last executing test programs: 1m48.967342553s ago: executing program 0 (id=364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1m48.590728602s ago: executing program 0 (id=367): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x3}}, 0x14) write(r0, 0x0, 0x5c) 1m48.343859455s ago: executing program 0 (id=370): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r0, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) 1m47.147762458s ago: executing program 0 (id=378): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_lower}, {@fat=@sys_immutable}, {@fat=@showexec}, {@shortname_win95}, {@shortname_winnt}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) 1m46.90623291s ago: executing program 0 (id=380): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) creat(&(0x7f0000000e40)='./file1\x00', 0x18) 1m46.414344636s ago: executing program 0 (id=382): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x4) listen(r0, 0x977) 1m45.772384059s ago: executing program 32 (id=382): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x4) listen(r0, 0x977) 36.459064727s ago: executing program 5 (id=868): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 35.181439563s ago: executing program 5 (id=879): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x80000001, 0x0, 0x3}) 33.998276775s ago: executing program 5 (id=888): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 33.655575393s ago: executing program 5 (id=891): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@sys_tz}, {@namecase}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {@keep_last_dots}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x41, 0x152d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 33.253591264s ago: executing program 5 (id=892): r0 = io_uring_setup(0x667, &(0x7f0000000080)={0x0, 0x8dd3, 0x1, 0x3e, 0x235}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 32.261521046s ago: executing program 5 (id=895): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x3c}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 31.585374691s ago: executing program 33 (id=895): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x3c}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 25.380350775s ago: executing program 1 (id=922): syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 24.665094962s ago: executing program 1 (id=926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000020605000000000000000000000000001400078008000640200000000800134000000000050001"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 24.260718623s ago: executing program 1 (id=929): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) fallocate(r1, 0x11, 0x0, 0x8000000) 23.953947969s ago: executing program 1 (id=931): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000f00)='./bus\x00', 0x810000, &(0x7f0000000440)=ANY=[], 0xfd, 0xc3a, &(0x7f0000001c00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x408, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22.425011749s ago: executing program 1 (id=935): unshare(0x4000400) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000800)={[{@filestreams}, {@nouuid}, {@discard}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@usrquota}, {@largeio}]}, 0x1, 0x979e, &(0x7f0000009780)="$eJzs/QWcrWWhuH/Phg1sOgRBVEBKTFJCFOlQRElRQpCWFBABpUMJFRQBFZTu7u6W7u7u7ng/Gzao2wuO5/c/78HDdV0f96xZMWvudX+f+3HWPMNaS8+/+NwDA+MMvNO7p3/vgt3vXn6JMRde/8RdB9+0906LPDbs4pHfORl3zmGncw07nXtgYGDQsPsZ9M5lg+c44cQRBgYPDP3f3xtj1NFGGGNgYLRhZ4fdz8As75yMftC7t3truHigkw39dju+8+/txhx6J0M/WXaFN9YZGBgY8g9fP3Rc0/3LA5W29FwLzP93q/fcRhh29aC/X/f26eB3/o2+38DA6PsMvP/2MfS2I/3D1/5vNvR7jjPFwJJ3fwjf+/9cS8+1wELD+Q9diyMOu2yWoWt8+DVobPjtfKfF13xk2BQOGjZxg/9hvXwY2/3/U0vPNf/CA++/jgcWmW+zh996e785eN6BgcHzDQwMnn9gYPACH7ZH/c/0oW58VVVV9aE019wzDn3OPsJwPw8MeffnWvq58JLXp79/YGDwIu88Txy8wrvPBauqqqqqqqrqP7O55p5xHnj+P84HPf+f7PRtx+35f1VVVVVVVdX/nRaaa+4Zhz7XH+75/0Qf9Pz/6UePPPCdv/2fc5Z3vurND/dBVFVVVVVVVdUHNv9C+Px/sg96/n/ZCZNd2fP/qqqqqqqqqv87LfbWW29t8Q+vszfs4mnevZ6e/5/50J3LfWgDrqqqqqqqqqr/dm8+cdpZf3/N90kGhnu997cb9nuBQcecc/XVH9pA/zMa9K+/D9nywx7T/9eGOg85bLKBgXWW/LCHUh9C/2deq77+/1L+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/ufY7/v/f6/2cet9K77wX/2almvPm0v3/l2+/9P3iRhZ7Y6kMa+ofRR/X4/8AagwYGhvmOs8bAwMAicy22xDQDAwOn3TzjVFMOvHfdrEOvm328Ed9+g/h3/zOR+cblO95y8ndOh24oA+O/dx/HvH3/C72174iDhhvEPzTuSQceuPrSL800/OnU7/84RnjvszFPfPTd/5ZlhOFuNOR9vvjd+3/3sQzvPGzs0wwd+7Qbrr3etBtssumX1lh7xdVWWW2VdWabYebpZ5pttplnnnbVNdZaZbp3Pr7fnE329sd5/p05G2P4OXtirn+cs+Ef2/vN2WQfPGdv3+Nulw75xrtzNvi/OWfzfPCcTbbGsG807pwjDazw9twMGhgYd96RBjYeemb6UQYGxp1v2G0nGnrbr403wsDALn9/oEM/G+W9bXDQlkNvs/T8i8/9zm5qYODvp3/vfd7PfuRhI59z2Olcw07nfufbjDPw901x8BwnnDjC0Ln4p+kYY9TRRhhjYGC0YWeH3c/AbO+cjHb6u7d7n/dZH26gb7/Myo7v/Hu7MQcGBkYf+skkK5653dCp/194n/b/p////xevWQe9tz0OGvZv2G3e8ZprgYX+/r3enoahczfisMtmGWryP/zW9v/Uv4x3siEDk33AeD/gdXHejravtU6bYOv/qdfFofFO9AHj/YDX8X3f8S51/56PvHNX/2PjHW5ft/DbH+f8d/Z1Ax+8rxuR7mCVKz49/L7uW+8/xH/aXb47R6MMd6P329dNtNekWw69/zk/eF+38NCxj/RP+7oRBgbGnefdfd3QHd/8Iw3sMvTMDEPPLDDSwCFDz8z49plRB84ZeubLK6271spDL1jwX7eDaQb90x9owjqbf7h1NugfHvug4f6+c/A7p6Pv9+57OL3PfnPQsIf1X+4raLsd5wPG+wHvP4XzPPSylY8dMsH/1PtP0XiHfPB43+/9st93vDu/eObd/8PjfW+djfQP07Xgv7POJvvndTb0IY74Dyvj3/05bGW4/TufT/TevW20+aPv/Uwx0nD3+1/9TLHgB6+zcdYY7ut22Gdg0AfNzQL/ztx86l/2QVv949z8uz9vTTPFO9eP+AFzM8psy0/97tyM/N+cmwX+u3Mz58CI/zw3gwfmGxgYmHLY/mH+f2duJvrgufl3t5vR4PbvfL7KexfNu9NhF707N8PPxX81N/P/d+dmsve2mynfvm7yEQZGHnlg4xU33HD96d/5+O7ZGd75+MFrcN5/Zy7H+Z+Zy4kHv99c/n1THeP+K/f7L9bgv+zT373/ef+7cznw3lwOrDH8Yqn/1Pr9n7v83eXvLn93+bvL313+4t7n+P97r/+/xziz7zrslxsjXTnphNt/2OP9kPtIH/8f5vtPx/+3n3DSK0cYeO+6Dzw++85t/iOPz87yzsnoB717u+GPD/JA3//47D6zzbLt/9Lx2f+n3l2r/8bv4dr/u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MW9z/H/6d79O4CHpl/02WEHQkd6bJtlFv2wx/sh95E+/j/M95+O/y+6zDaPjTDw3nUfePz/nds4jv/f+9r8O/8nH/9/d612/L/+i/J3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3Hvc/x/znf/DuDII/fc9N2/B7h+3B1P+7DH+yH3UT3+3/v/e2v/7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hc37Pj/wHBvb/ndtgsMjv//3+59/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv/v5Y9Z/JfOH7P4fz9/zOL/g/wxi/8y+WMW/2Xzxyz+y+WPWfyXzx+z+P8wf8ziv0L+mMV/xfwxi/+P8scs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/x/nj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW/5/kj1n8188fs/hvkD9m8d8wf8zi/9P8MYv/RvljFv+f5Y9Z/DfOH7P4b5I/ZvHfNH/M4v/z/DGL/y/yxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zJ/zOL/q/wxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+P86f8zi/5v8MYv/b/PHLP675I9Z/HfNH7P4/y5/zOL/+/wxi/9u+WMW/z/kj1n8d88fs/jvkT9m8d8zf8zi/8f8MYv/n/LHLP5/zh+z+O+VP2bx3zt/zOL/l/wxi/9f88cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvH/W/6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9J/AcN5I9Z/Aflj1n8R8gfs/iPmD9m8R+cP2bxHyl/zOI/cv6YxX+U/DGL/5D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+H8sfs/iPnz9m8Z8gf8zi//H8MYv/hPljFv+J8scs/p/IH7P4T5w/ZvH/ZP6Yxf9T+WMW/0/nj1n8J8kfs/hPmj9m8Z8sf8zi/5n8MYv/5O/6D/mQxvUfmsV/itY/ZvGfMn/M4j9V/pjFf+r8MYv/Z/PHLP7T5I9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bx/3L+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bx/0r+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfy/mj9m8Z89f8zi/7X8MYv/1/PHLP5z5I9Z/L+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjF/5v5Yxb/b+WPWfwXzh+z+H87f8ziv0j+mMX/O/ljFv/v5o9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv/v5Y9Z/JfOH7P4fz9/zOL/g/wxi/8y+WMW/2Xzxyz+y+WPWfyXzx+z+P8wf8ziv0L+mMV/xfwxi/+P8scs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/x/nj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW/5/kj1n8188fs/hvkD9m8d8wf8zi/9P8MYv/RvljFv+f5Y9Z/DfOH7P4b5I/ZvHfNH/M4v/z/DGL/y/yxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zJ/zOL/q/wxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+P86f8zi/5v8MYv/b/PHLP675I9Z/HfNH7P4/y5/zOL/+/wxi/9u+WMW/z/kj1n8d88fs/jvkT9m8d8zf8zi/8f8MYv/n/LHLP5/zh+z+O+VP2bx3zt/zOL/l/wxi/9f88cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4P/2f/B//Vx/Ydm8T+k9Y9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj8m8X+7/P81if+gy/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4PDOc/qK3h7Sz+D7b+MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5D8yXWjxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9J/N/+NP9/zeI/KH/M4j9C/pjFf8T8MYv/4Pwxi/9I+WMW/5Hzxyz+o+SPWfyH5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8f9Y/pjFf/z8MYv/BPljFv+P549Z/CfMH7P4T5Q/ZvH/RP6YxX/i/DGL/yfzxyz+n8ofs/h/On/M4j9J/pjFf9L8MYv/ZPljFv/P5I9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjFf+r8MYv/Z/PHLP7T5I9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bx/3L+mMV/2vwxi/90+WODLth9pIGBgY+8//T5Y5b1P0P+mMV/xvwxi/9M+WMW/6/kj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMX/q/ljFv/Z88cs/l/LH7P4fz1/zOI/R/6Yxf8b+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/L+ZP2bx/1b+mMV/4fwxi/+388cs/ovkj1n8v5M/ZvH/bv6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvH/Xv6YxX/p/DGL//fzxyz+P8gfs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8P88cs/ivkj1n8V8wfs/j/KH/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8f9x/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8f9J/pjFf/38MYv/BvljFv8N88cs/j/NH7P4b5Q/ZvH/Wf6YxX/j/DGL/yb5Yxb/TfPHLP4/zx+z+P8if8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/y/zxyz+v8ofs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/+v88cs/r/JH7P4/zZ/zOK/S/6YxX/X/DGL/+/yxyz+v88fs/jvlj9m8f9D/pjFf/f8MYv/HvljFv8988cs/n/MH7P4/yl/zOL/5/wxi/9e+WMW/73zxyz+f8kfs/j/NX/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/v+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6YxH/Egfwxi/+g/DGL/wj5Yxb/EfPHLP6D88cs/iPlj1n8R84fs/iPkj9m8R+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjF/2P5Yxb/8fPHLP4T5I9Z/D+eP2bxnzB/zOI/Uf6Yxf8T+WMW/4nzxyz+n8wfs/h/Kn/M4v/p/DGL/yT5Yxb/SfPHLP6T5Y9Z/D+TP2bxnzx/zOI/Rf6YxX/K/DGL/1T5Yxb/qfPHLP6fzR+z+E+TP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8ziP1P+mMX/K/ljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8f9q/pjFf/b8MYv/1/LHLP5fzx+z+M+RP2bx/0b+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/b+aPWfy/lT9m8V84f8zi/+38MYv/IvljFv/v5I9Z/L+bP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP5L5Y9Z/L+XP2bxXzp/zOL//fwxi/8P8scs/svkj1n8l80fs/gvlz9m8V8+f8zi/8P8MYv/CvljFv8V88cs/j/KH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n8f5w/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8f5I/ZvFfP3/M4r9B/pjFf8P8MYv/T/PHLP4b5Y9Z/H+WP2bx3zh/zOK/Sf6YxX/T/DGL/8/zxyz+v8gfs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOL/y/wxi/+v8scs/jvkj1n8d8wfs/jvlD9m8d85f8zi/+v8MYv/b/LHLP6/zR+z+O+SP2bx3zV/zOL/u/wxi//v88cs/rvlj1n8/5A/ZvHfPX/M4r9H/pjFf8/8MYv/H/PHLP5/yh+z+P85f8ziv1f+mMV/7/wxi/9f8scs/n/NH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf9v+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxHzyQP2bxH5Q/ZvEfIX/M4j9i/pjFf3D+mMV/pPwxi//I+WMW/1Hyxyz+Q/LHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/h/LH/M4j9+/pjFf4L8MYv/x/PHLP4T5o9Z/CfKH7P4fyJ/zOI/cf6Yxf+T+WMW/0/lj1n8P50/ZvGfJH/M4j9p/pjFf7L8MYv/Z/LHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4j91/pjF/7P5Yxb/afLHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+H85f8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+H8lf8ziP3P+mMV/lvwxi/+s+WMW/9nyxyz+X80fs/jPnj9m8f9a/pjF/+v5Yxb/OfLHLP7fyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/N/DGL/7fyxyz+C+ePWfy/nT9m8V8kf8zi/538MYv/d/PHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/9/LHLP5L549Z/L+fP2bx/0H+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfx/mD9m8V8hf8ziv2L+mMX/R/ljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+P88cs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi/9P8scs/uvnj1n8N8gfs/hvmD9m8f9p/pjFf6P8MYv/z/LHLP4b549Z/DfJH7P4b5o/ZvH/ef6Yxf8X+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/H+ZP2bx/1X+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfx/nT9m8f9N/pjF/7f5Yxb/XfLHLP675o9Z/H+XP2bx/33+mMV/t/wxi/8f8scs/rvnj1n898gfs/jvmT9m8f9j/pjF/0/5Yxb/P+ePWfz3yh+z+O+dP2bx/0v+mMX/r/ljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4/y1/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHJP4jDeSPWfwH5Y9Z/EfIH7P4j5g/ZvEfnD9m8R8pf8ziP3L+mMV/lPwxi/+Q/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/h/LH7P4j58/ZvGfIH/M4v/x/DGL/4T5Yxb/ifLHLP6fyB+z+E+cP2bx/2T+mMX/U/ljFv9P549Z/CfJH7P4T5o/ZvGfLH/M4v+Z/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4T50/ZvH/bP6YxX+a/DGL/+fyxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+X84fs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/5nyxyz+X8kfs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi/9X88cs/rPnj1n8v5Y/ZvH/ev6YxX+O/DGL/zfyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fzN/zOL/rfwxi//C+WMW/2/nj1n8F8kfs/h/J3/M4v/d/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4v+9/DGL/9L5Yxb/7+ePWfx/kD9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/x/mj1n8V8gfs/ivmD9m8f9R/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8zi/+P8MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8zi/5P8MYv/+vljFv8N8scs/hvmj1n8f5o/ZvHfKH/M4v+z/DGL/8b5Yxb/TfLHLP6b5o9Z/H+eP2bx/0X+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/X+aPWfx/lT9m8d8hf8ziv2P+2Efcf8iwT0faKX/sI+7/biPtnD9m8f91/pjF/zf5Yxb/3+aPWfx3yR+z+O+aP2bx/13+mMX/9/ljFv/d8scs/n/IH7P4754/ZvHfI3/M4r9n/pjF/4/5Yxb/P+WPWfz/nD9m8d8rf8ziv3f+mMX/L/ljFv+/5o9Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOL/t/wxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+T+I88kD9m8R+UP2bxHyF/zOI/Yv6YxX9w/pjFf6T8MYv/yPljFv9R8scs/kPyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4fyx/zOI/fv6YxX+C/DGL/8fzxyz+E+aPWfwnyh+z+H8if8ziP3H+mMX/k/ljFv9P5Y9Z/D+dP2bxnyR/zOI/af6YxX+y/DGL/2fyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOI/df6Yxf+z+WMW/2nyxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/h/JX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/l/NH7P4z54/ZvH/Wv6Yxf/r+WMW/znyxyz+38gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL/zfwxi/+38scs/gvnj1n8v50/ZvFfJH/M4v+d/DGL/3fzxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOK/ZP6YxX+p/DGL//fyxyz+S+ePWfy/nz9m8f9B/pjFf5n8sY+o/6DhrEdeNn/sI+r/dv+4/pfLH7P4L58/ZvH/Yf6YxX+F/DGL/4r5Yxb/H+WPWfxXyh8bdMGgYTPz0fZfOX/Msv5XyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/4/zxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL/0/yxyz+6+ePWfw3yB+z+G+YP2bx/2n+mMV/o/wxi//P8scs/hvnj1n8N8kfs/hvmj9m8f95/pjF/xf5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8f5k/ZvH/Vf6YxX+H/DGL/475Yxb/nfLHLP47549Z/H+dP2bx/03+mMX/t/ljFv9d8scs/rvmj1n8f5c/ZvH/ff6YxX+3/DGL/x/yxyz+u+ePWfz3yB+z+O+ZP2bx/2P+mMX/T/ljFv8/549Z/PfKH7P4750/ZvH/S/6Yxf+v+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/j/LX/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP4Do8JlFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+T+I8ykD9m8R+UP2bxHyF/zOI/Yv6YxX9w/pjFf6T8MYv/yPljFv9R8scs/kPyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5j+sIf90zuI/Xv6Yxf9j+WMW//Hzxyz+E+SPWfw/nj9m8Z8wf8ziP1H+mMX/E/ljFv+J88cs/p/MH7P4fyp/zOL/6fwxi/8k+WMW/0nzxyz+k+WPWfw/kz9m8Z88f8ziP0X+mMV/yvwxi/9U+WMW/6nzxyz+n80fs/hPkz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjF/yv5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvH/av6YxX/2/DGL/9fyxyz+X88fs/jPkT9m8f9G/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/2/mj1n8v5U/ZvFfOH/M4v/t/DGL/yL5Yxb/7+SPWfy/mz9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+S+WPWfy/lz9m8V86f8zi//38MYv/D/LHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v/D/DGL/wr5Yxb/FfPHLP4/yh+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/H+cP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/H+SP2bxXz9/zOK/Qf6YxX/D/DGL/0/zxyz+G+WPWfx/lj9m8d84f8ziv0n+mMV/0/wxi//P88cs/r/IH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvh/5tERb/7dPGLP6/zB+z+P8qf8ziv0P+mMV/x/wxi/9O7/i/8daHNa7/0Cz+O7f+MYv/r/PHLP6/yR+z+P82f8ziv0v+mMV/1/wxi//v8scs/r/PH7P475Y/ZvH/Q/6YxX/3/DGL/x75Yxb/PfPHLP5/zB+z+P8pf8zi/+f8MYv/XvljFv+988cs/n/JH7P4/zV/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/7/lj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMR/yED+mMV/UP6YxX+E/DGL/4j5Yxb/wfljFv+R8scs/iPnj1n8R8kfs/gPyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4v+x/DGL//j5Yxb/CfLHLP4fzx+z+E+YP2bxnyh/zOL/ifwxi//E+WMW/0/mj1n8P5U/ZvH/dP6YxX+S/DGL/6T5Yxb/yfLHLP6fyR+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/9T5Yxb/z+aPWfynyR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8Z8pf8zi/5X8MYv/zPljFv9Z8scs/rPmj1n8Z8sfs/h/NX/M4j97/pjF/2v5Yxb/r+ePWfznyB+z+H8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/zfzxyz+38ofs/gvnD9m8f92/pjFf5H8MYv/d/LHLP7fzR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP7fyx+z+C+dP2bx/37+mMX/B/ljFv9l8scs/svmj1n8l8sfs/gvnz9m8f9h/pjFf4X8MYv/ivljFv8f5Y9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/j/OH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/j/JH7P4r58/ZvHfIH/M4r9h/pjF/6f5Yxb/jfLHLP4/yx+z+G+cP2bx3yR/zOK/af6Yxf/n+WMW/1/kj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/2X+mMX/V/ljFv8d8scs/jvmj1n8d8ofs/jvnD9m8f91/pjF/zf5Yxb/3+aPWfx3yR+z+O+aP2bx/13+mMX/9/ljFv/d8scs/n/IH7P4754/ZvHfI3/M4r9n/pjF/4/5Yxb/P+WPWfz/nD9m8d8rf8ziv3f+mMX/L/ljFv+/5o9Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Oc/oP/qxtY/I92+v+XWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOL/t/wxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHDP6DBg8MeTJ/zOA/dP0/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/JvEfdSB/zOI/KH/M4j9C/pjFf8T8MYv/4Pwxi/9I+WMW/5Hzxyz+o+SPWfyH5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8f9Y/pjFf/z8MYv/BPljFv+P549Z/CfMH7P4T5Q/ZvH/RP6YxX/i/DGL/yfzxyz+n8ofs/h/On/M4j9J/pjFf9L8MYv/ZPljFv/P5I9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjFf+r8MYv/Z/PHLP7T5I999PwHD5D/5/LHPnr+vP4/nz9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8Z82f8ziP93AwBYf1pD+k7P4T9/6xyz+M+SPWfxnzB+z+M+UP2bx/0r+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfy/mj9m8Z89f8zi/7X8MYv/1/PHLP5z5I9Z/L+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjF/5v5Yxb/b+WPWfwXzh+z+H87f8ziv0j+mMX/O/ljFv/v5o9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv/v5Y9Z/JfOH7P4fz9/zOL/g/wxi/8y+WMW/2Xzxyz+y+WPWfyXzx+z+P8wf8ziv0L+mMV/xfwxi/+P8scs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/x/nj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW/5/kj1n8188fs/hvkD9m8d8wf8zi/9P8MYv/RvljFv+f5Y9Z/DfOH7P4b5I/ZvHfNH/M4v/z/DGL/y/yxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zJ/zOL/q/wxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+P86f8zi/5v8MYv/b/PHLP675I9Z/HfNH7P4/y5/zOL/+/wxi/9u+WMW/z/kj1n8d88fs/jvkT9m8d8zf8zi/8f8MYv/n/LHLP5/zh+z+O+VP2bx3zt/zOL/l/wxi/9f88cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvH/W/6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9J/EcbyB+z+A/KH7P4j5A/ZvEfMX/M4j84f8ziP1L+mMV/5Pwxi/8o+WMW/yH5Yxb/UfPHLP6j5Y9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8P5Y/ZvEfP3/M4j9B/pjF/+P5Yxb/CfPHLP4T5Y9Z/D+RP2bxnzh/zOL/yfwxi/+n8scs/p/OH7P4T5I/ZvGfNH/M4j9Z/pjF/zP5Yxb/yfPHLP5T5I9Z/KfMH7P4T5U/ZvGfOn/M4v/Z/DGL/zT5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfy/kj9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/6/mj1n8Z88fs/h/LX/M4v/1/DGL/xz5Yxb/b+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvH/Zv6Yxf9b+WMW/4Xzxyz+384fs/gvkj9m8f9O/pjF/7v5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjF/3v5Yxb/pfPHLP7fzx+z+P8gf8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+P8wfs/ivkD9m8V8xf8zi/6P8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMX/x/ljