last executing test programs: 3m15.983148583s ago: executing program 2 (id=673): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x86, 0x7e4000, 0x100}) 3m12.315297289s ago: executing program 2 (id=683): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9}, 0x10) 3m9.663121549s ago: executing program 2 (id=690): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000040)='./bus\x00', 0x18, &(0x7f0000000300)={[{@space_cache_v1}, {@nossd_spread}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@clear_cache}, {@noacl}, {@notreelog}, {@barrier}, {@ref_verify}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x1ff) read(r0, 0x0, 0x0) 3m7.087875059s ago: executing program 2 (id=695): socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) 3m5.315081786s ago: executing program 2 (id=702): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x14800, &(0x7f0000000140), 0x1, 0x9806, &(0x7f00000130c0)="$eJzs3QXYZHXBsPFnl6UbCwNZGotuDEJBBAEJKSWkJQWUMAARBEQBSUERUKREkO7u7u7u7vyuZXcV1xte/b73+nhf7/u+rueZmTNnzp75/86c55k988wsv9DSCwwMTDQwvJGnf+/glz995OYvL7DD0dcf9tLChy565IjJYww/GTJ0xOkUI06nHBgYGDRiOYOGTxs85PgTBg+MNTAw+J3LHW/scQeNNzCwxoiL8404nXP4yfjXjJzvrVHiFR22GoN2Hv41/B8dGBgYe9iZZwZmXO6dyxmxXjP90x2Vtsj8C8z6d6u/uQ0bvyEjzr/za4zhX+NfNjAw/qUDvH0Men/v0dtNtOcFK6z4fq/E/4aWn3/hRUbxH/ZYHG3EtDmHPcZHfQwaG3U7HzrnHSP3QYNwx/m/pOXnX2ixgXffzw+s/OYBm7719n5z8DgDA4PHHRgYPN7AwODxBwYGTzAwMHjC99ul/t96Xze+qqqqel+af4FZFxj2fG+U3wfGGvl7Lf1euNIbS9wxMDAw+vB5Bs8x8rlgVVVVVVVVVf3PbP4FZl0Qnv9P9F7P/4879dXpe/5fVVVVVVVV9b+nka//HuX5/6Tv9fx/mwdeXH/Ea//nHH6rN9/fO1FVVVVVVVVV79lSX3/7+f+4ozz/H/pez/8fnnenB0fMN/L/Dd54xyIHveP1BK+9Y/po75j/1XdMH/KO6e+cf4yBgcFDRkx//e+TB48z7Lp/nn/wRMPWe8T0V94xfaa//33zkKnfMX3md0yf9h3TZxmxrsOmT/eO6bO/Y/7p/5Wxraqqqqqqqqqqqqqqqqqq+v/Vm0+ceubf3/P9kwPveP/2v72P+4jXBQw65uyrr37fVvR/RoP++fUQ27zf6/T/2jDnsY4YOjCw4bLv96rU+9D/hM9rqPev/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Lsc///b+/9PdugaI/9mfs6Dd518gnfedt13nB/r/+tav2/9px7/H1h30MDACN+JhrkuPv9Sy0w/MDAwweS7HjzbwN+um2vYdfNOMtqIN0gY/jYI0wzhBW8z4lPRtxkx64hlHPP28hd566DRBo2yEu9o4hMPOWSd5V+abdTTad/9fgweeeZDl2yx4Mj3shg8ykzvtp2OXP7I+zKq84h1n37Yus+42QYbz7jpllt9bt0NVlt7zbXX3HDuOeeca/Y555h7lhnXWnf9NWca/v3dxmzo29+n+lfGbNJRx+yJ+d85ZqPet3cbs6HvPWZvL3HMPVZZb+SYjbpq/9WYTfXeYzZ03RH/0JChow+s+vbYDBoYGDL16ANbDLsw85gDA0OmGTHvpMPm/fwkgwcGdvv7HR12bsy/bYODthk2z/ILLb3A3z92/58/fv9dPs9+jOEnQ0YMyZApRpxOOfyfmWjg75vi4CHHnzB42H3/h2Eeb+xxB403MLDGiIvzjTide8S1V46c710+Z32UFX37bVZ2Hv71N4+xh505askJb3rnct6F4L+j/6uf///kNdegvw3UoBFfI+YZ7jX/wov8/d96exjmG/meMMN+tgwz+X/4GPv/sn9a36Fjvf0mt++2vu/xvrjD7z9sX9M+dt7Q/673xeV9x2Jvfx/6r+w7Bt573zHa38/+feqaV0w26r5j0XdfxX94XIwcozFHmend9h3T7zv/1m/vm95737HYuiM+aOjv+47BAwNDphq57xi2I5l29IHdhl2YZdiF6UYfOGzYhVnfvjD2wNnDLsyw+kbrrzHo7bftGbHcmYYtd75JBr1956+ecf4jR9vzrbemHrEuM42yYx2xfQx958/H+ScZPmwjb0vLvXuz4ddNO2K5M/8byx15W1ruXJsMv266EcudZZTljvYeyx1525GPh2Gzvv14mH7QP7zwEx6/C43y+B00crf+jpuM/Bpj+Nf4l438bCh4vPxb+x16/E70Huv7Hp9rhdvbsGnbLX7Fqf9dn2tF6zvWe6/vu30O97uu73pjb7HEf8P6DnrH+v7DdrbxPMO3lelHbGez/xvb78jbjrofG/3ta4czTP+v7Mfm+6f92LajDR5l5d/Ru/0OtAbMP/z8pH9b2tyHjzbhyLEffZTl/le/A03/3vuxidYd5XYLHTgwiMb84ccPWWfM/2LMRx/4x9/VR475yNu+15hP989jPuifxnyu9x7zf/X3zumnGn79aO8x5oN33HTxkWM+xr855tP9u2M+38BoNOa77Td83N5rf/puYz7ytv845kMGvjIwMDD1iDGf9l/Zzmf679nOx4H5h59/4G+TLpnsjF3esY8Z9O+M+bT/7pgP/dt2PvXb1005eGCMMQa2WG2zzTaZefj3kRdnGf6d90VP3z98nN/rZ+m7GY287Xs9Lqb+V4yG/vcYfWzIP88/8knHyMvLnn3UxP+3+6Kp/z2jQQsN8L7o5IuGj9t7/V70bmM+8rb0c3DoO24/6vO693g/SrxPw6bts+9et49c5Iib9X6U/3r/sNmO/D++dUfdydd/av3/v7v83eXvLn93+Yt7l+P/f3v//4cnWvqxEU+SR999nrVXf7/X933uP/r4/wjffzj+v/ra8+w+7KngiOve8/js8Hn+Rx6fnXP4yfjXjJxv1OODvKLvfnx2uj1mWGrg/8/x2f+rRj5W/4Xn8e3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uJGHP8fGOX4/8jXKA/d/437txlxIHT0vfda/Y33d23f9/6jj/+P8P2H4/9vrL7X3oMH/nbdex7/Hz6P4/j/EvvvecLA/+Dj/yMfqx3/r/+i/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Lv8/f98I18HMMcqa+088vUAG878pe3f7/V9n/tPPf7f5/97a//vLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yF/ePf///t5Zsu8Dg+P//7t7F/xv5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvH/Zv6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4fyt/zOL/7fwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+H8nf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bx/27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+G+cP2bx/17+mMV/k/wxi/+m+WMW/83yxyz+388fs/j/IH/M4r95/pjFf4v8MYv/lvljFv+t8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/lvnj1n8t8kfs/hvmz9m8f9p/pjFf7v8MYv/z/LHLP7b549Z/HfIH7P4/zx/zOK/Y/6YxX+n/DGL/875Yxb/X+SPWfx3yR+z+P8yf8zi/6v8MYv/rvljFv/d8scs/rvnj1n8f50/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n8f5M/ZvHfL3/M4r9//pjF/7f5Yxb/3+WPWfwPyB+z+P8+f8zif2D+mMX/oPwxi//B+WMW/z/kj1n8/5g/ZvE/JH/M4v+n/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvH/c/6Yxf+o/DGL/1/yxyz+R+ePWfyPyR+z+P81f8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+T+A8ayB+z+A/KH7P4D84fs/iPlj9m8R+SP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvGfNH/M4v/R/DGL/8fyxyz+H88fs/h/In/M4j9Z/pjF/5P5Yxb/yfPHLP5D88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+n8ofs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v/l/DGL/1fyxyz+C+WPWfwXzh+z+H81f8ziv0j+mMX/a/ljFv9F88cs/ovlj1n8v54/ZvFfPH/M4r9E/pjFf8n8MYv/N/LHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/N/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvH/Vv6Yxf/b+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bx/07+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOL/vfwxi/8m+WMW/03zxyz+m+WPWfy/nz9m8f9B/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8t84fs/hvkz9m8d82f8zi/9P8MYv/dvljFv+f5Y9Z/LfPH7P475A/ZvH/ef6YxX/H/DGL/075Yxb/nfPHLP6/yB+z+O+SP2bx/2X+mMX/V/ljFv9d88cs/rvlj1n8d88fs/j/On/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/j/Jn/M4r9f/pjFf//8MYv/b/PHLP6/yx+z+B+QP2bx/33+mMX/wPwxi/9B+WMW/4Pzxyz+f8gfs/j/MX/M4n9I/pjF/0/5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4v/n/DGL/1H5Yxb/v+SPWfyPzh+z+B+TP2bx/2v+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxf/ts/v+cxX9Q/pjFf3D+mMV/tPwxi/+Q/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8zi/4H8MYv/B/PHLP4fyh+z+H84f8zi/5H8MYv/pPljFv+P5o9Z/D+WP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvEfmj9m8Z8if8ziP2X+mMV/qvwxi//U+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bx/1T+mMX/0/ljFv/P5I9Z/D+bP2bx/1z+mMV/hvwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvH/fP6Yxf8L+WMW/y/mj1n8v5Q/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv8v549Z/L+SP2bxXyh/zOK/cP6Yxf+r+WMW/0Xyxyz+X8sfs/gvmj9m8V8sf8zi//X8MYv/4vljFv8l8scs/kvmj1n8v5E/ZvFfKn/M4r90/pjFf5n8MYv/svljFv9v5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjFf6X8MYv/t/LHLP7fzh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/3fyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/7+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/7+WPWfw3yR+z+G+aP2bx3yx/zOL//fwxi/8P8scs/pvnj1n8t8gfs/hvmT9m8d8qf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8ziv3X+mMV/m/wxi/+2+WMW/5/mj1n8t8sfs/j/LH/M4r99/pjFf4f8MYv/z/PHLP475o9Z/HfKH7P475w/ZvH/Rf6YxX+X/DGL/y/zxyz+v8ofs/jvmj9m8d8tf8ziv3v+mMX/1/ljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMX/N/ljFv/98scs/vvnj1n8f5s/ZvH/Xf6Yxf+A/DGL/+/zxyz+B+aPWfwPyh+z+B+cP2bx/0P+mMX/j/ljFv9D8scs/n/KH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv8/549Z/I/KH7P4/yV/zOJ/dP6Yxf+Y/DGL/1/zxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGJ/2gD+WMW/0H5Yxb/wfljFv/R8scs/kPyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/B/LHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP6T5o9Z/D+aP2bx/1j+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6YxX9o/pjFf4r8MYv/lPljFv+p8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMX/c/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+cP2bx/0r+mMV/ofwxi//C+WMW/6/mj1n8F8kfs/h/LX/M4r9o/pjFf7H8MYv/1/PHLP6L549Z/JfIH7P4L5k/ZvH/Rv6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/L+ZP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP7fyh+z+H87f8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+38kfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfy/mz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfy/lz9m8d8kf8ziv2n+mMV/s/wxi//388cs/j/IH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/D/PHLP4/yh+z+P84f8zi/5P8MYv/1vljFv9t8scs/tvmj1n8f5o/ZvHfLn/M4v+z/DGL//b5Yxb/HfLHLP4/zx+z+O+YP2bx3yl/zOK/c/6Yxf8X+WMW/13yxyz+v8wfs/j/Kn/M4r9r/pjFf7f8MYv/7vljFv9f549Z/PfIH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/f5I9Z/PfLH7P4758/ZvH/bf6Yxf93+WMW/wPyxyz+v88fs/gfmD9m8T8of8zif3D+mMX/D/ljFv8/5o9Z/A/JH7P4/yl/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/P+cP2bxPyp/zOL/l/wxi//R+WMW/2Pyxyz+f80fs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyT+Qwbyxyz+g/LHLP6D88cs/qPlj1n8h+SPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/CfNH7P4fzR/zOL/sfwxi//H88cs/p/IH7P4T5Y/ZvH/ZP6YxX/y/DGL/9D8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi//n8scs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4fzl/zOL/lfwxi/9C+WMW/4Xzxyz+X80fs/gvkj9m8f9a/pjFf9H8MYv/YvljFv+v549Z/BfPH7P4L5E/ZvFfMn/M4v+N/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4fzN/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/L+VP2bx/3b+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfy/kz9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+H83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+H8vf8ziv0n+mMV/0/wxi/9m+WMW/+/nj1n8f5A/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv+t88cs/tvkj1n8t80fs/j/NH/M4r9d/pjF/2f5Yxb/7fPHLP475I9Z/H+eP2bx3zF/zOK/U/6YxX/n/DGL/y/yxyz+u+SPWfx/mT9m8f9V/pjFf9f8MYv/bvljFv/d88cs/r/OH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/r/JH7P475c/ZvHfP3/M4v/b/DGL/+/yxyz+B+SPWfx/nz9m8T8wf8zif1D+mMX/4Pwxi/8f8scs/n/MH7P4H5I/ZvH/U/6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4/zl/zOJ/VP6Yxf8v+WMW/6Pzxyz+x+SPWfz/mj9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPSfxHH8gfs/gPyh+z+A/OH7P4j5Y/ZvEfkj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bxnzR/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+Q/PHLP5T5I9Z/KfMH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/p/KH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+8+WPWfznzx+z+C+QP2bxXzB/zOL/5fwxi/9X8scs/gvlj1n8F84fs/h/NX/M4r9I/pjF/2v5Yxb/RfPHLP6L5Y9Z/L+eP2bxXzx/zOK/RP6YxX/J/DGL/zfyxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/zfwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bx/1b+mMX/2/ljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9O/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/738MYv/JvljFv9N88cs/pvlj1n8v58/ZvH/Qf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/H+YP2bx/1H+mMX/x/ljFv+f5I9Z/LfOH7P4b5M/ZvHfNn/M4v/T/DGL/3b5Yxb/n+WPWfy3zx+z+O+QP2bx/3n+mMV/x/wxi/9O+WMW/53zxyz+v8gfs/jvkj9m8f9l/pjF/1f5Yxb/XfPHLP675Y9Z/HfPH7P4/zp/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P4/yZ/zOK/X/6YxX///DGL/2/zxyz+v8sfs/gfkD9m8f99/pjF/8D8MYv/QfljFv+D88cs/n/IH7P4/zF/zOJ/SP6Yxf9P+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOL/5/wxi/9R+WMW/7/kj1n8j84fs/gfkz9m8f9r/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT8m8R9jIH/M4j8of8ziPzh/zOI/Wv6YxX9I/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bx/0D+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMV/0vwxi/9H88cs/h/LH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/gPzR+z+E+RP2bxnzJ/zOI/Vf6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/+X88cs/l/JH7P4L5Q/ZvFfOH/M4v/V/DGL/yL5Yxb/r+WPWfwXzR+z+C+WP2bx/3r+mMV/8fwxi/8S+WMW/yXzxyz+38gfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/8388cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMX/W/ljFv9v549Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/zv5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/d/PHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjFf+P8MYv/9/LHLP6b5I9Z/DfNH7P4b5Y/ZvH/fv6Yxf8H+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bx3zp/zOK/Tf6YxX/b/DGL/0/zxyz+2+WPWfx/lj9m8d8+f8ziv0P+mMX/5/ljFv8d88cs/jvlj1n8d84fs/j/In/M4r9L/pjF/5f5Yxb/X+WPWfx3zR+z+O+WP2bx3z1/zOL/6/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOL/m/wxi/9++WMW//3zxyz+v80fs/j/Ln/M4n9A/pjF//f5Yxb/A/PHLP4H5Y9Z/A/OH7P4/yF/zOL/x/wxi/8h+WMW/z/lj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/+f88cs/kflj1n8/5I/ZvE/On/M4n9M/pjF/6/5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjEf8yB/DGL/6D8MYv/4Pwxi/9o+WMW/yH5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMX/A/ljFv8P5o9Z/D+UP2bx/3D+mMX/I/ljFv9J88cs/h/NH7P4fyx/zOL/8fwxi/8n8scs/pPlj1n8P5k/ZvGfPH/M4j80f8ziP0X+mMV/yvwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/qfwxi/+n88cs/p/JH7P4fzZ/zOL/ufwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4v/5/DGL/xfyxyz+X8wfs/h/KX/M4j9f/pjFf/78MYv/AvljFv8F88cs/l/OH7P4fyV/zOK/UP6YxX/h/DGL/1fzxyz+i+SPWfy/lj9m8V80f8ziv1j+mMX/6/ljFv/F88cs/kvkj1n8l8wfs/h/I3/M4r9U/pjFf+n8MYv/MvljFv9l88cs/t/MH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv9v5Y9Z/L+dP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/7+SPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7fzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP7fyx+z+G+SP2bx3zR/zOK/Wf6Yxf/7+WMW/x/kj1n8N88fs/hvkT9m8d8yf8ziv1X+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMV/6/wxi/82+WMW/23zxyz+P80fs/hvlz9m8f9Z/pjFf/v8MYv/DvljFv+f549Z/HfMH7P475Q/ZvHfOX/M4v+L/DGL/y75Yxb/X+aPWfx/lT9m8d81f8ziv1v+mMV/9/wxi/+v88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9v8scs/vvlj1n8988fs/j/Nn/M4v+7/DGL/wH5Yxb/3+ePWfwPzB+z+B+UP2bxPzh/zOL/h/wxi/8f88cs/ofkj1n8/5Q/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/n/OH7P4H5U/ZvH/S/6Yxf/o/DGL/zH5Yxb/v+aPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5YxL/sQbyxyz+g/LHLP6D88cs/qPlj1n8h+SPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/CfNH7P4fzR/zOL/sfwxi//H88cs/p/IH7P4T5Y/ZvH/ZP6YxX/y/DGL/9D8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi//n8scs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4fzl/zOL/lfwxi/9C+WMW/4Xzxyz+X80fs/gvkj9m8f9a/pjFf9H8MYv/YvljFv+v549Z/BfPH7P4L5E/ZvFfMn/M4v+N/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4fzN/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/L+VP2bx/3b+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfy/kz9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+H83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+H8vf8ziv0n+mMV/0/wxi/9m+WMW/+/nj1n8f5A/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv+t88cs/tvkj1n8t80fs/j/NH/M4r9d/pjF/2f5Yxb/7fPHLP475I9Z/H+eP2bx3zF/zOK/U/6YxX/n/DGL/y/yxyz+u+SPWfx/mT9m8f9V/pjFf9f8MYv/bvljFv/d88cs/r/OH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/r/JH7P475c/ZvHfP3/M4v/b/DGL/+/yxyz+B+SPWfx/nz9m8T8wf8zif1D+mMX/4Pwxi/8f8scs/n/MH7P4H5I/ZvH/U/6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4/zl/zOJ/VP6Yxf8v+WMW/6Pzxyz+x+SPWfz/mj9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPSfzHHsgfs/gPyh+z+A/OH7P4j5Y/ZvEfkj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bxnzR/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+Q/PHLP5T5I9Z/KfMH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/p/KH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+8+WPWfznzx+z+C+QP2bxXzB/zOL/5fwxi/9X8scs/gvlj1n8F84fs/h/NX/M4r9I/pjF/2v5Yxb/RfPHLP6L5Y9Z/L+eP2bxXzx/zOK/RP6YxX/J/DGL/zfyxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/zfwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bx/1b+mMX/2/ljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9O/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/738MYv/JvljFv9N88cs/pvlj1n8v58/ZvH/Qf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/H+YP2bx/1H+mMX/x/ljFv+f5I9Z/LfOH7P4b5M/ZvHfNn/M4v/T/DGL/3b5Yxb/n+WPWfy3zx+z+O+QP2bx/3n+mMV/x/wxi/9O+WMW/53zxyz+v8gfs/jvkj9m8f9l/pjF/1f5Yxb/XfPHLP675Y9Z/HfPH7P4/zp/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P4/yZ/zOK/X/6YxX///DGL/2/zxyz+v8sfs/gfkD9m8f99/pjF/8D8MYv/QfljFv+D88cs/n/IH7P4/zF/zOJ/SP6Yxf9P+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOL/5/wxi/9R+WMW/7/kj1n8j84fs/gfkz9m8f9r/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT8m8R9nIH/M4j8of8ziPzh/zOI/Wv6YxX9I/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bx/0D+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMV/0vwxi/9H88cs/h/LH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/gPzR+z+E+RP2bxnzJ/zOI/Vf6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/+X88cs/l/JH7P4L5Q/ZvFfOH/M4v/V/DGL/yL5Yxb/r+WPWfwXzR+z+C+WP2bx/3r+mMV/8fwxi/8S+WMW/yXzxyz+38gfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/8388cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMX/W/ljFv9v549Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/zv5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/d/PHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjFf+P8MYv/9/LHLP6b5I9Z/DfNH7P4b5Y/ZvH/fv6Yxf8H+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bx3zp/zOK/Tf6YxX/b/DGL/0/zxyz+2+WPWfx/lj9m8d8+f8ziv0P+mMX/5/ljFv8d88cs/jvlj1n8d84fs/j/In/M4r9L/pjF/5f5Yxb/X+WPWfx3zR+z+O+WP2bx3z1/zOL/6/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOL/m/wxi/9++WMW//3zxyz+v80fs/j/Ln/M4n9A/pjF//f5Yxb/A/PHLP4H5Y9Z/A/OH7P4/yF/zOL/x/wxi/8h+WMW/z/lj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/+f88cs/kflj1n8/5I/ZvE/On/M4n9M/pjF/6/5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjEf9yB/DGL/6D8MYv/4Pwxi/9o+WMW/yH5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMX/A/ljFv8P5o9Z/D+UP2bx/3D+mMX/I/ljFv9J88cs/h/NH7P4fyx/zOL/8fwxi/8n8scs/pPlj1n8P5k/ZvGfPH/M4j80f8ziP0X+mMV/yvwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/qfwxi/+n88cs/p/JH7P4fzZ/zOL/ufwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4v/5/DGL/xfyxyz+X8wfs/h/KX/M4j9f/pjFf/78MYv/AvljFv8F88cs/l/OH7P4fyV/zOK/UP6YxX/h/DGL/1fzxyz+i+SPWfy/lj9m8V80f8ziv1j+mMX/6/ljFv/F88cs/kvkj1n8l8wfs/h/I3/M4r9U/pjFf+n8MYv/MvljFv9l88cs/t/MH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv9v5Y9Z/L+dP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/7+SPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7fzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP7fyx+z+G+SP2bx3zR/zOK/Wf6Yxf/7+WMW/x/kj1n8N88fs/hvkT9m8d8yf8ziv1X+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMV/6/wxi/82+WMW/23zxyz+P80fs/hvlz9m8f9Z/pjFf/v8MYv/DvljFv+f549Z/HfMH7P475Q/ZvHfOX/M4v+L/DGL/y75Yxb/X+aPWfx/lT9m8d81f8ziv1v+mMV/9/wxi/+v88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9v8scs/vvlj1n8988fs/j/Nn/M4v+7/DGL/wH5Yxb/3+ePWfwPzB+z+B+UP2bxPzh/zOL/h/wxi/8f88cs/ofkj1n8/5Q/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/n/OH7P4H5U/ZvH/S/6Yxf/o/DGL/zH5Yxb/v+aPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5YxL/8Qbyxyz+g/LHLP6D88cs/qPlj1n8h+SPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/CfNH7P4fzR/zOL/sfwxi//H88cs/p/IH7P4T5Y/ZvH/ZP6YxX/y/DGL/9D8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi//n8scs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4fzl/zOL/lfwxi/9C+WMW/4Xzxyz+X80fs/gvkj9m8f9a/pjFf9H8MYv/YvljFv+v549Z/BfPH7P4L5E/ZvFfMn/M4v+N/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4fzN/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/L+VP2bx/3b+