last executing test programs: 41.189115095s ago: executing program 1 (id=2760): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000b00)=ANY=[@ANYBLOB="30010000c46f3d08a905402612550000000109025d00010000000009040000000e010008232401"], 0x0) 38.566860767s ago: executing program 1 (id=2774): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 38.091753234s ago: executing program 1 (id=2777): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000400), 0x800, 0x0) preadv(r0, &(0x7f0000002d00)=[{&(0x7f0000001ac0)=""/2, 0x2}], 0x1, 0x1, 0xfd8) 37.622553172s ago: executing program 1 (id=2780): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 37.169794294s ago: executing program 1 (id=2783): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 36.697603708s ago: executing program 1 (id=2787): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 19.778173987s ago: executing program 2 (id=2864): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x210004, &(0x7f00000000c0)={[{@noquota}, {@errors_continue}, {@nodiscard}, {@uid}, {@quota}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@usrquota}, {@usrquota}, {@gid}]}, 0x3, 0x62b5, &(0x7f00000069c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 16.671660164s ago: executing program 4 (id=2873): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0xbe, 0x3c, 0x31, 0x8, 0x17dd, 0x5500, 0xe18c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe1, 0x0, 0x3, 0x7b, 0xc1, 0x1a, 0x0, [], [{{0x9, 0x5, 0x80, 0x0, 0x10, 0xb, 0x2, 0x8}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x8, 0x0, 0x1}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x80, 0x7c, 0x81, [@generic={0x7, 0x5, "d8ab5c85e9"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 15.325021909s ago: executing program 2 (id=2879): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff18) 13.292512315s ago: executing program 2 (id=2885): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3ff}]}, 0x50}}, 0x0) 12.297545998s ago: executing program 4 (id=2889): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000340)) 11.71301114s ago: executing program 4 (id=2892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000205000400000000000900020073797a30000000000500010007000000050005000a000400140007800800114000000000080012400000ffff0d000300686173683a6e6574"], 0x5c}}, 0x0) 11.241378357s ago: executing program 2 (id=2895): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f00000003c0)) 11.144048785s ago: executing program 4 (id=2896): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x141}], 0x2, 0x0, 0x0) 11.003640253s ago: executing program 5 (id=2897): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x8, 0x0, 0x0, {{0x2c, 0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 10.739007624s ago: executing program 0 (id=2899): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f0000000000)) 10.586999975s ago: executing program 2 (id=2900): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002240)=""/225, 0xe1, 0xa) 10.277310936s ago: executing program 4 (id=2902): syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB='fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,acl,no_splitbrain_check,hash,uid=', @ANYRESDEC=0x0, @ANYBLOB="ef3ef0c23683a9582d18944a1e2fcc21bd7f0512bef3e04b71c9d70c26"], 0xfe, 0x58b4, &(0x7f0000005980)="$eJzs3W2QXFXdIPBzu3synZm8TAJIBJkMgSiCmglvhS+l0fWtAKlYWErYKAxkgtEkpJIgEFCCCy4UYKGlpagf0EJq0WhRBatESuRlE1ZRitWltpBa3UU/+BTykBLIQ1k+5qmZvqfTc6fv3J7unpDA71fJ3D6nb//PueeevtP/Mz3TAQAAgNeE3ddv2XvOUR/41RdHX7rmwz/bcG3oL4/XV+MOA+n2ileqhxxIvZVF49vsvHjTVT/489DF7/vl3X3ff3nXmmPX/v79h118/2fO3Hnbtx96ce69/3ymKG6cTyfuLyfPJSFUf77n61/a9diRY3VJCKGcDGwPYUGy8KEFSSbE8N9DCGvSwqLMnfe8dMrase21N/VOqJ+f2c98f22rpvNs297LTwp/eO+q636z+Mc/6tnx7Pb9uyTVhvkUwrwLGx/fE0KYnf4fE2dbnI9x0q4MIfQ1PO6Mgn4d12L/l+WUj063s9Jtf0GceP+STLmU2S9bjnoy276C9jqV14929ysyJ1POXow6ldfPWL8g3f403Z44zfjl+D8JpSRU6t1fn+yfI6HhvCUhGT+X1Xq5VD+3IT3+TDnJlEuZcrknc1zj7aYTrZwkE+vjfpn6eDmupPXHNl6rmzg3p/716baaPlFfjuWQvVHTP+lG/bjGxX7tmaIvB0Kp4RrUrL5+4tOT0Z/W9ScLJz1mXxPxvl2rbl5aXv3w7oGcfiR3J2n8pK342369YM6nfnjjZdnv6/X4F5bS+KW24v/xrMefP//G730rN/6tMX65rfgnP9D33FmPXL8kd3z2xPGptBV/5JlHb1l8+EU7cvt/e4xfbSv+ip2P987d+8CDuf0fjuMzu634T7/zg3+668n7ns2NH2L8vrbir9656cu9g3tPyI3/YByf/vbmzws7Tn9qcPAvQ3nxn4jx57YV/87tt73jjvk3nZl7flfG8RloK/7Zx99/3Zy99x2Td+1Mbu/Wd06A16bD0tdYN6TldvPMTjXkC98cqtRe881J/8/tZkMZY+3Mm8H4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALw2HXHS//zQ///4wHOVtNyb3ni6VNvG+lkhJLNDCFu2jmzeum7jJUOfufSyzRtH1g+NbB0a3bh185VDp75laPPopvUjV47dO/zWU2qPWxiS2jY5ZlLb+/bt21camFgX2/tPx+/4w9Iz/uWvIQwf8bvBSm7/l9224Y7Dm3zNSFbse8+Gy8753WnfTY9rIO3XQE6/Qk6//vW8f9zx1T1/PiGE4ddN1a9Hn373LyZ0aLxif5xUqTfUOtSb9DXtR73XaX/ieFXWrls/Olw8vuWc4/jPVz3797VXfOUftfGt5h5Hi+M7e8W+9aVvrDr7379xda3iYD3vReMdjyL2L45fNR3veelxzcs5rkrOcV3/mwef/PlRN764PQxXXlg8ue2i4+pJJ0BP8vqW2o0t9CULJtRX0/3jGY+PW7Z1w6ZlW67c9tZ1G0YuGb1kdOPbl5+6/PTh004/bdn4kS/r8vHH9t/Y4vEfmPk0/3Pbfxq/tjafivpVNB5j/Soej8Ye5T3/+s790tfeftsj59QqiuZ53Lt+PUm3fWPneXlomG+Tx6rZcRWNQwhhqNk4PP/imeHI/7PuuqLrUOOZafyakazY99iSv333jO8selet4oBc5xs71OZ1vt7r/f0ZH69qej4O1vHtDeX0uPqb9mv5Y4/03Lz7r5+v92/WrHDFyNatm5fXvs5JezonObppv7K18bgWj38th3RYQn2aNpmvY3pCrX/Z62fcPTuq/el9/cnCpseVFe/btermpeXVD+/OG+nk7lqLs8Pc2jZ5Q86e6zMPLNc73Kz9Q3V+DH7oO/d+/N6fnDppfpxc+1p0XEnOcf34yTu/9v2v/NefdO+4PvTuxwf+9n8/vbRWcahcV+q9TvuTNF5XTg6h6Pm3ODQ/jtznX6n58RQ9/7Lt7N+/ebyhTLk/lNt6vp78QN9zZz1y/ZLc5+ueVp+vV08olQuerwfL/Hnlnl8TJkqyYt8vbzhs+0PXrDyqVlE0r+t7N5vXp7SQf+Qc1y/Of2rw0qH/8r+7d934wVvuueD3Iyu+UKs4WM57NR3fas741nsd887G8X3bxZeuX1OrP3hf/6bbgvwnXkq2XLntsyPr149u3tLacbX6/TS2kx3ldr+fxqvbwoLjKk06rpm70cp4tfp8i/1f0/Z4TXy+9Yekre8L2369YM6nfnjjZQOTHpU2dGEpjV9qK/4fz3r8+fNv/N63cuPfGuNX2oo/8syjtyw+/KIdufFvT9L41bbir9j5eO/cvQ88mBt/OPZ/dlvxn37nB/9015P3PZsbP8T4/e2N/ws7Tn9qcPAvufGfSNJ2xl4jhXDPS6esrZWT0JM+32I/eib0K2TLSaZcypTLjeVSba213kA5SSbWx/3S+mMb+tLMJ3Lq46uw6qLa9uVYDtkbU9cfbEoN1/5m9UWvUwEAXu3iz//ja9D48//R9IVS/koD7NdpHrYoJ27Mw/av58yacP+iNH58fFwHHHxbGB7bXjtUe6E/3XXO+HzIrnPGdk44bmKMdtc5i9bfl2TKsV+19fJKQx6ampzXVEIL6++T25l6/T1z+MXr40M3TOrWUMO6Vfb89aQrZs3e75Dpb2UsQt78yK6LxfdzDM4LK8fba3F+ZN9HE89D9n00sZ2jMhfOdt9H0+n8iN2eYn6Md7n45xuTz1+YYnz3n7/m0bLnbxrnuzq2/0z/fPbQXzec2Z+HWZfMiZ8+wQ72dcNYH4+j0uJ64sdz6ru1nhgvF7Ffe6boy4FgPRF4tYr5f/weMZb/j70A/7fMfkWvQ7OvGmO83PcJlZv3pyjvmPw+vb62vo+v3rnpy72De0/IfZ3zYKvv+9k0odRX8L6fonFcmikXjmPOAk1Rvpdtp2jcs+/L6A9z2xr3O7ff9o475t90Zu64r6x9Iy0e969NKM0tGHf5Qk58+cJBkS/M9PrZK5aPpG98mql85GM59dPNR/om3agf17hDLh/pObD9AgAOHTH/r//8LM3//19mv6K89cRMOcbLzVtzXp/k5a0fSbdXZPbvT3+jYrqvm88+/v7r5uy975jcvOX2VvPQ/zahNFCYh3aWN+fmESu7837x3Dyinmd1lifm9r+eJ3aWp+fGr+fpneXRueNTz6M7WwfIjV9fBzjU89yZXa971ebR6a/PzlQefW5O/XTz6P5JN+rHNU4eDQDwyor5f3wZF/P/RzL7dfq6PTcv6NLr9uzfA6nHf+JA5ZUznffNdN4603n9TK9LHOp58UyvC83sOpm8OC2H7I0aeTEAAAeDmP/PTsv5+X9n+Ulu/lbPT+TnTePLzw+S/PxQX/+S/8v/i8n/AQBe3WL+H3/tMf79v/+RlrN/t16enhNfni5Pn2r+tJynz/Q6m3UA6wDFrAMAALy69IxnSpN/z/6T6Tb7e/Z5v5d/fs7+raqM/459CBdt3Tw6esFlm9aMbB29YOOla0a3XHD55nVbt45urO3Xad6Ym7ekeWNPqKTj0Xy/bN42P/17CPNz/h5Cdv8Y9ujxG5P/HkK22dkFf0dg//lrrb955680xf7N5kfe+c6L/4mc/aP6+b/40ydfsHbLBes2rtu6bmT9um2jE/cby1r7pvG5mXFYpvW5mZkvk5Sm//md3elHaVI/etLxyPt89iTTjwVpTxbkff5BTr9/9b+++rnj9/3jrhCGjyi/oaPxS1bs++/njX5k6+7fbRrrf2nK/tf3TPtV9Hml2f3j8VTWX7pl60lrL71sY/YTJdsT1zNK9fIMrWekT/9yi+sTq3Pqp7s+UZ504+DU8voEAAATxJ//x9ez8eeHX0lfQMX61vP0zn5+nJunD7eWp2c/l6woT8/uH4+31Ty92mGenm2/KE9vtn+zPD0v786L/7Gc/aer9XnS2fs8cufJha3Nk+znGRTNk+z+050nSYfzJNt+0Txptn+zeZJ33vPifzRn/zytz4fO3peTOx9ubW0+vDlTLpoP2f2nOx9KHc6HbPtF86HZ/s3mQ975zYt/Ts7+rZo4P8Ymxvi8GL3g8ks3f7Zhv5n+/IvO+zezn//Rrtb7P7Pv+5r5/s/s+8pmvv+dva8st/9PdLYS1nr/Z/bzXdp1wNZr0zebFb3/rGgdd1VO/XTXcWdNunFwso4Lr5yY/8cf98T8/6Z02+0fAx36n5Pmc8yaxu/S55gVvY7x/XyKxg4Cvp8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtKa3smh8u/v6LXvPOeoDv/ri6EvXfPhnG65901U/+PPQxe/75d19339515pj1/7+/YddfP9nztx527cfenHuvf98pjDwQG1zYlqshpA8l4RQ/fmer39p12NHjtUlIYRyMrA9hAXJwocWJJkIw38PIayp93Pinfe8dMrase21N/VOqJ+fCZI9rtBfjv2Z0M9wReERcQiqpvNs297LTwp/eO+q636z+Mc/6tnx7Pb9uyTVhvkUwrwLGx/fE0KYnf4fE2fbovjgdLsyhNDX8LgzCvp1XIv9X5ZTPjrdzkq3/QVx4v1LMuVSZr9sOerJbPsK2utUXj/a3a/InEw5ezHqVF4/Y/2CdPvTdHviNOOX4/8klJJQqXd/fbJ/joSG85aEZPxcVuvlUv3chvT4M+UkUy5lyuWezHGNt5tOtHKSTKyP+2Xq4+W4ktYf23itbuLcnPrXp9tq+kR9OZZD9kZN/6Qb9eMaF/u1Z4q+HAilhmtQs/r6iU9PRn9a158snPSYfU3E+3atunlpefXDuwdy+pHcnaTxk7bib/v1gjmf+uGNly3Ki39hKY1faiv+H896/Pnzb/zet3Lj3xrjl9uKf/IDfc+d9cj1S3LHZ08cn0pb8UeeefSWxYdftCO3/7fH+NW24q/Y+Xjv3L0PPJjb/+E4PrPbiv/0Oz/4p7uevO/Z3Pghxu9rK/7qnZu+3Du494Tc+A/G8elvb/68sOP0pwYH/zKUF/+JGH9uW/Hv3H7bO+6Yf9OZued3ZRyfgbbin338/dfN2XvfMXnXzuT2bn3nBHhtOix9jXVDWm43z+xUQ77wzaFK7TXfnPT/3G42lDHWzrwZjA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKvTb68+9ZPnveejqypJCEnOPvuaiPeVZ61YMdRGuyPPPHrL4sMv2tFYt6iNOAAAAECxmIeX6jXVsChcnswORzfdP64RHB1LycT67BpCjJNdI2g3TqlLccpdilPpUpyeLsWZ1aU4vV2KUy2IUw2txZk9ZZxSy/3p61Kc/i7FmdOlOHO7FGdel+LM71KcgSnjtD4PF3QpzsIuxTmsS3EO71KcI7oU53VdinNkl+Jk15SnOw/npnselRdn/Ea5ME4lKdfvaLaeHts5psN2+ltsJ/f7cYvtzG6xneMyjytNs51qi+28scN2khbbeXOH7ZQK2onz9ops/2I7sdTi/L+yS3G2dSnOVV2Kc3WX4ny+S3G+0KU413QYB6BVMf/fn+8NhN7Ku0JfesXJrgLEfHfx+NfJ3+/yLkgx3hsy9bOy8bJhsol6Jt7i6fYvu4CQibckU98zIV6lno9MEa/aGG9p5s5Jx5vtX3ZBIdO/EzP1vUXxsgsLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCDfnv1qZ887z0fXRWSMPavqX1NxPvKs1asGGqj3V2rbl5aXv3w7sa63kobgQAAAIBCMQ/vqddUQ29leehNZk3Yr5quA1TTcnmgth2cF1aObZOh0ni5L1kw5eMq6eOWbd2wadmWK7e9dd2GkUtGLxnd+Pblpy4/ffi0009btnbd+tHh2tcQegvihRDGlx+2XLntsyPr149u3lKrzPZ/Ufq4RWk5SR83+LYwPLa9Nu3/woL2SpPam7kbxWcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/2DX/kLdPOs4gD9vkpNkZ6uN7F9W1tPQP6Pq0LZm0ulYXhAcbG3pYSDJ9DiKa3F4upatHXXGreA2WxRho1AqvanU4ebwZn/cEPeHQmVWC55aZBu6C71QNp10oxfSEek5eXOSNGlO41i37vO5eN/keX7P88uTiwPf9wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA/WVL08Ua2M10ajEKI+NY0ekrl0No5LQ/T9+vNbf5wbO7m8fSyXGWIjAAAAYKAkh4+0RvIhl0mHdLhq+t3i0DYRZnM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw8TNVL09UK+O1i6MQoj41jR6SuXQ2jktD9H3jnSe/8OrY2D/ax4pD7AMAAAAMluTwVGskH4phSRiJruqoS54NLOha312X7LNwjnXdzw761S2ZY901c6z71IC6dc37jgAAAAAffUn+z7RGCiGXmdc3/w/K9Undoq66dPM+zG8FAAAAgP9Pkv9zrZFiyGWKrbw+17y/uKsuWT/o//bJ+mV91g/6f/7a5t3/6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgo2OqXp6oVsZr6SiEqE9No4dkLp2N49IQfVe9MPqvWw49tLh9LJcZYiMAAABgoCSHz0bvfMhlRsNIuHg694/dtP/prz79bDmEMBPzs9mwY8O2bXevmrkmdSuPHBr50eG3vndG3cqZ63k7IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8L6ZqpcnqpXx2kVRCFGfmkYPyVw6G8elIfq+/qWv/O3x48+92T5WHGIfAAAAYLAkh89m/3wohmzIhium37Vn/dNSXev7PTMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhz3fOe+b2+YnNx4txdeeOFF68X5/ssEAAC83xaFKDTO0ZXrz/enBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgym6uWJamW8lo9CiPrUNHpI5tLZOC4N0Td+/mhu3skXXmofKw6xDwAAADBYksNns38+FMNIGAmXT7/r9UxgOv8XPsAPCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyoTNXLE9XKeG1eFELUp6bRQzKXzsZxaYi+j+3c98WD8394c/tYLjPERgAAAMBASQ7PtkbyIZf5dMiFq5vvJzsXROnmvfdzgdl1WzuWjc55Xb1jXXrO63Z1nSzTPM3MunyyX2Hm3lpXOnNdqW1dMbTalzrWhT0dq+YN+JwBAAAAzqMk/+daI4WQy+Tacu7PO+oLci4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0MdUvTxRrYzXoiiEqE9No4dkLp2N49IQfe/7/Scv+cYvdm9vHysOsQ8AAAAwWJLDZ7N/PhTDwvCJsHA694dCZ31S9+/qqYOP/ufvy0NYccWxsUzf/X/7+o0vdl9CSHUWpUKY3+wX9en3uz8+eu/SxqnHQ1hxefrqc+3XuWXceKa6ce22w8e2nuWLAQAAgAtIkv9HWiOFkMvc1Tf/J8n7nPL//Ht3/uqy5rWZyLtWpArNfqk+/b689Mm/Llv9z7dO5/+z9fvcvs0HL+toODPSJYoblc3b1x277kAqOfVM/3RX/+R7+dp33/zvph2PnJrpnw/55viCTK/+Z167XBQ3JlN7a2ve21vv7J/pc/6H/vDS8d8s2P3u6f7vLBpt9b/mLOc/e//RWx/ec/2+Q+s6+4cQSr36v/3uzeHKP9/5YPf5R7s2bv/m269dorhxZPGJA6v3F2/o7B919U++/18ef2zPzx75wbNJ/+S3IsuXzLV/qqv/K7su3fnyA+sXdPZP9Tn/i7e9Oral9P0/dZ//jqHP/8S1T93+2ob4/u4pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC8tUvTxRrYzXUlEIUZ+aRg/JXDobx6Uh+r5xy9G3b9v905+0jxWH2AcAAAAYLMnhs9k/H4ohG7JhdDr3P1PduHbb4WNbQ2FmNmreM5Nb7tn2mU1btt91x3n65AAAAMBcJfk/0xophFxmaRhp5v/K5u3rjl13IJXk/1SS/zfdOblxRWjVvbLr0p0vP7B+Qes5QQjTPwvIn677/GzdTTceLZz4y7eW9axbNVt3ZPGJA6v3F29I6kJ73crQej7xxLVP3f7ahvj+1udrr/vsN7dMNh9PJPuO3vrwnuv3HVrXOkfzPtrcN6mbTO2trXlvbz2pSzfv+ea5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAzTdXLE9XKeC2kQ4j61DR6SObS2TguDdF3zdJfP3jJyecWto/lMkNsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs101oHVUfB+Bz7k3e3OYmbdK+YFRM06oodWFRENGNioq0IgVXlSLV1i5EQRBR6sJUWrFUxY1gdVNEBTVKQcHGYmmVVPwqblyooFBdCKUY0IbiQiXJObc304xXJ1VQnweGc8+Zmd/8Z87J5F4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4R+npGpppD++4f+qWc2746NG7Tjxy0zv3brvo4Ve/G9l03Yd7e186ObF5xZYvr1+2af/da8Z3P3/op/63fjnaMfih2WZV6jZCiMdjCI13J595bOLjs6bHYgihHgdGQxiMSw8NxkLC6p9DCJtbdc7d+eaJy7dMt9t29cwZX1IIKd5XaNZzPbMG5tbLv0sjrbOtUw9eEr6+dv32T5e/8Xr32LHRU4fERtt6CmHxxvbzu0MIi9I2La+2oXxyateFEHrbzruyQ13n/8H6Ly3pn5va/6W22SEn719Z6NcKxxX7WXeh7e1wvYUqq6PqcZ30FfrFl9FCldWZxwdT+3ZqV/3J/HreYqjF0NUq/554ao2EtnmLIc7MZaPVr7XmNqT7L/RjoV8r9OvdhfuauW5aaPUY547n4wrj+XXclcZXtL+r53FryfjZqW2kP9STuR+KH2Y1T/vQuq8Zua7J36nl71BrewfNN96a+DQZzTTWjEtPO+fXeeR9E+ufuLC+4b3DAyV1xL0x5cdK+Vs/Gey7/bWdDwyV5W+spfxapfxv1h754badLzxXmv90zq9Xyr/sQO/xte/vWFn6fCbz8+mqlH/H0Q+eXP7/O8dK69+T8xuV8q8ZP9LTP3XgYGn9q/PzWVQp/6urb/z2lc/3HSvNDzm/t1L+hvH7nuoZnrq4NP9gfj7Nauvnx7Ervhge/n6kLP+znN9fKf/l0d1Xvbhk15rS+V2Xn89ApfybL9i/vW9q33ll786450z95wT4b1qWvmM9nvpVf2cuVNvvhWdHuma/8/Wlrf9MXqhg+jqL/8J8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd24IAEAAAAQND/1+0IFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngoAAP//pkA1WQ==") open$dir(&(0x7f00000000c0)='./file2\x00', 0x40600, 0xc0) 10.2094089s ago: executing program 0 (id=2903): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) 9.931819105s ago: executing program 2 (id=2904): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) inotify_init() 9.75270369s ago: executing program 5 (id=2906): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000500), 0x101200, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000540)=0x2) 9.716761742s ago: executing program 0 (id=2907): setrlimit(0x7, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 9.342067999s ago: executing program 0 (id=2908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) 8.831924131s ago: executing program 5 (id=2909): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x140, 0x0, 0x0) 8.216648263s ago: executing program 5 (id=2910): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 5.98371198s ago: executing program 4 (id=2911): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x9003, 0x0, 0x90, [0x20000200, 0x20000230], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000300ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 2.603635898s ago: executing program 0 (id=2912): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0xa04108, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0xa}}, {@nolazytime}, {@noquota}, {@jqfmt_vfsold}, {@minixdf}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@grpid}, {@debug}]}, 0x11, 0x4d8, &(0x7f0000000540)="$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") syz_usb_connect(0x0, 0x3d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000a6ff0540cda9eecdb9050000000109022b0001000000000904000002010351000905031300000000000725010800000009050f"], 0x0) 2.599478358s ago: executing program 3 (id=2913): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f00000001c0)={[{@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5e1, &(0x7f0000001840)="$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") umount2(&(0x7f0000000000)='./file0\x00', 0x0) 2.318574579s ago: executing program 5 (id=2914): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x20000) 1.867710964s ago: executing program 3 (id=2915): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x1401, 0x101}, 0x10}}, 0x0) 1.658132009s ago: executing program 5 (id=2916): r0 = socket(0x2b, 0x80801, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x7800, 0x7840, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) 1.273883719s ago: executing program 3 (id=2917): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x46, 0x2, 0x0, "0ba7dfadd940d2c1aebd746fc04a0026d174932d4600"}) 766.004658ms ago: executing program 3 (id=2918): syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xf6}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110040"], 0x0) 387.465769ms ago: executing program 3 (id=2919): r0 = openat$vimc1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x8, 0x34424752, 0x2, @stepwise={0x2, 0x7, 0x2, 0x99, 0x94, 0x5}}) 234.903244ms ago: executing program 0 (id=2920): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "4bc06078", {0x3, 0x1, 0x0, 0x1, 0xfff, 0x3, 0x1}}) 0s ago: executing program 3 (id=2921): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): otify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 247.565685][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 247.718014][ T8947] loop0: detected capacity change from 0 to 4096 [ 247.776646][ T8947] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 247.833030][ T8951] loop3: detected capacity change from 0 to 1024 [ 247.912361][ T8949] loop1: detected capacity change from 0 to 32768 [ 248.082132][ T5410] udevd[5410]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 248.103762][ T5374] udevd[5374]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 248.109325][ T8958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.120917][ T8958] IPv6: NLM_F_CREATE should be set when creating new route [ 248.155403][ T8949] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1530 (8949) [ 248.166307][ T5359] udevd[5359]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 248.282383][ T5376] udevd[5376]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 248.301776][ T5371] udevd[5371]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 248.309349][ T5410] udevd[5410]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 248.392144][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1532'. [ 248.401684][ T8965] 9pnet_fd: p9_fd_create_unix (8965): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 248.472435][ T8949] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.519836][ T8949] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 248.581601][ T8949] BTRFS info (device loop1): using free-space-tree [ 248.757735][ T8981] loop4: detected capacity change from 0 to 256 [ 248.818152][ T8992] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1545'. [ 248.905831][ T8992] 0·: renamed from hsr0 (while UP) [ 248.914896][ T5374] udevd[5374]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 249.144732][ T8992] 0·: entered promiscuous mode [ 249.199893][ T8992] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 249.386849][ T9008] netlink: 'syz.3.1550': attribute type 29 has an invalid length. [ 249.471441][ T5243] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.602205][ T9019] cgroup: name respecified [ 249.613891][ T9017] netlink: 'syz.5.1556': attribute type 1 has an invalid length. [ 249.715553][ T9017] netlink: 'syz.5.1556': attribute type 2 has an invalid length. [ 250.336108][ T9043] sctp: [Deprecated]: syz.4.1566 (pid 9043) Use of int in max_burst socket option. [ 250.336108][ T9043] Use struct sctp_assoc_value instead [ 250.817201][ T9020] loop2: detected capacity change from 0 to 32768 [ 250.840620][ T9057] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1574'. [ 250.846741][ T9020] XFS: attr2 mount option is deprecated. [ 251.004188][ T9020] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 251.020324][ T9066] openvswitch: netlink: Actions may not be safe on all matching packets [ 251.105250][ T9020] XFS (loop2): Quotacheck needed: Please wait. [ 251.294622][ T9020] XFS (loop2): Quotacheck: Done. [ 251.492832][ T9035] loop3: detected capacity change from 0 to 32768 [ 251.588355][ T5234] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 251.634782][ T9087] loop5: detected capacity change from 0 to 4096 [ 251.643262][ T9087] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 251.659176][ T9035] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 251.814274][ T9087] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 251.871908][ T9096] netlink: 'syz.4.1589': attribute type 1 has an invalid length. [ 251.904754][ T5235] ocfs2: Unmounting device (7,3) on (node local) [ 251.922553][ T9096] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1589'. [ 252.413205][ T9115] loop1: detected capacity change from 0 to 2048 [ 252.444722][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'. [ 252.497845][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 252.563424][ T9120] netlink: 'syz.4.1601': attribute type 10 has an invalid length. [ 252.571703][ T9120] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1601'. [ 252.580850][ T9115] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.595525][ T9120] bridge0: port 3(batadv0) entered blocking state [ 252.604164][ T9120] bridge0: port 3(batadv0) entered disabled state [ 252.622008][ T9120] batadv0: entered allmulticast mode [ 252.656886][ T9120] batadv0: entered promiscuous mode [ 252.673723][ T9120] bridge0: port 3(batadv0) entered blocking state [ 252.680551][ T9120] bridge0: port 3(batadv0) entered forwarding state [ 252.942063][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1608'. [ 252.991769][ T2891] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 253.001237][ T2891] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 253.023742][ T5354] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 253.218681][ T5354] usb 3-1: Using ep0 maxpacket: 16 [ 253.225851][ T5354] usb 3-1: config 2 has an invalid interface number: 170 but max is 3 [ 253.237460][ T5354] usb 3-1: config 2 has an invalid interface number: 72 but max is 3 [ 253.240300][ T5314] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 253.290433][ T5354] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 253.335869][ T5354] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 4 [ 253.359599][ T5354] usb 3-1: config 2 has no interface number 0 [ 253.372049][ T5354] usb 3-1: config 2 has no interface number 1 [ 253.378247][ T5354] usb 3-1: config 2 interface 170 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 253.396645][ T5354] usb 3-1: config 2 interface 170 altsetting 1 endpoint 0xA has invalid maxpacket 1439, setting to 64 [ 253.410011][ T5354] usb 3-1: config 2 interface 72 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 253.443333][ T5354] usb 3-1: config 2 interface 170 has no altsetting 0 [ 253.453312][ T5354] usb 3-1: config 2 interface 72 has no altsetting 0 [ 253.467199][ T5354] usb 3-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=41.72 [ 253.477286][ T5354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.522002][ T5314] usb 4-1: Using ep0 maxpacket: 32 [ 253.531530][ T5314] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 253.538722][ T5354] usb 3-1: Product: syz [ 253.546717][ T5354] usb 3-1: Manufacturer: syz [ 253.554669][ T5354] usb 3-1: SerialNumber: syz [ 253.564567][ T5314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.569866][ T9157] loop5: detected capacity change from 0 to 64 [ 253.590080][ T5292] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 253.600752][ T9157] hfs: unable to locate alternate MDB [ 253.606146][ T9157] hfs: continuing without an alternate MDB [ 253.608340][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 253.624319][ T9153] loop0: detected capacity change from 0 to 4096 [ 253.708312][ T5314] usb 4-1: config 0 descriptor?? [ 253.754036][ T5314] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 253.760095][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 253.771248][ T5292] usb 2-1: Using ep0 maxpacket: 16 [ 253.814954][ T5354] kl5kusb105 3-1:2.170: KL5KUSB105D / PalmConnect converter detected [ 253.840678][ T5354] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 253.851387][ T5292] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 253.866157][ T5292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.913238][ T5354] kl5kusb105 3-1:2.72: KL5KUSB105D / PalmConnect converter detected [ 253.929761][ T5292] usb 2-1: config 0 has no interface number 0 [ 253.938168][ T5354] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB1 [ 253.988476][ T5292] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 254.015771][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.031700][ T5354] usb 3-1: USB disconnect, device number 22 [ 254.050505][ T5292] usb 2-1: Product: syz [ 254.056822][ T5354] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 254.096222][ T5292] usb 2-1: Manufacturer: syz [ 254.100868][ T5292] usb 2-1: SerialNumber: syz [ 254.117155][ T9167] loop4: detected capacity change from 0 to 512 [ 254.125150][ T5354] kl5kusb105 3-1:2.170: device disconnected [ 254.147393][ T5292] usb 2-1: config 0 descriptor?? [ 254.170612][ T5354] kl5kusb105d ttyUSB1: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB1 [ 254.191649][ T5354] kl5kusb105 3-1:2.72: device disconnected [ 254.201837][ T5314] gspca_sunplus: reg_w_riv err -71 [ 254.211585][ T5314] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 254.222451][ T9167] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 254.235826][ T5314] usb 4-1: USB disconnect, device number 21 [ 254.248011][ T9167] System zones: 0-2, 18-18, 34-34 [ 254.281456][ T9167] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1623: bg 0: block 248: padding at end of block bitmap is not set [ 254.350038][ T9167] Quota error (device loop4): write_blk: dquota write failed [ 254.388016][ T9167] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 254.411643][ T9167] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1623: Failed to acquire dquot type 1 [ 254.425789][ T5354] usb 2-1: USB disconnect, device number 18 [ 254.460349][ T9167] EXT4-fs (loop4): 1 truncate cleaned up [ 254.516612][ T9167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.584279][ T9167] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.608462][ T9180] loop5: detected capacity change from 0 to 256 [ 254.615779][ T9180] exfat: Deprecated parameter 'utf8' [ 254.631504][ T9180] exfat: Deprecated parameter 'utf8' [ 254.668762][ T9180] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 254.706386][ T5230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.877646][ T9245] netlink: 'syz.0.1657': attribute type 3 has an invalid length. [ 256.088521][ T9252] kAFS: No cell specified [ 256.285923][ T9260] netlink: 'syz.3.1664': attribute type 1 has an invalid length. [ 256.650788][ T53] Bluetooth: hci1: unexpected event for opcode 0x200c [ 256.793653][ T9288] loop3: detected capacity change from 0 to 512 [ 257.024817][ T9288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.070473][ T9303] loop2: detected capacity change from 0 to 512 [ 257.206257][ T9288] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.234806][ T9318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.267837][ T9303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.296273][ T9320] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 257.305635][ T9320] overlayfs: missing 'lowerdir' [ 257.361503][ T9288] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz.3.1679: invalid size [ 257.368443][ T9303] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.749206][ T5234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.775394][ T5235] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.975113][ T9346] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 257.985718][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 258.191709][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 258.198533][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.254491][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.303591][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 258.354033][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.386737][ T9] usb 2-1: config 0 descriptor?? [ 258.414548][ T9] hub 2-1:0.0: USB hub found [ 258.467626][ T9366] loop0: detected capacity change from 0 to 256 [ 258.475462][ T9367] netlink: 'syz.4.1713': attribute type 21 has an invalid length. [ 258.483405][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1713'. [ 258.553585][ T9366] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.603747][ T9366] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 258.645291][ T9] hub 2-1:0.0: 1 port detected [ 258.727667][ T9366] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 258.865097][ T9] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 258.892733][ T9] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 258.958576][ T9383] loop3: detected capacity change from 0 to 512 [ 258.988318][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 258.994495][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 259.038895][ T9383] EXT4-fs (loop3): filesystem is read-only [ 259.060946][ T9] usb 2-1: USB disconnect, device number 19 [ 259.080866][ T9388] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1724'. [ 259.099194][ T9383] bpf: Bad value for 'mode' [ 259.248189][ T29] audit: type=1326 audit(1729584789.125:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30537dff9 code=0x7ffc0000 [ 259.270709][ T29] audit: type=1326 audit(1729584789.125:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30537dff9 code=0x7ffc0000 [ 259.293423][ T29] audit: type=1326 audit(1729584789.125:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fa30537dff9 code=0x7ffc0000 [ 259.315687][ T29] audit: type=1326 audit(1729584789.125:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30537dff9 code=0x7ffc0000 [ 259.338934][ T29] audit: type=1326 audit(1729584789.125:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.2.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30537dff9 code=0x7ffc0000 [ 260.144655][ T29] audit: type=1326 audit(1729584789.956:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a26b7dff9 code=0x7ffc0000 [ 260.167139][ T29] audit: type=1326 audit(1729584789.956:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a26b7dff9 code=0x7ffc0000 [ 260.185456][ T9439] vivid-000: ================= START STATUS ================= [ 260.189628][ T29] audit: type=1326 audit(1729584789.974:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f3a26b7dff9 code=0x7ffc0000 [ 260.220520][ T29] audit: type=1326 audit(1729584789.974:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a26b7dff9 code=0x7ffc0000 [ 260.239264][ T9439] vivid-000: Generate PTS: [ 260.243331][ T29] audit: type=1326 audit(1729584789.974:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a26b7dff9 code=0x7ffc0000 [ 260.266188][ T9439] true [ 260.315432][ T9439] vivid-000: Generate SCR: true [ 260.331694][ T9439] tpg source WxH: 320x180 (Y'CbCr) [ 260.342830][ T9439] tpg field: 1 [ 260.346228][ T9439] tpg crop: 320x180@0x0 [ 260.350686][ T9439] tpg compose: 320x180@0x0 [ 260.355118][ T9439] tpg colorspace: 8 [ 260.361160][ T9439] tpg transfer function: 0/0 [ 260.365776][ T9439] tpg Y'CbCr encoding: 0/0 [ 260.370694][ T9439] tpg quantization: 0/0 [ 260.374870][ T9439] tpg RGB range: 0/2 [ 260.378789][ T9439] vivid-000: ================== END STATUS ================== [ 260.575225][ T9456] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1759'. [ 260.763753][ T9465] netlink: 'syz.3.1761': attribute type 5 has an invalid length. [ 261.015094][ T9476] netlink: 'syz.2.1768': attribute type 2 has an invalid length. [ 261.043802][ T9479] loop5: detected capacity change from 0 to 256 [ 261.049766][ T9476] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1768'. [ 261.521730][ T9500] loop3: detected capacity change from 0 to 64 [ 262.039414][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.045919][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.371798][ T9545] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 262.418058][ T9549] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1805'. [ 262.439156][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.481936][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.512149][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.536157][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.558131][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.587194][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.626368][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.664884][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.713175][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.746222][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.771834][ T9549] batadv_slave_1: entered promiscuous mode [ 262.987164][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 263.048449][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'. [ 263.308050][ T9593] overlayfs: missing 'lowerdir' [ 263.350426][ T9589] loop2: detected capacity change from 0 to 2048 [ 263.407655][ T9589] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.480071][ T9599] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.1831'. [ 263.785758][ T9611] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 263.799744][ T9610] libceph: resolve '40' (ret=-3): failed [ 264.088274][ T9627] 9pnet: Could not find request transport: fdÜLno=ìH”ÃH¯?