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMX/J/ljFv/188cs/hvkj1n8N8wfs/j/NH/M4r9R/pjF/2f5Yxb/jfPHLP6b5I9Z/DfNH7P4/zx/zOL/i/wxi/9m+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP6/zB+z+P8qf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+v84fs/j/Jn/M4v/b/DGL/y75Yxb/XfPHLP6/yx+z+P8+f8ziv1v+mMX/D/ljFv/d88cs/nvkj1n898wfs/j/MX/M4v+n/DGL/5/zxyz+e+WPWfz3zh+z+P8lf8zi/9f8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/P+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5YxL/0Qfyxyz+g7z+b7311lvve6XFfwSv/wdm8R8xf8ziPzh/zOI/Uv6YxX/k/DGL/yj5Yxb/IfljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfw/lj9m8R8/f8ziP0H+mMX/4/ljFv8J88cs/hPlj1n8P5E/ZvGfOH/M4v/J/DGL/6fyxyz+n84fs/hPkj/m8B9x9Enzxxz+A6NPlj9m8f9M/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/h/Nn/M4j9N/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/r+SPWfxnzh+z+M+SP2bxnzV/zOI/W/6Yxf+r+WMW/9nzxyz+X8sfs/h/PX/M4j9H/pjF/xv5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8v5k/ZvH/Vv6YxX/h/DGL/7fzxyz+i+SPWfy/kz9m8f9u/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8f9e/pjFf+n8MYv/9/PHLP4/yB+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/w/zxyz+K+SPWfxXzB+z+P8of8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bx/3H+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bx/0n+mMV//fwxi/8G+WMW/w3zxyz+P80fs/hvlD9m8f9Z/pjFf+P8MYv/JvljFv9N88cs/j/PH7P4/yJ/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/L/PHLP6/yh+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/6/zxyz+v8kfs/j/Nn/M4r9L/pjFf9f8MYv/7/LHLP6/zx+z+O+WP2bx/0P+mMV/9/wxi/8e+WMW/z3zxyz+f8wfs/j/KX/M4v/n/DGL/175Yxb/vfPHLP5/yR+z+P81f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzx971HxgyMPBR9j8jf8yy/s/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/7/lj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMO/+TfL4f/wOiPtRVgFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/JvEfYyB/zOI/KH/M4j9C/pjFf8T8MYv/4Pwxi/9I+WMW/5Hzxyz+o+SPWfyH5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8f9Y/pjFf/z8MYv/BPljFv+P549Z/CfMH7P4T5Q/ZvH/RP6YxX/i/DGL/yfzxyz+n8ofs/h/On/M4j9J/pjFf9L8MYv/ZPljFv/P5I9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjFf+r8MYv/Z/PHLP7T5I9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bx/3L+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bx/0r+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfy/mj9m8Z89f8zi/7X8MYv/1/PHLP5z5I9Z/L+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjF/5v5Yxb/b+WPWfwXzh+z+H87f8ziv0j+mMX/O/ljFv/v5o9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv/v5Y9Z/JfOH7P4fz9/zOL/g/wxi/8y+WMW/2Xzxyz+y+WPWfyXzx+z+P8wf8ziv0L+mMV/xfwxi/+P8scs/ivlj1n8Vzb6/xsP2OK/itH/38jiv2r+mMV/tfwxi//q+WMW/zXyxyz+P84fs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+P8kfs/ivnz9m8d8gf8ziv2H+mMX/p/ljFv+N8scs/j/LH7P4b5w/ZvHfJH/M4r9p/pjF/+f5Yxb/X+SPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o+95z9kYGDgI+y/Xf6YZf1vnz9m8f9l/pjF/1f5Yxb/HfLHLP475o9Z/HfKH7P475w/ZvH/df6Yxf83+WMW/9/mj1n8d8kfs/jvmj9m8f9d/pjF//f5Yxb/3fLHLP5/yB+z+O+eP2bx3yN/zOK/Z/6Yxf+P+WMW/z/lj1n8/5w/ZvHfK3/M4r93/pjF/y/5Yxb/v+aPWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zi/7f8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofk/iPOZA/ZvEflD9m8R8hf8ziP2L+mMV/cP6YxX+k/DGL/8j5Yxb/UfLHLP5D8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+H8sf8ziP37+mMV/gvwxi//H88cs/hPmj1n8J8ofs/h/In/M4j9x/pjF/5P5Yxb/T+WPWfw/nT9m8Z8kf8ziP2n+mMV/svwxi/9n8scs/pPnj1n8p8gfs/hPmT9m8Z8qf8ziP3X+mMX/s/ljFv9p8scs/p/LH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4fyV/zOI/c/6YxX+W/DGL/6z5Y//kP+yycT7kMf1/6n38Z8sfs6z/r+aPWfxnzx+z+H8tf8zi//X8MYv/HPljFv9v5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8f9m/pjF/1v5Yxb/hfPHLP7fzh+z+C+SP2bx/07+mMX/u/ljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8ziv1T+mMX/e/ljFv+l88cs/t/PH7P4/yB/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4/zB+z+K+QP2bxXzF/zOL/o/wxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6Yxf/H+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6Yxf8n+WMW//Xzxyz+G+SPWfw3zB+z+P80f8ziv1H+mMX/Z/ljFv+N88cs/pvkj1n8N80fs/j/PH/M4v+L/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/r/MH7P4/yp/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP6/zh+z+P8mf8zi/9v8MYv/LvljFv9d88c+qv5DhvP/Xf7YR9V/YDj/3+ePWfx3yx+z+P8hf8ziv3v+mMV/j/wxi/+e+WMW/z/mj1n8/5Q/ZvH/c/6YxX+v/DGL/975Yxb/v+SPWfz/mj9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/3/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/aHj/Lf+Xx/UfmsX/4dY/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH5P4jzWQP2bxH5Q/ZvEfIX/M4j9i/pjFf3D+mMV/pPwxi//I+WMW/1Hyxyz+Q/LHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/h/LH/M4j9+/pjFf4L8MYv/x/PHLP4T5o9Z/CfKH7P4fyJ/zOI/cf6Yxf+T+WMW/0/lj1n8P50/ZvGfJH/M4j9p/pjFf7L8MYv/Z/LHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4j91/pjF/7P5Yxb/afLHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+H85f8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+H8lf8ziP3P+mMV/lvwxi/+s+WMW/9nyxyz+X80fs/jPnj9m8f9a/pjF/+v5Yxb/OfLHLP7fyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/N/DGL/7fyxyz+C+ePWfy/nT9m8V8kf8zi/538MYv/d/PHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/9/LHLP5L549Z/L+fP2bx/0H+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfx/mD9m8V8hf8ziv2L+mMX/R/ljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+P88cs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi/9P8scs/uvnj1n8N8gfs/hvmD9m8f9p/pjFf6P8MYv/z/LHLP4b549Z/DfJH7P4b5o/ZvH/ef6Yxf8X+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/H+ZP2bx/1X+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfx/nT9m8f9N/pjF/7f5Yxb/XfLHLP675o9Z/H+XP2bx/33+mMV/t/wxi/8f8scs/rvnj1n898gfs/jvmT9m8f9j/pjF/0/5Yxb/P+ePWfz3yh+z+O+dP2bx/0v+mMX/r/ljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4/y1/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHJP5jD+SPWfwH5Y9Z/EfIH7P4j5g/ZvEfnD9m8R8pf8ziP3L+mMV/lPwxi/+Q/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/h/LH7P4j58/ZvGfIH/M4v/x/DGL/4T5Yxb/ifLHLP6fyB+z+E+cP2bx/+T/j537D9e6ru84fvObLGefdl3qNW04NObajERGoxaionj8ccpEM3+jHoEEkR8SYApstFLHpkvdLNjEwjFnq5Y43Fy/VjRMa7ZGbK1yimthjDlYZM7YdeAcgrO359r5su/Xjffj8Qfn3Pfxfac8r5f37cV1pX8oS/8j9Q9l6f9a/UNZ+v+s/qEs/YfpH8rS/yj9Q1n6/5z+oSz9h+sfytL/aP1DWfofo38oS//X6R/K0n+E/qEs/X9e/1CW/sfqH8rS/xf0D2Xp/3r9Q1n6/6L+oSz9f0n/UJb+x+kfytL/DfqHsvQfqX8oS/836h/K0v94/UNZ+o/SP5Sl/wn6h7L0H61/KEv/X9Y/lKX/GP1DWfq/Sf9Qlv6/on8oS/+x+oey9H+z/qEs/d+ifyhL/1/VP5Sl/1v1D2XpP07/UJb+J+ofytJ/vP6hLP1P0j+Upf/J+oey9D9F/1CW/hP0D2Xpf6r+oSz9T9M/lKX/RP1DWfqfrn8oS/82/UNZ+p+hfyhL/zP1D2Xpf5b+oSz9z9Y/lKV/u/6hLP3fpn8oS/+36x/K0v8c/UNZ+r9D/1CW/ufqH8rSf5L+oSz9z9M/lKX/+fqHsvR/p/6hLP0v0D+Upf+79A9l6X+h/qEs/S/SP5Sl/8X6h7L0v0T/UJb+l+ofytL/Mv1DWfpfrn8oS//J+oey9L9C/1CW/lfqH8rS/yr9Q1n6d+gfytL/av1DWfpP0T+Upf9U/UNZ+k/TP5Sl/7v1D2Xpf43+oSz9p+sfytJ/hv6hLP2v1T+Upf9M/UNZ+l+nfyhL/1n6h7L0n61/KEv/OfqHsvSfq38oS//r9Q9l6T9P/1CW/u/RP5Sl/3z9Q1n6L9A/lKX/Qv1DWfrfoH8oS//36h/K0v9G/UNZ+t+kfyhL/0X6h7L0X6x/KEv/JfqHsvT/Nf1DWfr/uv6hLP2X6h/K0v99+oey9P8N/UNZ+r9f/1CW/h/QP5Sl/836h7L0v0X/UJb+t+ofytL/N/UPZem/TP9Qlv6/pX8oS//f1j+Upf9t+oey9L9d/1CW/r+jfyhL/w/qH8rS/w79Q1n636l/KEv/u/QPZen/u/qHsvT/Pf1DWfrfrX8oS/8P6R/K0v/D+oey9F+ufyhL/xX6h7L0/339Q1n6/4H+oSz979E/lKX/Sv1DWfrfq38oS/+P6B/K0v+j+oey9F+lfyhL//v0D2Xp/4f6h7L0X61/KEv/P9I/lKX//fqHsvT/Y/1DWfo/oH8oS/+P6R/K0v9P9A9l6f9x/UNZ+n9C/1CW/p/UP5Sl/5/qH8rS/1P6h7L0f1D/UJb+a/QPZen/kP6hLP3/TP9Qlv5r9Q9l6f+w/qEs/f9c/1CW/n+hfyhL/0f0D2Xp/5f6h7L0/7T+oSz9P6N/KEv/z+ofytL/c/qHsvT/vP6hLP3/Sv9Qlv5f0D+Upf8X9Q9l6b9O/1CW/l/SP5Sl/1/rH8rSf73+oSz9H9U/lKX/l/UPZen/mP6hLP0f1z+Upf9X9A9l6f9V/UNZ+v+N/qEs/Z/QP5Sl/9f0D2Xp/7f6h7L0/7r+oSz9/07/UJb+G/QPZen/Df1DWfpv1D+Upf/f6x/K0v8f9A9l6f9N/UNZ+v+j/qEs/b+lfyhL/2/rH8rS/zv6h7L0f1L/UJb+/6R/KEv/p/QPZen/tP6hLP036R/K0v8Z/UNZ+v+z/qEs/b+rfyhL/3/RP5Sl//f0D2Xpv1n/UJb+z+ofytL/+/qHsvTfon8oS/9/1T+Upf9W/UNZ+v+b/qEs/Z/TP5Sl/7/rH8rSf5v+oSz9t+sfytL/P/QPZen/A/1DWfrv0D+Upf8P9Q9l6f+8/qEDr/9jYf8f6R868PrH+39B/1CW/v+pfyhL/xf1D2Xp/2P9Q1n679Q/lKT/q1v6h7L076d/KEv//vqHsvQfoH8oS/+B+oey9B+kfyhL/8H6h7L0H6J/KEv/ofqHsvR/hf6hLP0P0j+Upf8r9Q9l6f8q/UNZ+h+sfyhL/5/SP5Sl/yH6hw64/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/XzFmw8JrJ06d3zPaNb3zjmz3fvNz/ZgIAAP63/eRD/8v9dwIAAAAAAAAAAAAAAAAAAAB5NfF/J/Zy/zMCAAAAAAAAAAAAAMD/d23tJ20Z0G+fpwbs/eC1j3fs+jp6xwVTV616qHR/7frxmcFL9t/7wc6dO3eueG7chK6HQ1qtVuf/2qu7Hg/tedz5+ouHLT9896My/gt3PXnppIPPmr3m9oHfWHFr+7ODdj07qHX51dOmd7yxf6tVThnUmt/54Ph+rVY5bVDrts4HozofTBzUWt354IRdD17R+mzngzdcOXP6VZ1PnF759wwOFG3ti1sD9llsa59/G+y9/8XDnpra/bWXl+x+tYGtrv0PX/Plw3r8rNtL7L/79ctJPfff539A4CX1bf/Pb+z+2stL/rf3/4+s37Ew+tlL77/79cvJ9g/1CT7/77PRnp/7e3z+Pyp4yT33Jw5df0fn/tvOu//IrqcG/k8+///k9cspPffff5/P/52f4yd0f/4f0mqVU/fztwNSaWtfsqW39//e9z/wZ3rc9Nt7//d+ZdOrOvd/3wutpV1PDerj/if09v5/c4+/V6Bv2tpX7uzx/t+H/bdGBC+5Z/+b1xy86/P/pgeuPHSvn/Vl/6f23P/IuTOuGzlnwcLjps2YPKVjSse1Y0eNOX702LFjxozc9Ylg96/7+ZsCSezf+3/roB43/Vqtjj336+6/dULn/rc+vPSjXU8N7eP+T+v1/f8o7/8QGt6/NXhwa/7kuXNnH7/71+6Ho3b/uvsvC/bfh//+P/rYrr+s+88M+7Vah++5H3Hp2CGd+79hVlnb9dTgPu5/Yq/7H7/vn1UCfbOf7/9X9bjZZ/8nbr5pXuf+j/nBazZ1PdXX//4/vdf93+P9H/ZHW3ur1jfRzv2fMGTJGdWuS5s//4P6NLH/Ydtu217tupxh/1CfJvY/adlbrqh2Xc60f6hPE/t/aMZly6pdl7PsH+rTxP5f/OntR1S7LmfbP9Snif0/8d1nVlW7Lu32D/VpYv8furv9hGrX5W32D/VpYv/HXf/DcdWuy9vtH+rTxP6vfuW5q6tdl3PsH+rTxP7P2HnyodWuyzvsH+rTxP77Lfne4mrX5Vz7h/o0sf+nJy+bWe26TLJ/qE8T+189bMTz1a7LefYP9Wli/0uffdPEatflfPuH+jSx/6/eufyJatflnfYP9Wli/5+8+DXLq12XC+wf6tPE/n80/OGDql2Xd9k/1KeJ/W/YsPrBatflQvuH+jSx/xWrBwyvdl0usn+oTxP7X3T6lMerXZeL7R/q08T+R4957KJq1+US+4f6NLH/wz//rWeqXZdL7R/q08T+z31k3pxq1+Uy+4f6NLH/eUd84sfVrsvl9g/1aWL/b+04Ymq16zLZ/qE+Tey/3H7QhmrX5Qr7h/o0sf8Lt64cX+26XGn/UJ8m9r/2kC9+vNp1ucr+oT5N7H/brGvHVrsuHfYP9Wli/99536L3V7suV9s/1KeJ/d/xwtdLtesyxf6hPk3sf/OoCy+udl2m2j/Up4n9rzzruUf7djWw62uZZv9Qnyb2v2ztk3OrXZd32z/Up4n9r1t35lPVrss19g/1aWL/x4wYeXC16zLd/qE+Tex/5gVLP1ztusywf6hPE/s/5YE7X1ftulxr/1CfJvY/9GvjPlXtusy0f6hPE/v/zLgPfLradbnO/qE+Tex/+/ijj612XWbZP9Snif1vfHDUXdWuy2z7h/o0sf8PPnp3xesyx/6hPk3sf9brX9xa7brMtX+oTxP7f/Ok8xdUuy7X2z/Up4n9H3rPxC9Vuy7z7B/q08T+L/n298+pdl3eY/9Qnyb2f/RhVxxZ7brMt3+oTxP7nzpt/S3VrssC+4f6NLH/CSs2jq52XRbaP9Snif0f8vSce6tdlxvsH+rTxP63DDjs7GrX5b32D/VpYv/33fjIN6tdlxvtH+rTxP5vufljHdWuy032D/VpYv+f2zF4W7Xrssj+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6LHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5WwfRuwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwFAAA///Ccuj/") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fstat(r0, &(0x7f0000000080)) 18.321621544s ago: executing program 1 (id=954): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1a031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 17.81354257s ago: executing program 34 (id=954): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1a031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 3.81669758s ago: executing program 3 (id=1035): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 3.606434301s ago: executing program 3 (id=1037): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0x6}, {&(0x7f0000000140)="406f2bef596a8a3130012ee7bf1c92e0c8e21b745443ef02bceeab6887655164a1a59b46361a227676524c9b4ea5812335f4739f47eb790fd363fc30071f0c884022467b7b96ae7ca07906ec18b0e2ae9661eb696d3b3b965629", 0x5a}, {&(0x7f0000000000)="7f5549", 0x3}], 0x4}, 0x0) 3.421970701s ago: executing program 3 (id=1039): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800004, &(0x7f0000000640)={[{@debug}, {@delalloc}, {@grpjquota}, {@test_dummy_encryption}, {@i_version}, {@oldalloc}, {@data_err_abort}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 3.06029192s ago: executing program 3 (id=1041): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x36cb, &(0x7f00000001c0)={0x0, 0x1aca, 0x200, 0x0, 0x78}, 0x0, 0x0, &(0x7f0000000000)) 2.601214044s ago: executing program 4 (id=1042): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 2.533660628s ago: executing program 2 (id=1043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="050034006e000000080026008a09000008009f0006"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 2.376728796s ago: executing program 4 (id=1044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r1, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) syz_genetlink_get_family_id$smc(&(0x7f0000000340), r0) 2.353527757s ago: executing program 3 (id=1045): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) lseek(r2, 0xc, 0x0) 2.237313753s ago: executing program 2 (id=1046): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x6, 0x0, 0x2000000, 0x1, 0x2000000, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x5, 0x0, 0x8001, 0x0, 0xfffffff7, 0x1ff, 0x0, 0xfffffffc, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0xfb8d, 0x7b2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0xffffd, 0x1000, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x6, 0x0, 0x0, 0x2, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x3, 0x0, 0x8, 0x1, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0xe9, 0x3, 0xfffffffe, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xff, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x648, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x2, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8000}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) 2.209720794s ago: executing program 6 (id=896): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac4200083f0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.991886816s ago: executing program 3 (id=1047): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d0102030109021a0001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 1.959540408s ago: executing program 4 (id=1048): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000140)=0x61, 0x4) sendto$inet(r0, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) recvmmsg(r0, &(0x7f000000e280), 0x58a, 0x42, 0x0) 1.800151065s ago: executing program 6 (id=1049): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2d, 0x1000000, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_MPU={0x8, 0xe, 0x53}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}]}}, @qdisc_kind_options=@q_red={{0x8}, {0x10}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff8}]}, 0xaa}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 1.750955719s ago: executing program 2 (id=1050): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x4, 0x4, 0x6, 0x0, 0x1, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.546888739s ago: executing program 4 (id=1051): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtaction={0x1058, 0x30, 0x200, 0xf0bd29, 0x25dfdbfb, {}, [{0x1044, 0x1, [@m_police={0x1040, 0x1d, 0x0, 0x0, {{0xb}, {0x1014, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x10000, 0xc3ca, 0x7fffffff, 0x9, 0x2, 0x9, 0x1, 0x4, 0xffffffff, 0x8, 0x8, 0x1, 0x2cdd, 0x9, 0x7fffffff, 0x2, 0xe6, 0x3, 0xd, 0x10000, 0x6, 0xfffffe00, 0x1, 0x4, 0x6, 0xffffffff, 0x9, 0x3bd9, 0x2, 0x9, 0x4693207a, 0xe, 0x0, 0x9, 0x7, 0x7, 0x0, 0x8, 0x9, 0x7, 0x7, 0x200, 0x3, 0x6, 0x2, 0x0, 0x0, 0x40, 0x2, 0x84000000, 0x7, 0xdf, 0x0, 0x0, 0x0, 0x2, 0x2, 0x800, 0x7, 0x10001, 0x7, 0x1ff, 0x1ff, 0x2, 0x80, 0x6, 0xae, 0xa, 0x7, 0x8, 0x3ff, 0x4, 0x5, 0x7af, 0x6071, 0x101, 0x5, 0x2bb45a3b, 0x6, 0x401, 0x5, 0x7, 0x5a0, 0x7ff, 0x5, 0x5, 0x1, 0x9, 0x800, 0x9, 0x9, 0x8001, 0xfffffffe, 0x349, 0x6, 0x6, 0x8, 0x7, 0xffffffff, 0x4, 0x5c000000, 0x36, 0xffff1ef0, 0x5, 0x24d, 0x93e, 0x9, 0x5, 0xb, 0x200, 0x3, 0xac9, 0xffffffff, 0xd060000, 0x0, 0x1, 0x0, 0x4, 0x101, 0x400, 0xffffffff, 0x8, 0x3, 0x3, 0x1ff, 0x6, 0xfa42, 0x9, 0x2, 0x8, 0x3, 0x2, 0x5, 0x9, 0xfffffff5, 0x5, 0x0, 0x3e276cf, 0x9, 0x7, 0x4, 0xf14, 0x8, 0x7, 0x8, 0x3, 0xff, 0x2, 0x7, 0x2, 0x8, 0xa, 0x2c, 0x6b54c840, 0xfff, 0xfffff980, 0xa, 0x451, 0xa734, 0x1, 0x62, 0x9b, 0x4, 0x1000, 0x0, 0x192e, 0x4, 0xa, 0x10000, 0x3, 0x0, 0x7, 0x4, 0x47d, 0x4f8, 0xc2, 0x7, 0x6, 0xc, 0x401, 0x8000, 0x2, 0x6, 0xf, 0x5, 0x6, 0x6, 0x101, 0x8, 0x9, 0xc8b1, 0x85, 0x8, 0x9, 0x3, 0x1ff, 0x7, 0x0, 0x1000000, 0x1, 0x4, 0x1, 0x400, 0x10001, 0x5, 0x8, 0x2, 0x5, 0x6, 0xffff, 0xff, 0x6, 0x5, 0x8, 0x2, 0x2, 0x5, 0xfffffffc, 0x3, 0x0, 0x0, 0x200, 0xde, 0x7ff, 0x4909, 0x4, 0x0, 0x8, 0x5, 0x6, 0x7, 0x6, 0x80000001, 0x8, 0x7f, 0xa, 0x4, 0x7, 0x0, 0x9, 0x7, 0x52b5, 0x5, 0x80000001, 0x835, 0xfffffffe, 0x1, 0x0, 0xf75c, 0x9, 0x9, 0x7fff, 0x100, 0x4, 0x9]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff, 0x3, 0x6, 0x4, 0x3ff8000, 0x0, 0xb, 0x5, 0x7, 0x0, 0x9, 0x6, 0x2, 0x1ff, 0x8, 0x6, 0xfffffffc, 0x4, 0x80000000, 0x1, 0x6, 0x5, 0x8, 0x1, 0x5, 0x5, 0x800, 0x3, 0x80, 0x1, 0x10001, 0xffffff7f, 0x9, 0x9, 0x6034, 0x200000, 0x4, 0xf, 0x0, 0x4, 0x3, 0xe2b1, 0xffffffff, 0x0, 0x401, 0xfff, 0x9, 0xb1b8, 0x3, 0x8000, 0xf6, 0xffffffff, 0x2, 0x6, 0xbc, 0xfffffff8, 0x1, 0x6, 0xd81e, 0x8f9, 0xf5, 0x5, 0x800, 0xb4, 0x6, 0x71, 0xffff, 0x4, 0xa, 0x8, 0x5, 0x5, 0x7fffffff, 0x800, 0x2a10, 0x0, 0x3ff, 0x96bc, 0x7fff, 0x2, 0x7131, 0x80000001, 0x401, 0x80000001, 0x1, 0x7, 0x3, 0x2, 0x6, 0x8, 0x7, 0xfc7, 0xb, 0x97ad, 0x1, 0xf9a3, 0x4, 0x1, 0x2, 0x6, 0x6, 0xfffffb29, 0x1, 0x6, 0x5, 0x2, 0x7, 0x82c, 0x3, 0xfffff767, 0x8000, 0x10000, 0x4, 0x6, 0x9, 0xa0000000, 0xffff, 0x86f, 0x4, 0x3, 0x4ef, 0x3, 0x10000, 0x1, 0x5, 0xf, 0x7, 0x200, 0xffffff80, 0x6, 0xfffffffe, 0x8, 0x7, 0x7, 0x4, 0x7fff, 0x9, 0xb, 0x9, 0x6, 0x6, 0xc49, 0x7, 0x2, 0x5, 0xfffffffc, 0x3, 0x5, 0x99f, 0x24d, 0x2, 0x9, 0x727e, 0x414, 0x8, 0x2, 0x7, 0x4, 0x6, 0xffffffff, 0x5, 0x1d9d6799, 0xed90, 0x344, 0xfffff000, 0x44aa, 0x9, 0x5, 0x9, 0x3, 0x7, 0x4, 0x6, 0xffff, 0x7ff, 0x9f000000, 0xffffffff, 0x4, 0x4, 0x6, 0x30000, 0x0, 0x9, 0x0, 0x8b5, 0x6, 0xfffffffa, 0x7fffffff, 0xfffffff7, 0x4, 0x764, 0x81, 0x3c3, 0x9, 0x8, 0x84, 0x5, 0x1, 0x77c7, 0xc33, 0x80000000, 0x8, 0x0, 0x0, 0x0, 0x9, 0x82, 0xd, 0x0, 0x8, 0x6, 0xc, 0x3, 0x6, 0x9, 0xa9, 0x4, 0x1, 0x1ff, 0x3973, 0x4, 0x7, 0x33ee, 0xffff, 0x5b962d4e, 0x1, 0x15a0, 0x24, 0x1, 0xfffffffc, 0x4f, 0x4, 0x20000003, 0xa, 0x7, 0x9, 0x7fffffff, 0x4c6f, 0xc63a, 0x1aa, 0xffffffff, 0xcfd, 0xb, 0x9, 0x1, 0x5, 0x1000, 0x9, 0x0, 0x50000000, 0x8, 0x2, 0xfffffffe, 0x35, 0x4, 0xe]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0x8, 0x5, 0x1, 0x0, 0x9407, 0x9, 0x2, 0x8, 0x1, 0x4, 0x3, 0x340c000, 0x9, 0x146, 0x1ff, 0x3, 0xa, 0xdac, 0x6, 0x8, 0x1ff, 0x9, 0x0, 0x5, 0x7, 0x9, 0x101, 0x90b9, 0x2, 0x7, 0x8, 0xc, 0x5, 0x4, 0x8, 0x8, 0x6, 0x75, 0xe, 0x4a0, 0x3, 0x95d8, 0x8e, 0x3, 0x3, 0x8, 0x4, 0xb7, 0x9d9, 0x3, 0x200, 0x1, 0x3b621ab2, 0x8001, 0x0, 0x9, 0x7, 0x0, 0x7, 0x968, 0xcdcd, 0xff, 0x97d, 0xc, 0xf, 0x1, 0xffff, 0x1, 0x9fca, 0x8, 0xfffff913, 0xfffffff7, 0x1, 0x7, 0xd, 0x2, 0xffff, 0x5d, 0xffff0001, 0x7f, 0x78c, 0x926e, 0x9, 0x8, 0xfffffffa, 0xb, 0x5, 0x0, 0x5, 0x9, 0x9, 0xa61c, 0x6, 0x1, 0xfffffff2, 0x6, 0x18000, 0x0, 0x2, 0x1, 0x9, 0x2, 0x6, 0x8, 0x5, 0x3, 0x58d5, 0x3, 0x4, 0x7, 0x9, 0x0, 0x1, 0x5, 0x7, 0xcee7, 0x5, 0x2, 0x4327, 0x8, 0x8fb, 0x2, 0x9, 0xfffffffa, 0x2, 0x5, 0xce7, 0x10, 0xff, 0x0, 0x9, 0x8001, 0x4, 0x1, 0x1ff, 0x0, 0xda, 0x8, 0x4, 0x8, 0x9, 0x6, 0x9, 0x10001, 0x8c0, 0x6, 0x3, 0x7, 0x5, 0x7, 0x0, 0x81, 0x200, 0x54b, 0xe4, 0x9, 0x5, 0x80fb, 0x3, 0x6, 0x7, 0x9eb, 0x708, 0x0, 0xf07, 0xd0, 0x0, 0x7, 0x2, 0x2, 0x5, 0x76a, 0x5, 0x8001, 0xfffffffa, 0x9, 0xa37a, 0x3ff, 0x4, 0x14, 0x4, 0x5, 0x9, 0x8, 0x718000, 0x7, 0x10000, 0x80000000, 0x200, 0x9, 0xf, 0xfff, 0x5, 0x80000001, 0x10000, 0x9, 0x6, 0xb28d, 0x200, 0xfffffa98, 0x5, 0x5, 0xffffffff, 0xcc, 0x800, 0x7, 0x7, 0x7, 0x7, 0x4, 0xd, 0x80000, 0x0, 0xcd3, 0x3ff, 0xb, 0x6, 0x3ff, 0x20000, 0xde1, 0x3, 0x8, 