last executing test programs: 7.514940966s ago: executing program 0: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0xda042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) 7.065321226s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) lchown(0x0, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000001340)={0x10}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.878020341s ago: executing program 4: syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000080), 0xa, 0x96aa, &(0x7f0000012dc0)="$eJzs2gm8pnPhuP/nDGOsGUMlpaYiWmTNEtXMYIZCskQ7IilLSYU2KilaaNG+SNZsZQllayXZWyghVCKRFtsw/9eZOWPGuEz6fb/fv3Jd1+t1znM/93M/9/k8n/e9nMNsPXnzSYPB/IMZjR/M2dlXTZk69opNbjl8u8WOWvmkOw5+4IbLTBh5nDjyOGkwGIwaeXloxrpxg5NPGTWYd/r6WS20wIJDiwwGq4w8HdnPYI0ZD4tcOnO7aXM050CHZn07YMbX9BYd/hHDC18/eL/DBoPB2NnePzQYDO3zoA8qbeuJUybPsrrfbdhq9Mjy7F/zzfha5ILBYJHTBnx8zL7t0CPwkYZ/5j7POmv0Jo/Az/6va+uJUzacw3/4XJxnZN0aw+f4nOegsTmP85uX3WatkSmcfrwNBsOXuAecK/8VbT1x8kaDh77ODw5f+7wDps24bo4ZzLhRLDAYDBYcub4u/Ei71P+siZNWnX7Pnvl8hH3msbwPHRfHvvaE+4Zv0oPBYPHBYNwGM+8FVVVV9d/RxEmrrgv3//nndv8/8cSlTuv+X1VV9d/bhhMnrTp8r5/j/r/w3O7/uy91/vtn/Lf/CWvMeNd9j+yHqKqqqn+ryRvi/X/s3O7/a6x78Ubd/6uqqv5722zj6ff/hee4/y8xt/v/q05Ye+mR7Wb+3nDvbLscmu3/J9wz2/p5Zlt/92zrR8+2n9m3n2+29XfOtn7M8Guw/fjBYNzMfy84ddbqceOHXxtZf9ds6yfM+nc6y6w32/qJs62fPNv6SSNjHV4/Zbb1U2bbfoO5THVVVdV/TJutOnndwWz/zn5k9ZIzX6f7/7mnX73CIzXeqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq+u/svlvOOGswGAwNBoNRg8HUwcjy7I+DadOmTRt+fuI5l1zyiA30P6Ohs6+aMnXsFZvccvh2ix218kl3HDxrlv5r++//BPU/adh//mPGDwa7bvlID6UegTr/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9x9t5xx1sgxMGowmDoYWd5n5uPpB73y1SObrrXVSbcdMuudy0zYaWTp7KumTN3pERj7I9DQ8Gcde8Umtxy+3WJHrXzSHQc/Cs6e//5PUP+TpvvvNDQYjJzfY4fP5U0mbrbF8oPB4JDbTtpq9cH9r605/Nra4+YZzDP9rctP/77+MrzjfTaY8Thh+NsS9+/jxOn733DaofMMzTGI2XrB2dcd/sat71htzsflHvpzjJq5cNg1p94+bdq0aQ9YOdL8D/Hmmfuf+VnmPM9Hxr788NhX3GOXt6z4tr32XmGnXbbdcYcdd9h15VXXXG31VVZefa3nrfiGnXbeYaUZ3x9izsZP/77uw5mzheecs1smzj5nc362h5qz8XOfs+l7nLr30BYz52zef3PO1p37nI3faeQHLTNh9GCb6VMzNBgss97owZ7DT1YeMxgss/7ItksOb7vOuFGDwUGzPujw0pj7j8GhfYa32Xry5pNmjezBn/BB1+kHbLjMhJHHiSOPk2YMcfxg1qE4bnDyKaOG5+IB07zQAgsOLTIYrDLydGQ/g7VGXv3azO2mzdGcAx2a9e2AGV/TW3R4J8MLb1rpjCuHz8U53v9/0f/T9f9BXmsO3T9RQyNfI9vM8Jo4ZcNZP2v6NAzP3Twj69YYNplzzv43e9B4x887GDuX8U7ecNKqw6vnmP+Zb8Hj69Zlz3vXjGNrwhoz3nXf/zMKjXfhuYx3w4k43oXnNt5j3n3RKTN29b823jmudRtN/z7h4VzrBnO/1s1DO9jhwqXnvNa95KGH+IDzeOYcjZljo4e61u352VX2Gd7/hLlf6zYaHvvoB1zrRg0Gy6w781o3fOGbPHpw0PCTVYafTBk9OGr4yarTnywwOGf4yXNfv9vO2w+v2GDmnKw0vN8J44amu5+3xk3LTfvUtGnrjYxlwrgHjnXk+Bg/+/184rgZkznzvTP3O7zpzP3e+PgZr00e2e/Ef2O/M99L471t0RmvTRnZ76Q59jt6Lvud+d4HnQ/LD91/4XqI683kOa43I3/jzPxxD/iab8bXIhcMBoucRr5zbPsvr5l0/s4/l/FOnLTqusPjm+P8vf9wpPP3oilXDN8rFhkMBosPBuM2mDn2f7OhhxrvvHMf7yQY77xzG+9lR++y8f/CeAezjfcBx9nWm804VjYYOc6m/BvH78z3znkdGz391RmX/Q0eznVs/IOuY/vOM2qOyZ6th/qdbXvYfsbykrN+z73q+CNnzv3oOfb7r35nm+2zDMF1bOwcf8+P2uDawRDN+T7HrHPx0KfnPuejBw/822LmnM9879zmfMrDmfMnzX3OH+7vycs/fcbro+cY/+xzvulHn3jgzDmfb479/qs5nzL3e8eD53zCYDTN+Up3z5i3uV1PH2rOZ7535pwPf8S1x807WH/4njUy55Mfzpwv+b9znC8I289Y3uH+VWceftLLZ875nHP8r+Z88r875+PvP86Xmf7a00YN5ptvsOe2e+yx+8ozvs98usqM73wtuvOqGfM8t3vpQxnNfO/czov1Ho7R2IdlNPSvjJaa96GMZp1a39ht98f9v16L1vt3jQZ8LbriyBnzNrffix5qzme+l+6DS8z2/jn/Dt1s4+m/dy88x31w5lvwPnjm6RvtP3OXI2+7d45hzryv3jPb+nlmW3/3bOtHz7af2befb7b1d862fvgjzDfb9jNZxw//zTuyfuqszccN//I0fmT9XbOtnzDrvcusN9v6ibOtnzzb+kmzDo1lpsy2fsps228w+Deb+d+kd5rzIl8Pt/77r7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3H33XLGWSPHwKjBYOpgxvLQyONgn6FN//yi4cfBYDB6jeOmbfpIj/cRbujsq6ZMHXvFJrccvt1iR6180h0HPwrOnv/+T1D/k6b77zQ0GIyc32N3GgwGm0zcbIvlB4PBptOOW2PU4P7Xlhx+bZ1xowaDg4YesIMx928ztM/wNltP3nzSYDD/yBbjH/RDH3QePWDDZSaMPE4ceZw04/o0fjDreB03OPmUUYN5p6+f1UILLDi0yGCwysjTkf0M1pjxsMilM7ebNkdzDnRo1rcDZnxNb9HhHzG8sOeO8z9gT//OhP//0cxr9U6j/uWmnf/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ396/9O0IezaXrLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3H33XLGWSPHwKjBYOpgxvLQPiOPg6ETTn7myCEyeq/Ljzj0kR7vI9zQ2VdNmTr2ik1uOXy7xY5a+aQ7Dn4UnD3//Z+g/idN999paDAYOb/H7jQYDDaZuNkWyw8Gg0OPuHyvUYP7X1ty+LV1xo0aDA4aesAOxty/zdA+w9tsPXnzSYPB/CNbjH/QD33QefSADZeZMPI4ceRx0ozr0/jBrON13ODkU0YN5p2+flYLLbDg0CKDwSojT0f2M1hjxsMil87cbtoczTnQoVnfDpjxNb1Fh3/E8MJ+C191wvBczfH+/5hmXqt3GvUvN+38d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3H33XLGWSPHwKjBYOpgxvKokcehfW64/r1bDD8OP19sg/2veqTH+wg3dPZVU6aOvWKTWw7fbrGjVj7pjoMfBWfPf/8nqP9Jw/7zHzN+MNh1y0d6KPUI1PnvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bub4T/qkR5GPUJ1/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yu775YzzhpZHDVr7ah9Oi6wobOvmjJ17BWb3HL4dosdtfJJdxz8SA/of9pD+O+bP2bxf3/+mMX/A/ljFv8P5o9Z/PfLH7P4fyh/zOK/f/6Yxf/D+WMW/4/kj1n8D8gfs/gfmD9m8f9o/pjF/2P5Yxb/j+ePWfw/kT9m8T8of8zif3D+mMX/k/ljFv9P5Y9Z/D+dP2bx/0z+mMX/kPwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4H5o/ZvH/ev6Yxf+w/DGL/zfyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/zfzxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf9b+WMW/2/nj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/O/ljFv/T8scs/qfnj1n8z8gfs/h/N3/M4v+9/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW//Pyxyz+5+ePWfx/mj9m8b8gf8zi/7P8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMX/ivwxi/+V+WMW/1/nj1n8f5M/ZvG/Kn/M4v/b/DGL/9X5Yxb/a/LHLP7X5o9Z/H+XP2bxvy5/zOJ/ff6Yxf+G/DGL/+/zxyz+f8gfs/j/MX/M4n9j/pjF/0/5Yxb/m/LHLP43549Z/P+cP2bxvyV/zOL/l/wxi/+t+WMW/9vyxyz+f80fs/jfnj9m8f9b/pjF/+/5Yxb/f+SPWfz/mT9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+U/PHLP735o9Z/O/LH7P4T8sfk/jPM8gfs/gP5Y9Z/Eflj1n858kfs/jPmz9m8R+dP2bxny9/zOI/Jn/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/g/Jn/M4r9o/pjFf2z+mMV/sfwxi/+4/DGL/+L5Yxb/JfLHLP6PzR+z+D8uf8zi//j8MYv/kvljFv8n5I9Z/JfKH7P4PzF/zOL/pPwxi//S+WMW/yfnj1n8n5I/ZvEfnz9m8X9q/pjF/2n5Yxb/p+ePWfyXyR+z+C+bP2bxf0b+mMV/ufwxi//y+WMW/2fmj1n8n5U/ZvF/dv6Yxf85+WMW/xXyxyz+z80fs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+z8sfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//z88cs/mvnj1n818kfs/i/IH/M4v/C/DGL/4vyxyz+E/LHLP4T88cs/pPyxyz+6+aPWfzXyx+z+K+fP2bxn5w/ZvGfkj9m8d8gf8ziv2H+mMX/xfljFv+X5I9Z/DfKH7P4b5w/ZvHfJH/M4v/S/DGL/6b5Yxb/l+WPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf/l+WMW/63yxyz+W+ePWfxfkT9m8X9l/pjF/1X5Yxb/V+ePWfxfkz9m8X9t/pjF/3X5Yxb/bfLHLP7b5o9Z/LfLH7P4vz5/zOK/ff6YxX+H/DGL/xvyxyz+O+aPWfzfmD9m8d8pf8zi/6b8MYv/m/PHLP47549Z/HfJH7P475o/ZvHfLX/M4v+W/DGL/1vzxyz+u+ePWfzflj9m8d8jf8zi//b8MYv/O/LHLP7vzB+z+O+ZP2bx3yt/zOK/d/6Yxf9d+WMW/3fnj1n835M/ZvF/b/6Yxf99+WMW/33yxyz+++aPWfzfnz9m8f9A/pjF/4P5Yxb//fLHLP4fyh+z+O+fP2bx/3D+mMX/I/ljFv8D8scs/gfmj1n8P5o/ZvH/WP6Yxf/j+WMW/0/kj1n8D8ofs/gfnD9m8f9k/pjF/1P5Yxb/T+ePWfw/kz9m8T8kf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP6H5o9Z/L+eP2bxPyx/zOL/jfwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOL/zfwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bx/1b+mMX/2/ljFv+T8scs/ifnj1n8T8kfs/ifmj9m8f9O/pjF/7T8MYv/6fljFv8z8scs/t/NH7P4fy9/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/L+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/vPwxi//5+WMW/5/mj1n8L8gfs/j/LH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8f95/pjF/xf5Yxb/X+aPWfx/lT9m8b8if8zif2X+mMX/1/ljFv/f5I9Z/K/KH7P4/zZ/zOJ/df6Yxf+a/DGL/7X5Yxb/3+WPWfyvyx+z+F+fP2bxvyF/zOL/+/wxi/8f8scs/n/MH7P435g/ZvH/U/6Yxf+m/DGL/835Yxb/P+ePWfxvyR+z+P8lf8zif2v+mMX/tvwxi/9f88cs/rfnj1n8/5Y/ZvH/e/6Yxf8f+WMW/3/mj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi//U/DGL/735Yxb/+/LHLP7T8sck/vMO8scs/kP5Yxb/UfljFv958scs/vPmj1n8R+ePWfznyx+z+I/JH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/o/JH7P4L5o/ZvEfmz9m8V8sf8ziPy5/zOK/eP6YxX+J/DGL/2Pzxyz+j8sfs/g/Pn/M4r9k/pjF/wn5Yxb/pfLHLP5PzB+z+D8pf8ziv3T+mMX/yfljFv+n5I9Z/Mfnj1n8n5o/ZvF/Wv6Yxf/p+WMW/2Xyxyz+y+aPWfyfkT9m8V8uf8ziv3z+mMX/mfljFv9n5Y9Z/J+dP2bxf07+mMV/hfwxi/9z88cs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//z8scs/qvnj1n818gfs/ivmT9m8V8rf8zi//z8MYv/2vljFv918scs/i/IH7P4vzB/zOL/ovwxi/+E/DGL/8T8MYv/pPwxi/+6+WMW//Xyxyz+6+ePWfwn549Z/Kfkj1n8N8gfs/hvmD9m8X9x/pjF/yX5Yxb/jfLHLP4b549Z/DfJH7P4vzR/zOK/af6Yxf9l+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bxf3n+mMV/q/wxi//W+WMW/1fkj1n8X5k/ZvF/Vf6Yxf/V+WMW/9fkj1n8X5s/ZvF/Xf6YxX+b/DGL/7b5Yxb/7fLHLP6vzx+z+G+fP2bx3yF/zOL/hvwxi/+O+WMW/zfmj1n8d8ofs/i/KX/M4v/m/DGL/875Yxb/XfLHLP675o9Z/HfLH7P4vyV/zOL/1vwxi//u+WMW/7flj1n898gfs/i/PX/M4v+O/DGL/zvzxyz+e+aPWfz3yh+z+O+dP2bxf1f+mMX/3fljFv/35I9Z/N+bP2bxf1/+mMV/n/wxi/+++WMW//fnj1n8P5A/ZvH/YP6YxX+//DGL/4fyxyz+++ePWfw/nD9m8f9I/pjF/4D8MYv/gfljFv+P5o9Z/D+WP2bx/3j+mMX/E/ljFv+D8scs/gfnj1n8P5k/ZvH/VP6Yxf/T+WMW/8/kj1n8D8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/6H5Yxb/r+ePWfwPyx+z+H8jf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+H8zf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfy/lT9m8f92/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8v5M/ZvE/LX/M4n96/pjF/4z8MYv/d/PHLP7fyx+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/7+ePWfx/kD9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8T8vf8zif37+mMX/p/ljFv8L8scs/j/LH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8r8gfs/hfmT9m8f91/pjF/zf5Yxb/q/LHLP6/zR+z+F+dP2bxvyZ/zOJ/bf6Yxf93+WMW/+vyxyz+1+ePWfxvyB+z+P8+f8zi/4f8MYv/H/PHLP435o9Z/P+UP2bxvyl/zOJ/c/6Yxf/P+WMW/1vyxyz+f8kfs/jfmj9m8b8tf8zi/9f8MYv/7fljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8ziPzV/zOJ/b/6Yxf++/DGL/7T8MYn/6EH+mMV/KH/M4j8qf8ziP0/+mMV/3vwxi//o/DGL/3z5Yxb/MfljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMX/MfljFv9F88cs/mPzxyz+i+WPWfzH5Y9Z/BfPH7P4L5E/ZvF/bP6Yxf9x+WMW/8fnj1n8l8wfs/g/IX/M4r9U/pjF/4n5Yxb/J+WPWfyXzh+z+D85f8zi/5T8MYv/+Pwxi/9T88cs/k/LH7P4Pz1/zOK/TP6YxX/Z/DGL/zPyxyz+y+WPWfyXzx+z+D8zf8zi/6z8MYv/s/PHLP7PyR+z+K+QP2bxf27+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxf17+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfyfnz9m8V87f8ziv07+mMX/BfljFv8X5o9Z/F+UP2bxn5A/ZvGfmD9m8Z+UP2bxXzd/zOK/Xv6YxX/9/DGL/+T8MYv/lPwxi/8G+WMW/w3zxyz+L84fs/i/JH/M4r9R/pjFf+P8MYv/JvljFv+X5o9Z/DfNH7P4vyx/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP4vzx+z+G+VP2bx3zp/zOL/ivwxi/8r88cs/q/KH7P4vzp/zOL/mvwxi/9r88cs/q/LH7P4b5M/ZvHfNn/M4r9d/pjF//X5Yxb/7fPHLP475I9Z/N+QP2bx3zF/zOL/xvwxi/9O+WMW/zflj1n835w/ZvHfOX/M4r9L/pjFf9f8MYv/bvljFv+35I9Z/N+aP2bx3z1/zOL/tvwxi/8e+WMW/7fnj1n835E/ZvF/Z/6YxX/P/DGL/175Yxb/vfPHLP7vyh+z+L87f8zi/578MYv/e/PHLP7vyx+z+O+TP2bx3zd/zOL//ofnP+b/bFz/kY3T+H+g8x+z+H8wf8ziv1/+mMX/Q/ljFv/988cs/h/OH7P4fyR/zOJ/QP6Yxf/A/DGL/0fzxyz+H8sfs/h/PH/M4v+J/DGL/0H5Y7P77/1ID+Z/o4fwPzh/zHL+fzJ/zOL/qfwxi/+n88cs/p/JH7P4H5I/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6Yxf9r+WMW/0Pzxyz+X88fs/gflj9m8f9G/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8f9m/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/h/K3/M4v/t/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4fyd/zOJ/Wv6Yxf/0/DGL/xn5Yxb/7+aPWfy/lz9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9e/pjF//z8MYv/T/PHLP4X5I9Z/H+WP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X5E/ZvG/Mn/M4v/r/DGL/2/yxyz+V+WPWfx/mz9m8b86f8zif03+mMX/2vwxi//v8scs/tflj1n8r88fs/jfkD9m8f99/pjF/w/5Yxb/P+aPWfxvzB+z+P8pf8zif1P+mMX/5vwxi/+f88cs/rfkj1n8/5I/ZvG/NX/M4n9b/pjF/6/5Yxb/2/PHLP5/yx+z+P89f8zi/4/8MYv/P/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjFf2r+mMX/3vwxi/99+WMW/2n5YxL/+Qb5Yxb/ofwxi/+o/DGL/zz5Yxb/efPHLP6j88cs/vPlj1n8x+SPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/x+SPWfwXzR+z+I/NH7P4L5Y/ZvEflz9m8V88f8ziv0T+mMX/sfljFv/H5Y9Z/B+fP2bxXzJ/zOL/hPwxi/9S+WMW/yfmj1n8n5Q/ZvFfOn/M4v/k/DGL/1Pyxyz+4/PHLP5PzR+z+D8tf8zi//T8MYv/MvljFv9l88cs/s/IH7P4L5c/ZvFfPn/M4v/M/DGL/7Pyxyz+z84fs/g/J3/M4r9C/pjF/7n5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/3n5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvF/fv6YxX/t/DGL/zr5Yxb/F+SPWfxfmD9m8X9R/pjFf0L+mMV/Yv6YxX9S/pjFf938MYv/evljFv/188cs/pPzxyT+Q4P8MYn/fBvkj1n8N8wfs/i/OH/M4v+S/DGL/0b5Yxb/jfPHLP6b5I9Z/F+aP2bx3zR/zOL/svwxi/9m+WMW/83zxyz+W+SPWfy3zB+z+L88f8ziv1X+mMV/6/wxi/8r8scs/q/MH7P4vyp/zOL/6vwxi/9r8scs/q/NH7P4vy5/zOK/Tf6YxX/b/DGL/3b5Yxb/1+ePWfy3zx+z+O+QP2bxf0P+mMV/x/wxi/8b88cs/jvlj1n835Q/ZvF/c/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/N+SP2bxf2v+mMV/9/wxi//b8scs/nvkj1n8354/ZvF/R/6Yxf+d+WMW/z3zxyz+e+WPWfz3zh+z+L8rf8zi/+78MYv/e/LHLP7vzR+z+L8vf8ziv0/+mMV/3/wxi//788cs/h/IH7P4fzB/zOK/X/6Yxf9D+WMW//3zxyz+H84fs/h/JH/M4n9A/pjF/8D8MYv/R/PHLP4fyx+z+H88f8zi/4n8MYv/QfnPasysRYv/wfljFv9P5o9Z/D+VP2bx/3T+mMX/M/ljFv9D8scs/p/NH7P4fy5/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOJ/aP6Yxf/r+WMW/8Pyxyz+38gfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+38wfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/2/ljz3Q/45pj1b/b+ePWc7/k/LHLP4n549Z/E/JH7P4n5o/ZvH/Tv6Yxf+0/DGL/+n5Yxb/M/LHLP7fzR+z+H8vf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfy/nz9m8f9B/pjF/4f5Yxb/H+WPWfx/nD9m8f9J/pjF/7z8MYv/+fljFv+f5o9Z/C/IH7P4/yx/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvG/In/M4n9l/pjF/9f5Yxb/3+SPWfyvyh+z+P82f8zif3X+mMX/mvwxi/+1+WMW/9/lj1n8r8sfs/hfnz9m8b8hf8zi//v8MYv/H/LHLP5/zB+z+N+YP2bx/1P+mMX/pvwxi//N+WMW/z/nj1n8b8kfs/j/JX/M4n9r/pjF/7b8MYv/X/PHLP63549Z/P+WP2bx/3v+mMX/H/ljFv9/5o9Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/1Pwxi/+9+WMW//vyxyz+0/LHJP5jBvljFv+h/DGL/6gZ/kMdAw/M4j9P5z9m8Z83f8ziPzp/zOI/X/6YxX9M/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8X9M/pjFf9H8MYv/2Pwxi/9i+WMW/3H5Yxb/xfPHLP5L5I9Z/B+bP2bxf1z+mMX/8fljFv8l88cs/k/IH7P4L5U/ZvF/Yv6Yxf9J+WMW/6Xzxyz+T84fs/g/JX/M4j8+f8zi/9T8MYv/0/LHLP5Pzx+z+C+TP2bxXzZ/zOL/jPwxi/9y+WMW/+Xzxyz+z8wfs/g/K3/M4v/s/DGL/3Pyxyz+K+SPWfyfmz9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfyflz9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/+fnj1n8184fs/ivkz9m8X9B/pjF/4X5Yxb/F+WPWfwn5I9Z/Cfmj1n8J+WPWfzXzR+z+K+XP2bxXz9/zOI/OX/M4j8lf8ziv0H+mMV/w/wxi/+L88cs/i/JH7P4b5Q/ZvHfOH/M4r9J/pjF/6X5Yxb/TfPHLP4vyx+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/8vzxyz+W+WPWfy3zh+z+L8if8zi/8r8MYv/q/LHLP6vzh+z+L8mf8zi/9r8MYv/6/LHLP7b5I9Z/LfNH7P4b5c/ZvF/ff6YxX/7/DGL/w75Yxb/N+SPWfx3zB+z+L8xf8ziv1P+mMX/TfljFv83549Z/HfOH7P475I/ZvHfNX/M4r9b/tij33+6+pi35I89+v2nN+at+WMW/93zxyz+b8sfs/jvkT9m8X97/pjF/x35Yxb/d+aPWfz3zB+z+O+VP2bx3zt/zOL/rvwxi/+788cs/u/JH7P4vzd/zOL/vvwxi/8++WMW/33zxyz+788fs/h/IH/M4v/B/DGL/375Yxb/D+WPWfz3zx+z+H84f8zi/5H8MYv/AfljFv8D88cs/h/NH7P4fyx/zOL/8fwxi/8n8scs/gflj1n8D84fs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/gfkj9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/Q/PHLP5fzx+z+B+WP2bx/0b+mMX/8Pwxi/8R+WMW/yPzxx7l/vuMLI45Kn/sUe4/szFH549Z/I/JH7P4fzN/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/L+VPzbsP2Zk+dHs/+38Mcv5f1L+mMX/5Pwxi/8p+WMW/1Pzxyz+38kfs/iflj9m8T89f8zif0b+mMX/u/ljFv/v5Y9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+J+XP2bxPz9/zOL/0/wxi/8F+WMW/5/lj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+P88fs/j/In/M4v/L/DGL/6/yxyz+V+SPWfyvzB+z+P86f8zi/5v8MYv/VfljFv/f5o9Z/K/OH7P4X5M/ZvG/Nn/M4v+7/DGL/3X5Yxb/6/PHLP435I9Z/H+fP2bx/0P+mMX/j/ljFv8b88cs/n/KH7P435Q/ZvG/OX/M4v/n/DGL/y35Yxb/v+SPWfxvzR+z+N+WP2bx/2v+mMX/9vwxi//f8scs/n/PH7P4/yN/zOL/z/wxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxn5o/ZvG/N3/M4n9f/pjFf1r+mMR//kH+mMV/KH/M4j9qlv+YR2Rc/6FZ/Ofp/Mcs/vPmj1n8R+ePWfznyx+z+I/JH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/o/JH7P4L5o/ZvEfmz9m8V8sf8ziPy5/zOK/eP6YxX+J/DGL/2Pzxyz+j8sfs/g/Pn/M4r9k/pjF/wn5Yxb/pfLHLP5PzB+z+D8pf8ziv3T+mMX/yfljFv+n5I9Z/Mfnj1n8n5o/ZvF/Wv6Yxf/p+WMW/2Xyxyz+y+aPWfyfkT9m8V8uf8ziv3z+mMX/mfljFv9n5Y9Z/J+dP2bxf07+mMV/hfwxi/9z88cs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//z8scs/qvnj1n818gfs/ivmT9m8V8rf8zi//z8MYv/2vljFv918scs/i/IH7P4vzB/zOL/ovwxi/+E/DGL/8T8MYv/pPwxi/+6+WMW//Xyxyz+6+ePWfwn549Z/Kfkj1n8N8gfs/hvmD9m8X9x/pjF/yX5Yxb/jfLHLP4b549Z/DfJH7P4vzR/zOK/af6Yxf9l+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bxf3n+mMV/q/wxi//W+WMW/1fkj1n8X5k/ZvF/Vf6Yxf/V+WMW/9fkj1n8X5s/ZvF/Xf6YxX+b/DGL/7b5Yxb/7fLHLP6vzx+z+G+fP2bx3yF/zOL/hvwxi/+O+WMW/zfmj1n8d8ofs/i/KX/M4v/m/DGL/875Yxb/XfLHLP675o9Z/HfLH7P4vyV/zOL/1vwxi//u+WMW/7flj1n898gfs/i/PX/M4v+O/DGL/zvzxyz+e+aPWfz3yh+z+O+dP2bxf1f+mMX/3fljFv/35I9Z/N+bP2bxf1/+mMV/n/wxi/+++WMW//fnj1n8P5A/ZvH/YP6YxX+//DGL/4fyxyz+++ePWfw/nD9m8f9I/pjF/4D8MYv/gfljFv+P5o9Z/D+WP2bx/3j+mMX/E/ljFv+D8scs/gfnj1n8P5k/ZvH/VP6Yxf/T+WMW/8/kj1n8D8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/6H5Yxb/r+ePWfwPyx+z+H8jf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+H8zf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfy/lT9m8f92/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8v5M/ZvE/LX/M4n96/pjF/4z8MYv/d/PHLP7fyx+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/7+ePWfx/kD9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8T8vf8zif37+mMX/p/ljFv8L8scs/j/LH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8r8gfs/hfmf+czTsQ+f86f8zi/5v8MYv/VfljFv/f5o9Z/K/OH7P4X5M/ZvG/Nn/M4v+7/DGL/3X5Yxb/6/PHLP435I9Z/H+fP2bx/0P+mMX/j/ljFv8b88cs/n/KH7P435Q/ZvG/OX9M4j9mkD8m8Z//lvwxi/9f8scs/rfmj1n8b8sfs/j/NX/M4n97/pjF/2/5Yxb/v+ePWfz/kT9m8f9n/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/hPzR+z+N+bP2bxvy9/zOI/LX9M4r/AIH/M4j+UP2bxH5U/ZvGfJ3/M4j9v/pjFf3T+mMV/vvwxi/+Y/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4v+Y/DGL/6L5Yxb/sfljFv/F8scs/uPyxyz+i+ePWfyXyB+z+D82f8zi/7j8MYv/4/PHLP5L5o9Z/J+QP2bxXyp/zOL/xPwxi/+T8scs/kvnj1n8n5w/ZvF/Sv6YxX98/pjF/6n5Yxb/p+WPWfyfnj9m8V8mf8ziv2z+mMX/GfljFv/l8scs/svnj1n8n5k/ZvF/Vv6Yxf/Z+WMW/+fkj1n8V8gfs/g/N3/M4r+izP/hflaL/0oy/4ebwX9ojsealcF/+PxfJX/M4r9q/pjFf7X8MYv/8/LHLP6r549Z/NfIH7P4r5k/ZvFfK/9ZjZ61aPF/fv6YxX/t/DGL/zr5Yxb/F+SPWfxfmD9m8X9R/pjFf0L+mMV/Yv6YxX9S/pjFf938MYv/evljFv/188cs/pPzxyz+U/LHLP4b5I9Z/DfMH7P4vzh/zOL/kvwxi/9G+WMW/43zxyz+m+SPWfxfmj9m8d80f8zi/7L8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/i/PH/M4r9V/pjFf+v8MYv/K/LHLP6vzB+z+L8qf8zi/+r8MYv/a/LHLP6vzR+z+L8uf8ziv03+mMV/2/wxi/92+WMW/9fnj1n8t88fs/jvkD9m8X9D/pjFf8f8MYv/G/PHLP475Y9Z/N+UP2bxf3P+mMV/5/wxi/8u+WMW/13zxyz+u+WPWfzfkj9m8X9r/pjFf/f8MYv/2/LHLP575I9Z/N+eP2bxf0f+mMX/nfljFv8988cs/nvlj1n8984fs/i/K3/M4v/u/DGL/3vyxyz+780fs/i/L3/M4r9P/pjFf9/8MYv/+/PHLP4fyB+z+H8wf8ziv1/+mMX/Q/ljFv/988cs/h/OH7P4fyR/zOJ/QP6Yxf/A/DGL/0fzxyz+H8sfs/h/PH/M4v+J/DGL/0H5Yxb/g/PHLP6fzB+z+H8qf8zi/+n8MYv/Z/LHLP6H5I9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/0Pwxi//X88cs/oflj1n8v5E/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8v5k/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/t/KH7P4fzt/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP7fyR+z+J+WP2bxPz1/zOJ/Rv6Yxf+7+WMW/+/lj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4n5c/ZvE/P3/M4v/T/DGL/wX5Yxb/n+WPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP4/zx+z+P8if8zi/8v8Z3TntGmzP7X4/yp/zOJ/Rf6Yxf/K/DGL/6/zn9X8sxYt/r/JH7P4X5U/ZvH/bf6Yxf/q/DGL/zX5Yxb/a/PHLP6/yx+z+F+XP2bxvz5/zOJ/Q/6Yxf/3+WPzDhz+f8gfs5z/f8wfs/jfmD9m8f9T/pjF/6b8MYv/zfljFv8/549Z/G/JH7P4/yV/zOJ/a/6Yxf+2/DGL/1/zxyz+t+ePWfz/lj9m8f97/pjF/x/5Yxb/f+aPWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/9T8MYv/vfljFv/78scs/tPyxyT+Cw7yxyz+Q/ljFv9R+WMW/3nyxyz+8+aPWfxH549Z/OfLH7P4j8kfs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+j8kfs/gvmj9m8R+bP2bxXyx/zOI/Ln/M4r94/pjFf4n8MYv/Y/PHLP6Pyx+z+D8+f8ziv2T+mMX/CfljFv+l8scs/k/MH7P4Pyl/zOK/dP6Yxf/J+WMW/6fkj1n8x+ePWfyfmj9m8X9a/pjF/+n5Yxb/ZfLHLP7L5o9Z/J+RP2bxXy5/zOK/fP6Yxf+Z+WMW/2flj1n8n50/ZvF/Tv6YxX+F/DGL/3Pzxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL//Pyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOL//Pwxi//a+WMW/3Xyxyz+L8gfs/i/MH/M4v+i/DGL/4T8MYv/xPwxi/+k/DGL/7r5Yxb/9fLHLP7r549Z/Cfnj1n8p+SPWfw3yB+z+G+YP2bxf3H+mMX/JfljFv+N8scs/hvnj1n8N8kfs/i/NH