°¸ƒÆ ”ÔîôQsCÁŠíX¢{eC~öönЩŠû [ 264.514489][ T8746] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 264.551471][ T9653] netlink: 'syz.0.1857': attribute type 11 has an invalid length. [ 264.594783][ T5295] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 264.692390][ T8746] usb 4-1: Using ep0 maxpacket: 32 [ 264.727665][ T8746] usb 4-1: New USB device found, idVendor=2040, idProduct=b700, bcdDevice=46.e3 [ 264.736968][ T8746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.745003][ T8746] usb 4-1: Product: syz [ 264.751115][ T8746] usb 4-1: Manufacturer: syz [ 264.755737][ T8746] usb 4-1: SerialNumber: syz [ 264.767951][ T5295] usb 5-1: Using ep0 maxpacket: 16 [ 264.774700][ T5295] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 264.783099][ T5295] usb 5-1: config 0 has no interface number 0 [ 264.789222][ T5295] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 264.802989][ T8746] usb 4-1: config 0 descriptor?? [ 264.817888][ T8746] usb 4-1: dvb_usb_v2: found a 'Hauppauge 117xxx ATSC+' in warm state [ 264.834958][ T5295] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 264.855421][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.863426][ T5295] usb 5-1: Product: syz [ 264.890477][ T8746] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 264.911105][ T5295] usb 5-1: Manufacturer: syz [ 264.917446][ T8746] dvbdev: DVB: registering new adapter (Hauppauge 117xxx ATSC+) [ 264.925228][ T5295] usb 5-1: SerialNumber: syz [ 264.930938][ T8746] usb 4-1: media controller created [ 264.950678][ T8746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.960347][ T5354] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 264.969739][ T5295] usb 5-1: config 0 descriptor?? [ 264.993475][ T8746] usb 4-1: selecting invalid altsetting 1 [ 264.999336][ T8746] set interface failed [ 264.999687][ T8746] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 265.010552][ T8746] error writing reg: 0xff, val: 0x00 [ 265.042040][ T8746] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 265.116999][ T8746] usb 4-1: USB disconnect, device number 22 [ 265.223473][ T5354] usb 3-1: Using ep0 maxpacket: 8 [ 265.235784][ T5354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.267296][ T5354] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 265.276458][ T5354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.300151][ T5354] usb 3-1: config 0 descriptor?? [ 265.333450][ T29] audit: type=1326 audit(1729584794.764:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9680 comm="syz.1.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe95f7dff9 code=0x7ffc0000 [ 265.375394][ T29] audit: type=1326 audit(1729584794.792:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9680 comm="syz.1.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fbe95f7dff9 code=0x7ffc0000 [ 265.397615][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.427933][ T29] audit: type=1326 audit(1729584794.792:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9680 comm="syz.1.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe95f7dff9 code=0x7ffc0000 [ 265.450284][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.472000][ T5295] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 265.493951][ T5295] usb 5-1: USB disconnect, device number 22 [ 265.505743][ T29] audit: type=1326 audit(1729584794.792:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9680 comm="syz.1.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe95f7dff9 code=0x7ffc0000 [ 265.802639][ T9699] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1879'. [ 265.818125][ T5354] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 265.826526][ T9697] loop5: detected capacity change from 0 to 512 [ 265.839704][ T5354] usb 3-1: USB disconnect, device number 23 [ 265.854183][ T5354] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 266.019249][ T9697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.057467][ T9697] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.251219][ T5236] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.277284][ T9715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'. [ 266.580372][ T9704] loop3: detected capacity change from 0 to 32768 [ 266.655978][ T5314] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 266.730193][ T9704] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 266.752371][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.758740][ T9704] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 266.768652][ T9704] bcachefs (loop3): Version upgrade required: [ 266.768652][ T9704] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 266.768652][ T9704] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 266.768652][ T9704] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 266.839687][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.862599][ T5314] usb 5-1: Using ep0 maxpacket: 16 [ 266.875687][ T9704] bcachefs (loop3): dropping and reconstructing all alloc info [ 266.901700][ T5314] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 266.912015][ T9704] bcachefs (loop3): check_topology... done [ 266.913123][ T5314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.943536][ T9704] bcachefs (loop3): accounting_read... [ 266.957550][ T5314] usb 5-1: config 0 descriptor?? [ 266.976336][ T9704] done [ 266.984939][ T9704] bcachefs (loop3): alloc_read... done [ 267.017343][ T9704] bcachefs (loop3): stripes_read... done [ 267.038113][ T5314] usb 5-1: interface 1 not found [ 267.043166][ T9704] bcachefs (loop3): snapshots_read... done [ 267.084606][ T9704] bcachefs (loop3): check_allocations... done [ 267.150815][ T9704] bcachefs (loop3): going read-write [ 267.230906][ T9704] bcachefs (loop3): done starting filesystem [ 267.254382][ T5314] usb 5-1: USB disconnect, device number 23 [ 267.353518][ T9759] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 267.456332][ T9704] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 267.456369][ T9704] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0, shutting down [ 267.543961][ T5354] bcachefs (loop3): going read-only [ 267.551864][ T9704] bcachefs (loop3): inconsistency detected - emergency read only at journal seq 10 [ 267.582110][ T5354] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 267.603643][ T9704] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 267.603677][ T9704] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0, shutting down [ 267.622124][ T5354] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 267.636006][ T5354] bcachefs (loop3): unshutdown complete, journal seq 10 [ 267.781629][ T9704] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 267.781654][ T9704] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0, shutting down [ 267.885149][ T9704] bcachefs (loop3): bch2_btree_update_start(): error EIO [ 267.927230][ T9704] bcachefs (loop3 inum 536870913 offset 12288): user write error while doing btree update: EIO [ 268.002342][ T5354] bcachefs (loop3): finished waiting for writes to stop [ 268.027717][ T9738] loop1: detected capacity change from 0 to 40427 [ 268.035561][ T5354] bcachefs (loop3): done going read-only, filesystem not clean [ 268.083273][ T5292] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 268.101925][ T9738] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 268.130988][ T9738] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 268.142451][ T5235] bcachefs (loop3): shutting down [ 268.187284][ T9738] F2FS-fs (loop1): invalid crc value [ 268.209544][ T5235] bcachefs (loop3): shutdown complete [ 268.237458][ T9738] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 268.278695][ T5292] usb 3-1: Using ep0 maxpacket: 16 [ 268.287353][ T5292] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 268.307001][ T9738] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 268.321698][ T5292] usb 3-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 268.341692][ T5292] usb 3-1: config 0 has no interface number 0 [ 268.351437][ T5292] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 268.362409][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.370882][ T5292] usb 3-1: Product: syz [ 268.375159][ T5292] usb 3-1: Manufacturer: syz [ 268.380120][ T5292] usb 3-1: SerialNumber: syz [ 268.387386][ T5292] usb 3-1: config 0 descriptor?? [ 268.395573][ T5292] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 268.402639][ T5292] usb 3-1: No valid video chain found. [ 268.762187][ T9738] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 268.773320][ T9738] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 268.779878][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'. [ 268.786546][ T5292] usb 3-1: USB disconnect, device number 24 [ 268.796092][ T9801] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1923'. [ 268.942502][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'. [ 269.318898][ T5354] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 269.635716][ T5354] usb 6-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 269.665092][ T5354] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 269.704079][ T5354] usb 6-1: config 16 has no interfaces? [ 269.730131][ T5354] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 269.739270][ T5354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.984002][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1943'. [ 270.038826][ T9849] xt_CT: No such helper "pptp" [ 270.099973][ T9853] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 270.171936][ T9858] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 270.226332][ T5314] usb 6-1: USB disconnect, device number 21 [ 270.489962][ T9865] netlink: 'syz.0.1954': attribute type 1 has an invalid length. [ 270.497731][ T9865] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1954'. [ 270.507267][ T9865] netlink: 'syz.0.1954': attribute type 1 has an invalid length. [ 270.699745][ T9878] openvswitch: netlink: Missing key (keys=40, expected=100) [ 271.208252][ T9897] netlink: 'syz.1.1969': attribute type 1 has an invalid length. [ 271.240114][ T9897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1969'. [ 271.268739][ T5294] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 271.481716][ T9909] autofs4:pid:9909:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 271.515345][ T5294] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 271.544552][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.566886][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 271.589437][ T5294] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 271.614226][ T5294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.655740][ T5294] usb 3-1: config 0 descriptor?? [ 271.700848][ T9891] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 271.767156][ T5294] gspca_main: spca561-2.14.0 probing abcd:cdee [ 271.995502][ T5294] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 272.006047][ T5294] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.013118][ T5294] usb 3-1: MIDIStreaming interface descriptor not found [ 272.159831][ T5294] usb 3-1: USB disconnect, device number 25 [ 272.294669][ T9945] loop3: detected capacity change from 0 to 16 [ 272.333804][ T9947] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1992'. [ 272.334653][ T9945] erofs: (device loop3): mounted with root inode @ nid 36. [ 272.430139][ T9951] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 272.449634][ T9945] erofs: (device loop3): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 272.508129][ T9945] erofs: (device loop3): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 272.579559][ T9945] erofs: (device loop3): z_erofs_read_folio: read error -95 @ 8200 of nid 36 [ 272.581640][ T9955] loop1: detected capacity change from 0 to 8 [ 272.638151][ T9955] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 272.728709][ T9955] cramfs: Error -3 while decompressing! [ 272.759492][ T9955] cramfs: ffffffff9a5089c8(26)->ffff88805234a000(4096) [ 272.785359][ T9955] cramfs: Error -5 while decompressing! [ 272.839854][ T9955] cramfs: ffffffff9a5089e2(26)->ffff888050ed9000(4096) [ 272.850636][ T9955] cramfs: Error -3 while decompressing! [ 272.857804][ T9955] cramfs: ffffffff9a5089fc(16)->ffff888051455000(4096) [ 272.903678][ T9955] cramfs: Error -3 while decompressing! [ 272.936384][ T9955] cramfs: ffffffff9a5089c8(26)->ffff88805234a000(4096) [ 272.963707][ T29] audit: type=1800 audit(1729584801.798:53): pid=9955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1997" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 273.056112][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2006'. [ 273.170556][ T9982] netlink: 'syz.5.2010': attribute type 27 has an invalid length. [ 273.214231][ T9984] loop1: detected capacity change from 0 to 256 [ 273.362455][ T9991] netlink: 'syz.3.2013': attribute type 26 has an invalid length. [ 273.492490][T10000] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2017'. [ 273.579481][ T9984] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc14df490, utbl_chksum : 0xe619d30d) [ 273.812356][T10006] netlink: 203452 bytes leftover after parsing attributes in process `syz.5.2022'. [ 273.908160][ T9992] loop4: detected capacity change from 0 to 32768 [ 274.080589][ T9992] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.289761][ T9992] XFS (loop4): Ending clean mount [ 274.579963][T10050] netlink: 'syz.2.2041': attribute type 4 has an invalid length. [ 274.598831][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2041'. [ 274.748831][ T5230] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.820119][T10066] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 275.321873][T10086] tmpfs: Bad value for 'mpol' [ 275.368144][T10089] loop1: detected capacity change from 0 to 512 [ 275.425488][T10089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 275.479208][T10089] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.495783][T10089] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 275.507075][T10089] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 275.516890][T10089] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.2058: Failed to acquire dquot type 0 [ 275.603199][ T5243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 275.785608][T10106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2065'. [ 276.114332][T10122] loop4: detected capacity change from 0 to 256 [ 276.239535][T10122] FAT-fs (loop4): Directory bread(block 64) failed [ 276.263893][T10122] FAT-fs (loop4): Directory bread(block 65) failed [ 276.295734][ T5295] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 276.308796][T10122] FAT-fs (loop4): Directory bread(block 66) failed [ 276.348260][T10122] FAT-fs (loop4): Directory bread(block 67) failed [ 276.415277][T10122] FAT-fs (loop4): Directory bread(block 68) failed [ 276.421855][T10122] FAT-fs (loop4): Directory bread(block 69) failed [ 276.456570][T10122] FAT-fs (loop4): Directory bread(block 70) failed [ 276.476467][T10122] FAT-fs (loop4): Directory bread(block 71) failed [ 276.486718][T10122] FAT-fs (loop4): Directory bread(block 72) failed [ 276.500107][T10122] FAT-fs (loop4): Directory bread(block 73) failed [ 276.512324][ T5295] usb 3-1: Using ep0 maxpacket: 8 [ 276.532313][ T5295] usb 3-1: New USB device found, idVendor=12ef, idProduct=0100, bcdDevice=8c.b6 [ 276.563712][ T5295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.619368][ T5295] usb 3-1: config 0 descriptor?? [ 276.627260][ T5295] usb 3-1: active config #0 != 1 ?? [ 276.853422][ T5354] usb 3-1: USB disconnect, device number 26 [ 276.906269][T10148] x_tables: duplicate underflow at hook 1 [ 276.997319][T10112] loop3: detected capacity change from 0 to 32768 [ 277.090704][T10112] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 277.108359][T10112] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 277.222682][T10112] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 18 extents in 0ms [ 277.484732][T10112] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 277.939417][ T5314] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 278.127884][ T5314] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 278.136137][ T5314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.156452][T10188] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 278.201335][ T5314] usb 2-1: config 0 has no interface number 0 [ 278.224512][ T5314] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 278.294532][ T5314] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.360208][ T5314] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 278.392322][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.426295][ T5314] usb 2-1: Product: syz [ 278.452257][ T5314] usb 2-1: Manufacturer: syz [ 278.516560][ T5314] usb 