0x8, 0x10, 0x10000, 0x8, 0xed50, 0x1, 0x1, 0x7fffffff, 0x9, 0xd, 0x8, 0xd5ec, 0x9eb, 0xfff, 0x0, 0x7, 0x1, 0x401, 0x3ff, 0x8, 0xfb37, 0x81, 0x0, 0x6, 0x4, 0x67, 0x51a, 0x8, 0xffffff7f, 0x7fffffff, 0x3, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff7, 0x4, 0x6, 0xff, 0x7fffffff, 0x8, 0xfff, 0xff, 0x9, 0x4, 0xc58d, 0x1, 0x9, 0x5, 0x2, 0x0, 0x8, 0xb2, 0x1f8, 0x8, 0x7f, 0x10001, 0x517d, 0x4, 0x1000, 0x1, 0x8, 0x10, 0x4, 0xb, 0x7, 0x3, 0x6f3, 0x3, 0x0, 0x6, 0x6, 0xfffffff9, 0x7, 0xf50, 0x8, 0x800, 0x0, 0xf, 0x2, 0x6, 0x7, 0xa, 0x9, 0x4, 0x8, 0x70, 0x309, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4, 0x602, 0x8, 0x8, 0x3, 0xfffff000, 0xed, 0x3, 0x9, 0x8080, 0x875, 0x7, 0x6, 0x640, 0x1, 0x3ff, 0xffffffe3, 0x6b87, 0x33a, 0x0, 0x81, 0x4, 0x49a, 0x7, 0x10, 0x80000001, 0x5, 0x8, 0xc000000, 0x4819, 0x800, 0x6e94, 0x2, 0xf1, 0x0, 0x9c38, 0xb, 0x10, 0x3, 0x7, 0x6, 0x800, 0x3, 0x2, 0x11, 0x7f, 0x40000, 0x8001, 0x3f, 0x800, 0xffffffff, 0x0, 0x6, 0x5, 0xfffffffe, 0x8, 0x4, 0x5, 0x9, 0x8, 0x6, 0x0, 0x8a0, 0x3, 0x10000, 0x3, 0x9, 0x10, 0x9, 0x401, 0xffffff95, 0x10, 0x5, 0x4, 0xffff995b, 0x8000, 0xffffee69, 0x2, 0xfffff000, 0x1e, 0x7fff, 0x80000001, 0x4, 0x6, 0x2, 0x4, 0x8e, 0x4, 0xfffff5b5, 0x9, 0x6, 0x10, 0x2ff9, 0xfffffff7, 0x1, 0x359e, 0x6, 0x5, 0x3, 0x1, 0x4, 0xe, 0xffff0000, 0x6, 0x4, 0xffffffff, 0x0, 0x10001, 0xcfd5, 0x5, 0x80, 0x6, 0x4, 0x5, 0x80, 0x28, 0x10, 0x47b, 0x6, 0x6, 0x8, 0x0, 0x3, 0x9c, 0x765b, 0x0, 0x0, 0xd38, 0x7ff, 0x3, 0x6429745b, 0x7fffffff, 0xff, 0xb51a, 0x6, 0x6, 0x8, 0x7, 0xc5, 0x10001, 0xffffffff, 0x1, 0x9, 0x10, 0xfffffff9, 0x1, 0xabb6, 0x1, 0x0, 0x3, 0x5, 0xbe, 0x8, 0x7ff, 0x6, 0x80000000, 0x8000000, 0x3, 0x200, 0x100, 0x81, 0xda, 0x0, 0x9, 0x8, 0x1, 0x5, 0xe4, 0x1, 0x8f, 0x4, 0x80000001, 0xfff, 0x21c12c19, 0x1ff, 0xfffff173, 0x6, 0x7fffffff, 0x2, 0x8000, 0x4, 0x8, 0x9, 0x0, 0x1, 0x7, 0x8001, 0x8, 0xb749, 0x1, 0x0, 0x7, 0x5, 0x0, 0xbd, 0x6, 0x4]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1058}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) 1.380321347s ago: executing program 6 (id=1052): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x3d, 0x0, 0x7}, 0xc) close(0x3) 600.183478ms ago: executing program 2 (id=1053): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x3ff) ptrace$cont(0x1f, r0, 0x8, 0x18) 361.380511ms ago: executing program 4 (id=1054): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x3, 0x0, 0x34a30b42, 0x0, 0xffe, 0x8000, 0x1002, 0xffffffeffffffffc, 0x10000fffe, 0x6, 0x2, 0x2372, 0x8bda, 0xfffffffffffffefe, 0x3, 0x20], 0x26000, 0x40}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {}, 0x0, 0x3ffffffc, 0x8}}}, 0x118) 273.717826ms ago: executing program 6 (id=1055): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x40, r0, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x71}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x20000000) 240.713507ms ago: executing program 2 (id=1056): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1}, 0x10) 57.652387ms ago: executing program 4 (id=1057): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 494.24µs ago: executing program 6 (id=1058): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000180)=ANY=[], 0xfe, 0xa7f, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf) write$binfmt_elf32(r0, &(0x7f00000015c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xed, 0xb, 0x9, 0x8001, 0x3, 0x3e, 0x4, 0x247, 0x38, 0x1e2, 0x96, 0x7ffe, 0x20, 0x1, 0xfbd5, 0x40, 0x3b}, [{0x4, 0x4, 0x80000000, 0xb, 0x6, 0x7, 0x5, 0x7fff}]}, 0x58) creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd) 0s ago: executing program 2 (id=1059): socket$packet(0x11, 0x3, 0x300) r0 = io_uring_setup(0x7801, &(0x7f0000000040)={0x0, 0xbb0e, 0x800, 0x1, 0x81}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000800)=[{0x4, 0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) kernel console output (not intermixed with test programs): m 0 to 40427 [ 130.473178][ T5455] BTRFS info (device loop2): enabling ssd optimizations [ 130.482091][ T5455] BTRFS info (device loop2): using spread ssd allocation scheme [ 130.490136][ T5470] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 130.505225][ T5470] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 130.519546][ T5455] BTRFS info (device loop2): turning off barriers [ 130.536826][ T5455] BTRFS info (device loop2): disabling free space tree [ 130.545683][ T5470] F2FS-fs (loop3): invalid crc value [ 130.551224][ T5455] BTRFS info (device loop2): not using ssd optimizations [ 130.585854][ T5455] BTRFS info (device loop2): not using spread ssd allocation scheme [ 130.609861][ T5470] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.841010][ T5470] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 130.885116][ T5470] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 130.927522][ T5455] BTRFS info (device loop2): rebuilding free space tree [ 130.972365][ T5455] BTRFS info (device loop2): disabling free space tree [ 131.010097][ T5462] chnl_net:caif_netlink_parms(): no params data found [ 131.025335][ T5455] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.099485][ T5455] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.472584][ T5480] loop1: detected capacity change from 0 to 40427 [ 131.537711][ T5480] F2FS-fs (loop1): Invalid segment/section count (24 != 3 * 1) [ 131.546931][ T4279] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 131.575078][ T5480] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 131.625279][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 131.651266][ T5480] F2FS-fs (loop1): invalid crc value [ 131.745165][ T5016] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop2 scanned by udevd (5016) [ 131.810480][ T5480] F2FS-fs (loop1): Found nat_bits in checkpoint [ 132.010908][ T5462] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.092670][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.135173][ T5462] device bridge_slave_0 entered promiscuous mode [ 132.199791][ T5462] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.251468][ T5480] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 132.255315][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.296054][ T5480] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 132.305757][ T5462] device bridge_slave_1 entered promiscuous mode [ 132.472054][ T5480] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 132.575263][ T5480] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 132.605446][ T5535] loop4: detected capacity change from 0 to 4096 [ 132.829261][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.835958][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.859487][ T5540] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.872465][ T4322] device hsr_slave_0 left promiscuous mode [ 133.010314][ T4322] device hsr_slave_1 left promiscuous mode [ 133.038156][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.060205][ T5527] loop3: detected capacity change from 0 to 32768 [ 133.097575][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.176962][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.201307][ T26] audit: type=1800 audit(1776901376.179:5): pid=5527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.402" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 133.213097][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.382399][ T4322] device bridge_slave_1 left promiscuous mode [ 133.402540][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.506002][ T4322] device bridge_slave_0 left promiscuous mode [ 133.512459][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.631357][ T4322] device veth1_macvtap left promiscuous mode [ 133.642670][ T4322] device veth0_macvtap left promiscuous mode [ 133.664291][ T4322] device veth1_vlan left promiscuous mode [ 133.679009][ T4322] device veth0_vlan left promiscuous mode [ 133.705116][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 133.845418][ T4641] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.055935][ T4641] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 134.078768][ T4641] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.099463][ T4641] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.112344][ T4641] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.144246][ T4641] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.163866][ T4641] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.179585][ T4641] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.217265][ T4641] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.243507][ T4641] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.259941][ T4641] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.283871][ T5558] loop1: detected capacity change from 0 to 128 [ 134.294937][ T4641] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.306616][ T4641] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.322433][ T4641] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.344944][ T4641] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.360948][ T4641] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.372804][ T4641] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.382062][ T5558] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 134.393780][ T4641] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.422056][ T4641] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.447693][ T4641] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.463563][ T4641] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.476190][ T4641] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.487211][ T4641] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.505654][ T4641] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.514862][ T4641] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.517516][ T5558] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.537491][ T4641] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.564317][ T4641] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 134.590193][ T4641] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 134.604279][ T4641] usb 5-1: Product: syz [ 134.610297][ T4641] usb 5-1: Manufacturer: syz [ 134.621595][ T4641] usb 5-1: SerialNumber: syz [ 134.650447][ T4641] usb 5-1: config 0 descriptor?? [ 134.718222][ T4641] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 134.874692][ T5564] loop3: detected capacity change from 0 to 256 [ 134.906148][ T5564] exfat: Deprecated parameter 'utf8' [ 134.915824][ T5564] exfat: Deprecated parameter 'utf8' [ 134.977113][ T5564] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 135.037108][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 135.046880][ T4641] usb 5-1: USB disconnect, device number 3 [ 135.056134][ T4641] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 135.730262][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 135.792297][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 135.877387][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 135.889712][ T5571] loop3: detected capacity change from 0 to 40427 [ 135.939728][ T5571] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x3ffff [ 135.981248][ T5571] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 136.013317][ T5571] F2FS-fs (loop3): invalid crc value [ 136.042149][ T5571] F2FS-fs (loop3): Found nat_bits in checkpoint [ 136.152249][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.208317][ T5571] F2FS-fs (loop3): Start checkpoint disabled! [ 136.267936][ T5571] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 136.358614][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.459373][ T4294] kworker/u4:5: attempt to access beyond end of device [ 136.459373][ T4294] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 136.807642][ T5585] loop3: detected capacity change from 0 to 64 [ 137.057879][ T4322] bond0 (unregistering): Released all slaves [ 137.202767][ T5462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.213035][ T5543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.408'. [ 137.233689][ T4265] bridge0: port 3(syz_tun) entered disabled state [ 137.332190][ T4265] device syz_tun left promiscuous mode [ 137.354594][ T4265] bridge0: port 3(syz_tun) entered disabled state [ 137.447542][ T5462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.529085][ T5595] netlink: 76 bytes leftover after parsing attributes in process `syz.3.430'. [ 137.618228][ T5462] team0: Port device team_slave_0 added [ 137.649334][ T5462] team0: Port device team_slave_1 added [ 137.767318][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.805137][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.868413][ T5462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.875853][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 137.887732][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.894856][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.923283][ T5462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.015080][ T4313] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 138.016945][ T5462] device hsr_slave_0 entered promiscuous mode [ 138.062020][ T5462] device hsr_slave_1 entered promiscuous mode [ 138.205921][ T4313] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 138.245066][ T4313] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.280098][ T4313] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 138.321004][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 138.342017][ T4313] usb 3-1: Product: syz [ 138.361008][ T4313] usb 3-1: Manufacturer: syz [ 138.366491][ T4313] usb 3-1: SerialNumber: syz [ 138.391786][ T4313] usb 3-1: config 0 descriptor?? [ 138.451247][ T4313] usb 3-1: selecting invalid altsetting 0 [ 138.735136][ T5531] usb 3-1: USB disconnect, device number 2 [ 138.938983][ T5620] loop4: detected capacity change from 0 to 512 [ 138.998576][ T5620] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 139.045301][ T5620] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.064103][ T4322] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.129063][ T5620] EXT4-fs (loop4): 1 truncate cleaned up [ 139.139180][ T5462] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.151992][ T5620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 139.346926][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.365224][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.376800][ T4272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.384681][ T4272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.390861][ T4322] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.404014][ T4272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 139.413296][ T4272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.438603][ T5462] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.529591][ T4322] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.563111][ T5462] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.590299][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 139.627632][ T5462] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.754668][ T4322] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.172497][ T5462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.239638][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.299973][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.364359][ T5462] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.562175][ T5640] loop2: detected capacity change from 0 to 8192 [ 140.574541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.593306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.648744][ T5640] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 140.664875][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.672136][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.676210][ T5640] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 140.684525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.700864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.710176][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.717413][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.735438][ T5640] REISERFS (device loop2): using ordered data mode [ 140.756443][ T5640] reiserfs: using flush barriers [ 140.770055][ T5640] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.791684][ T5640] REISERFS (device loop2): checking transaction log (loop2) [ 140.816922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.848861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.980966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.000768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.053080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.082913][ T5640] REISERFS (device loop2): Using tea hash to sort names [ 141.101626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.123637][ T5640] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 141.151943][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.235452][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.293774][ T5658] loop3: detected capacity change from 0 to 64 [ 141.369983][ T5625] chnl_net:caif_netlink_parms(): no params data found [ 141.415650][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.435480][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.465309][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 141.473552][ T5462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.512798][ T5640] REISERFS warning (device loop2): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=255, len=3 - odd [ 141.542784][ T5662] loop4: detected capacity change from 0 to 512 [ 141.551048][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.588859][ T5662] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.676987][ T5662] EXT4-fs (loop4): orphan file too big: 4294967295 [ 141.706359][ T5662] EXT4-fs (loop4): mount failed [ 141.763563][ T5666] loop3: detected capacity change from 0 to 64 [ 141.782819][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.804366][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.041716][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.048983][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.057443][ T5625] device bridge_slave_0 entered promiscuous mode [ 142.067608][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.074766][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.083451][ T5625] device bridge_slave_1 entered promiscuous mode [ 142.222425][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.253987][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.459917][ T4322] device gretap0 left promiscuous mode [ 142.625851][ T5625] team0: Port device team_slave_0 added [ 142.648134][ T5625] team0: Port device team_slave_1 added [ 142.760547][ T5683] mkiss: ax0: crc mode is auto. [ 142.857740][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.870292][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.970805][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.027424][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.034537][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.104493][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.258962][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.283068][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.316220][ T5462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.448621][ T5625] device hsr_slave_0 entered promiscuous mode [ 143.515485][ T5625] device hsr_slave_1 entered promiscuous mode [ 143.523719][ T5625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.536364][ T5702] program syz.2.458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.555109][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 143.572304][ T5625] Cannot create hsr debugfs directory [ 143.618339][ T5704] loop4: detected capacity change from 0 to 1024 [ 143.865940][ T5707] loop3: detected capacity change from 0 to 8192 [ 143.936733][ T5707] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 143.998400][ T5707] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 144.045267][ T5707] REISERFS (device loop3): using ordered data mode [ 144.051864][ T5707] reiserfs: using flush barriers [ 144.085606][ T5707] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.202046][ T5707] REISERFS (device loop3): checking transaction log (loop3) [ 144.217564][ T4322] device veth0_to_team left promiscuous mode [ 144.258614][ T4322] device hsr_slave_0 left promiscuous mode [ 144.267191][ T5707] REISERFS (device loop3): Using r5 hash to sort names [ 144.274632][ T5707] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 144.294163][ T4322] device hsr_slave_1 left promiscuous mode [ 144.325980][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.333471][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.377010][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.415275][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.455676][ T4322] device bridge_slave_1 left promiscuous mode [ 144.461988][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.527196][ T4322] device bridge_slave_0 left promiscuous mode [ 144.533566][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.667025][ T4322] device veth1_macvtap left promiscuous mode [ 144.695904][ T4322] device veth0_macvtap left promiscuous mode [ 144.715915][ T4322] device veth1_vlan left promiscuous mode [ 144.738800][ T4322] device veth0_vlan left promiscuous mode [ 145.258116][ T5745] loop4: detected capacity change from 0 to 256 [ 145.632767][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 146.108815][ T5753] loop3: detected capacity change from 0 to 32768 [ 146.179782][ T26] audit: type=1800 audit(1776901645.154:6): pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.475" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 146.472006][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 146.544227][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 146.616260][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.684749][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.217119][ T4322] bond0 (unregistering): Released all slaves [ 147.705190][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 148.525763][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.582384][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.816311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.831346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.867180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.904728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.929574][ T5462] device veth0_vlan entered promiscuous mode [ 148.940852][ T5789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 149.070897][ T5462] device veth1_vlan entered promiscuous mode [ 149.345361][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.353851][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.436584][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.476029][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.547541][ T5462] device veth0_macvtap entered promiscuous mode [ 149.590432][ T5462] device veth1_macvtap entered promiscuous mode [ 149.683049][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.723236][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.763928][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.788187][ T5803] loop4: detected capacity change from 0 to 4096 [ 149.795738][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.818364][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.875784][ T5803] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 149.896060][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.935970][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.964936][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.004950][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.015452][ T5803] ntfs3: loop4: Failed to load $Extend. [ 150.053569][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.097910][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.138437][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.176346][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.224933][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.247219][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.275299][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.336920][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.353768][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.389576][ T5462] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.417913][ T5462] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.447248][ T5462] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.467224][ T5462] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.593587][ T5625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.692115][ T5625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.712056][ T5810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.493'. [ 150.712660][ T5625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.779725][ T5625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.905498][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.923832][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.943308][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.036418][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.068364][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.147424][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.256955][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.293413][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.351727][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.375853][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.418656][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.445878][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.487961][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.495265][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.543810][ T5828] loop2: detected capacity change from 0 to 256 [ 151.562950][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.628099][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.657975][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.667312][ T5828] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 151.732714][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.739980][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.774332][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.821862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.870454][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.885935][ T26] audit: type=1326 audit(1776901650.834:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04539c819 code=0x7ffc0000 [ 151.939706][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.972130][ T5835] loop4: detected capacity change from 0 to 512 [ 151.981114][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.992540][ T26] audit: type=1326 audit(1776901650.894:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fa04539c819 code=0x7ffc0000 [ 152.044227][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.071441][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.088908][ T26] audit: type=1326 audit(1776901650.904:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04539c819 code=0x7ffc0000 [ 152.116277][ T5835] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.140771][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.163363][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.215675][ T5835] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.251096][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.299267][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.343944][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.528992][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 153.218910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.230285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.250752][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.315977][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.336848][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.404630][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.438077][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.449928][ T5625] device veth0_vlan entered promiscuous mode [ 153.457760][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.470694][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.499152][ T5625] device veth1_vlan entered promiscuous mode [ 153.588511][ T5625] device veth0_macvtap entered promiscuous mode [ 153.615105][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.642008][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.656092][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.720262][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.759191][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.800558][ T5625] device veth1_macvtap entered promiscuous mode [ 153.809798][ T5858] loop4: detected capacity change from 0 to 32768 [ 153.877344][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.891943][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.903993][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.915035][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.926581][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.938023][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.949195][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.956175][ T5858] XFS (loop4): Mounting V5 Filesystem [ 153.961622][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.977421][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.002503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.039657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.097215][ T5879] loop5: detected capacity change from 0 to 8 [ 154.147470][ T5858] XFS (loop4): Ending clean mount [ 154.154144][ T5879] SQUASHFS error: zlib decompression failed, data probably corrupt [ 154.173762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.182741][ T5879] SQUASHFS error: Failed to read block 0x9b: -5 [ 154.205765][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.217899][ T5858] XFS (loop4): Quotacheck needed: Please wait. [ 154.221537][ T5879] SQUASHFS error: Unable to read metadata cache entry [99] [ 154.241931][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.263133][ T5879] SQUASHFS error: Unable to read inode 0x127 [ 154.271800][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.306493][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.330258][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.346223][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.365337][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.386354][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.416647][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.441598][ T5858] XFS (loop4): Quotacheck: Done. [ 154.452208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.464373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.499545][ T5625] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.539342][ T5625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.572209][ T5625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.609873][ T5625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.723636][ T4266] XFS (loop4): Unmounting Filesystem [ 154.820376][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 154.907931][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 154.911831][ T4272] Bluetooth: hci5: command 0x1003 tx timeout [ 155.069718][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.095050][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.119220][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.201000][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.245782][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.261963][ T5889] tap0: tun_chr_ioctl cmd 1074025677 [ 155.295313][ T5889] tap0: linktype set to 270 [ 155.330960][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.947625][ T4284] Bluetooth: hci2: ISO packet too small [ 156.452408][ T5932] device batadv_slave_1 entered promiscuous mode [ 156.467104][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 156.495866][ T5930] device batadv_slave_1 left promiscuous mode [ 156.844858][ T5943] tipc: Started in network mode [ 156.862246][ T5943] tipc: Node identity ac14140f, cluster identity 4711 [ 156.885608][ T5943] tipc: New replicast peer: 255.255.255.255 [ 156.909903][ T5943] tipc: Enabled bearer , priority 10 [ 156.940851][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.949587][ T4914] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 157.015902][ T5947] device batadv_slave_0 entered promiscuous mode [ 157.148250][ T4914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 157.175167][ T4914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 157.205093][ T4914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 157.265905][ T4914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 157.322691][ T4914] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 157.352784][ T4914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.404762][ T4914] usb 2-1: Product: syz [ 157.419616][ T4914] usb 2-1: Manufacturer: syz [ 157.424403][ T4914] usb 2-1: SerialNumber: syz [ 157.453503][ T4914] usb 2-1: config 0 descriptor?? [ 157.700051][ T4914] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 157.710903][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.538'. [ 157.959665][ T4914] usb 2-1: USB disconnect, device number 3 [ 158.027637][ T4314] tipc: Node number set to 2886997007 [ 158.320132][ T5980] loop3: detected capacity change from 0 to 256 [ 158.340734][ T5980] exfat: Deprecated parameter 'utf8' [ 158.353542][ T5980] exfat: Deprecated parameter 'namecase' [ 158.382359][ T5980] exfat: Deprecated parameter 'namecase' [ 158.407967][ T5980] exfat: Deprecated parameter 'utf8' [ 158.470790][ T5980] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 158.812112][ T5960] loop5: detected capacity change from 0 to 40427 [ 158.911168][ T5960] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 158.964915][ T5960] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 159.031960][ T5960] F2FS-fs (loop5): Found nat_bits in checkpoint [ 159.046073][ T5968] loop4: detected capacity change from 0 to 40427 [ 159.090788][ T4638] hid-generic 0005:0004:A9D3.0002: unknown main item tag 0x0 [ 159.131849][ T5968] F2FS-fs (loop4): invalid crc value [ 159.142109][ T5999] loop3: detected capacity change from 0 to 512 [ 159.159722][ T4638] hid-generic 0005:0004:A9D3.0002: unknown main item tag 0x0 [ 159.178390][ T5968] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.206188][ T4638] hid-generic 0005:0004:A9D3.0002: unknown main item tag 0x0 [ 159.287053][ T4638] hid-generic 0005:0004:A9D3.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 159.316285][ T5960] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 159.323406][ T5960] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 159.344269][ T5999] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.407486][ T5999] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 159.485249][ T5968] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 159.518788][ T5999] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 159.625755][ T5999] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 159.696349][ T5999] System zones: 0-2, 18-18, 34-34 [ 159.760161][ T5999] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.548: iget: bad i_size value: 360287970189639680 [ 159.856880][ T5999] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.548: couldn't read orphan inode 15 (err -117) [ 159.880355][ T4266] syz-executor: attempt to access beyond end of device [ 159.880355][ T4266] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.917902][ T5999] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 160.314540][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 160.693927][ T6023] mkiss: ax0: crc mode is auto. [ 162.525104][ T4914] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 162.539175][ T6091] device wlan0 entered promiscuous mode [ 162.564486][ T6091] device macsec1 entered promiscuous mode [ 162.715090][ T4914] usb 2-1: Using ep0 maxpacket: 16 [ 162.722785][ T4914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.744640][ T6096] loop5: detected capacity change from 0 to 256 [ 162.762032][ T4914] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 162.797954][ T4914] usb 2-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 162.827905][ T4914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.866882][ T4914] usb 2-1: Product: syz [ 162.871167][ T4914] usb 2-1: Manufacturer: syz [ 162.900216][ T4914] usb 2-1: SerialNumber: syz [ 162.926381][ T4914] usb 2-1: config 0 descriptor?? [ 163.071615][ T6104] loop2: detected capacity change from 0 to 64 [ 163.190594][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.199588][ T6104] hfs: request for non-existent node 131072 in B*Tree [ 163.199771][ T6104] hfs: request for non-existent node 131072 in B*Tree [ 163.255340][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.289206][ T128] usb 2-1: USB disconnect, device number 4 [ 163.434612][ T6087] loop3: detected capacity change from 0 to 32768 [ 163.475430][ T6087] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 163.567406][ T6113] loop4: detected capacity change from 0 to 64 [ 163.851944][ T5016] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 163.875146][ T128] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 164.072505][ T128] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 164.092180][ T128] usb 2-1: config 0 has no interface number 0 [ 164.122632][ T128] usb 2-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 164.173159][ T128] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 164.205112][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.244761][ T128] usb 2-1: Product: syz [ 164.266443][ T128] usb 2-1: Manufacturer: syz [ 164.271184][ T128] usb 2-1: SerialNumber: syz [ 164.310772][ T128] usb 2-1: config 0 descriptor?? [ 164.479391][ T6128] loop3: detected capacity change from 0 to 1024 [ 164.503205][ T6110] loop2: detected capacity change from 0 to 32768 [ 164.566349][ T128] usb 2-1: USB disconnect, device number 5 [ 164.597595][ T6110] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 164.748775][ T6127] hfsplus: invalid extended attribute record [ 164.920338][ T4322] hfsplus: b-tree write err: -5, ino 25 [ 164.935256][ T4322] hfsplus: b-tree write err: -5, ino 4 [ 164.947924][ T4322] hfsplus: b-tree write err: -5, ino 2 [ 164.997164][ T4347] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 165.105246][ T5408] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 165.318634][ T5408] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.362789][ T5408] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.405244][ T5408] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 165.466968][ T5408] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.517013][ T5408] usb 6-1: config 0 descriptor?? [ 165.942464][ T5408] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x7 [ 166.008264][ T5408] logitech-djreceiver 0003:046D:C71F.0003: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 166.138308][ T4314] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 166.183329][ T5408] usb 6-1: USB disconnect, device number 2 [ 166.221750][ T6172] loop3: detected capacity change from 0 to 2048 [ 166.330246][ T4314] usb 3-1: config 0 has no interfaces? [ 166.336475][ T4314] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 166.348198][ T6175] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.397727][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.433116][ T4314] usb 3-1: config 0 descriptor?? [ 166.493483][ T6173] fido_id[6173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 166.637455][ T6175] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 166.691968][ T6175] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 166.759075][ T4638] usb 3-1: USB disconnect, device number 3 [ 166.783059][ T6175] Remounting filesystem read-only [ 166.814910][ T4277] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 166.968741][ T6184] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 167.041310][ T6187] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.051081][ T6187] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.059931][ T6187] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.068898][ T6187] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.413154][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.617'. [ 167.756200][ T4914] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 167.966442][ T6218] program syz.1.