/M4r9p/pjF/2X5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvF/ef6YxX+r/DGL/9b5Yxb/V+SPWfxfmT9m8X9V/pjF/9X5Yxb/1+SPWfxfmz9m8X9d/pjFf5v8MYv/tvljFv/t8scs/q/PH7P4b58/ZvHfIX/M4v+G/DGL/475Yxb/N+aPWfx3yh8T+A8/LPim/DGB/3ALvjl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP5vyR+z+L81f8ziv3v+mMX/bfljFv898scs/m/PH7P4vyN/zOL/zvwxi/+e+WMW/73yxyz+e+ePWfzflT9m8X93/pjF/z35Yxb/9+aPWfzflz9m8d8nf8ziv2/+mMX//fljFv8P5I9Z/D+YP2bx3y9/zOL/ofwxi//++WMW/w/nj1n8P5I/ZvE/IH/M4n9g/pjF/6P5Yxb/j+WPWfw/nj9m8f9E/pjF/6D8MYv/wfljFv9P5o9Z/D+VP2bx/3T+mMX/M/ljFv9D8scs/p/NH7P4fy5/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOJ/aP6Yxf/r+WMW/8Pyxyz+38gfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+38wfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/2/lj1n8v50/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/v5I9Z/E/LH7P4n54/ZvE/I3/M4v/d/DGL//fyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf/7+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8z8sfs/ifnz9m8f9p/pjF/4L8MYv/z/LHLP4X5o9Z/C/KH7P4X5w/ZvG/xOs/Zm4vWvwv9frPNYv/ZfljFv/L88cs/j/PH7P4/yJ/zOL/y/wxi/+v8scs/lfkj1n8r8wfs/j/On/M4v+b/DGL/1X5Yxb/3+aPWfyvzh+z+F+TP2bxvzZ/zOL/u/wxi/91+WMW/+vzxyz+N+SPWfx/nz9m8f9D/pjF/4/5Yxb/G/PHLP5/yh+z+N+UP2bxvzl/zOL/5/wxi/8t+WMW/7/kj1n8b80fs/jflj9m8f9r/pjF//b8MYv/3/LHLP5/zx+z+P8jf8zi/8/8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8Z+aP2bxvzd/zOJ/X/6YxX9a/pjEf6FB/pjFfyh/zOI/Kn/M4j9P/pjFf978MYv/6Pwxi/98+WMW/zH5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjF/zH5Yxb/RfPHLP5j88cs/ovlj1n8x+WPWfwXzx+z+C+RP2bxf2z+mMX/cfljFv/H549Z/JfMH7P4PyF/zOK/VP6Yxf+J+WMW/yflj1n8l84fs/g/OX/M4v+U/DGL//j8MYv/U/PHLP5Pyx+z+D89f8ziv0z+mMV/2fwxi/8z8scs/svlj1n8l88fs/g/M3/M4v+s/DGL/7Pzxyz+z8kfs/ivkD9m8X9u/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8X9e/pjFf/X8MYv/GvljFv8188cs/mvlj1n8n58/ZvFfO3/M4r9O/pjF/wX5Yxb/F+aPWfxflD9m8Z+QP2bxn5g/ZvGflD9m8V83f8ziv17+mMV//fwxi//k/DGL/5T8MYv/BvljFv8N88cs/i/OH7P4vyR/zOK/Uf6YxX/j/DGL/yb5Yxb/l+aPWfw3zR+z+L8sf8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+L88fs/hvlT9m8d86f8zi/4r8MYv/K/PHLP6vyh+z+L86f8zi/5r8MYv/a/PHLP6vyx+z+G+TP2bx3zZ/zOK/Xf6Yxf/1+WMW/+3zxyz+O+SPWfzfkD9m8d8xf8zi/8b8MYv/TvljFv835Y9Z/N+cP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/t+SPWfzfmj9m8d89f8zi/7b8MYv/HvljFv+3549Z/N+RP2bxf2f+mMV/z/wxi/9e+WMW/73zxyz+78ofs/i/O3/M4v+e/DGL/3vzxyz+78sfs/jvkz9m8d83f8zi//78MYv/B/LHLP4fzB+z+O+XP2bx/1D+mMV///wxi/+H88cs/h/JH7P4H5A/ZvE/MH/M4v/R/DGL/8fyxyz+H88fs/h/In/M4n9Q/pjF/+D8MYv/J/PHLP6fyh+z+H86f8zi/5n8MYv/IfljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bxPzR/zOL/9fwxi/9h+WMW/2/kj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2/mj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/+38scs/t/OH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/d/LHLP6n5Y9Z/E/PH7P4n5E/ZvH/bv6Yxf97+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/uflj1n8z88fs/j/NH/M4n9B/pjF/2f5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/FfljFv8r88cs/r/OH7P4/yZ/zOJ/Vf6Yxf+3+WMW/6vzxyz+1+SPWfyvzR+z+P8uf8zif13+mMX/+vwxi/8N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf/G/DGL/5/yxyz+N+WPWfxvzh+z+P85f8zif0v+mMX/L/ljFv9b88cs/rflj1n8/5o/ZvG/PX/M4v+3/DGL/9/zxyz+/8gfs/j/M3/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8p+aPWfzvzR+z+N+XP2bxn5Y/JvFfeJA/ZvEfyh+z+I/KH7P4z5M/ZvGfN3/M4j86f8ziP1/+mMV/TP6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvF/TP6YxX/R/DGL/9j8MYv/YvljFv9x+WMW/8Xzxyz+S+SPWfwfmz9m8X9c/pjF//H5Yxb/JfPHLP5PyB+z+C+VP2bxf2L+mMX/SfljFv+l88cs/k/OH7P4PyV/zOI/Pn/M4v/U/DGL/9Pyxyz+T88fs/gvkz9m8V82f8zi/4z8MYv/cvljFv/l88cs/s/MH7P4Pyt/zOL/7Pwxi/9z8scs/ivkj1n8n5s/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8n5c/ZvFfPX/M4r9G/pjFf838MYv/WvljFv/n549Z/NfOH7P4r5M/ZvF/Qf6Yxf+F+WMW/xfljz3a/Y85cMbyhPyxR7v/SAtPzB+z+E/KH7P4r5s/ZvFfL3/M4r9+/pjFf3L+mMV/Sv6YxX+D/DGL/4b5Yxb/F+ePWfxfkj9m8d8of8ziv3H+mMV/k/wxi/9L88cs/pvmj1n8X5Y/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+X549Z/LfKH7P4b50/ZvF/Rf6Yxf+V+WMW/1flj1n8X50/ZvF/Tf6Yxf+1+WMW/9flj1n8t8kfs/hvmz9m8d8uf8zi//r8MYv/9vljFv8d8scs/m/IH7P475g/ZvF/Y/6YxX+n/DGL/5vyxyz+b84fs/jvnD9m8d8lf8ziv2v+mMV/t/wxi/9b8scs/m/NH7P4754/ZvF/W/6YxX+P/DGL/9vzxyz+78gfs/i/M3/M4r/n7P4dCPdn8d8rdsziv3f+mMX/XfljFv93549Z/N+TP2bxf+/D9J/n/2pc/6FZ/N/X+Y9Z/PfJH7P475s/ZvF/f/6Yxf8D+WMW/w/mj1n898sfs/h/KH/M4r9//pjF/8P5Yxb/j+SPWfwPyB+z+B+YP2bx/2j+mMX/Y/ljFv+P549Z/D+RP2bxPyh/zOJ/cP6Yxf+T+WMW/0/lj1n8P50/ZvH/TP6Yxf+Q/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/gfmj9m8f96/pjF/7D8MYv/N/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/N/PHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/1v5Yxb/b+ePWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf87+WMW/9Pyxyz+p+ePWfzPyB+z+H83f8zi/738MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/8/LHLP7n549Z/H+aP2bxvyB/zOL/s/wxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf+K/DGL/5X5Yxb/X+ePWfx/kz9m8b8qf8zi/9v8MYv/1fljFv9r8scs/tfmj1n8f5c/ZvG/Ln/M4n99/pjF/4b8MYv/7/PHLP5/yB+z+P8xf8zif2P+mMX/T/ljFv+b8scs/jfnj1n8/5w/ZvG/JX/M4v+X/DGL/635Yxb/2/LHLP5/zR+z+N+eP2bx/1v+mMX/7/ljFv9/5I9Z/P+ZP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP5T88cs/vfmj1n878sfs/hPyx+T+C8yyB+z+A/lj1n8R+WPWfznyR+z+M+bP2bxH50/ZvGfL3/M4j8mf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+D8mf8ziv2j+mMV/bP6YxX+x/DGL/7j8MYv/4vljFv8l8scs/o/NH7P4Py5/zOL/+Pwxi/+S+WMW/yfkj1n8l8ofs/g/MX/M4v+k/DGL/9L5Yxb/J+ePWfyfkj9m8R+fP2bxf2r+mMX/afljFv+n549Z/JfJH7P4L5s/ZvF/Rv6YxX+5/DGL//L5Yxb/Z+aPWfyflT9m8X92/pjF/zn5Yxb/FfLHLP7PzR+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP7Pyx+z+K+eP2bxX0Pov9fC/3obi/+aQv+Hk8V/rfwxi//z88cs/mvnj1n818kfs/i/IH/M4v/C/DGL/4vyxyz+E/LHLP4T88cs/pPyxyz+6+aPWfzXyx+z+K+fP2bxn5w/ZvGfkj9m8d8gf8ziv2H+mMX/xfljFv+X5I9Z/DfKH7P4b5w/ZvHfJH/M4v/S/DGL/6b5Yxb/l+WPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf/l+WMW/63yxyz+W+ePWfxfkT9m8X9l/pjF/1X5Yxb/V+ePWfxfkz9m8X9t/pjF/3X5Yxb/bfLHLP7b5o9Z/LfLH7P4vz5/zOK/ff6YxX+H/DGL/xvyxyz+O+aPWfzfmD9m8d8pf8zi/6b8MYv/m/PHLP47549Z/HfJH7P475o/ZvHfLX/M4v+W/DGL/1vzxyz+u+ePWfzfZvXfd+4vW/z3sPr/iyz+b88fs/i/I3/M4v/O/DGL/575Yxb/vfLHLP57549Z/N+VP2bxf3f+mMX/PfljFv/35o9Z/N+XP2bx3yd/zOK/b/6Yxf/9+WMW/w/kj1n8P5g/ZvHfL3/M4v+h/DGL//75Yxb/D+ePWfw/kj9m8T8gf8zif2D+mMX/o/ljFv+P5Y9Z/D+eP2bx/8RgMJi26CM1qP/cLP4Hdf5jFv+D88cs/p/MH7P4fyp/zOL/6fwxi/9n8scs/ofkj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/Q/DGL/9fzxyz+h+WPWfy/kT9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfy/mT9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+38ofs/h/O3/M4n9S/pjF/+T8MYv/KfljFv9T88cs/t/JH7P4n5Y/ZvE/PX/M4n9G/pjF/7v5Yxb/7+WPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/iflz9m8T8/f8zi/9P8MYv/BfljFv+f5Y9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/j/PH7P4/yJ/zOL/y/wxi/+v8scs/lfkj1n8r8wfs/j/On/M4v+b/DGL/1X5Yxb/3+aPWfyvzh+z+F+TP2bxvzZ/zOL/u/wxi/91+WMW/+vzxyz+N+SPWfx/nz9m8f9D/pjF/4/5Yxb/G/PHLP5/yh+z+N+UP2bxvzl/zOL/5/wxi/8t+WMW/7/kj1n8b80fs/jflj9m8f9r/pjF//b8MYv/3/LHLP5/zx+z+P8jf8zi/8/8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8Z+aP2bxvzd/zOJ/X/6YxX9a/pjE/zGD/DGL/1D+mMV/VP6YxX+e/DGL/7z5Yxb/0fljFv/58scs/mPyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+Rh+e/wP/ZuP5Ds/g/pvMfs/gvmj9m8R+b/2AwmPdBayz+i+WPWfzH5Y9Z/BfPH7P4L5E/ZvF/bP6Yxf9x+WMW/8fnj1n8l8wfs/g/IX/M4r9U/pjF/4n5Yxb/J+WPWfyXzh+z+D85f8zi/5T8MYv/+Pwxi/9T88cs/k/LH7P4Pz1/zOK/TP6YxX/Z/DGL/zPyxyz+y+WPWfyXzx+z+D8zf8zi/6z8MYv/s/PHLP7PyR+z+K+QP2bxf27+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+W/4O6YsUZjwb/5+WPWc7/1fPHLP5r5I9Z/NfMH7P4r5U/ZvF/fv6YxX/t/DGL/zr5Yxb/F+SPWfxfmD9m8X9R/pjFf0L+mMV/Yv6YxX9S/pjFf938MYv/evljFv/188cs/pPzxyz+U/LHLP4b5I9Z/DfMH7P4vzh/zOL/kvwxi/9G+WMW/43zxyz+m+SPWfxfmj9m8d80f8zi/7L8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/i/PH/M4r9V/pjFf+v8MYv/K/LHLP6vzB+z+L8qf8zi/+r8MYv/a/LHLP6vzR+z+L8uf8ziv03+mMV/2/wxi/92+WMW/9fnj1n8t88fs/jvkD9m8X9D/pjFf8f8MYv/G/PHLP475Y9Z/N+UP2bxf3P+mMV/5/wxi/8u+WMW/13zxyz+u+WPWfzfkj9m8X9r/pjFf/f8MYv/2/LHLP575I9Z/N+eP2bxf0f+mMX/nfljFv8988cs/nvlj1n8984fs/i/K3/M4v/u/DGL/3vyxyz+780fs/i/L3/M4r9P/pjFf9/8MYv/+/PHLP4fyB+z+H8wf8ziv1/+mMX/Q/ljFv/988cs/h/OH7P4fyR/zOJ/QP6Yxf/A/DGL/0fzxyz+H8sfs/h/PH/M4v+J/DGL/0H5Yxb/g/PHLP6fzB+z+H8qf8zi/+n8MYv/Z/LHLP6H5I9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/0Pwxi//X88cs/oflj1n8v5E/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8v5k/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/t/KH7P4fzt/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP7fyR+z+J+WP2bxP31u/u8e9f/DwP4zs/if0fmPWfy/mz9m8f9e/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL/3n5Yxb/8/PHLP4/zR+z+F+QP2bx/1n+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/Rf6Yxf/K/DGL/6/zxyz+v8kfs/hflT9m8f9t/pjF/+r8MYv/NfljFv9r88cs/r/LH7P4X5c/ZvG/Pn/M4n9D/pjF//f5Yxb/P+SPWfz/mD9m8b8xf8zi/6f8MYv/TfljFv+b88cs/n/OH7P435I/ZvH/S/6Yxf/W/DGL/235Yxb/v+aPWfxvzx+z+P8tf8zi//f8MYv/P/LHLP7/zB+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/qfljFv9788cs/vflj1n8p+WPSfwXHeSPPcr9p40sLjqUP/Yo95/ZoqPyxyz+8+SPWfznzR+z+I/OH7P4z5c/ZvEfkz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwfkz9m8V80f8ziPzZ/zOK/WP6YxX9c/pjFf/H8MYv/EvljFv/H5o9Z/B+XP2bxf3z+mMV/yfwxi/8T8scs/kvlj1n8n5g/ZvF/Uv6YxX/p/DGL/5Pzxyz+T8kfs/iPzx+z+D81f8zi/7T8MYv/0/PHLP7L5I9Z/JfNH7P4PyN/zOK/XP6YxX/5/DGL/zPzxyz+z8ofs/g/O3/M4v+c/DGL/wr5Yxb/5+aPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/5+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6Yxf/5+WMW/7Xzxyz+6+SPWfxfkD9m8X9h/pjF/0X5Yxb/CfljFv+J+WMW/0n5Yxb/dfPHLP7r5Y9Z/NfPH7P4T84fs/hPyR+z+G+QP2bx3zB/zOL/4vwxi/9L8scs/hvlj1n8N84fs/hvkj9m8X9p/pjFf9P8MYv/y/LHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4v/y/DGL/1b5Yxb/rfPHLP6vyB+z+L8yf8zi/6r8MYv/q/PHLP6vyR+z+L82f8zi/7r8MYv/NvljFv9t88cs/tvlj1n8X58/ZvHfPn/M4r9D/pjF/w35Yxb/HfPHLP5vzB+z+O+UP2bxf1P+mMX/zfljFv+d88cs/rvkj1n8d80fs/jvlj9m8X9L/pjF/635Yxb//489ekAAxDCAAFi3V15tt7Ft27ZtnH2xbdu2bdu2bScf2BdkZ74wg/xHLf+D/Uct/0P8Ry3/Q/1HLf/D/Ect/8P9Ry3/I/xHLf8j/Uct/6P8Ry3/o/1HLf9j/Ect/2P9Ry3/4/xHLf/j/Uct/9v4j1r+t/Uftfxv5z9q+d/ef9Tyv4P/qOV/R/9Ry/9O/qOW/539Ry3/u/iPWv539R+1/O/mP2r5391/1PK/h/+o5X9P/1HL/17+o5b/vf1HLf/7+I9a/vf1H7X87+c/avnf33/U8n+A/6jl/0D/Ucv/Qf6jlv+D/Uct/4f4j1r+D/Uftfwf5j9q+T/cf9Tyf4T/qOX/SP9Ry/9R/qOW/6P9Ry3/x/iPWv6P9R+1/B/nP2r5P95/1PJ/gv+o5f9E/1HL/0n+o5b/k/1HLf+n+I9a/k/1H7X8n+Y/avk/3X/U8n+G/6jl/0z/Ucv/Wf6jlv+z/Uct/+f4j1r+z/Uftfyf5z9q+T/ff9Tyf4H/qOX/Qv9Ry/9F/qOW/4v9Ry3/l/iPWv4v9R+1/F/mP2r5v9x/1PJ/hf+o5f9K/1HL/1X+o5b/q/1HLf/X+I9a/q/1H7X8X+c/avm/3n/U8n+D/6jl/0b/Ucv/Tf6jlv+b/Uct/7f4j1r+b/Uftfzf5j9q+b/df9Tyf4f/qOX/Tv9Ry/9d/qOW/7v9Ry3/9/iPWv7v9R+1/N/nP2r5v99/1PL/gP+o5f9B/1HL/0P+o5b/h/1HLf+P+I9a/h/1H7X8P+Y/avl/3H/U8v+E/6jl/0n/Ucv/U/6jlv+n/Uct/8/4j1r+n/Uftfw/5z9q+X/ef9Ty/4L/qOX/Rf9Ry/9L/qOW/5f9Ry3/r/iPWv5f9R+1/L/mP2r5f91/1PL/hv+o5f9N/1HL/1v+o5b/t/1HLf/v+I9a/t/1H7X8v+c/avl/33/U8v+B/6jl/0P/Ucv/R/6jlv+P/Uct/5/4j1r+P/Uftfx/5j9q+f/cf9Ty/4X/qOX/S/9Ry/9X/qOW/6/9JwNK/gd+x3/U8v9d/1HL//f8Ry3/3/cftfz/wH/U8v9D/1HL/4/8Ry3/P/Yftfz/xH/U8j/Af9Ty/1P/Ucv/z/xHLf8/9x+1/P/Cf9Ty/0v/Ucv/r/xHLf8D/Uct/7/2H7X8/8Z/1PL/W/9Ry//v/Ect/7/3H7X8/8F/1PL/R/9Ry/+f/Ect/3/2H7X8/8V/1PL/V/9Ry//f/Ect/3/3H7X8/8N/1PL/T/9Ry/+//Ect///2H7X8/8d/1PL/X/9Ry////Ect///3H7X8T+A/avmf0H/U8j+R/6jlf2L/Ucv/JP6jlv9J/Uct/5P5j1r+J/cftfxP4T9q+Z/Sf9TyP5X/qOV/av9Ry/80/qOW/2n9Ry3/0/mPWv6n9x+1/M/gP2r5n9F/1PI/k/+o5X9m/1HL/yz+o5b/Wf1HLf+z+Y9a/mf3H7X8z+E/avmf03/U8j+X/6jlf27/Ucv/PP6jlv95/Uct//P5j1r+5/cftfwv4D9q+V/Qf9Tyv5D/qOV/Yf9Ry/8i/qOW/0X9Ry3/i/mPWv4X9x+1/C/hP2r5X9J/1PK/lP+o5X9p/1HL/zL+o5b/Zf1HLf/L+Y9a/pf3H7X8r+A/avlf0X/U8r+S/6jlf2X/Ucv/Kv6jlv9V/Uct/6v5j1r+V/cftfyv4T9q+V/Tf9Tyv5b/qOV/bf9Ry/86/qOW/3X9Ry3/6/mPWv7X9x+1/G/gP2r539B/1PK/kf+o5X9j/1HL/yb+o5b/Tf1HLf+b+Y9a/jf3H7X8b+E/avnf0n/U8r+V/6jlf2v/Ucv/IP9Ry/9g/1HL/xD/Ucv/UP9Ry/8w/1HL/3D/Ucv/CP9Ry/9I/1HL/yj/Ucv/aP9Ry/8Y/1HL/1j/Ucv/OP9Ry/94/9G37h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+Yd/+Y7yuCziOfw44QLINFzOGtUG+Ld1SuuPH8A8nJAIXeuBvRA2BOxC8AzoOO06NH3+QS+eP3MixlSthWE7avOWazi7NrFms2mr2Q83SlbXIdBZssa5977533n07bn3f5/vNysfjj/t+P58vrw9w25PPhykAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/O9qaFxwZGzNkFNjBx98+HBz7+vsoytuOvD77gv6X8sfLx3mkmMGH/T09PTMfnbWjvLhhKIoSj/bzvLxxMpx6fo767/U0XcU5ne/uPj45F82Hjmw5rSH67qO3lfbe7a2uHHdhpbmT4wpinBRbdFROqirKYqwqLa4t3RQXzpYXFs8XDqY1XtwSvHd0sF5aze3NJVOLIn+nsH/i4bGncXYIcUWQ/40GNz/zvrv3NH/OsIl+682rij3f3nnD9+s+KzfCfrvv35YUNl/1b9B4ISq6//5+f2vI1zyP+7/k55c+fJwn524//7rh0/qH9IZ5vl/SKOVz/0Vz//Th7nkwP7Kms7jpf4vufWZGeVT4/6b5/93rh8uqux/zJDn/9Jz/ML+5/8JRREuHuW3A95TGhp3HRnp/j9y/+OmVWxqBvd/etvm/aX+H1v8g8fLp2qr7H/hCPf/MUsqfq1AdRoav9pTcf+vov/iY8NccqD/tx7/7UOl/h/94/1nDPqsmv4vrux/Znvrlplbt3eeu6F19frm9c2b6mbNmz23vm7u+XNm9j4S9H0d5XcF3htGd/8vJlVsaoqieWB/ddeBp0r9z3nggdnlUxOr7H/RiPf/6e7/MKyPjCnGjy86Vre3t9X1fe0/rO/72vfDhum/ir//n3l2+YfVll9rimLqwP7OM+5aXur/7UPP7C6fGl9l/4tH7H/+wM8LRBjl/b+pYjOk/4OHXux9/l96z8HTy6eq/fv/khH7f8X9H0ajobHif/h5l5X631VcGtlpaPDf/yCdHP0/+vb13XHr8Cn9Qzo5+v/DF46eE7cOS/UP6eTof9zG+5+LW4dL9A/p5Oh/2ZR5y+PW4VL9Qzo5+l/7yjl/jVuHRv1DOjn6P/sruzvi1mGZ/iGdHP0/2DZ7W9w6LNc/pJOj/5+f+uCrcetwmf4hnRz9Hzt29w1x63C5/iGdHP137TnrR3HrcIX+IZ0c/V+2bkGIW4cr9Q/p5Oh/2tQ/Pxa3DlfpH9LJ0f/cv/zz1Lh1uFr/kE6O/m//4vJ9cetwjf4hnRz9j73u5Rfi1mGF/iGdHP0vOWvbgrh1uFb/kE6O/pt+1tQTtw4r9Q/p5Oh/5jd/siFuHa7TP6STo//Dyx7ZE7cO1+sf0snR/566YnLcOtwwuP8Jhf7h3ZSj/298/7RDcevwafd/SCdH/7978ol5ceuwSv+QTo7+n/3Qbd+KW4cb9Q/p5Oj/njUvnBm3Dqv1D+nk6P+hvc99OW4d1ugf0snR/+uvt74vbh3W6h/SydH/pImnvBa3Dk36h3Ry9L/glq+1xa1Ds/4hnRz9t+7u+nHcOqzTP6STo/+PHp+6Mm4d1usf0snR/4o5ez8Ytw436R/SydH/B5ZesCtuHTboH9LJ0f+F3R+/MG4dNuof0snRf/vTn/963DrcrH9IJ0f/e2e8uihuHVr0D+nk6P+lVUt+GrcOrfqHdHL0/+Yj126KW4dN+od0cvT/xC/eOha3Dpv1D+nk6P/95y/8e9w6bNE/pJOj/0WL31gbtw6f0T+kk6P/jV3/eiluHdr0D+nk6H/G4auWxq3DVv1DOjn6/965dfvj1qFd/5BOjv7vuGJffdw6bNM/pJOj//0H77wrbh1u0T+kk6P/N341fVrcOnxW/5BOjv7vm3zomrh16NA/pJOj/19vqn06bh226x/SydH/P/ZN2RG3Dp36h3Ry9P/Ua91/iluHW/UP6eTof9W434yPW4fb9A/p5Oh/SueWe+PW4Xb9Qzo5+p939+rz4tbhc/qHdHL0v/Vvz387bh126B/S2bq98+bVLS3Nbd544403A29O9p9MQGrvRH+yfyUAAAAAAAAAAAAAAMCJ5PjnRCf79wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqJ3AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgKAAD//77X3z4=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfea7) 5.790799625s ago: executing program 3: socket$kcm(0xa, 0x0, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0xf000000, &(0x7f0000000a80)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 5.301873942s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3, {0x0, 0x30}}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 5.11848645s ago: executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000013c0)=0x40000000, 0x4) 4.970014283s ago: executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$TIOCMIWAIT(r3, 0x541b, 0x0) 4.959910085s ago: executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$pppl2tp(r0, 0x0, 0x0) 4.755936977s ago: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3) sendto$inet(r0, 0x0, 0x23, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)='g', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001580)=ANY=[], 0x40e2) 4.41707246s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000300)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00'}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_writev(r2, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/263, 0x107}], 0x1, &(0x7f0000000000)=[{&(0x7f0000217f28)=""/220, 0xdc}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000c80)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@nodiscard}], [{@audit}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000020240), 0x10010) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) 3.825653852s ago: executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000125, &(0x7f0000000440)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb23398ee3c3bdc76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 3.779094259s ago: executing program 1: socket$kcm(0xa, 0x0, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0xf000000, &(0x7f0000000a80)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 2.848222825s ago: executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$pppl2tp(r0, 0x0, 0x0) 2.763146618s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = syz_io_uring_setup(0xd19, &(0x7f0000000440)={0x0, 0x2f9, 0x10100, 0x0, 0x156}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000100)=0x6) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @dev={0xac, 0x14, 0x14, 0x42}}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x20000014}) getpid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffff}}) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x400448cc, &(0x7f00000000c0)={'wlan0\x00'}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d", 0x4) 2.215835304s ago: executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0x1, 0x12) 1.952713135s ago: executing program 3: chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="020000", @ANYRES32=0xee00, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) renameat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$snddsp(r5, &(0x7f00000000c0)="8e", 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f00000003c0), &(0x7f0000000080)='./file0\x00', 0x2304023, &(0x7f00000001c0)=ANY=[], 0x8, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./bus\x00', 0x0) read$FUSE(r6, &(0x7f000000ac40)={0x2020}, 0x2020) 1.921973349s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x14, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000054000000030a01010000000000000000010000000900030073797a3000000000280004800800024000000000080001400000000504000400766574683000000000000000000000000900010073797a30"], 0x9c}}, 0x0) 1.616104517s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b573818", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004800)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 1.352493668s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)={0x90, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0x7c, 0x8, "93ffdae93fe6417471b7cfdfc3d998115fc6c3dde58eedbd413d33c8dd753ab6e92ac84404e517751d76e178015c4e0be38305732cc11fcc49bb15c0d4fcde55ff92bf603817544fe5680d6693be3b2df12c1d8dc90c681b5d44c3ba38460533bffd66113781264bc04713479ff0515e0a392ed4594291a9"}]}, 0x90}}, 0x10) 1.333478922s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x15}, {0x20}, {0x6, 0x9, 0x0, 0x1}]}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80100, 0x0, 0x20}, 0x18) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x41c21c49b1a76e92}) open_tree(r1, &(0x7f0000000100)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x0, 0x7ff, 0x101) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1100005}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000001000a00000800040001000000", 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid(0xee01, 0xee00, 0x0) setpriority(0x2, 0x0, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400), 0x0, &(0x7f0000000240)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001800010a000000000000ee0004000000"], 0x14}, 0x1, 0xb3100000}, 0x0) r7 = socket(0x0, 0x2, 0x3) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) 752.276052ms ago: executing program 3: socket$kcm(0xa, 0x0, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0xf000000, &(0x7f0000000a80)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 641.23348ms ago: executing program 4: socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) semget$private(0x0, 0x0, 0x444) 429.841773ms ago: executing program 2: write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x4b0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000000), 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}}], 0x18}}], 0x1, 0x0) 403.489907ms ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4c0418", 0x0, 0x0, 0x0, @loopback, @remote}}}}, 0x0) 365.719583ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7ffd}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000c80)=ANY=[@ANYRES16=r6, @ANYRES8, @ANYRES8, @ANYBLOB="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", @ANYRESHEX, @ANYRESOCT, @ANYRES64=r7, @ANYRES32=r4, @ANYRES8=r5, @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001680)={{r2}, r7, 0x8, @inherit={0x50, &(0x7f00000002c0)={0x1, 0x1, 0x6, 0x1, {0x20, 0x0, 0xfffffffffffffff9, 0x7, 0x1}, [0x3]}}, @subvolid=0x7fffffff}) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r9, 0x1, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r8, 0x0}]) sendmmsg$inet6(r8, &(0x7f00000090c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) 269.209828ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_buf(r3, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 260.010249ms ago: executing program 1: process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20100cc, &(0x7f0000000400), 0x1, 0x7b5, &(0x7f0000000440)="$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") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)) 148.804516ms ago: executing program 0: vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000600)="b43530b6bebe04a351db05ed4ad3334b65d1db3dc1b9569581ee90f9ca1f7a53d0c47878b3d7eeb51ab140bd70cf641b70e80e6d785d287b7ac1e31dd6fb6ca844d7e4b73fac828fe7b6f3261f05bf9d1707965bff1d0d12a48f3fdca251571141c6af27647f066f783972e9", 0x6c}], 0x1, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001c0073fc000000000000000007000003", @ANYRES32=r1, @ANYBLOB="420000000a000200"], 0x34}}, 0x0) 20.956026ms ago: executing program 4: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1802000031315deb0000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) epoll_create1(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000300)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00'}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_writev(r2, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/263, 0x107}], 0x1, &(0x7f0000000000)=[{&(0x7f0000217f28)=""/220, 0xdc}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000c80)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@nodiscard}], [{@audit}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000020240), 0x10010) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) kernel console output (not intermixed with test programs): de #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 279.679622][ T5983] XFS (loop2): Ending clean mount [ 279.709890][ T5983] XFS (loop2): Quotacheck needed: Please wait. [ 279.809986][ T5992] loop0: detected capacity change from 0 to 32768 [ 279.854992][ T5983] XFS (loop2): Quotacheck: Done. [ 279.863135][ T5992] XFS: attr2 mount option is deprecated. [ 279.879022][ T5996] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 279.898605][ T5996] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.1: corrupted in-inode xattr [ 279.911424][ T5992] XFS: noikeep mount option is deprecated. [ 279.957567][ T5996] EXT4-fs (loop1): Remounting filesystem read-only [ 280.043944][ T5989] loop4: detected capacity change from 0 to 40427 [ 280.078189][ T5989] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 280.103961][ T5992] XFS (loop0): Mounting V5 Filesystem [ 280.112009][ T3568] XFS (loop2): Unmounting Filesystem [ 280.214903][ T5996] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 280.229013][ T5989] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 280.248976][ T5996] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 280.289721][ T5989] F2FS-fs (loop4): invalid crc value [ 280.340736][ T6021] input: syz0 as /devices/virtual/input/input6 [ 281.160539][ T5992] XFS (loop0): Ending clean mount [ 281.174046][ T5989] F2FS-fs (loop4): Mismatch valid blocks 4 vs. 5 [ 281.194960][ T5992] XFS (loop0): Quotacheck needed: Please wait. [ 281.212002][ T5989] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 281.275710][ T5992] XFS (loop0): Quotacheck: Done. [ 281.518709][ T3573] XFS (loop0): Unmounting Filesystem [ 281.670411][ T3569] EXT4-fs (loop1): unmounting filesystem. [ 281.934183][ T6035] loop4: detected capacity change from 0 to 512 [ 282.078675][ T6035] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 282.130414][ T6035] ext4 filesystem being mounted at /root/syzkaller-testdir2656382691/syzkaller.BNvC0u/93/file0 supports timestamps until 2038 (0x7fffffff) [ 282.261951][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 282.370149][ T6035] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz-executor.4: corrupted inode contents [ 282.444335][ T6049] loop0: detected capacity change from 0 to 32768 [ 282.452882][ T6049] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6049) [ 282.470570][ T6049] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 282.480843][ T6049] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 282.489930][ T6049] BTRFS info (device loop0): using free space tree [ 282.501196][ T6035] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #2: comm syz-executor.4: mark_inode_dirty error [ 282.518163][ T6035] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3845: comm syz-executor.4: Allocating blocks 18-19 which overlap fs metadata [ 282.580858][ T3567] EXT4-fs (loop4): unmounting filesystem. [ 283.334124][ T6049] BTRFS info (device loop0): enabling ssd optimizations [ 283.345473][ T6055] loop2: detected capacity change from 0 to 256 [ 283.820622][ T6136] dlm: no local IP address has been set [ 283.826389][ T6136] dlm: cannot start dlm midcomms -107 [ 284.382439][ T3573] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.771642][ T6172] loop1: detected capacity change from 0 to 32768 [ 287.803277][ T6172] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6172) [ 287.818061][ T6172] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.828433][ T6172] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 287.837341][ T6172] BTRFS info (device loop1): using free space tree [ 288.048762][ T6172] BTRFS info (device loop1): enabling ssd optimizations [ 288.240452][ T6198] loop3: detected capacity change from 0 to 1024 [ 288.323963][ T6202] dlm: no local IP address has been set [ 288.329616][ T6202] dlm: cannot start dlm midcomms -107 [ 288.864688][ T6200] loop4: detected capacity change from 0 to 1024 [ 288.942066][ T3569] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 288.957972][ T3585] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 289.127441][ T6208] loop2: detected capacity change from 0 to 512 [ 289.226727][ T6160] loop0: detected capacity change from 0 to 32768 [ 289.272602][ T6160] XFS: noikeep mount option is deprecated. [ 289.346659][ T6208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 289.372375][ T6208] ext4 filesystem being mounted at /root/syzkaller-testdir3077192942/syzkaller.qQtHQb/106/control supports timestamps until 2038 (0x7fffffff) [ 289.430540][ T6160] XFS (loop0): Mounting V5 Filesystem [ 289.504334][ T6099] hfsplus: b-tree write err: -5, ino 4 [ 289.520933][ T6160] XFS (loop0): Ending clean mount [ 289.556040][ T6160] XFS (loop0): Quotacheck needed: Please wait. [ 289.644251][ T6160] XFS (loop0): Quotacheck: Done. [ 289.720000][ T3568] EXT4-fs (loop2): unmounting filesystem. [ 289.743258][ T3573] XFS (loop0): Unmounting Filesystem [ 289.934710][ T6198] loop3: detected capacity change from 0 to 32768 [ 290.018474][ T3585] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.238920][ T6231] loop2: detected capacity change from 0 to 2048 [ 290.453016][ T6231] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 290.628109][ T6233] loop0: detected capacity change from 0 to 64 [ 290.637961][ T6198] loop3: detected capacity change from 0 to 256 [ 290.744820][ T6198] FAT-fs (loop3): Unrecognized mount option "iocharseodir" or missing value [ 291.687058][ T6233] Trying to free block not in datazone [ 292.052120][ T6241] syz-executor.2[6241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.052240][ T6241] syz-executor.2[6241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.149665][ T6241] syz-executor.2[6241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.224565][ T6243] loop0: detected capacity change from 0 to 2048 [ 292.270289][ T6241] syz-executor.2[6241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.275259][ T6243] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 292.623459][ T6250] loop2: detected capacity change from 0 to 32768 [ 292.692161][ T6250] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6250) [ 292.707827][ T6250] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 292.718077][ T6250] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 292.727006][ T6250] BTRFS info (device loop2): using free space tree [ 292.978498][ T6263] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 293.004073][ T6263] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.045480][ T6263] syz_tun: refused to change device tx_queue_len [ 293.083622][ T6250] BTRFS info (device loop2): enabling ssd optimizations [ 293.359567][ T6282] dlm: no local IP address has been set [ 293.365435][ T6282] dlm: cannot start dlm midcomms -107 [ 293.953969][ T3568] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 293.987458][ T6285] loop4: detected capacity change from 0 to 512 [ 294.012495][ T6290] loop3: detected capacity change from 0 to 256 [ 294.061060][ T6286] loop0: detected capacity change from 0 to 1024 [ 294.227341][ T6290] FAT-fs (loop3): Directory bread(block 64) failed [ 294.276466][ T6290] FAT-fs (loop3): Directory bread(block 65) failed [ 294.307531][ T6285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 294.332301][ T6251] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 294.364580][ T6251] CIFS mount error: No usable UNC path provided in device string! [ 294.364580][ T6251] [ 294.375532][ T6290] FAT-fs (loop3): Directory bread(block 66) failed [ 294.384051][ T6251] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 294.398333][ T6285] ext4 filesystem being mounted at /root/syzkaller-testdir2656382691/syzkaller.BNvC0u/100/control supports timestamps until 2038 (0x7fffffff) [ 294.403748][ T6286] Bluetooth: MGMT ver 1.22 [ 294.431619][ T6290] FAT-fs (loop3): Directory bread(block 67) failed [ 294.464538][ T6290] FAT-fs (loop3): Directory bread(block 68) failed [ 294.527937][ T6290] FAT-fs (loop3): Directory bread(block 69) failed [ 294.562716][ T6290] FAT-fs (loop3): Directory bread(block 70) failed [ 294.594657][ T6290] FAT-fs (loop3): Directory bread(block 71) failed [ 294.595396][ T6290] FAT-fs (loop3): Directory bread(block 72) failed [ 294.595574][ T6290] FAT-fs (loop3): Directory bread(block 73) failed [ 294.656990][ T6116] hfsplus: b-tree write err: -5, ino 4 [ 294.810617][ T3567] EXT4-fs (loop4): unmounting filesystem. [ 294.862394][ T6299] loop0: detected capacity change from 0 to 64 [ 294.951784][ T6299] Trying to free block not in datazone [ 295.280302][ T6305] loop0: detected capacity change from 0 to 1024 [ 295.332896][ T6303] loop4: detected capacity change from 0 to 2048 [ 295.376793][ T6303] UDF-fs: bad mount option "dmode=00000000> 0000000000010" or missing value [ 296.391000][ T6305] loop0: detected capacity change from 0 to 32768 [ 296.480771][ T6323] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 296.517236][ T6323] batman_adv: batadv0: Adding interface: team0 [ 296.550078][ T6323] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.703592][ T6323] batman_adv: batadv0: Interface activated: team0 [ 297.025269][ T6327] loop2: detected capacity change from 0 to 32768 [ 297.060090][ T6327] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6327) [ 297.076956][ T6327] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 297.088087][ T6327] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 297.096903][ T6327] BTRFS info (device loop2): using free space tree [ 297.175490][ T6305] loop0: detected capacity change from 0 to 256 [ 297.195885][ T6305] FAT-fs (loop0): Unrecognized mount option "iocharseodir" or missing value [ 297.448771][ T6324] loop1: detected capacity change from 0 to 2048 [ 297.495907][ T6324] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.503167][ T6324] ext4: Unknown parameter 'audit' [ 297.623125][ T6324] sctp: [Deprecated]: syz-executor.1 (pid 6324) Use of int in max_burst socket option deprecated. [ 297.623125][ T6324] Use struct sctp_assoc_value instead [ 297.653677][ T6327] BTRFS info (device loop2): enabling ssd optimizations [ 297.908716][ T6351] dlm: no local IP address has been set [ 297.914484][ T6351] dlm: cannot start dlm midcomms -107 [ 298.335239][ T3568] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 299.563171][ T6367] CIFS mount error: No usable UNC path provided in device string! [ 299.563171][ T6367] [ 299.611894][ T6367] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 301.000099][ T6376] device vlan0 entered promiscuous mode [ 301.021426][ T6375] device vlan0 left promiscuous mode [ 301.642331][ T6386] loop3: detected capacity change from 0 to 1024 [ 302.222567][ T6106] hfsplus: b-tree write err: -5, ino 4 [ 303.339689][ T6439] loop2: detected capacity change from 0 to 1024 [ 303.651205][ T6408] loop0: detected capacity change from 0 to 2048 [ 303.725118][ T6408] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.731995][ T6408] ext4: Unknown parameter 'audit' [ 303.995330][ T6404] sctp: [Deprecated]: syz-executor.0 (pid 6404) Use of int in max_burst socket option deprecated. [ 303.995330][ T6404] Use struct sctp_assoc_value instead [ 304.090755][ T6111] hfsplus: b-tree write err: -5, ino 4 [ 304.708728][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 304.708745][ T26] audit: type=1804 audit(1718068584.487:186): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3077192942/syzkaller.qQtHQb/128/file1" dev="sda1" ino=1954 res=1 errno=0 [ 304.852274][ T26] audit: type=1804 audit(1718068584.487:187): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3077192942/syzkaller.qQtHQb/128/file1" dev="sda1" ino=1954 res=1 errno=0 [ 305.062034][ T6468] loop3: detected capacity change from 0 to 64 [ 305.188160][ T6470] loop0: detected capacity change from 0 to 1024 [ 305.364021][ T6111] hfsplus: b-tree write err: -5, ino 4 [ 306.134641][ T6485] loop0: detected capacity change from 0 to 1024 [ 306.195688][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 306.392354][ T6498] syz-executor.2[6498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.392449][ T6498] syz-executor.2[6498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.535851][ T6504] loop1: detected capacity change from 0 to 64 [ 306.620955][ T6506] loop4: detected capacity change from 0 to 1024 [ 306.763933][ T3619] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 306.803331][ T35] hfsplus: b-tree write err: -5, ino 4 [ 306.833415][ T6114] hfsplus: b-tree write err: -5, ino 4 [ 308.044098][ T3619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.065619][ T3619] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.066326][ T6516] CIFS mount error: No usable UNC path provided in device string! [ 308.066326][ T6516] [ 308.096042][ T3619] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.119110][ T3619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.269410][ T3619] usb 4-1: config 0 descriptor?? [ 308.279371][ T6516] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 308.374288][ T6527] input: syz0 as /devices/virtual/input/input7 [ 308.482123][ T6528] loop1: detected capacity change from 0 to 512 [ 308.751453][ T6528] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 309.233362][ T6528] EXT4-fs (loop1): 1 truncate cleaned up [ 309.239181][ T6528] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 309.452524][ T3569] EXT4-fs (loop1): unmounting filesystem. [ 309.460272][ T3619] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 309.496295][ T3619] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 309.537431][ T3619] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 309.620292][ T3619] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 309.801159][ T3612] usb 4-1: USB disconnect, device number 16 [ 311.084292][ T6543] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 311.225111][ T6549] loop3: detected capacity change from 0 to 64 [ 312.143364][ T6558] loop0: detected capacity change from 0 to 1024 [ 312.422038][ T26] audit: type=1326 audit(1718068592.197:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4053a7cf69 code=0x7ffc0000 [ 312.454176][ T6560] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 312.590441][ T26] audit: type=1326 audit(1718068592.237:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f4053a7cf69 code=0x7ffc0000 [ 312.757463][ T26] audit: type=1326 audit(1718068592.257:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4053a7cf69 code=0x7ffc0000 [ 312.762987][ T6562] syz-executor.2[6562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.781842][ T26] audit: type=1326 audit(1718068592.257:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4053a7cf69 code=0x7ffc0000 [ 312.783117][ T6114] hfsplus: b-tree write err: -5, ino 4 [ 312.874538][ T6562] syz-executor.2[6562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.267694][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.289210][ T6576] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 313.298846][ T6576] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 313.316980][ T6576] loop4: detected capacity change from 0 to 512 [ 313.324458][ T6576] EXT4-fs: Ignoring removed mblk_io_submit option [ 313.399634][ T6577] input: syz0 as /devices/virtual/input/input8 [ 313.502177][ T6578] loop0: detected capacity change from 0 to 512 [ 314.810144][ T6578] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 314.812530][ T6576] EXT4-fs (loop4): can't mount with commit=6, fs mounted w/o journal [ 314.937226][ T6578] EXT4-fs (loop0): 1 truncate cleaned up [ 314.943030][ T6578] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 315.776271][ T3573] EXT4-fs (loop0): unmounting filesystem. [ 317.081671][ T6591] loop4: detected capacity change from 0 to 64 [ 317.091953][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.098680][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.190621][ T6591] Trying to free block not in datazone [ 317.525388][ T6600] loop2: detected capacity change from 0 to 1024 [ 317.682739][ T6604] loop4: detected capacity change from 0 to 1024 [ 317.828301][ T4079] hfsplus: b-tree write err: -5, ino 4 [ 318.920071][ T3653] hfsplus: b-tree write err: -5, ino 4 [ 319.284028][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.293414][ T6626] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 319.303008][ T6626] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 319.325499][ T6626] loop3: detected capacity change from 0 to 512 [ 