last executing test programs: 17.457301718s ago: executing program 4 (id=1250): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x14800, &(0x7f0000000140), 0x1, 0x9806, &(0x7f00000130c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6c733d63703836342c6e6f626172726965722c63726561746f723dbd3c66f52c666f7263652c666f7263652c7569643d", @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x2, 0x6ab, &(0x7f00000009c0)="$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") ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c9002000c00000003000100"/123]) 14.09960842s ago: executing program 4 (id=1266): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe2$9p(0x0, 0x4800) 13.51311042s ago: executing program 2 (id=1269): syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x8002, &(0x7f0000000540)=ANY=[@ANYBLOB="6769643d666f726765742c756e686964652c6769643d69676e6f72652c6e6f6164696e6963622c6769643d666f726765742c00ab19a7679335475cada896e6b63a535aaf46971650418dc5cf38c2041022701912399894e6dd866d8423bc0392"], 0x1, 0x59c, &(0x7f0000000680)="$eJzs3U9sHFcdB/Df86ydtUnSbVLSBgqyBAerLZETB5I0lcA0MSBVUJGaAweEiZ3Eif9EdlrVEYIekeDCDakHTr2AxIkLSFwqceNQcYJbhYALHCwuhVPQjGd2Z7duvSG2F7ufTxS9mdnfTt7MIdJ33s57AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEfPnq9OTZNOheAAAAAHvp69e+OTkl/wMAAMCh9orxfwAAAAAAAAA46FJk8ZVI8eYvNtPRYn9L86XFlVdfn70ys/3XRlOkGIqsqM//Ns+emzr/+S9cuFi1H/793XY6vnHtlenxF1eX764trK8vzI/PrixeX51f6PsMj/r9Xs8UN2B8+c6r8zdurI+fOzPV9fHrrb8f+dip1uVLwy+PVrWzV2ZmrtVqGsP/87/+Pn7hAQAA8NE2Eln8I1L8dfpX6VhEDMWjZ+Ednh3stdFo5fm7uIjZKzPFhSwtzq3cyz9MQ2VVqzsTj1QZeR+y+CNpRZzI+zoi0QMAANC/4cjiO5Hip7/fTMcjIqty8LPFxIA7n6C1D53cRiMiTkbERByAzA4AAAADdiSyuBYpfrfUisfKXF3k/y9FXB505wAAAIBd0YgsNiLFatpMreL3ABHxzOyVmfGXvjX+tZUbq7XaNFSOqB/09wP2k98mAAAA8H+gGVkcL0b8N9Pjg+4MAAAAsCdGI4ufRYo3b71WzCsXxbz0j12+dPHTWX2GuSd3OE9eeyYiPtnnO/nD5VyDaSj/s/vXBQAAAHQ0UxZ/ixTv/blZ7E9U7wC8++DBg0F3DgAAANgdKYv/RIof3d9MqWdd+qy2vn/bQX/3f2/7P9p8cfXuxtrizVv3tv18rDn9vfV7a3PXt/94a+3CrH5kp3UMe7XKNRwBAACgZixlMREpfru82c6N5RoAx7b2Omn0re93ngVM9LSV+vODfrb7XsX+IebRy/uUUhYjkeKzbz+19Z5BjMnGAAAAfGTl+f90pPjD7XdSlfTL/N/Y2qvl/xc6+bmZutu2ItsfL7J9ey6BC2PPfdDxvcj/eZ/y/P/j/CpuP1VcQZX/s57avO6dSPHC6tNl3dBIXteoLmfrjDcWlxYm89qrkeLXS1VtFLVHytqTndqzee3b+XnnumubZe0Tndpzee2DSHFrbfvaj3dqp/La9Ujxy5+PV7Vjee3RsvZUp/bM9dWl+X5vLwAAAIdbnv+XI8W/T381VZn3A/N/bfz/jZ627X2Z/8O3dyv/t2rH3ihz/U/K/N/YIf+/HClOP/50dd1F9q4eK2ytidDJ//+KFGvf7q4dKWtPdGrP9ntZAAAAsB/y/P/DSDE7+Zf2UHqZbcvd7fP/JxrdbduA8n997cK8T+sb9+/MLS0trNmwYcNGe+Mh/nMEAIBDJs//r0WK37w1lKpx7DL/lz8p7+T/937Qyf/P97RtA8r/J2rHni/nLBxuRDTvLd8dPhXRXN+4/7nF5bmbCzcXVi6en7x04eK58+eHR6qx/c5W37cOAAAADow8/09Fijvv/rH9Hns/4/9jPW3bgPL/yfo1RX38v+9bAQAAAIdWnv+nI8Wxq39qzzfXnf87CT3P/9X8fxOf6W7bTwkGlP+fqB1rlf0afch7AQAAAAAAAAAAAAAAAAAAAIMylrL4Z6TYePa5VE7439f8f/M9bduA3v8/VTs2H/uz/l/fNxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiKHI4nak+NSTm+mL+YHvRhyttwAAAMCB998AAAD//xzvQWw=") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x722) ftruncate(r0, 0x800) 12.985953435s ago: executing program 5 (id=1274): r0 = socket$isdn(0x22, 0x2, 0x2) r1 = socket$isdn(0x22, 0x2, 0x2) r2 = dup3(r1, r0, 0x0) bind$isdn(r2, &(0x7f0000000180), 0x6) 12.713528667s ago: executing program 2 (id=1275): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r2, @ANYBLOB="04"], 0xc4}}, 0x0) 12.57457283s ago: executing program 5 (id=1276): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f0000000a80)={[{@noinit_itable}, {@grpquota}, {@resgid}, {@oldalloc}, {@lazytime}, {@jqfmt_vfsv1}]}, 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./bus\x00', r1, 0x0) 12.534548826s ago: executing program 0 (id=1277): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r2, 0x6, 0xb, &(0x7f0000000000), 0x20a15508) 12.358931261s ago: executing program 2 (id=1278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, 0x0}]) 12.103190871s ago: executing program 0 (id=1279): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000080)=0x4) 12.071095514s ago: executing program 3 (id=1280): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7d, 0x20f}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x0) 11.755943236s ago: executing program 5 (id=1281): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000300"/15, @ANYRES64=0xea60], 0x48}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) 11.746321048s ago: executing program 3 (id=1282): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000580)="1ad074302b7f29", 0x7}], 0x1, 0x0, 0xd0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020001f300000600002fb96dbcf706e10500000086ddffff1144ee162bd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 11.340359083s ago: executing program 3 (id=1284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280)=0x38, 0x0) 11.231913377s ago: executing program 5 (id=1286): r0 = gettid() r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r0, 0x7) 10.974030391s ago: executing program 3 (id=1287): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000600)={0x14000000}) 10.761751338s ago: executing program 5 (id=1288): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0xb, @multicast1}, @IFA_RT_PRIORITY={0x8}]}, 0x30}}, 0x0) 10.751163635s ago: executing program 0 (id=1289): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba247886a9291745083fccdddc90d7af35c528d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e3364871ee77ba64ae799a29d42c4365f8b9928eb15a7523f43020d9803060c8221d4d8f691ac14187fa7fe929eada4e16ac2eaef502c9912c59bc1f461aa032057030e4f8fa907f80b40638c022cf66b16ca7a05c35cc075ba7c93d6556c3e736a16f24f4561115962be30c4d6a248df33862d98e3b802f20ecd8348dce1149f0d11a55345a8c6410759ab7b3da2a0813df6b07385acd40a9600aa4da6eb2cc38c522bb135da7ee2c0522a4c83c97380d83c919a34fbe774744da402cff16093328e1309bbfbe881a1e9e1221a51dbef9372f0078843e95887c91fe62efc46d25fc84109f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 10.368133899s ago: executing program 3 (id=1290): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 10.288343848s ago: executing program 0 (id=1291): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f00000000c0)={[{@lazytime}, {@uqnoenforce}, {@quota}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$eJzs3Am4pnMBuP/3DGOXMVRSaiqiRdYsUWYGMxSSJdqRJWUpqdCmRUoqItqzb9nKEsrWSrK3UEKoZIm02Ib5X2fmDGPcpF+//+VX931f1znv+z7v8zzn+34/z3KO5mrzSRtPHAzmGkxv3GDWzr1m8pQxV21w+5FbLXjMcqfcvf8jV1x8/MjjhJHHiYPBYNTI20PTl40dnHraqMHs05Y/3LxzzzM0/2Cw/MjLkf0MVp7+MP/lM9abOkuzDnTo4W/7TP+a1gLDP2L4yWH773X4YDAYM9P2Q4PB0J6P+qDSNp8wedLDVg+5DVuNHnk+89cc07/mv2gwmP+MAR8fM6879CR8pOGfueeLzhm9wZPws//r2nzC5HVn8R8+F2cbWbby8Dk+6zlobNbj/NYltlh1ZAqnHW+DwfAl7hHnyn9Fm0+YtN7gsa/zgyNXu2CfqdOvm3MOpt8o5h4MBvOMXF/ne7Jd6j9rwsQVpt2zZ7weYZ9xLO9Jx8XxbznpweGb9GAwWGgwGLvOjHtBVVVV/Xc0YeIKa8L9f67Hu/+ffPKiZ3T/r6qq+u9t3QkTVxi+189y/5/v8e7/uyx64cem/7f/8StP3+rBJ/dDVFVV1b/VpHXx/j/m8e7/K6956Xrd/6uqqv5722j9aff/+Wa5/y/8ePf/N5602mIj6834veGBmXY5NNP/nnD/TMtnm2n5fTMtHz3TfmZef46Zlt8z0/I5h9+D9ccNBmNn/HvBKQ8vHjtu+L2R5ffOtHz8w/9OZ/G1Zlo+Yablk2ZaPnFkrMPLJ8+0fPJM66/zOFNdVVX1/0wbrTBpzcFM/85+ZPEiM96n+//5Z1679JM13qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqvrv7MHbzzpnMBgMDQaDUYPBlMHI85kfB1OnTp06/Prk8y677Ekb6P8bDZ17zeQpY67a4PYjt1rwmOVOuXv/h2fpv7b//k9Q/0nD/nMdN24w2GnTJ3so9STU+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iHrz9rHNGjoFRg8GUwcjzPWc8nrnfG940suqqm51y50EPb7n4+O1Hnp17zeQp2z8JY38SGhr+rGOu2uD2I7da8JjlTrl7//+Bs+e//xPUf9I0/+2HBoOR83vM8Lm8wYSNNllqMBgcdOcpm600eOi9VYbfW23sbIPZpm261LTvay/OO95znemP44e/LfzQPk6etv91px4629Asg5ipV5x7w5Fv3/zuFWd9XPKxP8eoGU8Ov+70u6ZOnTr1EQtHmusxNp6x/xmfZdbzfGTsSw2PfZldd3zXMu/ZfY+lt99xy+222W6bnZZbYZUVV1p+uZVWfdky226/wzbLTv/+GHM2btr3NZ/InM0365zdPmHmOZv1sz3WnI17/DmbtscpewxtMmPOZv8352zNx5+zcduP/KDFx48ebDFtaoYGg8XXGj3YbfjFcnMOBouvPbLuIsPrrj521GCw38MfdPjZnA8dg0N7Dq+z+aSNJz48skd/wkddpx+x4uLjRx4njDxOnD7EcYOHD8Wxg1NPGzU8F4+Y5nnnnmdo/sFg+ZGXI/sZrDry7iEz1ps6S7MOdOjhb/tM/5rWAsM7GX7yjmXPunr4XJxl+/8/+j+6/j/Ka5WhhyZqaORrZJ3pXhMmr/vwz5o2DcNzN9vIspWHTWads/+bPWq842YfjHmc8U5ad+IKw4tnmf8Zm+DxdccSF3xg+rE1fuXpWz34f4xC453vcca77gQc73yPN97jPnjJadN39X9tvLNc69ab9n38E7nWDR7/Wjcb7WCbixeb9Vr36sce4iPO4xlzNOcsKz3WtW63g5ffc3j/4x//Wrfe8NhHP+JaN2owWHzNGde64QvfpNGD/YZfLD/8YvLowTHDL1aY9mLuwXnDL176tp132Hp4wToz5mTZ4f2OHzs0zf2ClW9ZcuoBU6euNTKW8WMfOdaR42PczPfzCWOnT+aMbWfsd3jVGfu9+enT35s0st8J/8Z+Z2xL471zgenvTR7Z78RZ9jv6cfY7Y9tHnQ9LDT104XqM682kWa43I3/jzPhxj/iaY/rX/BcNBvOfQb6zrPsvr5l0/s71OOOdMHGFNYfHN8v5+9DhSOfvJZOvGr5XzD8YDBYaDMauM2Ps/2ZDjzXe2R9/vBNhvLM/3nivOHbH9f8vjHcw03gfcZxtvtH0Y2WdkeNs8r9x/M7Ydtbr2Ohp706/7K/zRK5j4x51HfvobKNmmeyZeqzf2baG9ac/X+Th33OvOfHoGXM/epb9/qvf2Wb6LENwHRszy9/zo9a5fjBEc77ncatfOnTg48/56MEj/7aYMecztn28OZ/8ROb8WY8/50/09+Slnj/9/dGzjH/mOd9w32d+ZsaczzHLfv/VnE9+/HvHo+d8/GA0zfmy902ft8e7nj7WnM/YdsacD3/E1cbOPlh7+J41MueTnsicL/J/5zifB9af/nybhxadfeQpr5sx57PO8b+a80n/7pyPe+g4X3zae88bNZhjjsFuW+666y7LTf8+4+Xy07/zteiea6bP8+PdSx/LaMa2j3derPVEjMY8IaOhf2W06OyPZfTwqXXEzrs87f/0WrTWv2s04GvRVUdPn7fH+73oseZ8xrZ0H1x4pu1n/Tt0o/Wn/d493yz3wRmb4H3w7DPX23vGLkc2e2CWYc64r94/0/LZZlp+30zLR8+0n5nXn2Om5ffMtHz4I8wx0/ozWMcN/807snzKw6uPHf7ladzI8ntnWj7+4W0XX2um5RNmWj5ppuUTHz40Fp880/LJM62/zuDfbMZ/k95+1ot8PdH677/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFPXj7WeeMHAOjBoMpg+nPh0YeB3sObXjbGsOPg8Fg9MonTN3wyR7vk9zQuddMnjLmqg1uP3KrBY9Z7pS79/8fOHv++z9B/SdN899+aDAYOb/HbD8YDDaYsNEmSw0Ggw2nnrDyqMFD7y0y/N7qY0cNBvsNPWIHcz60ztCew+tsPmnjiYPBXCNrjHvUD33UefSIFRcfP/I4YeRx4vTr07jBw8fr2MGpp40azD5t+cPNO/c8Q/MPBsuPvBzZz2Dl6Q/zXz5jvamzNOtAhx7+ts/0r2ktMPwjhp/stt3kZw/P1Szb/z/TjGv19qP+5aqd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93/55/R8v/Wom6y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u3/ff+7/X8ZRT06d/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3IO3n3XOyDEwajCYMpj+fGjPkcfB0EmnvnDkEBm9+5VHHfpkj/dJbujcayZPGXPVBrcfudWCxyx3yt37/w+cPf/9n6D+k6b5bz80GIyc32O2HwwGG0zYaJOlBoPBoUddufuowUPvLTL83upjRw0G+w09YgdzPrTO0J7D62w+aeOJg8FcI2uMe9QPfdR59IgVFx8/8jhh5HHi9OvTuMHDx+vYwamnjRrMPm35w8079zxD8w8Gy4+8HNnPYOXpD/NfPmO9qbM060CHHv62z/SvaS0w/COGn+w13zUnDc/VLNv/P9OMa/X2o/7lqp3/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+7B2886Z+QYGDUYTBlMfz5q5HFoz5tu/PAmw4/DrxdcZ+9rnuzxPskNnXvN5Cljrtrg9iO3WvCY5U65e///gbPnv/8T1H/SsP9cx40bDHba9MkeSj0Jdf67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uAdvP+uckaejHl46as+OC2zo3GsmTxlz1Qa3H7nVgscsd8rd+z/ZA/pPewz/j+aPWfw/lj9m8f94/pjF/xP5Yxb/vfLHLP6fzB+z+O+dP2bx/1T+mMX/0/ljFv998scs/p/JH7P475s/ZvH/bP6Yxf9z+WMW/8/nj1n898sfs/jvnz9m8f9C/pjF/4D8MYv/gfljFv8v5o9Z/A/KH7P4H5w/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8v5k/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi/+38scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/2/ljFv/v5I9Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/7v5Yxb/M/LHLP5n5o9Z/M/KH7P4fy9/zOL//fwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/p/ljFv8L8scs/hfmj1n8f5Y/ZvG/KH/M4v/z/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/xf5Yxb/X+aPWfx/lT9m8f91/pjF/6r8MYv/1fljFv/f5I9Z/H+bP2bxvyZ/zOL/u/wxi/+1+WMW/+vyxyz+1+ePWfx/nz9m8b8hf8zif2P+mMX/pvwxi/8f8scs/n/MH7P4/yl/zOJ/c/6Yxf/P+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bx/0v+mMX/jvwxi/+d+WMW/7/mj1n878ofs/j/LX/M4v/3/DGL/z/yxyz+/8wfs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/yn5Yxb/B/LHLP4P5o9Z/Kfmj0n8Zxvkj1n8h/LHLP6j8scs/rPlj1n8Z88fs/iPzh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4PyV/zOK/QP6YxX9M/pjFf8H8MYv/2Pwxi/9C+WMW/4Xzxyz+T80fs/g/LX/M4v/0/DGL/yL5Yxb/Z+SPWfwXzR+z+D8zf8zi/6z8MYv/YvljFv9n549Z/J+TP2bxH5c/ZvF/bv6Yxf95+T+q2UceDf7Pzx+znP+L549Z/JfIH7P4vyB/zOK/ZP6YxX+p/DGL/wvzxyz+L8ofs/i/OH/M4v+S/DGL/9L5Yxb/l+aPWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/l+WPWfxXyh+z+K+cP2bxXyV/zOK/av6Yxf/l+WMW/9Xyxyz+q+ePWfxfkT9m8X9l/pjFf438MYv/+Pwxi/+E/DGL/8T8MYv/mvljFv+18scs/mvnj1n8J+WPWfwnq/xne8JrWvzXUfk/8Sz+6+aPWfxflT9m8X91/pjFf738MYv/+vljFv8N8scs/q/JH7P4b5g/ZvF/bf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/F+XP2bx3yx/zOK/ef6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvHfIn/M4r9l/pjFf6v8MYv/2/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/2/DGL//b5Yxb/d+SPWfzfmT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3flj1n8350/ZvHfJX/M4v+e/DGL/675Yxb/9+aPWfzflz9m8X9//pjFf7f8MYv/7vljFv898scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P475k/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvHfK3/M4v/J/DGL/975Yxb/T+WPWfw/nT9m8d8nf8zi/5n8MYv/vvljFv/P5o9Z/D+XP2bx/3z+mMV/v/wxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/6D8MYv/wfljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8rf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/nT9m8f9O/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5s/ZvE/I3/M4n9m/pjF/6z8MYv/9/LHLP7fzx+z+J+dP2bxPyf/aR042yNfW/zPzR+z+J+XP2bxPz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/hfkj1n8L8wfs/j/LH/M4n9R/pjF/+f5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/L/LHLP6/zB+z+P8qf8zi/+v8MYv/VfljFv+r88cs/r/JH7P4/zZ/zOJ/Tf6Yxf93+WMW/2vzxyz+1+WPWfyvzx+z+P8+f8zif0P+mMX/xvwxi/9N+WMW/z/kj1n8/5g/ZvH/U/6Yxf/m/DGL/5/zxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOL/l/wxi/8d+WMW/zvzxyz+f80fs/jflT9m8f9b/pjF/+/5Yxb/f+SPWfz/mT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+U/LHLP4P5I9Z/B/MH7P4T80fk/jPPsgfs/gP5Y9Z/Eflj1n8Z8sfs/jPnj9m8R+dP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvF/Sv6YxX+B/DGL/5j8MYv/gvljFv+x+WMW/4Xyxyz+C+ePWfyfmj9m8X9a/pjF/+n5Yxb/RfLHLP7PyB+z+C+aP2bxf2b+mMX/WfljFv/F8scs/s/OH7P4Pyd/zOI/Ln/M4v/c/DGL//Pyxyz+z88fs/gvnj9m8V8if8zi/4L8MYv/kvljFv+l8scs/i/MH7P4vyh/zOL/4vwxi/9L8scs/kvnj1n8X5o/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8X5Y/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+X549Z/FfLH7P4r54/ZvF/Rf6Yxf+V+WMW/zXyxyz+4/PHLP4T8scs/hPzxyz+a+aPWfzXyh+z+K+dP2bxn5Q/ZvGfnD9m8V8nf8ziv27+mMX/VfljFv9X549Z/NcT+q/xBNax+K8v9H8iWfw3yB+z+L8mf8ziv2H+mMX/tYPL8ocs/ht1/mMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/6EH+mMV/KH/M4j8qf8ziP1v+mMV/9vwxi//o/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/U/LHLP4L5I9Z/Mfkj1n8F8wfs/iPzR+z+C+UP2bxXzh/zOL/1Pwxi//T8scs/k/PH7P4L5I/ZvF/Rv6YxX/R/DGL/zPzxyz+z8ofs/gvlj9m8X92/pjF/zn5Yxb/cfljFv/n5o9Z/J+XP2bxf37+mMV/8fwxi/8S+WMW/xfkj1n8l8wfs/gvlT9m8X9h/pjF/0X5Yxb/F+ePWfxfkj9m8V86f8zi/9L8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8zi/7L8MYv/SvljFv+V88cs/qvkj1n8V80fs/i/PH/M4r9a/pjFf/X8MYv/K/LHLP6vzB+z+K+RP2bxH58/ZvGfkD9m8Z+YP2bxXzN/zOK/Vv6YxX/t/DGL/6T8MYv/5Pwxi/86+WMW/3Xzxyz+r8ofs/i/On/M4r9e/pjFf/38MYv/BvljFv/X5I9Z/DfMH7P4vzZ/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6vyx+z+G+WP2bx3zx/zOL/+vwxi/8b8scs/m/MH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4b5E/ZvHfMn/M4r9V/pjF/235Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvF/e/6YxX/7/DGL/zvyxyz+78wfs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/+78scs/u/OH7P475I/ZvF/T/6YxX/X/DGL/3vzxyz+78sfs/i/P3/M4r9b/pjFf/f8MYv/HvljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/PfMH7P4fzR/zOL/sfwxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8f9M/pjFf9/8MYv/Z/PHLP6fyx+z+H8+f8ziv1/+mMV///wxi/8X8scs/gfkj1n8D8wfs/h/MX/M4n9Q/pjF/+D8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zi/838MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfy/lT9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+384fs/h/J3/M4n9K/pjF/9T8MYv/afljFv/T88cs/t/NH7P4n5E/ZvE/M3/M4n9W/pjF/3v5Yxb/7+ePWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+P80fs/hfkD9m8b8wf8zi/7P8MYv/RfljFv+f549Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/r/IH7P4/zJ/zOL/q/wxi/+v88cs/lflj1n8r84fs/j/Jn/M4v/b/DGL/zX5Yxb/3+WPWfyvzR+z+F+XP2bxvz5/zOL/+/wxi/8N+WMW/xvzxyz+N+WPWfz/kD9m8f9j/pjF/0/5Yxb/m/PHLP5/zh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/1/yxyz+d+SPWfzvzB+z+P81f8zif1f+mMX/b/ljFv+/549Z/P+RP2bx/2f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+E/JH7P4P5A/ZvF/MH/M4j81f0ziP8cgf8ziP5Q/ZvEflT9m8Z8tf8ziP3v+mMV/dP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjF/yn5Yxb/BfLHLP5j8scs/gvmj1n8x+aPWfwXyh+z+C+cP2bxf2r+mMX/afljFv+n549Z/BfJH7P4PyN/zOK/aP6Yxf+Z+WMW/2flj1n8F8sfs/g/O3/M4v+c/DGL/7j8MYv/c/PHLP7Pyx+z+D8/f8ziv3j+mMV/ifwxi/8L8scs/kvmj1n8l8ofs/i/MH/M4v+i/DGL/4vzxyz+L8kfs/gvnT9m8X9p/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8X9Z/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8X54/ZvFfLX/M4r96/pjF/xX5Yxb/V+aPWfzXyB+z+I/PH7P4T8gfs/hPzB+z+K+ZP2bxXyt/zOK/dv6YxX9S/pjFf3L+mMV/nfwxi/+6+WMW/1flj1n8X50/ZvFfL3/M4r9+/pjFf4P8MYv/a/LHLP4b5o9Z/F+bP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/1+WPWfw3yx+z+G+eP2bxf33+mMX/DfljFv835o9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/LfIH7P4b5k/ZvHfKn/M4v+2/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4vz1/zOK/ff6Yxf8d+WMW/3fmj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMX/XfljFv93549Z/HfJH7P4vyd/zOK/a/6Yxf+9+WMW//flj1n8358/ZvHfLX/M4r97/pjFf4/8MYv/B/LHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP575o9Z/D+aP2bx/1j+mMX/4/ljFv9P5I9Z/PfKH7P4fzJ/zOK/d/6Yxf9T+WMW/0/nj1n898kfs/h/Jn/M4r9v/pjF/7P5Yxb/z+WPWfw/nz9m8d8vf8ziv3/+mMX/C/ljFv8D8scs/gfmj1n8v5g/ZvE/KH/M4n9w/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8f9m/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+38ofs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/2/nj1n8v5M/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv/v5o9Z/M/IH7P4n5k/ZvE/K3/M4v+9/DGL//fzxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/5/mj1n8L8gfs/hfmD9m8f9Z/pjF/6L8MYv/z/PHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv9f5I9Z/H+ZP2bx/1X+mMX/1/ljFv+r8scs/lfnj1n8f5M/ZvH/bf6Yxf+a/DGL/+/yxyz+1+aPWfyvyx+z+F+fP2bx/33+mMX/hvwxi/+N+WMW/5vyxyz+f8gfs/j/MX/M4v+n/DGL/835Yxb/P+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf8v+WMW/zvyxyz+d1r95378ty3+f7X6/4ss/nflj1n8/5Y/ZvH/e/6Yxf8f+WMW/3/mj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/+U/DGL/wP5Yxb/B/PHLP5T88ck/nMO8scs/kP5Yxb/UfljFv/Z8scs/rPnj1n8R+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/J+SP2bxXyB/zOI/Jn/M4r9g/pjFf2z+mMV/ofwxi//C+WMW/6fmj1n8n5Y/ZvF/ev6YxX+R/DGL/zPyxyz+i+aPWfyfmT9m8X9W/pjFf7H8MYv/s/PHLP7PyR+z+I/LH7P4Pzd/zOL/vPwxi//z88cs/ovnj1n8l8gfs/i/IH/M4r9k/pjFf6n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/0vljFv+X5o9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5Y9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+X5Yxb/1fLHLP6r549Z/F+RP2bxf2X+mMV/jfwxi//4/DGL/4T8MYv/xPwxi/+a+WMW/7Xyxyz+a+ePWfwn5Y9Z/Cfnj1n818kfs/ivmz9m8X9V/pjF/9X5Yxb/9fLHLP7r549Z/DfIH7P4vyZ/zOK/Yf6Yxf+1+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bxf13+mMV/s/wxi//m+WMW/9fnj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvF/a/6YxX+L/DGL/5b5Yxb/rfLHLP5vyx+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/9vzxyz+2+ePWfzfkT9m8X9n/pjFf4f8MYv/jvljFv+d8scs/jvnj1n835U/ZvF/d/6YxX+X/DGL/3vyxyz+u+aPWfzfmz9m8X9f/pjF//35Yxb/3fLHLP67549Z/PfIH7P4fyB/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOK/Z/6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/Z/LHLP775o9Z/D+bP2bx/1z+mMX/8/ljFv/98scs/vvnj1n8v5A/ZvE/IH/M4n9g/pjF/4v5Yxb/g/LHLP4H549Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv9v5o9Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zi/638MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8f92/pjF/zv5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvH/bv6Yxf+M/DGL/5n5Yxb/s/LHLP7fyx+z+H8/f8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfx/kD9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjF/4L8MYv/hfljFv+f5Y9Z/C/KH7P4/zx/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvH/Rf6Yxf+X+WMW/1/lj1n8f50/ZvG/Kn/M4n91/pjF/zf5Yxb/3+aPWfyvyR+z+P8uf8zif23+mMX/uvwxi//1+WMW/9/nj1n8b8gfs/jfmD9m8b8pf8zi/4f8MYv/H/PHLP5/yh+z+N+cP2bx/3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfz/kj9m8b8jf8zif2f+mMX/r/ljFv+78scs/n/LH7P4/z1/zOL/j/wxi/8/88cs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMV/Sv6Yxf+B/DGL/4P5Yxb/qfljEv+5BvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP5PyR+z+C+QP2bxH5M/ZvFfMH/M4j82f8ziv1D+mMV/4fwxi/9T88cs/k/LH7P4Pz1/zOK/SP6Yxf8Z+WMW/0Xzxyz+z8wfs/g/K3/M4r9Y/pjF/9n5Yxb/5+SPWfzH5Y9Z/J+bP2bxf17+mMX/+fljFv/F88cs/kvkj1n8X5A/ZvFfMn/M4r9U/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjFf+n8MYv/S/PHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/y/LHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9a+WMW/7Xzxyz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