last executing test programs: 47.844415701s ago: executing program 4 (id=116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000002800018014000280080001000f02000061fe0300ff0300000d0001"], 0x3c}}, 0x0) 47.605958364s ago: executing program 4 (id=120): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)={[{@umask={'umask', 0x3d, 0x4}}, {}, {@nls={'nls', 0x3d, 'macgreek'}}, {@uid}, {@nobarrier}, {@nobarrier}]}, 0x20, 0x6de, &(0x7f0000000840)="$eJzs3U9sW3cdAPDvsx0n7qTMG+1WEFKjVVSwQpvEjBYJiYIQymGCSlx2DW26RnWyKslQWiHqAYMjnFAPOwyhcNgJcUAa4oAYZyQk7r1X4sCt4oDRe34vsZ3Esds4abvPR3p+v+f3+/N9X//es/3SygF8ai28FROtSGLh/Jub6faDrUbzwVZjpShHxGRElCIqnVUkqxHJJxFXorPEZ9Mn8+6S/cZ54+HHH5y7/1Gjs1XJl6x+aVC7He0BI7TyJWYiopyvR1TZr79re/R3b6Suk+2404SdLRIHx629S2uU5kOct8DT7l5EeWKP5+sRJyJiKv8cEPnVoXTE4R26ka5yAAAA8HQqH1ThxUfxKDZj+mjCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdD0vnNwCRfSkV5JpL89/+/n1fLVKvHG+4BvnzA/vdvHFEgAAAAAAAAAHD4JnaKZx7Fo9iM6WK7nWR/838t2ziZPb4Q78Z6LMVaXIjNWIyN2Ii1mIuYmO7qs7q5uLGxNre75W8ibdlut+/lLecjor6r5fyYjxkAAAAAAAAAnm8/jYWYPu4gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgWxJR7qyy5WRRrkepEhFTEVFN67Ui/lKUn2V/Pe4AAAAAYPxq+Xo6+V+n0E6y7/yvZN/7p+LdWI2NWI6NaMZSXM/uBXS+9Zf+2Wo0H2w1VtJld8ff+vdIcWQ9RkQ53ttn5NmsxqntFgvx3fhBnI+ZuBprsRw/isXYiKWYiVp6ELEYSdRrnbsX9SLO3njLeVdXekK52h/bmb7t01kktbgRy1lsF+JateitlNVI4nTXaH+qRvRl6L00O8k3c0Pm6HrX6/Xr/L5Mrv3ikH2MRz078ontjMymuc+z8dLeuS+MOE/6R5qL0vY9qJM7o6Sb/SMVOf/hKDk/ka/TXP+iN+eHbcRbaf2ZmI9SPvsiXunN+e0v3H+5t/GX/vW3qzdLq7du3lg/P8ZDGquJotCfiUZXJl4dPPvyTDTTTLSGz8RE/xNTT3Ach6iaZ6NzYRvuavmdrLQYr3VNwXfieizFpZiNubgcs/H1mI9Gzww71ZPXSmOlNyfZuVbafX2rDQj+7Be7Kv3ygMpHK83LS1157b7S1bN9+TNXfhWzXVl6efDse5x3gcrn8kI6xs+233GeBj2ZyK/NRXTFG9Q+mfhtO31cb67eWru5eHvI8c7l6/S0fb/32vy7Jz6YJ5LOl/SKW8m2spzUivmS7vvMdrS9+armf3HptCvt2ndqe189pmM5vrfvmVrNP8Pt7qmz79U99zWyfae79vV8yol3opl9CukzczRZBWBoJ14/Ua09rP2j9mHt57WbtTenvj15efLz1Zj4e+XP5T+Ufl/6RvJ6fBg/ienjjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4H63fu3lpsNpfWxlioPuZYUTqwztYLw3UY9YjBYyV5oTrubDwFhf9MDcxGLcY0+h8jYkCd6hMPkYx/PqcT+VA6LH44LXumXR6heaVotXedSqxP7fcKTu687lG/tdj8b7unTi26ThngOXdxY+X2xfU7d7+yvLL49tLbS6vzly9dvtT42txXL95Ybi7Ndh6PO0pgHNbv3C0fdwwAAAAAAAAAAADAaPJ//b/x2P+ZoXJAnera+t4jnznqQwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeUQtvxUQrkpibvTCbbj/YajTTpSjv1KxERCkikh9HJJ9EXInOEvWu7pL9xnnj4ccfnLv/UWOnr0pRvzSo3XBa+RIzEVHO1web3KOb3f1d6+qv9VjhJdtHmCbsbJE4OG7/DwAA//9tSfWT") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 47.16135358s ago: executing program 4 (id=126): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) ppoll(&(0x7f0000002040)=[{r0, 0x8000}, {r0, 0x80bc}], 0x2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) 46.069705094s ago: executing program 4 (id=141): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 44.078271229s ago: executing program 4 (id=159): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) 43.723552954s ago: executing program 4 (id=160): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x2, 0x4) 28.677503565s ago: executing program 32 (id=160): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x2, 0x4) 4.598607881s ago: executing program 2 (id=453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 4.305322545s ago: executing program 5 (id=454): capset(&(0x7f0000000300)={0x20071026}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffc4c}) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="2ff8a81b133d", 0x0, 0x0, 0x34, 0x0, 0x0}) 4.225037736s ago: executing program 2 (id=455): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000700)={0x5, 0x2, 0x80, 0x0, 0x11}) 4.190160877s ago: executing program 3 (id=456): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 3.93197194s ago: executing program 5 (id=457): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) 3.840134261s ago: executing program 3 (id=459): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f00000003c0)=ANY=[], 0x1, 0x11dc, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xb, 0x8509) 3.834771651s ago: executing program 2 (id=460): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f00000001c0)='./file3\x00', 0x8c48, &(0x7f0000000000)={[{@noacl}, {@cache_strategy_disabled}, {@cache_strategy_disabled}, {@dax_always}, {@dax_never}, {@dax_never}]}, 0x1, 0x174, &(0x7f00000003c0)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f00000026c0)={0x2020}, 0x2020) 3.712915973s ago: executing program 0 (id=461): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000067274d7b0c0001006d4163766c616e00300002db6fa14e2c4421e700100005800a000400aaaaaaaa"], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x81, 0x1800}], 0x1, &(0x7f0000000080)={0x77359400}) 3.495907455s ago: executing program 5 (id=462): syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000000100)=ANY=[], 0xfe, 0x60aa, &(0x7f000000d780)="$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") creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.348250637s