319.332934][ T6626] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.449693][ T6626] EXT4-fs (loop3): can't mount with commit=6, fs mounted w/o journal [ 320.904575][ T6631] ptrace attach of "/root/syz-executor.0 exec"[3573] was attempted by "/root/syz-executor.0 exec"[6631] [ 321.137155][ T6637] loop2: detected capacity change from 0 to 64 [ 321.191268][ T6637] Trying to free block not in datazone [ 321.327478][ T6641] loop4: detected capacity change from 0 to 1024 [ 321.559361][ T6649] futex_wake_op: syz-executor.0 tries to shift op by 144; fix this program [ 322.867237][ T6653] loop3: detected capacity change from 0 to 1024 [ 322.993660][ T3653] hfsplus: b-tree write err: -5, ino 4 [ 323.625920][ T6668] input: syz0 as /devices/virtual/input/input9 [ 324.099431][ T6670] loop1: detected capacity change from 0 to 512 [ 324.495831][ T6670] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 325.175543][ T6116] hfsplus: b-tree write err: -5, ino 4 [ 325.376906][ T6670] EXT4-fs (loop1): 1 truncate cleaned up [ 325.382703][ T6670] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 326.014597][ T3569] EXT4-fs (loop1): unmounting filesystem. [ 326.088506][ T6679] loop0: detected capacity change from 0 to 64 [ 326.145417][ T6679] Trying to free block not in datazone [ 326.333502][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.343312][ T6688] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 326.353034][ T6688] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 326.373276][ T6688] loop1: detected capacity change from 0 to 512 [ 326.381669][ T6688] EXT4-fs: Ignoring removed mblk_io_submit option [ 326.403406][ T6688] EXT4-fs (loop1): can't mount with commit=6, fs mounted w/o journal [ 327.426787][ T6696] loop0: detected capacity change from 0 to 1024 [ 329.320199][ T6100] hfsplus: b-tree write err: -5, ino 4 [ 329.346604][ T6710] loop4: detected capacity change from 0 to 1024 [ 330.940524][ T6725] input: syz0 as /devices/virtual/input/input10 [ 331.014806][ T6726] loop0: detected capacity change from 0 to 512 [ 331.027557][ T6726] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 331.260748][ T6726] EXT4-fs (loop0): 1 truncate cleaned up [ 331.266606][ T6726] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 331.899297][ T3573] EXT4-fs (loop0): unmounting filesystem. [ 332.079132][ T6738] syz-executor.3[6738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.079226][ T6738] syz-executor.3[6738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.203640][ T6738] syz-executor.3[6738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.285530][ T6738] syz-executor.3[6738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.286861][ T3653] hfsplus: b-tree write err: -5, ino 4 [ 333.897936][ T6733] loop2: detected capacity change from 0 to 40427 [ 333.920132][ T6733] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 333.938151][ T6733] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 333.995002][ T6733] F2FS-fs (loop2): invalid crc value [ 334.058925][ T6733] F2FS-fs (loop2): Found nat_bits in checkpoint [ 334.131991][ T6758] loop4: detected capacity change from 0 to 1024 [ 334.153544][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 334.256491][ T6116] hfsplus: b-tree write err: -5, ino 4 [ 334.349238][ T6733] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 334.380264][ T6733] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 335.990009][ T6779] input: syz0 as /devices/virtual/input/input11 [ 336.057236][ T6779] loop3: detected capacity change from 0 to 512 [ 336.260479][ T6779] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 336.424077][ T6779] EXT4-fs (loop3): 1 truncate cleaned up [ 336.429907][ T6779] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 336.852900][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 336.968688][ T3574] EXT4-fs (loop3): unmounting filesystem. [ 337.147211][ T6790] loop3: detected capacity change from 0 to 256 [ 338.306745][ T6797] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 338.334805][ T6787] fuseblk: Bad value for 'rootmode' [ 338.548716][ T6800] loop0: detected capacity change from 0 to 512 [ 338.561633][ T6800] EXT4-fs: Mount option(s) incompatible with ext3 [ 338.658230][ T3585] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 338.938609][ T6805] loop0: detected capacity change from 0 to 1024 [ 339.016471][ T6807] loop2: detected capacity change from 0 to 1024 [ 339.125758][ T6807] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 339.143645][ T6111] hfsplus: b-tree write err: -5, ino 4 [ 339.814070][ T3648] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 340.254292][ T3648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.364001][ T3648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.407685][ T3648] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 340.423894][ T3648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.440663][ T6804] loop3: detected capacity change from 0 to 40427 [ 340.496216][ T3648] usb 2-1: config 0 descriptor?? [ 340.508553][ T6804] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 340.518095][ T3568] EXT4-fs (loop2): unmounting filesystem. [ 340.546395][ T6804] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 340.558605][ T6804] F2FS-fs (loop3): invalid crc value [ 340.614057][ T3570] Bluetooth: hci3: command 0x0406 tx timeout [ 340.622442][ T6804] F2FS-fs (loop3): Found nat_bits in checkpoint [ 340.761895][ T6804] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 340.775971][ T6804] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 340.823176][ T3292] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 340.834253][ T3292] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 340.841767][ T3292] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 340.850175][ T3292] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 340.858054][ T3292] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 340.866119][ T3292] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 340.876756][ T3292] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 340.893563][ T3292] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 340.901454][ T3292] hid-generic 0000:0000:0000.0007: item fetching failed at offset 8/31 [ 340.912335][ T3292] hid-generic: probe of 0000:0000:0000.0007 failed with error -22 [ 341.003131][ T3894] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 341.374274][ T3894] usb 3-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 341.390031][ T3894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.434100][ T3648] usb 2-1: string descriptor 0 read error: -71 [ 341.435335][ T3894] usb 3-1: config 0 descriptor?? [ 341.454007][ T3648] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 341.494012][ T3648] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 341.505421][ T3894] usb 3-1: NDI device with a latency value of 1 [ 341.522724][ T3648] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 341.542868][ T3648] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 341.560986][ T3648] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 341.585255][ T3648] usb 2-1: USB disconnect, device number 13 [ 341.724256][ T3894] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 341.732808][ T3894] ftdi_sio ttyUSB0: unknown device type: 0xdc8d [ 341.786594][ T3894] usb 3-1: USB disconnect, device number 9 [ 341.793921][ T3894] ftdi_sio 3-1:0.0: device disconnected [ 342.059908][ T6853] kvm [6852]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x80 [ 342.101067][ T6853] kvm [6852]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 342.160421][ T6861] loop1: detected capacity change from 0 to 1024 [ 342.169906][ T6853] kvm [6852]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x80 [ 342.323017][ T6862] sctp: [Deprecated]: syz-executor.4 (pid 6862) Use of int in max_burst socket option deprecated. [ 342.323017][ T6862] Use struct sctp_assoc_value instead [ 342.363700][ T6111] hfsplus: b-tree write err: -5, ino 4 [ 342.572478][ T6869] loop1: detected capacity change from 0 to 1024 [ 342.683555][ T6869] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 343.273954][ T3292] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 343.434031][ T3648] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 343.644135][ T3292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 343.684471][ T3292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.717938][ T3292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 343.749209][ T3292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 343.789512][ T3292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 343.823988][ T3648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.854038][ T3648] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 343.867903][ T3648] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.880713][ T3648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.898776][ T3648] usb 4-1: config 0 descriptor?? [ 344.094272][ T3292] usb 3-1: string descriptor 0 read error: -22 [ 344.109624][ T3292] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.136946][ T3292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.194269][ T6874] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 344.235948][ T3292] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 344.386167][ T3648] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 344.405814][ T3648] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 344.433434][ T3648] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 344.452975][ T3648] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 344.498466][ T3569] EXT4-fs (loop1): unmounting filesystem. [ 344.595889][ T3648] usb 3-1: USB disconnect, device number 10 [ 344.650114][ T6896] loop4: detected capacity change from 0 to 1024 [ 344.685743][ T152] usb 4-1: USB disconnect, device number 17 [ 344.800413][ T6111] hfsplus: b-tree write err: -5, ino 4 [ 344.876844][ T6904] loop4: detected capacity change from 0 to 8 [ 345.329484][ T6914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 345.700362][ T6918] Invalid ELF header magic: != ELF [ 345.814804][ T6918] Bluetooth: MGMT ver 1.22 [ 346.271923][ T6910] kvm [6909]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x80 [ 346.324631][ T6910] kvm [6909]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 346.423384][ T6910] kvm [6909]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x80 [ 346.574020][ T6926] input: syz0 as /devices/virtual/input/input12 [ 347.659284][ T6940] loop3: detected capacity change from 0 to 1024 [ 347.802471][ T6111] hfsplus: b-tree write err: -5, ino 4 [ 347.899580][ T6934] loop2: detected capacity change from 0 to 4096 [ 347.936598][ T6934] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 348.095146][ T6934] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 348.257064][ T26] audit: type=1804 audit(1718068628.037:192): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3077192942/syzkaller.qQtHQb/158/file0/bus" dev="loop2" ino=33 res=1 errno=0 [ 348.293972][ T3648] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 348.351818][ T26] audit: type=1804 audit(1718068628.067:193): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3077192942/syzkaller.qQtHQb/158/file0/bus" dev="loop2" ino=33 res=1 errno=0 [ 348.378198][ T26] audit: type=1804 audit(1718068628.067:194): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3077192942/syzkaller.qQtHQb/158/file0/bus" dev="loop2" ino=33 res=1 errno=0 [ 348.704598][ T3648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.927478][ T3648] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 349.126185][ T3648] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 349.204323][ T3648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.232077][ T3648] usb 5-1: config 0 descriptor?? [ 349.363872][ T6958] loop1: detected capacity change from 0 to 2048 [ 350.313270][ T6969] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 350.432586][ T3648] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 350.638096][ T6974] Invalid ELF header magic: != ELF [ 351.440125][ T3648] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 351.451871][ T6958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.462671][ T3648] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 351.526141][ T3648] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 351.749877][ T3648] usb 5-1: USB disconnect, device number 12 [ 352.271465][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 353.112276][ T6986] loop2: detected capacity change from 0 to 1024 [ 353.302190][ T3653] hfsplus: b-tree write err: -5, ino 4 [ 353.408481][ T6998] loop2: detected capacity change from 0 to 8 [ 356.693413][ T7023] loop1: detected capacity change from 0 to 128 [ 356.821102][ T7007] fuseblk: Bad value for 'rootmode' [ 357.930089][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 358.028725][ T7044] sctp: [Deprecated]: syz-executor.4 (pid 7044) Use of int in max_burst socket option deprecated. [ 358.028725][ T7044] Use struct sctp_assoc_value instead [ 358.244962][ T7033] kvm [7025]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x80 [ 358.291520][ T7033] kvm [7025]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 358.933902][ T41] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 359.345084][ T41] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 359.363887][ T41] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 359.503966][ T41] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 359.547564][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 359.570965][ T41] usb 4-1: SerialNumber: syz [ 359.624372][ T7052] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 359.851978][ T7052] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.134662][ T41] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 360.297243][ T41] usb 4-1: USB disconnect, device number 18 [ 361.087929][ T7079] loop1: detected capacity change from 0 to 65 [ 361.155033][ T7079] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 361.232254][ T7079] BFS-fs: bfs_fill_super(): Last block not available on loop1: 262208 [ 361.651574][ T7074] loop4: detected capacity change from 0 to 32768 [ 362.028506][ T7091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 362.348316][ T7093] Invalid ELF header magic: != ELF [ 363.945859][ T7101] loop2: detected capacity change from 0 to 1024 [ 364.030998][ T4205] hfsplus: b-tree write err: -5, ino 4 [ 364.259206][ T7111] loop1: detected capacity change from 0 to 8 [ 365.741874][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 366.692799][ T7123] loop1: detected capacity change from 0 to 1024 [ 366.866682][ T7123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 368.229718][ T26] audit: type=1326 audit(1718068648.007:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e1aa7cf69 code=0x0 [ 368.570796][ T7144] loop0: detected capacity change from 0 to 1024 [ 368.696999][ T11] hfsplus: b-tree write err: -5, ino 4 [ 369.176022][ T7159] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 372.213993][ T41] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 372.644002][ T41] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.730517][ T7185] loop2: detected capacity change from 0 to 1024 [ 373.045390][ T41] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.061031][ T6099] hfsplus: b-tree write err: -5, ino 4 [ 373.234187][ T41] usb 4-1: New USB device found, idVendor=0d25, idProduct=a4a1, bcdDevice= 0.40 [ 373.256722][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.287614][ T41] usb 4-1: Product: syz [ 373.292136][ T41] usb 4-1: Manufacturer: syz [ 373.297424][ T41] usb 4-1: SerialNumber: syz [ 373.364381][ T7186] loop4: detected capacity change from 0 to 2048 [ 373.368420][ T41] usb 4-1: selecting invalid altsetting 1 [ 373.391081][ T7190] kvm: emulating exchange as write [ 373.434139][ T7186] EXT4-fs: Ignoring removed mblk_io_submit option [ 373.447577][ T7186] ext4: Unknown parameter 'audit' [ 373.555846][ T7186] sctp: [Deprecated]: syz-executor.4 (pid 7186) Use of int in max_burst socket option deprecated. [ 373.555846][ T7186] Use struct sctp_assoc_value instead [ 373.574711][ T41] cdc_ncm 4-1:1.0: bind() failure [ 373.653711][ T41] usb 4-1: USB disconnect, device number 19 [ 373.916363][ T3569] EXT4-fs (loop1): unmounting filesystem. [ 374.325643][ T4744] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 374.389715][ T4744] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 374.475826][ T7199] loop0: detected capacity change from 0 to 1764 [ 374.500009][ T7199] ISOFS: Unable to identify CD-ROM format. [ 375.128423][ T7204] hub 9-0:1.0: USB hub found [ 375.151565][ T7204] hub 9-0:1.0: 8 ports detected [ 375.386663][ T7213] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 375.754054][ T7223] loop0: detected capacity change from 0 to 1024 [ 376.061910][ T6099] hfsplus: b-tree write err: -5, ino 4 [ 376.428052][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.406407][ T7235] loop4: detected capacity change from 0 to 1024 [ 378.491424][ T7235] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 378.527431][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.534089][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.572760][ T7234] loop1: detected capacity change from 0 to 32768 [ 379.610389][ T7234] XFS: attr2 mount option is deprecated. [ 379.631069][ T7234] XFS: noikeep mount option is deprecated. [ 379.755331][ T7239] loop3: detected capacity change from 0 to 32768 [ 379.873190][ T7239] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7239) [ 380.495835][ T7239] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 380.536154][ T7239] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 380.564094][ T7234] XFS (loop1): Mounting V5 Filesystem [ 380.580164][ T7239] BTRFS info (device loop3): setting nodatasum [ 380.586610][ T7239] BTRFS info (device loop3): force zlib compression, level 3 [ 380.621200][ T7239] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 380.680100][ T7244] loop0: detected capacity change from 0 to 40427 [ 380.700261][ T7239] BTRFS info (device loop3): use lzo compression, level 0 [ 380.720930][ T7234] XFS (loop1): Ending clean mount [ 380.750733][ T7239] BTRFS info (device loop3): turning on flush-on-commit [ 380.767887][ T7234] XFS (loop1): Quotacheck needed: Please wait. [ 380.780699][ T7244] F2FS-fs (loop0): Found nat_bits in checkpoint [ 380.789581][ T7239] BTRFS info (device loop3): enabling auto defrag [ 380.831452][ T7239] BTRFS info (device loop3): using free space tree [ 380.885988][ T7234] XFS (loop1): Quotacheck: Done. [ 381.045109][ T7244] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 381.056131][ T7244] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 381.068281][ T7239] BTRFS info (device loop3): enabling ssd optimizations [ 381.156881][ T3567] EXT4-fs (loop4): unmounting filesystem. [ 381.177277][ T3573] syz-executor.0: attempt to access beyond end of device [ 381.177277][ T3573] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 381.246466][ T3569] XFS (loop1): Unmounting Filesystem [ 381.425946][ T7290] loop2: detected capacity change from 0 to 1024 [ 381.479501][ T3574] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 381.980591][ T3653] hfsplus: b-tree write err: -5, ino 4 [ 382.450922][ T7310] loop2: detected capacity change from 0 to 32768 [ 382.458830][ T7310] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7310) [ 382.480589][ T7310] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 382.491236][ T7310] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 382.500238][ T7310] BTRFS info (device loop2): using free space tree [ 382.707685][ T7310] BTRFS info (device loop2): enabling ssd optimizations [ 382.965887][ T7335] dlm: no local IP address has been set [ 382.971552][ T7335] dlm: cannot start dlm midcomms -107 [ 383.532960][ T3568] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 384.207701][ T7345] loop0: detected capacity change from 0 to 1024 [ 384.276070][ T7345] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 385.018164][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 385.027651][ T7356] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 385.037079][ T7356] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 385.055538][ T7356] loop2: detected capacity change from 0 to 512 [ 385.062737][ T7356] EXT4-fs: Ignoring removed mblk_io_submit option [ 385.073615][ T7356] EXT4-fs (loop2): can't mount with commit=6, fs mounted w/o journal [ 385.144783][ T7334] loop3: detected capacity change from 0 to 2048 [ 385.203516][ T7334] EXT4-fs: Ignoring removed mblk_io_submit option [ 385.232332][ T7334] ext4: Unknown parameter 'audit' [ 387.612814][ T3573] EXT4-fs (loop0): unmounting filesystem. [ 387.650566][ T7370] loop3: detected capacity change from 0 to 1024 [ 387.736526][ T7372] loop1: detected capacity change from 0 to 32768 [ 387.745113][ T7372] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7372) [ 387.774437][ T7372] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 387.784856][ T7372] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 387.793596][ T7372] BTRFS info (device loop1): using free space tree [ 387.906413][ T11] hfsplus: b-tree write err: -5, ino 4 [ 387.969943][ T7372] BTRFS info (device loop1): enabling ssd optimizations [ 388.070570][ T7401] loop0: detected capacity change from 0 to 512 [ 388.108447][ T7401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 388.142993][ T7401] System zones: 1-12 [ 388.177676][ T7401] EXT4-fs (loop0): orphan cleanup on readonly fs [ 388.202709][ T7401] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 328: padding at end of block bitmap is not set [ 388.282844][ T7406] dlm: no local IP address has been set [ 388.288713][ T7406] dlm: cannot start dlm midcomms -107 [ 388.359507][ T7401] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 388.506669][ T7401] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 65280 (level 0) [ 388.572520][ T7401] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 33619980 len 1 [ 388.678344][ T7401] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 388.744415][ T7410] loop2: detected capacity change from 0 to 1024 [ 388.772495][ T7401] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 388.799035][ T7401] EXT4-fs (loop0): 1 orphan inode deleted [ 388.806294][ T7401] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 388.952904][ T3569] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 389.033169][ T6099] hfsplus: b-tree write err: -5, ino 4 [ 389.164803][ T3573] EXT4-fs (loop0): unmounting filesystem. [ 389.307880][ T7422] loop0: detected capacity change from 0 to 1024 [ 389.524887][ T7413] hub 9-0:1.0: USB hub found [ 389.532174][ T7413] hub 9-0:1.0: 8 ports detected [ 389.533375][ T7422] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 389.829819][ T7437] loop3: detected capacity change from 0 to 1024 [ 390.070632][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 390.080230][ T7444] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 390.089680][ T7444] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 390.106601][ T7444] loop2: detected capacity change from 0 to 512 [ 390.114132][ T7444] EXT4-fs: Ignoring removed mblk_io_submit option [ 390.121817][ T7444] EXT4-fs (loop2): can't mount with commit=6, fs mounted w/o journal [ 391.320206][ T7449] loop2: detected capacity change from 0 to 32768 [ 391.351797][ T7432] loop1: detected capacity change from 0 to 2048 [ 391.377581][ T7449] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7449) [ 391.399506][ T7449] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 391.409792][ T7449] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 391.418675][ T7449] BTRFS info (device loop2): using free space tree [ 391.428861][ T7432] EXT4-fs: Ignoring removed mblk_io_submit option [ 391.440888][ T7432] ext4: Unknown parameter 'audit' [ 391.643971][ T7432] sctp: [Deprecated]: syz-executor.1 (pid 7432) Use of int in max_burst socket option deprecated. [ 391.643971][ T7432] Use struct sctp_assoc_value instead [ 391.721108][ T7449] BTRFS info (device loop2): enabling ssd optimizations [ 391.988488][ T7469] dlm: no local IP address has been set [ 391.994245][ T7469] dlm: cannot start dlm midcomms -107 [ 392.488331][ T7447] loop4: detected capacity change from 0 to 32768 [ 392.497407][ T3568] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 393.140635][ T7473] loop1: detected capacity change from 0 to 1024 [ 393.285901][ T6111] hfsplus: b-tree write err: -5, ino 4 [ 393.348938][ T6111] hfsplus: b-tree write err: -5, ino 4 [ 393.636546][ T7484] bridge0: port 3(hsr_slave_1) entered blocking state [ 393.659173][ T7484] bridge0: port 3(hsr_slave_1) entered disabled state [ 393.666200][ T7482] loop3: detected capacity change from 0 to 512 [ 393.714032][ T7482] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 393.739337][ T7482] System zones: 1-12 [ 393.750410][ T7482] EXT4-fs (loop3): orphan cleanup on readonly fs [ 393.769322][ T7482] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 328: padding at end of block bitmap is not set [ 393.789809][ T7482] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 393.817116][ T7482] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 65280 (level 0) [ 393.842699][ T7482] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz-executor.3: attempt to clear invalid blocks 33619980 len 1 [ 393.859739][ T7482] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 1819239214 (level 0) [ 393.874905][ T7482] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 1819239214 (level 1) [ 393.909981][ T7482] EXT4-fs (loop3): 1 orphan inode deleted [ 393.930184][ T7482] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 395.151784][ T7498] loop1: detected capacity change from 0 to 32768 [ 395.159929][ T7498] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7498) [ 395.184322][ T7498] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 395.194769][ T7498] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 395.203580][ T7498] BTRFS info (device loop1): using free space tree [ 395.231129][ T3574] EXT4-fs (loop3): unmounting filesystem. [ 395.532420][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.541871][ T7520] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 395.551407][ T7520] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 395.568123][ T7520] loop2: detected capacity change from 0 to 512 [ 395.575660][ T7520] EXT4-fs: Ignoring removed mblk_io_submit option [ 396.504640][ T7520] EXT4-fs (loop2): can't mount with commit=6, fs mounted w/o journal [ 396.554602][ T7498] BTRFS info (device loop1): enabling ssd optimizations [ 396.758477][ T3573] EXT4-fs (loop0): unmounting filesystem. [ 396.825046][ T7528] dlm: no local IP address has been set [ 396.830717][ T7528] dlm: cannot start dlm midcomms -107 [ 397.471074][ T3569] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 397.815157][ T7530] loop3: detected capacity change from 0 to 1024 [ 398.201289][ T7539] device veth0_vlan left promiscuous mode [ 398.241565][ T7539] device veth0_vlan entered promiscuous mode [ 398.301198][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.321022][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.363528][ T6111] hfsplus: b-tree write err: -5, ino 4 [ 398.381393][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 399.702688][ T7556] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 399.717733][ T7554] tipc: MTU too low for tipc bearer [ 399.880587][ T7565] loop0: detected capacity change from 0 to 256 [ 400.062398][ T7564] loop4: detected capacity change from 0 to 32768 [ 400.070579][ T7564] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7564) [ 400.085961][ T7564] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 400.097160][ T7564] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 400.105920][ T7564] BTRFS info (device loop4): using free space tree [ 400.130978][ T7566] loop3: detected capacity change from 0 to 1024 [ 400.192227][ T26] audit: type=1800 audit(1718068679.967:196): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048886 res=0 errno=0 [ 400.242088][ T7566] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 400.542738][ T7564] BTRFS info (device loop4): enabling ssd optimizations [ 400.853663][ T7595] dlm: no local IP address has been set [ 400.859411][ T7595] dlm: cannot start dlm midcomms -107 [ 401.360390][ T7598] loop0: detected capacity change from 0 to 1054 [ 401.373941][ T3567] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 401.404199][ T7598] hfsplus: invalid secondary volume header [ 401.429798][ T7598] hfsplus: unable to find HFS+ superblock [ 402.581708][ T7622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.617493][ T7623] loop2: detected capacity change from 0 to 256 [ 402.876113][ T7605] loop0: detected capacity change from 0 to 32768 [ 402.891634][ T7605] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7605) [ 402.910198][ T7605] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 402.928220][ T7605] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 402.939533][ T7605] BTRFS info (device loop0): using free space tree [ 402.977920][ T7605] BTRFS info (device loop0): enabling ssd optimizations [ 403.106273][ T3574] EXT4-fs (loop3): unmounting filesystem. [ 403.508662][ T7644] loop3: detected capacity change from 0 to 32768 [ 403.522263][ T7644] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7644) [ 403.538710][ T7644] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 403.549177][ T7644] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 403.557982][ T7644] BTRFS info (device loop3): using free space tree [ 403.663542][ T7658] loop4: detected capacity change from 0 to 1024 [ 403.692168][ T3573] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 403.813943][ T7644] BTRFS info (device loop3): enabling ssd optimizations [ 404.129807][ T7670] dlm: no local IP address has been set [ 404.135541][ T7670] dlm: cannot start dlm midcomms -107 [ 404.406552][ T7642] loop2: detected capacity change from 0 to 32768 [ 404.832900][ T3574] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 407.220693][ T7698] loop3: detected capacity change from 0 to 256 [ 407.266267][ T6099] hfsplus: b-tree write err: -5, ino 4 [ 407.785773][ T7709] loop4: detected capacity change from 0 to 512 [ 407.848630][ T7709] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 407.892787][ T7709] System zones: 1-12 [ 408.089047][ T7709] EXT4-fs (loop4): orphan cleanup on readonly fs [ 408.155173][ T7709] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 328: padding at end of block bitmap is not set [ 408.208605][ T7709] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 408.231075][ T7709] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 65280 (level 0) [ 408.330873][ T7709] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz-executor.4: attempt to clear invalid blocks 33619980 len 1 [ 408.445724][ T7709] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 0) [ 408.503357][ T7709] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 1) [ 408.575623][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 408.689476][ T7716] loop0: detected capacity change from 0 to 32768 [ 408.699124][ T7716] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7716) [ 408.732765][ T7716] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 408.743119][ T7716] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 408.751957][ T7716] BTRFS info (device loop0): using free space tree [ 408.764471][ T7709] EXT4-fs (loop4): 1 orphan inode deleted [ 408.770223][ T7709] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 408.780581][ T7718] batman_adv: batadv0: Interface deactivated: team0 [ 408.789449][ T7718] batman_adv: batadv0: Removing interface: team0 [ 408.826804][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.865010][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 408.920936][ T7718] device bridge_slave_0 left promiscuous mode [ 408.970443][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.022049][ T7718] device bridge_slave_1 left promiscuous mode [ 409.051894][ T3567] EXT4-fs (loop4): unmounting filesystem. [ 409.064899][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.115519][ T7718] bond0: (slave bond_slave_0): Releasing backup interface [ 409.126151][ T7716] BTRFS info (device loop0): enabling ssd optimizations [ 409.381430][ T7740] dlm: no local IP address has been set [ 409.387187][ T7740] dlm: cannot start dlm midcomms -107 [ 409.732864][ T7718] bond0: (slave bond_slave_1): Releasing backup interface [ 409.950190][ T7718] team0: Port device team_slave_0 removed [ 410.011017][ T3573] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 410.101045][ T7718] team0: Port device team_slave_1 removed [ 410.145425][ T7718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.155342][ T7718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.187640][ T7718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.213050][ T7718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.404710][ T7721] team0: Device ip6_vti0 is up. Set it down before adding it as a team port [ 410.423912][ T7718] syz-executor.2 (7718) used greatest stack depth: 19800 bytes left [ 410.432020][ T7745] device wlan1 entered promiscuous mode [ 410.599232][ T7753] loop4: detected capacity change from 0 to 256 [ 410.759275][ T3569] syz-executor.1 (3569) used greatest stack depth: 19576 bytes left [ 410.997688][ T7757] loop3: detected capacity change from 0 to 1024 [ 411.043673][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.162414][ T7761] loop0: detected capacity change from 0 to 1024 [ 411.241310][ T7761] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 411.264647][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.319790][ T3573] EXT4-fs (loop0): unmounting filesystem. [ 411.501282][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.523087][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.534760][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.543485][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.554242][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 411.575138][ T3584] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 411.627826][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.115366][ T100] hfsplus: b-tree write err: -5, ino 4 [ 412.225375][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.480841][ T7780] loop3: detected capacity change from 0 to 32768 [ 412.490172][ T7780] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7780) [ 412.515444][ T7780] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 412.526128][ T7780] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 412.535000][ T7780] BTRFS info (device loop3): using free space tree [ 412.623235][ T7784] bridge0: port 1(syz_tun) entered blocking state [ 412.634385][ T7784] bridge0: port 1(syz_tun) entered disabled state [ 412.656519][ T7784] device syz_tun entered promiscuous mode [ 412.677820][ T7784] bridge0: port 1(syz_tun) entered blocking state [ 412.685162][ T7784] bridge0: port 1(syz_tun) entered forwarding state [ 412.687489][ T7797] loop0: detected capacity change from 0 to 256 [ 412.715059][ T26] audit: type=1804 audit(1718068692.487:197): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1809447385/syzkaller.299CHv/185/file0/bus" dev="loop0" ino=1048890 res=1 errno=0 [ 412.782802][ T26] audit: type=1804 audit(1718068692.547:198): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1809447385/syzkaller.299CHv/185/file0/bus" dev="loop0" ino=1048890 res=1 errno=0 [ 412.896060][ T7780] BTRFS info (device loop3): enabling ssd optimizations [ 412.991995][ T7769] chnl_net:caif_netlink_parms(): no params data found [ 413.216431][ T7821] dlm: no local IP address has been set [ 413.222176][ T7821] dlm: cannot start dlm midcomms -107 [ 413.792279][ T3584] Bluetooth: hci2: command tx timeout [ 413.847294][ T3574] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 414.088872][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.102015][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.125741][ T7769] device bridge_slave_0 entered promiscuous mode [ 414.221129][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.239996][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.264704][ T7769] device bridge_slave_1 entered promiscuous mode [ 414.429134][ T7769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.452457][ T7839] loop4: detected capacity change from 0 to 1024 [ 414.527895][ T7769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.167194][ T7769] team0: Port device team_slave_0 added [ 415.242522][ T7769] team0: Port device team_slave_1 added [ 415.301875][ T7846] loop3: detected capacity change from 0 to 1024 [ 415.327464][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.343807][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.394680][ T7846] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 415.400710][ T7769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.770068][ T6099] hfsplus: b-tree write err: -5, ino 4 [ 415.821619][ T3574] EXT4-fs (loop3): unmounting filesystem. [ 415.883844][ T3584] Bluetooth: hci2: command tx timeout [ 415.935081][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.942116][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.020456][ T7769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.289608][ T7769] device hsr_slave_0 entered promiscuous mode [ 416.304740][ T7769] device hsr_slave_1 entered promiscuous mode [ 416.322953][ T7769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.335882][ T7769] Cannot create hsr debugfs directory [ 416.355345][ T35] device hsr_slave_0 left promiscuous mode [ 416.394236][ T35] device hsr_slave_1 left promiscuous mode [ 416.411020][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.425747][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.449923][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.473898][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.484385][ T7859] loop3: detected capacity change from 0 to 512 [ 416.487611][ T35] device bridge_slave_1 left promiscuous mode [ 416.507368][ T7859] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 416.516275][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.518306][ T7859] System zones: 1-12 [ 416.529197][ T7859] EXT4-fs (loop3): orphan cleanup on readonly fs [ 416.538487][ T35] device bridge_slave_0 left promiscuous mode [ 416.544932][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.565144][ T35] device veth1_macvtap left promiscuous mode [ 416.571934][ T35] device veth0_macvtap left promiscuous mode [ 416.579812][ T35] device veth1_vlan left promiscuous mode [ 416.587938][ T35] device veth0_vlan left promiscuous mode [ 416.668331][ T7859] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 328: padding at end of block bitmap is not set [ 416.741881][ T7859] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 416.782037][ T7859] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 65280 (level 0) [ 416.786142][ T7865] loop4: detected capacity change from 0 to 32768 [ 416.804859][ T7865] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7865) [ 416.821629][ T7865] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 416.831879][ T7865] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 416.840656][ T7865] BTRFS info (device loop4): using free space tree [ 416.850980][ T7859] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz-executor.3: attempt to clear invalid blocks 33619980 len 1 [ 416.878486][ T7859] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 1819239214 (level 0) [ 416.894217][ T7859] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 1819239214 (level 1) [ 416.915526][ T35] bond1 (unregistering): Released all slaves [ 416.927929][ T7859] EXT4-fs (loop3): 1 orphan inode deleted [ 416.945523][ T7859] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 417.142800][ T35] team0 (unregistering): Port device team_slave_1 removed [ 417.194099][ T35] team0 (unregistering): Port device team_slave_0 removed [ 417.209784][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.215219][ T7865] BTRFS info (device loop4): enabling ssd optimizations [ 417.239474][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.739547][ T7894] dlm: no local IP address has been set [ 417.745554][ T7894] dlm: cannot start dlm midcomms -107 [ 418.830332][ T3574] EXT4-fs (loop3): unmounting filesystem. [ 419.112910][ T35] bond0 (unregistering): Released all slaves [ 419.118595][ T3584] Bluetooth: hci2: command tx timeout [ 419.154696][ T3567] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 419.972744][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 419.982430][ T7921] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 419.992041][ T7921] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 420.012180][ T7921] loop3: detected capacity change from 0 to 512 [ 420.019584][ T7921] EXT4-fs: Ignoring removed mblk_io_submit option [ 420.988772][ T7921] EXT4-fs (loop3): can't mount with commit=6, fs mounted w/o journal [ 421.538990][ T3584] Bluetooth: hci2: command tx timeout [ 421.591319][ T7929] loop4: detected capacity change from 0 to 1024 [ 422.183324][ T7769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 422.216358][ T7769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 422.255480][ T7769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 422.288085][ T7769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 422.590337][ T7769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.647125][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 422.676304][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 422.702915][ T7769] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.726870][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 422.746451][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 422.763316][ T4816] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.770652][ T4816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.821272][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 422.972423][ T7965] loop2: detected capacity change from 0 to 512 [ 422.980265][ T7965] EXT4-fs: Ignoring removed mblk_io_submit option [ 423.005537][ T7965] EXT4-fs (loop2): can't mount with commit=6, fs mounted w/o journal [ 423.108361][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 423.883598][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 423.893859][ T4816] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.901005][ T4816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.919909][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 423.930857][ T7963] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 423.940372][ T7963] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 423.964757][ T7968] device veth0_macvtap left promiscuous mode [ 423.990742][ T7970] loop0: detected capacity change from 0 to 1024 [ 424.069714][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 424.135027][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 424.155049][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 424.213493][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 424.231839][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 424.252355][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 424.269771][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 424.280337][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 424.293685][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.341134][ T7972] smc: adding net device nicvf0 with user defined pnetid SYZ1 [ 424.362738][ T7769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.393542][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 424.401368][ T4205] hfsplus: b-tree write err: -5, ino 4 [ 424.449265][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 424.481873][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 425.126514][ T7970] loop0: detected capacity change from 0 to 32768 [ 425.324017][ T7769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.409616][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 425.434089][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 425.473875][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 425.482772][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 425.547970][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 425.564699][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 425.589822][ T7970] loop0: detected capacity change from 0 to 256 [ 425.608393][ T7769] device veth0_vlan entered promiscuous mode [ 425.646868][ T7970] FAT-fs (loop0): Unrecognized mount option "iocharseodir" or missing value [ 425.736345][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 425.747721][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 425.854467][ T7769] device veth1_vlan entered promiscuous mode [ 425.863517][ T3570] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.907966][ T3570] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.920126][ T3570] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.929918][ T3570] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.938914][ T3570] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 425.946362][ T3570] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 426.011744][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 426.036954][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 426.094502][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 426.144868][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 426.164127][ T7769] device veth0_macvtap entered promiscuous mode [ 426.219293][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 426.239221][ T7769] device veth1_macvtap entered promiscuous mode [ 426.322620][ T8016] loop2: detected capacity change from 0 to 1024 [ 426.356690][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.388652][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.420823][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.456265][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.489351][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.521350][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.559909][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.589403][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 426.617236][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 426.654612][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.681526][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.692368][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.706621][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.717170][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.728458][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.744308][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.771325][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 426.782382][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 426.803093][ T7769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.847455][ T7769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.885463][ T8022] loop3: detected capacity change from 0 to 1024 [ 426.887286][ T7769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.935493][ T7769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.035625][ T5621] hfsplus: b-tree write err: -5, ino 4 [ 427.308187][ T5621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.327930][ T8010] chnl_net:caif_netlink_parms(): no params data found [ 427.338490][ T5621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.370416][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 427.563506][ T3634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.582303][ T3634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.727578][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 427.912007][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.934032][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.942970][ T8010] device bridge_slave_0 entered promiscuous mode [ 427.953142][ T8010] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.960428][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.964238][ T3584] Bluetooth: hci0: command tx timeout [ 427.969125][ T8010] device bridge_slave_1 entered promiscuous mode [ 428.594023][ T8010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.723303][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.804225][ T4205] hfsplus: b-tree write err: -5, ino 4 [ 428.812170][ T8010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.876681][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.907653][ T8054] loop1: detected capacity change from 0 to 1024 [ 428.946398][ T8057] loop3: detected capacity change from 0 to 256 [ 428.962469][ T8010] team0: Port device team_slave_0 added [ 429.003470][ T8060] loop0: detected capacity change from 0 to 512 [ 429.030927][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.042863][ T8060] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 429.061925][ T8060] System zones: 1-12 [ 429.068655][ T8060] EXT4-fs (loop0): orphan cleanup on readonly fs [ 429.081950][ T8060] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 328: padding at end of block bitmap is not set [ 429.098077][ T8060] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 429.118254][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.130166][ T8060] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 65280 (level 0) [ 429.156095][ T8010] team0: Port device team_slave_1 added [ 429.164969][ T8060] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 33619980 len 1 [ 429.195537][ T8060] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 429.225856][ T8060] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 429.249403][ T8060] EXT4-fs (loop0): 1 orphan inode deleted [ 429.268562][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.285671][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.320801][ T8010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.343961][ T8060] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 429.372177][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.403921][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.465307][ T8010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.537139][ T8010] device hsr_slave_0 entered promiscuous mode [ 429.556461][ T8010] device hsr_slave_1 entered promiscuous mode [ 429.777063][ T8054] loop1: detected capacity change from 0 to 32768 [ 429.966591][ T3573] EXT4-fs (loop0): unmounting filesystem. [ 430.043988][ T3570] Bluetooth: hci0: command tx timeout [ 430.152224][ T8054] loop1: detected capacity change from 0 to 256 [ 430.177472][ T8054] FAT-fs (loop1): Unrecognized mount option "iocharseodir" or missing value [ 430.836925][ T35] device hsr_slave_0 left promiscuous mode [ 430.869145][ T35] device hsr_slave_1 left promiscuous mode [ 430.891688][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.905338][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.944797][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.952328][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.974387][ T35] device bridge_slave_1 left promiscuous mode [ 430.980699][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.021318][ T35] device bridge_slave_0 left promiscuous mode [ 431.036771][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.125274][ T35] device veth1_macvtap left promiscuous mode [ 431.131480][ T35] device veth0_macvtap left promiscuous mode [ 431.151013][ T35] device veth1_vlan left promiscuous mode [ 431.157341][ T35] device veth0_vlan left promiscuous mode [ 431.211062][ T8091] loop0: detected capacity change from 0 to 1024 [ 431.632235][ T8098] loop3: detected capacity change from 0 to 256 [ 431.915741][ T35] team0 (unregistering): Port device team_slave_1 removed [ 431.935704][ T35] team0 (unregistering): Port device team_slave_0 removed [ 431.953447][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.971965][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.079938][ T35] bond0 (unregistering): Released all slaves [ 432.134175][ T3570] Bluetooth: hci0: command tx timeout [ 432.146704][ T8010] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 432.274517][ T11] hfsplus: b-tree write err: -5, ino 4 [ 432.283481][ T8010] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 432.316985][ T8010] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 432.356883][ T8010] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 432.542410][ T8118] netlink: 4280 bytes leftover after parsing attributes in process `syz-executor.0'. [ 432.722362][ T8125] loop0: detected capacity change from 0 to 1024 [ 432.748544][ T8010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.838993][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.858342][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.891664][ T8010] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.914692][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 432.949814][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.960903][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.968149][ T4744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.024255][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 433.038451][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 433.062113][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 433.090554][ T3806] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.097806][ T3806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.154056][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 433.202558][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 433.222193][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 433.260966][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 433.324478][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 433.336898][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 433.370752][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 433.413192][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 433.447607][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 433.488208][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 433.518796][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 433.549486][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 433.775560][ T8125] loop0: detected capacity change from 0 to 32768 [ 434.040824][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 434.056717][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 434.070834][ T8160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.100745][ T8010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.123031][ T8161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.153057][ T8125] loop0: detected capacity change from 0 to 256 [ 434.173810][ T8125] FAT-fs (loop0): Unrecognized mount option "iocharseodir" or missing value [ 434.204058][ T3570] Bluetooth: hci0: command tx timeout [ 434.970796][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 434.980591][ T8181] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 434.990170][ T8181] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 435.010743][ T8181] loop2: detected capacity change from 0 to 512 [ 435.019743][ T8181] EXT4-fs: Ignoring removed mblk_io_submit option [ 435.099091][ T8181] EXT4-fs (loop2): can't mount with commit=6, fs mounted w/o journal [ 435.993706][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 436.009768][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.082591][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 436.097904][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 436.115678][ T8010] device veth0_vlan entered promiscuous mode [ 436.141061][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 436.167597][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 436.188959][ T8010] device veth1_vlan entered promiscuous mode [ 436.244963][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 436.253432][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 436.323565][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 436.361580][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 436.436300][ T8010] device veth0_macvtap entered promiscuous mode [ 436.501761][ T8010] device veth1_macvtap entered promiscuous mode [ 436.574498][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.579610][ T8201] sctp: [Deprecated]: syz-executor.1 (pid 8201) Use of int in max_burst socket option deprecated. [ 436.579610][ T8201] Use struct sctp_assoc_value instead [ 436.627839][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.648818][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.679819][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.707142][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.735620][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.765526][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.797281][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 436.810389][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 436.832229][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 436.861883][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 