/3IP8MYv/UP6YxX9U/pjFf7b8MYv/7PljFv/R+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/p+SPWfwXyB+z+I/JH7P4L5g/ZvEfmz9m8V8of8ziv3D+mMX/qfljFv+n5Y9Z/J+eP2bxXyR/zOL/jPwxi/+i+WMW/2fmj1n8n5U/ZvFfLH/M4v/s/DGL/3Pyxyz+4/LHLP7PzR+z+D8vf8zi//z8MYv/4vljFv8l8scs/i/IH7P4L5k/ZvFfKn/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4r90/pjF/6X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/2X5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvF/ef6YxX+1/DGL/+r5Yxb/V+SPWfxfmT9m8V8jf8ziPz5/zOI/IX/M4j8xf8ziv2b+mMV/rfwxi//a+WMW/0n5Yxb/yfljFv918scs/uvmj1n8X5U/ZvF/df6YxX+9/DGL//r5Yxb/DfLHLP6vyR+z+G+YP2bxf23+mMV/o/wxi//G+WMW/03yxyz+m+aPWfxflz9m8d8sf8ziv3n+mMX/9fljFv835I9Z/N+YP2bxf1P+mMX/zfljFv+35I9Z/N+aP2bx3yJ/zOK/Zf6YxX+r/DGL/9vyxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/9vwxi//2+WMW/3fkj1n835k/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv935Y9Z/N+dP2bx3yV/zOL/nvwxi/+u+WMW//fmj1n835c/ZvF/f/6YxX+3/DGL/+75Yxb/PfLHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+O+ZP2bx/2j+mMX/Y/ljFv+P549Z/D+RP2bx3yt/zOL/yfwxi//e+WMW/0/lj1n8P50/ZvHfJ3/M4v+Z/DGL/775Yxb/z+aPWfw/lz9m8f98/pjFf7/8MYv//vljFv8v5I9Z/A/IH7P4H5g/ZvH/Yv6Yxf+g/DGL/8H5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/5v5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/h/K3/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8v50/ZvH/Tv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/L+bP2bxPyN/zOJ/Zv6Yxf+s/DGL//fyxyz+388fs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8f5o/ZvG/IH/M4n9h/pjF/2f5Yxb/i/LHLP4/zx+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/H+RP2bx/2X+mMX/V/ljFv9f549Z/K/KH7P4X50/ZvH/Tf6Yxf+3+WMW/2vyxyz+v8sfe6T/6Cd7OP95j+F/bf6Y5fy/Ln/M4n99/pjF//f5Yxb/G/LHLP435o9Z/G/KH7P4/yF/zOL/x/wxi/+f8scs/jfnj1n8/5w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv+/5I9Z/O/IH7P435k/ZvH/a/6Yxf+u/DGL/9/yxyz+f88fs/j/I3/M4v/P/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvGfkj9m8X8gf8zi/2D+mMV/av6YxH+eQf6YxX8of8ziPyp/zOI/W/6YxX/2/DGL/+j8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz/2v+8/10Nv5f/o/vf9pzXPfPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/isp/ad+5F+tYfFfWen/r7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9a+WMW/7Xzxyz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+bmf2HOhhmZPH/beSYxf+a/DGL/+/yxyz+1+aPWfyvyx+z+F+fP2bx/33+mMX/hvwxi/+N+WMW/5vyxyz+f8gfs/j/MX/M4v+n/DGL/835Yxb/P+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf8v+WMW/zvyxyz+d+aPWfz/mj9m8b8rf8zi/7f8MYv/3/PHLP7/yB+z+P8zf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfyn5I9Z/B/IH7P4P5g/ZvGfmj8m8Z93kD9m8e//8o2z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/lPwxi/8C+WMW/zH5Yxb/BfPHLP5j88cs/gvlj1n8F84fs/g/NX/M4v+0/DGL/9Pzxyz+i+SPWfyfkT9m8V80f8zi/8z8MYv/s/LHLP6L5Y9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfPH/M4r9E/pjF/wX5Yxb/JfPHLP5L5Y9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfOH7P4vzR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vyx/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vzx+z+K+WP2bxXz1/zOL/ivwxi/8r88cs/mvkj1n8x+ePWfwn5I9Z/Cfmj1n818wfs/ivlT9m8V87f8ziPyl/zOI/OX/M4r9O/pjFf938MYv/q/LHLP6vzh+z+K+XP2bxXz9/zOK/Qf6Yxf81+WMW/w3zxyz+r80fs/hvlD9m8d84f8ziv0n+mMV/0/yx/2X/qR95aOm8r8sf+1/2n/n83yx/zOK/ef6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvHfIn/M4r9l/pjFf6v8MYv/2/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/2/DGL//b5Yxb/d+SPWfzfmT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3flj1n8350/ZvHfJX/M4v+e/DGL/675Yxb/9+aPWfzflz9m8X9//pjFf7f8MYv/7vljFv898scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P475k/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvHfK3/M4v/J/DGL/975Yxb/T+WPWfw/nT9m8d8nf8zi/5n8MYv/vvljFv/P5o9Z/D+XP2bx/3z+mMV/v/wxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/6D8MYv/wfljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8rf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/nT9m8f9O/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5s/ZvE/I3/M4n9m/pjF/6z8MYv/9/LHLP7fzx+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfx/mj9m8b8gf8zif2H+mMX/Z/ljFv+L8scs/j/PH7P4X5w/ZvG/JH/M4n9p/pjF/zKf/9xPZCWL/+U+/yeUxf+K/DGL/5X5Yxb/X+SPWfx/mT9m8f9V/pjF/9f5Yxb/q/LHLP5X549Z/H+TP2bx/23+mMX/mvwxi//v8scs/tfmj1n8r8sfs/hfnz9m8f99/pjF/4b8MYv/jfljFv+b8scs/n/IH7P4/zF/zOL/p/wxi//N+WMW/z/nj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/L/ljFv878scs/nfmj1n8/5o/ZvG/K3/M4v+3/DGL/9/zxyz+/8gfs/j/M3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8p+SPWfwfyB+z+D+YP2bxn5o/JvGfb5A/ZvEfyh+z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/lPwxi/8C+WMW/zH5Yxb/BfPHLP5j88cs/gvlj1n8F84fs/g/NX/M4v+0/DGL/9Pzxyz+i+SPWfyfkT9m8V80f8zi/8z8MYv/s/LHLP6L5Y9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfPH/M4r9E/pjF/wX5Yxb/JfPHLP5L5Y9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfOH7P4vzR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vyx/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vzx+z+K+WP2bxXz1/zOL/ivwxi/8r88cs/mvkj1n8x+ePWfwn5I9Z/Cfmj1n818wfs/ivlT9m8V87f8ziPyl/zOI/OX/M4r9O/pjFf938MYv/q/LHLP6vzh+z+K+XP2bxXz9/zOK/Qf6Yxf81+WMW/w3zxyz+r80fs/hvlD9m8d84f8ziv0n+mMV/0/wxi//r8scs/pvlj1n8N88fs/i/Pn/M4v+G/DGL/xvzxyz+b8ofs/i/OX/M4v+W/DGL/1vzxyz+W+SPWfy3zB+z+G+VP2bxf1v+mMV/6/wxi/82+WMW/23zxyz+2+WPWfzfnj9m8d8+f8zi/478MYv/O/PHLP475I9Z/HfMH7P475Q/ZvHfOX/sIf9tT/qf9n9X/pjl/H93/pjFf5f8MYv/e/LHLP675o9Z/N+bP2bxf1/+mMX//fljFv/d8scs/rvnj1n898gfs/h/IH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4r9n/pjF/6P5Yxb/j+WPWfw/nj9m8f9E/pjFf6/8MYv/J/PHLP57549Z/D+VP2bx/3T+mMV/n/wxi/9n8scs/vvmj1n8P5s/ZvH/XP6Yxf/z+WMW//3yxyz+++ePWfy/kD9m8T8gf8zif2D+mMX/i/ljFv+D8scs/gfnj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/2/mj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOL/rfwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bx/3b+mMX/O/ljFv9T8scs/qfmj1n8T8sfs/ifnj9m8f9u/pjF/4z8MYv/mfljFv+z8scs/t/LH7P4fz9/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/H+QP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bx/2n+mMX/gvwxi/+F+WMW/5/lj1n8L8ofs/j/PH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8b8qf8zif3X+mMX/N/ljFv/f5o9Z/K/JH7P4/y5/zOJ/bf6Yxf+6/DGL//X5Yxb/3+ePWfxvyB+z+N+YP2bxvyl/zOL/h/wxi/8f88cs/n/KH7P435w/ZvH/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/P+SP2bxvyN/zOJ/Z/6Yxf+v+WMW/7vyxyz+f8sfs/j/PX/M4v+P/DGL/z/zxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6YxX9K/pjF/4H8MYv/g/ljFv+p+WMS//kH+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8qf8zi/+r8MYv/evljFv/188cs/hvkj1n8X5M/ZvHfMH/M4v/a/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4vy5/zOK/Wf6YxX/z/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4r9F/pjFf8v8MYv/VvljFv+35Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvHfM3/M4v/R/DGL/8fyxyz+H88fs/h/In/M4r9X/pjF/5P5Yxb/vfPHLP6fyh+z+H86f8ziv0/+mMX/M/ljFv9988cs/p/NH7P4fy5/zOL/+fwxi/9++WMW//3zxyz+X8gfs/gfkD9m8T8wf8zi/8X8MYv/QfljFv+D88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi/8388cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bx/1b+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+H87f8zi/538MYv/KfljFv9T88cs/qflj1n8T88fs/h/N3/M4n9G/pjF/8z8MYv/WfljFv/v5Y9Z/L+fP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+P80f8zif0H+mMX/wvwxi//P8scs/hflj1n8f54/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/j/In/M4v/L/DGL/6/yxyz+v84fs/hflT9m8b86f8zi/5v8MYv/b/PHLP7X5I9Z/H+XP2bxvzZ/zOJ/Xf6Yxf/6/DGL/+/zxyz+N+SPWfxvzB+z+N+UP2bx/0P+mMX/j/ljFv8/5Y9Z/G/OH7P4/zl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP5/yR+z+N+RP2bxvzN/zOL/1/wxi/9d+WMW/7/lj1n8/54/ZvH/R/6Yxf+f+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOI/JX/M4v9A/pjF/8H8MYv/1Pwxif9TBvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP5PyR+z+C+QP2bxH5M/ZvFfMH/M4j82f8ziv1D+mMV/4fwxi/9T88cs/k/LH7P4Pz1/zOK/SP6Yxf8Z+WMW/0Xzxyz+z8wfs/g/K3/M4r9Y/pjF/9n5Yxb/5+SPWfzH5Y9Z/J+bP2bxf17+mMX/+fljFv/F88cs/kvkj1n8X5A/ZvFfMn/M4r9U/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjFf+n8MYv/S/PHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/y/LHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9aIv+5/o11Lf5ri/z/nSz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/AoP8MYv/UP6YxX9U/pjFf7b8MYv/7Pk/otlGHi3+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8qf8zi/+r8MYv/evljFv/188cs/hvkj1n8X5M/ZvHfMH/M4v/a/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4vy5/zOK/Wf6YxX/z/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4r9F/pjFf8v8MYv/VvljFv+35Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj/1/7NGzFiCGAkXRZ79kYtu2bdu2bWdi27Zt27Zt254UqbLW/YLcvbtTn5b/A/2PWv7v5n/U8n93/6OW/3v4H7X839P/qOX/Xv5HLf/39j9q+b+P/1HL/339j1r+7+d/1PJ/f/+jlv8H+B+1/D/Q/6jl/0H+Ry3/D/Y/avl/iP9Ry/9D/Y9a/h/mf9Ty/3D/o5b/R/gftfw/0v+o5f9R/kct/4/2P2r5f4z/Ucv/Y/2PWv4f53/U8v94/6OW/yf4H7X8P9H/qOX/Sf5HLf9P9j9q+X+K/1HL/1P9j1r+n+Z/1PL/dP+jlv9n+B+1/D/T/6jl/1n+Ry3/z/Y/avl/jv9Ry/9z/Y9a/p/nf9Ty/3z/o5b/F/gftfy/0P+o5f9F/kct/y/2P2r5f4n/Ucv/S/2PWv5f5n/U8v9y/6OW/1f4H7X8v9L/qOX/Vf5HLf+v9j9q+X+N/1HL/2v9j1r+X+d/1PL/ev+jlv83+B+1/L/R/6jl/03+Ry3/b/Y/avl/i/9Ry/9b/Y9a/t/mf9Ty/3b/o5b/d/gftfy/0/+o5f9d/kct/+/2P2r5f4//Ucv/e/2PWv7f53/U8v9+/6OW/w/4H7X8f9D/qOX/Q/5HLf8f9j9q+f+I/1HL/0f9j1r+P+Z/1PL/cf+jlv9P+B+1/H/S/6jl/1P+Ry3/n/Y/avn/jP9Ry/9n/Y9a/j/nf9Ty/3n/o5b/L/gftfx/0f+o5f9L/kct/1/2P2r5/4r/Ucv/V/2PWv6/5n/U8v91/6OW/2/4H7X8f9P/qOX/W/5HLf/f9j9q+f+O/1HL/3f9j1r+v+d/1PL/ff+jlv8f+B+1/P/Q/6jl/0f+Ry3/P/Y/avn/if9Ry/9P/Y9a/n/mf9Ty/3P/o5b/X/gftfz/0v+o5f9X/kct/7/2P2r5/43/Ucv/b/2PWv5/53/U8v97/6OW/z/4H7X8/9H/qOX/T/5HLf9/9j9q+f+L/1HL/0H+RyX/B/zJ/6jl/5/9j1r+/8X/qOX/X/2PWv7/zf+o5f/f/Y9a/v/D/6jl/z/9j1r+/8v/qOX/v/2PWv7/x/+o5f9//Y9a/v/P/6jl///9j1r+D+Z/1PJ/cP+jlv8D/I9a/g/hf9Tyf0j/o5b/Q/kftfwf2v+o5f8w/kct/4f1P2r5P5z/Ucv/4f2PWv6P4H/U8n9E/6OW/yP5H7X8H9n/qOX/KP5HLf9H9T9q+T+a/1HL/9H9j1r+j+F/1PJ/TP+jlv9j+R+1/B/b/6jl/zj+Ry3/x/U/avk/nv9Ry//x/Y9a/k/gf9Tyf0L/o5b/E/kftfyf2P+o5f8k/kct/yf1P2r5P5n/Ucv/yf2PWv5P4X/U8n9K/6OW/1P5H7X8n9r/qOX/NP5HLf+n9T9q+T+d/1HL/+n9j1r+z+B/1PJ/Rv+jlv8z+R+1/J/Z/6jl/yz+Ry3/Z/U/avk/m/9Ry//Z/Y9a/s/hf9Tyf07/o5b/c/kftfyf2/+o5f88/kct/+f1P2r5P5//Ucv/+f2PWv4v4H/U8n9B/6OW/wv5H7X8X9j/qOX/Iv5HLf8X9T9q+b+Y/1HL/8X9j1r+L+F/1PJ/Sf+jlv9L+R+1/F/a/6jl/zL+Ry3/l/U/avm/nP9Ry//l/Y9a/q/gf9Tyf0X/o5b/K/kftfxf2f+o5f8q/kct/1f1P2r5v5r/Ucv/1f2PWv6v4X/U8n9N/6OW/2v5H7X8X9v/qOX/Ov5HLf/X9T9q+b+e/1HL//X9j1r+b+B/1PJ/Q/+jlv8b+R+1/N/Y/6jl/yb+/2bQ77Pl/6b+Ry3/N/M/avm/uf9Ry/8t/I9a/m/pf9Tyfyv/o5b/W/sftfzfxv+o5f+2/kct/7fzP2r5v73/Ucv/HfyPWv7v6H/U8n8n/6OW/zv7H7X838X/qOX/rv5HLf8H+h/94f4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Mq+/cd4XRdwHP8ccIBkGy5mDGuDfFu6pXTHj+EfTkgELvTA34gaAncgeAd0HHacGj/+IJfOH7mRYytXwrCctHnLNZ1dmlmzWLXV7IeapStrkeks2GJd+95977z7dtz6vs/3m5WPxx/3/X4+X14f4LYnnw9TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9dDY0LjoytGXJq7OCDDx9u7n2dfXTFTQd+331B/2v546XDXHLM4IOenp6e2c/O2lE+nFAUReln21k+nlg5Ll1/Z/2XOvqOwvzuFxcfn/zLxiMH1pz2cF3X0ftqe8/WFjeu29DS/IkxRREuqi06Sgd1NUURFtUW95YO6ksHi2uLh0sHs3oPTim+Wzo4b+3mlqbSiSXR3zP4f9HQuLMYO6TYYsifBoP731n/nTv6X0e4ZP/VxhXl/i/v/OGbFZ/1O0H//dcPCyr7r/o3CJxQdf0/P7//dYRL/sf9f9KTK18e7rMT999//fBJ/UM6wzz/D2m08rm/4vl/+jCXHNhfWdN5vNT/Jbc+M6N8atx/8/z/zvXDRZX9jxny/F96jl/Y//w/oSjCxaP8dsB7SkPjriMj3f9H7n/ctIpNzeD+T2/bvL/U/2OLf/B4+VRtlf0vHOH+P2ZJxa8VqE5D41d7Ku7/VfRffGyYSw70/9bjv32o1P+jf7z/jEGfVdP/xZX9z2xv3TJz6/bOcze0rl7fvL55U92sebPn1tfNPX/OzN5Hgr6vo/yuwHvD6O7/xaSKTU1RNA/sr+468FSp/zkPPDC7fGpilf0vGvH+P939H4b1kTHF+PFFx+r29ra6vq/9h/V9X/t+2DD9V/H3/zPPLv+w2vJrTVFMHdjfecZdy0v9v33omd3lU+Or7H/xiP3PH/h5gQijvP83VWyG9H/w0Iu9z/9L7zl4evlUtX//XzJi/6+4/8NoNDRW/A8/77JS/7uKSyM7DQ3++x+kk6P/R9++vjtuHT6lf0gnR/9/+MLRc+LWYan+IZ0c/Y/beP9zcetwif4hnRz9L5syb3ncOlyqf0gnR/9rXznnr3Hr0Kh/SCdH/2d/ZXdH3Dos0z+kk6P/B9tmb4tbh+X6h3Ry9P/zUx98NW4dLtM/pJOj/2PH7r4hbh0u1z+kk6P/rj1n/ShuHa7QP6STo//L1i0Icetwpf4hnRz9T5v658fi1uEq/UM6Ofqf+5d/nhq3DlfrH9LJ0f/tX1y+L24drtE/pJOj/7HXvfxC3Dqs0D+kk6P/JWdtWxC3DtfqH9LJ0X/Tz5p64tZhZbn/CYX+4V2Xo/+Z3/zJhrh1uM79H9LJ0f/hZY/siVuH6/UP6eTof09dMTluHW7QP6STo/9vfP+0Q3Hr8Gn9Qzo5+v/dk0/Mi1uHVfqHdHL0/+yHbvtW3DrcqH9IJ0f/96x54cy4dVitf0gnR/8P7X3uy3HrsEb/kE6O/l9/vfV9ceuwVv+QTo7+J0085bW4dWjSP6STo/8Ft3ytLW4dmvUP6eTov3V314/j1mGd/iGdHP1/9PjUlXHrsF7/kE6O/lfM2fvBuHW4Sf+QTo7+P7D0gl1x67BB/5BOjv4v7P74hXHrsFH/kE6O/tuf/vzX49bhZv1DOjn63zvj1UVx69Cif0gnR/8vrVry07h1aNU/pJOj/zcfuXZT3Dps0j+kk6P/J37x1rG4ddisf0gnR//vP3/h3+PWYYv+IZ0c/S9a/MbauHX4jP4hnRz9b+z610tx69Cmf0gnR/8zDl+1NG4dtuof0snR//fOrdsftw7t+od0cvR/xxX76uPWYZv+IZ0c/e8/eOddcetwi/4hnRz9v/Gr6dPi1uGz+od0cvR/3+RD18StQ4f+IZ0c/f96U+3TceuwXf+QTo7+/7Fvyo64dejUP6STo/+nXuv+U9w63Kp/SCdH/6vG/WZ83Drcpn9IJ0f/Uzq33Bu3DrfrH9LJ0f+8u1efF7cOn9M/pJOj/61/e/7bceuwQ/+QztbtnTevbmlpbvPGG2+8GXhzsv9kAlJ7J/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5WwfRuwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//9O+OOp") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) 10.278288579s ago: executing program 5 (id=1292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) 10.116461061s ago: executing program 4 (id=1293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) 10.029429036s ago: executing program 2 (id=1294): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="001700000000000018000a80140001800c000200000000000000000000000000080004"], 0x40}}, 0x0) 9.632678304s ago: executing program 4 (id=1296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5}}]}, 0x34}}, 0x0) 9.114364146s ago: executing program 2 (id=1298): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e22, @local}]}, &(0x7f00000002c0)=0x10) 9.093391504s ago: executing program 4 (id=1299): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000180)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@noquota}, {@segment_mode}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) 7.940172467s ago: executing program 2 (id=1300): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], [0x2]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x4}]}]}}]}, 0x9c}}, 0x0) 7.785552753s ago: executing program 3 (id=1301): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r1}) 6.691943381s ago: executing program 0 (id=1304): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000800)='mm_vmscan_lru_shrink_inactive\x00', r0}, 0x18) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, r1, 0x0, 0x14, 0xfffffffffffffffe}, 0x42) 5.832058186s ago: executing program 4 (id=1308): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xc4, 0x2, [@TCA_CHOKE_PARMS={0xffffffffffffffab}, @TCA_CHOKE_STAB={0x104, 0x2, "13119f34dae3c090b3da2c64426a1d777a61e2fad4599fb11a71e149072d265bbcf090bd7bbe0e5d2de66213d88d7e773024ba3482c95f5dc6359186172ae22ed9616876e0ec13f573a7c2f0d185109a8457e43c5390e59a84747ee7b311ecc2f8bac84497d72789b0fa4ab2e321de479655bda89963ae5f37684f73a07ca9d223dfe04aae9e1ff7f8441133075f4355c81d80a33e4907edd482cafffa6cf27913b8cf68da47ea06d0d17b9770d10d6978345f4fb5f2b61619e5e3b4b4090c77e654828f41ab371e8c6bef4485fe557e260ff37e8f6a854d0b686963dcfea9a71953940f9d6ec1de1d4e3221adfd549d529a594013b2dcde2d070f6ba92fcbb7"}]}}]}, 0x14c}}, 0x0) 5.556261956s ago: executing program 0 (id=1310): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_regs={0x1d}}) 3.086438772s ago: executing program 1 (id=1315): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 2.138154089s ago: executing program 1 (id=1316): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000000040)=""/112) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f) 563.27425ms ago: executing program 1 (id=1317): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x29, 0x13, 0x0, 0x50) 477.536265ms ago: executing program 1 (id=1318): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaa6, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc2}}) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 212.556336ms ago: executing program 1 (id=1319): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') r1 = socket(0x18, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000180)={0x18, 0x0, {0xffff, @random="d0f81e835ae3", 'veth1_to_batadv\x00'}}, 0x1e) sendfile(r1, r0, 0x0, 0x8) 0s ago: executing program 1 (id=1321): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x148, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x8000) kernel console output (not intermixed with test programs): ] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.870053][ T4640] usb 3-1: config 0 descriptor?? [ 126.884647][ T925] bridge_slave_0: left allmulticast mode [ 126.890420][ T925] bridge_slave_0: left promiscuous mode [ 126.896450][ T925] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.103478][ T6969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.141693][ T6969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.371343][ T4640] hid (null): bogus close delimiter [ 127.377648][ T4640] hid (null): invalid report_size 59136 [ 127.394402][ T4640] hid (null): report_id 48035 is invalid [ 127.414619][ T4640] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 127.423876][ T4640] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 127.431301][ T4640] hid-generic 0003:0158:0100.0007: bogus close delimiter [ 127.438493][ T4640] hid-generic 0003:0158:0100.0007: item 0 0 2 10 parsing failed [ 127.446837][ T4640] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 127.548791][ T925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.564928][ T925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.577198][ T925] bond0 (unregistering): Released all slaves [ 127.589309][ T4640] usb 3-1: USB disconnect, device number 6 [ 127.722950][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.729953][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.757225][ T6999] loop0: detected capacity change from 0 to 1024 [ 127.766124][ T6869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.785109][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.800777][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.854672][ T6869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.961757][ T5253] Bluetooth: hci0: command tx timeout [ 128.012889][ T7003] loop0: detected capacity change from 0 to 512 [ 128.029134][ T7003] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 128.037460][ T7003] UDF-fs: Scanning with blocksize 512 failed [ 128.049460][ T7003] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 128.060045][ T7003] UDF-fs: Scanning with blocksize 1024 failed [ 128.067187][ T7003] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 128.078306][ T7003] UDF-fs: Scanning with blocksize 2048 failed [ 128.086146][ T7003] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 128.109646][ T6543] veth0_vlan: entered promiscuous mode [ 128.152330][ T7003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.255642][ T6869] hsr_slave_0: entered promiscuous mode [ 128.276594][ T6869] hsr_slave_1: entered promiscuous mode [ 128.292199][ T6869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.301880][ T6869] Cannot create hsr debugfs directory [ 128.395319][ T7001] loop4: detected capacity change from 0 to 32768 [ 128.404258][ T6543] veth1_vlan: entered promiscuous mode [ 128.416403][ T7007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 128.455084][ T7001] ERROR: (device loop4): diAllocAG: numfree > numinos [ 128.455084][ T7001] [ 128.468541][ T7001] ialloc: diAlloc returned -5! [ 128.499650][ T925] hsr_slave_0: left promiscuous mode [ 128.506554][ T925] hsr_slave_1: left promiscuous mode [ 128.511619][ T5297] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.529491][ T925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.540885][ T925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.557636][ T925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.567702][ T925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.602695][ T925] veth1_macvtap: left promiscuous mode [ 128.608311][ T925] veth0_macvtap: left promiscuous mode [ 128.621702][ T925] veth1_vlan: left promiscuous mode [ 128.627144][ T925] veth0_vlan: left promiscuous mode [ 128.675124][ T5297] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 128.691500][ T5297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.705981][ T5297] usb 3-1: Product: syz [ 128.710198][ T5297] usb 3-1: Manufacturer: syz [ 128.727256][ T5297] usb 3-1: SerialNumber: syz [ 