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.975277][ T4914] usb 5-1: Using ep0 maxpacket: 16 [ 167.992567][ T4914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 168.028722][ T4914] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 168.059628][ T4914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.090915][ T4914] usb 5-1: Product: syz [ 168.101166][ T4914] usb 5-1: Manufacturer: syz [ 168.113036][ T4914] usb 5-1: SerialNumber: syz [ 168.152490][ T4914] usb 5-1: config 0 descriptor?? [ 168.212106][ T4914] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 168.262677][ T4914] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 168.833878][ T4914] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 168.921308][ T6245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.633'. [ 169.123459][ T4914] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 169.174619][ T4914] em28xx 5-1:0.0: board has no eeprom [ 169.275063][ T4914] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 169.293258][ T4914] em28xx 5-1:0.0: dvb set to bulk mode. [ 169.318614][ T4314] em28xx 5-1:0.0: Binding DVB extension [ 169.341904][ T4914] usb 5-1: USB disconnect, device number 4 [ 169.387810][ T4914] em28xx 5-1:0.0: Disconnecting em28xx [ 169.535120][ T5533] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 169.596977][ T4314] em28xx 5-1:0.0: Registering input extension [ 169.604150][ T4914] em28xx 5-1:0.0: Closing input extension [ 169.718677][ T4914] em28xx 5-1:0.0: Freeing device [ 169.745332][ T5533] usb 4-1: Using ep0 maxpacket: 8 [ 169.761628][ T5533] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 169.812511][ T5533] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 169.844370][ T5533] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.871157][ T5533] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.899679][ T5533] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.920114][ T5533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.115144][ T4314] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 170.186690][ T5533] usb 4-1: GET_CAPABILITIES returned 0 [ 170.192289][ T5533] usbtmc 4-1:16.0: can't read capabilities [ 170.275512][ T6272] overlayfs: failed to resolve './bus': -2 [ 170.319915][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 170.357484][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 170.374538][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 170.405298][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 170.422569][ T4638] usb 4-1: USB disconnect, device number 4 [ 170.422701][ T4314] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 170.482983][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.502569][ T4314] usb 3-1: Product: syz [ 170.516125][ T4314] usb 3-1: Manufacturer: syz [ 170.520953][ T4314] usb 3-1: SerialNumber: syz [ 170.543339][ T4314] usb 3-1: config 0 descriptor?? [ 170.608884][ T5533] hid-generic 0004:0004:FFFF0001.0004: unknown main item tag 0x0 [ 170.609479][ T6280] netlink: 164 bytes leftover after parsing attributes in process `syz.1.647'. [ 170.659201][ T5533] hid-generic 0004:0004:FFFF0001.0004: unknown main item tag 0x0 [ 170.671722][ T5533] hid-generic 0004:0004:FFFF0001.0004: unknown main item tag 0x0 [ 170.723827][ T5533] hid-generic 0004:0004:FFFF0001.0004: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 170.765453][ T4314] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 170.951598][ T6286] program syz.1.649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.003534][ T5533] usb 3-1: USB disconnect, device number 4 [ 171.052044][ T6288] loop5: detected capacity change from 0 to 1764 [ 171.235771][ T6292] team0: Device gtp0 is up. Set it down before adding it as a team port [ 171.804591][ T6304] loop2: detected capacity change from 0 to 256 [ 171.963820][ T6304] FAT-fs (loop2): Directory bread(block 64) failed [ 171.980363][ T6304] FAT-fs (loop2): Directory bread(block 65) failed [ 172.005820][ T6311] loop1: detected capacity change from 0 to 64 [ 172.016927][ T6304] FAT-fs (loop2): Directory bread(block 66) failed [ 172.023735][ T6304] FAT-fs (loop2): Directory bread(block 67) failed [ 172.060681][ T6304] FAT-fs (loop2): Directory bread(block 68) failed [ 172.071811][ T6304] FAT-fs (loop2): Directory bread(block 69) failed [ 172.114788][ T6304] FAT-fs (loop2): Directory bread(block 70) failed [ 172.157558][ T6304] FAT-fs (loop2): Directory bread(block 71) failed [ 172.172426][ T6304] FAT-fs (loop2): Directory bread(block 72) failed [ 172.191400][ T6304] FAT-fs (loop2): Directory bread(block 73) failed [ 172.265199][ T4641] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 172.475202][ T4641] usb 4-1: Using ep0 maxpacket: 16 [ 172.486454][ T4641] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 172.520246][ T4641] usb 4-1: config 0 has no interface number 0 [ 172.542569][ T4641] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 172.605140][ T4641] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 172.635817][ T4641] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 172.656108][ T4641] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 172.695260][ T4641] usb 4-1: Product: syz [ 172.699509][ T4641] usb 4-1: SerialNumber: syz [ 172.755925][ T4641] usb 4-1: config 0 descriptor?? [ 172.787036][ T4641] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 172.826067][ T4641] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input7 [ 173.033202][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.043609][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.051651][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.072697][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.081556][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.088986][ T4641] usb 4-1: USB disconnect, device number 5 [ 173.105218][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.112382][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 173.150101][ T4641] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 173.241703][ T6329] loop2: detected capacity change from 0 to 512 [ 173.326288][ T6329] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 173.417921][ T6329] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.669: corrupted in-inode xattr [ 173.445412][ T6329] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.669: couldn't read orphan inode 15 (err -117) [ 173.468092][ T6329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.549793][ T6329] EXT4-fs warning (device loop2): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 173.724526][ T6317] loop1: detected capacity change from 0 to 32768 [ 173.803242][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 173.920818][ T6317] XFS (loop1): Mounting V5 Filesystem [ 174.008988][ T6317] XFS (loop1): Ending clean mount [ 174.038403][ T6317] XFS (loop1): Quotacheck needed: Please wait. [ 174.238915][ T6317] XFS (loop1): Quotacheck: Done. [ 174.487838][ T5625] XFS (loop1): Unmounting Filesystem [ 174.583860][ T6369] netlink: 'syz.5.679': attribute type 12 has an invalid length. [ 174.645126][ T6369] netlink: 24 bytes leftover after parsing attributes in process `syz.5.679'. [ 176.316441][ T6408] loop3: detected capacity change from 0 to 512 [ 176.345923][ T6411] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 176.358992][ T6411] syzkaller1: linktype set to 776 [ 176.416019][ T6408] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 176.438509][ T6408] EXT4-fs (loop3): orphan cleanup on readonly fs [ 176.480646][ T6408] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 176.511683][ T6408] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 176.568030][ T6408] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.690: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 176.628109][ T6408] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.690: couldn't read orphan inode 13 (err -117) [ 176.655904][ T6408] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 176.715796][ T6408] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 176.753243][ T6408] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 176.777563][ T6392] loop5: detected capacity change from 0 to 32768 [ 176.809283][ T6392] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 176.827089][ T6408] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 176.917759][ T6408] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 176.972467][ T6408] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 177.032677][ T6408] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 177.183037][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 177.234840][ T4362] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 177.270612][ T6400] loop2: detected capacity change from 0 to 32768 [ 177.361901][ T6400] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 177.407143][ T6400] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 177.441836][ T6400] BTRFS info (device loop2): using free space tree [ 177.455106][ T4314] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 177.647394][ T4314] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.672080][ T4314] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 177.681292][ T4314] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 177.699817][ T4314] usb 6-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 177.710030][ T4314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.718576][ T4314] usb 6-1: Product: syz [ 177.723120][ T4314] usb 6-1: Manufacturer: syz [ 177.728480][ T4314] usb 6-1: SerialNumber: syz [ 177.834922][ T6400] BTRFS info (device loop2): enabling ssd optimizations [ 178.035271][ T4314] usb 6-1: USB disconnect, device number 3 [ 178.191271][ T6455] loop4: detected capacity change from 0 to 4096 [ 178.230699][ T6455] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 178.355889][ T5530] udevd[5530]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.376934][ T4279] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 178.826577][ T6472] loop5: detected capacity change from 0 to 512 [ 178.875114][ T6472] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 179.019123][ T6472] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 179.138987][ T6472] EXT4-fs (loop5): 1 truncate cleaned up [ 179.146526][ T6472] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 179.192559][ T6482] loop2: detected capacity change from 0 to 512 [ 179.346953][ T4314] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 179.523428][ T6491] loop1: detected capacity change from 0 to 256 [ 179.545443][ T4314] usb 4-1: Using ep0 maxpacket: 16 [ 179.552879][ T4314] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.579942][ T6491] exfat: Deprecated parameter 'utf8' [ 179.599669][ T5462] EXT4-fs (loop5): unmounting filesystem. [ 179.627094][ T4314] usb 4-1: config 0 interface 0 has no altsetting 0 [ 179.633835][ T4314] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 179.667683][ T6491] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 179.721247][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.796922][ T4314] usb 4-1: config 0 descriptor?? [ 180.129968][ T128] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 180.251785][ T4314] mcp2221 0003:04D8:00DD.0005: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 180.325234][ T128] usb 6-1: Using ep0 maxpacket: 8 [ 180.341723][ T128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.370746][ T128] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 180.383536][ T128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.431419][ T128] usb 6-1: config 0 descriptor?? [ 180.678915][ T128] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 180.730952][ T5013] usb 4-1: USB disconnect, device number 6 [ 180.795076][ T4641] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 180.938561][ T128] usb 6-1: USB disconnect, device number 4 [ 180.987259][ T5531] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 180.996195][ T4641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.033368][ T4641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.062631][ T4641] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 181.084748][ T4641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.104945][ T4641] usb 3-1: config 0 descriptor?? [ 181.191599][ T5531] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.212298][ T5531] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 181.231363][ T5531] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.270945][ T5531] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 181.306702][ T5531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 181.345201][ T5531] usb 2-1: Product: syz [ 181.368372][ T5531] usb 2-1: Manufacturer: syz [ 181.385907][ T5531] usb 2-1: SerialNumber: syz [ 181.530176][ T4641] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x7 [ 181.567730][ T4641] logitech-djreceiver 0003:046D:C71F.0006: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0 [ 181.639590][ T5531] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 181.770264][ T4641] usb 3-1: USB disconnect, device number 5 [ 181.920656][ T5531] usb 2-1: USB disconnect, device number 6 [ 181.932834][ T5531] usblp0: removed [ 182.118987][ T6543] fido_id[6543]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 182.613302][ T6563] loop5: detected capacity change from 0 to 256 [ 183.028134][ T6573] loop4: detected capacity change from 0 to 1024 [ 183.285806][ T6582] hfsplus: catalog searching failed [ 183.355066][ T4641] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 183.547506][ T4641] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 183.570322][ T4641] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.645735][ T4641] usb 6-1: config 0 descriptor?? [ 183.686639][ T4641] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 183.984772][ T6603] loop1: detected capacity change from 0 to 1024 [ 184.506711][ T4641] usb 6-1: USB disconnect, device number 5 [ 185.745177][ T5531] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 185.866831][ T6660] loop2: detected capacity change from 0 to 1024 [ 185.891866][ T6660] EXT4-fs: Ignoring removed nobh option [ 185.906839][ T6660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.953193][ T5531] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.976545][ T5531] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.022018][ T5531] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 186.065789][ T6660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 186.122171][ T6660] EXT4-fs (loop2): shut down requested (2) [ 186.141630][ T5531] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 186.180651][ T5531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.238316][ T5531] usb 2-1: config 0 descriptor?? [ 186.266485][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 186.405265][ T4314] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 186.525134][ T4914] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 186.598427][ T4314] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.641209][ T4314] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 186.672964][ T5531] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 186.684464][ T4314] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 186.698072][ T5531] microsoft 0003:045E:07DA.0007: unsupported Resolution Multiplier 0 [ 186.715096][ T4314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.727275][ T4914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.747697][ T5531] microsoft 0003:045E:07DA.0007: implement() called with n (152) > 32! (kworker/1:17) [ 186.759163][ T4314] usb 6-1: Product: syz [ 186.763408][ T4314] usb 6-1: Manufacturer: syz [ 186.775135][ T4914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.794693][ T4314] usb 6-1: SerialNumber: syz [ 186.803574][ T4914] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 186.816443][ T4314] usb 6-1: config 0 descriptor?? [ 186.835069][ T4914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.859764][ T4914] usb 5-1: config 0 descriptor?? [ 186.871919][ T5531] microsoft 0003:045E:07DA.0007: unsupported Resolution Multiplier 0 [ 186.892254][ T5531] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 186.934232][ T5531] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 186.971568][ T5531] microsoft 0003:045E:07DA.0007: no inputs found [ 186.983647][ T5531] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 187.051545][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.131811][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.196216][ T5531] usb 2-1: USB disconnect, device number 7 [ 187.215372][ T4284] Bluetooth: hci2: unknown advertising packet type: 0x17 [ 187.215482][ T4284] Bluetooth: hci2: unknown advertising packet type: 0x09 [ 187.223473][ T4284] Bluetooth: hci2: unknown advertising