436.885081][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.923115][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.958598][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.988589][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.997896][ T8218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.043935][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.083899][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.133951][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.142782][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 437.159372][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 437.196928][ T8010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.214657][ T8010] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.223429][ T8010] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.249991][ T8010] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.475213][ T5621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.515194][ T5621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.566894][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 437.580849][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.606919][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.640908][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 437.659381][ T8237] loop0: detected capacity change from 0 to 1024 [ 438.239334][ T8257] loop2: detected capacity change from 0 to 1024 [ 438.318017][ T35] hfsplus: b-tree write err: -5, ino 4 [ 439.300541][ T8237] loop0: detected capacity change from 0 to 32768 [ 439.832963][ T8237] loop0: detected capacity change from 0 to 256 [ 439.837968][ T3584] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 439.849999][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 439.860334][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 439.860921][ T8237] FAT-fs (loop0): Unrecognized mount option "iocharseodir" or missing value [ 439.884599][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 439.895646][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 439.903056][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.967842][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.098620][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.099995][ T8297] loop2: detected capacity change from 0 to 1024 [ 440.288821][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.304601][ T3653] hfsplus: b-tree write err: -5, ino 4 [ 440.412608][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.508134][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.635232][ T8285] chnl_net:caif_netlink_parms(): no params data found [ 441.092117][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.125165][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.152898][ T8285] device bridge_slave_0 entered promiscuous mode [ 441.174735][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.193987][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.202299][ T8285] device bridge_slave_1 entered promiscuous mode [ 441.356507][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.418479][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.562010][ T8285] team0: Port device team_slave_0 added [ 441.602819][ T8285] team0: Port device team_slave_1 added [ 441.693648][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.734226][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.802011][ T8285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.854840][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.861933][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.004142][ T48] Bluetooth: hci2: command tx timeout [ 442.041554][ T8285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.111291][ T8344] loop2: detected capacity change from 0 to 32768 [ 442.123365][ T8344] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (8344) [ 442.140639][ T8344] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 442.151019][ T8344] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 442.159903][ T8344] BTRFS info (device loop2): using free space tree [ 442.177983][ T8346] loop0: detected capacity change from 0 to 512 [ 442.220015][ T8346] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 442.240429][ T8344] BTRFS info (device loop2): enabling ssd optimizations [ 442.251080][ T8346] System zones: 1-12 [ 442.294291][ T8285] device hsr_slave_0 entered promiscuous mode [ 442.301725][ T8346] EXT4-fs (loop0): orphan cleanup on readonly fs [ 442.311376][ T8368] loop4: detected capacity change from 0 to 1024 [ 442.318444][ T8285] device hsr_slave_1 entered promiscuous mode [ 442.344576][ T8346] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 328: padding at end of block bitmap is not set [ 442.374557][ T8285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.403502][ T8285] Cannot create hsr debugfs directory [ 442.447792][ T8346] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 442.487800][ T8346] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 65280 (level 0) [ 442.560955][ T8371] dlm: no local IP address has been set [ 442.566761][ T8371] dlm: cannot start dlm midcomms -107 [ 443.115363][ T8346] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 33619980 len 1 [ 443.136033][ T3568] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 443.146795][ T8346] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 443.174599][ T8346] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 443.220777][ T8346] EXT4-fs (loop0): 1 orphan inode deleted [ 443.227138][ T8346] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 443.446806][ T11] device hsr_slave_0 left promiscuous mode [ 443.461216][ T11] device hsr_slave_1 left promiscuous mode [ 443.487045][ T8368] loop4: detected capacity change from 0 to 32768 [ 443.494040][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.501495][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.532843][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.568411][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.584873][ T3573] EXT4-fs (loop0): unmounting filesystem. [ 443.615084][ T11] device bridge_slave_1 left promiscuous mode [ 443.621464][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.648275][ T11] device bridge_slave_0 left promiscuous mode [ 443.666269][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.714416][ T11] device veth1_macvtap left promiscuous mode [ 443.721368][ T11] device veth0_macvtap left promiscuous mode [ 443.741063][ T11] device veth1_vlan left promiscuous mode [ 443.752150][ T11] device veth0_vlan left promiscuous mode [ 443.791678][ T8368] loop4: detected capacity change from 0 to 256 [ 443.827054][ T8368] FAT-fs (loop4): Unrecognized mount option "iocharseodir" or missing value [ 444.043924][ T3570] Bluetooth: hci2: command tx timeout [ 444.236175][ T11] team0 (unregistering): Port device team_slave_1 removed [ 444.251649][ T11] team0 (unregistering): Port device team_slave_0 removed [ 444.273281][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.301566][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.457256][ T11] bond0 (unregistering): Released all slaves [ 444.719567][ T8392] team0: Port device team_slave_0 removed [ 445.205148][ T8398] loop3: detected capacity change from 0 to 32768 [ 445.213408][ T8398] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (8398) [ 445.238184][ T8398] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 445.248571][ T8398] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 445.258396][ T8398] BTRFS info (device loop3): using free space tree [ 445.297772][ T8402] team0: Port device wlan1 added [ 445.309893][ T8401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.391216][ T8409] loop0: detected capacity change from 0 to 1024 [ 445.441881][ T4205] hfsplus: b-tree write err: -5, ino 4 [ 445.563441][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 445.573312][ T8423] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 445.582836][ T8423] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 445.601313][ T8423] loop4: detected capacity change from 0 to 512 [ 445.608761][ T8423] EXT4-fs: Ignoring removed mblk_io_submit option [ 445.625614][ T8423] EXT4-fs (loop4): can't mount with commit=6, fs mounted w/o journal [ 445.917158][ T8398] BTRFS info (device loop3): enabling ssd optimizations [ 446.133860][ T3570] Bluetooth: hci2: command tx timeout [ 446.254173][ T8285] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 446.433198][ T8285] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 446.494378][ T8285] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 446.593201][ T8285] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 446.674880][ T8439] dlm: no local IP address has been set [ 446.680545][ T8439] dlm: cannot start dlm midcomms -107 [ 447.386992][ T3574] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 448.243955][ T48] Bluetooth: hci2: command tx timeout [ 448.286368][ T8285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.656125][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 448.698445][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 448.758072][ T8285] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.805391][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 448.820913][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 448.845280][ T4822] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.852432][ T4822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.884187][ T8448] loop4: detected capacity change from 0 to 2048 [ 448.930552][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 448.955200][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 448.988192][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 448.991783][ T8448] EXT4-fs: Ignoring removed mblk_io_submit option [ 449.005512][ T8448] ext4: Unknown parameter 'audit' [ 449.033412][ T3893] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.040597][ T3893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.075722][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 449.086381][ T8459] loop2: detected capacity change from 0 to 1024 [ 449.105448][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 449.140892][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 449.171423][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 449.189100][ T8445] sctp: [Deprecated]: syz-executor.4 (pid 8445) Use of int in max_burst socket option deprecated. [ 449.189100][ T8445] Use struct sctp_assoc_value instead [ 449.211816][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 449.268733][ T35] hfsplus: b-tree write err: -5, ino 4 [ 449.414485][ T8467] loop0: detected capacity change from 0 to 512 [ 449.424600][ T8467] EXT4-fs: Ignoring removed mblk_io_submit option [ 449.579907][ T8467] EXT4-fs (loop0): can't mount with commit=6, fs mounted w/o journal [ 450.271080][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 450.286423][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 450.332459][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 450.378728][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 450.412147][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 450.421773][ T8466] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 450.431289][ T8466] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 450.449988][ T8285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.469147][ T8474] loop3: detected capacity change from 0 to 512 [ 450.497031][ T8285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 450.554598][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 450.564832][ T8474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 450.586684][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 450.634089][ T8474] System zones: 1-12 [ 450.677732][ T8474] EXT4-fs (loop3): orphan cleanup on readonly fs [ 450.703247][ T8474] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 328: padding at end of block bitmap is not set [ 450.729514][ T8474] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 450.739876][ T8474] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 65280 (level 0) [ 450.760708][ T8474] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz-executor.3: attempt to clear invalid blocks 33619980 len 1 [ 450.955800][ T8482] loop2: detected capacity change from 0 to 32768 [ 450.984105][ T8482] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (8482) [ 450.999676][ T8482] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 451.009992][ T8482] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 451.018718][ T8482] BTRFS info (device loop2): using free space tree [ 451.041992][ T8474] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 1819239214 (level 0) [ 451.150748][ T8474] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 1819239214 (level 1) [ 451.211808][ T8482] BTRFS info (device loop2): enabling ssd optimizations [ 451.362320][ T8474] EXT4-fs (loop3): 1 orphan inode deleted [ 451.404115][ T8474] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 451.470508][ T8507] dlm: no local IP address has been set [ 451.476338][ T8507] dlm: cannot start dlm midcomms -107 [ 451.591779][ T8506] device veth0_macvtap left promiscuous mode [ 452.115929][ T3568] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 452.149494][ T3574] EXT4-fs (loop3): unmounting filesystem. [ 452.178651][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 452.207538][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 452.284042][ T8285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.487615][ T8515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 452.512253][ T8515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 452.609542][ T8515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 452.621045][ T8515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 452.662527][ T8285] device veth0_vlan entered promiscuous mode [ 452.687620][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 452.704071][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 452.753636][ T8285] device veth1_vlan entered promiscuous mode [ 452.893535][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 452.915921][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 452.940609][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 453.141844][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 453.157975][ T8285] device veth0_macvtap entered promiscuous mode [ 453.201809][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 453.236089][ T8285] device veth1_macvtap entered promiscuous mode [ 453.318051][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.352870][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.366029][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.377948][ T26] audit: type=1800 audit(1718068733.157:199): pid=8532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".pending_reads" dev="sda1" ino=1959 res=0 errno=0 [ 453.402444][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.412895][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.427836][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.443078][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.463926][ T8515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 453.479560][ T8515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 453.501290][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.520810][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.547104][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.571723][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.592126][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.608591][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.620511][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.629784][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 453.652257][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 453.665684][ T8285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.677397][ T8285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.686646][ T8285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.695423][ T8285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.920491][ T8542] loop4: detected capacity change from 0 to 32768 [ 453.928665][ T8542] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8542) [ 453.949020][ T8542] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 453.960281][ T8542] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 453.969170][ T8542] BTRFS info (device loop4): using free space tree [ 454.025463][ T3634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.062634][ T5621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.077186][ T5621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.077877][ T3634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.095350][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 454.130904][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 454.243324][ T8542] BTRFS info (device loop4): enabling ssd optimizations [ 454.255957][ T8572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.569673][ T8585] dlm: no local IP address has been set [ 454.575938][ T8585] dlm: cannot start dlm midcomms -107 [ 455.143384][ T8010] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 455.321690][ T8595] loop0: detected capacity change from 0 to 1024 [ 455.480574][ T8588] loop3: detected capacity change from 0 to 2048 [ 455.509042][ T3634] hfsplus: b-tree write err: -5, ino 4 [ 455.559798][ T8588] EXT4-fs: Ignoring removed mblk_io_submit option [ 455.595839][ T8588] ext4: Unknown parameter 'audit' [ 455.903226][ T8619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.936731][ T8588] sctp: [Deprecated]: syz-executor.3 (pid 8588) Use of int in max_burst socket option deprecated. [ 455.936731][ T8588] Use struct sctp_assoc_value instead [ 456.295504][ T8636] loop4: detected capacity change from 0 to 1024 [ 456.376768][ T4205] hfsplus: b-tree write err: -5, ino 4 [ 457.440806][ T8674] loop0: detected capacity change from 0 to 1024 [ 457.522670][ T11] hfsplus: b-tree write err: -5, ino 4 [ 457.708532][ T8684] team0: Port device wlan1 added [ 458.244833][ T8688] loop4: detected capacity change from 0 to 2048 [ 458.328473][ T8688] EXT4-fs: Ignoring removed mblk_io_submit option [ 458.375087][ T8688] ext4: Unknown parameter 'audit' [ 458.710608][ T8710] loop3: detected capacity change from 0 to 1024 [ 459.622274][ T3634] hfsplus: b-tree write err: -5, ino 4 [ 459.681958][ T8688] sctp: [Deprecated]: syz-executor.4 (pid 8688) Use of int in max_burst socket option deprecated. [ 459.681958][ T8688] Use struct sctp_assoc_value instead [ 459.772731][ T8716] loop3: detected capacity change from 0 to 1024 [ 460.077862][ T3634] hfsplus: b-tree write err: -5, ino 4 [ 460.431584][ T8729] loop4: detected capacity change from 0 to 256 [ 460.681652][ T8732] loop2: detected capacity change from 0 to 1024 [ 461.878519][ T8748] loop3: detected capacity change from 0 to 1024 [ 462.590956][ T4205] hfsplus: b-tree write err: -5, ino 4 [ 462.736987][ T8756] loop3: detected capacity change from 0 to 1024 [ 462.821463][ T11] hfsplus: b-tree write err: -5, ino 4 [ 462.837361][ T8732] loop2: detected capacity change from 0 to 32768 [ 463.086633][ T8767] loop1: detected capacity change from 0 to 256 [ 463.182458][ T8732] loop2: detected capacity change from 0 to 256 [ 463.204679][ T8732] FAT-fs (loop2): Unrecognized mount option "iocharseodir" or missing value [ 463.432398][ T8766] loop3: detected capacity change from 0 to 2048 [ 463.457420][ T8766] EXT4-fs: Ignoring removed mblk_io_submit option [ 463.465278][ T8766] ext4: Unknown parameter 'audit' [ 464.753453][ T8785] sctp: [Deprecated]: syz-executor.3 (pid 8785) Use of int in max_burst socket option deprecated. [ 464.753453][ T8785] Use struct sctp_assoc_value instead [ 465.458146][ T8793] loop4: detected capacity change from 0 to 1024 [ 466.315415][ T11] hfsplus: b-tree write err: -5, ino 4 [ 466.561931][ T8797] team0: Port device wlan1 added [ 466.589285][ T8796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.715988][ T8803] loop0: detected capacity change from 0 to 256 [ 467.489031][ T8826] loop3: detected capacity change from 0 to 1024 [ 468.191258][ T4205] hfsplus: b-tree write err: -5, ino 4 [ 468.392705][ T8835] loop4: detected capacity change from 0 to 512 [ 468.453152][ T8835] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 468.481642][ T8835] System zones: 1-12 [ 468.486845][ T8835] EXT4-fs (loop4): orphan cleanup on readonly fs [ 468.511386][ T8835] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 328: padding at end of block bitmap is not set [ 468.610201][ T8835] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 468.642053][ T8835] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 65280 (level 0) [ 468.706541][ T8835] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz-executor.4: attempt to clear invalid blocks 33619980 len 1 [ 468.754653][ T8835] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 0) [ 468.820285][ T8835] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 1) [ 468.871877][ T8835] EXT4-fs (loop4): 1 orphan inode deleted [ 468.908565][ T8835] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 468.970546][ T8841] loop3: detected capacity change from 0 to 2048 [ 469.048017][ T8841] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.093036][ T8841] ext4: Unknown parameter 'audit' [ 469.214459][ T8010] EXT4-fs (loop4): unmounting filesystem. [ 469.362244][ T8841] sctp: [Deprecated]: syz-executor.3 (pid 8841) Use of int in max_burst socket option deprecated. [ 469.362244][ T8841] Use struct sctp_assoc_value instead [ 471.132563][ T8872] loop3: detected capacity change from 0 to 1024 [ 471.824556][ T4205] hfsplus: b-tree write err: -5, ino 4 [ 472.108005][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 472.526201][ T8889] loop4: detected capacity change from 0 to 32768 [ 472.534577][ T8889] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8889) [ 472.551487][ T8889] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 472.561782][ T8889] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 472.570579][ T8889] BTRFS info (device loop4): using free space tree [ 472.705162][ T8889] BTRFS info (device loop4): enabling ssd optimizations [ 473.017638][ T8914] dlm: no local IP address has been set [ 473.023311][ T8914] dlm: cannot start dlm midcomms -107 [ 473.625542][ T8010] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 474.639939][ T8959] loop4: detected capacity change from 0 to 32768 [ 474.648350][ T8959] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8959) [ 474.665873][ T8959] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 474.676138][ T8959] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 474.685032][ T8959] BTRFS info (device loop4): using free space tree [ 474.953843][ T8959] BTRFS info (device loop4): enabling ssd optimizations [ 475.267775][ T8992] dlm: no local IP address has been set [ 475.273427][ T8992] dlm: cannot start dlm midcomms -107 [ 475.863610][ T8010] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 477.278526][ T9046] loop0: detected capacity change from 0 to 32768 [ 477.286296][ T9046] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (9046) [ 477.314727][ T9046] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 477.325034][ T9046] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 477.333843][ T9046] BTRFS info (device loop0): using free space tree [ 477.418311][ T9046] BTRFS info (device loop0): enabling ssd optimizations [ 477.673488][ T9074] dlm: no local IP address has been set [ 477.679217][ T9074] dlm: cannot start dlm midcomms -107 [ 478.271767][ T3573] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 478.929843][ T9087] loop3: detected capacity change from 0 to 2048 [ 478.967066][ T9097] loop1: detected capacity change from 0 to 256 [ 478.968827][ T9087] EXT4-fs: Ignoring removed mblk_io_submit option [ 479.009982][ T9087] ext4: Unknown parameter 'audit' [ 479.042791][ T9097] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 479.129037][ T26] audit: type=1800 audit(1718068758.907:200): pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=1048905 res=0 errno=0 [ 479.188551][ T9087] sctp: [Deprecated]: syz-executor.3 (pid 9087) Use of int in max_burst socket option deprecated. [ 479.188551][ T9087] Use struct sctp_assoc_value instead [ 479.213795][ T4744] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 479.584810][ T4744] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 479.619506][ T4744] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 479.667726][ T4744] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.683306][ T4744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.733938][ T3893] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 480.013974][ T3893] usb 2-1: Using ep0 maxpacket: 16 [ 480.024070][ T4744] usb 5-1: string descriptor 0 read error: -71 [ 480.041482][ T4744] usb 5-1: USB disconnect, device number 13 [ 480.164060][ T3893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 480.183742][ T3893] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 480.207536][ T3893] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 480.248157][ T3893] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 480.273535][ T3893] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 480.294420][ T3893] usb 2-1: config 1 interface 0 has no altsetting 0 [ 480.301133][ T3893] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 480.330974][ T3893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.395045][ T3893] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 480.616433][ T3893] scsi host1: usb-storage 2-1:1.0 [ 481.681728][ T5621] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 481.730307][ T9126] loop4: detected capacity change from 0 to 32768 [ 481.749703][ T5621] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 481.803743][ T9126] XFS (loop4): Mounting V5 Filesystem [ 481.875619][ T9127] sddr09: could not read card info [ 481.889379][ T9157] loop2: detected capacity change from 0 to 256 [ 481.902526][ T9126] XFS (loop4): Ending clean mount [ 481.984719][ T26] audit: type=1326 audit(1718068761.767:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4053a7cf69 code=0x7ffc0000 [ 482.014883][ T26] audit: type=1326 audit(1718068761.767:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4053a7cf69 code=0x7ffc0000 [ 482.047135][ T26] audit: type=1326 audit(1718068761.817:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4053a7a6e7 code=0x7ffc0000 [ 482.073657][ T8010] XFS (loop4): Unmounting Filesystem [ 482.083666][ T9127] usb 2-1: reset high-speed USB device number 14 using dummy_hcd [ 482.169706][ T26] audit: type=1326 audit(1718068761.817:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4053a403d9 code=0x7ffc0000 [ 482.214705][ T26] audit: type=1326 audit(1718068761.817:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4053a7a6e7 code=0x7ffc0000 [ 482.272727][ T26] audit: type=1326 audit(1718068761.817:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4053a403d9 code=0x7ffc0000 [ 482.319598][ T26] audit: type=1326 audit(1718068761.817:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4053a7a6e7 code=0x7ffc0000 [ 482.364334][ T26] audit: type=1326 audit(1718068761.817:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4053a403d9 code=0x7ffc0000 [ 482.412556][ T26] audit: type=1326 audit(1718068761.817:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4053a7a6e7 code=0x7ffc0000 [ 482.979545][ T4821] usb 2-1: USB disconnect, device number 14 [ 483.035736][ T11] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 483.056913][ T11] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 483.121345][ T11] sd 1:0:0:0: [sdb] Write Protect is off [ 483.148997][ T11] sd 1:0:0:0: [sdb] Asking for cache data failed [ 483.155716][ T11] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 483.280134][ T11] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 484.354622][ T9163] loop4: detected capacity change from 0 to 2048 [ 484.403276][ T9163] EXT4-fs: Ignoring removed mblk_io_submit option [ 484.456464][ T9163] ext4: Unknown parameter 'audit' [ 484.532983][ T9197] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 484.735272][ T9195] loop3: detected capacity change from 0 to 32768 [ 484.747882][ T9195] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (9195) [ 484.771873][ T9195] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 484.782149][ T9195] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 484.791431][ T9195] BTRFS info (device loop3): using free space tree [ 484.798642][ T9162] sctp: [Deprecated]: syz-executor.4 (pid 9162) Use of int in max_burst socket option deprecated. [ 484.798642][ T9162] Use struct sctp_assoc_value instead [ 484.859615][ T9195] BTRFS info (device loop3): enabling ssd optimizations [ 485.090129][ T26] kauditd_printk_skb: 89 callbacks suppressed [ 485.090145][ T26] audit: type=1326 audit(1718068764.867:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9219 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4053a7cf69 code=0x0 [ 485.120882][ T9221] dlm: no local IP address has been set [ 485.126632][ T9221] dlm: cannot start dlm midcomms -107 [ 485.687668][ T3574] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 485.969855][ T26] audit: type=1326 audit(1718068765.747:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfac7cf69 code=0x7ffc0000 [ 486.051240][ T26] audit: type=1326 audit(1718068765.747:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfac7cf69 code=0x7ffc0000 [ 486.128579][ T26] audit: type=1326 audit(1718068765.777:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f6bfac7cf69 code=0x7ffc0000 [ 486.192352][ T26] audit: type=1326 audit(1718068765.777:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfac7cf69 code=0x7ffc0000 [ 486.273562][ T9242] loop1: detected capacity change from 0 to 2048 [ 486.283855][ T26] audit: type=1326 audit(1718068765.777:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfac7cf69 code=0x7ffc0000 [ 486.310125][ T9242] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 486.329220][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 486.357891][ T9242] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 486.375688][ T9242] System zones: 0-19 [ 486.399453][ T9242] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 486.409285][ T9251] ------------[ cut here ]------------ [ 486.415363][ T9251] WARNING: CPU: 1 PID: 9251 at include/linux/skbuff.h:2641 skb_ensure_writable+0x2e6/0x430 [ 486.425478][ T9251] Modules linked in: [ 486.429423][ T9251] CPU: 1 PID: 9251 Comm: syz-executor.4 Not tainted 6.1.92-syzkaller #0 [ 486.437900][ T9251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 486.448309][ T9251] RIP: 0010:skb_ensure_writable+0x2e6/0x430 [ 486.454386][ T9251] Code: c3 e8 de ea 0d f9 4c 89 ef 31 f6 31 d2 b9 20 0a 00 00 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ef 0f fe ff e8 ba ea 0d f9 <0f> 0b e9 44 fd ff ff 44 89 f7 44 89 e6 e8 08 ec 0d f9 45 39 e6 0f [ 486.474107][ T9251] RSP: 0018:ffffc9000ce4f918 EFLAGS: 00010287 [ 486.480219][ T9251] RAX: ffffffff887ca296 RBX: ffff888073904140 RCX: 0000000000040000 [ 486.488288][ T9251] RDX: ffffc900049db000 RSI: 00000000000000fb RDI: 00000000000000fc [ 486.496441][ T9251] RBP: 00000000eb5d3131 R08: ffffffff887c9fd3 R09: fffffbfff1ce712e [ 486.504502][ T9251] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000eb5d3131 [ 486.512606][ T9251] R13: ffff888073904140 R14: ffffc9000ce31020 R15: dffffc0000000000 [ 486.520693][ T9251] FS: 00007f6bfbab96c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 486.529724][ T9251] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.536399][ T9251] CR2: 0000001b2fb22000 CR3: 0000000056da0000 CR4: 00000000003506e0 [ 486.544469][ T9251] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 486.552483][ T9251] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 486.560560][ T9251] Call Trace: [ 486.563916][ T9251] [ 486.566889][ T9251] ? __warn+0x15a/0x520 [ 486.571088][ T9251] ? skb_ensure_writable+0x2e6/0x430 [ 486.576488][ T9251] ? report_bug+0x2af/0x500 [ 486.581044][ T9251] ? skb_ensure_writable+0x2e6/0x430 [ 486.586445][ T9251] ? handle_bug+0x3d/0x70 [ 486.590830][ T9251] ? exc_invalid_op+0x16/0x40 [ 486.595644][ T9251] ? asm_exc_invalid_op+0x16/0x20 [ 486.600742][ T9251] ? skb_ensure_writable+0x23/0x430 [ 486.606050][ T9251] ? skb_ensure_writable+0x2e6/0x430 [ 486.611497][ T9251] ? skb_ensure_writable+0x2e6/0x430 [ 486.616897][ T9251] ? skb_ensure_writable+0x2e6/0x430 [ 486.622261][ T9251] bpf_skb_pull_data+0x78/0x220 [ 486.627220][ T9251] bpf_prog_643fb1e587a79136+0x15/0x17 [ 486.632740][ T9251] bpf_test_run+0x40f/0x8b0 [ 486.637385][ T9251] ? convert___skb_to_skb+0x610/0x610 [ 486.642806][ T9251] ? eth_type_trans+0x3cd/0x7a0 [ 486.647769][ T9251] ? eth_get_headlen+0x240/0x240 [ 486.652858][ T9251] ? convert___skb_to_skb+0x41/0x610 [ 486.658265][ T9251] ? build_skb+0x112/0x250 [ 486.662768][ T9251] bpf_prog_test_run_skb+0xaf1/0x13a0 [ 486.668285][ T9251] ? cpu_online+0xb0/0xb0 [ 486.672673][ T9251] ? cpu_online+0xb0/0xb0 [ 486.677171][ T9251] bpf_prog_test_run+0x32f/0x3a0 [ 486.682166][ T9251] __sys_bpf+0x3eb/0x6c0 [ 486.686519][ T9251] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 486.691965][ T9251] ? print_irqtrace_events+0x210/0x210 [ 486.697538][ T9251] ? print_irqtrace_events+0x210/0x210 [ 486.703056][ T9251] ? syscall_enter_from_user_mode+0x2e/0x230 [ 486.709137][ T9251] ? lockdep_hardirqs_on+0x94/0x130 [ 486.714429][ T9251] __x64_sys_bpf+0x78/0x90 [ 486.718901][ T9251] do_syscall_64+0x3b/0xb0 [ 486.723367][ T9251] ? clear_bhb_loop+0x45/0xa0 [ 486.728164][ T9251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.734148][ T9251] RIP: 0033:0x7f6bfac7cf69 [ 486.738597][ T9251] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 486.758294][ T9251] RSP: 002b:00007f6bfbab90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 486.766816][ T9251] RAX: ffffffffffffffda RBX: 00007f6bfadb3f80 RCX: 00007f6bfac7cf69 [ 486.774885][ T9251] RDX: 0000000000000050 RSI: 0000000020000080 RDI: 000000000000000a [ 486.782990][ T9251] RBP: 00007f6bfacda6fe R08: 0000000000000000 R09: 0000000000000000 [ 486.791167][ T9251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.799241][ T9251] R13: 000000000000000b R14: 00007f6bfadb3f80 R15: 00007ffe3c363e28 [ 486.807513][ T9251] [ 486.810578][ T9251] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 486.817955][ T9251] CPU: 1 PID: 9251 Comm: syz-executor.4 Not tainted 6.1.92-syzkaller #0 [ 486.826294][ T9251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 486.836357][ T9251] Call Trace: [ 486.839637][ T9251] [ 486.842571][ T9251] dump_stack_lvl+0x1e3/0x2cb [ 486.847271][ T9251] ? nf_tcp_handle_invalid+0x642/0x642 [ 486.852744][ T9251] ? panic+0x764/0x764 [ 486.856916][ T9251] ? vscnprintf+0x59/0x80 [ 486.861255][ T9251] panic+0x318/0x764 [ 486.865159][ T9251] ? __warn+0x169/0x520 [ 486.869320][ T9251] ? memcpy_page_flushcache+0xfc/0xfc [ 486.874748][ T9251] __warn+0x348/0x520 [ 486.878737][ T9251] ? skb_ensure_writable+0x2e6/0x430 [ 486.884038][ T9251] report_bug+0x2af/0x500 [ 486.888370][ T9251] ? skb_ensure_writable+0x2e6/0x430 [ 486.893667][ T9251] handle_bug+0x3d/0x70 [ 486.897939][ T9251] exc_invalid_op+0x16/0x40 [ 486.902467][ T9251] asm_exc_invalid_op+0x16/0x20 [ 486.907334][ T9251] RIP: 0010:skb_ensure_writable+0x2e6/0x430 [ 486.913361][ T9251] Code: c3 e8 de ea 0d f9 4c 89 ef 31 f6 31 d2 b9 20 0a 00 00 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ef 0f fe ff e8 ba ea 0d f9 <0f> 0b e9 44 fd ff ff 44 89 f7 44 89 e6 e8 08 ec 0d f9 45 39 e6 0f [ 486.933166][ T9251] RSP: 0018:ffffc9000ce4f918 EFLAGS: 00010287 [ 486.939249][ T9251] RAX: ffffffff887ca296 RBX: ffff888073904140 RCX: 0000000000040000 [ 486.947226][ T9251] RDX: ffffc900049db000 RSI: 00000000000000fb RDI: 00000000000000fc [ 486.955201][ T9251] RBP: 00000000eb5d3131 R08: ffffffff887c9fd3 R09: fffffbfff1ce712e [ 486.963354][ T9251] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000eb5d3131 [ 486.971334][ T9251] R13: ffff888073904140 R14: ffffc9000ce31020 R15: dffffc0000000000 [ 486.979408][ T9251] ? skb_ensure_writable+0x23/0x430 [ 486.984620][ T9251] ? skb_ensure_writable+0x2e6/0x430 [ 486.989927][ T9251] ? skb_ensure_writable+0x2e6/0x430 [ 486.995227][ T9251] bpf_skb_pull_data+0x78/0x220 [ 487.000087][ T9251] bpf_prog_643fb1e587a79136+0x15/0x17 [ 487.005557][ T9251] bpf_test_run+0x40f/0x8b0 [ 487.010087][ T9251] ? convert___skb_to_skb+0x610/0x610 [ 487.015491][ T9251] ? eth_type_trans+0x3cd/0x7a0 [ 487.020394][ T9251] ? eth_get_headlen+0x240/0x240 [ 487.025353][ T9251] ? convert___skb_to_skb+0x41/0x610 [ 487.030823][ T9251] ? build_skb+0x112/0x250 [ 487.035281][ T9251] bpf_prog_test_run_skb+0xaf1/0x13a0 [ 487.040687][ T9251] ? cpu_online+0xb0/0xb0 [ 487.045057][ T9251] ? cpu_online+0xb0/0xb0 [ 487.049425][ T9251] bpf_prog_test_run+0x32f/0x3a0 [ 487.054407][ T9251] __sys_bpf+0x3eb/0x6c0 [ 487.058668][ T9251] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 487.064097][ T9251] ? print_irqtrace_events+0x210/0x210 [ 487.069582][ T9251] ? print_irqtrace_events+0x210/0x210 [ 487.075064][ T9251] ? syscall_enter_from_user_mode+0x2e/0x230 [ 487.081052][ T9251] ? lockdep_hardirqs_on+0x94/0x130 [ 487.086261][ T9251] __x64_sys_bpf+0x78/0x90 [ 487.090691][ T9251] do_syscall_64+0x3b/0xb0 [ 487.095130][ T9251] ? clear_bhb_loop+0x45/0xa0 [ 487.099927][ T9251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.105833][ T9251] RIP: 0033:0x7f6bfac7cf69 [ 487.110260][ T9251] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 487.129874][ T9251] RSP: 002b:00007f6bfbab90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.138302][ T9251] RAX: ffffffffffffffda RBX: 00007f6bfadb3f80 RCX: 00007f6bfac7cf69 [ 487.146282][ T9251] RDX: 0000000000000050 RSI: 0000000020000080 RDI: 000000000000000a [ 487.154255][ T9251] RBP: 00007f6bfacda6fe R08: 0000000000000000 R09: 0000000000000000 [ 487.162230][ T9251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.170210][ T9251] R13: 000000000000000b R14: 00007f6bfadb3f80 R15: 00007ffe3c363e28 [ 487.178291][ T9251] [ 487.181623][ T9251] Kernel Offset: disabled [ 487.186018][ T9251] Rebooting in 86400 seconds..