128.742257][ T5297] usb 3-1: config 0 descriptor?? [ 128.916562][ T7009] loop0: detected capacity change from 0 to 32768 [ 128.938398][ T7009] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.611 (7009) [ 128.964794][ T5297] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 128.986031][ T7009] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.996572][ T7009] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 129.211693][ T7009] BTRFS info (device loop0): rebuilding free space tree [ 129.286758][ T7009] BTRFS info (device loop0): disabling free space tree [ 129.301535][ T7009] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.313836][ T7028] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 129.330098][ T7009] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.369028][ T5297] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 129.648270][ T5297] usb 3-1: USB disconnect, device number 7 [ 129.839462][ T925] team0 (unregistering): Port device team_slave_1 removed [ 129.862682][ T5232] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.919370][ T925] team0 (unregistering): Port device team_slave_0 removed [ 130.051781][ T5253] Bluetooth: hci0: command tx timeout [ 130.844159][ T7033] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 130.851866][ T7033] macvlan3: entered allmulticast mode [ 130.857274][ T7033] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 130.989966][ T7053] VFS: could not find a valid V7 on nullb0. [ 131.000848][ T7053] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 131.013215][ T7053] qnx6: wrong signature (magic) in superblock #1. [ 131.020119][ T7053] qnx6: unable to read the first superblock [ 131.198086][ T6543] veth0_macvtap: entered promiscuous mode [ 131.215387][ T6543] veth1_macvtap: entered promiscuous mode [ 131.230589][ T7061] loop2: detected capacity change from 0 to 1024 [ 131.241997][ T7059] dummy0: entered promiscuous mode [ 131.267310][ T7061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.313644][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.334224][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.344650][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.355439][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.365796][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.376465][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.388513][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.410971][ T7061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.493890][ T7061] EXT4-fs error (device loop2): __ext4_new_inode:1070: comm syz.2.628: reserved inode found cleared - inode=18 [ 131.515869][ T6778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 131.555695][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.567438][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.608208][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.627448][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.660337][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.678244][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.692061][ T5229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.710440][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.747813][ T6778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 131.824688][ T6543] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.842931][ T6543] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.867260][ T6543] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.891993][ T6543] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.915971][ T6778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 131.957654][ T6778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 132.091020][ T7081] netlink: 'syz.2.635': attribute type 1 has an invalid length. [ 132.101805][ T7081] netlink: 9312 bytes leftover after parsing attributes in process `syz.2.635'. [ 132.110979][ T7081] netlink: 'syz.2.635': attribute type 1 has an invalid length. [ 132.123163][ T7069] loop4: detected capacity change from 0 to 32768 [ 132.174994][ T7069] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 132.288618][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.300532][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.324813][ T7069] XFS (loop4): Starting recovery (logdev: internal) [ 132.346092][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.371849][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.522964][ T925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.525339][ T7077] loop0: detected capacity change from 0 to 32768 [ 132.530920][ T925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.568095][ T7069] XFS (loop4): Ending recovery (logdev: internal) [ 132.575711][ T6778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.614195][ T6869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 132.658576][ T6778] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.686362][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.693576][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.717592][ T6869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.738582][ T6869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.750155][ T5228] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 132.775838][ T6869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.816193][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.823407][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.959710][ T6869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.059998][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.067289][ T7100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.199903][ T6869] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.243873][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.251040][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.282616][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.289769][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.436061][ T7114] loop5: detected capacity change from 0 to 4096 [ 133.452940][ T7114] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 133.775227][ T7108] loop2: detected capacity change from 0 to 32768 [ 133.846914][ T6778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.867031][ T7114] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 133.893155][ T6869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.096290][ T6778] veth0_vlan: entered promiscuous mode [ 134.102575][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 134.133847][ T6869] veth0_vlan: entered promiscuous mode [ 134.160457][ T6778] veth1_vlan: entered promiscuous mode [ 134.185016][ T68] ntfs3: loop5: ino=5, ntfs3_write_inode failed, -22. [ 134.197619][ T6869] veth1_vlan: entered promiscuous mode [ 134.268642][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 134.270235][ T6778] veth0_macvtap: entered promiscuous mode [ 134.282517][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.312001][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.323537][ T6778] veth1_macvtap: entered promiscuous mode [ 134.326448][ T25] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 134.354961][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.391666][ T25] usb 5-1: config 0 descriptor?? [ 134.400615][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.440799][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.465188][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.476118][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.490642][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.501667][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.511912][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.530248][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.550075][ T7122] loop0: detected capacity change from 0 to 32768 [ 134.554133][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.601869][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.623740][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.638989][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.656783][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.679414][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.690459][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.709072][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.719981][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.735080][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.749430][ T6869] veth0_macvtap: entered promiscuous mode [ 134.766481][ T6778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.775811][ T6778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.785288][ T6778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.794408][ T6778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.823064][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.854202][ T6869] veth1_macvtap: entered promiscuous mode [ 134.863561][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.933475][ T25] hid (null): bogus close delimiter [ 134.943559][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.974516][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.000324][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.016111][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.026495][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.039705][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.061493][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.091464][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.111476][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.140319][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.150546][ T25] usb 5-1: string descriptor 0 read error: -71 [ 135.165560][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.185541][ T25] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 135.195663][ T25] letsketch 0003:6161:4D15.0008: probe with driver letsketch failed with error -32 [ 135.229755][ T25] usb 5-1: USB disconnect, device number 9 [ 135.246999][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.301638][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.331010][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.362359][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.384067][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.397740][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.414645][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.425374][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.452708][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.474463][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.503209][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.541299][ T6869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.578710][ T6869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.608853][ T6869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.619643][ T6869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.744774][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.752894][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.874482][ T7141] loop2: detected capacity change from 0 to 40427 [ 135.879893][ T4057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.896144][ T7152] loop0: detected capacity change from 0 to 2048 [ 135.900902][ T4057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.911149][ T7141] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 135.926144][ T7141] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 135.943120][ T7141] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1fffff [ 135.965757][ T7156] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 135.976916][ T7156] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 135.990012][ T7141] F2FS-fs (loop2): invalid crc value [ 136.101850][ T7152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.125251][ T925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.142856][ T4057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.171727][ T4057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.182778][ T925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.200046][ T7141] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.205522][ T7168] loop4: detected capacity change from 0 to 4096 [ 136.227201][ T7166] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 136.253288][ T7168] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 136.356121][ T5232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.390790][ T7141] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 136.454392][ T7141] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.629972][ T7141] syz.2.654: attempt to access beyond end of device [ 136.629972][ T7141] loop2: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 136.790889][ T5229] syz-executor: attempt to access beyond end of device [ 136.790889][ T5229] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.839543][ T5229] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 137.078522][ T7202] loop4: detected capacity change from 0 to 512 [ 137.114569][ T7202] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.165995][ T7202] EXT4-fs (loop4): 1 truncate cleaned up [ 137.224949][ T7202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.273603][ T7198] loop0: detected capacity change from 0 to 4096 [ 137.392419][ T7210] netlink: 72 bytes leftover after parsing attributes in process `syz.5.681'. [ 137.428089][ T7184] loop3: detected capacity change from 0 to 32768 [ 137.476744][ T5228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.894825][ T7219] netlink: 'syz.0.686': attribute type 64 has an invalid length. [ 137.902767][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'. [ 137.911663][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'. [ 138.040285][ T7225] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 138.049165][ T7225] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.689'. [ 138.059769][ T7225] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 138.319102][ T7240] loop2: detected capacity change from 0 to 1024 [ 138.412448][ T7247] vlan2: entered promiscuous mode [ 138.430416][ T7247] vlan2: entered allmulticast mode [ 138.436561][ T7247] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 138.501317][ T7247] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 138.517969][ T7247] team0: Port device vlan2 added [ 138.532657][ T11] hfsplus: b-tree write err: -5, ino 3 [ 138.543754][ T7253] input: syz1 as /devices/virtual/input/input17 [ 138.686855][ T7250] loop5: detected capacity change from 0 to 512 [ 138.742331][ T7250] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 138.789206][ T7260] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 138.874213][ T7250] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002] [ 138.920518][ T7250] EXT4-fs (loop5): orphan cleanup on readonly fs [ 138.982713][ T7269] loop0: detected capacity change from 0 to 512 [ 139.023345][ T7250] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 139.048781][ T7269] EXT4-fs: inline encryption not supported [ 139.101614][ T7250] EXT4-fs (loop5): Remounting filesystem read-only [ 139.108632][ T7250] EXT4-fs (loop5): 1 truncate cleaned up [ 139.145204][ T7250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 139.232090][ T7269] EXT4-fs (loop0): Test dummy encryption mode enabled [ 139.237695][ T7254] loop4: detected capacity change from 0 to 32768 [ 139.247331][ T7269] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.250647][ T6543] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 139.318781][ T29] audit: type=1800 audit(1728166597.234:22): pid=7254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.701" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 139.320459][ T7254] jfs_unlink: dtDelete returned -5 [ 139.345966][ T7276] loop3: detected capacity change from 0 to 2048 [ 139.368314][ T7254] ERROR: (device loop4): jfs_unlink: [ 139.368314][ T7254] [ 139.395574][ T7254] ERROR: (device loop4): remounting filesystem as read-only [ 139.415858][ T7276] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.425423][ T7269] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #17: comm syz.0.707: corrupted in-inode xattr: e_name out of bounds [ 139.500392][ T7269] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.707: couldn't read orphan inode 17 (err -117) [ 139.504933][ T7276] Process accounting resumed [ 139.517653][ T29] audit: type=1804 audit(1728166597.414:23): pid=7276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.710" name=2F6E6577726F6F742F332FE91F7189591E9233614B2FE91F7189591E9233614B dev="loop3" ino=1367 res=1 errno=0 [ 139.523944][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 139.560814][ T7290] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.716'. [ 139.576781][ T7269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.611141][ T7290] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 139.611604][ T7289] netlink: 'syz.2.714': attribute type 3 has an invalid length. [ 139.635565][ T7269] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 139.702145][ T6869] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1367 (mode 100000) has inode size 64 different from extent length 512. Filesystem need not be standards compliant. [ 139.746782][ T5232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.815695][ T7294] loop1: detected capacity change from 0 to 64 [ 139.981142][ T7303] loop5: detected capacity change from 0 to 1024 [ 140.053423][ T7303] EXT4-fs warning (device loop5): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-13, ino=12). Please run e2fsck to fix. [ 140.069624][ T7307] loop4: detected capacity change from 0 to 256 [ 140.115268][ T7303] EXT4-fs (loop5): mount failed [ 140.142819][ T7304] can0: slcan on ttyS3. [ 140.258217][ T7309] loop1: detected capacity change from 0 to 4096 [ 140.384275][ T7304] can0 (unregistered): slcan off ttyS3. [ 140.395146][ T7304] Falling back ldisc for ttyS3. [ 140.710451][ T7325] netlink: 16 bytes leftover after parsing attributes in process `syz.5.728'. [ 140.770838][ T7309] ntfs3: loop1: failed to convert "0000" to iso8859-6 [ 140.800321][ T7321] loop3: detected capacity change from 0 to 32768 [ 140.802761][ T7309] ntfs3: loop1: failed to convert "0030" to iso8859-6 [ 140.816496][ T7324] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 140.823462][ T7324] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 140.831326][ T7321] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.727 (7321) [ 140.888154][ T7328] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 140.894818][ T7328] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 140.897058][ T7300] loop2: detected capacity change from 0 to 40427 [ 140.913537][ T7300] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 140.922000][ T7300] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 140.935257][ T7324] vhci_hcd vhci_hcd.0: Device attached [ 140.951866][ T7332] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 140.958589][ T7332] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 140.976923][ T7328] vhci_hcd vhci_hcd.0: Device attached [ 140.988451][ T7321] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 141.012517][ T7300] F2FS-fs (loop2): invalid crc value [ 141.021658][ T7321] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 141.030533][ T7321] BTRFS info (device loop3): disk space caching is enabled [ 141.059206][ T7332] vhci_hcd vhci_hcd.0: Device attached [ 141.065055][ T7321] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 141.079668][ T7324] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(5) [ 141.086213][ T7324] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.109289][ T7300] F2FS-fs (loop2): Found nat_bits in checkpoint [ 141.145288][ T7324] vhci_hcd vhci_hcd.0: Device attached [ 141.171798][ T5283] vhci_hcd: vhci_device speed not set [ 141.173054][ T7333] vhci_hcd: connection closed [ 141.189663][ T7329] vhci_hcd: connection closed [ 141.197651][ T7326] vhci_hcd: connection closed [ 141.210923][ T7340] vhci_hcd: connection closed [ 141.219986][ T4057] vhci_hcd: stop threads [ 141.231502][ T5283] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 141.240903][ T7327] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 141.263261][ T4057] vhci_hcd: release socket [ 141.278718][ T4057] vhci_hcd: disconnect device [ 141.291158][ T4057] vhci_hcd: stop threads [ 141.301492][ T4057] vhci_hcd: release socket [ 141.332978][ T7321] BTRFS info (device loop3): rebuilding free space tree [ 141.353155][ T4057] vhci_hcd: disconnect device [ 141.358010][ T4057] vhci_hcd: stop threads [ 141.362763][ T4057] vhci_hcd: release socket [ 141.367438][ T4057] vhci_hcd: disconnect device [ 141.372510][ T4057] vhci_hcd: stop threads [ 141.376771][ T4057] vhci_hcd: release socket [ 141.381418][ T4057] vhci_hcd: disconnect device [ 141.504461][ T7300] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 141.511857][ T7321] BTRFS info (device loop3): disabling free space tree [ 141.518780][ T7321] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.525358][ T7300] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 141.528813][ T7321] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.700782][ T6869] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 141.962353][ T7336] loop5: detected capacity change from 0 to 32768 [ 142.123453][ T7336] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 142.150228][ T29] audit: type=1326 audit(1728166600.064:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.739" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50c357dff9 code=0x0 [ 142.193734][ T7336] (syz.5.730,7336,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 142.374813][ T7378] loop0: detected capacity change from 0 to 128 [ 142.408677][ T6543] ocfs2: Unmounting device (7,5) on (node local) [ 143.010016][ T7365] loop1: detected capacity change from 0 to 40427 [ 143.055936][ T7365] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 143.064087][ T7365] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 143.100989][ T7365] F2FS-fs (loop1): Found nat_bits in checkpoint [ 143.143893][ T7403] Bluetooth: MGMT ver 1.23 [ 143.220537][ T7365] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 143.238603][ T7365] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.868740][ T7417] sp0: Synchronizing with TNC [ 144.114838][ T7397] loop2: detected capacity change from 0 to 32768 [ 144.403871][ T7404] loop3: detected capacity change from 0 to 32768 [ 144.411016][ T7404] XFS: ikeep mount option is deprecated. [ 144.429482][ T7438] netlink: 201400 bytes leftover after parsing attributes in process `syz.1.763'. [ 144.490022][ T7404] XFS: ikeep mount option is deprecated. [ 144.547830][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.768'. [ 144.626760][ T7397] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.646910][ T7404] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.786024][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 144.939991][ T7397] XFS (loop2): Ending clean mount [ 144.969181][ T7397] XFS (loop2): Quotacheck needed: Please wait. [ 145.073346][ T7404] XFS (loop3): Ending clean mount [ 145.089751][ T7404] XFS (loop3): Quotacheck needed: Please wait. [ 145.101885][ T7397] XFS (loop2): Quotacheck: Done. [ 145.141342][ T7404] XFS (loop3): Quotacheck: Done. [ 145.260737][ T5229] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 145.287432][ T6869] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.565953][ T7495] netlink: 180 bytes leftover after parsing attributes in process `syz.3.781'. [ 145.891556][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.789'. [ 146.210681][ T7522] loop4: detected capacity change from 0 to 256 [ 146.274492][ T7522] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 146.386126][ T5283] vhci_hcd: vhci_device speed not set [ 146.700245][ T7541] loop2: detected capacity change from 0 to 256 [ 146.904931][ T7546] netlink: 'syz.5.807': attribute type 10 has an invalid length. [ 146.932598][ T7547] loop4: detected capacity change from 0 to 764 [ 146.950783][ T7547] rock: directory entry would overflow storage [ 146.961717][ T7547] rock: sig=0x4654, size=5, remaining=4 [ 147.030903][ T7547] rock: directory entry would overflow storage [ 147.059608][ T7547] rock: sig=0x4f50, size=4, remaining=3 [ 147.073223][ T7546] team0: Port device wlan1 added [ 147.081477][ T7547] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 147.109073][ T7550] netlink: 'syz.5.807': attribute type 10 has an invalid length. [ 147.159030][ T7550] batman_adv: batadv0: Adding interface: team0 [ 147.174343][ T7550] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.208102][ T7550] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 147.321887][ T5294] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.397175][ T7567] loop4: detected capacity change from 0 to 1024 [ 147.405994][ T7567] EXT4-fs: Ignoring removed nobh option [ 147.414759][ T7567] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 147.462328][ T7567] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.815: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 147.490676][ T7567] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.815: couldn't read orphan inode 11 (err -117) [ 147.491607][ T5294] usb 4-1: Using ep0 maxpacket: 16 [ 147.509004][ T7567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.533491][ T5294] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.567359][ T7567] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.815: Invalid block bitmap block 0 in block_group 0 [ 147.577518][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.594656][ T7567] Quota error (device loop4): write_blk: dquota write failed [ 147.610328][ T7567] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 147.643503][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 147.653564][ T7567] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.815: Failed to acquire dquot type 0 [ 147.665335][ T5294] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 147.678906][ T5294] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.708912][ T5294] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 147.728722][ T5294] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 147.742629][ T5294] usb 4-1: Manufacturer: syz [ 147.756744][ T5294] usb 4-1: config 0 descriptor?? [ 147.764824][ T5228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.071657][ T5294] rc_core: IR keymap rc-hauppauge not found [ 148.077704][ T5294] Registered IR keymap rc-empty [ 148.096359][ T7591] netlink: 14 bytes leftover after parsing attributes in process `syz.0.824'. [ 148.101774][ T5294] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.155277][ T5294] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.192096][ T5294] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 148.238235][ T5294] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 148.267107][ T7594] loop4: detected capacity change from 0 to 1024 [ 148.302033][ T5294] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.312263][ T7597] loop0: detected capacity change from 0 to 16 [ 148.335490][ T5294] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.335973][ T7597] erofs: (device loop0): mounted with root inode @ nid 36. [ 148.347699][ T29] audit: type=1800 audit(1728166606.264:25): pid=7594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.826" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 148.411775][ T5294] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.441957][ T5294] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.471653][ T5294] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.491794][ T29] audit: type=1800 audit(1728166606.404:26): pid=7597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.828" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 148.493435][ T5294] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.526583][ T925] hfsplus: b-tree write err: -5, ino 4 [ 148.551658][ T5294] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.591756][ T5294] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.641671][ T5294] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.691685][ T5294] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 148.733155][ T5294] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 148.741255][ T5294] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 148.801088][ T5294] usb 4-1: USB disconnect, device number 5 [ 149.204007][ T7620] loop5: detected capacity change from 0 to 4096 [ 149.219175][ T7584] loop2: detected capacity change from 0 to 32768 [ 149.236277][ T7620] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 149.310624][ T7584] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 149.341797][ T7584] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 149.507402][ T7608] loop1: detected capacity change from 0 to 32768 [ 149.535985][ T7620] overlayfs: invalid redirect ((null)) [ 149.615885][ T7584] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 149.685494][ T7608] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 149.751131][ T5283] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 149.761646][ T5283] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 149.948497][ T7628] loop0: detected capacity change from 0 to 32768 [ 149.962866][ T5283] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 201ms [ 149.971552][ T5283] gfs2: fsid=syz:syz.0: jid=0: Done [ 149.990721][ T7584] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 150.029086][ T7608] XFS (loop1): Ending clean mount [ 150.036842][ T7608] XFS (loop1): Quotacheck needed: Please wait. [ 150.123739][ T7608] XFS (loop1): Quotacheck: Done. [ 150.223036][ T7656] bond0: Unable to set up delay as MII monitoring is disabled [ 150.497421][ T6778] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 151.006530][ T7676] (unnamed net_device) (uninitialized): (slave veth0_to_bridge): Device is not bonding slave [ 151.017266][ T7676] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth0_to_bridge) [ 151.221580][ T4640] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 151.459654][ T4640] usb 5-1: Using ep0 maxpacket: 32 [ 151.556776][ T7699] loop5: detected capacity change from 0 to 47 [ 151.630459][ T4640] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 151.639274][ T4640] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 151.650738][ T4640] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 151.700078][ T4640] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 151.723523][ T4640] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.743260][ T4640] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 151.752615][ T4640] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 151.762503][ T4640] usb 5-1: Product: syz [ 151.766728][ T4640] usb 5-1: Manufacturer: syz [ 151.787919][ T4640] usb 5-1: SerialNumber: syz [ 151.802213][ T4640] usb 5-1: config 0 descriptor?? [ 151.822074][ T4640] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 151.841269][ T7705] loop2: detected capacity change from 0 to 2048 [ 151.852379][ T5294] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.856387][ T4640] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 151.897326][ T7705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.024283][ T5294] usb 4-1: config 0 has no interfaces? [ 152.032664][ T5294] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.071987][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.083000][ T4640] usb 5-1: USB disconnect, device number 10 [ 152.102144][ T7719] bpf: Bad value for 'uid' [ 152.116184][ T4640] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 152.209204][ T5294] usb 4-1: config 0 descriptor?? [ 152.459564][ T5297] usb 4-1: USB disconnect, device number 6 [ 152.588430][ T7746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.674425][ T7750] loop1: detected capacity change from 0 to 1024 [ 152.919061][ T7761] erspan0: entered promiscuous mode [ 152.938603][ T7761] macvlan2: entered allmulticast mode [ 152.945614][ T7763] loop1: detected capacity change from 0 to 256 [ 152.959103][ T7761] erspan0: entered allmulticast mode [ 153.006851][ T7763] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 153.023819][ T7761] erspan0: left allmulticast mode [ 153.042213][ T7761] erspan0: left promiscuous mode [ 153.495853][ T7785] input: syz1 as /devices/virtual/input/input20 [ 153.545996][ T7787] loop2: detected capacity change from 0 to 256 [ 153.546179][ T7756] loop0: detected capacity change from 0 to 32768 [ 153.569563][ T7756] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.895 (7756) [ 153.592318][ T7756] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.613339][ T7756] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 153.635807][ T7787] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.638461][ T7756] BTRFS info (device loop0): using free-space-tree [ 153.736429][ T7787] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 153.756237][ T7802] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 154.145711][ T7826] openvswitch: netlink: Actions may not be safe on all matching packets [ 154.152410][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.922'. [ 154.200940][ T7827] ipvlan2: entered allmulticast mode [ 154.218908][ T7827] veth0_vlan: entered allmulticast mode [ 154.222060][ T5232] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.743094][ T7856] loop5: detected capacity change from 0 to 764 [ 154.757660][ T7856] rock: directory entry would overflow storage [ 154.802198][ T7856] rock: sig=0x4654, size=5, remaining=4 [ 155.493618][ T7878] loop3: detected capacity change from 0 to 4096 [ 155.497084][ T7848] loop1: detected capacity change from 0 to 65536 [ 155.565984][ T7848] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 155.722845][ T7848] XFS (loop1): Ending clean mount [ 155.781758][ T7848] XFS (loop1): Quotacheck needed: Please wait. [ 155.934083][ T7848] XFS (loop1): Quotacheck: Done. [ 156.307559][ T6778] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 156.434310][ T7917] netlink: 128 bytes leftover after parsing attributes in process `syz.2.958'. [ 156.900407][ T7925] loop5: detected capacity change from 0 to 4096 [ 156.955170][ T7915] loop0: detected capacity change from 0 to 32768 [ 156.963814][ T7930] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.992695][ T7915] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.956 (7915) [ 157.019710][ T7932] loop4: detected capacity change from 0 to 16 [ 157.047596][ T7915] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.076092][ T7932] erofs: (device loop4): mounted with root inode @ nid 36. [ 157.091902][ T7925] NILFS (loop5): bad btree node (ino=3, blocknr=41): level = 31, flags = 0xe0, nchildren = 0 [ 157.115067][ T7915] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 157.131809][ T7925] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 157.151448][ T7915] BTRFS info (device loop0): using free-space-tree [ 157.191131][ T7925] Remounting filesystem read-only [ 157.238765][ T5228] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 157.259408][ T7951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.967'. [ 157.284079][ T5228] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 157.321991][ T5232] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.475656][ T7955] futex_wake_op: syz.5.969 tries to shift op by -1; fix this program [ 157.670330][ T7929] loop3: detected capacity change from 0 to 32768 [ 157.685730][ T7957] loop0: detected capacity change from 0 to 128 [ 157.706958][ T7929] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.740597][ T7957] affs: No valid root block on device loop0 [ 158.015950][ T4057] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.046404][ T7957] loop0: detected capacity change from 0 to 4096 [ 158.069828][ T7929] XFS (loop3): Ending clean mount [ 158.109916][ T7929] XFS (loop3): Quotacheck needed: Please wait. [ 158.311654][ T7929] XFS (loop3): Quotacheck: Done. [ 158.315639][ T4057] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.529570][ T7953] loop2: detected capacity change from 0 to 40427 [ 158.587666][ T7953] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff [ 158.599405][ T7953] F2FS-fs (loop2): invalid crc value [ 158.600197][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.608271][ T7953] F2FS-fs (loop2): Found nat_bits in checkpoint [ 158.620020][ T7977] netlink: 'syz.1.977': attribute type 25 has an invalid length. [ 158.629780][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.638805][ T7977] netlink: 'syz.1.977': attribute type 7 has an invalid length. [ 158.646676][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.661612][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.671256][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.680357][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.816879][ T4057] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.831652][ T25] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 158.839706][ T7953] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 158.860853][ T29] audit: type=1800 audit(1728166616.774:27): pid=7953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.971" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 158.877444][ T6869] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.903042][ T7985] netlink: 'syz.1.980': attribute type 2 has an invalid length. [ 158.924347][ T5229] syz-executor: attempt to access beyond end of device [ 158.924347][ T5229] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.939782][ T7988] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.979'. [ 158.959252][ T5229] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 158.961878][ T7988] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 159.003148][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.036285][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.088659][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 159.098172][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.124722][ T25] usb 6-1: config 0 descriptor?? [ 159.188430][ T25] hub 6-1:0.0: USB hub found [ 159.220731][ T4057] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.399225][ T25] hub 6-1:0.0: 1 port detected [ 159.557184][ T7973] chnl_net:caif_netlink_parms(): no params data found [ 159.635540][ T25] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 159.688956][ T25] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 159.702424][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 159.710218][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 159.713594][ T4057] bridge_slave_1: left allmulticast mode [ 159.733792][ T25] usb 6-1: USB disconnect, device number 6 [ 159.744343][ T4057] bridge_slave_1: left promiscuous mode [ 159.750376][ T4057] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.767875][ T4057] bridge_slave_0: left allmulticast mode [ 159.783339][ T4057] bridge_slave_0: left promiscuous mode [ 159.796323][ T4057] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.921564][ T4640] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 160.095227][ T4640] usb 2-1: Using ep0 maxpacket: 8 [ 160.109157][ T4640] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.128902][ T4640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.160591][ T4640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.198336][ T4640] usb 2-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 160.207745][ T4640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.216732][ T4640] usb 2-1: Product: syz [ 160.221157][ T4640] usb 2-1: Manufacturer: syz [ 160.226014][ T4640] usb 2-1: SerialNumber: syz [ 160.236403][ T4640] usb 2-1: config 0 descriptor?? [ 160.454030][ T4640] radio-si470x 2-1:0.0: DeviceID=0x6256 ChipID=0x5900 [ 160.659066][ T4640] radio-si470x 2-1:0.0: software version 98, hardware version 86 [ 