2-1: SerialNumber: syz [ 278.526604][ T5314] usb 2-1: config 0 descriptor?? [ 278.550648][T10208] loop2: detected capacity change from 0 to 4096 [ 278.856708][T10221] loop3: detected capacity change from 0 to 16 [ 278.872786][ T5314] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 278.884624][T10221] erofs: (device loop3): mounted with root inode @ nid 36. [ 278.928139][ T5314] usb 2-1: USB disconnect, device number 20 [ 279.327936][T10242] loop5: detected capacity change from 0 to 256 [ 280.038083][T10271] loop4: detected capacity change from 0 to 1024 [ 280.079282][T10271] EXT4-fs: Ignoring removed orlov option [ 280.084979][T10271] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.214120][T10271] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 280.330268][T10271] System zones: 0-1, 3-36 [ 280.395558][T10248] loop2: detected capacity change from 0 to 32768 [ 280.490209][T10271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.733120][T10305] loop5: detected capacity change from 0 to 128 [ 280.781047][ T5230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.805858][T10305] syz.5.2155: attempt to access beyond end of device [ 280.805858][T10305] loop5: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 280.820385][T10305] Buffer I/O error on dev loop5, logical block 3245768, async page read [ 280.843443][T10305] syz.5.2155: attempt to access beyond end of device [ 280.843443][T10305] loop5: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 280.885350][T10305] Buffer I/O error on dev loop5, logical block 8833403, async page read [ 280.916843][T10305] syz.5.2155: attempt to access beyond end of device [ 280.916843][T10305] loop5: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 280.931941][T10305] Buffer I/O error on dev loop5, logical block 13269809, async page read [ 280.940603][T10305] syz.5.2155: attempt to access beyond end of device [ 280.940603][T10305] loop5: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 280.954405][T10305] Buffer I/O error on dev loop5, logical block 8073606, async page read [ 280.955121][T10248] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 280.964734][T10305] syz.5.2155: attempt to access beyond end of device [ 280.964734][T10305] loop5: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 280.992172][T10248] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 281.000320][T10305] Buffer I/O error on dev loop5, logical block 3245771, async page read [ 281.005929][T10248] bcachefs (loop2): Version upgrade required: [ 281.005929][T10248] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 281.005929][T10248] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 281.005929][T10248] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 281.014253][T10305] syz.5.2155: attempt to access beyond end of device [ 281.014253][T10305] loop5: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 281.084893][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.113027][T10248] bcachefs (loop2): dropping and reconstructing all alloc info [ 281.235499][T10305] Buffer I/O error on dev loop5, logical block 8834171, async page read [ 281.272604][T10305] syz.5.2155: attempt to access beyond end of device [ 281.272604][T10305] loop5: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 281.290302][T10305] Buffer I/O error on dev loop5, logical block 13466417, async page read [ 281.301760][T10305] syz.5.2155: attempt to access beyond end of device [ 281.301760][T10305] loop5: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 281.315978][T10305] Buffer I/O error on dev loop5, logical block 8073606, async page read [ 281.325135][T10305] syz.5.2155: attempt to access beyond end of device [ 281.325135][T10305] loop5: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 281.339164][T10305] Buffer I/O error on dev loop5, logical block 3245774, async page read [ 281.347804][T10305] syz.5.2155: attempt to access beyond end of device [ 281.347804][T10305] loop5: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 281.361743][T10305] Buffer I/O error on dev loop5, logical block 8834939, async page read [ 281.485881][T10248] bcachefs (loop2): check_topology... done [ 281.522167][T10248] bcachefs (loop2): accounting_read... done [ 281.556797][T10248] bcachefs (loop2): alloc_read... done [ 281.594339][T10248] bcachefs (loop2): stripes_read... done [ 281.600234][T10248] bcachefs (loop2): snapshots_read... done [ 281.615619][T10248] bcachefs (loop2): check_allocations... done [ 281.654649][T10248] bcachefs (loop2): going read-write [ 281.745392][T10248] bcachefs (loop2): done starting filesystem [ 281.830220][T10303] loop1: detected capacity change from 0 to 32768 [ 282.109005][T10303] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 282.185527][ T5234] bcachefs (loop2): shutting down [ 282.231056][ T5234] bcachefs (loop2): going read-only [ 282.286208][ T5234] bcachefs (loop2): finished waiting for writes to stop [ 282.380819][ T5234] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 282.404360][T10303] XFS (loop1): Ending clean mount [ 282.435717][ T5234] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 282.436174][T10303] XFS (loop1): Quotacheck needed: Please wait. [ 282.532988][ T5234] bcachefs (loop2): unshutdown complete, journal seq 13 [ 282.541328][ T5234] bcachefs (loop2): done going read-only, filesystem not clean [ 282.706225][T10303] XFS (loop1): Quotacheck: Done. [ 282.899845][ T5234] bcachefs (loop2): shutdown complete [ 283.674271][ T5243] XFS (loop1): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 283.996992][T10399] loop4: detected capacity change from 0 to 1024 [ 284.434021][ T5314] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 284.460939][ T29] audit: type=1326 audit(1729584812.403:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.0.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0a17dff9 code=0x7ffc0000 [ 284.525592][ T29] audit: type=1326 audit(1729584812.403:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.0.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0a17dff9 code=0x7ffc0000 [ 284.646826][ T5314] usb 4-1: Using ep0 maxpacket: 32 [ 284.660203][ T5314] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.668234][ T5314] usb 4-1: config 0 has no interface number 0 [ 284.688063][ T5314] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 284.697626][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.708563][ T5314] usb 4-1: Product: syz [ 284.712743][ T5314] usb 4-1: Manufacturer: syz [ 284.721464][ T5314] usb 4-1: SerialNumber: syz [ 284.761205][ T5314] usb 4-1: config 0 descriptor?? [ 284.783376][ T5314] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 284.799135][ T5314] usb 4-1: selecting invalid altsetting 1 [ 284.809802][ T5314] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 284.855890][ T5314] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 284.885980][ T5314] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 284.905466][ T29] audit: type=1326 audit(1729584812.828:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.4.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd517dff9 code=0x7ffc0000 [ 284.938580][ T5314] usb 4-1: media controller created [ 284.984029][ T5314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.260531][ T5314] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 285.309681][ T29] audit: type=1326 audit(1729584812.828:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.4.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd517dff9 code=0x7ffc0000 [ 285.354369][T10422] openvswitch: netlink: Actions may not be safe on all matching packets [ 285.373498][ T5314] usb 4-1: USB disconnect, device number 23 [ 285.399478][ T29] audit: type=1326 audit(1729584812.864:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.4.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fafd517dff9 code=0x7ffc0000 [ 285.520407][ T29] audit: type=1326 audit(1729584812.864:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.4.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd517dff9 code=0x7ffc0000 [ 285.641692][ T29] audit: type=1326 audit(1729584812.864:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.4.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd517dff9 code=0x7ffc0000 [ 286.436499][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2215'. [ 286.581600][T10438] loop3: detected capacity change from 0 to 4096 [ 286.664748][T10438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.720003][T10438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.862564][T10438] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 16715264 out of range 0-8 [ 286.925909][T10438] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 286.974122][T10444] netlink: 'syz.1.2193': attribute type 21 has an invalid length. [ 286.983873][T10438] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.2214: Failed to acquire dquot type 0 [ 287.024106][T10444] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2193'. [ 287.250227][ T5235] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.463443][T10429] loop4: detected capacity change from 0 to 32768 [ 289.853975][T10498] loop1: detected capacity change from 0 to 1024 [ 289.915580][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2245'. [ 289.968883][T10500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2245'. [ 290.232239][ T2891] hfsplus: b-tree write err: -5, ino 4 [ 290.840617][T10520] loop3: detected capacity change from 0 to 1024 [ 290.907215][T10521] bond1: entered promiscuous mode [ 290.953584][T10521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.155729][T10526] netlink: 'syz.4.2256': attribute type 5 has an invalid length. [ 291.210532][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 291.268556][T10526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2256'. [ 291.810954][T10538] syz.4.2264: attempt to access beyond end of device [ 291.810954][T10538] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 292.172114][T10556] xt_connbytes: Forcing CT accounting to be enabled [ 292.426089][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 292.475170][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 292.483969][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.491901][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 292.500278][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 292.508932][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.775312][T10563] vcan0 speed is unknown, defaulting to 1000 [ 293.746575][T10596] loop3: detected capacity change from 0 to 512 [ 293.772001][T10596] EXT4-fs: Ignoring removed nobh option [ 293.804227][ T5248] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 293.870688][ T5248] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 293.951766][ T5248] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 293.962426][ T5248] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 293.970338][ T5248] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 293.978420][ T5248] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 294.114858][T10585] vcan0 speed is unknown, defaulting to 1000 [ 294.181485][T10596] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.264362][T10596] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.348090][T10563] chnl_net:caif_netlink_parms(): no params data found [ 294.508743][T10596] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 294.701779][T10596] EXT4-fs (loop3): Remounting filesystem read-only [ 294.888927][ T5248] Bluetooth: hci6: command tx timeout [ 294.996710][ T5235] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 295.074551][T10563] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.081698][T10563] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.147958][T10563] bridge_slave_0: entered allmulticast mode [ 295.207648][T10563] bridge_slave_0: entered promiscuous mode [ 295.318739][T10563] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.361396][T10563] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.396107][T10563] bridge_slave_1: entered allmulticast mode [ 295.451781][T10563] bridge_slave_1: entered promiscuous mode [ 295.659585][T10563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.767318][T10563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.990541][T10563] team0: Port device team_slave_0 added [ 296.076098][T10563] team0: Port device team_slave_1 added [ 296.274049][ T5248] Bluetooth: hci7: command tx timeout [ 296.308806][T10563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.315793][T10563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.464897][T10563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.621324][T10563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.628317][T10563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.686621][T10620] loop4: detected capacity change from 0 to 32768 [ 296.773013][T10620] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 296.829027][T10563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.902303][T10620] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 512 but claims that 2046 are free [ 297.022337][T10620] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 297.067551][T10620] OCFS2: File system is now read-only. [ 297.108429][T10620] (syz.4.2292,10620,1):ocfs2_search_chain:1814 ERROR: status = -30 [ 297.143882][ T5248] Bluetooth: hci6: command tx timeout [ 297.154525][T10620] (syz.4.2292,10620,1):ocfs2_search_chain:1926 ERROR: status = -30 [ 297.200527][T10563] hsr_slave_0: entered promiscuous mode [ 297.218582][T10620] (syz.4.2292,10620,1):ocfs2_claim_suballoc_bits:1995 ERROR: status = -30 [ 297.246239][T10620] (syz.4.2292,10620,1):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 297.260305][T10563] hsr_slave_1: entered promiscuous mode [ 297.276614][T10563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.297438][T10620] (syz.4.2292,10620,1):ocfs2_claim_new_inode:2273 ERROR: status = -30 [ 297.312183][T10563] Cannot create hsr debugfs directory [ 297.331334][T10620] (syz.4.2292,10620,1):ocfs2_claim_new_inode:2288 ERROR: status = -30 [ 297.404965][T10620] (syz.4.2292,10620,1):ocfs2_mknod_locked:637 ERROR: status = -30 [ 297.448222][ T2569] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 297.465755][T10620] (syz.4.2292,10620,0):ocfs2_mknod:383 ERROR: status = -30 [ 297.478703][T10620] (syz.4.2292,10620,0):ocfs2_mknod:500 ERROR: status = -30 [ 297.485941][T10620] (syz.4.2292,10620,0):ocfs2_create:674 ERROR: status = -30 [ 297.515471][ T2569] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 297.597804][ T5230] ocfs2: Unmounting device (7,4) on (node local) [ 297.895492][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2309'. [ 297.957859][T10663] netlink: 'syz.3.2312': attribute type 11 has an invalid length. [ 297.958816][T10585] chnl_net:caif_netlink_parms(): no params data found [ 298.005735][T10663] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2312'. [ 298.560333][ T5248] Bluetooth: hci7: command tx timeout [ 299.394807][ T5248] Bluetooth: hci6: command tx timeout [ 300.381933][T10714] kAFS: unable to lookup cell '(>.€·?](<â›' [ 300.381933][T10714] Ø¡—§P!×0Ä^O¹œ[àÆZéøvMTölÆAèÉß/H=9.