packet type: 0x24 [ 187.231553][ T4284] Bluetooth: hci2: unknown advertising packet type: 0x24 [ 187.242350][ T5013] usb 6-1: USB disconnect, device number 6 [ 187.303114][ T4914] logitech-djreceiver 0003:046D:C71F.0008: unknown main item tag 0x7 [ 187.318291][ T4914] logitech-djreceiver 0003:046D:C71F.0008: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 187.507983][ T6694] fido_id[6694]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 187.528878][ T5531] usb 5-1: USB disconnect, device number 5 [ 187.662677][ T6703] bridge0: port 3(erspan0) entered blocking state [ 187.679560][ T6703] bridge0: port 3(erspan0) entered disabled state [ 187.707627][ T6703] device erspan0 entered promiscuous mode [ 187.726204][ T6703] bridge0: port 3(erspan0) entered blocking state [ 187.732815][ T6703] bridge0: port 3(erspan0) entered forwarding state [ 187.940080][ T6706] fido_id[6706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 188.104425][ T6712] loop5: detected capacity change from 0 to 1024 [ 188.202962][ T6712] EXT4-fs: Ignoring removed bh option [ 188.335348][ T6712] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 188.481079][ T6712] EXT4-fs (loop5): shut down requested (2) [ 188.625210][ T4641] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 188.707360][ T5462] EXT4-fs (loop5): unmounting filesystem. [ 188.722935][ T6743] loop3: detected capacity change from 0 to 256 [ 188.757739][ T6743] exfat: Deprecated parameter 'namecase' [ 188.817901][ T6743] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 188.875169][ T4641] usb 2-1: Using ep0 maxpacket: 16 [ 188.882508][ T4641] usb 2-1: config 4 has an invalid interface number: 104 but max is 0 [ 188.922398][ T4641] usb 2-1: config 4 has no interface number 0 [ 188.932799][ T4641] usb 2-1: config 4 interface 104 altsetting 0 endpoint 0x1 has an invalid bInterval 190, changing to 11 [ 188.992033][ T4641] usb 2-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=4b.f8 [ 189.033788][ T4641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.077318][ T4641] usb 2-1: Product: syz [ 189.101393][ T4641] usb 2-1: Manufacturer: syz [ 189.118574][ T4641] usb 2-1: SerialNumber: syz [ 189.445177][ T4914] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 189.486526][ T6741] loop4: detected capacity change from 0 to 32768 [ 189.601571][ T6760] ea_get: invalid extended attribute [ 189.608865][ T6760] ffff8880541c5670: 04 00 00 00 .... [ 189.636913][ T4914] usb 4-1: Using ep0 maxpacket: 16 [ 189.646036][ T4914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.685117][ T4914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.738577][ T4914] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.785571][ T4914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.823054][ T4914] usb 4-1: Product: syz [ 189.828112][ T4914] usb 4-1: Manufacturer: syz [ 189.832787][ T4914] usb 4-1: SerialNumber: syz [ 190.070507][ T4914] usb 4-1: 0:2 : does not exist [ 190.114739][ T4914] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 190.128280][ T4641] rtsx_usb: probe of 2-1:4.104 failed with error -71 [ 190.171545][ T4641] usb 2-1: USB disconnect, device number 8 [ 190.195728][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 190.212122][ T4914] usb 4-1: USB disconnect, device number 7 [ 190.316477][ T6771] loop4: detected capacity change from 0 to 1024 [ 190.461030][ T6775] loop5: detected capacity change from 0 to 64 [ 190.468590][ T5016] udevd[5016]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.763506][ T6778] loop2: detected capacity change from 0 to 1024 [ 190.836514][ T6780] loop4: detected capacity change from 0 to 512 [ 190.859434][ T6780] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 190.875416][ T6778] EXT4-fs: Ignoring removed bh option [ 190.920963][ T6786] netlink: 104 bytes leftover after parsing attributes in process `syz.3.804'. [ 190.955478][ T6780] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 191.039495][ T6778] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 191.150567][ T6780] EXT4-fs (loop4): 1 truncate cleaned up [ 191.173231][ T6780] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 191.450243][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 191.816304][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 192.237146][ T6795] loop1: detected capacity change from 0 to 32768 [ 192.384716][ T6795] XFS (loop1): Mounting V5 Filesystem [ 192.572332][ T6795] XFS (loop1): Ending clean mount [ 192.604726][ T6795] XFS (loop1): Quotacheck needed: Please wait. [ 192.696784][ T6795] XFS (loop1): Quotacheck: Done. [ 192.705154][ T4641] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 192.891798][ T5625] XFS (loop1): Unmounting Filesystem [ 192.904169][ T4641] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 192.925483][ T4641] usb 5-1: config 0 has no interface number 0 [ 192.944340][ T4641] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 192.973932][ T4641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.004288][ T4641] usb 5-1: Product: syz [ 193.014423][ T4641] usb 5-1: Manufacturer: syz [ 193.053619][ T4641] usb 5-1: SerialNumber: syz [ 193.096315][ T6836] loop2: detected capacity change from 0 to 512 [ 193.096863][ T4641] usb 5-1: config 0 descriptor?? [ 193.122125][ T6836] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 193.186337][ T6836] EXT4-fs error (device loop2): ext4_quota_enable:7049: comm syz.2.824: inode #50331648: comm syz.2.824: iget: illegal inode # [ 193.206307][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.825'. [ 193.216562][ T6836] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.824: Bad quota inode: 50331648, type: 2 [ 193.237207][ T6836] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=50331648). Please run e2fsck to fix. [ 193.275332][ T6836] EXT4-fs (loop2): mount failed [ 193.375487][ T6836] afs: Unknown parameter './file0' [ 193.758361][ T4641] asix 5-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 193.780573][ T4641] asix: probe of 5-1:0.251 failed with error -524 [ 193.857119][ T6858] loop2: detected capacity change from 0 to 2048 [ 193.943844][ T6858] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 193.972913][ T4314] usb 5-1: USB disconnect, device number 6 [ 194.019317][ T26] audit: type=1800 audit(1776901692.994:10): pid=6858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.832" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 194.080668][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 194.222109][ T6867] loop2: detected capacity change from 0 to 128 [ 194.272742][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.279192][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.303468][ T6867] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 194.329904][ T6867] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 194.517348][ T6870] loop5: detected capacity change from 0 to 1024 [ 194.570069][ T6870] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.604621][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 194.614231][ T6870] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 194.626504][ T6870] EXT4-fs (loop5): orphan cleanup on readonly fs [ 194.655282][ T6870] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.836: Freeing blocks not in datazone - block = 0, count = 4096 [ 194.689169][ T6870] EXT4-fs (loop5): 1 orphan inode deleted [ 194.696119][ T6870] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 194.779805][ T6881] loop4: detected capacity change from 0 to 64 [ 194.812201][ T6870] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 17: comm syz.5.836: path /76/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 194.848964][ T6881] syz.4.840: attempt to access beyond end of device [ 194.848964][ T6881] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 194.913518][ T6881] Buffer I/O error on dev loop4, logical block 512, async page read [ 194.937156][ T6881] syz.4.840: attempt to access beyond end of device [ 194.937156][ T6881] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 194.964089][ T6870] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 18: comm syz.5.836: path /76/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 194.991392][ T6881] Buffer I/O error on dev loop4, logical block 56576, async page read [ 195.004186][ T6870] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 19: comm syz.5.836: path /76/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 195.039816][ T6870] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 20: comm syz.5.836: path /76/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 195.101875][ T6870] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 21: comm syz.5.836: path /76/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 195.148772][ T6870] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 22: comm syz.5.836: path /76/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 195.185296][ T6870] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 23: comm syz.5.836: path /76/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 195.245078][ T128] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 195.302521][ T5462] EXT4-fs (loop5): unmounting filesystem. [ 195.447056][ T128] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 195.466586][ T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.497722][ T128] usb 3-1: config 0 descriptor?? [ 195.524889][ T128] cp210x 3-1:0.0: cp210x converter detected [ 195.640053][ T6902] binder: 6901:6902 ioctl 400c620e 200000000200 returned -22 [ 195.750816][ T6905] sctp: [Deprecated]: syz.1.849 (pid 6905) Use of int in max_burst socket option deprecated. [ 195.750816][ T6905] Use struct sctp_assoc_value instead [ 195.835247][ T4313] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 195.913537][ T128] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 195.933891][ T128] usb 3-1: cp210x converter now attached to ttyUSB0 [ 196.025143][ T4313] usb 4-1: Using ep0 maxpacket: 8 [ 196.036579][ T4313] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 196.077471][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.095627][ T4313] usb 4-1: Product: syz [ 196.102220][ T4313] usb 4-1: Manufacturer: syz [ 196.108330][ T4313] usb 4-1: SerialNumber: syz [ 196.131007][ T4313] usb 4-1: config 0 descriptor?? [ 196.144783][ T128] usb 3-1: USB disconnect, device number 6 [ 196.168589][ T128] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 196.211206][ T128] cp210x 3-1:0.0: device disconnected [ 196.345768][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 196.351905][ T4272] Bluetooth: hci1: command 0x0406 tx timeout [ 196.369965][ T4313] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 196.529860][ T6918] loop1: detected capacity change from 0 to 8192 [ 196.630673][ T6918] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 196.654246][ T6918] FAT-fs (loop1): Filesystem has been set read-only [ 196.840985][ T6930] loop2: detected capacity change from 0 to 512 [ 196.990479][ T4313] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 197.014788][ T4313] usb 4-1: USB disconnect, device number 8 [ 197.341508][ T6943] comedi comedi3: comedi_test: 38 microvolt, 2047 microsecond waveform attached [ 197.385623][ T35] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 197.553816][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.868'. [ 197.584778][ T35] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 197.607524][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.646913][ T35] usb 5-1: config 0 descriptor?? [ 197.667271][ T35] cp210x 5-1:0.0: cp210x converter detected [ 197.916354][ T4313] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 198.072104][ T35] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 198.100587][ T35] usb 5-1: cp210x converter now attached to ttyUSB0 [ 198.132516][ T4313] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 198.147149][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.155741][ T4313] usb 4-1: Product: syz [ 198.160060][ T4313] usb 4-1: Manufacturer: syz [ 198.200418][ T4313] usb 4-1: SerialNumber: syz [ 198.219910][ T4313] usb 4-1: config 0 descriptor?? [ 198.296716][ T5531] usb 5-1: USB disconnect, device number 7 [ 198.327904][ T5531] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 198.372582][ T5531] cp210x 5-1:0.0: device disconnected [ 198.496675][ T5013] usb 4-1: USB disconnect, device number 9 [ 198.577655][ T6966] gre0 speed is unknown, defaulting to 1000 [ 198.609120][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 198.630442][ T6967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.729225][ T6966] gre0 speed is unknown, defaulting to 1000 [ 198.748854][ T6966] gre0 speed is unknown, defaulting to 1000 [ 199.076778][ T5013] gre0 speed is unknown, defaulting to 1000 [ 199.094416][ T6966] infiniband syz1: set active [ 199.101237][ T6966] infiniband syz1: added gre0 [ 199.212628][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'. [ 199.293580][ T6966] RDS/IB: syz1: added [ 199.362145][ T6966] smc: adding ib device syz1 with port count 1 [ 199.390448][ T6966] smc: ib device syz1 port 1 has pnetid [ 199.419399][ T4313] gre0 speed is unknown, defaulting to 1000 [ 199.440968][ T6966] gre0 speed is unknown, defaulting to 1000 [ 199.521081][ T6971] loop5: detected capacity change from 0 to 32768 [ 199.574791][ T6971] JBD2: Ignoring recovery information on journal [ 199.691738][ T6966] gre0 speed is unknown, defaulting to 1000 [ 199.748398][ T6971] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 199.867265][ T6966] gre0 speed is unknown, defaulting to 1000 [ 199.968400][ T5462] ocfs2: Unmounting device (7,5) on (node local) [ 200.343162][ T6966] gre0 speed is unknown, defaulting to 1000 [ 200.365544][ T7001] loop5: detected capacity change from 0 to 256 [ 200.393251][ T7001] exfat: Deprecated parameter 'namecase' [ 200.432388][ T7001] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x20641574, utbl_chksum : 0xe619d30d) [ 200.485137][ T5531] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 200.504434][ T6983] loop2: detected capacity change from 0 to 32768 [ 200.604800][ T6983] XFS (loop2): Mounting V5 Filesystem [ 200.685097][ T5531] usb 4-1: Using ep0 maxpacket: 16 [ 200.710129][ T5531] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 200.776222][ T5531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.784315][ T5531] usb 4-1: Product: syz [ 200.824154][ T6966] gre0 speed is unknown, defaulting to 1000 [ 200.835078][ T5531] usb 4-1: Manufacturer: syz [ 200.839752][ T5531] usb 4-1: SerialNumber: syz [ 200.885156][ T6983] XFS (loop2): Ending clean mount [ 200.903445][ T6983] XFS (loop2): Quotacheck needed: Please wait. [ 201.031108][ T6983] XFS (loop2): Quotacheck: Done. [ 201.077647][ T5531] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 201.121101][ T5531] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 201.153868][ T6999] loop4: detected capacity change from 0 to 32768 [ 201.162817][ T5531] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 201.192213][ T5531] usb 4-1: media controller created [ 201.236291][ T6999] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.890 (6999) [ 201.262359][ T5531] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.314221][ T6999] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 201.346212][ T6999] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 201.374434][ T6999] BTRFS info (device loop4): turning on sync discard [ 201.396162][ T6999] BTRFS info (device loop4): turning on async discard [ 201.414775][ T6999] BTRFS info (device loop4): using free space tree [ 201.461430][ T4279] XFS (loop2): Unmounting Filesystem [ 201.483799][ T5531] zl10353_read_register: readreg error (reg=127, ret==-71) [ 201.710559][ T5531] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 201.733446][ T5531] usb 4-1: USB disconnect, device number 10 [ 201.798080][ T6999] BTRFS info (device loop4): enabling ssd optimizations [ 201.986228][ T4266] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 202.118898][ T4322] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.167405][ T4322] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.579990][ T5016] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop4 scanned by udevd (5016) [ 202.724502][ T4322] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.741645][ T7038] Bluetooth: MGMT ver 1.22 [ 202.773476][ T4322] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.928752][ T4322] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.949522][ T4322] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.015215][ T128] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 203.167390][ T4322] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.202141][ T4322] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.250707][ T128] usb 2-1: Using ep0 maxpacket: 16 [ 203.262574][ T128] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 203.289131][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.306066][ T7031] loop2: detected capacity change from 0 to 32768 [ 203.315266][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.327117][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.335232][ T128] usb 2-1: Product: syz [ 203.345071][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.362452][ T128] usb 2-1: Manufacturer: syz [ 203.362474][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.376258][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 203.386492][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.439187][ T128] usb 2-1: SerialNumber: syz [ 203.528501][ T7031] XFS (loop2): Mounting V5 Filesystem [ 203.629748][ T7051] gre0 speed is unknown, defaulting to 1000 [ 203.660933][ T128] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 203.760618][ T128] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.825452][ T128] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 203.834036][ T128] usb 2-1: media controller created [ 203.961030][ T128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.045309][ T128] zl10353_read_register: readreg error (reg=127, ret==-71) [ 204.129992][ T128] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 204.182287][ T128] usb 2-1: USB disconnect, device number 9 [ 204.216106][ T7031] XFS (loop2): Ending clean mount [ 204.462046][ T4279] XFS (loop2): Unmounting Filesystem [ 205.164078][ T7051] chnl_net:caif_netlink_parms(): no params data found [ 205.402549][ T7085] loop1: detected capacity change from 0 to 256 [ 205.465358][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 205.480072][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 205.523977][ T7066] loop4: detected capacity change from 0 to 40427 [ 205.532076][ T7085] FAT-fs (loop1): Directory bread(block 64) failed [ 205.543286][ T7085] FAT-fs (loop1): Directory bread(block 65) failed [ 205.606259][ T7085] FAT-fs (loop1): Directory bread(block 66) failed [ 205.621570][ T7066] F2FS-fs (loop4): Found nat_bits in checkpoint [ 205.654329][ T7085] FAT-fs (loop1): Directory bread(block 67) failed [ 205.685479][ T7085] FAT-fs (loop1): Directory bread(block 68) failed [ 205.692193][ T7085] FAT-fs (loop1): Directory bread(block 69) failed [ 