160.841782][ T5244] Bluetooth: hci1: command tx timeout [ 160.873606][ T4640] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 160.890310][ T4640] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 160.897941][ T4640] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 160.907522][ T4057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.916615][ T4640] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 160.937828][ T4640] usb 2-1: USB disconnect, device number 3 [ 160.945845][ T4057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.984450][ T4057] bond0 (unregistering): Released all slaves [ 161.057851][ T8022] tipc: Started in network mode [ 161.071861][ T8022] tipc: Node identity -name-of, cluster identity 4711 [ 161.078748][ T8022] tipc: Enabling of bearer rejected, failed to enable media [ 161.516400][ T7973] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.564110][ T8037] loop3: detected capacity change from 0 to 1024 [ 161.582987][ T7973] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.590330][ T7973] bridge_slave_0: entered allmulticast mode [ 161.616019][ T7973] bridge_slave_0: entered promiscuous mode [ 161.671341][ T7973] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.713876][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.721248][ T7973] bridge_slave_1: entered allmulticast mode [ 161.743765][ T8041] loop1: detected capacity change from 0 to 2048 [ 161.761141][ T7973] bridge_slave_1: entered promiscuous mode [ 161.831958][ T4057] mac80211_hwsim hwsim10 wlan0 (unregistering): left promiscuous mode [ 161.863145][ T8037] hfsplus: bad catalog entry type [ 161.893672][ T8041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.963714][ T8041] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.019214][ T61] hfsplus: b-tree write err: -5, ino 4 [ 162.159552][ T6778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.210438][ T8056] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1006'. [ 162.225574][ T8057] loop3: detected capacity change from 0 to 512 [ 162.334646][ T7973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.349713][ T8057] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1004: bg 0: block 393: padding at end of block bitmap is not set [ 162.378456][ T8062] raw_sendmsg: syz.1.1007 forgot to set AF_INET. Fix it! [ 162.386381][ T8057] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 162.451745][ T8057] EXT4-fs (loop3): 2 truncates cleaned up [ 162.458609][ T8057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.577981][ T8066] loop0: detected capacity change from 0 to 1024 [ 162.600184][ T4057] hsr_slave_0: left promiscuous mode [ 162.616563][ T4057] hsr_slave_1: left promiscuous mode [ 162.631591][ T4057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.659012][ T4057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.679783][ T8066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.722385][ T4057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.750539][ T4057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.860240][ T4057] dummy0: left promiscuous mode [ 162.881323][ T4057] veth1_macvtap: left promiscuous mode [ 162.900495][ T4057] veth0_macvtap: left promiscuous mode [ 162.916673][ T4057] veth1_vlan: left promiscuous mode [ 162.922742][ T5244] Bluetooth: hci1: command tx timeout [ 162.946124][ T4057] veth0_vlan: left promiscuous mode [ 163.406384][ T5232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.515825][ T8085] loop0: detected capacity change from 0 to 512 [ 163.542480][ T8085] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 163.632612][ T8085] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 163.649213][ T8085] System zones: 1-12 [ 163.662691][ T8085] EXT4-fs (loop0): 1 truncate cleaned up [ 163.672733][ T8085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.847801][ T5232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.006605][ T8093] input: syz0 as /devices/virtual/input/input21 [ 164.193357][ T4057] team0 (unregistering): Port device team_slave_1 removed [ 164.239253][ T4057] team0 (unregistering): Port device team_slave_0 removed [ 164.646530][ T7973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.798996][ T7973] team0: Port device team_slave_0 added [ 164.856115][ T7973] team0: Port device team_slave_1 added [ 164.865939][ T8104] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 164.882715][ T8104] netlink: 9380 bytes leftover after parsing attributes in process `syz.0.1027'. [ 164.925235][ T7973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.951556][ T7973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.011511][ T7973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.012497][ T5244] Bluetooth: hci1: command tx timeout [ 165.090458][ T7973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.122114][ T7973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.201753][ T7973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.457400][ T7973] hsr_slave_0: entered promiscuous mode [ 165.463617][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 165.496055][ T7973] hsr_slave_1: entered promiscuous mode [ 165.633279][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 165.657063][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 165.695814][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 104 [ 165.723174][ T25] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 165.741459][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.761732][ T25] usb 1-1: Product: syz [ 165.765952][ T25] usb 1-1: Manufacturer: syz [ 165.770572][ T25] usb 1-1: SerialNumber: syz [ 165.790957][ T25] usb 1-1: config 0 descriptor?? [ 165.807576][ T8115] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.817681][ T8108] loop5: detected capacity change from 0 to 32768 [ 165.823042][ T25] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input22 [ 166.077630][ T6869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.116290][ T8117] loop1: detected capacity change from 0 to 32768 [ 166.123838][ T8117] XFS: ikeep mount option is deprecated. [ 166.129861][ T8117] XFS: ikeep mount option is deprecated. [ 166.234814][ T25] usb 1-1: USB disconnect, device number 8 [ 166.267276][ T8117] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.570469][ T8117] XFS (loop1): Ending clean mount [ 166.588486][ T8117] XFS (loop1): Quotacheck needed: Please wait. [ 166.612169][ T29] audit: type=1326 audit(1728166624.524:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba7d7dff9 code=0x7ffc0000 [ 166.677102][ T29] audit: type=1326 audit(1728166624.534:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba7d7dff9 code=0x7ffc0000 [ 166.700886][ T29] audit: type=1326 audit(1728166624.534:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f1ba7d7dff9 code=0x7ffc0000 [ 166.723267][ T29] audit: type=1326 audit(1728166624.534:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba7d7dff9 code=0x7ffc0000 [ 166.746107][ T29] audit: type=1326 audit(1728166624.534:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba7d7dff9 code=0x7ffc0000 [ 166.753304][ T7973] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.821929][ T8117] XFS (loop1): Quotacheck: Done. [ 166.852592][ T8117] XFS (loop1): User initiated shutdown received. [ 166.859358][ T8117] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:457). Shutting down filesystem. [ 166.887383][ T8117] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 166.894801][ T7973] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.955332][ T7973] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.962411][ T6778] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.995746][ T7973] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.082337][ T5244] Bluetooth: hci1: command tx timeout [ 167.099941][ T4640] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 167.271552][ T4640] usb 3-1: Using ep0 maxpacket: 8 [ 167.278282][ T8161] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1051'. [ 167.300371][ T4640] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 167.319415][ T4640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.323957][ T7973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.349319][ T8163] loop5: detected capacity change from 0 to 1024 [ 167.356134][ T4640] usb 3-1: Product: syz [ 167.365469][ T4640] usb 3-1: Manufacturer: syz [ 167.370112][ T4640] usb 3-1: SerialNumber: syz [ 167.383322][ T7973] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.423785][ T4640] usb 3-1: config 0 descriptor?? [ 167.433050][ T7973] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.443572][ T7973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.467525][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.474765][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.515338][ T4640] gspca_main: se401-2.14.0 probing 047d:5003 [ 167.549262][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.556469][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.886951][ T7973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.961652][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 167.981496][ T5236] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 168.076362][ T8183] loop5: detected capacity change from 0 to 2048 [ 168.102933][ T8183] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 168.119847][ T9] usb 4-1: config index 0 descriptor too short (expected 106, got 36) [ 168.131865][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.154482][ T8183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.156033][ T5236] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 168.191991][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.203238][ T5236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.224405][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 168.239290][ T5236] usb 1-1: config 0 descriptor?? [ 168.245058][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.255169][ T5236] cp210x 1-1:0.0: cp210x converter detected [ 168.269080][ T9] usb 4-1: config 0 descriptor?? [ 168.367130][ T7973] veth0_vlan: entered promiscuous mode [ 168.384789][ T4640] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 168.402269][ T7973] veth1_vlan: entered promiscuous mode [ 168.457173][ T7973] veth0_macvtap: entered promiscuous mode [ 168.467944][ T7973] veth1_macvtap: entered promiscuous mode [ 168.491060][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.501663][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.511830][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.522740][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.532828][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.543618][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.553732][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.564452][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.574537][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.585071][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.597637][ T7973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.608414][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.618951][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.628868][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.639387][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.649478][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.660017][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.669946][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.680496][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.690815][ T7973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.701789][ T7973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.713459][ T7973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.726725][ T5236] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 168.737859][ T7973] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.750119][ T9] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 168.757397][ T9] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 168.765306][ T7973] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.774339][ T9] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 168.781697][ T7973] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.791290][ T7973] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.800927][ T9] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 168.808736][ T9] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 168.824233][ T9] corsair 0003:1B1C:1B3E.0009: failed to start in urb: -90 [ 168.831560][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 168.835841][ T5236] usb 1-1: cp210x converter now attached to ttyUSB0 [ 168.862405][ T9] corsair 0003:1B1C:1B3E.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 168.974592][ T9] usb 4-1: USB disconnect, device number 7 [ 169.000584][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.018235][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.022026][ T5236] usb 1-1: USB disconnect, device number 9 [ 169.041981][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.043973][ T5236] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 169.052251][ T4640] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 169.063761][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.088695][ T25] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 169.108366][ T4640] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 169.115727][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.121420][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 169.140078][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.143493][ T4640] usb 3-1: USB disconnect, device number 8 [ 169.149760][ T5236] cp210x 1-1:0.0: device disconnected [ 169.153544][ T25] usb 2-1: SerialNumber: syz [ 169.350363][ T8191] loop5: detected capacity change from 0 to 32768 [ 169.411132][ T25] usb 2-1: 0:2 : does not exist [ 169.450469][ T25] usb 2-1: USB disconnect, device number 4 [ 169.645727][ T8202] loop3: detected capacity change from 0 to 512 [ 169.712577][ T8202] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.802858][ T8211] IPVS: Error connecting to the multicast addr [ 169.837880][ T8202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.878962][ T8202] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.181284][ T8225] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1073'. [ 170.195743][ T8227] input: syz0 as /devices/virtual/input/input23 [ 170.216250][ T6869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.621697][ T8215] loop4: detected capacity change from 0 to 40427 [ 170.640153][ T8215] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 170.677491][ T8215] F2FS-fs (loop4): invalid crc value [ 170.691584][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 170.695462][ T8239] ceph: missing cluster fsid [ 170.719126][ T8239] ceph: separator ':' missing in source [ 170.727580][ T8215] F2FS-fs (loop4): Found nat_bits in checkpoint [ 170.735704][ T8243] loop0: detected capacity change from 0 to 2048 [ 170.784159][ T8243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.858706][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 170.863659][ T8250] loop1: detected capacity change from 0 to 512 [ 170.891493][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.899553][ T9] usb 3-1: Product: syz [ 170.921022][ T9] usb 3-1: Manufacturer: syz [ 170.925000][ T5232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.926040][ T9] usb 3-1: SerialNumber: syz [ 170.957859][ T8250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.960922][ T9] usb 3-1: config 0 descriptor?? [ 170.978938][ T8209] loop5: detected capacity change from 0 to 40427 [ 170.981873][ T8215] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 170.995312][ T8250] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.013310][ T8209] F2FS-fs (loop5): Invalid log blocks per segment (4278190089) [ 171.041058][ T8209] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 171.045088][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 171.071539][ T8209] F2FS-fs (loop5): invalid crc value [ 171.106801][ T8209] F2FS-fs (loop5): Found nat_bits in checkpoint [ 171.131758][ T8215] F2FS-fs (loop4): access invalid blkaddr:2816 [ 171.138153][ T8215] CPU: 0 UID: 0 PID: 8215 Comm: syz.4.1069 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 171.148853][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.158927][ T8215] Call Trace: [ 171.162230][ T8215] [ 171.165177][ T8215] dump_stack_lvl+0x241/0x360 [ 171.169893][ T8215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.175117][ T8215] ? __pfx_f2fs_get_dnode_of_data+0x10/0x10 [ 171.181059][ T8215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.186719][ T8215] ? validate_chain+0x11e/0x5920 [ 171.191695][ T8215] __f2fs_is_valid_blkaddr+0xe16/0x1460 [ 171.197282][ T8215] f2fs_map_blocks+0xdd4/0x4f10 [ 171.202154][ T8215] ? mark_lock+0x9a/0x360 [ 171.206551][ T8215] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 171.211858][ T8215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.217507][ T8215] ? xa_load+0x2dd/0x350 [ 171.221777][ T8215] ? __pfx_xa_load+0x10/0x10 [ 171.226404][ T8215] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 171.232137][ T8215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.237779][ T8215] ? folio_index+0xab/0x350 [ 171.242312][ T8215] f2fs_mpage_readpages+0xcae/0x2140 [ 171.247653][ T8215] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 171.253399][ T8215] ? __folio_batch_add_and_move+0x81a/0xf00 [ 171.259306][ T8215] ? __pfx_lock_release+0x10/0x10 [ 171.264358][ T8215] ? rcu_is_watching+0x15/0xb0 [ 171.269156][ T8215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.274811][ T8215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.280455][ T8215] ? f2fs_readahead+0x184/0x340 [ 171.285329][ T8215] read_pages+0x180/0x840 [ 171.289679][ T8215] ? percpu_ref_put+0x19/0x180 [ 171.294467][ T8215] ? __pfx_read_pages+0x10/0x10 [ 171.299430][ T8215] ? filemap_add_folio+0x26d/0x650 [ 171.304657][ T8215] ? __pfx_filemap_add_folio+0x10/0x10 [ 171.310136][ T8215] ? lock_is_held_type+0x13b/0x190 [ 171.315282][ T8215] page_cache_ra_unbounded+0x774/0x8a0 [ 171.320779][ T8215] f2fs_readdir+0x5b9/0xbf0 [ 171.325304][ T8215] ? __pfx___might_resched+0x10/0x10 [ 171.330627][ T8215] ? __pfx_f2fs_readdir+0x10/0x10 [ 171.335669][ T8215] ? trace_contention_end+0x3c/0x120 [ 171.340972][ T8215] ? iterate_dir+0x20c/0x800 [ 171.345573][ T8215] ? __pfx_lock_release+0x10/0x10 [ 171.350627][ T8215] ? fdget_pos+0x24e/0x320 [ 171.355063][ T8215] ? end_current_label_crit_section+0x151/0x180 [ 171.361319][ T8215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.366961][ T8215] ? common_file_perm+0x1a6/0x210 [ 171.372006][ T8215] iterate_dir+0x573/0x800 [ 171.376429][ T8215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.382076][ T8215] __se_sys_getdents64+0x1d3/0x4a0 [ 171.387289][ T8215] ? __pfx___se_sys_getdents64+0x10/0x10 [ 171.392929][ T8215] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 171.398930][ T8215] ? __pfx_filldir64+0x10/0x10 [ 171.403708][ T8215] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.410057][ T8215] ? do_syscall_64+0x100/0x230 [ 171.414831][ T8215] ? do_syscall_64+0xb6/0x230 [ 171.419517][ T8215] do_syscall_64+0xf3/0x230 [ 171.424030][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.429941][ T8215] RIP: 0033:0x7f2836d7dff9 [ 171.434361][ T8215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.453974][ T8215] RSP: 002b:00007f2837b4b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 171.462402][ T8215] RAX: ffffffffffffffda RBX: 00007f2836f35f80 RCX: 00007f2836d7dff9 [ 171.470388][ T8215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 171.478369][ T8215] RBP: 00007f2836df0296 R08: 0000000000000000 R09: 0000000000000000 [ 171.486346][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.494327][ T8215] R13: 0000000000000000 R14: 00007f2836f35f80 R15: 00007ffcba5b27f8 [ 171.502325][ T8215] [ 171.572787][ T8215] F2FS-fs (loop4): access invalid blkaddr:2816 [ 171.581119][ T8215] CPU: 1 UID: 0 PID: 8215 Comm: syz.4.1069 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 171.591823][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.601896][ T8215] Call Trace: [ 171.605189][ T8215] [ 171.608149][ T8215] dump_stack_lvl+0x241/0x360 [ 171.612864][ T8215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.618093][ T8215] ? __pfx_f2fs_get_dnode_of_data+0x10/0x10 [ 171.624049][ T8215] __f2fs_is_valid_blkaddr+0xe16/0x1460 [ 171.629634][ T8215] f2fs_map_blocks+0xdd4/0x4f10 [ 171.634507][ T8215] ? mark_lock+0x9a/0x360 [ 171.638922][ T8215] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 171.644240][ T8215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.649899][ T8215] ? xa_load+0x2dd/0x350 [ 171.654185][ T8215] ? __pfx_xa_load+0x10/0x10 [ 171.658822][ T8215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.664465][ T8215] ? folio_index+0xab/0x350 [ 171.669097][ T8215] f2fs_mpage_readpages+0xcae/0x2140 [ 171.674457][ T8215] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 171.680221][ T8215] ? __folio_batch_add_and_move+0x81a/0xf00 [ 171.686140][ T8215] ? __pfx_lock_release+0x10/0x10 [ 171.691207][ T8215] ? rcu_is_watching+0x15/0xb0 [ 171.696028][ T8215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.701692][ T8215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.707350][ T8215] ? f2fs_readahead+0x184/0x340 [ 171.712248][ T8215] read_pages+0x180/0x840 [ 171.716616][ T8215] ? percpu_ref_put+0x19/0x180 [ 171.721425][ T8215] ? __pfx_read_pages+0x10/0x10 [ 171.726314][ T8215] ? filemap_add_folio+0x26d/0x650 [ 171.731471][ T8215] ? __pfx_filemap_add_folio+0x10/0x10 [ 171.736973][ T8215] ? lock_is_held_type+0x13b/0x190 [ 171.742136][ T8215] page_cache_ra_unbounded+0x774/0x8a0 [ 171.747655][ T8215] f2fs_readdir+0x5b9/0xbf0 [ 171.752193][ T8215] ? __pfx___might_resched+0x10/0x10 [ 171.757549][ T8215] ? __pfx_f2fs_readdir+0x10/0x10 [ 171.762611][ T8215] ? trace_contention_end+0x3c/0x120 [ 171.767936][ T8215] ? iterate_dir+0x20c/0x800 [ 171.772553][ T8215] ? __pfx_lock_release+0x10/0x10 [ 171.777621][ T8215] ? fdget_pos+0x24e/0x320 [ 171.782071][ T8215] ? end_current_label_crit_section+0x151/0x180 [ 171.788344][ T8215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.794006][ T8215] ? common_file_perm+0x1a6/0x210 [ 171.799066][ T8215] iterate_dir+0x573/0x800 [ 171.803510][ T8215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.809173][ T8215] __se_sys_getdents64+0x1d3/0x4a0 [ 171.814329][ T8215] ? __pfx___se_sys_getdents64+0x10/0x10 [ 171.819987][ T8215] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 171.826092][ T8215] ? __pfx_filldir64+0x10/0x10 [ 171.830885][ T8215] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.837256][ T8215] ? do_syscall_64+0x100/0x230 [ 171.842049][ T8215] ? do_syscall_64+0xb6/0x230 [ 171.845094][ T6778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.846734][ T8215] do_syscall_64+0xf3/0x230 [ 171.860296][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.866239][ T8215] RIP: 0033:0x7f2836d7dff9 [ 171.870676][ T8215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.890306][ T8215] RSP: 002b:00007f2837b4b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 171.898738][ T8215] RAX: ffffffffffffffda RBX: 00007f2836f35f80 RCX: 00007f2836d7dff9 [ 171.906722][ T8215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 171.914702][ T8215] RBP: 00007f2836df0296 R08: 0000000000000000 R09: 0000000000000000 [ 171.922684][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.930660][ T8215] R13: 0000000000000000 R14: 00007f2836f35f80 R15: 00007ffcba5b27f8 [ 171.938660][ T8215] [ 171.955415][ T8215] syz.4.1069: attempt to access beyond end of device [ 171.955415][ T8215] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 171.991195][ T9] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 171.998843][ T9] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 172.023386][ T8209] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 172.040723][ T8209] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 172.051107][ T9] usb 3-1: USB disconnect, device number 9 [ 172.153299][ T7973] syz-executor: attempt to access beyond end of device [ 172.153299][ T7973] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.194652][ T8209] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 172.204387][ T7973] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 172.444916][ T6543] syz-executor: attempt to access beyond end of device [ 172.444916][ T6543] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.494594][ T6543] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 172.737667][ T8275] loop0: detected capacity change from 0 to 256 [ 172.788757][ T8279] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 172.815244][ T8279] team0: Device ipvlan2 failed to register rx_handler [ 173.099011][ T8285] loop2: detected capacity change from 0 to 512 [ 173.183685][ T8285] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1097: corrupted in-inode xattr: invalid ea_ino [ 173.258865][ T8285] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1097: couldn't read orphan inode 15 (err -117) [ 173.296901][ T8285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.326067][ T8290] loop0: detected capacity change from 0 to 2048 [ 173.380176][ T8298] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.409322][ T29] audit: type=1800 audit(1728166631.324:33): pid=8290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1098" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 173.574354][ T5229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.786113][ T8311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1105'. [ 173.801961][ T4640] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 173.953433][ T8315] loop2: detected capacity change from 0 to 128 [ 174.320317][ T8321] loop0: detected capacity change from 0 to 16 [ 174.331608][ T4640] usb 5-1: Using ep0 maxpacket: 16 [ 174.359054][ T8321] erofs: (device loop0): mounted with root inode @ nid 36. [ 174.395544][ T8324] mmap: syz.1.1112 (8324) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 174.431566][ T8321] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 174.480255][ T8321] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 174.530602][ T8326] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1113'. [ 174.540424][ T8326] unsupported nlmsg_type 40 [ 174.568190][ T8327] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 174.576984][ T8321] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 123 of nid 36 [ 174.592418][ T4640] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.622740][ T29] audit: type=1800 audit(1728166632.544:34): pid=8315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1108" name="file2" dev="loop2" ino=1048630 res=0 errno=0 [ 174.626326][ T4640] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 174.701876][ T4640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.709934][ T4640] usb 5-1: Product: syz [ 174.728970][ T29] audit: type=1804 audit(1728166632.644:35): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1108" name="/newroot/192/file0/file2" dev="loop2" ino=1048630 res=1 errno=0 [ 174.741427][ T4640] usb 5-1: Manufacturer: syz [ 174.802841][ T4640] usb 5-1: SerialNumber: syz [ 174.812549][ T4640] usb 5-1: config 0 descriptor?? [ 175.037941][ T8333] loop2: detected capacity change from 0 to 2048 [ 175.079880][ T8309] loop5: detected capacity change from 0 to 40427 [ 175.090638][ T8333] EXT4-fs (loop2): stripe (1025) is not aligned with cluster size (16), stripe is disabled [ 175.109151][ T8309] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 175.120093][ T8309] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 175.138408][ T8309] F2FS-fs (loop5): invalid crc value [ 175.183897][ T8309] F2FS-fs (loop5): Found nat_bits in checkpoint [ 175.231596][ T4640] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 175.238047][ T4640] usb 5-1: No valid video chain found. [ 175.370263][ T8309] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 175.384489][ T8309] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 175.443147][ T5283] usb 5-1: USB disconnect, device number 11 [ 175.484773][ T6543] syz-executor: attempt to access beyond end of device [ 175.484773][ T6543] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 175.506349][ T6543] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 175.584050][ T8339] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 175.604252][ T8333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.771968][ T4640] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 175.800077][ T8333] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 175.825856][ T8333] EXT4-fs (loop2): Remounting filesystem read-only [ 175.935540][ T4640] usb 1-1: Using ep0 maxpacket: 8 [ 175.942812][ T4640] usb 1-1: config 0 has no interfaces? [ 175.950835][ T4640] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.991441][ T4640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.009970][ T4640] usb 1-1: Product: syz [ 176.014656][ T4640] usb 1-1: Manufacturer: syz [ 176.019283][ T4640] usb 1-1: SerialNumber: syz [ 176.042515][ T4640] usb 1-1: config 0 descriptor?? [ 176.063251][ T5229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.255550][ T4640] usb 1-1: USB disconnect, device number 10 [ 176.349184][ T8356] could not allocate digest TFM handle sha512-neon [ 176.690123][ T8374] loop5: detected capacity change from 0 to 256 [ 176.742589][ T8374] FAT-fs (loop5): Directory bread(block 64) failed [ 176.765456][ T8374] FAT-fs (loop5): Directory bread(block 65) failed [ 176.808172][ T8374] FAT-fs (loop5): Directory bread(block 66) failed [ 176.821633][ T8374] FAT-fs (loop5): Directory bread(block 67) failed [ 176.828276][ T8374] FAT-fs (loop5): Directory bread(block 68) failed [ 176.837215][ T8374] FAT-fs (loop5): Directory bread(block 69) failed [ 176.844397][ T8374] FAT-fs (loop5): Directory bread(block 70) failed [ 176.851020][ T8374] FAT-fs (loop5): Directory bread(block 71) failed [ 176.857683][ T8374] FAT-fs (loop5): Directory bread(block 72) failed [ 176.864498][ T8374] FAT-fs (loop5): Directory bread(block 73) failed [ 176.900103][ T8374] FAT-fs (loop5): Filesystem has been set read-only [ 176.908511][ T29] audit: type=1800 audit(1728166634.824:36): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1129" name="cpu.stat" dev="loop5" ino=1048631 res=0 errno=0 [ 176.909747][ T8374] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006c61) [ 177.037129][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.200950][ T8390] netlink: 'syz.2.1138': attribute type 2 has an invalid length. [ 177.239448][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 177.289329][ T8391] bridge_slave_0: left allmulticast mode [ 177.295351][ T8391] bridge_slave_0: left promiscuous mode [ 177.301096][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.402315][ T8402] loop1: detected capacity change from 0 to 256 [ 177.437917][ T8402] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 177.471089][ T8402] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 177.489347][ T8402] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 177.510551][ T8402] UDF-fs: Scanning with blocksize 512 failed [ 177.526080][ T8406] tipc: Started in network mode [ 177.533825][ T8402] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 177.550173][ T8406] tipc: Node identity str_len:, cluster identity 4711 [ 177.559828][ T8402] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.572879][ T8406] tipc: Enabling of bearer rejected, failed to enable media [ 177.684826][ T8408] loop3: detected capacity change from 0 to 4096 [ 177.700679][ T8408] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 177.749315][ T8408] ntfs3: loop3: Failed to load $Extend (-22). [ 177.766089][ T8408] ntfs3: loop3: Failed to initialize $Extend. [ 177.767701][ T8415] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1148'. [ 178.079760][ T8426] loop4: detected capacity change from 0 to 64 [ 178.122062][ T8398] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 178.495094][ T8445] loop5: detected capacity change from 0 to 256 [ 178.533176][ T8445] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 178.568950][ T8445] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 178.598932][ T8445] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 178.620246][ T8445] UDF-fs: Scanning with blocksize 512 failed [ 178.638570][ T8445] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 178.671267][ T8445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.692862][ T8455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1167'. [ 178.716364][ T8445] Process accounting resumed [ 178.881330][ T8457] loop2: detected capacity change from 0 to 2048 [ 178.883943][ T8459] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1169'. [ 178.976962][ T8464] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.012377][ T8457] NILFS error (device loop2): nilfs_readdir: zero-length directory entry [ 179.062653][ T8457] Remounting filesystem read-only [ 179.802775][ T8492] nbd: nbd4 already in use [ 180.008027][ T8472] loop0: detected capacity change from 0 to 32768 [ 180.410401][ T8483] loop3: detected capacity change from 0 to 32768 [ 180.431968][ T8472] XFS (loop0): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 180.448865][ T8510] loop1: detected capacity change from 0 to 1024 [ 180.461639][ T5283] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 180.658692][ T8472] XFS (loop0): Quotacheck needed: Please wait. [ 180.708057][ T8527] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1193'. [ 180.816430][ T8515] loop2: detected capacity change from 0 to 32768 [ 180.835370][ T8510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.872853][ T9] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 [ 180.890860][ T8483] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 180.916216][ T8515] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.936252][ T9] XFS (loop0): Unmount and run xfs_repair [ 180.963996][ T9] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 180.992378][ T5283] usb 5-1: config index 0 descriptor too short (expected 106, got 36) [ 181.007645][ T9] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 181.010888][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.038880][ T5283] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 181.049061][ T9] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 181.049108][ T9] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 181.049131][ T9] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 181.085948][ T9] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 181.092880][ T6778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.095413][ T9] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 181.114794][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 181.127869][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.128472][ T9] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 181.158550][ T8515] XFS (loop2): Ending clean mount [ 181.168496][ T5283] usb 5-1: config 0 descriptor?? [ 181.214895][ T8483] XFS (loop3): Ending clean mount [ 181.225480][ T4057] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74 [ 181.255539][ T8483] XFS (loop3): Quotacheck needed: Please wait. [ 181.283792][ T4057] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 181.312348][ T8483] XFS (loop3): Quotacheck: Done. [ 181.318941][ T4057] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 181.328880][ T5229] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 181.437275][ T8529] loop5: detected capacity change from 0 to 32768 [ 181.445798][ T8529] XFS: ikeep mount option is deprecated. [ 181.448105][ T6869] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.461128][ T8472] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 181.541460][ T5232] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.589617][ T8529] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 181.746024][ T8529] XFS (loop5): Ending clean mount [ 181.758466][ T8529] XFS (loop5): Quotacheck needed: Please wait. [ 182.041821][ T8529] XFS (loop5): Quotacheck: Done. [ 182.594553][ T6543] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 182.694949][ T8563] loop3: detected capacity change from 0 to 128 [ 182.828432][ T8563] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.975314][ T8563] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.607953][ T8572] loop2: detected capacity change from 0 to 4096 [ 183.731475][ T6869] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.766127][ T8576] loop0: detected capacity change from 0 to 256 [ 183.983070][ T8576] FAT-fs (loop0): Directory bread(block 64) failed [ 184.002941][ T8581] block nbd5: shutting down sockets [ 184.023955][ T8576] FAT-fs (loop0): Directory bread(block 65) failed [ 184.068959][ T8576] FAT-fs (loop0): Directory bread(block 66) failed [ 184.101718][ T8576] FAT-fs (loop0): Directory bread(block 67) failed [ 184.152911][ T8576] FAT-fs (loop0): Directory bread(block 68) failed [ 184.185667][ T8576] FAT-fs (loop0): Directory bread(block 69) failed [ 184.230271][ T8576] FAT-fs (loop0): Directory bread(block 70) failed [ 184.266653][ T8576] FAT-fs (loop0): Directory bread(block 71) failed [ 184.287236][ T8576] FAT-fs (loop0): Directory bread(block 72) failed [ 184.321908][ T8576] FAT-fs (loop0): Directory bread(block 73) failed [ 185.161782][ T29] audit: type=1326 audit(1728166642.984:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cdd7dff9 code=0x7ffc0000 [ 185.248051][ T29] audit: type=1326 audit(1728166643.004:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa3cdd7dff9 code=0x7ffc0000 [ 185.353836][ T29] audit: type=1326 audit(1728166643.004:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cdd7dff9 code=0x7ffc0000 [ 185.455134][ T29] audit: type=1326 audit(1728166643.004:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cdd7dff9 code=0x7ffc0000 [ 185.556881][ T29] audit: type=1326 audit(1728166643.004:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa3cdd7dff9 code=0x7ffc0000 [ 185.659439][ T29] audit: type=1326 audit(1728166643.004:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cdd7dff9 code=0x7ffc0000 [ 185.790251][ T29] audit: type=1326 audit(1728166643.004:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cdd7dff9 code=0x7ffc0000 [ 185.916267][ T29] audit: type=1326 audit(1728166643.004:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa3cdd7dff9 code=0x7ffc0000 [ 186.043219][ T29] audit: type=1326 audit(1728166643.004:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cdd7dff9 code=0x7ffc0000 [ 186.164503][ T29] audit: type=1326 audit(1728166643.004:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.5.