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfy/kz9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+H83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+H8vf8ziv0n+mMV/0/wxi/9m+WMW/+/nj1n8f5A/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv+t88cs/tvkj1n8t80fs/j/NH/M4r9d/pjF/2f5Yxb/7fPHLP475I9Z/H+eP2bx3zF/zOK/U/6YxX/n/DGL/y/yxyz+u+SPWfx/mT9m8f9V/pjFf9f8MYv/bvljFv/d88cs/r/OH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/r/JH7P475c/ZvHfP3/M4v/b/DGL/+/yxyz+B+SPWfx/nz9m8T8wf8zif1D+mMX/4Pwxi/8f8scs/n/MH7P4H5I/ZvH/U/6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4/zl/zOJ/VP6Yxf8v+WMW/6Pzxyz+x+SPWfz/mj9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPSfzHH8gfs/gPyh+z+A/OH7P4j5Y/ZvEfkj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bxnzR/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+Q/PHLP5T5I9Z/KfMH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/p/KH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+8+WPWfznzx+z+C+QP2bxXzB/zOL/5fwxi/9X8scs/gvlj1n8F84fs/h/NX/M4r9I/pjF/2v5Yxb/RfPHLP6L5Y9Z/L+eP2bxXzx/zOK/RP6YxX/J/DGL/zfyxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/zfwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bx/1b+mMX/2/ljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9O/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/738MYv/JvljFv9N88cs/pvlj1n8v58/ZvH/Qf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/H+YP2bx/1H+mMX/x/ljFv+f5I9Z/LfOH7P4b5M/ZvHfNn/M4v/T/DGL/3b5Yxb/n+WPWfy3zx+z+O+QP2bx/3n+mMV/x/wxi/9O+WMW/53zxyz+v8gfs/jvkj9m8f9l/pjF/1f5Yxb/XfPHLP675Y9Z/HfPH7P4/zp/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P4/yZ/zOK/X/6YxX///DGL/2/zxyz+v8sfs/gfkD9m8f99/pjF/8D8sf9E/0EDA9sMjOJ/UP7Yf6I/Pf4Pzh+z+P8hf8zi/8f8MYv/IfljFv8/5Y9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/n/PHLP5H5Y9Z/P+SP2bxPzp/zOJ/TP6Yxf+v+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6YxH+Cgfwxi/+g/DGL/+D8MYv/aPljFv8h+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjF/wP5Yxb/D+aPWfw/lD9m8f9w/pjF/yP5Yxb/SfPHLP4fzR+z+H8sf8zi//H8MYv/J/LHLP6T5Y9Z/D+ZP2bxnzx/zOI/NH/M4j9F/pjFf8r8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/6n8MYv/p/PHLP6fyR+z+H82f8zi/7n8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP5fzh+z+H8lf8ziv1D+mMV/4fwxi/9X88cs/ovkj1n8v5Y/ZvFfNH/M4r9Y/pjF/+v5Yxb/xfPHLP5L5I9Z/JfMH7P4fyN/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7fzB+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/b+WPWfy/nT9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/+/kj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+380fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+38sfs/hvkj9m8d80f8ziv1n+mMX/+/ljFv8f5I9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjF/4f5Yxb/H+WPWfx/nD9m8f9J/pjFf+v8MYv/NvljFv9t88cs/j/NH7P4b5c/ZvH/Wf6YxX/7/DGL/w75Yxb/n+ePWfx3zB+z+O+UP2bx3zl/zOL/i/wxi/8u+WMW/1/mj1n8f5U/ZvHfNX/M4r9b/pjFf/f8MYv/r/PHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/b/LHLP775Y9Z/PfPH7P4/zZ/zOL/u/wxi/8B+WMW/9/nj1n8D8wfs/gflD9m8T84f8zi/4f8MYv/H/PHLP6H5I9Z/P+UP2bxPzR/zOJ/WP7YKP7H/qf6H54/Znn8H5E/ZvE/Mn/M4v/n/DGL/1H5Yxb/v+SPWfyPzh+z+B+TP2bx/2v+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxn3Agf8ziPyh/zOI/OH/M4j9a/pjFf0j+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y/9H3buPtzrur7j+Bf4oGTmzVwtNIxAFE0FQUUyb9BSj8DRbiwlQUnxZoIypUBXSnZjbeUsVrG2krxJHamFs+YajnLO6aJZUW2zMTZzrBUuy4lbJbsOnEOc07tzeb589/XK9+PxB+f8fqf3L+V5Xb34Ha5Tlv676x/K0v839A9l6b+H/qEs/X9T/1CW/i/WP5Sl/0v0D2Xp/1v6h7L0f6n+oSz9h+sfytJ/T/1DWfrvpX8oS/+X6R/K0n+E/qEs/ffWP5Sl/8v1D2XpP1L/UJb+r9A/lKX/KP1DWfqP1j+Upf8++oey9B+jfyhL/331D2Xpv5/+oSz9x+ofytJ/f/1DWfofoH8oS/9X6h/K0v9A/UNZ+h+kfyhL/4P1D2XpP07/UJb+4/UPZel/iP6hLP0n6B/K0n+i/qEs/Q/VP5Sl/2H6h7L0P1z/UJb+k/QPZel/hP6hLP0n6x/K0v9V+oey9D9S/1CW/q/WP5Sl/1H6h7L0P1r/UJb+x+gfytL/WP1DWfpP0T+Upf9x+oey9D9e/1CW/q/RP5Sl/2v1D2Xpf4L+oSz9T9Q/lKX/SfqHsvTv0D+Upf/J+oey9J+qfyhL/2n6h7L0n65/KEv/Tv1DWfqfon8oS/9T9Q9l6f86/UNZ+r9e/1CW/m/QP5Sl/xv1D2Xpf5r+oSz936R/KEv/N+sfytL/dP1DWfqfoX8oS/8Z+oey9H+L/qEs/c/UP5Sl/0z9Q1n6z9I/lKX/WfqHsvQ/W/9Qlv6z9Q9l6f9W/UNZ+p+jfyhL/3P1D2XpP0f/UJb+5+kfytL/fP1DWfpfoH8oS/8L9Q9l6f/b+oey9L9I/1CW/nP1D2XpP0//UJb+F+sfytL/Ev1DWfrP1z+Upf/v6B/K0v9S/UNZ+l+mfyhL/wX6h7L0f5v+oSz9365/KEv/hfqHsvRfpH8oS//L9Q9l6X+F/qEs/X9X/1CW/u/QP5Sl/zv1D2Xpf6X+oSz9r9I/lKX/Yv1DWfq/S/9Qlv5X6x/K0v/d+oey9H+P/qEs/d+rfyhL//fpH8rS/xr9Q1n6v1//UJb+H9A/lKX/7+kfytL/9/UPZen/Qf1DWfp/SP9Qlv7X6h/K0v8P9A9l6X+d/qEs/T+sfyhL/4/oH8rSf4n+oSz9/1D/UJb+H9U/lKX/x/QPZen/cf1DWfov1T+Upf8f6R/K0v8T+oey9P9j/UNZ+v+J/qEs/T+pfyhL/0/pH8rS/3r9Q1n6L9M/lKX/p/UPZel/g/6hLP1v1D+Upf9N+oey9L9Z/1CW/p/RP5Sl/y36h7L0v1X/UJb+t+kfytL/T/UPZem/XP9Qlv6f1T+Upf/t+oey9L9D/1CW/nfqH8rS/3P6h7L0/7z+oSz9V+gfytL/Lv1DWfr/mf6hLP3v1j+Upf8X9A9l6f9F/UNZ+v+5/qEs/e/RP5Sl/1/oH8rS/0v6h7L0/0v9Q1n6r9Q/lKX/vfqHsvT/K/1DWfqv0j+Upf+X9Q9l6f8V/UNZ+t+nfyhL/7/WP5Sl//36h7L0/xv9Q1n6P6B/KEv/v9U/lKX/g/qHsvR/SP9Qlv5/p38oS/+v6h/K0n+1/qEs/b+mfyhL/7/XP5Sl/8P6h7L0/7r+oSz9v6F/KEv/b+ofytJ/jf6hLP2/pX8oS/9v6x/K0v87+oey9P8H/UNZ+v+j/qEs/f9J/1CW/o/oH8rS/7v6h7L0/2f9Q1n6r9U/lKX/v+gfytJ/nf6hLP3/Vf9Qlv7/pn8oS/9H9Q9l6f89/UNZ+j+mfyhL/3/XP5Sl/3r9Q1n6/4f+oSz9v69/KEv//9Q/lKX/D/QPZen/Q/1DWfpv0D+Upf/j+oey9P8v/UNZ+v9I/1CW/k/oH8rS/8f6h7L0/4n+oSz9n9Q/lKX/f+sfytL/Kf1DWfpv1D+Upf/T+oey9P8f/UNZ+v+v/qEs/X+qfyhL/5/pH8rS/+f6h7L0f0b/UJb+m/QPJem/W6V/KEv/QfqHsvQfrH8oS/8h+oey9C/6h7L0H6p/KEv/HfQPZem/o/6hLP2H6R/K0v8F+oey9N9J/1CW/i/UP5Sl/876h7L0f5H+oSz9d9E/lKX/rvqHnnf9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICq6uicsmHIoF5PDdn2wYjVczZ/PHTj6RfcfPMXdu/52P3lqcFLDt72waZNmzYNfrL6avfDHauq6vpv26378bC+x12vf9WUpWO3PCojb3j6gOULnz7ufXeuuXXjibdMXT5087NDq7PPu3DunPGDq6qMHlot6npwyKCqKvsOra7rejCh68F+Q6tbux5M3PzgBdWqrgcHn3PJ3HO7nhhb+/cMAH7ddXQurob0Wuyq158Gtt3/q6bctbjnYz8v2fNqpere/3tW7PH2Pl/r8Sv2v+f1yyv67v+A/wUBgF8ysP2/b2TPx35e8pfe/0+/+GNroq/96v3vef0yyv4DQPOC7//32ui+3/fv8/3/6M8BW+8vOmvJjl37f8vG0xZ0P1Wezff/f/H6ZXTf/R/c6/v/g6qq7NPz/f8dq6qM2c7fDgBIoaPzXRv6e//f//6XPfvcDNp2/3e/fdVpXfu/dqc7X9L91NAB7v8+/b3/P6HPPysA8Ox0dH56U5/3/wPY/2rf4CW37v/xix58cdf+f33t90Zu87WB7P+Yvvs/bsG8+eMuu/yKgy6cN/v8OefPuXjypElHHDbp8MkTxm3+jsCWX7fzNwUAnue27/1/tVOfm0FV9djW+w+uHPFg1/5P+MRJF3Q/NWyA+79vv+//R3r/DwC9jBpc7bBDtWj2ggWXHrLl156HE7b8uuU/Fuz/AP7+f3TPD9H1/MzgoKp66db7zsveP7hr/28cvefK7qd2GOD+79fv/h/b+2cVAYBnZzvf/5/b56bX/u865LbJXft/8pj9r+l+aqB//z+23/1f5v0/ANTR0Vn9v76J7tr/q3f++fX1rsv+fv4PAJrXxv4/PuLdo+pdlwPsPwA0r439n3PMi+6ud11eaf8BoHlt7P8DHUtm1rsuB9p/AGheG/s/7aIRD9W7LgfZfwBoXhv7P/KKcxbWuy4H238AaF4b+7/89A3r6l2XcfYfAJrXxv6fOWztE/Wuy3j7DwDNa2P/v3PAqefVuy6H2H8AaF4b+/+lIw9+pN51mWD/AaB5bez/+OHLptW7LhPtPwA0r439/8glR99U77ocav8BoHlt7P/w6Z+bWO+6HGb/AaB5bez/28782rX1rsvh9h8AmtfG/j9z5bHD612XSfYfAJrXxv6vemDvGfWuyxH2HwCa18b+T33sutX1rstk+w8AzWtj//d78vH59a7Lq+w/ADSvjf3/7LfPXl/vuhxp/wGgeW3s/y7Lntm13nV5tf0HgOa1sf/vvXr+0nrX5Sj7DwDNa2P/v79klzH1rsvR9h8AmtfG/r/184tX1Lsux9h/AGheG/v/jUcnTq13XY61/wDQvDb2/4wvr/xuvesyxf4DQPPa2P/DHr5vdr3rcpz9B4DmtbH/9/54+lP1rsvx9h8AmtfG/r/sPd/cu951eY39B4DmtbH/H//MzA/Uuy6vtf8A0Lw29v+nXxx9aL3rcoL9B4DmtbH/8z96+431rsuJ9h8AmtfG/nce+JN19a7LSfYfAJrXxv7fv8s7F9a7Lh32HwCa18b+3/byIQ/Vuy4n238AaF4b+z/qqA/NrHddptp/AGheG/u/eOoed9e7LtPsPwA0r439f+GFnxxV77pMt/8A0Lw29v/8RY9eX++6dNp/AGheG/v/wxnzhtW7LqfYfwBoXhv7v9dOs4bXuy6n2n8AaF4b+3/d2IevrXddXmf/AaB5bez/zybfMbHedXm9/QeA5rWx/wv3GnlTvevyBvsPAM1rY/+/Ne/eafWuyxvtPwA0r439n3XK+EfqXZfT7D8ANK+N/Z8wq/O8etflTfYfAJrXxv7f845VT9S7Lm+2/wDQvDb2/5r7P7Wi3nU53f4DQPPa2P+d1+82pt51OcP+A0Dz2tj/s5+6eGm96zLD/gNA89rY/x+sWbdrvevyFvsPAM1rY/87brhyfb3rcqb9B4DmtbH/X1n8o/n1rstM+w8AzWtj/+/48LWr612XWfYfAJrXxv6PuauaUe+6nGX/AaB5l11+xUWz586dc6lPfOITn2z95Ln+XyYAAKBpv/hD/3P9TwIAAAAAAAAAAAAAAAAAAAB5tfF/J/Zc/zsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwfO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAjyt15hgAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOArAAD//2Eh0eU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f0000000100)={0x8a0, 0x8008000000000005, 0x0, 0x0, 0x0, 0x5}) 3m4.44673936s ago: executing program 2 (id=703): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b2386777", 0xf}], 0x1}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newaddr={0x28, 0x14, 0xa09, 0x0, 0x0, {0x2, 0x1f, 0xc8, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x64c}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf25070000005c00018008000300030000001400020067656e65766531000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e3100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000003c000180080003000000000008000100", @ANYRES32, @ANYBLOB="0800030002000000080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030000000000580001801400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r5, @ANYBLOB="140002006970365f7674693000000000000000001400020070696d36726567300000000000000000080003000000000008000300020000000c0001800800030000000000"], 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x10c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x48b8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "ea773d2d856d9b6bf559625ddd494bd7c14c21049d7a03f3af16"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8881}, 0x10) 2m48.847133798s ago: executing program 32 (id=703): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b2386777", 0xf}], 0x1}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newaddr={0x28, 0x14, 0xa09, 0x0, 0x0, {0x2, 0x1f, 0xc8, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x64c}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf25070000005c00018008000300030000001400020067656e65766531000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e3100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000003c000180080003000000000008000100", @ANYRES32, @ANYBLOB="0800030002000000080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030000000000580001801400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r5, @ANYBLOB="140002006970365f7674693000000000000000001400020070696d36726567300000000000000000080003000000000008000300020000000c0001800800030000000000"], 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x10c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x48b8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "ea773d2d856d9b6bf559625ddd494bd7c14c21049d7a03f3af16"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8881}, 0x10) 8.803219116s ago: executing program 1 (id=1374): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket(0x1, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$rds(0x15, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 8.643243348s ago: executing program 1 (id=1377): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000007c0)="1082", 0x1a, r2) 5.347922828s ago: executing program 0 (id=1394): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0xc, 0xc, 0xfffffff8, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x40, 0x7, 0x3}}) 5.2235467s ago: executing program 0 (id=1396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000030000001c0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x40006) 5.027795363s ago: executing program 0 (id=1397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0x8) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000080000000500000000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) 3.731525993s ago: executing program 1 (id=1402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3.555971196s ago: executing program 5 (id=1403): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/124, 0x7c}], 0x1}, 0x6}], 0x1, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 3.481434677s ago: executing program 4 (id=1404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002"], 0x84}}, 0x0) 3.441813518s ago: executing program 5 (id=1405): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) 3.2908585s ago: executing program 4 (id=1406): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2, 0x0, 0x4}, 0x18) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900090000007a32000000002c00df1ffdb2277ee12ed5bf698b03d30480280001800b00010064796e7365740000180002800900010073797a32000000000800034000000000140000001100"], 0x80}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) 3.29032144s ago: executing program 1 (id=1407): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={0xffffffffffffffff, r1}, 0xc) connect$inet(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 3.123305352s ago: executing program 1 (id=1409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040811}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x3f00, 0x0, 0x1b, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x88000, 0x2200}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x3c}}, 0x0) 3.122823952s ago: executing program 4 (id=1410): socket$can_raw(0x1d, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) msgsnd(0x0, 0x0, 0x4000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0x4, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/227) syz_mount_image$efs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380), 0x1, 0x2e2, &(0x7f00000003c0)="$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") 1.444024448s ago: executing program 3 (id=1412): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71017000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.132077853s ago: executing program 3 (id=1413): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0b0532950b0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x44) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x80) setsockopt$inet6_int(r3, 0x29, 0x11, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x4) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x5}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000eece65b5c8d9b86dd6000080000161100fe800000000000d7aca31a3b6f6c61bbfe80000000fcff0000000000000000aa00000e2200169078028200000000000030b00afe4e70"], 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 1.127054293s ago: executing program 1 (id=1414): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000007c0)="1082", 0x1a, r2) 1.064089864s ago: executing program 0 (id=1415): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRES64=0x0], 0x1, 0xa23, &(0x7f0000000a80)="$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") r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000200), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setreuid(0x0, 0xee01) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) 971.981285ms ago: executing program 3 (id=1416): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 962.081025ms ago: executing program 5 (id=1417): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffb, @remote, 0x15}, 0x1c) sendmmsg(r0, &(0x7f0000009280)=[{{&(0x7f0000000200)=@in={0x2, 0x4e23, @remote}, 0x80, 0x0}}], 0x1, 0x40004) 956.814396ms ago: executing program 4 (id=1418): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x30, 0x1411, 0x1, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}}, 0x24000000) 891.875256ms ago: executing program 5 (id=1419): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x36}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x776}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x3ff}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 862.401827ms ago: executing program 3 (id=1420): syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000ec0), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 862.125037ms ago: executing program 4 (id=1421): munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x2, 0x40, 0x4}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 702.910689ms ago: executing program 3 (id=1422): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x1, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 588.881251ms ago: executing program 0 (id=1423): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(r2) socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 588.641451ms ago: executing program 5 (id=1424): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 515.086062ms ago: executing program 5 (id=1425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040811}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x3f00, 0x0, 0x1b, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x88000, 0x2200}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x3c}}, 0x0) 514.642282ms ago: executing program 3 (id=1426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0x8) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000080000000500000000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) 279.638246ms ago: executing program 0 (id=1427): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) 0s ago: executing program 4 (id=1428): socket$can_raw(0x1d, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) msgsnd(0x0, 0x0, 0x4000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0x4, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/227) syz_mount_image$efs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380), 0x1, 0x2e2, &(0x7f00000003c0)="$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") kernel console output (not intermixed with test programs): 8][ T5349] loop0: detected capacity change from 0 to 131072 [ 148.085498][ T5358] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 148.092102][ T5349] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name [ 148.096544][ T5349] F2FS-fs (loop0): invalid crc value [ 148.123836][ T5349] F2FS-fs (loop0): Wrong journal entry on segno 1541 [ 148.125621][ T5349] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 149.495737][ T5380] loop2: detected capacity change from 0 to 1024 [ 149.662291][ T5382] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 149.664065][ T5382] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 149.683978][ T5382] vhci_hcd vhci_hcd.0: Device attached [ 149.695013][ T5386] vhci_hcd: connection closed [ 150.452786][ T5391] loop4: detected capacity change from 0 to 128 [ 150.888341][ T153] vhci_hcd: stop threads [ 150.898989][ T153] vhci_hcd: release socket [ 150.920551][ T153] vhci_hcd: disconnect device [ 150.975694][ T5380] hfsplus: unable to parse mount options [ 151.109065][ T5394] loop0: detected capacity change from 0 to 512 [ 151.237464][ T5396] loop4: detected capacity change from 0 to 64 [ 151.287721][ T5394] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 151.312120][ T5396] hfs: unable to locate alternate MDB [ 151.313519][ T5396] hfs: continuing without an alternate MDB [ 151.323380][ T5394] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 152.150143][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 152.276804][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 153.535494][ T5423] loop1: detected capacity change from 0 to 4096 [ 153.626553][ T5423] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 153.801592][ T5430] loop2: detected capacity change from 0 to 512 [ 153.898207][ T5430] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 153.910762][ T5430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 153.918202][ T5430] System zones: 1-12 [ 