ago: executing program 2 (id=463): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 3.317328658s ago: executing program 0 (id=464): migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x8000000000000001, &(0x7f0000000240)=0x1) setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0x20080000005}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) 2.967019273s ago: executing program 2 (id=465): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x60e, 0xfff}) 2.872139224s ago: executing program 0 (id=466): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a000100000000000000000002002000", @ANYRES32=0x0, @ANYBLOB="00000000040001"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2.719685285s ago: executing program 3 (id=468): sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "6c6ab6b9f763ea17fa4318a162718121827069a2cb098ab7880869564a4ae516289e3106a111eb671f3216d17cec656918ed17d0b001938cc97be148a579c18f"}, 0x48}}, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000080)=""/4096, &(0x7f0000000040)=0x1000) 2.516036058s ago: executing program 0 (id=469): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x698a}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffff3}]}}]}, 0x40}}, 0x0) 2.37624059s ago: executing program 3 (id=471): r0 = syz_io_uring_setup(0x130, &(0x7f0000000000)={0x0, 0x4590, 0x800, 0xfffffffc, 0x31d}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x20040800, 0x1}) io_uring_enter(r0, 0x47f4, 0x1386, 0xc, 0x0, 0x0) 2.172056412s ago: executing program 0 (id=472): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f0000000380)='1'}, {0x2, 0x200, 0x0, 0x0}], 0x2}) 2.057056084s ago: executing program 3 (id=473): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x43, &(0x7f0000001e40)=ANY=[], 0xff, 0x5ef1, &(0x7f0000000c80)="$eJzs3U9vHGcdB/Df/vHa3rZpVKEqRBzcFEpLaf4nUP415cABDiChnknkulUgBZQERKuIuMoBcQFeAlx64dC3wAvoa0C8ACLZPfVAGTT28yTj9TprY3tn7efzkTYzv3l2vM/k6/H+mZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIH/7gpxc6EXH9t2nByYinoxfRjVis66WoZ67l+/cj4lRsNMfzEdGbj6jX3/jn2YjLEfHJiYi19XvL9eKLu+zHlfN3b3/+o+//8w9/fnDq52//7KPR9p984dLHf7wfcfLHr3/8+f2D2XYAAAAoRVVVVSe9zT+d3t932+4UADAV+fm/SvJytVqtVh9o/afuXu7/9FNt91d9TOumarz7zSIiVpvr1K8ZHI4HgCNmNT5ruwu0SP5F60fEU213AphpnbY7wKFYW7+33En5dprPB0ub7flzyi35r3YeXd+x03SS0XNMpvX79SB68dwO/VmcUh9mSc6/O5r/9c32QbrfYec/LTvlP9i89Kk4Of/eaP4jtuT/l4g4svl3x+Zfqpx/fy/5r/aO8P4vfwAAAAAAjr/8+f/Jlo//zu9/U3blScd/l6bUBwAAAAAAAAA4aPsd/+8R4/8BAADAzKrfq9f+euLxsp2+i61e/lYn4pmR+wOFWWp8OSAAAAAAAAAAAAAAMB39iGE6r38uIp4ZDquqqm+PzUdEtS/D/a1+5JW+/VCytv/IAwDApk9OjFzL34lYiIi30nf9zQ2Hw6paWBxWw2pxPr+eHcwvVIuN97V5Wi+bH+ziBXF/UNU/bKGxXtOk98uT2kd/Xv1Yg6q3i45NR4uBA0D6XD9izTPSMVNVz+7zmA2lsP8fP/Z/dqPt31MAAADg8FVVVXXS13mfTsf8u213CgCYivz8P3pcQK1Wq4upP91cODP9UasPsW6qxrvfLCJitblO/ZrBcPwAcMSsxmdtd4EWyb9o/Yg41XYngJnWabsDHIq19XvLnZRvp/l8sLTZns8F2ZL/amdjvbz+uOkko+eYTOv360H04rkd+vP8lPowS3L+3dH8r2+25yH+Dzv/adkp/3o7T7bQn7bl/Huj+Y84Pvl3x+Zfqpx/f0/59+QPAAAAAAAzLH/+f9Lx37zJAAAAAAAAAHDkrK3fW87Xvebj/18ac79Oc871n8dGzr+z6/xd/3uc5Py7o/mPnJDTa8w/fPNx/p+u31v+6O6/v5inM5//XG9QP/Zcp9vrp3N+qrl34mbcipU4v+3+/S3tF7a1z21pvzih/dK29kHdvpjbz8Zy/CpuxduP2ucnnBi1MKG9mtCe8+/Z/4uU8+83bnX+w9TeGZnWHn7Y3bbfN6fjHufa3//z0va9a/oeRO/RtjXV23emhf5s/J88NYjf3Fm5ffZ3N+7evX0h0mTL0ouRJgcs5z+Xbjn/l1/cbM9/95v768MPB3vOf1Y8iP6O+b/YmK+395Up960NOf9BuuX88zPQ+P3/KOe/8/7/agv9AQAAAAAAAAAAAAAAgCepqmrjEtFrEXE1Xf/T1rWZAMB05ef/KsnL1Wq1Wq1WH7+6qRrvjWYREf9orlO/Zvj9uB8GAMyy/0bEv9ruBK2Rf8Hy9/3V0y+33Rlgqu68/8Evbty6tXL7Tts9AQAAAAAAAAD+X3n8z6XG+M8b5wGNjBu9ZfzXN2PpyI7/2R30NsY6Txv0Qjx5/O8z8eTxv/sTHm9uQvtgQvv8hPaFCe1jL/RoyPm/kDLO+Z9OG1bS+K8vt9CftuX8z6SxnnP+Xx25XzP/6m9HOf/ulvzP3X3v1+fuvP/Bazffu/Huyrsrv7xw/urlS1cuX7py5dw7N2+tnN/8t8UeH66cfx772nmgZcn558zlX5ac/1dSLf+y5PxfSrX8y5Lzz6/35F+WnH9+7yP/suT8X0m1/MuS8/9aquVflpz/q6mWf1ly/l9PtfzLkvN/LdXyL0vO/2yq5V+WnP+5VMu/LDn/fIRL/mXJ+eczG+Rflpz/xVTLvyw5/0upln9Zcv6XUy3/suT8r6Ra/mXJ+V9NtfzLkvP/RqrlX5ac/zdTLf+y5PxfT7X8y5Lz/1aq5V+WnP+3Uy3/suT8v5Nq+Zcl5//dVMu/LDn/76Va/mXJ+b+R6v5iyx1iqh5//7+ZPc8MZ6MbZswc/Ezbf5kAAAAAAAAAAAAAgFHTOJ247W0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd3cxcpX3GcDPftlrQ4IbCAHigG2+DCzsrr/AIQaThJSSflAS0qYlNY53bZz4q941AYTKptCWKEhFai/oRdMkSqNIbQWqIjWVaITUSO1dc9WIm6iVcuELqByUVEoV2OrMed/XM7OzM+u113vmnN8P2X/vzpmZd86cmZ1n0TMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLPNH5v+s4Esy/I/jb82ZNml+b/XZXvzL+d2rfYKAQAAgPP1TuPvv78sfWPvEs7UtM2/Xfsf352fn5/PPv/26Xf/Yn4+nbApy4bWZlnjtOjff/Hz+eZtguey0YHBpq8He1z9UI/Th3ucPtLj9DU9Tl/b4/TRHqcv2AELrCt+H9O4sBsa/9xQ7NLsimykcdoNHc713MDawcH4u5yGgcZ55kcOZoezI9l0NrHgPAON/7Lstc35dT2QxesabLqujVmWnfnpMwfiGgbCPr4ha7myhub77q37sk1v//SZA9+effPqTrPnbliw0izbuiVf5/NZdvbXVdlAtjbtk7jOwaZ1buywzqGWdQ40zpf/u32dZ5a4zni7R8M6f9hlnRvD9568PsuyuWzRbdo9lw1m69uuNe3v0eKIyC8jvyvflw2f03GyeQnHSX6en1zfepy0H5Nx/28O+2R4kTU03x1vfXnNgv2+3OMkv9VlOFbzy34ov9LR0eZfrbYcq/k2z9y4+DHQ8b7rcAykY7npGNjS6xgYXDPUOAYGz655S8sxMLngPIPZQOO6Tt/Y/RgYnz16YnzmqadvP3x0/6HpQ9PHJid27