äÜb>9ðF9ºÙ*‰ŒmªTS¶û' [ 300.530564][T10716] netlink: 'syz.4.2336': attribute type 1 has an invalid length. [ 300.538520][T10716] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2336'. [ 300.787564][T10585] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.800802][ T5248] Bluetooth: hci7: command tx timeout [ 300.811156][T10585] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.819174][T10585] bridge_slave_0: entered allmulticast mode [ 300.828133][T10585] bridge_slave_0: entered promiscuous mode [ 300.836251][T10585] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.843347][T10585] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.850705][T10585] bridge_slave_1: entered allmulticast mode [ 300.857813][T10585] bridge_slave_1: entered promiscuous mode [ 301.011177][T10585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.364451][T10563] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.476964][T10585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.647933][ T5248] Bluetooth: hci6: command tx timeout [ 301.794212][T10563] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.389551][T10563] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.449489][ T5294] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 302.495821][T10585] team0: Port device team_slave_0 added [ 302.548763][T10585] team0: Port device team_slave_1 added [ 302.666691][ T5294] usb 4-1: not running at top speed; connect to a high speed hub [ 302.700011][ T5294] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 302.763224][ T5294] usb 4-1: config 95 has no interface number 0 [ 302.807201][ T5294] usb 4-1: config 95 interface 1 has no altsetting 0 [ 302.855722][ T5294] usb 4-1: string descriptor 0 read error: -22 [ 302.872350][T10563] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.892900][ T5294] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 302.927760][ T5294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.035158][ T5248] Bluetooth: hci7: command tx timeout [ 303.131516][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2357'. [ 303.184154][T10585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.253999][T10585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.446278][T10585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.510894][ T5294] usb 4-1: USB disconnect, device number 24 [ 303.588346][T10585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.596529][T10585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.838296][T10766] loop1: detected capacity change from 0 to 4096 [ 303.851365][T10585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.933655][ T29] audit: type=1326 audit(1729584830.383:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.0.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0a17dff9 code=0x7ffc0000 [ 304.089831][ T29] audit: type=1326 audit(1729584830.457:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.0.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0a17dff9 code=0x7ffc0000 [ 304.265517][ T29] audit: type=1326 audit(1729584830.457:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.0.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fdc0a17dff9 code=0x7ffc0000 [ 304.349878][T10585] hsr_slave_0: entered promiscuous mode [ 304.403177][T10585] hsr_slave_1: entered promiscuous mode [ 304.443672][ T29] audit: type=1326 audit(1729584830.457:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.0.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0a17dff9 code=0x7ffc0000 [ 304.466319][T10585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.473887][T10585] Cannot create hsr debugfs directory [ 304.574035][ T29] audit: type=1326 audit(1729584830.457:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.0.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0a17dff9 code=0x7ffc0000 [ 304.642405][T10778] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 304.765908][T10563] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.821434][T10563] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.973233][T10563] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 305.127327][T10563] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 305.274189][T10791] veth0_to_batadv: entered promiscuous mode [ 305.313459][T10794] loop3: detected capacity change from 0 to 164 [ 305.320001][T10791] veth0_to_batadv: entered allmulticast mode [ 305.889014][T10585] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.154083][T10806] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2379'. [ 306.292372][T10563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.439015][T10563] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.687779][T10585] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.713835][T10766] ntfs3(loop1): Failed to read $AttrDef (-4). [ 306.730462][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.738059][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.764507][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.771628][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.808636][T10810] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2381'. [ 306.952116][T10810] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2381'. [ 307.008055][T10812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2382'. [ 307.108402][T10812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2382'. [ 307.311800][T10585] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.884097][T10585] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.005743][T10833] loop1: detected capacity change from 0 to 2048 [ 308.364273][T10585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 308.425280][T10585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 308.481478][T10585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 308.533460][T10585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 309.058848][T10585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.125325][T10585] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.240890][T10833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.275508][T10585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 309.286211][T10585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.510223][ T5243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.785556][T10849] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2397'. [ 310.108291][T10585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.267753][T10857] loop1: detected capacity change from 0 to 256 [ 310.319239][T10857] exfat: Deprecated parameter 'namecase' [ 310.330256][T10585] veth0_vlan: entered promiscuous mode [ 310.388687][T10585] veth1_vlan: entered promiscuous mode [ 310.420983][T10857] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 311.407742][T10877] xt_HMARK: proto mask must be zero with L3 mode [ 311.605799][T10879] No such timeout policy "syz0" [ 311.820200][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.827371][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.837102][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.844238][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.049179][T10887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2415'. [ 312.134339][ T12] bridge_slave_1: left allmulticast mode [ 312.143579][ T12] bridge_slave_1: left promiscuous mode [ 312.181512][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.320199][ T12] bridge_slave_0: left allmulticast mode [ 312.325892][ T12] bridge_slave_0: left promiscuous mode [ 312.389719][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.514464][T10903] loop4: detected capacity change from 0 to 16 [ 312.558666][T10903] erofs: (device loop4): mounted with root inode @ nid 36. [ 312.599682][T10906] unsupported nlmsg_type 40 [ 312.758847][T10910] kAFS: unable to lookup cell '/' [ 312.931092][T10913] loop4: detected capacity change from 0 to 2048 [ 313.005113][T10913] loop4: AHDI p1 p3 [ 313.087719][ T4680] loop4: AHDI p1 p3 [ 314.149620][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.178134][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.214607][ T12] bond0 (unregistering): Released all slaves [ 314.264275][ T12] bond1 (unregistering): Released all slaves [ 314.626238][T10585] veth0_macvtap: entered promiscuous mode [ 314.641500][T10585] veth1_macvtap: entered promiscuous mode [ 314.777066][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.823934][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.904209][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.920763][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.930682][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.941121][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.951031][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.962052][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.972007][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.982760][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.992663][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.003466][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.020490][T10585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.031094][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.041630][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.051506][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.062316][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.072352][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.083206][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.093294][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.104010][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.114786][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.125527][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.136499][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.146967][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.160988][T10585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.917231][ T5294] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 315.962269][T10955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2446'. [ 315.994450][T10955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2446'. [ 316.024073][T10585] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.033809][T10585] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.070705][T10585] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.111449][ T5294] usb 5-1: Using ep0 maxpacket: 8 [ 316.127363][T10585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.155087][ T5294] usb 5-1: config 0 has too many interfaces: 227, using maximum allowed: 32 [ 316.163796][ T5294] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 227 [ 316.201270][T10563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.211096][T10972] loop3: detected capacity change from 0 to 2048 [ 316.252366][ T5294] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=6c.23 [ 316.261443][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.346979][T10972] overlayfs: conflicting options: metacopy=off,verity=on [ 316.367323][ T5294] usb 5-1: config 0 descriptor?? [ 316.780695][ T9] usb 5-1: USB disconnect, device number 24 [ 317.723153][T10970] loop1: detected capacity change from 0 to 32768 [ 317.773415][T10970] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2453 (10970) [ 317.945404][T10996] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2464'. [ 318.386144][T11001] loop3: detected capacity change from 0 to 64 [ 319.037479][T10970] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 319.079437][T10970] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 319.130018][T10970] BTRFS info (device loop1): using free-space-tree [ 319.165746][T10970] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 319.175738][T10970] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 319.227888][T10970] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 319.458195][T10970] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 319.506346][T10970] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 319.549173][T10970] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 319.652982][T10970] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 319.722561][T10970] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 319.752654][ T12] hsr_slave_0: left promiscuous mode [ 319.860792][T10970] BTRFS error (device loop1): open_ctree failed [ 320.026796][ T12] hsr_slave_1: left promiscuous mode [ 320.083455][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.132479][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.179937][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.224926][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.343965][ T12] veth1_macvtap: left promiscuous mode [ 320.371658][T11038] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2479'. [ 320.382343][ T12] veth0_macvtap: left promiscuous mode [ 320.411927][ T12] veth1_vlan: left promiscuous mode [ 320.427458][ T12] veth0_vlan: left promiscuous mode [ 321.492365][ T12] infiniband syz1: set down [ 321.993037][ T12] team0 (unregistering): Port device team_slave_1 removed [ 322.055606][ T12] team0 (unregistering): Port device team_slave_0 removed [ 322.491477][ T11] smc: removing ib device syz1 [ 322.600239][T11036] netlink: 'syz.3.2477': attribute type 1 has an invalid length. [ 322.631420][ T5314] vcan0 speed is unknown, defaulting to 1000 [ 322.709145][T11040] netlink: 'syz.0.2480': attribute type 1 has an invalid length. [ 322.735500][T11040] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2480'. [ 322.748375][ T926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.774419][ T926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.785717][T10563] veth0_vlan: entered promiscuous mode [ 322.822454][T10563] veth1_vlan: entered promiscuous mode [ 322.846432][T10563] veth0_macvtap: entered promiscuous mode [ 322.855858][T10563] veth1_macvtap: entered promiscuous mode [ 322.872494][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.894805][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.915250][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.937390][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.947226][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.012913][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.022765][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.076034][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.095832][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.106401][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.116729][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.127793][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.139800][T10563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.347872][T11064] loop4: detected capacity change from 0 to 1024 [ 323.357393][T11064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.563078][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.609099][T11064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.621644][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.645678][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.756627][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.830478][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.875888][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.905603][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.966180][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.034383][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.107158][ T1161] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 324.114861][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.158752][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.183248][T11081] deleting an unspecified loop device is not supported. [ 324.226171][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.239292][T11083] loop1: detected capacity change from 0 to 64 [ 324.302542][T10563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.320855][ T926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.361169][ T1161] usb 5-1: config 0 has an invalid descriptor of length 7, skipping remainder of the config [ 324.408309][ T1161] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 324.488077][ T1161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.541223][ T1161] usb 5-1: config 0 descriptor?? [ 324.584549][ T1161] usb 5-1: bad CDC descriptors [ 324.819695][ T1161] usb 5-1: USB disconnect, device number 25 [ 324.828803][ T926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.839556][T10563] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.870838][T11086] kAFS: No cell specified [ 324.886964][T10563] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.952458][T10563] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.027195][T10563] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.097165][T11090] loop3: detected capacity change from 0 to 256 [ 325.325305][T11090] FAT-fs (loop3): Directory bread(block 64) failed [ 325.398748][T11090] FAT-fs (loop3): Directory bread(block 65) failed [ 325.405396][T11090] FAT-fs (loop3): Directory bread(block 66) failed [ 325.447290][T11093] loop1: detected capacity change from 0 to 512 [ 325.495044][T11090] FAT-fs (loop3): Directory bread(block 67) failed [ 325.501735][T11090] FAT-fs (loop3): Directory bread(block 68) failed [ 325.508379][T11090] FAT-fs (loop3): Directory bread(block 69) failed [ 325.514984][T11090] FAT-fs (loop3): Directory bread(block 70) failed [ 325.521908][T11090] FAT-fs (loop3): Directory bread(block 71) failed [ 325.528682][T11090] FAT-fs (loop3): Directory bread(block 72) failed [ 325.535226][T11090] FAT-fs (loop3): Directory bread(block 73) failed [ 325.735571][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.776906][T11093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.796824][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.928000][T11093] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.080098][ T5230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.190904][T11103] loop2: detected capacity change from 0 to 128 [ 326.305405][ T5243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.392269][ T2569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.486337][ T2569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.850470][T11112] program syz.2.2510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.930887][T11112] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 327.013141][T11116] loop1: detected capacity change from 0 to 1024 [ 327.108604][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 327.132085][ T5295] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 327.163858][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 327.320931][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 327.344351][ T5295] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 327.368138][ T5295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.415111][ T5295] usb 1-1: Product: syz [ 327.419294][ T5295] usb 1-1: Manufacturer: syz [ 327.483430][ T5295] usb 1-1: SerialNumber: syz [ 327.606233][ T5295] usb 1-1: config 0 descriptor?? [ 327.787210][T11146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2526'. [ 327.844876][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2526'. [ 328.016239][T11153] sctp: [Deprecated]: syz.3.2529 (pid 11153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.016239][T11153] Use struct sctp_sack_info instead [ 328.106539][ T5295] usb 1-1: USB disconnect, device number 18 [ 328.298405][T11161] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 328.332969][ T1161] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 328.472749][T11167] openvswitch: netlink: Message has 8 unknown bytes. [ 328.503019][ T1161] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 328.515487][T11167] openvswitch: netlink: Actions may not be safe on all matching packets [ 328.558115][ T1161] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 328.584240][ T5371] udevd[5371]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.608938][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.615929][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.635373][ T1161] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 64 [ 328.699140][ T1161] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 328.726439][ T1161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.839863][ T1161] usb 2-1: config 0 descriptor?? [ 328.850197][T11155] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 328.878325][T11155] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 329.145562][ T29] audit: type=1326 audit(1729584853.652:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.0.2547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0a17dff9 code=0x7ffc0000 [ 329.264809][ T29] audit: type=1326 audit(1729584853.652:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.0.2547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0a17dff9 code=0x7ffc0000 [ 329.287821][ T29] audit: type=1326 audit(1729584853.652:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.0.2547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc0a17dff9 code=0x7ffc0000 [ 329.310445][ T29] audit: type=1326 audit(1729584853.652:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.0.2547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0a17dff9 code=0x7ffc0000 [ 329.332973][ T29] audit: type=1326 audit(1729584853.661:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.0.2547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0a17dff9 code=0x7ffc0000 [ 329.414998][T11181] loop2: detected capacity change from 0 to 4096 [ 329.456730][T11181] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 329.487757][ T1161] usb 2-1: USB disconnect, device number 21 [ 329.602444][T11181] ntfs3(loop2): Failed to load $Extend (-22). [ 329.608582][T11181] ntfs3(loop2): Failed to initialize $Extend. [ 329.787591][T11191] /dev/loop5: Can't open blockdev [ 329.949226][T11214] xt_bpf: check failed: parse error [ 330.347352][T11226] netlink: 'syz.2.2564': attribute type 21 has an invalid length. [ 330.401275][T11226] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2564'. [ 330.675561][T11233] netlink: 'syz.4.2569': attribute type 2 has an invalid length. [ 330.683845][T11233] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2569'. [ 330.741955][T11213] loop3: detected capacity change from 0 to 32768 [ 330.905085][T11213] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 330.983852][T11213] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 331.159443][T11213] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 331.212801][ T5294] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 331.235921][ T5294] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 331.290517][ T5248] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 331.562362][ T5294] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 301ms [ 331.613687][ T5294] gfs2: fsid=syz:syz.0: jid=0: Done [ 331.636820][T11213] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 332.723853][ T29] audit: type=1326 audit(1729584856.919:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2717dff9 code=0x7ffc0000 [ 332.749171][ T29] audit: type=1326 audit(1729584856.919:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2717dff9 code=0x7ffc0000 [ 332.752909][ T5294] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 332.771750][ T29] audit: type=1326 audit(1729584856.928:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f6f2717dff9 code=0x7ffc0000 [ 332.802643][ T29] audit: type=1326 audit(1729584856.928:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2717dff9 code=0x7ffc0000 [ 332.825081][ T29] audit: type=1326 audit(1729584856.928:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2717dff9 code=0x7ffc0000 [ 332.945797][T11331] netlink: set zone limit has 4 unknown bytes [ 333.014760][ T5294] usb 2-1: unable to get BOS descriptor or descriptor too short [ 333.024169][ T5294] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 333.067574][T11332] IPv6: Can't replace route, no match found [ 333.087875][ T5294] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 333.127178][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 30768, setting to 1024 [ 333.204811][ T5294] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 333.263105][ T5294] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 333.289507][ T5294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.326185][ T5294] usb 2-1: Product: syz [ 333.359584][ T5294] usb 2-1: Manufacturer: syz [ 333.380848][ T5294] usb 2-1: SerialNumber: syz [ 333.405006][ T5294] usb 2-1: config 0 descriptor?? [ 333.500731][T11311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 333.508005][T11311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 333.612756][ C0] usb 2-1: NFC: Urb failure (status -71) [ 333.618979][ C0] usb 2-1: NFC: Urb failure (status -71) [ 333.646792][ T5294] usb 2-1: NFC: Unable to get FW version [ 333.684962][ T5294] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -71 [ 333.765021][T11352] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 333.918873][ T1161] usb 2-1: USB disconnect, device number 22 [ 334.203633][T11362] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 334.367215][T11367] netlink: get zone limit has 4 unknown bytes [ 334.418435][T11373] loop2: detected capacity change from 0 to 64 [ 334.719013][T11382] loop4: detected capacity change from 0 to 256 [ 334.892066][T11382] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 335.355982][T11404] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 335.383037][T11404] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 335.461370][T11404] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 336.021108][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.242241][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.712598][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.727693][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.736201][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.744381][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.752458][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.772975][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.880762][ T5292] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 336.967282][ T5294] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 337.037544][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.134493][ T5294] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.148773][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 337.186720][T11451] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 337.197357][ T5294] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 337.205769][ T5292] usb 2-1: Using ep0 maxpacket: 16 [ 337.222889][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.236001][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 337.282279][ T5294] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 337.332475][ T5294] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 337.344720][ T5294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.432041][ T5294] usb 4-1: Product: syz [ 337.445245][ T5294] usb 4-1: Manufacturer: syz [ 337.449881][ T5294] usb 4-1: SerialNumber: syz [ 337.488958][ T5294] usb 4-1: config 0 descriptor?? [ 337.503587][ T5294] usb 4-1: ucan: probing device on interface #0 [ 337.510619][ T5294] usb 4-1: ucan: invalid endpoint configuration [ 337.516890][ T5294] usb 4-1: ucan: probe failed; try to update the device firmware [ 337.619489][ T5292] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 337.638435][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.646579][ T5292] usb 2-1: Product: syz [ 337.651012][ T5292] usb 2-1: Manufacturer: syz [ 337.656747][ T5292] usb 2-1: SerialNumber: syz [ 337.684236][ T5292] usb 2-1: config 0 descriptor?? [ 337.726341][ T5292] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 337.749772][ T1161] usb 4-1: USB disconnect, device number 25 [ 337.795000][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2673'. [ 337.838196][T11466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2674'. [ 337.892047][ T35] batadv0: left allmulticast mode [ 337.897139][ T35] batadv0: left promiscuous mode [ 337.933752][ T35] bridge0: port 3(batadv0) entered disabled state [ 337.951325][ T5292] gp8psk: usb in 128 operation failed. [ 337.957979][ T5292] gp8psk: usb in 137 operation failed. [ 337.963481][ T5292] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 338.007944][ T5292] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 338.039611][ T5292] usb 2-1: media controller created [ 338.081350][ T35] bridge_slave_1: left allmulticast mode [ 338.105020][ T5292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.123869][ T35] bridge_slave_1: left promiscuous mode [ 338.149221][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.174324][ T5292] gp8psk_fe: Frontend revision 1 attached [ 338.180117][ T5292] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 338.219923][ T5292] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 338.300638][ T35] bridge_slave_0: left allmulticast mode [ 338.306332][ T35] bridge_slave_0: left promiscuous mode [ 338.337396][ T5292] gp8psk: usb in 138 operation failed. [ 338.342906][ T5292] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 338.343548][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.366100][ T5292] gp8psk: found Genpix USB device pID = 201 (hex) [ 338.385869][ T5292] usb 2-1: USB disconnect, device number 23 [ 338.590634][ T5292] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 338.628517][T11490] loop3: detected capacity change from 0 to 512 [ 338.684961][T11490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.712161][T11490] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.845319][T11495] loop1: detected capacity change from 0 to 512 [ 338.872510][T11495] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 338.917948][T11497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2681'. [ 338.927916][T11495] EXT4-fs (loop1): 1 truncate cleaned up [ 338.934798][T11495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.037150][T11495] tmpfs: Bad value for 'mpol' [ 339.063739][ T5235] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.074725][ T53] Bluetooth: hci2: command tx timeout [ 339.186102][ T5243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.848250][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.870645][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.896322][ T35] bond0 (unregistering): Released all slaves [ 339.919802][ T35] bond1 (unregistering): Released all slaves [ 339.953804][T11432] chnl_net:caif_netlink_parms(): no params data found [ 340.270728][ T5294] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 340.685637][ T5294] usb 6-1: config 0 has an invalid descriptor of length 104, skipping remainder of the config [ 340.696097][ T5294] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.709553][ T5294] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 340.719201][ T5294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.730352][ T5294] usb 6-1: config 0 descriptor?? [ 340.979293][ T5294] usb 6-1: string descriptor 0 read error: -71 [ 341.019404][T11536] mmap: syz.2.2698 (11536): VmData 175878144 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 341.044080][ T5294] usb 6-1: USB disconnect, device number 22 [ 341.249314][T11432] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.257733][ T5248] Bluetooth: hci2: command tx timeout [ 341.305600][T11432] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.353207][T11432] bridge_slave_0: entered allmulticast mode [ 341.379280][T11432] bridge_slave_0: entered promiscuous mode [ 341.403684][T11432] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.428443][T11432] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.463689][T11432] bridge_slave_1: entered allmulticast mode [ 341.481912][T11432] bridge_slave_1: entered promiscuous mode [ 341.882715][T11534] loop1: detected capacity change from 0 to 32768 [ 341.907543][T11528] loop3: detected capacity change from 0 to 32768 [ 341.942247][T11534] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2697 (11534) [ 342.125605][T11534] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 342.211559][T11534] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 342.258794][T11534] BTRFS info (device loop1): using free-space-tree [ 342.381824][T11540] loop2: detected capacity change from 0 to 40427 [ 342.458669][T11540] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 342.489361][T11540] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 342.544823][T11432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.571928][T11432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.923305][T11540] F2FS-fs (loop2): Found nat_bits in checkpoint [ 342.967531][T11432] team0: Port device team_slave_0 added [ 342.989884][ T35] hsr_slave_0: left promiscuous mode [ 343.007281][ T35] hsr_slave_1: left promiscuous mode [ 343.026372][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.033881][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.057143][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.067799][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.224033][ T35] veth1_macvtap: left promiscuous mode [ 343.316156][ T35] veth0_macvtap: left promiscuous mode [ 343.327066][ T35] veth1_vlan: left promiscuous mode [ 343.332394][ T35] veth0_vlan: left promiscuous mode [ 343.475446][T11534] BTRFS warning (device loop1): get dev_stats failed, device not found [ 343.511965][ T5248] Bluetooth: hci2: command tx timeout [ 343.517427][T11540] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 343.524706][T11540] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 343.662089][ T5243] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 344.983077][ T35] team0 (unregistering): Port device team_slave_1 removed [ 345.119710][ T35] team0 (unregistering): Port device team_slave_0 removed [ 345.773820][ T5248] Bluetooth: hci2: command tx timeout [ 345.885911][ T5314] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 346.072376][ T5314] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 346.075290][T11432] team0: Port device team_slave_1 added [ 