153.919880][ T5430] EXT4-fs (loop2): orphan cleanup on readonly fs [ 153.930527][ T5427] loop0: detected capacity change from 0 to 131072 [ 153.942291][ T5423] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 153.943673][ T5430] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.308: invalid indirect mapped block 12 (level 1) [ 153.978301][ T5430] EXT4-fs (loop2): Remounting filesystem read-only [ 153.979908][ T5430] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.308: invalid indirect mapped block 2 (level 2) [ 153.999397][ T5430] EXT4-fs (loop2): Remounting filesystem read-only [ 154.001341][ T5430] EXT4-fs (loop2): 1 truncate cleaned up [ 154.012245][ T5427] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name [ 154.016114][ T5427] F2FS-fs (loop0): invalid crc value [ 154.020649][ T5430] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,abort. Quota mode: none. [ 154.090856][ T5427] F2FS-fs (loop0): Wrong journal entry on segno 1541 [ 154.092896][ T5427] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 154.630196][ T5446] loop2: detected capacity change from 0 to 128 [ 155.267580][ T5448] netlink: 44 bytes leftover after parsing attributes in process `syz.1.313'. [ 155.726406][ T5463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 157.518723][ T5482] loop0: detected capacity change from 0 to 1024 [ 158.534698][ T5489] loop1: detected capacity change from 0 to 64 [ 159.025511][ T5486] loop4: detected capacity change from 0 to 131072 [ 159.111261][ T5501] loop2: detected capacity change from 0 to 128 [ 159.379788][ T5486] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 159.512732][ T5486] F2FS-fs (loop4): invalid crc value [ 159.724894][ T5500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'. [ 159.741023][ T5486] F2FS-fs (loop4): Wrong journal entry on segno 1541 [ 159.743689][ T5486] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 159.901879][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 160.860429][ T5522] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 161.019311][ T5526] loop2: detected capacity change from 0 to 512 [ 161.178288][ T5526] EXT4-fs (loop2): Ignoring removed orlov option [ 161.180158][ T5526] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.183164][ T5526] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 161.388515][ T5526] EXT4-fs (loop2): 1 orphan inode deleted [ 161.390063][ T5526] EXT4-fs (loop2): 1 truncate cleaned up [ 161.391522][ T5526] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,dioread_nolock,,errors=continue. Quota mode: none. [ 161.767664][ T5538] loop3: detected capacity change from 0 to 1024 [ 161.925629][ T5538] EXT4-fs (loop3): Ignoring removed nobh option [ 161.927508][ T5538] EXT4-fs (loop3): Ignoring removed bh option [ 161.976341][ T5538] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nobarrier,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,usrquota,,errors=continue. Quota mode: writeback. [ 161.995507][ T5538] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.340: Allocating blocks 385-513 which overlap fs metadata [ 162.197204][ T5546] loop2: detected capacity change from 0 to 128 [ 162.804028][ T5537] EXT4-fs (loop3): pa 0000000062441f6a: logic 16, phys. 129, len 24 [ 162.806364][ T5537] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 162.923066][ T4077] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 162.952991][ T5549] loop3: detected capacity change from 0 to 1764 [ 163.021425][ T5521] loop1: detected capacity change from 0 to 32768 [ 163.150251][ T5521] (syz.1.334,5521,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.156215][ T5521] (syz.1.334,5521,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.182824][ T4077] usb 1-1: Using ep0 maxpacket: 8 [ 163.310485][ T5554] loop2: detected capacity change from 0 to 128 [ 164.018632][ T5521] (syz.1.334,5521,0):ocfs2_initialize_super:2310 ERROR: status = -12 [ 164.020840][ T5521] (syz.1.334,5521,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 164.093130][ T5559] udc-core: couldn't find an available UDC or it's busy [ 164.095183][ T5559] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 164.123003][ T4077] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 164.125594][ T4077] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.128053][ T4077] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.133207][ T4077] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.144428][ T4077] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.158325][ T4077] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.160710][ T4077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.032958][ T4077] usb 1-1: can't set config #16, error -71 [ 165.037796][ T4077] usb 1-1: USB disconnect, device number 4 [ 165.140423][ T5564] loop3: detected capacity change from 0 to 1024 [ 165.338424][ T5564] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 165.344632][ T5564] hfsplus: bad catalog entry used to create inode [ 165.402321][ T5566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 166.279616][ T5583] loop0: detected capacity change from 0 to 256 [ 166.491311][ T5583] exfat: Unknown parameter 'sys_tz' [ 167.568585][ T5578] loop1: detected capacity change from 0 to 131072 [ 167.757175][ T5578] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 167.760793][ T5578] F2FS-fs (loop1): invalid crc value [ 168.294148][ T5578] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 169.142127][ T5620] loop3: detected capacity change from 0 to 128 [ 170.236693][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 170.238261][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 170.239809][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 170.241275][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 170.242946][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 171.188582][ T5645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 171.191206][ T5645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.436451][ T5645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.507230][ T5630] loop4: detected capacity change from 0 to 32768 [ 171.519866][ T5630] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.365 (5630) [ 171.528201][ T5630] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 171.530417][ T5630] BTRFS info (device loop4): enabling auto defrag [ 171.532043][ T5630] BTRFS info (device loop4): doing ref verification [ 171.533976][ T5630] BTRFS info (device loop4): use no compression [ 171.535590][ T5630] BTRFS info (device loop4): force clearing of disk cache [ 171.537268][ T5630] BTRFS info (device loop4): max_inline at 4096 [ 171.542849][ T5630] BTRFS info (device loop4): disabling free space tree [ 171.544550][ T5630] BTRFS info (device loop4): has skinny extents [ 173.328485][ T5688] netlink: 56 bytes leftover after parsing attributes in process `syz.0.377'. [ 173.397984][ T5630] BTRFS info (device loop4): enabling ssd optimizations [ 173.402117][ T5630] BTRFS info (device loop4): clearing free space tree [ 173.404867][ T5630] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 173.407603][ T5630] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.743400][ T5702] loop1: detected capacity change from 0 to 128 [ 174.490968][ T5705] loop2: detected capacity change from 0 to 1024 [ 174.523142][ T4077] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.573344][ T5705] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.602947][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'. [ 175.082730][ T5719] input: syz0 as /devices/virtual/input/input3 [ 175.085333][ T5719] input: failed to attach handler leds to device input3, error: -6 [ 175.478186][ T4077] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 175.544032][ T5726] loop4: detected capacity change from 0 to 1024 [ 175.601994][ T5730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 175.602996][ T4077] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.606549][ T4077] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.609512][ T4077] usb 1-1: config 0 interface 0 has no altsetting 0 [ 175.651133][ T5726] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.698968][ T4077] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.701043][ T4077] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.704743][ T4077] usb 1-1: config 0 interface 0 has no altsetting 0 [ 175.792955][ T4077] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.801735][ T4077] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.804977][ T4077] usb 1-1: config 0 interface 0 has no altsetting 0 [ 175.893078][ T4077] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.895645][ T4077] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.903207][ T4077] usb 1-1: config 0 interface 0 has no altsetting 0 [ 176.682885][ T4077] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.684944][ T4077] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.687671][ T4077] usb 1-1: config 0 interface 0 has no altsetting 0 [ 176.727489][ T5736] loop1: detected capacity change from 0 to 4096 [ 176.779268][ T4077] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.796125][ T4077] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.801193][ T4077] usb 1-1: config 0 interface 0 has no altsetting 0 [ 176.808798][ T5736] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 176.811803][ T5736] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 176.817851][ T5736] ntfs3: loop1: Failed to load $MFTMirr. [ 176.866505][ T5734] loop2: detected capacity change from 0 to 32768 [ 176.904975][ T4077] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.907083][ T4077] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.913159][ T4077] usb 1-1: config 0 interface 0 has no altsetting 0 [ 176.971094][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 177.013444][ T4077] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.022067][ T4077] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.025864][ T4077] usb 1-1: config 0 interface 0 has no altsetting 0 [ 177.118538][ T5734] XFS (loop2): Mounting V5 Filesystem [ 177.242750][ T5762] loop3: detected capacity change from 0 to 128 [ 177.914068][ T4077] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 177.916219][ T4077] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 177.918254][ T4077] usb 1-1: Product: syz [ 177.919282][ T4077] usb 1-1: Manufacturer: syz [ 177.926669][ T4077] usb 1-1: config 0 descriptor?? [ 177.953264][ T4077] usb 1-1: can't set config #0, error -71 [ 177.960927][ T4077] usb 1-1: USB disconnect, device number 5 [ 178.013119][ T5770] loop0: detected capacity change from 0 to 64 [ 178.029710][ T5766] loop3: detected capacity change from 0 to 1024 [ 178.033875][ T5734] XFS (loop2): Ending clean mount [ 178.053565][ T5770] hfs: unable to parse mount options [ 178.113991][ T4029] XFS (loop2): Unmounting Filesystem [ 178.116718][ T5766] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.242398][ T5753] loop1: detected capacity change from 0 to 40427 [ 178.333396][ T5753] F2FS-fs (loop1): invalid crc value [ 178.647293][ T5782] Cannot find del_set index 3 as target [ 179.375478][ T5753] F2FS-fs (loop1): Found nat_bits in checkpoint [ 179.438998][ T5782] loop0: detected capacity change from 0 to 32768 [ 179.461011][ T5753] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 179.504087][ T5753] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 179.513372][ T5782] XFS: attr2 mount option is deprecated. [ 179.514738][ T5782] XFS: attr2 mount option is deprecated. [ 179.516480][ T5782] XFS (loop0): Invalid device [./file1], error=-15 [ 179.759664][ T5774] loop4: detected capacity change from 0 to 32768 [ 180.095090][ T5774] XFS (loop4): Mounting V5 Filesystem [ 180.124741][ T5803] loop0: detected capacity change from 0 to 256 [ 180.173422][ T5803] exfat: Deprecated parameter 'utf8' [ 180.174835][ T5803] exfat: Deprecated parameter 'utf8' [ 180.176420][ T5803] exfat: Deprecated parameter 'utf8' [ 180.208897][ T5803] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 180.305538][ T5774] XFS (loop4): Ending clean mount [ 180.321054][ T5804] loop2: detected capacity change from 0 to 32768 [ 180.376141][ T4030] XFS (loop4): Unmounting Filesystem [ 180.411023][ T5804] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 180.413593][ T5804] BTRFS info (device loop2): using free space tree [ 180.415125][ T5804] BTRFS info (device loop2): has skinny extents [ 180.903714][ T5826] loop0: detected capacity change from 0 to 128 [ 181.551616][ T5804] BTRFS info (device loop2): enabling ssd optimizations [ 181.577971][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 181.785798][ T153] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 182.560996][ T5846] could not allocate digest TFM handle sha1-ssse3 [ 183.121848][ T5859] loop1: detected capacity change from 0 to 128 [ 183.998455][ T5859] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.734095][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 186.937055][ T5893] loop0: detected capacity change from 0 to 512 [ 187.054523][ T5869] loop3: detected capacity change from 0 to 40427 [ 187.097462][ T5869] F2FS-fs (loop3): Mismatch start address, segment0(512) cp_blkaddr(524800) [ 187.099627][ T5869] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 187.105978][ T5894] loop1: detected capacity change from 0 to 128 [ 187.110119][ T5869] F2FS-fs (loop3): invalid crc value [ 187.111512][ T5869] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 187.112205][ T5893] EXT4-fs (loop0): 1 orphan inode deleted [ 187.116038][ T5893] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.172611][ T5900] loop4: detected capacity change from 0 to 512 [ 187.226272][ T5900] EXT4-fs (loop4): invalid inodes per group: 109969440 [ 187.226272][ T5900] [ 187.811042][ T5914] loop4: detected capacity change from 0 to 2048 [ 188.110813][ T5914] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,bsdgroups,auto_da_alloc,jqfmt=vfsv1,nouid32,journal_dev=0x0000000000000007,grpjquota=,usrjquota=,. Quota mode: none. [ 188.733279][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 189.127365][ T5910] loop2: detected capacity change from 0 to 32768 [ 189.571292][ T5904] loop0: detected capacity change from 0 to 131072 [ 189.633000][ T5904] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name [ 189.660861][ T5904] F2FS-fs (loop0): invalid crc value [ 189.697425][ T5910] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 189.716049][ T5910] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 189.748204][ T5904] F2FS-fs (loop0): Wrong journal entry on segno 1541 [ 189.750203][ T5904] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 189.783938][ T4029] ocfs2: Unmounting device (7,2) on (node local) [ 190.147345][ T5947] loop4: detected capacity change from 0 to 40427 [ 190.200572][ T5947] F2FS-fs (loop4): invalid crc value [ 190.221706][ T5947] F2FS-fs (loop4): Found nat_bits in checkpoint [ 190.466302][ T5947] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 190.676024][ T4030] attempt to access beyond end of device [ 190.676024][ T4030] loop4: rw=2049, want=45104, limit=40427 [ 190.941710][ T5960] loop3: detected capacity change from 0 to 32768 [ 191.001016][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 191.051913][ T5960] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 191.091024][ T5997] netlink: 32 bytes leftover after parsing attributes in process `syz.0.453'. [ 191.143124][ T153] nci: nci_ntf_packet: unknown ntf opcode 0x1d [ 191.280745][ T4037] ocfs2: Unmounting device (7,3) on (node local) [ 191.880615][ T6017] loop4: detected capacity change from 0 to 128 [ 192.525845][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.527771][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.598074][ T6021] loop1: detected capacity change from 0 to 256 [ 192.693367][ T6021] exfat: Unknown parameter 'sys_tz' [ 192.704199][ T6025] loop2: detected capacity change from 0 to 47 [ 192.707322][ T6024] loop4: detected capacity change from 0 to 512 [ 192.939660][ T6024] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.463: bad orphan inode 17 [ 192.946646][ T6024] ext4_test_bit(bit=16, block=4) = 1 [ 192.948045][ T6024] is_bad_inode(inode)=0 [ 192.952385][ T6024] NEXT_ORPHAN(inode)=0 [ 192.953650][ T6024] max_ino=32 [ 192.956941][ T6024] i_nlink=1 [ 192.957861][ T6024] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.235646][ T6013] loop3: detected capacity change from 0 to 32768 [ 194.257959][ T6042] loop2: detected capacity change from 0 to 1024 [ 194.267832][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 194.311764][ T6013] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.458 (6013) [ 194.407641][ T6013] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 194.410151][ T6013] BTRFS info (device loop3): force zlib compression, level 3 [ 194.420361][ T6013] BTRFS info (device loop3): force clearing of disk cache [ 194.434765][ T6013] BTRFS info (device loop3): setting nodatasum [ 194.443550][ T6013] BTRFS info (device loop3): use zlib compression, level 3 [ 194.460210][ T6013] BTRFS info (device loop3): allowing degraded mounts [ 194.482837][ T6013] BTRFS info (device loop3): enabling disk space caching [ 194.493175][ T6013] BTRFS info (device loop3): disk space caching is enabled [ 194.510507][ T6013] BTRFS info (device loop3): has skinny extents [ 194.693574][ T6061] loop2: detected capacity change from 0 to 512 [ 194.745447][ T6013] BTRFS error (device loop3): open_ctree failed: -12 [ 195.834616][ T6061] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 196.405422][ T6091] loop0: detected capacity change from 0 to 32768 [ 196.423286][ T6105] loop1: detected capacity change from 0 to 128 [ 196.464504][ T6091] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.477 (6091) [ 196.506796][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 196.579075][ T6091] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 196.588185][ T6091] BTRFS info (device loop0): using free space tree [ 196.589945][ T6091] BTRFS info (device loop0): has skinny extents [ 197.241299][ T6091] BTRFS info (device loop0): enabling ssd optimizations [ 197.250040][ T6108] loop4: detected capacity change from 0 to 131072 [ 197.376315][ T6108] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 197.383246][ T6108] F2FS-fs (loop4): invalid crc value [ 197.434168][ T6108] F2FS-fs (loop4): Wrong journal entry on segno 1541 [ 197.436016][ T6108] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 197.501263][ T4117] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 198.113657][ T6119] loop3: detected capacity change from 0 to 40427 [ 198.175988][ T6119] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 198.177730][ T6119] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 198.199040][ T6119] F2FS-fs (loop3): invalid crc value [ 198.250725][ T6119] F2FS-fs (loop3): Found nat_bits in checkpoint [ 198.293343][ T6119] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 198.295137][ T6119] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 198.400962][ T4037] attempt to access beyond end of device [ 198.400962][ T4037] loop3: rw=2049, want=45104, limit=40427 [ 198.829835][ T6157] loop3: detected capacity change from 0 to 4096 [ 198.916724][ T6145] loop2: detected capacity change from 0 to 40427 [ 199.005711][ T6145] F2FS-fs (loop2): Unrecognized mount option "errors=continue" or missing value [ 199.080889][ T6149] loop0: detected capacity change from 0 to 40427 [ 199.158498][ T6149] F2FS-fs (loop0): invalid crc value [ 199.213526][ T6149] F2FS-fs (loop0): Found nat_bits in checkpoint [ 199.268741][ T6149] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 199.380084][ T4031] attempt to access beyond end of device [ 199.380084][ T4031] loop0: rw=2049, want=45104, limit=40427 [ 199.753875][ T6174] loop2: detected capacity change from 0 to 164 [ 199.769888][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 199.927692][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 200.439362][ T6195] loop2: detected capacity change from 0 to 4096 [ 200.981162][ T6195] ntfs3: Unknown parameter 'windows_names' [ 201.708751][ T6205] loop0: detected capacity change from 0 to 128 [ 201.758590][ T6205] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 201.799985][ T6205] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.920106][ T6204] loop1: detected capacity change from 0 to 4096 [ 202.782984][ T6214] loop1: detected capacity change from 0 to 128 [ 203.694617][ T6202] loop4: detected capacity change from 0 to 32768 [ 203.906807][ T6202] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 204.596703][ T6202] JBD2: recovery failed [ 204.597949][ T6202] (syz.4.502,6202,1):ocfs2_journal_load:1083 ERROR: Failed to load journal! [ 204.692903][ T6202] (syz.4.502,6202,0):ocfs2_check_volume:2434 ERROR: ocfs2 journal load failed! -5 [ 204.695342][ T6202] (syz.4.502,6202,0):ocfs2_check_volume:2490 ERROR: status = -5 [ 204.697208][ T6202] (syz.4.502,6202,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 204.782149][ T6202] (syz.4.502,6202,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 205.140687][ T6231] loop0: detected capacity change from 0 to 40427 [ 205.224964][ T6231] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 205.226865][ T6231] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 205.243859][ T6231] F2FS-fs (loop0): invalid crc value [ 205.321740][ T6231] F2FS-fs (loop0): Found nat_bits in checkpoint [ 205.385361][ T6231] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 205.387108][ T6231] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 205.671012][ T6230] loop1: detected capacity change from 0 to 131072 [ 205.988365][ T6216] loop3: detected capacity change from 0 to 32768 [ 206.018546][ T6239] loop4: detected capacity change from 0 to 256 [ 206.106538][ T6239] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 206.113720][ T6239] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 206.116740][ T6239] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 206.118625][ T6239] UDF-fs: Scanning with blocksize 512 failed [ 206.123091][ T6239] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 206.130768][ T6239] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 206.133496][ T6239] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 206.136016][ T6239] UDF-fs: Scanning with blocksize 1024 failed [ 206.141401][ T6239] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 206.144604][ T6239] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 206.147039][ T6239] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 206.152907][ T6239] UDF-fs: Scanning with blocksize 2048 failed [ 206.154935][ T6239] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 206.159564][ T6239] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 206.161927][ T6239] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 206.191962][ T6239] UDF-fs: Scanning with blocksize 4096 failed [ 206.205520][ T6239] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 206.307476][ T6230] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 206.311403][ T6230] F2FS-fs (loop1): invalid crc value [ 206.402612][ T6230] F2FS-fs (loop1): Wrong journal entry on segno 1541 [ 206.405273][ T6230] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 206.584728][ T6245] loop4: detected capacity change from 0 to 2048 [ 206.628725][ T6257] loop2: detected capacity change from 0 to 1024 [ 206.645596][ T6245] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.654455][ T6258] Zero length message leads to an empty skb [ 206.656567][ T6257] EXT4-fs (loop2): Ignoring removed oldalloc option [ 206.656978][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 206.658325][ T6257] EXT4-fs (loop2): Ignoring removed bh option [ 206.673139][ T6257] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.789485][ T6257] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 207.132896][ T6274] netlink: 56 bytes leftover after parsing attributes in process `syz.0.521'. [ 207.960354][ T6285] loop4: detected capacity change from 0 to 4096 [ 208.489797][ T6280] loop0: detected capacity change from 0 to 40427 [ 208.574615][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'. [ 208.601786][ T6280] F2FS-fs (loop0): Unrecognized mount option "barrier" or missing value [ 208.709391][ T6306] netlink: 536 bytes leftover after parsing attributes in process `syz.2.531'. [ 208.737791][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.531'. [ 208.855090][ T6291] loop3: detected capacity change from 0 to 32768 [ 208.955814][ T6291] XFS (loop3): Mounting V5 Filesystem [ 209.154817][ T6291] XFS (loop3): Ending clean mount [ 209.190978][ T6328] loop1: detected capacity change from 0 to 128 [ 209.233089][ T4037] XFS (loop3): Unmounting Filesystem [ 209.239105][ T6331] loop0: detected capacity change from 0 to 2048 [ 209.296723][ T6331] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 209.371683][ T6332] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 209.424525][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 209.838638][ T6326] loop2: detected capacity change from 0 to 32768 [ 209.970782][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 210.131435][ T6329] loop4: detected capacity change from 0 to 32768 [ 210.243395][ T6329] XFS (loop4): Mounting V5 Filesystem [ 210.943897][ T6329] XFS (loop4): Ending clean mount [ 210.951512][ T6329] XFS (loop4): Quotacheck needed: Please wait. [ 210.974085][ T6363] loop2: detected capacity change from 0 to 512 [ 211.082243][ T6329] XFS (loop4): Quotacheck: Done. [ 211.136419][ T6363] EXT2-fs (loop2): error: couldn't mount because of unsupported optional features (90000) [ 211.217186][ T6365] loop1: detected capacity change from 0 to 131072 [ 211.239570][ T4030] XFS (loop4): Unmounting Filesystem [ 211.276930][ T6365] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 211.282007][ T6365] F2FS-fs (loop1): invalid crc value [ 211.347034][ T6365] F2FS-fs (loop1): Wrong journal entry on segno 1541 [ 211.348715][ T6365] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 211.559559][ T6339] loop3: detected capacity change from 0 to 32768 [ 211.708058][ T6339] XFS (loop3): Mounting V5 Filesystem [ 211.810241][ T6339] XFS (loop3): Ending clean mount [ 211.953415][ T4037] XFS (loop3): Unmounting Filesystem [ 211.963432][ T4334] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 212.138193][ T6399] loop4: detected capacity change from 0 to 128 [ 212.243187][ T4334] usb 1-1: Using ep0 maxpacket: 16 [ 212.286581][ T6376] loop2: detected capacity change from 0 to 40427 [ 212.349942][ T6376] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 212.352187][ T6376] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 212.369682][ T6394] loop1: detected capacity change from 0 to 40427 [ 212.377422][ T6376] F2FS-fs (loop2): Found nat_bits in checkpoint [ 212.382935][ T4334] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 212.385185][ T4334] usb 1-1: config 0 has no interface number 0 [ 212.386760][ T4334] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 212.389456][ T4334] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 212.391978][ T4334] usb 1-1: config 0 interface 41 has no altsetting 0 [ 212.410999][ T6376] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 212.417431][ T6376] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 212.421654][ T6394] F2FS-fs (loop1): invalid crc value [ 212.454990][ T6394] F2FS-fs (loop1): Found nat_bits in checkpoint [ 212.484039][ T6394] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 212.567505][ T4041] attempt to access beyond end of device [ 212.567505][ T4041] loop1: rw=2049, want=45104, limit=40427 [ 212.576850][ T4334] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 212.579158][ T4334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.581057][ T4334] usb 1-1: Product: syz [ 212.585718][ T4334] usb 1-1: Manufacturer: syz [ 212.588560][ T4334] usb 1-1: SerialNumber: syz [ 212.599832][ T4334] usb 1-1: config 0 descriptor?? [ 212.618609][ T6387] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 212.620365][ T6387] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 212.627455][ T6409] loop3: detected capacity change from 0 to 2048 [ 212.681699][ T6409] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.837172][ T6387] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 212.839093][ T6387] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 213.053921][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 213.493027][ T4334] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 213.513854][ T4334] CoreChips: probe of 1-1:0.41 failed with error -71 [ 213.539026][ T4334] usb 1-1: USB disconnect, device number 6 [ 214.023088][ T6435] loop1: detected capacity change from 0 to 32768 [ 215.080897][ T6434] ialloc: diAlloc returned -5! [ 215.085774][ T6434] ialloc: diAlloc returned -5! [ 215.333480][ T6084] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 215.336001][ T6084] Bluetooth: hci1: Injecting HCI hardware error event [ 215.340506][ T4032] Bluetooth: hci1: hardware error 0x00 [ 215.415480][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 215.953568][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b7f738f2: rx timeout, send abort [ 215.996256][ T6446] loop0: detected capacity change from 0 to 40427 [ 216.005611][ T6440] loop2: detected capacity change from 0 to 131072 [ 216.057321][ T6440] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 216.061418][ T6446] F2FS-fs (loop0): invalid crc value [ 216.064896][ T6440] F2FS-fs (loop2): invalid crc value [ 216.092413][ T6446] F2FS-fs (loop0): Found nat_bits in checkpoint [ 216.108522][ T6440] F2FS-fs (loop2): Wrong journal entry on segno 1541 [ 216.110523][ T6440] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 216.159490][ T6446] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 216.799473][ T6468] loop1: detected capacity change from 0 to 128 [ 218.244932][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 218.285629][ T4031] attempt to access beyond end of device [ 218.285629][ T4031] loop0: rw=2049, want=45104, limit=40427 [ 218.289106][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 218.504842][ T6466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.567539][ T6466] bond0: (slave rose0): Enslaving as an active interface with an up link [ 218.591429][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.593611][ T6483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.619269][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 218.661892][ T6489] loop4: detected capacity change from 0 to 256 [ 218.854333][ T6489] FAT-fs (loop4): Directory bread(block 64) failed [ 218.856294][ T6489] FAT-fs (loop4): Directory bread(block 65) failed [ 218.857974][ T6489] FAT-fs (loop4): Directory bread(block 66) failed [ 218.859774][ T6489] FAT-fs (loop4): Directory bread(block 67) failed [ 218.882180][ T6489] FAT-fs (loop4): Directory bread(block 68) failed [ 218.899817][ T6489] FAT-fs (loop4): Directory bread(block 69) failed [ 218.901590][ T6489] FAT-fs (loop4): Directory bread(block 70) failed [ 218.924050][ T6489] FAT-fs (loop4): Directory bread(block 71) failed [ 218.925747][ T6489] FAT-fs (loop4): Directory bread(block 72) failed [ 218.927460][ T6489] FAT-fs (loop4): Directory bread(block 73) failed [ 220.386287][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'. [ 220.478269][ T1533] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 220.765822][ T6544] loop2: detected capacity change from 0 to 128 [ 220.884008][ T6527] loop1: detected capacity change from 0 to 32768 [ 220.903506][ T1533] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.002429][ T6527] XFS (loop1): Mounting V5 Filesystem [ 221.511423][ T6535] loop4: detected capacity change from 0 to 40427 [ 221.557045][ T6535] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 221.559136][ T6535] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 221.564131][ T6535] F2FS-fs (loop4): invalid crc value [ 221.594743][ T1533] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.597129][ T1533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.599115][ T1533] usb 1-1: Product: syz [ 221.602271][ T1533] usb 1-1: Manufacturer: syz [ 221.610346][ T1533] usb 1-1: SerialNumber: syz [ 221.640333][ T1533] usb 1-1: config 0 descriptor?? [ 221.656753][ T6535] F2FS-fs (loop4): Found nat_bits in checkpoint [ 221.695095][ T6527] XFS (loop1): Ending clean mount [ 221.699000][ T6527] XFS (loop1): Quotacheck needed: Please wait. [ 221.753134][ T6535] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 221.765767][ T6535] F2FS-fs (loop4): Start checkpoint disabled! [ 221.791242][ T6559] loop3: detected capacity change from 0 to 131072 [ 221.814290][ T6535] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 221.816144][ T1533] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 221.817836][ T6535] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 221.828642][ T6527] XFS (loop1): Quotacheck: Done. [ 221.838199][ T6559] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 221.845624][ T6559] F2FS-fs (loop3): invalid crc value [ 221.864880][ T6559] F2FS-fs (loop3): Wrong journal entry on segno 1541 [ 221.866570][ T6559] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 221.882434][ T4041] XFS (loop1): Unmounting Filesystem [ 221.941553][ T1533] usb 1-1: USB disconnect, device number 7 [ 222.164992][ T4206] udevd[4206]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.562120][ T6597] loop2: detected capacity change from 0 to 1024 [ 222.686221][ T9] hfsplus: b-tree write err: -5, ino 4 [ 222.780327][ T6588] loop4: detected capacity change from 0 to 40427 [ 222.792795][ T6084] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 222.916536][ T6588] F2FS-fs (loop4): invalid crc value [ 222.973084][ T6588] F2FS-fs (loop4): Found nat_bits in checkpoint [ 223.041148][ T6614] loop1: detected capacity change from 0 to 128 [ 223.044229][ T6588] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 223.068643][ T6620] loop2: detected capacity change from 0 to 512 [ 223.077092][ T6588] attempt to access beyond end of device [ 223.077092][ T6588] loop4: rw=2049, want=45112, limit=40427 [ 223.119508][ T6624] loop3: detected capacity change from 0 to 256 [ 223.124107][ T4030] attempt to access beyond end of device [ 223.124107][ T4030] loop4: rw=2049, want=45120, limit=40427 [ 223.135748][ T6620] EXT4-fs (loop2): 1 orphan inode deleted [ 223.137146][ T6620] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.182864][ T6084] usb 1-1: Using ep0 maxpacket: 16 [ 223.303800][ T6084] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 223.374409][ T6630] udc-core: couldn't find an available UDC or it's busy [ 223.376176][ T6630] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 223.473012][ T6084] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 223.475075][ T6084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.476953][ T6084] usb 1-1: Product: syz [ 223.478008][ T6084] usb 1-1: Manufacturer: syz [ 223.479225][ T6084] usb 1-1: SerialNumber: syz [ 223.503126][ T6084] usb 1-1: config 0 descriptor?? [ 223.611572][ T6627] loop4: detected capacity change from 0 to 32768 [ 223.760143][ T6627] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 223.762289][ T6627] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 223.777412][ T6627] BTRFS info (device loop4): use zstd compression, level 3 [ 223.779220][ T6627] BTRFS info (device loop4): using free space tree [ 223.780947][ T6627] BTRFS info (device loop4): has skinny extents [ 224.031263][ T6627] BTRFS info (device loop4): enabling ssd optimizations [ 225.162922][ T6672] loop1: detected capacity change from 0 to 128 [ 225.873146][ T1533] usb 1-1: USB disconnect, device number 8 [ 226.217051][ T6678] loop3: detected capacity change from 0 to 4096 [ 226.396234][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 226.407831][ T6694] loop1: detected capacity change from 0 to 128 [ 226.501494][ T6678] EXT4-fs (loop3): Test dummy encryption mode enabled [ 226.522063][ T6678] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 226.790880][ T6714] loop0: detected capacity change from 0 to 4096 [ 226.897070][ T6714] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 227.718131][ T6722] loop2: detected capacity change from 0 to 4096 [ 227.923952][ T6722] ntfs3: Unknown parameter '/dev/vbi#' [ 228.213210][ T6738] loop4: detected capacity change from 0 to 256 [ 228.242158][ T6740] loop2: detected capacity change from 0 to 512 [ 228.284803][ T6738] FAT-fs (loop4): Directory bread(block 64) failed [ 228.286489][ T6738] FAT-fs (loop4): Directory bread(block 65) failed [ 228.287976][ T6738] FAT-fs (loop4): Directory bread(block 66) failed [ 228.289525][ T6738] FAT-fs (loop4): Directory bread(block 67) failed [ 228.312919][ T6738] FAT-fs (loop4): Directory bread(block 68) failed [ 228.314535][ T6738] FAT-fs (loop4): Directory bread(block 69) failed [ 228.316230][ T6738] FAT-fs (loop4): Directory bread(block 70) failed [ 228.317803][ T6738] FAT-fs (loop4): Directory bread(block 71) failed [ 228.319404][ T6738] FAT-fs (loop4): Directory bread(block 72) failed [ 228.320990][ T6738] FAT-fs (loop4): Directory bread(block 73) failed [ 228.332290][ T6740] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 228.334396][ T6740] UDF-fs: Scanning with blocksize 512 failed [ 228.336685][ T6740] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 228.338645][ T6740] UDF-fs: Scanning with blocksize 1024 failed [ 228.349030][ T6740] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 228.402967][ T6740] UDF-fs: Scanning with blocksize 2048 failed [ 228.413606][ T6740] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 228.448792][ T6740] UDF-fs: warning (device loop2): udf_fill_super: No fileset found [ 229.382127][ T6749] udc-core: couldn't find an available UDC or it's busy [ 229.387230][ T6749] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 229.494360][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.631'. [ 229.549705][ T6747] loop1: detected capacity change from 0 to 8192 [ 229.809513][ T6736] loop0: detected capacity change from 0 to 40427 [ 229.867954][ T6736] F2FS-fs (loop0): invalid crc value [ 229.871831][ T6763] loop4: detected capacity change from 0 to 128 [ 229.940433][ T6762] loop1: detected capacity change from 0 to 256 [ 229.952501][ T6736] F2FS-fs (loop0): Found nat_bits in checkpoint [ 230.059196][ T6736] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 230.214027][ T4031] attempt to access beyond end of device [ 230.214027][ T4031] loop0: rw=2049, want=45104, limit=40427 [ 230.360008][ T6762] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 230.391138][ T6771] netlink: 'syz.4.638': attribute type 4 has an invalid length. [ 230.473582][ T6772] netlink: 'syz.4.638': attribute type 4 has an invalid length. [ 230.801118][ T6778] udc-core: couldn't find an available UDC or it's busy [ 230.816542][ T6778] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 231.524695][ T6788] udc-core: couldn't find an available UDC or it's busy [ 231.526218][ T6788] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 232.229960][ T6810] udc-core: couldn't find an available UDC or it's busy [ 232.241218][ T6810] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 232.447407][ T6811] loop4: detected capacity change from 0 to 128 [ 232.907940][ T6809] loop0: detected capacity change from 0 to 32768 [ 232.962229][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 233.957824][ T6840] loop1: detected capacity change from 0 to 32768 [ 234.073493][ T6809] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 234.161039][ T6840] ialloc: diAlloc returned -5! [ 234.171247][ T6840] ialloc: diAlloc returned -5! [ 234.297973][ T4031] ocfs2: Unmounting device (7,0) on (node local) [ 234.475037][ T6866] loop1: detected capacity change from 0 to 8 [ 235.180731][ T6879] loop3: detected capacity change from 0 to 1024 [ 235.262149][ T9] hfsplus: b-tree write err: -5, ino 4 [ 237.799006][ T6898] loop2: detected capacity change from 0 to 32768 [ 237.842454][ T6906] udc-core: couldn't find an available UDC or it's busy [ 237.865200][ T6906] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 238.279913][ T6908] loop0: detected capacity change from 0 to 64 [ 239.375173][ T6913] netlink: 72 bytes leftover after parsing attributes in process `syz.0.679'. [ 241.239220][ T6941] loop3: detected capacity change from 0 to 128 [ 241.769477][ T6932] loop1: detected capacity change from 0 to 40427 [ 241.846361][ T6932] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 241.848194][ T6932] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 241.906416][ T6932] F2FS-fs (loop1): Found nat_bits in checkpoint [ 241.967652][ T6932] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 241.969590][ T6932] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 242.109337][ T6943] loop4: detected capacity change from 0 to 32768 [ 242.212857][ T6943] XFS (loop4): Mounting V5 Filesystem [ 242.302865][ T6943] XFS (loop4): Ending clean mount [ 242.312231][ T6943] XFS (loop4): Quotacheck needed: Please wait. [ 242.350918][ T6943] XFS (loop4): Quotacheck: Done. [ 242.423860][ T4030] XFS (loop4): Unmounting Filesystem [ 243.959274][ T6959] loop2: detected capacity change from 0 to 32768 [ 244.027772][ T6959] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.690 (6959) [ 244.090947][ T6959] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 244.093585][ T6959] BTRFS info (device loop2): enabling disk space caching [ 244.095544][ T6959] BTRFS info (device loop2): doing ref verification [ 244.097295][ T6959] BTRFS info (device loop2): use zlib compression, level 3 [ 244.109002][ T6959] BTRFS info (device loop2): force clearing of disk cache [ 244.110823][ T6959] BTRFS info (device loop2): disabling tree log [ 244.113461][ T6959] BTRFS info (device loop2): doing ref verification [ 244.115092][ T6959] BTRFS info (device loop2): disk space caching is enabled [ 244.116816][ T6959] BTRFS info (device loop2): has skinny extents [ 244.327422][ T6977] loop1: detected capacity change from 0 to 512 [ 244.995682][ T6977] EXT4-fs (loop1): Ignoring removed orlov option [ 244.997200][ T6977] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 244.999801][ T6977] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 245.025939][ T6977] EXT4-fs (loop1): 1 orphan inode deleted [ 245.027624][ T6977] EXT4-fs (loop1): 1 truncate cleaned up [ 245.028954][ T6977] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,dioread_nolock,,errors=continue. Quota mode: none. [ 245.129013][ T6959] BTRFS info (device loop2): enabling ssd optimizations [ 245.131740][ T6959] BTRFS info (device loop2): clearing free space tree [ 245.138367][ T6959] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 245.140649][ T6959] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 245.622278][ T7003] loop1: detected capacity change from 0 to 32768 [ 245.669570][ T7003] jfs: Unrecognized mount option "discard=0x000000000000af%)['}f9" or missing value [ 247.269933][ T7019] loop0: detected capacity change from 0 to 32768 [ 247.571758][ T7022] loop2: detected capacity change from 0 to 32768 [ 247.597328][ T7024] udc-core: couldn't find an available UDC or it's busy [ 247.599110][ T7024] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 247.703256][ T7022] XFS (loop2): Mounting V5 Filesystem [ 247.770608][ T7022] XFS (loop2): Starting recovery (logdev: internal) [ 247.789259][ T7022] XFS (loop2): Ending recovery (logdev: internal) [ 247.904143][ T4029] XFS (loop2): Unmounting Filesystem [ 248.800009][ T7039] loop3: detected capacity change from 0 to 40427 [ 248.859185][ T7039] F2FS-fs (loop3): invalid crc value [ 248.884910][ T7039] F2FS-fs (loop3): Found nat_bits in checkpoint [ 248.924531][ T7039] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 248.976189][ T7037] loop1: detected capacity change from 0 to 32768 [ 249.046084][ T7019] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.701 (7019) [ 249.742237][ T1598] attempt to access beyond end of device [ 249.742237][ T1598] loop3: rw=2049, want=40976, limit=40427 [ 249.751089][ T7039] F2FS-fs (loop3): Start checkpoint disabled! [ 250.157259][ T7037] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.704 (7037) [ 250.164053][ T7019] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 250.166379][ T7019] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 250.168686][ T7019] BTRFS info (device loop0): use zstd compression, level 3 [ 250.170587][ T7019] BTRFS error (device loop0): unrecognized mount option 'async' [ 250.247026][ T7019] BTRFS error (device loop0): open_ctree failed: -22 [ 250.259902][ T7037] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 250.262010][ T7037] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 250.275934][ T7037] BTRFS info (device loop1): use zstd compression, level 3 [ 250.280560][ T7037] BTRFS info (device loop1): using free space tree [ 250.282305][ T7037] BTRFS info (device loop1): has skinny extents [ 250.299872][ T4204] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by udevd (4204) [ 250.550717][ T7037] BTRFS info (device loop1): enabling ssd optimizations [ 250.669135][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 251.252904][ T7] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 251.255996][ T7] usb 1-1: config 16 interface 0 has no altsetting 0 [ 251.257654][ T7] usb 1-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 251.259942][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.516786][ T7079] loop3: detected capacity change from 0 to 128 [ 251.600530][ T7] usb 1-1: string descriptor 0 read error: -71 [ 251.604638][ T7] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 251.606782][ T7] imon 1-1:16.0: unable to initialize intf0, err -19 [ 251.608478][ T7] imon:imon_probe: failed to initialize context! [ 251.609983][ T7] imon 1-1:16.0: unable to register, err -19 [ 251.646140][ T7] usb 1-1: USB disconnect, device number 9 [ 253.769187][ T7095] loop3: detected capacity change from 0 to 64 [ 254.653254][ T7105] loop0: detected capacity change from 0 to 4096 [ 256.011524][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.013182][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.733863][ T7108] kAFS: unparsable volume name [ 257.413684][ T7121] loop3: detected capacity change from 0 to 128 [ 257.645065][ T7113] loop1: detected capacity change from 0 to 32768 [ 257.826358][ T7113] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.710 (7113) [ 257.859250][ T7113] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 257.932898][ T7113] BTRFS info (device loop1): using free space tree [ 257.934491][ T7113] BTRFS info (device loop1): has skinny extents [ 258.359738][ T7140] loop4: detected capacity change from 0 to 128 [ 258.980440][ T7130] loop3: detected capacity change from 0 to 32768 [ 259.001805][ T7113] BTRFS info (device loop1): enabling ssd optimizations [ 259.029874][ T7130] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.722 (7130) [ 260.420625][ T7130] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 260.422978][ T7130] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 260.425431][ T7130] BTRFS info (device loop3): use zstd compression, level 3 [ 260.427278][ T7130] BTRFS info (device loop3): using free space tree [ 260.428927][ T7130] BTRFS info (device loop3): has skinny extents [ 261.753942][ T7174] udc-core: couldn't find an available UDC or it's busy [ 261.755788][ T7174] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 261.831059][ T7130] BTRFS error (device loop3): open_ctree failed: -22 [ 261.835394][ T4204] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4204) [ 263.426283][ T7193] udc-core: couldn't find an available UDC or it's busy [ 263.479504][ T7193] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 263.859565][ T7202] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 264.007458][ T7195] chnl_net:caif_netlink_parms(): no params data found [ 264.253747][ T7208] loop1: detected capacity change from 0 to 128 [ 264.272493][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.274250][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.276726][ T7195] device bridge_slave_0 entered promiscuous mode [ 264.280324][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.282089][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.285332][ T7195] device bridge_slave_1 entered promiscuous mode [ 264.302870][ T7195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.307355][ T7195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.323961][ T7195] team0: Port device team_slave_0 added [ 264.327378][ T7195] team0: Port device team_slave_1 added [ 264.357985][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.359651][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.376896][ T7195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.380988][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.399319][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.121502][ T7195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.146325][ T7077] Bluetooth: hci1: command 0x0409 tx timeout [ 266.194807][ T7222] udc-core: couldn't find an available UDC or it's busy [ 266.196602][ T7222] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 266.205282][ T7195] device hsr_slave_0 entered promiscuous mode [ 266.348393][ T7217] loop4: detected capacity change from 0 to 32768 [ 266.383705][ T7195] device hsr_slave_1 entered promiscuous mode [ 266.402807][ T7195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.406113][ T7195] Cannot create hsr debugfs directory [ 266.615794][ T7195] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 266.653692][ T7195] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.694612][ T7195] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 266.727298][ T7195] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 266.738312][ T7221] loop0: detected capacity change from 0 to 32768 [ 267.423633][ T7232] loop1: detected capacity change from 0 to 4096 [ 267.778212][ T7195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.786751][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.803405][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.808428][ T7195] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.813997][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.816185][ T7221] XFS (loop0): Mounting V5 Filesystem [ 267.816735][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.820280][ T4117] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.822585][ T4117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.848373][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.850896][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.857621][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.863911][ T4117] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.865790][ T4117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.869781][ T7224] loop3: detected capacity change from 0 to 32768 [ 267.871825][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.894803][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.914130][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.939193][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.951697][ T7195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.955819][ T7195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.960553][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.963573][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.968005][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.971219][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.977238][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.979922][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.982440][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.993817][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.058380][ T7221] XFS (loop0): Ending clean mount [ 268.113733][ T7224] ialloc: diAlloc returned -5! [ 268.125530][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.127615][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.134627][ T7224] ialloc: diAlloc returned -5! [ 268.153497][ T7195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.217163][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 268.322253][ T4031] XFS (loop0): Unmounting Filesystem [ 268.370636][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.373629][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.414192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.471130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.476068][ T7195] device veth0_vlan entered promiscuous mode [ 268.486723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.489748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.501532][ T7195] device veth1_vlan entered promiscuous mode [ 268.565110][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.570905][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.575505][ T7195] device veth0_macvtap entered promiscuous mode [ 268.580575][ T7195] device veth1_macvtap entered promiscuous mode [ 268.594814][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.597377][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.599774][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.602158][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.605026][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.607606][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.609981][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.612556][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.615079][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.617660][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.621279][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.626494][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.630924][ T7195] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.639315][ T7195] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.641954][ T7195] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.381088][ T7195] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.386890][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.389472][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.403468][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.406590][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.409235][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.424804][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.470241][ T7252] loop3: detected capacity change from 0 to 128 [ 269.532401][ T7252] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 269.613166][ T4117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.615295][ T4117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.619590][ T4117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.630321][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 269.644064][ T4117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.665044][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.551158][ T7077] Bluetooth: hci1: command 0x040f tx timeout [ 270.598204][ T4848] vhci_hcd: connection reset by peer [ 270.615578][ T9] vhci_hcd: stop threads [ 270.618952][ T9] vhci_hcd: release socket [ 270.621643][ T9] vhci_hcd: disconnect device [ 270.702919][ T4143] vhci_hcd: vhci_device speed not set [ 272.255443][ T1598] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.316253][ T7269] loop3: detected capacity change from 0 to 256 [ 272.335418][ T7270] loop1: detected capacity change from 0 to 512 [ 272.399525][ T7272] loop4: detected capacity change from 0 to 4096 [ 272.459010][ T7272] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 272.462200][ T7272] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 272.484255][ T7272] ntfs3: loop4: Failed to load $MFTMirr. [ 272.524929][ T7277] loop3: detected capacity change from 0 to 1024 [ 272.529153][ T1598] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.592869][ T7073] Bluetooth: hci1: command 0x0419 tx timeout [ 272.620241][ T7270] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 272.632245][ T1598] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.669347][ T7277] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.825693][ T1598] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.751839][ T7293] tipc: Started in network mode [ 273.763167][ T7293] tipc: Node identity 4, cluster identity 4711 [ 273.768350][ T7293] tipc: Node number set to 4 [ 274.883649][ T7308] udc-core: couldn't find an available UDC or it's busy [ 274.888166][ T7308] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 275.610284][ T7307] loop1: detected capacity change from 0 to 1024 [ 275.685321][ T7307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.812930][ T7305] loop0: detected capacity change from 0 to 32768 [ 275.845992][ T7305] ialloc: diAlloc returned -5! [ 275.850981][ T7305] ialloc: diAlloc returned -5! [ 277.867873][ T7331] loop5: detected capacity change from 0 to 4096 [ 279.564039][ T7327] loop3: detected capacity change from 0 to 128 [ 279.727401][ T7331] NILFS (loop5): error -4 creating segctord thread [ 279.735466][ T7347] loop4: detected capacity change from 0 to 512 [ 280.244708][ T7347] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 280.272909][ T7364] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 280.274448][ T7364] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 280.277428][ T7364] vhci_hcd vhci_hcd.0: Device attached [ 280.520861][ T7372] loop3: detected capacity change from 0 to 128 [ 280.569834][ T7077] usb 2-1: new low-speed USB device number 2 using vhci_hcd [ 281.071299][ T7377] tipc: Started in network mode [ 281.072637][ T7377] tipc: Node identity 4, cluster identity 4711 [ 281.076215][ T7377] tipc: Node number set to 4 [ 281.181424][ T7381] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 282.368133][ T7361] loop5: detected capacity change from 0 to 40427 [ 282.457172][ T7361] F2FS-fs (loop5): invalid crc value [ 282.475427][ T7361] F2FS-fs (loop5): Found nat_bits in checkpoint [ 282.540690][ T7361] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 284.053680][ T7195] attempt to access beyond end of device [ 284.053680][ T7195] loop5: rw=2049, want=45104, limit=40427 [ 284.067662][ T7409] udc-core: couldn't find an available UDC or it's busy [ 284.069685][ T7409] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 284.084418][ T7410] loop1: detected capacity change from 0 to 1024 [ 284.187883][ T7410] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 284.310048][ T7422] loop5: detected capacity change from 0 to 1024 [ 284.408486][ T7422] EXT4-fs (loop5): Ignoring removed nobh option [ 284.414656][ T7422] EXT4-fs (loop5): Ignoring removed bh option [ 285.225363][ T7423] input: syz0 as /devices/virtual/input/input5 [ 285.226935][ T7423] input: failed to attach handler leds to device input5, error: -6 [ 285.450938][ T7422] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nobarrier,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,usrquota,,errors=continue. Quota mode: writeback. [ 285.513940][ T7422] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.771: Allocating blocks 385-513 which overlap fs metadata [ 285.565357][ T7421] EXT4-fs (loop5): pa 00000000f1633a35: logic 16, phys. 129, len 24 [ 285.567344][ T7421] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 286.606438][ T7443] loop0: detected capacity change from 0 to 131072 [ 287.393923][ T7443] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name [ 287.397653][ T7443] F2FS-fs (loop0): invalid crc value [ 287.437077][ T7443] F2FS-fs (loop0): Wrong journal entry on segno 1541 [ 287.438939][ T7443] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 287.652853][ T1598] device hsr_slave_0 left promiscuous mode [ 287.808247][ T7466] loop1: detected capacity change from 0 to 128 [ 287.844171][ T1598] device hsr_slave_1 left promiscuous mode [ 287.943795][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.945955][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.085167][ T1598] device bridge_slave_1 left promiscuous mode [ 289.087029][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.179246][ T7479] loop4: detected capacity change from 0 to 1024 [ 289.212068][ T1598] device bridge_slave_0 left promiscuous mode [ 289.213987][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.277924][ T7479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.434184][ T7461] loop5: detected capacity change from 0 to 32768 [ 289.573294][ T1598] device veth1_macvtap left promiscuous mode [ 289.575340][ T1598] device veth0_macvtap left promiscuous mode [ 289.577378][ T1598] device veth1_vlan left promiscuous mode [ 289.579127][ T1598] device veth0_vlan left promiscuous mode [ 290.249150][ T7461] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 290.251567][ T7461] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 290.269135][ T7461] BTRFS info (device loop5): use zstd compression, level 3 [ 290.271075][ T7461] BTRFS info (device loop5): using free space tree [ 290.283859][ T7461] BTRFS info (device loop5): has skinny extents [ 291.476743][ T7508] udc-core: couldn't find an available UDC or it's busy [ 291.512890][ T7508] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 291.563146][ T7461] BTRFS error (device loop5): open_ctree failed: -12 [ 291.675029][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 291.700021][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 291.764720][ T7510] loop5: detected capacity change from 0 to 64 [ 291.768707][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.845907][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.076473][ T7506] loop0: detected capacity change from 0 to 40427 [ 292.097311][ T7513] loop4: detected capacity change from 0 to 1024 [ 292.808739][ T1598] bond0 (unregistering): Released all slaves [ 292.816825][ T7506] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 292.863846][ T7513] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.474064][ T7566] loop0: detected capacity change from 0 to 128 [ 297.524381][ T7569] batman_adv: batadv0: Adding interface: dummy0 [ 297.531434][ T7569] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.550946][ T7569] batman_adv: batadv0: Interface activated: dummy0 [ 297.595378][ T7569] batadv0: mtu less than device minimum [ 297.601175][ T7569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.617566][ T7569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.624607][ T7569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.631723][ T7569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.638819][ T7569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.646098][ T7569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.653190][ T7569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.660168][ T7569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.667156][ T7569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 298.793436][ T7552] loop1: detected capacity change from 0 to 32768 [ 298.830837][ T7552] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.798 (7552) [ 299.062965][ T7552] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 299.065176][ T7552] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 299.122527][ T7552] BTRFS info (device loop1): use zstd compression, level 3 [ 299.132121][ T7552] BTRFS info (device loop1): using free space tree [ 299.144635][ T7552] BTRFS info (device loop1): has skinny extents [ 299.790493][ T7588] loop5: detected capacity change from 0 to 1024 [ 299.947865][ T7559] loop4: detected capacity change from 0 to 32768 [ 300.078826][ T7588] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 300.920040][ T7588] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 301.238336][ T7552] BTRFS error (device loop1): open_ctree failed: -12 [ 301.461400][ T7631] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: none. [ 303.690984][ T7655] loop3: detected capacity change from 0 to 256 [ 303.724916][ T7656] loop5: detected capacity change from 0 to 128 [ 303.750572][ T7656] EXT4-fs (loop5): Test dummy encryption mode enabled [ 303.786779][ T7656] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 303.800117][ T7655] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 304.121127][ T7648] loop1: detected capacity change from 0 to 131072 [ 304.203858][ T7668] udc-core: couldn't find an available UDC or it's busy [ 304.208043][ T7668] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 304.229957][ T7656] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 304.288352][ T7648] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 304.301797][ T7648] F2FS-fs (loop1): invalid crc value [ 305.200018][ T7648] F2FS-fs (loop1): Wrong journal entry on segno 1541 [ 305.201657][ T7648] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 305.452038][ T7692] loop5: detected capacity change from 0 to 256 [ 305.583675][ T7692] FAT-fs (loop5): Directory bread(block 64) failed [ 305.585476][ T7692] FAT-fs (loop5): Directory bread(block 65) failed [ 305.587131][ T7692] FAT-fs (loop5): Directory bread(block 66) failed [ 305.588798][ T7692] FAT-fs (loop5): Directory bread(block 67) failed [ 305.590338][ T7692] FAT-fs (loop5): Directory bread(block 68) failed [ 305.592051][ T7692] FAT-fs (loop5): Directory bread(block 69) failed [ 305.608504][ T7697] loop4: detected capacity change from 0 to 1024 [ 305.654229][ T7692] FAT-fs (loop5): Directory bread(block 70) failed [ 305.656019][ T7692] FAT-fs (loop5): Directory bread(block 71) failed [ 305.657685][ T7692] FAT-fs (loop5): Directory bread(block 72) failed [ 305.669312][ T7692] FAT-fs (loop5): Directory bread(block 73) failed [ 306.776969][ T7697] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 306.781381][ T7697] hfsplus: invalid btree extent records (0 size) [ 306.786871][ T7697] hfsplus: failed to load attributes file [ 306.804728][ T7709] loop3: detected capacity change from 0 to 128 [ 306.916879][ T7709] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 308.618135][ T7724] loop5: detected capacity change from 0 to 128 [ 309.183481][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.832'. [ 310.255810][ T7758] loop1: detected capacity change from 0 to 47 [ 310.579505][ T7755] loop4: detected capacity change from 0 to 131072 [ 310.648732][ T7755] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 310.654374][ T7755] F2FS-fs (loop4): invalid crc value [ 310.693144][ T7767] loop1: detected capacity change from 0 to 128 [ 310.697458][ T7755] F2FS-fs (loop4): Wrong journal entry on segno 1541 [ 310.699158][ T7755] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 310.839028][ T7777] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 310.840980][ T7767] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 311.048089][ T7738] loop0: detected capacity change from 0 to 32768 [ 311.889363][ T7738] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 311.891650][ T7738] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 312.081665][ T7738] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 312.088890][ T7072] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 312.090802][ T7072] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 312.250615][ T7072] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 159ms [ 312.272862][ T7072] gfs2: fsid=syz:syz.0: jid=0: Done [ 312.275746][ T7738] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 312.285678][ T7738] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 314.395757][ T7811] loop0: detected capacity change from 0 to 1024 [ 314.498021][ T7811] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 314.565208][ T7786] loop1: detected capacity change from 0 to 32768 [ 314.601820][ T7811] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 314.635066][ T7821] netlink: 'syz.4.851': attribute type 10 has an invalid length. [ 314.637973][ T7821] bond0: (slave wlan1): Opening slave failed [ 314.684378][ T7819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.698579][ T7786] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 314.783950][ T7790] loop3: detected capacity change from 0 to 32768 [ 314.920968][ T4041] ocfs2: Unmounting device (7,1) on (node local) [ 314.965819][ T7790] JBD2: Ignoring recovery information on journal [ 315.674528][ T7831] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: none. [ 315.805161][ T7790] JBD2: recovery failed [ 315.807532][ T7790] (syz.3.843,7790,1):ocfs2_journal_load:1083 ERROR: Failed to load journal! [ 315.812171][ T7790] (syz.3.843,7790,1):ocfs2_check_volume:2434 ERROR: ocfs2 journal load failed! -5 [ 315.822949][ T7790] (syz.3.843,7790,0):ocfs2_check_volume:2490 ERROR: status = -5 [ 315.825574][ T7790] (syz.3.843,7790,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 315.851455][ T7790] (syz.3.843,7790,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 315.941870][ T7840] loop1: detected capacity change from 0 to 128 [ 315.955422][ T7839] loop4: detected capacity change from 0 to 512 [ 315.972112][ T7839] EXT4-fs (loop4): Ignoring removed nobh option [ 316.079931][ T7840] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 316.131944][ T7839] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 316.147155][ T7839] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 316.319043][ T7839] EXT4-fs (loop4): orphan cleanup on readonly fs [ 316.332207][ T7839] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 316.346332][ T7839] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 316.358900][ T7839] EXT4-fs (loop4): 1 truncate cleaned up [ 316.363253][ T7839] EXT4-fs (loop4): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,nobh,,errors=continue. Quota mode: none. [ 317.509585][ T7834] loop5: detected capacity change from 0 to 131072 [ 317.600612][ T7834] F2FS-fs (loop5): QUOTA feature is enabled, so ignore qf_name [ 317.609495][ T7834] F2FS-fs (loop5): invalid crc value [ 317.793786][ T7834] F2FS-fs (loop5): Wrong journal entry on segno 1541 [ 317.795614][ T7834] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 319.874879][ T7875] loop5: detected capacity change from 0 to 128 [ 320.340898][ T7854] loop3: detected capacity change from 0 to 32768 [ 320.468958][ T7854] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.856 (7854) [ 320.516607][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.518273][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.700432][ T7884] loop5: detected capacity change from 0 to 1024 [ 320.713748][ T7854] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 320.724048][ T7854] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 320.730320][ T7854] BTRFS info (device loop3): trying to use backup root at mount time [ 320.743466][ T7854] BTRFS info (device loop3): enabling auto defrag [ 320.745318][ T7854] BTRFS info (device loop3): turning on sync discard [ 320.750774][ T7854] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 320.816860][ T7854] BTRFS info (device loop3): trying to use backup root at mount time [ 320.891967][ T7854] BTRFS info (device loop3): using free space tree [ 320.902907][ T7854] BTRFS info (device loop3): has skinny extents [ 320.934192][ T7854] BTRFS error (device loop3): open_ctree failed: -12 [ 321.749993][ T7884] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 322.317082][ T7921] loop5: detected capacity change from 0 to 32768 [ 322.319480][ T7921] jfs: Unrecognized mount option "discard=0x000000000000af%)['}f9" or missing value [ 324.962658][ T7932] loop4: detected capacity change from 0 to 131072 [ 325.004499][ T7953] loop5: detected capacity change from 0 to 128 [ 325.029146][ T7932] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 325.032344][ T7932] F2FS-fs (loop4): invalid crc value [ 325.117425][ T7932] F2FS-fs (loop4): Wrong journal entry on segno 1541 [ 325.119124][ T7932] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 326.257421][ T7982] loop4: detected capacity change from 0 to 128 [ 326.346610][ T7980] ax25_connect(): syz.3.882 uses autobind, please contact jreuter@yaina.de [ 326.433487][ T7982] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 328.049616][ T7994] udc-core: couldn't find an available UDC or it's busy [ 328.051398][ T7994] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 328.380188][ T8003] loop4: detected capacity change from 0 to 1024 [ 328.466400][ T8003] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 328.509679][ T8003] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 329.658445][ T8029] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: none. [ 330.564670][ T8028] loop1: detected capacity change from 0 to 131072 [ 330.693740][ T8028] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 330.732649][ T8028] F2FS-fs (loop1): invalid crc value [ 332.362384][ T8028] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 333.079206][ T8063] loop3: detected capacity change from 0 to 128 [ 333.337308][ T8059] loop4: detected capacity change from 0 to 1024 [ 333.883624][ T8059] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.914277][ T8063] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 335.087978][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 335.133920][ T8078] net_ratelimit: 10 callbacks suppressed [ 335.133937][ T8078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.451705][ T8094] loop0: detected capacity change from 0 to 1024 [ 335.513315][ T8097] loop5: detected capacity change from 0 to 128 [ 336.579721][ T1598] hfsplus: b-tree write err: -5, ino 4 [ 336.581226][ T8122] loop1: detected capacity change from 0 to 1024 [ 336.679786][ T8122] EXT4-fs (loop1): Ignoring removed bh option [ 336.681364][ T8122] EXT4-fs (loop1): inline encryption not supported [ 336.710253][ T8122] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 336.805708][ T8122] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #3: block 2: comm syz.1.910: lblock 2 mapped to illegal pblock 2 (length 1) [ 336.819402][ T8122] __quota_error: 109 callbacks suppressed [ 336.819419][ T8122] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 336.855807][ T8126] loop0: detected capacity change from 0 to 256 [ 336.858147][ T8122] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #3: block 48: comm syz.1.910: lblock 0 mapped to illegal pblock 48 (length 1) [ 336.886276][ T8132] loop4: detected capacity change from 0 to 1024 [ 336.913586][ T8122] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 336.916062][ T8122] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.910: Failed to acquire dquot type 0 [ 336.932972][ T8122] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 336.961558][ T8132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.964512][ T8126] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d15eac, utbl_chksum : 0xe619d30d) [ 336.998189][ T8122] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.910: mark_inode_dirty error [ 337.172504][ T8122] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 337.189291][ T8122] EXT4-fs (loop1): 1 orphan inode deleted [ 337.202243][ T8122] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 337.207840][ T153] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 337.216184][ T153] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 337.436063][ T153] EXT4-fs error (device loop1): ext4_release_dquot:6220: comm kworker/u4:3: Failed to release dquot type 0 [ 337.768290][ T8126] exFAT-fs (loop0): hint_cluster is invalid (17) [ 337.814058][ T8141] loop5: detected capacity change from 0 to 128 [ 337.963065][ T8141] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 338.013522][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 338.015636][ T8148] IPVS: Unknown mcast interface: vcan0 [ 339.242107][ T8167] loop3: detected capacity change from 0 to 32768 [ 339.463363][ T8181] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 16: comm syz.1.910: lblock 0 mapped to illegal pblock 16 (length 1) [ 339.526506][ T8167] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.922 (8167) [ 339.547244][ T8181] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 16: comm syz.1.910: lblock 0 mapped to illegal pblock 16 (length 1) [ 339.765037][ T8167] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 339.767369][ T8167] BTRFS info (device loop3): setting nodatacow, compression disabled [ 339.769473][ T8167] BTRFS info (device loop3): turning off barriers [ 339.770976][ T8167] BTRFS info (device loop3): force clearing of disk cache [ 339.772665][ T8167] BTRFS info (device loop3): enabling ssd optimizations [ 339.774496][ T8167] BTRFS info (device loop3): using spread ssd allocation scheme [ 339.776358][ T8167] BTRFS info (device loop3): doing ref verification [ 339.777959][ T8167] BTRFS info (device loop3): not using ssd optimizations [ 339.779588][ T8167] BTRFS info (device loop3): not using spread ssd allocation scheme [ 339.781399][ T8167] BTRFS info (device loop3): using free space tree [ 339.783008][ T8167] BTRFS info (device loop3): has skinny extents [ 340.495850][ T4041] EXT4-fs error (device loop1): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 340.510872][ T8193] loop4: detected capacity change from 0 to 256 [ 340.529605][ T8194] loop5: detected capacity change from 0 to 128 [ 340.534327][ T4041] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 340.543125][ T4041] EXT4-fs error (device loop1): ext4_quota_off:6486: inode #3: comm syz-executor: mark_inode_dirty error [ 340.589375][ T8193] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d15eac, utbl_chksum : 0xe619d30d) [ 340.669774][ T8193] exFAT-fs (loop4): hint_cluster is invalid (17) [ 340.722091][ T8179] loop0: detected capacity change from 0 to 32768 [ 340.845172][ T8167] BTRFS info (device loop3): clearing free space tree [ 340.847087][ T8167] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 340.849518][ T8167] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 340.872851][ T8167] BTRFS info (device loop3): creating free space tree [ 340.877238][ T8167] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 340.879754][ T8167] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 340.887070][ T8167] BTRFS info (device loop3): checking UUID tree [ 340.943783][ T8179] ialloc: diAlloc returned -5! [ 341.596539][ T8233] loop4: detected capacity change from 0 to 128 [ 341.751750][ T8233] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 342.866457][ T8211] loop1: detected capacity change from 0 to 40427 [ 342.898952][ T8249] loop0: detected capacity change from 0 to 256 [ 342.983897][ T8211] F2FS-fs (loop1): invalid crc value [ 342.984340][ T8249] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 343.056223][ T8211] F2FS-fs (loop1): Found nat_bits in checkpoint [ 343.568424][ T8211] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 344.121667][ T4041] attempt to access beyond end of device [ 344.121667][ T4041] loop1: rw=2049, want=45104, limit=40427 [ 344.153184][ T8272] loop4: detected capacity change from 0 to 1024 [ 344.226650][ T8272] EXT4-fs (loop4): Ignoring removed bh option [ 344.228304][ T8272] EXT4-fs (loop4): inline encryption not supported [ 344.247646][ T8272] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 344.256160][ T8272] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #3: block 2: comm syz.4.939: lblock 2 mapped to illegal pblock 2 (length 1) [ 344.291025][ T8272] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 344.308947][ T8272] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #3: block 48: comm syz.4.939: lblock 0 mapped to illegal pblock 48 (length 1) [ 344.323431][ T8272] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 344.325663][ T8272] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.939: Failed to acquire dquot type 0 [ 344.349836][ T8272] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 344.389314][ T8272] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.939: mark_inode_dirty error [ 344.392332][ T8272] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 344.421875][ T8272] EXT4-fs (loop4): 1 orphan inode deleted [ 344.434007][ T8272] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 344.464315][ T136] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 344.467600][ T8279] loop3: detected capacity change from 0 to 256 [ 344.470773][ T136] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 344.473658][ T136] EXT4-fs error (device loop4): ext4_release_dquot:6220: comm kworker/u4:1: Failed to release dquot type 0 [ 344.478806][ T8279] exfat: Deprecated parameter 'namecase' [ 344.481450][ T8279] exfat: Deprecated parameter 'utf8' [ 344.511455][ T8279] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 344.611280][ T8283] loop1: detected capacity change from 0 to 64 [ 344.836004][ T8289] loop1: detected capacity change from 0 to 128 [ 347.331379][ T8293] loop0: detected capacity change from 0 to 4096 [ 347.422963][ T8289] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 347.598509][ T8293] ntfs3: Unknown parameter 'windows_names' [ 348.320954][ T4030] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 348.324664][ T4030] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 348.327451][ T4030] EXT4-fs error (device loop4): ext4_quota_off:6486: inode #3: comm syz-executor: mark_inode_dirty error [ 349.612550][ T8318] loop3: detected capacity change from 0 to 64 [ 349.664714][ T8319] netlink: 32 bytes leftover after parsing attributes in process `syz.5.956'. [ 350.219673][ T8313] loop1: detected capacity change from 0 to 131072 [ 350.528209][ T8313] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 350.531830][ T8313] F2FS-fs (loop1): invalid crc value [ 350.571699][ T8313] F2FS-fs (loop1): Wrong journal entry on segno 1541 [ 350.573465][ T8313] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 350.643946][ T8321] loop4: detected capacity change from 0 to 32768 [ 351.332878][ T8321] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.957 (8321) [ 351.675130][ T8337] loop1: detected capacity change from 0 to 128 [ 351.866340][ T8336] loop5: detected capacity change from 0 to 32768 [ 351.871530][ T8321] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 351.878679][ T8321] BTRFS info (device loop4): using free space tree [ 351.880176][ T8321] BTRFS info (device loop4): has skinny extents [ 351.891075][ T8337] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 351.908470][ T8336] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.961 (8336) [ 352.092654][ T8348] loop3: detected capacity change from 0 to 4096 [ 352.825767][ T8336] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 352.828204][ T8336] BTRFS info (device loop5): setting nodatacow, compression disabled [ 352.830231][ T8336] BTRFS info (device loop5): turning off barriers [ 352.831818][ T8336] BTRFS info (device loop5): force clearing of disk cache [ 352.833733][ T8336] BTRFS info (device loop5): enabling ssd optimizations [ 352.835479][ T8336] BTRFS info (device loop5): using spread ssd allocation scheme [ 352.837424][ T8336] BTRFS info (device loop5): doing ref verification [ 352.838922][ T8336] BTRFS info (device loop5): not using ssd optimizations [ 352.840586][ T8336] BTRFS info (device loop5): not using spread ssd allocation scheme [ 352.842659][ T8336] BTRFS info (device loop5): using free space tree [ 352.844193][ T8336] BTRFS info (device loop5): has skinny extents [ 352.862523][ T8348] ntfs3: Unknown parameter 'windows_names' [ 353.182961][ T8321] BTRFS error (device loop4): open_ctree failed: -12 [ 354.136834][ T8336] BTRFS info (device loop5): clearing free space tree [ 354.138780][ T8336] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 354.141140][ T8336] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 354.169324][ T8336] BTRFS info (device loop5): creating free space tree [ 354.172369][ T8336] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 354.174855][ T8336] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 354.180416][ T8336] BTRFS info (device loop5): checking UUID tree [ 354.254209][ T8404] loop0: detected capacity change from 0 to 8 [ 354.508571][ T8404] SQUASHFS error: xz decompression failed, data probably corrupt [ 354.511032][ T8404] SQUASHFS error: Failed to read block 0x108: -5 [ 354.512812][ T8404] SQUASHFS error: Unable to read metadata cache entry [106] [ 354.514665][ T8404] SQUASHFS error: Unable to read inode 0x11f [ 355.269355][ T8417] loop0: detected capacity change from 0 to 256 [ 355.559862][ T8419] loop4: detected capacity change from 0 to 128 [ 356.038230][ T8415] loop1: detected capacity change from 0 to 131072 [ 356.217269][ T8415] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 356.220724][ T8415] F2FS-fs (loop1): invalid crc value [ 356.240111][ T8415] F2FS-fs (loop1): Wrong journal entry on segno 1541 [ 356.241995][ T8415] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 356.374060][ T8419] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 358.505064][ T8445] loop1: detected capacity change from 0 to 32768 [ 358.545537][ T8445] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.982 (8445) [ 358.556389][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 358.561680][ T8450] loop5: detected capacity change from 0 to 128 [ 358.568873][ T8442] loop4: detected capacity change from 0 to 4096 [ 358.588444][ T8445] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 358.590761][ T8445] BTRFS info (device loop1): setting nodatacow, compression disabled [ 358.592643][ T8445] BTRFS info (device loop1): turning off barriers [ 358.594336][ T8445] BTRFS info (device loop1): force clearing of disk cache [ 358.596096][ T8445] BTRFS info (device loop1): enabling ssd optimizations [ 358.597962][ T8445] BTRFS info (device loop1): using spread ssd allocation scheme [ 358.599817][ T8445] BTRFS info (device loop1): doing ref verification [ 358.601437][ T8445] BTRFS info (device loop1): not using ssd optimizations [ 358.603301][ T8445] BTRFS info (device loop1): not using spread ssd allocation scheme [ 358.605332][ T8445] BTRFS info (device loop1): using free space tree [ 358.606927][ T8445] BTRFS info (device loop1): has skinny extents [ 358.613511][ T8442] ntfs3: Unknown parameter 'windows_names' [ 358.962967][ T8427] loop3: detected capacity change from 0 to 40427 [ 359.024877][ T8445] BTRFS info (device loop1): clearing free space tree [ 359.026738][ T8445] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 359.029271][ T8445] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 359.044768][ T8427] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 359.048205][ T8445] BTRFS info (device loop1): creating free space tree [ 359.050982][ T8445] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 359.053587][ T8445] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 359.058018][ T8445] BTRFS info (device loop1): checking UUID tree [ 360.812610][ T8493] loop5: detected capacity change from 0 to 128 [ 360.916591][ T8493] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 362.020606][ T8516] loop1: detected capacity change from 0 to 4096 [ 362.034471][ T8517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.091015][ T8516] ntfs3: Unknown parameter 'windows_names' [ 362.129202][ T8510] loop4: detected capacity change from 0 to 32768 [ 362.138152][ T8520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1000'. [ 362.327367][ T8510] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.998 (8510) [ 363.042936][ T8510] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 363.045172][ T8510] BTRFS info (device loop4): setting nodatacow, compression disabled [ 363.047261][ T8510] BTRFS info (device loop4): turning off barriers [ 363.048811][ T8510] BTRFS info (device loop4): force clearing of disk cache [ 363.050628][ T8510] BTRFS info (device loop4): enabling ssd optimizations [ 363.052406][ T8510] BTRFS info (device loop4): using spread ssd allocation scheme [ 363.054413][ T8510] BTRFS info (device loop4): doing ref verification [ 363.056003][ T8510] BTRFS info (device loop4): not using ssd optimizations [ 363.057729][ T8510] BTRFS info (device loop4): not using spread ssd allocation scheme [ 363.059738][ T8510] BTRFS info (device loop4): using free space tree [ 363.061208][ T8510] BTRFS info (device loop4): has skinny extents [ 363.181335][ T8545] netlink: 'syz.1.1003': attribute type 4 has an invalid length. [ 363.231327][ T8545] netlink: 'syz.1.1003': attribute type 4 has an invalid length. [ 363.347711][ T8510] BTRFS info (device loop4): clearing free space tree [ 363.349703][ T8510] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 363.352041][ T8510] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 363.358859][ T8510] BTRFS info (device loop4): creating free space tree [ 363.361326][ T8510] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 363.363890][ T8510] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 363.370506][ T8510] BTRFS info (device loop4): checking UUID tree [ 363.661858][ T8571] loop5: detected capacity change from 0 to 128 [ 363.715167][ T8574] loop1: detected capacity change from 0 to 128 [ 364.355855][ T8574] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 364.761357][ T8586] loop0: detected capacity change from 0 to 64 [ 364.910065][ T8590] loop3: detected capacity change from 0 to 4096 [ 364.973969][ T8590] ntfs3: Unknown parameter 'windows_names' [ 365.948053][ T8615] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1022'. [ 366.274680][ T8624] loop0: detected capacity change from 0 to 128 [ 366.421894][ T8624] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 368.338508][ T8653] sctp: [Deprecated]: syz.3.1035 (pid 8653) Use of int in maxseg socket option. [ 368.338508][ T8653] Use struct sctp_assoc_value instead [ 368.482972][ T8655] loop5: detected capacity change from 0 to 128 [ 368.599577][ T8657] loop3: detected capacity change from 0 to 4096 [ 368.612357][ T8667] loop1: detected capacity change from 0 to 128 [ 368.790674][ T8657] ntfs3: Unknown parameter 'windows_names' [ 369.657861][ T8667] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 370.829985][ T8686] device gretap0 entered promiscuous mode [ 370.832140][ T8686] device vlan2 entered promiscuous mode [ 371.249747][ T8699] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1051'. [ 371.678696][ T8707] loop3: detected capacity change from 0 to 128 [ 372.671304][ T8707] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 372.905702][ T8717] loop1: detected capacity change from 0 to 32768 [ 373.083920][ T8717] jfs: Unrecognized mount option "discard=0x000000000000af%)['}f9" or missing value [ 373.181095][ T8705] loop0: detected capacity change from 0 to 131072 [ 373.221606][ T8705] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name [ 373.225523][ T8705] F2FS-fs (loop0): invalid crc value [ 373.361462][ T8720] loop4: detected capacity change from 0 to 4096 [ 373.390760][ T8705] F2FS-fs (loop0): Wrong journal entry on segno 1541 [ 373.392584][ T8705] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 373.437444][ T8720] ntfs3: Unknown parameter 'windows_names' [ 377.101704][ T8763] loop1: detected capacity change from 0 to 128 [ 377.387610][ T8768] loop5: detected capacity change from 0 to 32768 [ 377.423591][ T8768] jfs: Unrecognized mount option "discard=0x000000000000af%)['}f9" or missing value [ 377.429241][ T8763] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 377.572260][ T8777] loop0: detected capacity change from 0 to 4096 [ 377.733427][ T8777] ntfs3: Unknown parameter 'windows_names' [ 377.747843][ T8779] loop3: detected capacity change from 0 to 128 [ 380.486273][ T8801] device gretap0 entered promiscuous mode [ 380.603095][ T8801] device vlan2 entered promiscuous mode [ 380.754498][ T8812] loop5: detected capacity change from 0 to 128 [ 381.017380][ T8818] loop0: detected capacity change from 0 to 32768 [ 381.022192][ T8812] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 381.054013][ T8818] jfs: Unrecognized mount option "discard=0x000000000000af%)['}f9" or missing value [ 381.983447][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.985155][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.270063][ T8837] sctp: [Deprecated]: syz.4.1093 (pid 8837) Use of int in maxseg socket option. [ 382.270063][ T8837] Use struct sctp_assoc_value instead [ 383.991880][ T8861] loop5: detected capacity change from 0 to 128 [ 384.060910][ T8861] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 384.760437][ T8876] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 385.353603][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1112'. [ 385.689481][ T8906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1117'. [ 385.706065][ T8906] device bridge_slave_0 left promiscuous mode [ 385.709720][ T8906] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.757878][ T8906] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 385.799903][ T8909] loop0: detected capacity change from 0 to 128 [ 385.837314][ T8909] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 386.033042][ T4085] Bluetooth: hci1: command 0x0405 tx timeout [ 386.643639][ T8933] loop1: detected capacity change from 0 to 1024 [ 386.677483][ T8933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.112929][ T4078] Bluetooth: hci1: command 0x0405 tx timeout [ 388.142215][ T8961] loop1: detected capacity change from 0 to 128 [ 388.165704][ T8956] sctp: [Deprecated]: syz.3.1136 (pid 8956) Use of int in maxseg socket option. [ 388.165704][ T8956] Use struct sctp_assoc_value instead [ 388.249612][ T8961] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 388.391792][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 388.406918][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 