di+c8f2nTvHDx4+Mj1R/H1uu7SPrM8G0zG4JTzXxGPw5rZtmw/J+W9cuMfBaEkeB/lt//RN+YIuHcwWOcbzbZ7fev6Pg/Rzv+lxMNz0OOj4nNrhcTC8hMdBvs2ZrUv7mTnc9KfTGlbquXBD0zGwmj8P8+t89JbFnws3hnW9cOu5/jwcWnAMxJs1EB57+XfS673Ru8J+WXhcXJOfcMma7NTM9Mk7ntw/O3tyMgvjori86b5qP17WN92mbMHxMnjOx8vev/vlTdd0+P6GsK9Gb+t+X+Xb7Bjrfl81nt0778+W727LwrjALvb+7PTTLN+fKUt02Z/5Ns/ffv6vBVMuaXr+G+n1/Dc0Mlw8/w2lvTHS8vy38K4Zaqwsy87cvrTnv5Hw52I//11Rkue/fF89ekf3YyDf5oXxcz0Ghrs+/10f5kBYzy0hMYw25f53G6fPFYdp033Z87gZHh4Jx81wvMbW42b7gvPkl5Zf99aJ5R03W69vva9aXrdU8LjJ99VfTnQ/bvJtXp88/+eOdfGfTc8da3odAyNDa/L1jqSDoHi+m18Xj4E7sgPZ8exINpXOk9/L+XWNbVvaMbAm/LnYzx1XleQYyPfVy9u6HwP5Nj/YfmFfO20N30nbNL12av/9wmKZ/5rhs5fXvtsudObP1/nxHd1/N5Rv8+aOc80Z3ffTbeE7l3TYT+2Pn8WO6ans4uynq8I6j+zs/rupfJsrdi3xeNqbZdkbk280ft8Vfr/7j6f+87stv/ft9DvlNybfeHD84R+dy/oBAFi+dxt/z60pXms2/R/rpfz/fwAAAKAvxNw/GGYi/wMAAEBlxNw/FGYi/wMAAEBlxNw/HGZSk/z/+F27X3nn2Sy9G+B8EE+Pu+Ghe4rtYsd7Lny9af6s/Psf/dbIK195dmnXPZhl2S8f/GDH7R+/J66rcCKu88Ot31/gquuWdP2PPXJ2u+b3Tzizu7j8eHuWehjErvJr49sal7vpqcnGfP3BrDEfnnvhueLyi6/j9qe3F9v/dXjTkr0HB1rOvzWs54YwN4X3lHlo79n9kM94vlc2Xvuvl3/m7PXF8w1seW/jZr78R8XlxveIeunyYvt4uxdb/7989Tuv5Ns/eWPn9T872Hn9p8Pl/iTMX+wptm/e519pWv+fhPXH64vnu+Ob3++4/lc/UGz/ajguvh5m+/rv+/MPvdPp/orXs/fu4nzx+if+d0fjfPHy4uW3r3/02cmW/dF++a+/XVzOnid+NtS8ffx+vJ7osbtbj++BcP+29MizLPvOn2Yt+zn7SHG+f25bf7y8E3d3Xv9tbes8MXBd4/xnb8+Gltv1tb/d1vH2xvXs/YcNLbfnpfvD/nt7/Af55Z5+OByP4fT/+2Fxee3vZfrq/a3PN3H7r28oHrfx8sbb1v9S2/rnrsv3Xe/1P/B2sf5X713bsv69nwjH0wPF7LX+Q39zWcv5v/Ht4v44+aWxY8dnTh2eatqrzY/jtaPr1l9y6Xvee1l4Lm3/et/x2cenT26a2DSRZZv68C0DV3r93wzzf4oxd+GvofCjnxXH3YufLH5u3fzz4uuXwvcfC/dn/Pn4tb8aaTle2+/3uXuLeb7rvzWsY6k+8NX/vm5JG57+3Gun/umP32x/XRBvz4n3jzZu38ubr2ycNvB6cXr781Uv//X+1sf1j4cnGvN7Yb/Oh3dm3nJlcX3tlx/fm+TFTxWP3/hKLp4/a3s/kQ1DrbfjfNf/4/A65vtXtT7/xePje8+2vZvzhmwgX8JceH7I5orT41Zxf7945sqO1xffhyebu/pclrmomadmxo8cPnbqyfHZ6ZnZ8Zmnnt539PipY7P7Gu9duu8Lvc5/9vG9vvH4npretSNrPNqPF2OFrfb6TzxyYOrOiZumpg/uP3Vw9pET0ycPHZiZOTA9NXPT/oMHp7/U6/yHp/ZMbtu9/c5tY4cOT+25a/fu7bvHDh87ni+jWFQPuya+OHbs5L7GWWb27Ng9uXPnjomxo8enpvfcOTExdqrX+Rs/m8bycz8xdnL6yP7Zw0enx2YOPz29Z3L3rl3ber7749ETB2c2jZ88dWz81Mz0yfHitmyabXw7/9nX6/zUw8zx8HzXZiC8Ov/sbbvS++PmvvXlRS+q2KT15Wn2VngvqPjzrdfXMfePhJnUJP8DAABAHcTcH974/+wJ8j8AAABURsz9a8NM5H8AAACojJj7R8NMapL/9f/1//X/9f/1//X/V5L+v/5/N/r/+v/9vH79f/1/eitb/z/m/nVZVsv8DwAAAHUQc//6MBP5HwAAACoj5v5LwkzkfwAAAKiMmPsvDTOpR/4faf+n/r/+v/5/c/8/bqv/n+n/6/8vk/6//n83+v/6//28/hL2/9fp/1M2Zev/x9z/njCTeuR/AAAAqIWY+98bZiL/AwAAQGXE3H9ZmIn8DwAAAJURc/+GMJOa5H+f/6//r//v8//1//X/V5L+v/5/N/r/+v/9vP4S9v99/j+lU7b+f8z9vxJmUpP8DwAAAHUQc//7wkzkfwAAAKiMmPsvDzOR/wEAAKAyYu6/IsykJvl/Sf3/10MbQ/9/Ufr/ndev/6//r/+v/6//r//fjf6//n8/r1//X/+f3srW/4+5//1hJjXJ/wAAAFAHMfdfGWYi/wMAAEBlxNz/gTAT+R8AAAAqI+b+q8JMapL/ff6//r/+v/6//r/+/0rS/9f/70b/X/+/n9ev/6//T29l6//H3H91mElN8j8AAADUQcz914SZyP8AAABQGTH3fzDMRP4HAACAyoi5f2OYSU3yv/6//r/+v/6//r/+/0rqr/7/4KKn6P8X9P9b6f/r/+v/6//TXdn6/zH3fyjMpCb5HwAAAOog5v5rw0zkfwAAAKiMmPuvCzOR/wEAAKAyYu7fFGZSk/yv/6//r/+v/6//r/+/kvqr/784/f+C/n8r/X/9f/1//X+6K1v/P+b+zWEmNcn/AAAAUAcx928JM5H/AQAAoDJi7r8+zET+BwAAgMqIuf+GMJOa5H/9f/1//X/9f/1//f+VpP+v/9+N/r/+fz+vX/9/af3/Nb0uiEorW/8/5v4bw0xqkv8BAACgDmLuvynMRP4HAACAyoi5/+YwE/kfAAAAKiPm/q1hJjXJ//r/+v/6//r/+v/6/ytJ/3/J/f91y1mX/n9B/395Vrs/3+/r1//3+f/0Vrb+f8z9t4SZ1CT/AwAAQB3E3H9rmIn8DwAAAJURc/9tYSbyPwAAAFRGzP1jYSY1yf/6//r/+v/6//r/+v8rqar9//Q86vP/9f/1//X/9f/1/1lU2fr/MfffHmZSk/wPAAAAdRBz/x1hJvI/AAAAVEbM/eNhJvI/AAAAVEbM/RNhJjXJ//r/+v/6//r/+v/6/yupqv3/Ffj8/2WtX/+/oP+/PKvdn+/39ev/6//TW9n6/zH3T4aZ1CT/AwAAQB3E3L8tzET+BwAAgMqIuX97mIn8DwAAAJURc/+OMJOa5H/9f/1//X/9f/1//f+VpP+v/9+N/r/+fz+vX/9f/59Wgx2+V7b+f8z9O8NMapL/AQAAoA5i7t8VZiL/AwAAQGXE3H9nmIn8DwAAAJURc/9dYSY1yf/90v9P9P/1//X/a9T/b71+/X/9/070//X/M/3/ZVvt/ny/r1//X/+f3i5s//+y8+7/x9y/O8ykJvkfAAAA6iDm/g+Hmcj/AAAAUBkx998dZiL/AwAAQF/p9DmEUcz9HwkzqUn+75f+v8//X27/f36t/r/+f//2/1v3p/6//n8n+v/6/5n+/7Ktdn++39ev/6//T28Xtv+/4OXpOff/Y+7fE2ZSk/wPAAAAdRBz/z1hJvI/AAAAVEbM/feGmcj/AAAAUBkx9+8NM6lJ/tf/r3r/v3yf/z+Q6f/r/xf0//X/LwT9f/3/TP9/2Zbbnw8vW/T/S9T/z48h/X/KqGz9/5j77wszqUn+BwAAgDqIuf+jYSbyPwAAAFRGzP0fCzOR/wEAAKAyYu7/eJhJTfK//n+J+/9D1ez/+/x//X/9f/3/C0n/X/8/0/9fttXuz/f7+svU//f5/5RV2fr/MfffH2ZSk/wPAAAAdRBz/yfCTOR/AAAAqIyY+381zET+BwAAgMqIuf+BMJOa5H/9/xL3/yv6+f/6/zXv/6/R/9f/v7D0//X/M/3/ZVvt/ny/r1//X/+f3srW/4+5/9fCTGqS/wEAAKAOYu5/MMxE/gcAAIDKiLn/k2Em8j8AAABURsz9vx5mUpP8r/9/cfr/g+ny9f/1/2ve//f5//r/F5j+v/5/pv+/bKvdn+/39ev/6//TW9n6/zH3/0aYSU3yPwAAANRBzP2/GWYi/wMAAEBlxNz/W2Em8j8AAABURsz9D4WZ1CT/6//7/H/9f/3/0vb/h1v3p/6//n8n+v/6/5n+/7Ktdn++39ev/6//T29l6//H3P/bYSY1yf8AAABQBzH3PxxmIv8DAABAZcTc/6kwE/kfAAAAKiPm/k+HmdQk/+v/6//r/+v/l7b/37Y/9f/1/zvR/9f/z/T/l221+/P9vn79f/1/eitb/z/m/kfCTGqS/wEAAKAOYu7/TJiJ/A8AAACVEXP/74SZyP8AAABQGTH3/26YSU3yv/6//r/+v/6//r/+/0rS/1/Y/8+fw1az/79mKRvq/y+J/r/+v/6//j/dla3/H3P/Z8NMapL/AQAAoA5i7v+9MBP5HwAAACoj5v7fDzOR/wEAAKAyYu5/NMykJvlf/1//X/9f/1//X/9/Jen/+/z/bvT/9f/7ef36//r/9Fa2/n/M/Z8LM6lJ/gcAAIA6iLn/D8JM5H8AAACojJj794WZyP8AAABQGTH3PxZmUpP8r/+v/1+R/v8L+v/6//r/5aT/r//fjf6//n8/r1//X/+f3srW/4+5f3+YSU3yPwAAANRBzP2fDzOR/wEAAKAyYu4/EGYi/wMAAEBlxNw/FWZSk/yv/6//X5H+v8//1//X/y8p/X/9/270//X/+3n9+v/6//RWtv7/VONH7Wg23Th3/fI/AAAA1EHM/QfDTOR/AAAAqIyY+w+Fmcj/AAAAUBkx9z8eZlKT/K//r/+v/6//r/+v/7+S9P/1/7vR/9f/7+f16//r/9Nb2fr/MfcfDjOpSf4HAACAOoi5/wthJvI/AAAAVEbM/V8MM5H/AQAAoDJi7j8SZlKT/K//r/+v/1/B/v+w/n+m/18a+v/6/93o/+v/9/P69f/1/+mtbP3/mPuPhpnUJP8DAABAHcTcfyzMRP4HAACAyoi5/3iYifwPAAAAlRFz/4kwk5rkf/1//X/9/wr2/33+f4P+fzno/+v/d6P/r//fz+vX/9f/p7ey9f9j7v/DMJOa5H8AAACog5j7T4aZyP8AAABQGTH3z4SZyP8AAABQGTH3z4aZ1CT/6//r/+v/6//r/+v/ryT9f/3/bvT/9f/7ef36//r/9Fa2/n/M/afCTGqS/wEAAKAOYu5/IsxE/v9/9u4zR5OriuPwO1jIIITYCqzAS2ANfGEL5BxNzjnnnHPOOeecMxhMNgbJyPQ5x8DMVPW0u/zeuud5vhzCwFxNS7b+sn4qAAAAmEbu/nvFLfY/AAAATCN3/73jlib7X/+v/9f/D9P/n3R++v8W/f8N19z8r/T/50H/r/8/6P/P7Nj9/N7fr//X/7NutP4/d/994pYm+x8AAAA6yN1/37jF/gcAAIBp5O6/X9xi/wMAAMA0cvffP25psv/1//p//f8w/b/v/+fPdcb+/8Itv63v/58v/b/+/6D/P7Nj9/N7f7/+X//PutH6/9z9D4hbmux/AAAA6CB3/wPjFvsfAAAAppG7/0Fxi/0PAAAA08jd/+C4pcn+1//r//X/+n/9/23//X/9//nR/+v/D/r/Mzt2P7/39+v/9f+sG63/z93/kLilyf4HAACADnL3PzRusf8BAABgGrn7Hxa32P8AAAAwjdz9D49bmux//b/+X/+v/9f/6/+3pP/X/y/R/+v/9/x+/b/+n3Wj9f+5+x8RtzTZ/wAAANBB7v5Hxi32PwAAAEwjd/+j4hb7HwAAAKaRu//RcUuT/a//1//r//X/+n/9/5b0//r/Jfp//f+e36//1/+zbvP+/+7X/ueetv/P3X9t3NJk/wMAAEAHufsfE7fY/wAAADCN3P2PjVvsfwAAAJhG7v7HxS1N9v8l+v+rDvr/pv3/TRf0//r/Mfv/G+OvMvp//f/F9P/6/4P+/8wu38+f7k9C/6//1/+zZvP+f6X3//9/n7v/8XFLk/0PAAAAHeTuf0LcYv8DAADANHL3PzFusf8BAABgGrn7nxS3NNn/vv+v/z/P7//n/6/+/4T+3/f/9f/6f/3/sg37/3vmH6b+//KO3c/v/f1L/f81p3i//p8ORuv/c/c/OW5psv8BAACgg9z9T4lb7H8AAACYRu7+p8Yt9j8AAABMI3f/0+KWJvtf/6//P8/+v833/+948r/X///ve/T/+v9L0f/r/5f4/r/+f8/v9/1//T/rRuv/c/c/PW5psv8BAACgg9z9z4hb7H8AAACYRu7+Z8Yt9j8AAABMI3f/s+KWJvtf/6//1//7/v+t6v+v0v/r/5fp//X/S/T/+v89v1//r/9n3Wj9f+7+Z8ctTfY/AAAAdJC7/zlxi/0PAAAA08jd/9y4xf4HAACAaeTuf17c0mT/6//1//p//b/v/+v/t6T/n67/v6D/v4X+X/+v/9f/s2y0/j93//Pjlib7HwAAADrI3f+CuMX+BwAAgGnk7n9h3GL/AwAAwDRy978obmmy//X/+n/9v/5f/6//35L+f7r+3/f//4v+X/+v/9f/s2y0/j93/4vjlib7HwAAADrI3f+SuMX+BwAAgGnk7n9p3GL/AwAAwDRy978sbmmy//X/+n/9v/5f/6//35L+X/+/RP9/6f7/Dpf5/fT/Y73/fPr//Onr/5nTaP1/7v6Xxy1N9j8AAAB0kLv/FXGL/Q8AAADTyN3/yrjF/gcAAIBp5O5/VdzSZP9frv+//k4n/73+/3T0/5d+v/5f/6//1//r//X/S/T/vv+/5/f7/r/+n3Wj9f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAEwjd/9r4xb7HwAAAKaRu/91cUuT/e/7//p//b/+X/+v/9+S/l//v2RH/f/Vl/oP9f/6f/2//p9lo/X/uftfH7c02f8AAADQQe7+N8Qt9j8AAABMI3f/G+MW+x8AAACmkbv/TXFLk/2v/9f/H73/v53+P+n/4+eq/9f/XwH9v/7/4Pv/Z3bsfn7v79f/6/9ZN1r/n7v/zXFLk/0PAAAAHeTuf0vcYv8DAADANHL3vzVusf8BAABgGrn73xa3NNn/+n/9/9H7f9//L/r/+Lnq//X/V0D/r/8/6P/P7Nj9/N7fr//X/7NutP4/d//b45Ym+x8AAAA6yN3/jrjF/gcAAIBp5O5/Z9xi/wMAAMA0cve/K25psv/1//p//b/+X/+v/9+S/l//v0T/r//f8/v1//p/1o3W/+fuf3fc0mT/AwAAQAe5+98Tt9j/AAAAMI3c/e+NW+x/AAAAmEbu/vfFLU32v/5/7/3/Pa6LF+j/9f/6f/3/kPT/+v8l+n/9/57fr//X/7NutP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBp5O7/YNxi/wMAAMA0cvd/KG5psv979P+3v+iXzdP/+/6//l//r/8fm/5f/79E/6//3/P79f/6f9aN1v/n7v9w3NJk/wMAAEAHufs/ErfY/wAAADCN3P0fjVvsfwAAAJhG7v6PxS1N9n+P/v9i+v8T597/33QX/b/+v+j/9f8H/b/+f4X+X/+/5/dP3f9fOOj/ORej9f+5+z8etzTZ/wAAANBB7v5PxC32PwAAAEwjd/8n4xb7HwAAAKaRu/9TccPd7ny8J92m9P/6f9//1//r//X/W9L/6/+X6P/1/3t+/9T9v+//c05G6/9z9386bvHP/wEAAGAaufs/E7fY/wAAADCN3P2fjVvsfwAAAJhG7v7PxS1N9r/+X/+v/9f/6//1/1vS/+v/l+j/9f97fr/+X//PutH6/9z9n49bmux/AAAA6CB3/xfiFvsfAAAAppG7/4txi/0PAAAA08jd/6W4pcn+1//r//X/+n/9v/5/S/p//f8S/b/+f8/v1//r/1k3Wv+fu//LcUuT/Q8AAAAd5O7/Stxi/wMAAMA0cvd/NW6x/wEAAGAaufu/Frc02f/6f/2//l//r//X/29J/6//X6L/1//v+f36f/0/60br/3P3fz1uabL/AQAAoIPc/d+IW+x/AAAAmEbu/m/GLfY/AAAATCN3/7filib7/0r7/7tGeL2H/n/pl+n/T+j/9f8H/b/+f2P6f/3/Ev2//n/P79f/6/9ZN1r/n7v/23FLk/0PAAAAHeTu/07cYv8DAADANHL3fzdusf8BAABgGrn7vxe3NNn/vv+v/9f/6//1//r/Len/9f9L9P/6/z2/X/+v/2fdaP1/7v7vxy1N9j8AAAB0kLv/B3GL/Q8AAADTyN3/w7jF/gcAAIBp5O7/UdzSZP/r//X/+n/9v/5f/78l/b/+f4n+X/+/5/fr//X/rBut/8/d/+O4pcn+BwAAgA5y9/8kbrH/AQAAYBq5+38at9j/AAAAMI3c/T+LW5rsf/2//l//r//X/+v/t6T/1/8v0f/r//f8fv2//p91o/X/uft/Hrc02f8AAADQQe7+X8Qt9j8AAABMI3f/L+MW+x8AAACmkbv/V3FLk/2v/9f/6//1//p//f+W2vb/N/9tVf+/Sv+v/9/z+/X/+n/Wjdb/5+7/ddzSZP8DAABAB7n7fxO32P8AAAAwjdz9v41b7H8AAACYRu7+38UtTfa//l//r//X/+v/9f9batv/+/7/qej/9f97fr/+X//PutH6/9z918UtTfY/AAAAdJC7//dxi/0PAAAA08jd/4e4xf4HAACAaeTuvz5uabL/9f/6/yn7/6v1//p//f8o9P/6/yX6f/3/nt+v/9f/s260/j93/x/jlib7HwAAADrI3f+nuMX+BwAAgGnk7v9z3GL/AwAAwDRy9/8lbmmy//X/+v8p+3/f/9f/6/+Hof/X/y/R/+v/9/x+/b/+n3Wj9f+5+/8atzTZ/wAAANBB7v6/xS32PwAAAEwjd//f4xb7HwAAAKaRu/+GuKXJ/tf/6//1//p//b/+f0v6f/3/Ev2//n/P79f/6/9ZN1r/n7v/H3FLk/0PAAAAHeTuvzFusf8BAABgGrn7/xm32P8AAAAwjdz9/4pbmux//b/+X/+v/9f/6/+3pP/X/y/R/+v/9/x+/b/+n3Wj9f+5+/8dAAD//0ngHrI=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x24) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000480)={@desc={0x1, 0x0, @desc1}}) 1.993130054s ago: executing program 1 (id=474): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x28, 0x8, 0x8, 0xafab}, {0x20, 0x0, 0x10, 0xeffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[], 0xfdef}}, 0x0) 1.740113798s ago: executing program 1 (id=475): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x2}, 0x20) 1.58814402s ago: executing program 1 (id=476): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0xf, 0x4) 1.484000171s ago: executing program 5 (id=477): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.291954014s ago: executing program 1 (id=478): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 743.905301ms ago: executing program 2 (id=479): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 625.569722ms ago: executing program 0 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000020000008500000086000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 412.386155ms ago: executing program 5 (id=481): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 352.123656ms ago: executing program 1 (id=482): r0 = syz_open_procfs(0x0, &(0x7f00000036c0)='net/udp\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x103c) preadv(r0, &(0x7f0000002540)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x47fff, 0x6) 104.703299ms ago: executing program 5 (id=483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r1, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7917707fe9bce142b8971a5f2be0a4b037a87c58f573ded724070800010002"], 0x150}}, 0x0) 67.188659ms ago: executing program 1 (id=484): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000180), 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 0s ago: executing program 3 (id=485): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000280)=""/155, 0x9b, 0x8000000) pread64(r0, &(0x7f0000000180)=""/203, 0xcb, 0xd222) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. syzkaller login: [ 66.222576][ T4232] cgroup: Unknown subsys name 'net' [ 66.324529][ T4232] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.864324][ T4232] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.355065][ T4260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.363502][ T4260] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.376211][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.384342][ T4267] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.392092][ T4267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.393025][ T4261] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.400264][ T4267] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.408972][ T4261] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.415458][ T4267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.421346][ T4261] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.428694][ T4267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.436547][ T4261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.443510][ T4267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.451144][ T4261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.458274][ T4267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.466380][ T4261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.471996][ T4267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.487132][ T4261] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.487477][ T4267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.494410][ T4261] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.503008][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.509831][ T4261] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.516927][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.523986][ T4261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.531240][ T4267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.546043][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.555384][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.588236][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.595654][ T4268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.603207][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.058478][ T4262] chnl_net:caif_netlink_parms(): no params data found [ 70.123598][ T4257] chnl_net:caif_netlink_parms(): no params data found [ 70.230857][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 70.261070][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 70.290382][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 70.322092][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.329532][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.338674][ T4262] device bridge_slave_0 entered promiscuous mode [ 70.352000][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.359239][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.367665][ T4262] device bridge_slave_1 entered promiscuous mode [ 70.381296][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.388826][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.396970][ T4257] device bridge_slave_0 entered promiscuous mode [ 70.441163][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.448673][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.456717][ T4257] device bridge_slave_1 entered promiscuous mode [ 70.514348][ T4262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.552045][ T4262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.571318][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.602503][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.610264][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.618756][ T4263] device bridge_slave_0 entered promiscuous mode [ 70.637247][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.647008][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.654779][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.663960][ T4252] device bridge_slave_0 entered promiscuous mode [ 70.681647][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.689018][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.697109][ T4263] device bridge_slave_1 entered promiscuous mode [ 70.721018][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.728517][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.736533][ T4252] device bridge_slave_1 entered promiscuous mode [ 70.764336][ T4262] team0: Port device team_slave_0 added [ 70.787234][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.794737][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.803142][ T4251] device bridge_slave_0 entered promiscuous mode [ 70.819794][ T4262] team0: Port device team_slave_1 added [ 70.827411][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.839671][ T4257] team0: Port device team_slave_0 added [ 70.853884][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.862883][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.871515][ T4251] device bridge_slave_1 entered promiscuous mode [ 70.890965][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.902051][ T4257] team0: Port device team_slave_1 added [ 70.910126][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.922172][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.994144][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.003721][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.033820][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.082725][ T4252] team0: Port device team_slave_0 added [ 71.091574][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.102383][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.109865][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.136206][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.153319][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.160793][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.187425][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.202466][ T4263] team0: Port device team_slave_0 added [ 71.211205][ T4252] team0: Port device team_slave_1 added [ 71.217504][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.225169][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.252524][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.266089][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.295770][ T4263] team0: Port device team_slave_1 added [ 71.312844][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.319670][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.362948][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.370131][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.396284][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.409560][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.416559][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.442519][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.456821][ T4251] team0: Port device team_slave_0 added [ 71.466841][ T4262] device hsr_slave_0 entered promiscuous mode [ 71.474342][ T4262] device hsr_slave_1 entered promiscuous mode [ 71.495172][ T4251] team0: Port device team_slave_1 added [ 71.537055][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.544411][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.571405][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.594397][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.601560][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.627652][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.633907][ T4267] Bluetooth: hci4: command 0x0409 tx timeout [ 71.638430][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 71.644670][ T4266] Bluetooth: hci0: command 0x0409 tx timeout [ 71.657948][ T4258] Bluetooth: hci3: command 0x0409 tx timeout [ 71.661490][ T4257] device hsr_slave_0 entered promiscuous mode [ 71.671348][ T4257] device hsr_slave_1 entered promiscuous mode [ 71.678196][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.686063][ T4257] Cannot create hsr debugfs directory [ 71.701362][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.708758][ T4258] Bluetooth: hci1: command 0x0409 tx timeout [ 