10264): pid=14207 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 651.201689][T13040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.087195][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.093623][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.299340][ T4478] Bluetooth: hci3: command 0x0406 tx timeout [ 734.259945][ T5111] Bluetooth: hci0: command 0x0406 tx timeout [ 761.402624][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 761.409655][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5072/2:b..l [ 761.418658][ C0] rcu: (detected by 0, t=10503 jiffies, g=79677, q=390 ncpus=2) [ 761.426389][ C0] task:sshd state:R running task stack:23680 pid:5072 tgid:5072 ppid:4828 flags:0x00000002 [ 761.439985][ C0] Call Trace: [ 761.443277][ C0] [ 761.446225][ C0] __schedule+0x1796/0x49d0 [ 761.450747][ C0] ? vfs_write+0xa72/0xc90 [ 761.455199][ C0] ? __pfx___schedule+0x10/0x10 [ 761.460069][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 761.466069][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 761.471373][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 761.476499][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 761.482251][ C0] irqentry_exit+0x5e/0x90 [ 761.486681][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 761.492680][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 761.498754][ C0] Code: 8b 3d bc 5c 44 0c 48 89 de 5b e9 13 06 57 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 c0 d4 03 00 65 8b 15 a0 ae 6d 7e f7 c2 00 01 ff 00 [ 761.518372][ C0] RSP: 0018:ffffc90003f1f078 EFLAGS: 00000246 [ 761.524450][ C0] RAX: ffffffff8999b310 RBX: 0000000000000000 RCX: ffff888029373c00 [ 761.532426][ C0] RDX: ffff888029373c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 761.540404][ C0] RBP: ffffffff8999b1f0 R08: ffffffff8999b27d R09: ffffffff89955ca7 [ 761.548383][ C0] R10: 0000000000000004 R11: ffffffff8999b1f0 R12: dffffc0000000000 [ 761.556362][ C0] R13: ffff888063308900 R14: ffffc90003f1f160 R15: ffff888050b9f4f0 [ 761.564344][ C0] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 761.570081][ C0] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 761.575809][ C0] ? nf_hook_slow+0xd7/0x220 [ 761.580408][ C0] ? ipv4_conntrack_local+0x8d/0x200 [ 761.585702][ C0] ? ipv4_conntrack_local+0x120/0x200 [ 761.591093][ C0] ? __pfx_lock_release+0x10/0x10 [ 761.596123][ C0] ipv4_conntrack_local+0x120/0x200 [ 761.601337][ C0] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 761.607067][ C0] nf_hook_slow+0xc3/0x220 [ 761.611499][ C0] ? __pfx_dst_output+0x10/0x10 [ 761.616365][ C0] nf_hook+0x2c4/0x450 [ 761.620449][ C0] ? nf_hook+0x9e/0x450 [ 761.624613][ C0] ? __pfx_nf_hook+0x10/0x10 [ 761.629209][ C0] ? ip_route_output_key_hash+0xdf/0x2b0 [ 761.634857][ C0] ? __pfx_dst_output+0x10/0x10 [ 761.639726][ C0] __ip_local_out+0x3d9/0x4e0 [ 761.644413][ C0] ? __pfx_dst_output+0x10/0x10 [ 761.649281][ C0] __ip_queue_xmit+0x1162/0x1b70 [ 761.654237][ C0] ? __ip_queue_xmit+0x5f/0x1b70 [ 761.659188][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 761.664312][ C0] __tcp_transmit_skb+0x2557/0x3b80 [ 761.669544][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 761.675097][ C0] ? timekeeping_get_ns+0x5c/0x420 [ 761.680210][ C0] ? seqcount_lockdep_reader_access+0x157/0x220 [ 761.686457][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 761.691668][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 761.698261][ C0] ? ktime_get+0x3c/0xb0 [ 761.702533][ C0] ? tcp_small_queue_check+0x206/0x410 [ 761.708005][ C0] tcp_write_xmit+0x18b3/0x69d0 [ 761.712887][ C0] ? _copy_from_iter+0x26b/0x1960 [ 761.717932][ C0] ? __pfx_lock_release+0x10/0x10 [ 761.722968][ C0] ? __alloc_skb+0x2d5/0x440 [ 761.727594][ C0] __tcp_push_pending_frames+0x9b/0x360 [ 761.733167][ C0] tcp_sendmsg_locked+0x43b1/0x4e10 [ 761.738428][ C0] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 761.744158][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 761.749550][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 761.754771][ C0] tcp_sendmsg+0x30/0x50 [ 761.759026][ C0] __sock_sendmsg+0x1a6/0x270 [ 761.763728][ C0] sock_write_iter+0x2dd/0x400 [ 761.768510][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 761.773815][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 761.779192][ C0] ? security_file_permission+0x7f/0xa0 [ 761.784754][ C0] vfs_write+0xa72/0xc90 [ 761.789018][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 761.794324][ C0] ? __pfx_vfs_write+0x10/0x10 [ 761.799113][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 761.804155][ C0] ksys_write+0x1a0/0x2c0 [ 761.808501][ C0] ? __pfx_ksys_write+0x10/0x10 [ 761.813364][ C0] ? do_syscall_64+0x100/0x230 [ 761.818138][ C0] ? do_syscall_64+0xb6/0x230 [ 761.822826][ C0] do_syscall_64+0xf3/0x230 [ 761.827337][ C0] ? clear_bhb_loop+0x35/0x90 [ 761.832026][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.837934][ C0] RIP: 0033:0x7efc08316bf2 [ 761.842361][ C0] RSP: 002b:00007ffd531cdab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 761.850781][ C0] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007efc08316bf2 [ 761.858757][ C0] RDX: 000000000000001c RSI: 0000564f68d53960 RDI: 0000000000000004 [ 761.866737][ C0] RBP: 0000564f68d61220 R08: 0000000000000000 R09: 0000000000000000 [ 761.874714][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000564f68d61570 [ 761.882690][ C0] R13: 0000564f46ca8390 