388.410625][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 388.422096][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 388.426666][ T8970] device bridge_slave_0 left promiscuous mode [ 388.428810][ T8970] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.465887][ T8970] device bridge_slave_1 left promiscuous mode [ 388.467613][ T8970] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.506082][ T8970] bond0: (slave bond_slave_0): Releasing backup interface [ 388.610170][ T8970] bond0: (slave bond_slave_1): Releasing backup interface [ 388.622504][ T8974] loop5: detected capacity change from 0 to 1024 [ 388.749895][ T8974] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 389.036755][ T8970] team0: Port device team_slave_0 removed [ 389.101079][ T8970] team0: Port device team_slave_1 removed [ 389.118409][ T8970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.160580][ T8970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.201380][ T8993] netlink: 'syz.5.1147': attribute type 10 has an invalid length. [ 390.227217][ T8993] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1147'. [ 390.243146][ T8993] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 390.278570][ T8999] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1151'. [ 390.460943][ T9008] loop3: detected capacity change from 0 to 128 [ 390.559585][ T9012] loop4: detected capacity change from 0 to 1024 [ 390.789473][ T9008] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 390.911666][ T9012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.746156][ T9033] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 391.803016][ T9028] IPVS: stopping master sync thread 9033 ... [ 391.829804][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1161'. [ 391.942629][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'. [ 392.125786][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 392.221509][ T9054] loop3: detected capacity change from 0 to 128 [ 392.278522][ T9054] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 392.639781][ T9064] loop3: detected capacity change from 0 to 1024 [ 392.793376][ T9064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.803881][ T9066] loop0: detected capacity change from 0 to 4096 [ 392.980839][ T9066] ntfs3: Unknown parameter 'windows_names' [ 393.842252][ T9076] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 393.859370][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1180'. [ 393.945673][ T9082] netlink: 'syz.5.1181': attribute type 10 has an invalid length. [ 393.947827][ T9082] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1181'. [ 393.953132][ T9082] device team0 entered promiscuous mode [ 393.954752][ T9082] device team_slave_0 entered promiscuous mode [ 393.956411][ T9082] device team_slave_1 entered promiscuous mode [ 393.960198][ T9082] bridge0: port 3(team0) entered blocking state [ 393.964921][ T9082] bridge0: port 3(team0) entered disabled state [ 393.968361][ T9082] bridge0: port 3(team0) entered blocking state [ 393.969922][ T9082] bridge0: port 3(team0) entered forwarding state [ 394.394278][ T9095] loop4: detected capacity change from 0 to 128 [ 394.486734][ T9095] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 394.952200][ T9111] loop4: detected capacity change from 0 to 1024 [ 395.021531][ T9113] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1191'. [ 395.087826][ T9111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 395.882157][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 395.910647][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1195'. [ 395.950254][ T9122] netlink: 'syz.1.1194': attribute type 10 has an invalid length. [ 395.952185][ T9122] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1194'. [ 395.973041][ T9122] device team0 entered promiscuous mode [ 395.974460][ T9122] device team_slave_0 entered promiscuous mode [ 395.976023][ T9122] device team_slave_1 entered promiscuous mode [ 395.978301][ T9122] bridge0: port 3(team0) entered blocking state [ 395.979894][ T9122] bridge0: port 3(team0) entered disabled state [ 395.982974][ T9122] bridge0: port 3(team0) entered blocking state [ 395.984602][ T9122] bridge0: port 3(team0) entered forwarding state [ 395.986380][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'. [ 396.067850][ T9132] loop5: detected capacity change from 0 to 128 [ 396.159908][ T9132] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 396.230156][ T9130] loop4: detected capacity change from 0 to 4096 [ 396.270674][ T9130] ntfs3: Unknown parameter 'windows_names' [ 397.044722][ T9160] loop3: detected capacity change from 0 to 1024 [ 397.274299][ T9160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.291428][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1209'. [ 397.396800][ T9176] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1213'. [ 397.513191][ T9173] netlink: 'syz.0.1212': attribute type 10 has an invalid length. [ 397.517976][ T9183] loop4: detected capacity change from 0 to 128 [ 397.524293][ T9173] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1212'. [ 397.532065][ T9173] device team0 entered promiscuous mode [ 397.719254][ T9173] bridge0: port 1(team0) entered blocking state [ 397.721269][ T9173] bridge0: port 1(team0) entered disabled state [ 397.737924][ T9183] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 398.420088][ T9204] loop1: detected capacity change from 0 to 4096 [ 398.517383][ T9203] loop5: detected capacity change from 0 to 4096 [ 398.573630][ T9203] ntfs3: Unknown parameter 'windows_names' [ 398.877081][ T9204] ntfs3: Unknown parameter 'windows_names' [ 400.081221][ T9227] loop5: detected capacity change from 0 to 128 [ 400.213435][ T9227] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 400.245132][ T9233] loop1: detected capacity change from 0 to 1024 [ 400.329795][ T9233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.491479][ T9240] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.494053][ T9240] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.496240][ T9240] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.498320][ T9240] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.529720][ T9240] device vxlan0 entered promiscuous mode [ 400.532362][ T9240] team0: Port device vxlan0 added [ 401.619997][ T9260] loop5: detected capacity change from 0 to 128 [ 401.820728][ T9260] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 401.994459][ T9265] loop3: detected capacity change from 0 to 4096 [ 402.093891][ T9265] ntfs3: Unknown parameter 'windows_names' [ 402.679626][ T9279] device wireguard0 entered promiscuous mode [ 402.968595][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1247'. [ 403.126855][ T9294] loop4: detected capacity change from 0 to 1024 [ 403.183836][ T9294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.587574][ T9319] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1259'. [ 404.630866][ T9319] device batadv1 entered promiscuous mode [ 404.655830][ T9317] loop1: detected capacity change from 0 to 4096 [ 404.668246][ T9321] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1259'. [ 404.675793][ T9321] device batadv1 entered promiscuous mode [ 404.703886][ T9317] ntfs3: Unknown parameter 'windows_names' [ 405.171512][ T9337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1263'. [ 405.175752][ T9337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1263'. [ 405.405363][ T9337] device ip6gretap0 entered promiscuous mode [ 405.605313][ T9337] device ip6gretap0 left promiscuous mode [ 405.632364][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 405.682624][ T9345] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.685386][ T9345] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.687531][ T9345] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.689613][ T9345] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.697994][ T9345] device vxlan0 entered promiscuous mode [ 405.700303][ T9345] team0: Port device vxlan0 added [ 405.709412][ T136] bridge0: port 1(team0) entered blocking state [ 405.711245][ T136] bridge0: port 1(team0) entered forwarding state [ 405.748465][ T9352] loop5: detected capacity change from 0 to 128 [ 405.794324][ T9357] bridge_slave_0: default FDB implementation only supports local addresses [ 405.851389][ T9352] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 406.136244][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1277'. [ 406.245009][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 406.268150][ T9374] bridge0: port 3(team0) entered disabled state [ 406.327590][ T9374] bridge0: port 3(team0) entered disabled state [ 406.374634][ T9374] device team_slave_0 left promiscuous mode [ 406.427912][ T9374] team0 (unregistering): Port device team_slave_0 removed [ 406.430031][ T9374] device team_slave_1 left promiscuous mode [ 406.460999][ T9374] team0 (unregistering): Port device team_slave_1 removed [ 406.684224][ T9382] loop0: detected capacity change from 0 to 4096 [ 406.732429][ T9385] netlink: 'syz.1.1280': attribute type 10 has an invalid length. [ 406.764489][ T9382] ntfs3: Unknown parameter 'windows_names' [ 406.903590][ T9391] xt_socket: unknown flags 0x8 [ 407.686333][ T9408] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.688951][ T9408] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.691073][ T9408] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.693273][ T9408] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.721862][ T9413] xt_CONNSECMARK: invalid mode: 254 [ 407.753964][ T9408] team0: Port device vxlan0 added [ 408.782253][ T9438] 8021q: VLANs not supported on sit0 [ 408.839449][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1300'. [ 408.847164][ T9444] nbd: must specify a device to reconfigure [ 408.959033][ T9442] loop1: detected capacity change from 0 to 4096 [ 408.978893][ T9452] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 408.984096][ T9442] ntfs3: Unknown parameter 'windows_names' [ 409.047488][ T9460] loop0: detected capacity change from 0 to 128 [ 409.154437][ T9460] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 409.979834][ T9469] loop5: detected capacity change from 0 to 32768 [ 410.015776][ T9469] jfs: Unrecognized mount option "discard=0x000000000000af%)['}f9" or missing value [ 410.030954][ T9473] loop4: detected capacity change from 0 to 1024 [ 410.116827][ T9473] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 411.523157][ T9510] loop5: detected capacity change from 0 to 4096 [ 411.553859][ T9510] ntfs3: Unknown parameter 'windows_names' [ 412.643880][ T9521] loop4: detected capacity change from 0 to 1024 [ 412.902095][ T9521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.003414][ T9525] loop5: detected capacity change from 0 to 32768 [ 413.093800][ T9525] jfs: Unrecognized mount option "discard=0x000000000000af%)['}f9" or missing value [ 414.010255][ T9539] device netdevsim0 entered promiscuous mode [ 414.011872][ T9539] device macvlan2 entered promiscuous mode [ 414.019616][ T9539] device netdevsim0 left promiscuous mode [ 414.758560][ T9557] loop1: detected capacity change from 0 to 1024 [ 414.784417][ T9550] loop5: detected capacity change from 0 to 4096 [ 414.788324][ T9550] ntfs3: Unknown parameter 'windows_names' [ 414.799566][ T9557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.948983][ T9566] loop1: detected capacity change from 0 to 32768 [ 416.034338][ T9566] jfs: Unrecognized mount option "discard=0x000000000000af%)['}f9" or missing value [ 416.097652][ T9577] loop3: detected capacity change from 0 to 128 [ 416.296999][ T9577] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 417.931944][ T9603] loop4: detected capacity change from 0 to 4096 [ 417.944041][ T9603] ntfs3: Unknown parameter 'windows_names' [ 418.751773][ T9611] loop3: detected capacity change from 0 to 1024 [ 418.787705][ T9611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.423595][ T9621] loop1: detected capacity change from 0 to 32768 [ 419.555112][ T9621] jfs: Unrecognized mount option "discard=0x000000000000af%)['}f9" or missing value [ 419.625865][ T9626] netlink: 'syz.4.1355': attribute type 3 has an invalid length. [ 420.257334][ T9635] loop4: detected capacity change from 0 to 128 [ 420.353529][ T9635] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 420.543024][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 421.456317][ T9658] loop3: detected capacity change from 0 to 1024 [ 421.634065][ T9658] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 422.794379][ T9678] loop3: detected capacity change from 0 to 128 [ 423.755220][ T9688] loop1: detected capacity change from 0 to 128 [ 423.841314][ T9685] loop3: detected capacity change from 0 to 32768 [ 423.870386][ T9688] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 423.883646][ T9685] jfs: Unrecognized mount option "discard=0x000000000000af%)['}f9" or missing value [ 425.165069][ T9709] loop3: detected capacity change from 0 to 1024 [ 425.287437][ T9711] loop0: detected capacity change from 0 to 128 [ 426.004737][ T9709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 427.013480][ T9735] device netdevsim0 entered promiscuous mode [ 427.022495][ T9735] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1391'. [ 427.040816][ T9735] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 427.800632][ T9749] loop4: detected capacity change from 0 to 128 [ 428.520335][ T9757] loop4: detected capacity change from 0 to 1024 [ 428.651670][ T9757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.161867][ T9779] netlink: 'syz.4.1406': attribute type 9 has an invalid length. [ 429.715445][ T9787] loop4: detected capacity change from 0 to 128 [ 431.047220][ T9793] netlink: 'syz.3.1413': attribute type 10 has an invalid length. [ 431.120837][ T9793] team0: Port device syz_tun added [ 431.276063][ T9802] loop1: detected capacity change from 0 to 128 [ 431.310348][ T9793] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 431.376732][ T9807] loop0: detected capacity change from 0 to 1024 [ 431.427286][ T9802] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 431.523915][ T9807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.522891][ T27] INFO: task kworker/0:21:7077 blocked for more than 143 seconds. [ 432.539593][ T27] Not tainted 5.15.179-syzkaller #0 [ 432.541266][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.560236][ T27] task:kworker/0:21 state:D stack: 0 pid: 7077 ppid: 2 flags:0x00000008 [ 432.595800][ T27] Workqueue: usb_hub_wq hub_event [ 432.597177][ T27] Call trace: [ 432.597989][ T27] __switch_to+0x308/0x588 [ 432.605462][ T27] __schedule+0xf10/0x1e48 [ 432.711269][ T9846] loop4: detected capacity change from 0 to 128 [ 433.045548][ T27] schedule+0x11c/0x1c8 [ 433.047488][ T27] usb_kill_urb+0x1c0/0x358 [ 433.049537][ T27] usb_start_wait_urb+0x16c/0x414 [ 433.051460][ T27] usb_control_msg+0x228/0x3f8 [ 433.101447][ T27] hub_port_init+0x96c/0x21cc [ 433.158053][ T27] hub_event+0x203c/0x46b8 [ 433.159990][ T27] process_one_work+0x790/0x11b8 [ 433.217074][ T27] worker_thread+0x910/0x1034 [ 433.219423][ T27] kthread+0x37c/0x45c [ 433.221247][ T27] ret_from_fork+0x10/0x20 [ 433.274589][ T27] [ 433.274589][ T27] Showing all locks held in the system: [ 433.279752][ T27] 1 lock held by khungtaskd/27: [ 433.281767][ T27] #0: ffff800014d41b60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 433.290049][ T27] 2 locks held by kworker/u4:1/136: [ 433.292288][ T27] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 433.299827][ T27] #1: ffff80001d2e7c00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 433.362619][ T27] 2 locks held by kworker/u4:4/1598: [ 433.365443][ T27] 2 locks held by kworker/u4:6/1858: [ 433.367578][ T27] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 433.401352][ T27] #1: ffff0001b4173c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x438/0x66c [ 433.442753][ T27] 1 lock held by udevd/3643: [ 433.443871][ T27] #0: ffff0000c8d06d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x12c/0x89c [ 433.446384][ T27] 2 locks held by getty/3784: [ 433.447658][ T27] #0: ffff0000d24c7098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 433.449948][ T27] #1: ffff80001d6ce2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1204 [ 433.452360][ T27] 1 lock held by udevd/4046: [ 433.483671][ T27] #0: ffff0000c8d06d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x12c/0x89c [ 433.486270][ T27] 2 locks held by kworker/0:13/4499: [ 433.487552][ T27] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 433.490039][ T27] #1: ffff8000208b7c00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 433.502741][ T27] 5 locks held by kworker/0:21/7077: [ 433.504041][ T27] #0: ffff0000c2882938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 433.506705][ T27] #1: ffff800021577c00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 433.509605][ T27] #2: ffff0000cf2f5220 (&dev->mutex){....}-{3:3}, at: hub_event+0x1b8/0x46b8 [ 433.511755][ T27] #3: ffff0000cf3515d8 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x1ad0/0x46b8 [ 433.542729][ T27] #4: ffff0000cf045268 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x1af4/0x46b8 [ 433.545300][ T27] 1 lock held by syz.1.1414/9824: [ 433.546477][ T27] 1 lock held by syz.3.1426/9839: [ 433.547679][ T27] 1 lock held by syz.5.1425/9838: [ 433.548844][ T27] 1 lock held by syz.0.1427/9837: [ 433.550114][ T27] #0: ffff0000d9e51dd8 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x15c/0x2b4 [ 433.552520][ T27] 2 locks held by syz.0.1427/9840: [ 433.592716][ T27] 2 locks held by syz.4.1428/9846: [ 433.593976][ T27] #0: ffff0000c8d06d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xe0/0x6b0 [ 433.596485][ T27] #1: ffff0000cbf8f468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x58/0x210 [ 433.598815][ T27] [ 433.599412][ T27] ============================================= [ 433.599412][ T27] [ 433.601497][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 433.603072][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.179-syzkaller #0 [ 433.605187][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 433.607564][ T27] Call trace: [ 433.608334][ T27] dump_backtrace+0x0/0x530 [ 433.609487][ T27] show_stack+0x2c/0x3c [ 433.610586][ T27] dump_stack_lvl+0x108/0x170 [ 433.611667][ T27] dump_stack+0x1c/0x58 [ 433.612741][ T27] panic+0x304/0x8bc [ 433.613653][ T27] hung_task_panic+0x0/0x2c [ 433.614791][ T27] kthread+0x37c/0x45c [ 433.615811][ T27] ret_from_fork+0x10/0x20 [ 433.616968][ T27] SMP: stopping secondary CPUs [ 433.618136][ T27] Kernel Offset: disabled [ 433.619195][ T27] CPU features: 0x8,000081c1,21302e40 [ 433.620546][ T27] Memory Limit: none [ 434.161732][ T27] Rebooting in 86400 seconds..