205.719940][ T7085] FAT-fs (loop1): Directory bread(block 70) failed [ 205.754904][ T7085] FAT-fs (loop1): Directory bread(block 71) failed [ 205.835203][ T7085] FAT-fs (loop1): Directory bread(block 72) failed [ 205.841839][ T7085] FAT-fs (loop1): Directory bread(block 73) failed [ 206.038624][ T7066] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 206.201389][ T7051] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.224940][ T7051] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.306449][ T7051] device bridge_slave_0 entered promiscuous mode [ 206.347933][ T4266] syz-executor: attempt to access beyond end of device [ 206.347933][ T4266] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 206.453927][ T7107] netlink: 340 bytes leftover after parsing attributes in process `syz.3.916'. [ 206.486209][ T7051] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.503904][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.536334][ T7051] device bridge_slave_1 entered promiscuous mode [ 206.773750][ T7087] loop2: detected capacity change from 0 to 32768 [ 206.785896][ T7114] loop1: detected capacity change from 0 to 512 [ 206.817372][ T7114] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 206.949183][ T7051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.068778][ T7051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.084192][ T7087] XFS (loop2): Mounting V5 Filesystem [ 207.313366][ T7051] team0: Port device team_slave_0 added [ 207.348013][ T7051] team0: Port device team_slave_1 added [ 207.513688][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.561785][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.680284][ T7051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.759245][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.808092][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.884983][ C0] sched: RT throttling activated [ 207.887402][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 207.918672][ T7114] EXT4-fs (loop1): 1 truncate cleaned up [ 207.965227][ T7114] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 208.006004][ T7051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.020835][ T7122] loop3: detected capacity change from 0 to 131072 [ 208.041290][ T7122] F2FS-fs (loop3): invalid crc value [ 208.047347][ T7087] XFS (loop2): Ending clean mount [ 208.070844][ T7122] F2FS-fs (loop3): Found nat_bits in checkpoint [ 208.134716][ T7087] XFS (loop2): Quotacheck needed: Please wait. [ 208.158552][ T7122] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 208.168031][ T7122] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 208.197868][ T26] audit: type=1800 audit(1776901707.174:11): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.920" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 208.226879][ T7122] F2FS-fs (loop3): access invalid blkaddr:36 [ 208.233594][ T7122] CPU: 0 PID: 7122 Comm: syz.3.921 Not tainted syzkaller #0 [ 208.240942][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 208.251329][ T7122] Call Trace: [ 208.254662][ T7122] [ 208.257643][ T7122] dump_stack_lvl+0x188/0x24e [ 208.262402][ T7122] ? show_regs_print_info+0x12/0x12 [ 208.267687][ T7122] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 208.273571][ T7122] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 208.279035][ T7122] f2fs_get_read_data_page+0x40f/0x640 [ 208.284585][ T7122] ? f2fs_reserve_block+0x240/0x240 [ 208.289873][ T7122] ? folio_unlock+0x114/0x2e0 [ 208.294623][ T7122] f2fs_get_new_data_page+0x408/0x600 [ 208.300079][ T7122] ? lock_page+0x2b0/0x2b0 [ 208.304549][ T7122] ? has_not_enough_free_secs+0xe10/0xe10 [ 208.310323][ T7122] ? memset+0x1e/0x40 [ 208.314377][ T7122] f2fs_add_regular_entry+0x585/0xbf0 [ 208.319808][ T7122] f2fs_add_dentry+0xd6/0x1c0 [ 208.324641][ T7122] f2fs_do_add_link+0x1cd/0x2a0 [ 208.329533][ T7122] ? f2fs_add_dentry+0x1c0/0x1c0 [ 208.334531][ T7122] ? up_read+0x20/0x20 [ 208.338637][ T7122] ? f2fs_lookup+0x4be/0x800 [ 208.343328][ T7122] ? down_read+0x1a8/0x2d0 [ 208.347887][ T7122] f2fs_create+0x6d7/0x9e0 [ 208.352371][ T7122] ? f2fs_lookup+0x800/0x800 [ 208.357100][ T7122] path_openat+0x1181/0x2ee0 [ 208.361757][ T7122] ? do_filp_open+0x430/0x430 [ 208.366606][ T7122] do_filp_open+0x1f1/0x430 [ 208.371159][ T7122] ? vfs_tmpfile+0x480/0x480 [ 208.375827][ T7122] ? _raw_spin_unlock+0x24/0x40 [ 208.380738][ T7122] ? alloc_fd+0x58f/0x630 [ 208.385305][ T7122] do_sys_openat2+0x150/0x4b0 [ 208.390134][ T7122] ? do_sys_open+0xe0/0xe0 [ 208.394621][ T7122] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 208.400680][ T7122] ? lock_chain_count+0x20/0x20 [ 208.405588][ T7122] __x64_sys_openat+0x135/0x160 [ 208.410501][ T7122] do_syscall_64+0x4c/0xa0 [ 208.414965][ T7122] ? clear_bhb_loop+0x60/0xb0 [ 208.419690][ T7122] ? clear_bhb_loop+0x60/0xb0 [ 208.424402][ T7122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.430369][ T7122] RIP: 0033:0x7f68eb79c819 [ 208.434816][ T7122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.454463][ T7122] RSP: 002b:00007f68e99f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.462921][ T7122] RAX: ffffffffffffffda RBX: 00007f68eba15fa0 RCX: 00007f68eb79c819 [ 208.471100][ T7122] RDX: 0000000000880cc2 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 208.479213][ T7122] RBP: 00007f68eb832c91 R08: 0000000000000000 R09: 0000000000000000 [ 208.487336][ T7122] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 208.495353][ T7122] R13: 00007f68eba16038 R14: 00007f68eba15fa0 R15: 00007ffd79bc3ea8 [ 208.503371][ T7122] [ 208.554476][ T5625] EXT4-fs (loop1): unmounting filesystem. [ 208.732173][ T7087] XFS (loop2): Quotacheck: Done. [ 208.883118][ T4279] XFS (loop2): Unmounting Filesystem [ 209.008584][ T7142] loop3: detected capacity change from 0 to 1024 [ 209.070807][ T7144] Driver unsupported XDP return value 0 on prog (id 59) dev N/A, expect packet loss! [ 209.242876][ T7051] device hsr_slave_0 entered promiscuous mode [ 209.366766][ T7051] device hsr_slave_1 entered promiscuous mode [ 209.403387][ T7051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.429737][ T7051] Cannot create hsr debugfs directory [ 209.472101][ T7149] loop4: detected capacity change from 0 to 1024 [ 209.478495][ T7151] netlink: 48 bytes leftover after parsing attributes in process `syz.1.926'. [ 209.482782][ T7151] netlink: 48 bytes leftover after parsing attributes in process `syz.1.926'. [ 209.671297][ T7149] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.927: lblock 2 mapped to illegal pblock 2 (length 1) [ 209.789525][ T7149] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 209.828988][ T7149] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.927: lblock 0 mapped to illegal pblock 48 (length 1) [ 209.918721][ T7149] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 209.945260][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 209.962352][ T7149] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.927: Failed to acquire dquot type 0 [ 210.035733][ T7149] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 210.108958][ T7149] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.927: mark_inode_dirty error [ 210.158377][ T7149] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 210.219571][ T7149] EXT4-fs (loop4): 1 orphan inode deleted [ 210.244434][ T7149] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 210.344597][ T7165] loop1: detected capacity change from 0 to 2048 [ 210.421035][ T7165] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 210.559165][ T7165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.882171][ T7165] overlayfs: upper fs needs to support d_type. [ 210.979664][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 211.054208][ T7165] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 211.075598][ T29] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 211.195353][ T7165] overlayfs: failed to set xattr on upper [ 211.201244][ T7165] overlayfs: ...falling back to index=off,metacopy=off. [ 211.247671][ T7166] loop3: detected capacity change from 0 to 131072 [ 211.261060][ T29] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 211.263914][ T7166] F2FS-fs (loop3): Test dummy encryption mode enabled [ 211.315324][ T4322] device hsr_slave_0 left promiscuous mode [ 211.321541][ T7166] F2FS-fs (loop3): invalid crc value [ 211.335825][ T29] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 0 [ 211.372776][ T4322] device hsr_slave_1 left promiscuous mode [ 211.379686][ T7166] F2FS-fs (loop3): Found nat_bits in checkpoint [ 211.422692][ T4266] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 211.469592][ T5625] UDF-fs: error (device loop1): udf_read_inode: (ino 1313) failed !bh [ 211.482143][ T4266] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 211.491786][ T7166] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 211.526457][ T5625] UDF-fs: error (device loop1): udf_read_inode: (ino 1313) failed !bh [ 211.535336][ T4266] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 211.547125][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.585148][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.645984][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.653484][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.703513][ T7182] loop2: detected capacity change from 0 to 256 [ 211.799399][ T4322] device bridge_slave_1 left promiscuous mode [ 211.809443][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.831551][ T7166] fscrypt (loop3, inode 10): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 211.887983][ T7182] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 211.998802][ T4322] device bridge_slave_0 left promiscuous mode [ 212.011720][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.045509][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 212.417831][ T4322] device veth1_macvtap left promiscuous mode [ 212.443191][ T4322] device veth0_macvtap left promiscuous mode [ 212.595498][ T7204] ALSA: mixer_oss: invalid OSS volume '' [ 213.262115][ T7217] loop2: detected capacity change from 0 to 4096 [ 214.129317][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 214.255117][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 214.350345][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.446596][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.084068][ T4322] bond0 (unregistering): Released all slaves [ 215.274920][ T7233] loop2: detected capacity change from 0 to 512 [ 215.314234][ T7233] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 215.329773][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.941'. [ 215.339387][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.941'. [ 215.358527][ T7233] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 215.361889][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.941'. [ 215.384388][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.941'. [ 215.397468][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.941'. [ 215.407468][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.941'. [ 215.417815][ T7233] EXT4-fs (loop2): 1 truncate cleaned up [ 215.423636][ T7233] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 215.804639][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 215.859422][ T7051] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 215.960963][ T7051] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 216.007236][ T7051] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 216.032156][ T7051] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 216.461866][ T7051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.522282][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.547004][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.587365][ T7260] loop4: detected capacity change from 0 to 1024 [ 216.618016][ T7051] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.658626][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.695350][ T9] hfsplus: b-tree write err: -5, ino 25 [ 216.708750][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.718284][ T9] hfsplus: b-tree write err: -5, ino 4 [ 216.739363][ T9] hfsplus: b-tree write err: -5, ino 2 [ 216.758616][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.763926][ T7254] loop3: detected capacity change from 0 to 4096 [ 216.766028][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.957988][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.967130][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.028404][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.058586][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.066019][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.108218][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.117349][ T7267] netlink: 248 bytes leftover after parsing attributes in process `syz.4.964'. [ 217.144123][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.166954][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.196637][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.277348][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.295186][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.305944][ T4272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.316989][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.324550][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.333932][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.531749][ T4322] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.649432][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.684373][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.702244][ T7281] loop3: detected capacity change from 0 to 64 [ 217.712747][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.781359][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.836024][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.991318][ T4322] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.019982][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.041716][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.081222][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.184453][ T4322] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.209935][ T7269] gre0 speed is unknown, defaulting to 1000 [ 218.324722][ T4322] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.351149][ T4638] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 218.364418][ T7293] loop2: detected capacity change from 0 to 256 [ 218.467837][ T7293] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d) [ 218.546954][ T4638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.588575][ T4638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.645108][ T4638] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 218.684811][ T4638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.721429][ T4638] usb 4-1: config 0 descriptor?? [ 218.755305][ T5531] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 218.959433][ T5531] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.970038][ T5531] usb 5-1: config 0 has no interface number 0 [ 218.987675][ T5531] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 219.008144][ T5531] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 219.031992][ T5531] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 219.054565][ T5531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.066344][ T5531] usb 5-1: config 0 descriptor?? [ 219.073099][ T7296] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 219.106753][ T5531] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 219.296594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.311476][ T4317] usb 5-1: USB disconnect, device number 8 [ 219.320326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.385299][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 219.418502][ T4638] razer 0003:1532:010E.0009: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 219.512706][ T7051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.640102][ T4313] usb 4-1: USB disconnect, device number 11 [ 219.757900][ T7269] chnl_net:caif_netlink_parms(): no params data found [ 219.854661][ T7315] fido_id[7315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 220.133610][ T7269] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.165860][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.201366][ T7269] device bridge_slave_0 entered promiscuous mode [ 220.308736][ T7332] loop4: detected capacity change from 0 to 1024 [ 220.332705][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.376974][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.398635][ T7332] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 220.437715][ T7269] device bridge_slave_1 entered promiscuous mode [ 220.538159][ T4322] infiniband syz1: set down [ 220.569202][ T75] smc: removing ib device syz1 [ 220.581843][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 220.602629][ T4638] gre0 speed is unknown, defaulting to 1000 [ 220.619148][ T7269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.686490][ T7269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.762068][ T7339] loop3: detected capacity change from 0 to 4096 [ 220.822761][ T7339] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 220.854716][ T7269] team0: Port device team_slave_0 added [ 220.896919][ T7339] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 220.933321][ T7269] team0: Port device team_slave_1 added [ 220.990266][ T7339] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 221.043742][ T7339] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 221.052640][ T7269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.117303][ T7269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.155092][ T7339] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 221.195059][ T7339] ntfs: volume version 3.1. [ 221.237432][ T7339] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 221.269318][ T7269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.282672][ T7339] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 221.328967][ T7339] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 221.376698][ T7339] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 221.421561][ T7339] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 221.465245][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 221.553786][ T7269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.604191][ T7350] loop2: detected capacity change from 0 to 32768 [ 221.609673][ T7269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.667310][ T7350] JBD2: Ignoring recovery information on journal [ 221.720097][ T7350] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 221.777878][ T7269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.789151][ T7350] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 0 but claims that 2046 are free [ 221.789596][ T7350] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 221.789612][ T7350] OCFS2: File system is now read-only. [ 221.789627][ T7350] (syz.2.984,7350,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 221.789874][ T7350] (syz.2.984,7350,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 221.789903][ T7350] (syz.2.984,7350,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 221.789929][ T7350] (syz.2.984,7350,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 221.789954][ T7350] (syz.2.984,7350,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 221.789979][ T7350] (syz.2.984,7350,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 221.790004][ T7350] (syz.2.984,7350,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 221.790030][ T7350] (syz.2.984,7350,1):ocfs2_mknod:385 ERROR: status = -30 [ 221.792933][ T7350] (syz.2.984,7350,1):ocfs2_mknod:502 ERROR: status = -30 [ 221.899194][ T7350] (syz.2.984,7350,1):ocfs2_create:676 ERROR: status = -30 [ 222.057575][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.087164][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.168415][ T4279] ocfs2: Unmounting device (7,2) on (node local) [ 222.259009][ T7269] device hsr_slave_0 entered promiscuous mode [ 222.336717][ T7269] device hsr_slave_1 entered promiscuous mode [ 222.378748][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.427555][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.535609][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.589618][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.627128][ T7051] device veth0_vlan entered promiscuous mode [ 222.690347][ T7051] device veth1_vlan entered promiscuous mode [ 222.740075][ T7365] loop4: detected capacity change from 0 to 4096 [ 223.023118][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.042059][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 223.085779][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.125814][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.178152][ T7051] device veth0_macvtap entered promiscuous mode [ 223.250149][ T4266] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 223.284364][ T4266] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 223.296840][ T7051] device veth1_macvtap entered promiscuous mode [ 223.388019][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.466277][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.531129][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.545169][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 223.557458][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.572170][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.585135][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.610701][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.637700][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.683186][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.713128][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.762637][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.808637][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.872931][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.899842][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.922765][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.934401][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.947353][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.977744][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.073901][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.114596][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.149551][ T7051] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.194243][ T7051] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.235015][ T7051] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.243809][ T7051] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.366891][ T7369] loop2: detected capacity change from 0 to 40427 [ 224.386912][ T7369] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 224.394208][ T7369] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 224.436860][ T7369] F2FS-fs (loop2): Unrecognized mount option "flush_QVºe" or missing value [ 224.688916][ T7269] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 224.777320][ T7269] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 224.832480][ T7401] pimreg: tun_chr_ioctl cmd 2148553947 [ 225.003859][ T7409] loop2: detected capacity change from 0 to 1024 [ 225.159158][ T7269] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 225.210208][ T7269] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 225.465099][ T4322] device hsr_slave_0 left promiscuous mode [ 225.485591][ T4322] device hsr_slave_1 left promiscuous mode [ 225.499536][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.525889][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.655249][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 225.749573][ T7421] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1008'. [ 225.780567][ T7421] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1008'. [ 226.161129][ T7428] loop3: detected capacity change from 0 to 128 [ 226.190662][ T7428] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 226.243829][ T7428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.323769][ T7428] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 226.525774][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.535305][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.584415][ T7418] loop4: detected capacity change from 0 to 131072 [ 226.595880][ T7418] F2FS-fs (loop4): Test dummy encryption mode enabled [ 226.603766][ T7418] F2FS-fs (loop4): invalid crc value [ 226.619055][ T4322] device bridge_slave_1 left promiscuous mode [ 226.636168][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.681318][ T7418] F2FS-fs (loop4): Found nat_bits in checkpoint [ 226.732651][ T7418] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 226.754147][ T4322] device bridge_slave_0 left promiscuous mode [ 226.761366][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.822889][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 226.957085][ T7418] fscrypt (loop4, inode 10): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 227.065586][ T4322] device veth1_macvtap left promiscuous mode [ 227.072107][ T4322] device veth0_macvtap left promiscuous mode [ 227.105416][ T4322] device veth1_vlan left promiscuous mode [ 227.111857][ T4322] device veth0_vlan left promiscuous mode [ 227.500530][ T7453] loop4: detected capacity change from 0 to 1024 [ 227.540435][ T7453] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.571562][ T7453] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 227.629989][ T7453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 227.665146][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 227.730592][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 227.885162][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 227.913739][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.942861][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.979655][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 227.999209][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.029087][ T7461] loop2: detected capacity change from 0 to 512 [ 228.033508][ T7] usb 4-1: config 0 descriptor?? [ 228.064210][ T7] hub 4-1:0.0: USB hub found [ 228.169923][ T7463] overlayfs: invalid origin (0000006f7665726c61790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 228.279307][ T7] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 228.705932][ T7] hid-generic 0003:046D:C31C.000A: item fetching failed at offset 0/1 [ 228.714759][ T7] hid-generic: probe of 0003:046D:C31C.000A failed with error -22 [ 229.015437][ T4907] usb 4-1: USB disconnect, device number 12 [ 229.363715][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 229.544491][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 229.692450][ T7478] loop3: detected capacity change from 0 to 2048 [ 229.701892][ T7478] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 229.726585][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.732252][ T7478] NILFS (loop3): mounting unchecked fs [ 229.755680][ T7478] NILFS (loop3): recovery complete [ 229.770946][ T7481] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.967905][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.559765][ T7494] loop3: detected capacity change from 0 to 4096 [ 230.580259][ T7494] EXT4-fs: Ignoring removed i_version option [ 230.602961][ T7494] EXT4-fs: Ignoring removed oldalloc option [ 230.631886][ T7494] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.658328][ T7494] EXT4-fs (loop3): Test dummy encryption mode enabled [ 230.701090][ T7494] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 231.036135][ T4322] bond0 (unregistering): Released all slaves [ 231.256977][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.289546][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.362949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.453665][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 231.472999][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.481533][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.523626][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 231.668342][ T7269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.767923][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.786633][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.819821][ T7269] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.848077][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.859288][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.869512][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.876728][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.895821][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.911118][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.923555][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.931018][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.002977][ T7512] sch_tbf: burst 0 is lower than device wg0 mtu (1420) ! [ 232.048121][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.073975][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.184323][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.222547][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.264857][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.285080][ T4914] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 232.307317][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.317013][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.348405][ T7522] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1049'. [ 232.369286][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1049'. [ 232.389575][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.401555][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.469643][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.502535][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.510692][ T4914] usb 4-1: Using ep0 maxpacket: 8 [ 232.518533][ T4914] usb 4-1: config index 0 descriptor too short (expected 26, got 18) [ 232.558297][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.570622][ T4914] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 232.589908][ T4914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.607459][ T4914] usb 4-1: Product: syz [ 232.615243][ T4914] usb 4-1: Manufacturer: syz [ 232.619912][ T4914] usb 4-1: SerialNumber: syz [ 232.655938][ T4914] usb 4-1: config 0 descriptor?? [ 232.678757][ T4914] gspca_main: sq930x-2.14.0 probing 2770:930c [ 233.262418][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.471044][ T4914] gspca_sq930x: ucbus_write failed -71 [ 233.725279][ T4914] gspca_sq930x: Sensor ov9630 not yet treated [ 233.731484][ T4914] sq930x: probe of 4-1:0.0 failed with error -22 [ 233.765573][ T4914] usb 4-1: USB disconnect, device number 13 [ 233.867399][ T4322] wlan1: Trigger new scan to find an IBSS to join [ 233.948834][ T4333] ------------[ cut here ]------------ [ 233.954859][ T4333] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 233.966482][ T4333] WARNING: CPU: 0 PID: 4333 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 233.976685][ T4333] Modules linked in: [ 233.980661][ T4333] CPU: 0 PID: 4333 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 233.988457][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 233.998606][ T4333] Workqueue: events_unbound cfg80211_wiphy_work [ 234.004928][ T4333] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 234.011419][ T4333] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 e0 b9 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 0b c6 a4 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 234.031671][ T4333] RSP: 0000:ffffc900045df400 EFLAGS: 00010246 [ 234.037841][ T4333] RAX: 99c9b2c86ca38600 RBX: 000000000000000c RCX: ffff88807c5bbb80 [ 234.046282][ T4333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 234.054333][ T4333] RBP: 0000000000000084 R08: ffffc900045df087 R09: 1ffff920008bbe10 [ 234.062417][ T4333] R10: dffffc0000000000 R11: fffff520008bbe11 R12: 0000000000000020 [ 234.070492][ T4333] R13: dffffc0000000000 R14: ffff888020a2b358 R15: ffff88805cfa9168 [ 234.078622][ T4333] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 234.087945][ T4333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.094613][ T4333] CR2: 00007f2914fe5d58 CR3: 00000000658ba000 CR4: 00000000003506f0 [ 234.102735][ T4333] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.110816][ T4333] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.119096][ T4333] Call Trace: [ 234.122429][ T4333] [ 234.125475][ T4333] rate_control_send_low+0x194/0x790 [ 234.130851][ T4333] rate_control_get_rate+0x207/0x5c0 [ 234.136283][ T4333] ieee80211_tx_h_rate_ctrl+0xb1a/0x1750 [ 234.141999][ T4333] ? ieee80211_tx_h_select_key+0x17b0/0x17b0 [ 234.148142][ T4333] ? ieee80211_queue_skb+0xc2/0x21c0 [ 234.153497][ T4333] invoke_tx_handlers_late+0xb6/0x1810 [ 234.159079][ T4333] ? ieee80211_tx_h_select_key+0x126d/0x17b0 [ 234.165160][ T4333] ? sta_info_get+0x289/0x2a0 [ 234.169913][ T4333] ? invoke_tx_handlers_early+0xa11/0x1d40 [ 234.175851][ T4333] ieee80211_tx+0x2d4/0x460 [ 234.180426][ T4333] ? ieee80211_skb_resize+0x630/0x630 [ 234.185924][ T4333] ? ieee80211_set_qos_hdr+0x1c6/0x510 [ 234.191450][ T4333] ? __bpf_trace_tasklet+0x10/0x10 [ 234.196695][ T4333] ? ieee80211_xmit+0x30c/0x3f0 [ 234.201620][ T4333] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 234.207724][ T4333] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 234.213601][ T4333] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 234.220073][ T4333] ieee80211_scan_state_send_probe+0x560/0x930 [ 234.226440][ T4333] ieee80211_scan_work+0x4d3/0x1bc0 [ 234.231708][ T4333] ? _raw_spin_lock_irq+0xb7/0xf0 [ 234.237358][ T4333] ? _raw_spin_lock_irqsave+0x100/0x100 [ 234.243340][ T4333] cfg80211_wiphy_work+0x221/0x260 [ 234.248595][ T4333] ? process_one_work+0x7b0/0x1160 [ 234.253874][ T4333] process_one_work+0x8a2/0x1160 [ 234.259061][ T4333] ? worker_detach_from_pool+0x240/0x240 [ 234.264861][ T4333] ? _raw_spin_lock_irq+0xb7/0xf0 [ 234.270025][ T4333] ? _raw_spin_lock_irqsave+0x100/0x100 [ 234.275668][ T4333] ? kthread_data+0x4b/0xc0 [ 234.280257][ T4333] worker_thread+0xaa2/0x1270 [ 234.285068][ T4333] ? __kthread_parkme+0x162/0x1c0 [ 234.290173][ T4333] kthread+0x29d/0x330 [ 234.294290][ T4333] ? worker_clr_flags+0x1a0/0x1a0 [ 234.299420][ T4333] ? kthread_blkcg+0xd0/0xd0 [ 234.304065][ T4333] ret_from_fork+0x1f/0x30 [ 234.308625][ T4333] [ 234.311750][ T4333] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 234.319213][ T4333] CPU: 0 PID: 4333 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 234.326816][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 234.336923][ T4333] Workqueue: events_unbound cfg80211_wiphy_work [ 234.343409][ T4333] Call Trace: [ 234.346729][ T4333] [ 234.349701][ T4333] dump_stack_lvl+0x188/0x24e [ 234.354445][ T4333] ? memcpy+0x3c/0x60 [ 234.358574][ T4333] ? show_regs_print_info+0x12/0x12 [ 234.363946][ T4333] ? load_image+0x400/0x400 [ 234.368509][ T4333] panic+0x2e5/0x730 [ 234.372455][ T4333] ? bpf_jit_dump+0xd0/0xd0 [ 234.377014][ T4333] ? ret_from_fork+0x1f/0x30 [ 234.381669][ T4333] __warn+0x2f8/0x4f0 [ 234.385710][ T4333] ? __rate_control_send_low+0x635/0x880 [ 234.391402][ T4333] ? __rate_control_send_low+0x635/0x880 [ 234.397089][ T4333] report_bug+0x2ba/0x4f0 [ 234.401471][ T4333] ? __rate_control_send_low+0x635/0x880 [ 234.407143][ T4333] handle_bug+0x3a/0x70 [ 234.411347][ T4333] exc_invalid_op+0x16/0x40 [ 234.415975][ T4333] asm_exc_invalid_op+0x16/0x20 [ 234.420861][ T4333] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 234.427137][ T4333] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 e0 b9 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 0b c6 a4 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 234.446957][ T4333] RSP: 0000:ffffc900045df400 EFLAGS: 00010246 [ 234.453070][ T4333] RAX: 99c9b2c86ca38600 RBX: 000000000000000c RCX: ffff88807c5bbb80 [ 234.461264][ T4333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 234.469292][ T4333] RBP: 0000000000000084 R08: ffffc900045df087 R09: 1ffff920008bbe10 [ 234.477397][ T4333] R10: dffffc0000000000 R11: fffff520008bbe11 R12: 0000000000000020 [ 234.485498][ T4333] R13: dffffc0000000000 R14: ffff888020a2b358 R15: ffff88805cfa9168 [ 234.493624][ T4333] rate_control_send_low+0x194/0x790 [ 234.499057][ T4333] rate_control_get_rate+0x207/0x5c0 [ 234.504471][ T4333] ieee80211_tx_h_rate_ctrl+0xb1a/0x1750 [ 234.510154][ T4333] ? ieee80211_tx_h_select_key+0x17b0/0x17b0 [ 234.516376][ T4333] ? ieee80211_queue_skb+0xc2/0x21c0 [ 234.521724][ T4333] invoke_tx_handlers_late+0xb6/0x1810 [ 234.527228][ T4333] ? ieee80211_tx_h_select_key+0x126d/0x17b0 [ 234.533234][ T4333] ? sta_info_get+0x289/0x2a0 [ 234.538099][ T4333] ? invoke_tx_handlers_early+0xa11/0x1d40 [ 234.543948][ T4333] ieee80211_tx+0x2d4/0x460 [ 234.548482][ T4333] ? ieee80211_skb_resize+0x630/0x630 [ 234.553887][ T4333] ? ieee80211_set_qos_hdr+0x1c6/0x510 [ 234.559381][ T4333] ? __bpf_trace_tasklet+0x10/0x10 [ 234.564547][ T4333] ? ieee80211_xmit+0x30c/0x3f0 [ 234.569429][ T4333] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 234.575438][ T4333] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 234.581318][ T4333] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 234.587688][ T4333] ieee80211_scan_state_send_probe+0x560/0x930 [ 234.593900][ T4333] ieee80211_scan_work+0x4d3/0x1bc0 [ 234.599145][ T4333] ? _raw_spin_lock_irq+0xb7/0xf0 [ 234.604371][ T4333] ? _raw_spin_lock_irqsave+0x100/0x100 [ 234.609993][ T4333] cfg80211_wiphy_work+0x221/0x260 [ 234.615183][ T4333] ? process_one_work+0x7b0/0x1160 [ 234.620608][ T4333] process_one_work+0x8a2/0x1160 [ 234.625608][ T4333] ? worker_detach_from_pool+0x240/0x240 [ 234.631561][ T4333] ? _raw_spin_lock_irq+0xb7/0xf0 [ 234.636642][ T4333] ? _raw_spin_lock_irqsave+0x100/0x100 [ 234.642662][ T4333] ? kthread_data+0x4b/0xc0 [ 234.647647][ T4333] worker_thread+0xaa2/0x1270 [ 234.652461][ T4333] ? __kthread_parkme+0x162/0x1c0 [ 234.657549][ T4333] kthread+0x29d/0x330 [ 234.661647][ T4333] ? worker_clr_flags+0x1a0/0x1a0 [ 234.666722][ T4333] ? kthread_blkcg+0xd0/0xd0 [ 234.671540][ T4333] ret_from_fork+0x1f/0x30 [ 234.676036][ T4333] [ 234.679231][ T4333] Kernel Offset: disabled [ 234.683719][ T4333] Rebooting in 86400 seconds..