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cdd7dff9 code=0x7ffc0000 [ 186.489193][ T8612] loop0: detected capacity change from 0 to 64 [ 186.696558][ T8600] loop5: detected capacity change from 0 to 32768 [ 186.751081][ T8600] find_entry called with index >= next_index [ 186.773929][ T8600] find_entry called with index >= next_index [ 186.788807][ T8600] find_entry called with index >= next_index [ 186.821904][ T8615] jfs: Unrecognized mount option "00000000000000000000004 Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔" or missing value [ 187.532842][ T8572] ntfs3: loop2: Failed to read $UpCase (-4). [ 189.385925][ T5283] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x0 [ 189.427086][ T8643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1235'. [ 189.466671][ T5283] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x0 [ 189.567792][ T8645] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 189.594286][ T8624] loop0: detected capacity change from 0 to 40427 [ 189.618742][ T8645] pim6reg0: linktype set to 804 [ 189.645092][ T8625] loop5: detected capacity change from 0 to 40427 [ 189.651253][ T5283] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x0 [ 189.671706][ T8624] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 189.698368][ T8625] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 189.707489][ T5283] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x0 [ 189.722617][ T8624] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 189.737187][ T8625] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 189.767850][ T8624] F2FS-fs (loop0): Found nat_bits in checkpoint [ 189.820739][ T8625] F2FS-fs (loop5): Found nat_bits in checkpoint [ 190.084561][ T8624] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 190.123966][ T8624] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 190.141575][ T8625] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 190.158273][ T5283] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x0 [ 190.201343][ T8625] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 190.557987][ T29] audit: type=1804 audit(1728166648.474:47): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1225" name="/newroot/133/bus/file0" dev="loop5" ino=10 res=1 errno=0 [ 191.389161][ T8647] loop1: detected capacity change from 0 to 32768 [ 191.509051][ T8647] ERROR: (device loop1): diAllocBit: iag inconsistent [ 191.509051][ T8647] [ 191.584631][ T8647] ialloc: diAlloc returned -5! [ 191.624684][ T8667] loop4: detected capacity change from 0 to 64 [ 191.733333][ T29] audit: type=1800 audit(1728166649.654:48): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1244" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 191.867738][ T29] audit: type=1800 audit(1728166649.674:49): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1244" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 192.636249][ T8682] loop1: detected capacity change from 0 to 256 [ 192.961183][ T9] kernel write not supported for file /media0 (pid: 9 comm: kworker/0:1) [ 193.600716][ T8669] loop2: detected capacity change from 0 to 32768 [ 193.728943][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.735494][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.755761][ T29] audit: type=1800 audit(1728166651.674:50): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1245" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 193.883572][ T5283] corsair 0003:1B1C:1B3E.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 194.083844][ T29] audit: type=1800 audit(1728166652.004:51): pid=8692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1245" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 194.203430][ T8695] netem: unknown loss type 0 [ 194.208770][ T8695] netem: change failed [ 194.601596][ T5294] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 194.826530][ T5294] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 194.857616][ T8678] loop4: detected capacity change from 0 to 32768 [ 194.884822][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.944378][ T5294] usb 4-1: config 0 descriptor?? [ 194.974711][ T8678] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 195.032732][ T5294] cp210x 4-1:0.0: cp210x converter detected [ 195.304754][ T8678] XFS (loop4): Starting recovery (logdev: internal) [ 195.442144][ T8678] XFS (loop4): Ending recovery (logdev: internal) [ 195.474586][ T8722] loop2: detected capacity change from 0 to 256 [ 195.518302][ T5294] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 195.611665][ T5294] usb 4-1: cp210x converter now attached to ttyUSB0 [ 195.636399][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:1) [ 195.746235][ T7973] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 195.794968][ T9] usb 4-1: USB disconnect, device number 8 [ 195.847450][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 196.041845][ T9] cp210x 4-1:0.0: device disconnected [ 196.294452][ T8732] loop0: detected capacity change from 0 to 128 [ 196.656128][ T8736] loop2: detected capacity change from 0 to 512 [ 196.781732][ T8736] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 197.428046][ T8751] loop5: detected capacity change from 0 to 512 [ 197.464333][ T8751] EXT4-fs: Ignoring removed oldalloc option [ 197.520453][ T8751] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.612415][ T8751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 197.698594][ T8751] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.939834][ T5236] kernel read not supported for file /newroot/100/file0 (pid: 5236 comm: kworker/0:3) [ 198.092584][ T6543] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 199.268561][ T8781] netlink: 'syz.5.1288': attribute type 11 has an invalid length. [ 199.961663][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 200.041960][ T8791] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 200.092102][ T8794] netlink: 'syz.2.1294': attribute type 10 has an invalid length. [ 200.145028][ T8791] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 200.171972][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 200.192710][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 200.213354][ T8794] lo: entered promiscuous mode [ 200.244731][ T8794] lo: entered allmulticast mode [ 200.251755][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.298009][ T8794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.324577][ T9] usb 4-1: config 0 descriptor?? [ 200.400977][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 201.301515][ T9] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 201.372167][ T9] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 201.423013][ T9] usb 4-1: USB disconnect, device number 9 [ 202.129336][ T8789] loop0: detected capacity change from 0 to 32768 [ 202.278002][ T8789] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.576299][ T8789] XFS (loop0): Ending clean mount [ 202.775289][ T8789] XFS (loop0): Quotacheck needed: Please wait. [ 203.003444][ T8789] XFS (loop0): Quotacheck: Done. [ 203.197863][ T5232] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.356222][ T8804] loop4: detected capacity change from 0 to 40427 [ 203.427339][ T8804] F2FS-fs (loop4): Found nat_bits in checkpoint [ 203.727915][ T8804] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 204.003847][ T7973] syz-executor: attempt to access beyond end of device [ 204.003847][ T7973] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 204.081180][ T7973] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 204.117363][ T24] sched: DL replenish lagged too much [ 206.443914][ T8847] loop1: detected capacity change from 0 to 32768 [ 206.464490][ T8847] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1314 (8847) [ 206.497700][ T8847] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 206.516523][ T8847] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 206.529428][ T8847] BTRFS info (device loop1): using free-space-tree [ 206.750642][ T6778] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.971662][ T5294] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 208.145727][ T5294] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 208.161087][ T5294] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 208.169417][ T5294] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 208.187751][ T5294] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 208.210554][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 8293, setting to 8 [ 208.229268][ T5294] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 208.255840][ T5294] usb 2-1: string descriptor 0 read error: -22 [ 208.269244][ T5294] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 208.278471][ T5294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.298716][ T5294] usb 2-1: config 0 descriptor?? [ 208.305395][ T8869] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.322588][ T5294] hub 2-1:0.0: bad descriptor, ignoring hub [ 208.330923][ T5294] hub 2-1:0.0: probe with driver hub failed with error -5 [ 208.347989][ T5294] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 208.660716][ T5294] usb 2-1: USB disconnect, device number 5 [ 209.420037][ T8873] loop1: detected capacity change from 0 to 2048 [ 209.449393][ T8874] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 209.507355][ T8873] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 209.539844][ T8873] Remounting filesystem read-only [ 210.287454][ T5253] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.299149][ T5253] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.307910][ T5253] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.319119][ T5253] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.326860][ T5253] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.334323][ T5253] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.361734][ T5253] Bluetooth: hci6: command tx timeout [ 213.251650][ T5244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.269285][ T5244] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.281764][ T5244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.294572][ T5244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.302332][ T5244] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.309630][ T5244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.387016][ T5253] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 213.408655][ T5253] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 213.421739][ T5253] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 213.437137][ T5253] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 213.445010][ T5253] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 213.452583][ T5253] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 214.441629][ T5253] Bluetooth: hci6: command tx timeout [ 215.156707][ T5244] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 215.167658][ T5244] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 215.182877][ T5244] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 215.190866][ T5244] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 215.198549][ T5244] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 215.209560][ T5244] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 215.260274][ T5253] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 215.269947][ T5253] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 215.279516][ T5253] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 215.292231][ T5253] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 215.300123][ T5253] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 215.307676][ T5253] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 215.401688][ T5253] Bluetooth: hci7: command tx timeout [ 215.561827][ T5253] Bluetooth: hci8: command tx timeout [ 216.523040][ T5253] Bluetooth: hci6: command tx timeout [ 217.241809][ T5253] Bluetooth: hci9: command tx timeout [ 217.401959][ T5253] Bluetooth: hci10: command tx timeout [ 217.482877][ T5253] Bluetooth: hci7: command tx timeout [ 217.641654][ T5253] Bluetooth: hci8: command tx timeout [ 218.601826][ T5253] Bluetooth: hci6: command tx timeout [ 219.322902][ T5253] Bluetooth: hci9: command tx timeout [ 219.481609][ T5253] Bluetooth: hci10: command tx timeout [ 219.561595][ T5253] Bluetooth: hci7: command tx timeout [ 219.723263][ T5253] Bluetooth: hci8: command tx timeout [ 220.590626][ T5244] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 220.609034][ T5244] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 220.618114][ T5244] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 220.626389][ T5244] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 220.634205][ T5244] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 220.641794][ T5244] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 221.401758][ T5244] Bluetooth: hci9: command tx timeout [ 221.561622][ T5244] Bluetooth: hci10: command tx timeout [ 221.641523][ T5244] Bluetooth: hci7: command tx timeout [ 221.801670][ T5244] Bluetooth: hci8: command tx timeout [ 222.681698][ T5244] Bluetooth: hci11: command tx timeout [ 223.481711][ T5244] Bluetooth: hci9: command tx timeout [ 223.641663][ T5244] Bluetooth: hci10: command tx timeout [ 224.762921][ T5244] Bluetooth: hci11: command tx timeout [ 226.841527][ T5244] Bluetooth: hci11: command tx timeout [ 228.921688][ T5244] Bluetooth: hci11: command tx timeout [ 241.731444][ T8849] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1308'. [ 241.832715][ T8849] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1308'. [ 241.904613][ T5253] Bluetooth: hci4: command 0x0406 tx timeout [ 245.083495][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.064571][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.417411][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.852808][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.418461][ T68] bridge_slave_1: left allmulticast mode [ 251.427652][ T68] bridge_slave_1: left promiscuous mode [ 251.439520][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.810498][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.923147][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.992652][ T68] bond0 (unregistering): Released all slaves [ 255.168642][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.175193][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.074171][ T5253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.088845][ T5253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.099074][ T5253] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.114180][ T5253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.129648][ T5253] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.139799][ T5253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.394168][ T8902] chnl_net:caif_netlink_parms(): no params data found [ 271.614030][ T8902] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.622661][ T8902] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.629860][ T8902] bridge_slave_0: entered allmulticast mode [ 271.644238][ T8902] bridge_slave_0: entered promiscuous mode [ 271.659857][ T8902] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.667179][ T8902] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.682131][ T8902] bridge_slave_1: entered allmulticast mode [ 271.698727][ T8902] bridge_slave_1: entered promiscuous mode [ 271.824115][ T8902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.848986][ T8902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.007839][ T8902] team0: Port device team_slave_0 added [ 272.023318][ T8902] team0: Port device team_slave_1 added [ 272.181477][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.188475][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.224523][ T8902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.247477][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.259067][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.294264][ T8902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.434495][ T8902] hsr_slave_0: entered promiscuous mode [ 272.465117][ T8902] hsr_slave_1: entered promiscuous mode [ 272.499295][ T8902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.509369][ T8902] Cannot create hsr debugfs directory [ 273.251681][ T5253] Bluetooth: hci0: command tx timeout [ 273.659448][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.668518][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.678934][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.687115][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.694859][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 273.702705][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.767575][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.783375][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.793497][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.801750][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.809324][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.816721][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.321776][ T5244] Bluetooth: hci0: command tx timeout [ 275.718651][ T5253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.737041][ T5253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.746506][ T5253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.757114][ T5253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.764882][ T5253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.780164][ T5253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.801576][ T5244] Bluetooth: hci1: command tx timeout [ 275.818274][ T5253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.828561][ T5253] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.836570][ T5253] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.848175][ T5253] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.855923][ T5253] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.863282][ T5253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.881874][ T5244] Bluetooth: hci2: command tx timeout [ 277.401752][ T5244] Bluetooth: hci0: command tx timeout [ 277.805444][ T5244] Bluetooth: hci3: command tx timeout [ 277.882903][ T5253] Bluetooth: hci1: command tx timeout [ 277.888479][ T5244] Bluetooth: hci4: command tx timeout [ 277.961607][ T5244] Bluetooth: hci2: command tx timeout [ 279.482070][ T5244] Bluetooth: hci0: command tx timeout [ 279.881579][ T5244] Bluetooth: hci3: command tx timeout [ 279.962009][ T5253] Bluetooth: hci1: command tx timeout [ 279.971411][ T5244] Bluetooth: hci4: command tx timeout [ 280.041596][ T5244] Bluetooth: hci2: command tx timeout [ 281.097152][ T5253] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.113856][ T5253] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.122241][ T5253] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.134217][ T5253] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.141980][ T5253] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.149252][ T5253] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.963358][ T5253] Bluetooth: hci3: command tx timeout [ 282.042092][ T5244] Bluetooth: hci1: command tx timeout [ 282.050382][ T5253] Bluetooth: hci4: command tx timeout [ 282.121602][ T5253] Bluetooth: hci2: command tx timeout [ 283.244437][ T5253] Bluetooth: hci5: command tx timeout [ 284.041555][ T5253] Bluetooth: hci3: command tx timeout [ 284.121573][ T5253] Bluetooth: hci4: command tx timeout [ 285.322018][ T5253] Bluetooth: hci5: command tx timeout [ 287.401808][ T5253] Bluetooth: hci5: command tx timeout [ 289.491431][ T5253] Bluetooth: hci5: command tx timeout [ 316.606309][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.615220][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.399142][ T5237] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 333.422124][ T5237] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 333.430235][ T5237] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 333.438356][ T5237] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 333.446202][ T5237] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 333.458082][ T5237] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 334.044759][ T5237] Bluetooth: hci6: command 0x0406 tx timeout [ 334.157978][ T5237] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 334.171557][ T5237] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 334.181468][ T5237] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 334.189532][ T5237] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 334.199749][ T5237] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 334.207544][ T5237] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 334.273631][ T5244] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 334.286747][ T5244] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 334.294706][ T5244] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 334.302803][ T5244] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 334.312972][ T5244] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 334.320336][ T5244] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 335.571762][ T5244] Bluetooth: hci12: command tx timeout [ 336.289201][ T5244] Bluetooth: hci13: command tx timeout [ 336.318126][ T5237] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 336.328514][ T5237] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 336.336905][ T5237] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 336.345275][ T5237] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 336.356380][ T5237] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 336.363895][ T5253] Bluetooth: hci14: command tx timeout [ 336.370753][ T5237] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 336.415263][ T5244] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 336.424889][ T5244] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 336.432785][ T5244] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 336.440888][ T5244] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 336.449017][ T5244] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 336.456719][ T5244] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 337.641624][ T5247] Bluetooth: hci12: command tx timeout [ 338.362156][ T5247] Bluetooth: hci13: command tx timeout [ 338.441632][ T5252] Bluetooth: hci14: command tx timeout [ 338.448938][ T5247] Bluetooth: hci15: command tx timeout [ 338.521636][ T5247] Bluetooth: hci16: command tx timeout [ 339.187674][ T5247] Bluetooth: hci8: command 0x0406 tx timeout [ 339.194268][ T5252] Bluetooth: hci10: command 0x0406 tx timeout [ 339.200386][ T5252] Bluetooth: hci9: command 0x0406 tx timeout [ 339.207185][ T5247] Bluetooth: hci7: command 0x0406 tx timeout [ 339.721599][ T5244] Bluetooth: hci12: command tx timeout [ 340.447123][ T5244] Bluetooth: hci13: command tx timeout [ 340.521851][ T5244] Bluetooth: hci15: command tx timeout [ 340.527397][ T5244] Bluetooth: hci14: command tx timeout [ 340.607391][ T5244] Bluetooth: hci16: command tx timeout [ 341.539756][ T5253] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 341.551528][ T5253] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 341.559972][ T5253] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 341.569914][ T5253] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 341.577688][ T5253] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 341.587927][ T5253] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 341.801521][ T5253] Bluetooth: hci12: command tx timeout [ 342.202806][ T30] INFO: task kworker/1:2:4640 blocked for more than 143 seconds. [ 342.210591][ T30] Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 342.244455][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 342.279402][ T30] task:kworker/1:2 state:D stack:20112 pid:4640 tgid:4640 ppid:2 flags:0x00004000 [ 342.299114][ T30] Workqueue: events __usb_queue_reset_device [ 342.380000][ T30] Call Trace: [ 342.419115][ T30] [ 342.441512][ T30] __schedule+0x1895/0x4b30 [ 342.446102][ T30] ? try_to_wake_up+0x971/0x1480 [ 342.451076][ T30] ? schedule+0x90/0x320 [ 342.499129][ T30] ? __pfx___schedule+0x10/0x10 [ 342.511336][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 342.517381][ T30] ? __pfx_lock_release+0x10/0x10 [ 342.522951][ T5244] Bluetooth: hci13: command tx timeout [ 342.536963][ T30] ? kick_pool+0x45c/0x620 [ 342.543821][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.549076][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.559951][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 342.568942][ T30] ? schedule+0x90/0x320 [ 342.578005][ T30] schedule+0x14b/0x320 [ 342.586109][ T30] schedule_preempt_disabled+0x13/0x30 [ 342.597197][ T30] __mutex_lock+0x6a7/0xd70 [ 342.602062][ T5244] Bluetooth: hci14: command tx timeout [ 342.607577][ T5244] Bluetooth: hci15: command tx timeout [ 342.622563][ T30] ? __mutex_lock+0x52a/0xd70 [ 342.627306][ T30] ? usb_reset_device+0x5c8/0xb60 [ 342.638079][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 342.645747][ T30] ? __pfx_hid_pre_reset+0x10/0x10 [ 342.650909][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.661334][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 342.668112][ T30] ? __pfx_hid_pre_reset+0x10/0x10 [ 342.680079][ T30] usb_reset_device+0x5c8/0xb60 [ 342.685270][ T5244] Bluetooth: hci16: command tx timeout [ 342.692469][ T30] ? process_scheduled_works+0x976/0x1850 [ 342.698258][ T30] __usb_queue_reset_device+0x73/0xa0 [ 342.714413][ T30] process_scheduled_works+0xa65/0x1850 [ 342.720059][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 342.730915][ T30] ? assign_work+0x364/0x3d0 [ 342.738959][ T30] worker_thread+0x870/0xd30 [ 342.748162][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.757260][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.765475][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 342.780982][ T30] ? __kthread_parkme+0x169/0x1d0 [ 342.786505][ T30] ? __pfx_worker_thread+0x10/0x10 [ 342.799730][ T30] kthread+0x2f2/0x390 [ 342.803983][ T30] ? __pfx_worker_thread+0x10/0x10 [ 342.809143][ T30] ? __pfx_kthread+0x10/0x10 [ 342.814553][ T30] ret_from_fork+0x4d/0x80 [ 342.819018][ T30] ? __pfx_kthread+0x10/0x10 [ 342.831968][ T30] ret_from_fork_asm+0x1a/0x30 [ 342.836810][ T30] [ 342.839967][ T30] [ 342.839967][ T30] Showing all locks held in the system: [ 342.856770][ T30] 7 locks held by kworker/1:0/25: [ 342.864235][ T30] 1 lock held by khungtaskd/30: [ 342.869662][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 342.885295][ T30] 3 locks held by kworker/u8:4/61: [ 342.890470][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 342.910942][ T30] #1: ffffc900015c7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 342.931588][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 342.940704][ T30] 3 locks held by kworker/u8:5/68: [ 342.951333][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 342.969526][ T30] #1: ffffc900015e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 342.983215][ T30] #2: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 343.000261][ T30] 3 locks held by kworker/u8:6/925: [ 343.008920][ T30] #0: ffff88802d43f148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 343.028753][ T30] #1: ffffc90003d27d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 343.050434][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 343.060242][ T30] 3 locks held by kworker/u8:8/4057: [ 343.074038][ T30] #0: ffff8881452c6148 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 343.092331][ T30] #1: ffffc9000cca7d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 343.114680][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 343.130186][ T30] 4 locks held by kworker/1:2/4640: [ 343.138880][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 343.154590][ T30] #1: ffffc9000e17fd00 ((work_completion)(&intf->reset_ws)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 343.171335][ T30] #2: ffff8880575ee190 (&dev->mutex){....}-{3:3}, at: usb_lock_device_for_reset+0x255/0x330 [ 343.191359][ T30] #3: ffff8880282a9510 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_reset_device+0x5c8/0xb60 [ 343.209747][ T30] 2 locks held by getty/4983: [ 343.214512][ T30] #0: ffff8880327890a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 343.231334][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 343.250414][ T30] 3 locks held by kworker/u9:12/5253: [ 343.255854][ T30] #0: ffff888066ded948 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 343.271330][ T30] #1: ffffc90002e1fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 343.292429][ T30] #2: ffff888029424d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 343.309364][ T30] 4 locks held by kworker/1:3/5283: [ 343.315801][ T30] 3 locks held by kworker/0:4/5294: [ 343.321020][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 343.341364][ T30] #1: ffffc90002f1fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 343.359785][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 343.370332][ T30] 3 locks held by kworker/1:7/5405: [ 343.384070][ T30] 1 lock held by syz.5.1292/8788: [ 343.389126][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 343.401334][ T30] 1 lock held by syz.2.1300/8807: [ 343.408694][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 343.421333][ T30] 1 lock held by syz.0.1310/8838: [ 343.426390][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 343.443106][ T30] 1 lock held by syz.4.1308/8849: [ 343.448184][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 343.463175][ T30] 1 lock held by syz-executor/8880: [ 343.471545][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.481144][ T30] 1 lock held by syz-executor/8884: [ 343.521338][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.530894][ T30] 1 lock held by syz-executor/8886: [ 343.553166][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.570795][ T30] 2 locks held by syz-executor/8890: [ 343.576243][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 343.591329][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 343.609236][ T30] 1 lock held by syz-executor/8892: [ 343.614532][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.631350][ T30] 2 locks held by syz-executor/8895: [ 343.636669][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 343.646727][ T5244] Bluetooth: hci17: command tx timeout [ 343.663193][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 343.679260][ T30] 8 locks held by syz-executor/8902: [ 343.686969][ T30] #0: ffff88802d204420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 343.702393][ T30] #1: ffff88805aba5c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 343.719443][ T30] #2: ffff888026ea31e8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 343.733115][ T30] #3: ffffffff8f56fb28 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 343.750957][ T30] #4: ffff88805a9ac0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 343.769583][ T30] #5: ffff8880206f9250 (&devlink->lock_key#7){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 343.779792][ T30] #6: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 343.789389][ T30] #7: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 343.808864][ T30] 1 lock held by syz-executor/8912: [ 343.820461][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.837883][ T30] 1 lock held by syz-executor/8914: [ 343.843324][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.861269][ T30] 1 lock held by syz-executor/8918: [ 343.866592][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.884177][ T30] 1 lock held by syz-executor/8920: [ 343.889483][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.904711][ T30] 1 lock held by syz-executor/8923: [ 343.909932][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.924302][ T30] 1 lock held by syz-executor/8926: [ 343.929522][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.943891][ T30] 1 lock held by syz-executor/8930: [ 343.949109][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.963763][ T30] 1 lock held by syz-executor/8932: [ 343.968991][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.981508][ T30] 1 lock held by syz-executor/8936: [ 343.986742][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 344.006756][ T30] 1 lock held by syz-executor/8937: [ 344.014445][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 344.031642][ T30] 1 lock held by syz-executor/8941: [ 344.036868][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 344.055994][ T30] [ 344.058349][ T30] ============================================= [ 344.058349][ T30] [ 344.070259][ T30] NMI backtrace for cpu 0 [ 344.074616][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 344.085146][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.095224][ T30] Call Trace: [ 344.098518][ T30] [ 344.101467][ T30] dump_stack_lvl+0x241/0x360 [ 344.106175][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.111402][ T30] ? __pfx__printk+0x10/0x10 [ 344.116046][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 344.121023][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 344.126511][ T30] ? _printk+0xd5/0x120 [ 344.130705][ T30] ? __pfx__printk+0x10/0x10 [ 344.135337][ T30] ? __wake_up_klogd+0xcc/0x110 [ 344.140233][ T30] ? __pfx__printk+0x10/0x10 [ 344.144870][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.150532][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 344.155599][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 344.161616][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 344.167643][ T30] watchdog+0xff4/0x1040 [ 344.171931][ T30] ? watchdog+0x1ea/0x1040 [ 344.176393][ T30] ? __pfx_watchdog+0x10/0x10 [ 344.181110][ T30] kthread+0x2f2/0x390 [ 344.185213][ T30] ? __pfx_watchdog+0x10/0x10 [ 344.189937][ T30] ? __pfx_kthread+0x10/0x10 [ 344.194565][ T30] ret_from_fork+0x4d/0x80 [ 344.199032][ T30] ? __pfx_kthread+0x10/0x10 [ 344.203654][ T30] ret_from_fork_asm+0x1a/0x30 [ 344.208480][ T30] [ 344.212511][ T30] Sending NMI from CPU 0 to CPUs 1: [ 344.217844][ C1] NMI backtrace for cpu 1 [ 344.217859][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 344.217886][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.217900][ C1] RIP: 0010:unwind_next_frame+0xc9b/0x22d0 [ 344.217930][ C1] Code: 0c 00 00 4d 39 ee 0f 86 8a 0c 00 00 49 8d 45 08 4c 39 e0 0f 86 7d 0c 00 00 4c 39 f0 0f 87 74 0c 00 00 4c 89 ef e8 a5 22 00 00 <49> 89 c6 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 30 80 3c 28 00 [ 344.217950][ C1] RSP: 0018:ffffc900001e7650 EFLAGS: 00000283 [ 344.217971][ C1] RAX: ffffffff81607d82 RBX: ffffc900001e7730 RCX: 1ffff9200003cee4 [ 344.217990][ C1] RDX: ffffffff90a486d6 RSI: 0000000000000002 RDI: ffffc900001e7ed8 [ 344.218007][ C1] RBP: ffffc900001e0000 R08: 0000000000000001 R09: ffffc900001e7810 [ 344.218024][ C1] R10: dffffc0000000000 R11: ffffffff81809000 R12: ffffc900001e8000 [ 344.218042][ C1] R13: ffffc900001e7ed8 R14: ffffc900001e7720 R15: 1ffff9200003cee6 [ 344.218063][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 344.218084][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.218100][ C1] CR2: 0000001b3391eff8 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 344.218119][ C1] Call Trace: [ 344.218127][ C1] [ 344.218137][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 344.218166][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 344.218206][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 344.218235][ C1] ? nmi_handle+0x2a/0x5a0 [ 344.218270][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 344.218304][ C1] ? nmi_handle+0x151/0x5a0 [ 344.218329][ C1] ? nmi_handle+0x2a/0x5a0 [ 344.218355][ C1] ? unwind_next_frame+0xc9b/0x22d0 [ 344.218377][ C1] ? default_do_nmi+0x63/0x160 [ 344.218408][ C1] ? exc_nmi+0x123/0x1f0 [ 344.218436][ C1] ? end_repeat_nmi+0xf/0x53 [ 344.218461][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 344.218493][ C1] ? kthread+0x2f2/0x390 [ 344.218518][ C1] ? unwind_next_frame+0xc9b/0x22d0 [ 344.218546][ C1] ? unwind_next_frame+0xc9b/0x22d0 [ 344.218570][ C1] ? unwind_next_frame+0xc9b/0x22d0 [ 344.218594][ C1] [ 344.218602][ C1] [ 344.218616][ C1] ? smpboot_thread_fn+0x546/0xa30 [ 344.218653][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 344.218684][ C1] arch_stack_walk+0x11c/0x150 [ 344.218713][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 344.218749][ C1] ? smpboot_thread_fn+0x546/0xa30 [ 344.218786][ C1] stack_trace_save+0x118/0x1d0 [ 344.218816][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 344.218853][ C1] ref_tracker_free+0x105/0x7e0 [ 344.218879][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 344.218902][ C1] ? dst_destroy+0x171/0x460 [ 344.218923][ C1] ? rcu_core+0xaac/0x17a0 [ 344.218946][ C1] ? handle_softirqs+0x2c7/0x980 [ 344.218978][ C1] ? run_ksoftirqd+0xca/0x130 [ 344.219011][ C1] ? smpboot_thread_fn+0x546/0xa30 [ 344.219050][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.219074][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 344.219109][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 344.219148][ C1] dst_destroy+0x171/0x460 [ 344.219171][ C1] ? rcu_core+0xa37/0x17a0 [ 344.219194][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 344.219217][ C1] rcu_core+0xaac/0x17a0 [ 344.219252][ C1] ? __pfx_rcu_core+0x10/0x10 [ 344.219276][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.219301][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 344.219340][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 344.219381][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 344.219415][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.219439][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 344.219475][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.219499][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 344.219538][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 344.219575][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.219604][ C1] handle_softirqs+0x2c7/0x980 [ 344.219639][ C1] ? run_ksoftirqd+0xca/0x130 [ 344.219677][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 344.219712][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.219740][ C1] run_ksoftirqd+0xca/0x130 [ 344.219775][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 344.219812][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.219838][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.219865][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 344.219900][ C1] smpboot_thread_fn+0x546/0xa30 [ 344.219934][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 344.219972][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 344.220006][ C1] kthread+0x2f2/0x390 [ 344.220028][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 344.220062][ C1] ? __pfx_kthread+0x10/0x10 [ 344.220086][ C1] ret_from_fork+0x4d/0x80 [ 344.220121][ C1] ? __pfx_kthread+0x10/0x10 [ 344.220144][ C1] ret_from_fork_asm+0x1a/0x30 [ 344.220192][ C1] [ 344.709641][ T5244] Bluetooth: hci11: command 0x0406 tx timeout [ 344.716185][ T5244] Bluetooth: hci15: command tx timeout [ 344.722046][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 344.728911][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 344.739437][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.749510][ T30] Call Trace: [ 344.752807][ T30] [ 344.755759][ T30] dump_stack_lvl+0x241/0x360 [ 344.760473][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.765702][ T30] ? __pfx__printk+0x10/0x10 [ 344.770336][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 344.776381][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.782054][ T30] ? vscnprintf+0x5d/0x90 [ 344.786420][ T30] panic+0x349/0x880 [ 344.790356][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.796018][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 344.802203][ T30] ? __pfx_panic+0x10/0x10 [ 344.806657][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 344.812057][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.817719][ T30] ? __irq_work_queue_local+0x137/0x410 [ 344.823306][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.828964][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 344.834364][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 344.840552][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 344.846742][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.852400][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 344.858588][ T30] watchdog+0x1033/0x1040 [ 344.862956][ T30] ? watchdog+0x1ea/0x1040 [ 344.867416][ T30] ? __pfx_watchdog+0x10/0x10 [ 344.872125][ T30] kthread+0x2f2/0x390 [ 344.876218][ T30] ? __pfx_watchdog+0x10/0x10 [ 344.880930][ T30] ? __pfx_kthread+0x10/0x10 [ 344.885548][ T30] ret_from_fork+0x4d/0x80 [ 344.890007][ T30] ? __pfx_kthread+0x10/0x10 [ 344.894623][ T30] ret_from_fork_asm+0x1a/0x30 [ 344.899445][ T30] [ 344.902706][ T30] Kernel Offset: disabled [ 344.907029][ T30] Rebooting in 86400 seconds..