R14: 0000564f46ca7aa4 R15: 0000000000000000 [ 761.890684][ C0] [ 761.893707][ C0] rcu: rcu_preempt kthread starved for 10256 jiffies! g79677 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 761.904907][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 761.914874][ C0] rcu: RCU grace-period kthread stack dump: [ 761.920775][ C0] task:rcu_preempt state:R running task stack:25896 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 761.932532][ C0] Call Trace: [ 761.935823][ C0] [ 761.938769][ C0] __schedule+0x1796/0x49d0 [ 761.943310][ C0] ? __pfx___schedule+0x10/0x10 [ 761.948179][ C0] ? __pfx_lock_release+0x10/0x10 [ 761.953209][ C0] ? __asan_memset+0x23/0x50 [ 761.957820][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 761.963634][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 761.969974][ C0] ? schedule+0x90/0x320 [ 761.974224][ C0] schedule+0x14b/0x320 [ 761.978396][ C0] schedule_timeout+0x1be/0x310 [ 761.983261][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 761.988647][ C0] ? __pfx_process_timeout+0x10/0x10 [ 761.993949][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 761.999508][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 762.004379][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 762.010451][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 762.015739][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 762.021649][ C0] ? finish_swait+0xd4/0x1e0 [ 762.026251][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 762.030854][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 762.036055][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 762.041960][ C0] ? __kthread_parkme+0x169/0x1d0 [ 762.046997][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 762.052203][ C0] kthread+0x2f0/0x390 [ 762.056284][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 762.061488][ C0] ? __pfx_kthread+0x10/0x10 [ 762.066086][ C0] ret_from_fork+0x4b/0x80 [ 762.070510][ C0] ? __pfx_kthread+0x10/0x10 [ 762.075110][ C0] ret_from_fork_asm+0x1a/0x30 [ 762.079899][ C0] [ 762.082921][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 762.089254][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 762.098977][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 762.109037][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 762.114337][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d4 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d e5 95 aa 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 762.133949][ C0] RSP: 0018:ffffffff8e007ca8 EFLAGS: 00000246 [ 762.140020][ C0] RAX: ffffffff8e094680 RBX: ffff88801b2bf064 RCX: 00000000005c3829 [ 762.147997][ C0] RDX: 0000000000000001 RSI: ffff88801b2bf000 RDI: ffff88801b2bf064 [ 762.155971][ C0] RBP: 000000000003a578 R08: ffff8880b9437d0b R09: 1ffff11017286fa1 [ 762.163947][ C0] R10: dffffc0000000000 R11: ffffffff8b7e1a30 R12: ffff88801abb5000 [ 762.171921][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eabc280 [ 762.179895][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 762.188828][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.195416][ C0] CR2: 0000000020033a80 CR3: 0000000023412000 CR4: 00000000003506f0 [ 762.203399][ C0] DR0: 000000000000eda1 DR1: 0000000000000000 DR2: 0000000000000000 [ 762.211385][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 762.219358][ C0] Call Trace: [ 762.222640][ C0] [ 762.225486][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 762.231831][ C0] ? print_other_cpu_stall+0x1470/0x15a0 [ 762.237486][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 762.243311][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 762.249560][ C0] ? rcu_sched_clock_irq+0x9f4/0x10a0 [ 762.254949][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 762.260590][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 762.265804][ C0] ? update_process_times+0x1ce/0x230 [ 762.271186][ C0] ? tick_nohz_handler+0x37c/0x500 [ 762.276308][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 762.281769][ C0] ? __hrtimer_run_queues+0x551/0xd50 [ 762.287147][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 762.293147][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 762.298880][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 762.304963][ C0] ? hrtimer_interrupt+0x396/0x990 [ 762.310108][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 762.316273][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 762.322089][ C0] [ 762.325032][ C0] [ 762.327968][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 762.334134][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 762.339433][ C0] ? acpi_safe_halt+0x21/0x30 [ 762.344123][ C0] acpi_idle_enter+0xe4/0x140 [ 762.348811][ C0] cpuidle_enter_state+0x112/0x480 [ 762.353935][ C0] ? __pfx_menu_select+0x10/0x10 [ 762.358884][ C0] cpuidle_enter+0x5d/0xa0 [ 762.363314][ C0] do_idle+0x375/0x5d0 [ 762.367400][ C0] ? __pfx_do_idle+0x10/0x10 [ 762.371999][ C0] ? rest_init+0x31/0x300 [ 762.376346][ C0] ? do_idle+0x5/0x5d0 [ 762.380420][ C0] ? rest_init+0x31/0x300 [ 762.384759][ C0] cpu_startup_entry+0x42/0x60 [ 762.389532][ C0] rest_init+0x2dc/0x300 [ 762.393785][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 762.399350][ C0] start_kernel+0x47a/0x500 [ 762.403877][ C0] x86_64_start_reservations+0x2a/0x30 [ 762.409348][ C0] x86_64_start_kernel+0x99/0xa0 [ 762.414294][ C0] common_startup_64+0x13e/0x147 [ 762.419252][ C0]