346.081673][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.096355][ T5314] usb 3-1: Product: syz [ 346.100991][ T5314] usb 3-1: Manufacturer: syz [ 346.105607][ T5314] usb 3-1: SerialNumber: syz [ 346.121656][T11597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2710'. [ 346.133090][T11597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2710'. [ 346.158385][ T5314] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 346.203530][ T1161] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 346.552367][T11432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.559522][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.612137][T11432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.719053][T11432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.727288][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.889470][T11432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.957080][T11658] loop1: detected capacity change from 0 to 2048 [ 348.025180][T11658] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 348.080104][T11658] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 348.302700][T11658] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.644597][T11432] hsr_slave_0: entered promiscuous mode [ 348.788042][T11432] hsr_slave_1: entered promiscuous mode [ 348.913955][T11432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.993321][T11432] Cannot create hsr debugfs directory [ 349.102374][T11678] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 349.507404][T11690] cgroup: name respecified [ 350.389649][T11707] loop1: detected capacity change from 0 to 136 [ 350.524739][T11707] ISOFS: unable to read i-node block [ 351.582727][ T5295] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 351.711105][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2765'. [ 351.788559][ T5295] usb 2-1: Using ep0 maxpacket: 8 [ 351.815714][ T5295] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.888657][ T5295] usb 2-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12 [ 351.990123][ T5295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.054950][ T5295] usb 2-1: config 0 descriptor?? [ 352.350999][T11719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.415457][ T5295] usb 2-1: string descriptor 0 read error: -71 [ 352.465999][ T5295] usb 2-1: Found UVC 0.00 device (05a9:2640) [ 352.528083][T11719] bond0: (slave rose0): Enslaving as an active interface with an up link [ 352.579646][ T5295] usb 2-1: No valid video chain found. [ 352.686410][ T5295] usb 2-1: USB disconnect, device number 24 [ 353.398345][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 354.443125][T11765] capability: warning: `syz.3.2779' uses 32-bit capabilities (legacy support in use) [ 355.498822][T11779] hfs: can't find a HFS filesystem on dev nullb0 [ 356.000351][T11786] cgroup2: Unexpected value for 'nsdelegate' [ 356.100599][ T5295] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 356.351607][ T5295] usb 6-1: Using ep0 maxpacket: 8 [ 356.532107][ T5295] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 356.588116][ T5295] usb 6-1: config 179 has no interface number 0 [ 356.594873][ T5295] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 356.685932][T11790] tmpfs: Bad value for 'mpol' [ 356.768106][ T5295] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 356.849049][ T5295] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 356.952835][ T5295] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 357.043458][ T5295] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 357.190316][ T5295] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 357.300130][ T5295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.388519][T11782] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 358.230263][T11432] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 358.333418][T11780] loop1: detected capacity change from 0 to 32768 [ 358.468631][T11780] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2787 (11780) [ 358.618460][T11432] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 358.762858][T11432] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 358.803207][T11803] loop2: detected capacity change from 0 to 4096 [ 358.980113][T11432] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 359.110321][ T5295] usb 6-1: USB disconnect, device number 23 [ 359.116429][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 359.116475][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 359.705515][T11432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.868833][T11432] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.006500][ T2891] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.013783][ T2891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.108109][ T2891] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.115338][ T2891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.461226][T11432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.749678][T11432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.821497][T11853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2813'. [ 362.095046][T11858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2814'. [ 362.872118][T11866] netlink: 'syz.5.2816': attribute type 21 has an invalid length. [ 362.879981][T11866] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2816'. [ 363.120526][T11866] netlink: 'syz.5.2816': attribute type 4 has an invalid length. [ 363.210018][T11866] netlink: 'syz.5.2816': attribute type 3 has an invalid length. [ 363.379724][T11866] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2816'. [ 363.506029][T11888] dvmrp8: entered allmulticast mode [ 363.817336][T11432] veth0_vlan: entered promiscuous mode [ 363.908215][T11432] veth1_vlan: entered promiscuous mode [ 364.113791][T11432] veth0_macvtap: entered promiscuous mode [ 364.228297][T11432] veth1_macvtap: entered promiscuous mode [ 364.381458][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.459125][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.540522][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.574400][T11903] netlink: 'syz.0.2828': attribute type 3 has an invalid length. [ 364.620714][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.648045][T11903] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2828'. [ 364.700598][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.794470][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.871655][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.896500][ T5248] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 364.949429][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.038840][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.049338][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.175056][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.256209][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.374845][T11432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.481053][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.591630][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.687030][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.787000][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.828342][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.887156][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.956217][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.028021][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.085879][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.161381][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.221169][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.295219][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.366558][T11432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.474095][T11432] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.588330][T11432] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.597084][T11432] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.775545][T11432] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.693991][T11803] ntfs3(loop2): Failed to read $UpCase (-4). [ 367.719336][T11780] BTRFS error (device loop1): open_ctree failed [ 367.800129][ T2569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.914810][ T2569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.224954][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.232919][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.665128][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.715812][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.736808][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.745214][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.752839][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 368.761141][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.982581][T11981] loop2: detected capacity change from 0 to 64 [ 370.151398][T11981] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 370.988794][ T53] Bluetooth: hci4: command tx timeout [ 371.163513][T11958] chnl_net:caif_netlink_parms(): no params data found [ 371.464202][T12008] loop2: detected capacity change from 0 to 22 [ 371.533063][T12008] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 371.606687][T12008] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 372.478167][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.931100][T12007] netlink: 'syz.4.2860': attribute type 21 has an invalid length. [ 372.971145][T12007] netlink: 'syz.4.2860': attribute type 1 has an invalid length. [ 373.252805][ T53] Bluetooth: hci4: command tx timeout [ 373.741216][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.695447][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.797604][T12016] loop3: detected capacity change from 0 to 32768 [ 374.916551][T12046] loop4: detected capacity change from 0 to 256 [ 374.956097][T12016] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 375.276741][T12022] loop2: detected capacity change from 0 to 32768 [ 375.478373][T12016] XFS (loop3): Ending clean mount [ 375.494243][ T53] Bluetooth: hci4: command tx timeout [ 375.618443][T12016] XFS (loop3): Quotacheck needed: Please wait. [ 375.969015][T12016] XFS (loop3): Quotacheck: Done. [ 376.037573][T12022] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 376.037573][T12022] [ 376.143530][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.161225][ T5354] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 376.188417][T12022] ialloc: diAlloc returned -5! [ 376.205989][ T29] audit: type=1400 audit(1729584897.097:76): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2621D01A0B978D2F2F262D2A83D1 pid=12072 comm="syz.0.2876" [ 376.307498][ T5235] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 376.386984][T11958] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.425786][ T5354] usb 5-1: Using ep0 maxpacket: 8 [ 376.454849][T11958] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.523876][ T5354] usb 5-1: config 0 has an invalid interface number: 225 but max is 0 [ 376.532112][ T5354] usb 5-1: config 0 has no interface number 0 [ 376.564405][T11958] bridge_slave_0: entered allmulticast mode [ 376.646496][T11958] bridge_slave_0: entered promiscuous mode [ 376.682676][ T5354] usb 5-1: config 0 interface 225 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.756684][T11958] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.778420][ T5354] usb 5-1: config 0 interface 225 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 376.833135][T11958] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.946718][T11958] bridge_slave_1: entered allmulticast mode [ 376.953903][ T5354] usb 5-1: config 0 interface 225 altsetting 0 endpoint 0x88 has an invalid bInterval 233, changing to 11 [ 377.017354][T11958] bridge_slave_1: entered promiscuous mode [ 377.075609][ T5354] usb 5-1: config 0 interface 225 altsetting 0 endpoint 0x88 has invalid maxpacket 34140, setting to 1024 [ 377.231918][ T5354] usb 5-1: config 0 interface 225 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.390022][ T5354] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=e1.8c [ 377.468674][ T5354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.542999][ T5354] usb 5-1: Product: syz [ 377.547227][ T5354] usb 5-1: Manufacturer: syz [ 377.551858][ T5354] usb 5-1: SerialNumber: syz [ 377.615578][T11958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.714055][ T5354] usb 5-1: config 0 descriptor?? [ 377.747951][ T53] Bluetooth: hci4: command tx timeout [ 377.770672][T12066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 377.798019][T11958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.954963][ T5354] cypress_m8 5-1:0.225: HID->COM RS232 Adapter converter detected [ 378.338899][ T5354] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 378.657607][ T8746] usb 5-1: USB disconnect, device number 26 [ 378.720478][T12098] loop3: detected capacity change from 0 to 256 [ 378.767907][ T8746] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 378.887790][ T8746] cypress_m8 5-1:0.225: device disconnected [ 378.937445][T11958] team0: Port device team_slave_0 added [ 378.963953][T12098] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 379.034039][T11958] team0: Port device team_slave_1 added [ 379.990662][T11958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.997666][T11958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.370760][T11958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.501715][T11958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.508729][T11958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.876863][T12135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2894'. [ 380.886547][T11958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.767261][T12148] netlink: 'syz.5.2897': attribute type 9 has an invalid length. [ 381.973563][T11958] hsr_slave_0: entered promiscuous mode [ 382.115783][T11958] hsr_slave_1: entered promiscuous mode [ 382.268227][T11958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.333293][T11958] Cannot create hsr debugfs directory [ 382.339096][ T11] bridge_slave_1: left allmulticast mode [ 382.375917][ T11] bridge_slave_1: left promiscuous mode [ 382.383002][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.478976][ T11] bridge_slave_0: left allmulticast mode [ 382.507437][ T11] bridge_slave_0: left promiscuous mode [ 382.544579][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.647976][T12158] loop4: detected capacity change from 0 to 32768 [ 383.947333][T12158] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 384.056269][T12158] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 384.083947][T12158] bcachefs (loop4): Version upgrade required: [ 384.083947][T12158] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 384.083947][T12158] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 384.083947][T12158] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 384.384978][T12158] bcachefs (loop4): dropping and reconstructing all alloc info [ 384.486265][T12158] bcachefs (loop4): check_topology... done [ 384.492593][T12158] bcachefs (loop4): accounting_read... done [ 384.513796][T12158] bcachefs (loop4): alloc_read... done [ 384.535696][T12158] bcachefs (loop4): stripes_read... done [ 384.564502][T12158] bcachefs (loop4): snapshots_read... done [ 384.588367][T12158] bcachefs (loop4): check_allocations... done [ 384.716311][T12158] bcachefs (loop4): going read-write [ 384.738644][T12158] bcachefs (loop4): done starting filesystem [ 385.054367][T12158] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 385.054406][T12158] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0, shutting down [ 385.222819][ T5354] bcachefs (loop4): going read-only [ 385.229243][ T5248] bcachefs (loop4): unable to write journal to sufficient devices [ 385.246161][ T5354] bcachefs (loop4): finished waiting for writes to stop [ 385.267123][T12158] bcachefs (loop4): inconsistency detected - emergency read only at journal seq 11 [ 385.305687][T12158] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 385.305724][T12158] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0, shutting down [ 385.428186][T12158] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 385.428212][T12158] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0, shutting down [ 385.460552][ T5354] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11 [ 385.460672][ T5354] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 385.460709][ T5354] bcachefs (loop4): unshutdown complete, journal seq 11 [ 385.465163][ T5354] bcachefs (loop4): done going read-only, filesystem not clean [ 385.701246][T12158] bcachefs (loop4): __bch2_resume_logged_op_truncate(): error erofs_journal_err [ 385.758764][T12158] bcachefs (loop4): bch2_logged_op_finish(): fatal error deleting logged operation u64s 8 type logged_op_truncate 0:1:0 len 0 ver 0: subvol=1 inum=536870913 new_i_size=0: erofs_trans_commit [ 385.974282][T12158] syz.4.2902 (12158) used greatest stack depth: 12496 bytes left [ 386.024918][T11432] bcachefs (loop4): shutting down [ 386.105456][T11432] bcachefs (loop4): shutdown complete [ 386.894334][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.993671][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.030191][ T11] bond0 (unregistering): Released all slaves [ 388.838481][ T11] bond1 (unregistering): Released all slaves [ 389.621357][T12189] loop3: detected capacity change from 0 to 1024 [ 389.740036][T12189] EXT4-fs: Ignoring removed orlov option [ 389.779953][T12189] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 389.878185][T12189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.957675][ T5292] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 390.157873][ T5235] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.174616][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 390.217715][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 390.319094][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 64947, setting to 1024 [ 390.406353][ T5292] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 390.480300][ T5292] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 390.538296][ T5292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.582539][ T5292] usb 1-1: config 0 descriptor?? [ 390.630157][T12187] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 390.659367][ T5292] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 390.741575][ T5292] usb 1-1: MIDIStreaming interface descriptor not found [ 390.982224][ T5292] usb 1-1: USB disconnect, device number 19 [ 392.233024][ T5292] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 392.456477][ T5292] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 392.470085][ T5292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.508788][ T5292] usb 1-1: Product: syz [ 392.527780][ T5292] usb 1-1: Manufacturer: syz [ 392.550118][ T5292] usb 1-1: SerialNumber: syz [ 392.599254][ T5292] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 392.612987][ T5354] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 394.209516][ T5354] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 394.848929][ T5354] ath9k_htc: Failed to initialize the device [ 506.892581][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 506.899574][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10585/1:b..l [ 506.908294][ C1] rcu: (detected by 1, t=10502 jiffies, g=36133, q=396 ncpus=2) [ 506.916029][ C1] task:syz-executor state:R running task stack:20624 pid:10585 tgid:10585 ppid:1 flags:0x00004004 [ 506.929065][ C1] Call Trace: [ 506.932448][ C1] [ 506.935394][ C1] __schedule+0x18af/0x4bd0 [ 506.939946][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.945604][ C1] ? __lock_acquire+0x1384/0x2050 [ 506.950680][ C1] ? __pfx___schedule+0x10/0x10 [ 506.955577][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.961241][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.966902][ C1] ? preempt_schedule+0xe1/0xf0 [ 506.971786][ C1] preempt_schedule_common+0x84/0xd0 [ 506.977110][ C1] preempt_schedule+0xe1/0xf0 [ 506.981821][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 506.987240][ C1] preempt_schedule_thunk+0x1a/0x30 [ 506.992464][ C1] _raw_spin_unlock+0x3e/0x50 [ 506.997170][ C1] unmap_page_range+0x36b1/0x40e0 [ 507.002256][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 507.007656][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.013326][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.018989][ C1] ? mas_next_slot+0xdc6/0xea0 [ 507.023807][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.029465][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 507.034528][ C1] unmap_vmas+0x3cc/0x5f0 [ 507.038984][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 507.043861][ C1] ? preempt_schedule+0xe1/0xf0 [ 507.048763][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 507.054159][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.059815][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 507.065307][ C1] exit_mmap+0x275/0xc40 [ 507.069581][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.075245][ C1] ? __mutex_lock+0x2ef/0xd70 [ 507.079945][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 507.084746][ C1] ? __pfx_exit_aio+0x10/0x10 [ 507.089468][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.095124][ C1] ? uprobe_clear_state+0x271/0x290 [ 507.100352][ C1] ? mm_update_next_owner+0xa4/0x810 [ 507.105666][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 507.110907][ C1] __mmput+0x115/0x390 [ 507.115060][ C1] exit_mm+0x220/0x310 [ 507.119158][ C1] ? __pfx_exit_mm+0x10/0x10 [ 507.123776][ C1] ? taskstats_exit+0x326/0xa60 [ 507.128664][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.134340][ C1] do_exit+0x9b2/0x28e0 [ 507.138525][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.144190][ C1] ? __pfx_do_exit+0x10/0x10 [ 507.148814][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 507.154226][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.159893][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 507.165928][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 507.172333][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 507.177489][ C1] do_group_exit+0x207/0x2c0 [ 507.182102][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 507.187335][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.192991][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 507.198210][ C1] get_signal+0x16a3/0x1740 [ 507.202757][ C1] ? __pfx_get_signal+0x10/0x10 [ 507.207645][ C1] arch_do_signal_or_restart+0x96/0x860 [ 507.213235][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 507.219514][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 507.225557][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 507.231307][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 507.236884][ C1] do_syscall_64+0x100/0x230 [ 507.241507][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.247448][ C1] RIP: 0033:0x7fd880174257 [ 507.251886][ C1] RSP: 002b:00007ffd0c8fac70 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 507.260335][ C1] RAX: fffffffffffffe00 RBX: 00000000000000a1 RCX: 00007fd880174257 [ 507.268332][ C1] RDX: 0000000040000000 RSI: 00007ffd0c8faccc RDI: 00000000ffffffff [ 507.276337][ C1] RBP: 00007ffd0c8faccc R08: 0000000000000000 R09: 7fffffffffffffff [ 507.284343][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555661375eb [ 507.292342][ C1] R13: 0000555566137590 R14: 00000000000595f6 R15: 00007ffd0c8fad20 [ 507.300359][ C1] [ 507.303398][ C1] rcu: rcu_preempt kthread starved for 10497 jiffies! g36133 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 507.314792][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 507.324788][ C1] rcu: RCU grace-period kthread stack dump: [ 507.330701][ C1] task:rcu_preempt state:R running task stack:24912 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 507.342515][ C1] Call Trace: [ 507.345812][ C1] [ 507.348764][ C1] __schedule+0x18af/0x4bd0 [ 507.353418][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.359094][ C1] ? __pfx___schedule+0x10/0x10 [ 507.364004][ C1] ? __pfx_lock_release+0x10/0x10 [ 507.369080][ C1] ? __asan_memset+0x23/0x50 [ 507.373723][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 507.379573][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 507.385955][ C1] ? schedule+0x90/0x320 [ 507.390246][ C1] schedule+0x14b/0x320 [ 507.394447][ C1] schedule_timeout+0x1be/0x310 [ 507.399426][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 507.404844][ C1] ? __pfx_process_timeout+0x10/0x10 [ 507.410176][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.415852][ C1] ? prepare_to_swait_event+0x330/0x350 [ 507.421461][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 507.426443][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 507.431688][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 507.437889][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 507.443294][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 507.449240][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.454911][ C1] ? finish_swait+0xd4/0x1e0 [ 507.459587][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 507.464330][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 507.469560][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 507.475507][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.481179][ C1] ? __kthread_parkme+0x169/0x1d0 [ 507.486258][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 507.491585][ C1] kthread+0x2f2/0x390 [ 507.495688][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 507.500922][ C1] ? __pfx_kthread+0x10/0x10 [ 507.505550][ C1] ret_from_fork+0x4d/0x80 [ 507.510010][ C1] ? __pfx_kthread+0x10/0x10 [ 507.514632][ C1] ret_from_fork_asm+0x1a/0x30 [ 507.519465][ C1] [ 507.522498][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 507.528830][ C1] Sending NMI from CPU 1 to CPUs 0: [ 507.534055][ C0] NMI backtrace for cpu 0 [ 507.534071][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc4-syzkaller #0 [ 507.534097][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 507.534112][ C0] RIP: 0010:lock_acquire+0x237/0x550 [ 507.534155][ C0] Code: 0f 85 a3 01 00 00 49 89 de 48 c1 eb 03 42 80 3c 2b 00 74 08 4c 89 f7 e8 f7 55 8e 00 48 c7 44 24 60 00 00 00 00 9c 8f 44 24 60 <42> 80 3c 2b 00 74 08 4c 89 f7 e8 ea 54 8e 00 f6 44 24 61 02 0f 85 [ 507.534175][ C0] RSP: 0018:ffffc90000007b00 EFLAGS: 00000046 [ 507.534196][ C0] RAX: 0000000000000001 RBX: 1ffff92000000f6c RCX: 91637018a777e500 [ 507.534214][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0adc20 RDI: ffffffff8c6101e0 [ 507.534233][ C0] RBP: ffffc90000007c48 R08: ffffffff942c980f R09: 1ffffffff2859301 [ 507.534251][ C0] R10: dffffc0000000000 R11: fffffbfff2859302 R12: 1ffff92000000f68 [ 507.534269][ C0] R13: dffffc0000000000 R14: ffffc90000007b60 R15: 0000000000000046 [ 507.534289][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 507.534310][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 507.534326][ C0] CR2: 0000001b31613ff8 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 507.534345][ C0] Call Trace: [ 507.534353][ C0] [ 507.534363][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 507.534395][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 507.534434][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 507.534464][ C0] ? nmi_handle+0x2a/0x5a0 [ 507.534500][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 507.534534][ C0] ? nmi_handle+0x151/0x5a0 [ 507.534559][ C0] ? nmi_handle+0x2a/0x5a0 [ 507.534585][ C0] ? lock_acquire+0x237/0x550 [ 507.534621][ C0] ? default_do_nmi+0x63/0x160 [ 507.534654][ C0] ? exc_nmi+0x123/0x1f0 [ 507.534685][ C0] ? end_repeat_nmi+0xf/0x53 [ 507.534722][ C0] ? lock_acquire+0x237/0x550 [ 507.534760][ C0] ? lock_acquire+0x237/0x550 [ 507.534798][ C0] ? lock_acquire+0x237/0x550 [ 507.534834][ C0] [ 507.534842][ C0] [ 507.534849][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.534881][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 507.534921][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.534951][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 507.534988][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 507.535023][ C0] ? __pfx_lock_release+0x10/0x10 [ 507.535060][ C0] ? timekeeping_get_ns+0x5c/0x420 [ 507.535089][ C0] seqcount_lockdep_reader_access+0xfc/0x220 [ 507.535119][ C0] ? timekeeping_get_ns+0x5c/0x420 [ 507.535147][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 507.535177][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 507.535210][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 507.535245][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.535272][ C0] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 507.535311][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 507.535344][ C0] timekeeping_get_ns+0x5c/0x420 [ 507.535378][ C0] ktime_get_update_offsets_now+0x90/0x250 [ 507.535416][ C0] hrtimer_run_softirq+0xa2/0x2c0 [ 507.535445][ C0] handle_softirqs+0x2c7/0x980 [ 507.535483][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 507.535517][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 507.535552][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.535580][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 507.535605][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 507.535638][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 507.535674][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.535707][ C0] irq_exit_rcu+0x9/0x30 [ 507.535737][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 507.535775][ C0] [ 507.535782][ C0] [ 507.535792][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 507.535816][ C0] RIP: 0010:__schedule+0x16f/0x4bd0 [ 507.535854][ C0] Code: f6 48 8b 1b 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 58 74 30 f6 48 81 3b 9d 6e ac 57 <0f> 85 ee 1e 00 00 83 7c 24 50 00 7f 5e 48 8b 44 24 28 48 8d 58 18 [ 507.535874][ C0] RSP: 0018:ffffc900001578a0 EFLAGS: 00000246 [ 507.535893][ C0] RAX: 1ffff9200002a000 RBX: ffffc90000150000 RCX: dffffc0000000000 [ 507.535912][ C0] RDX: 0000000000000010 RSI: ffffffff8c6101c0 RDI: ffffffff8c610180 [ 507.535929][ C0] RBP: ffffc90000157ab0 R08: ffffc90000157a3f R09: ffffc90000157a30 [ 507.535947][ C0] R10: dffffc0000000000 R11: fffff5200002af48 R12: 1ffff9200002af58 [ 507.535965][ C0] R13: 1ffff9200002af5c R14: ffff8880b8600000 R15: dffffc0000000000 [ 507.535996][ C0] ? irqentry_exit+0x63/0x90 [ 507.536020][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.536051][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 507.536091][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 507.536131][ C0] ? __pfx___schedule+0x10/0x10 [ 507.536168][ C0] ? irqentry_exit+0x63/0x90 [ 507.536189][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.536215][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 507.536238][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.536276][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 507.536300][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 507.536323][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 507.536368][ C0] irqentry_exit+0x5e/0x90 [ 507.536389][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 507.536414][ C0] RIP: 0010:lock_is_held_type+0x13b/0x190 [ 507.536437][ C0] Code: 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 42 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 507.536456][ C0] RSP: 0018:ffffc90000157c38 EFLAGS: 00000206 [ 507.536475][ C0] RAX: 91637018a777e500 RBX: 0000000000000000 RCX: ffff88801cad5a00 [ 507.536493][ C0] RDX: 0000000000000000 RSI: ffffffff8c0adc20 RDI: ffffffff8c6101e0 [ 507.536510][ C0] RBP: ffffc90000157d90 R08: ffffffff901cfeaf R09: 1ffffffff2039fd5 [ 507.536529][ C0] R10: dffffc0000000000 R11: fffffbfff2039fd6 R12: 0000000000000246 [ 507.536546][ C0] R13: ffff88801cad5a00 R14: 00000000ffffffff R15: ffffffff8e937da0 [ 507.536579][ C0] __might_resched+0xf4/0x780 [ 507.536614][ C0] ? irqentry_exit+0x63/0x90 [ 507.536636][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.536664][ C0] ? __pfx___might_resched+0x10/0x10 [ 507.536696][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.536739][ C0] run_ksoftirqd+0xe3/0x130 [ 507.536776][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 507.536813][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.536842][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.536871][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 507.536906][ C0] smpboot_thread_fn+0x546/0xa30 [ 507.536941][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 507.536980][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 507.537015][ C0] kthread+0x2f2/0x390 [ 507.537037][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 507.537072][ C0] ? __pfx_kthread+0x10/0x10 [ 507.537095][ C0] ret_from_fork+0x4d/0x80 [ 507.537131][ C0] ? __pfx_kthread+0x10/0x10 [ 507.537155][ C0] ret_from_fork_asm+0x1a/0x30 [ 507.537200][ C0]