71.715270][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.741694][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.762275][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.769443][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.797375][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.850560][ T4252] device hsr_slave_0 entered promiscuous mode [ 71.857615][ T4252] device hsr_slave_1 entered promiscuous mode [ 71.865057][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.872989][ T4252] Cannot create hsr debugfs directory [ 71.929809][ T4263] device hsr_slave_0 entered promiscuous mode [ 71.940954][ T4263] device hsr_slave_1 entered promiscuous mode [ 71.949927][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.957619][ T4263] Cannot create hsr debugfs directory [ 71.980285][ T4251] device hsr_slave_0 entered promiscuous mode [ 71.987459][ T4251] device hsr_slave_1 entered promiscuous mode [ 71.994294][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.005670][ T4251] Cannot create hsr debugfs directory [ 72.360108][ T4262] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.375009][ T4262] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.385247][ T4262] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.398295][ T4262] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.457076][ T4252] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.471347][ T4252] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.484565][ T4252] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.495342][ T4252] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.576907][ T4257] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.597072][ T4257] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.628772][ T4257] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.638826][ T4257] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.716893][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.773539][ T4251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.820977][ T4251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.835034][ T4262] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.845392][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.857370][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.884415][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.897062][ T4251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.908897][ T4251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.930098][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.951198][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.961235][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.972791][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.980805][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.013132][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.023090][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.033808][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.044596][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.053547][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.064490][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.082637][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.092706][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.105162][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.115019][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.125798][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.136841][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.151376][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.160616][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.169998][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.177297][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.186658][ T4263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.217014][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.226634][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.236928][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.244149][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.253441][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.262777][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.273548][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.283400][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.292343][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.299585][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.316398][ T4263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.326604][ T4263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.344567][ T4263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.363990][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.373883][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.384896][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.394601][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.404541][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.413708][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.422826][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.430096][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.438480][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.454529][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.465620][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.475696][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.490746][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.527346][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.537148][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.549072][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.558507][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.566941][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.575878][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.585267][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.598137][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.610895][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.624020][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.633744][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.678838][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.693357][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.705445][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.713489][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 73.713535][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 73.719599][ T4258] Bluetooth: hci0: command 0x041b tx timeout [ 73.732286][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 73.745241][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.755579][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.774157][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.788130][ T4258] Bluetooth: hci1: command 0x041b tx timeout [ 73.792547][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.804562][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.836160][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.845434][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.863203][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.872887][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.882335][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.914189][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.944085][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.964582][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.975230][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.991338][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.005066][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.016157][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.036501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.063866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.074219][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.081671][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.135696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.156867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.174119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.184199][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.191423][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.200993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.211350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.283083][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.314185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.324922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.341145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.355216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.371754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.384092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.395902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.405192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.413484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.426329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.444152][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.460196][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.477134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.493693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.518643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.565215][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.597290][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.625398][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.672433][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.699452][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.733653][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.740884][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.776769][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.815548][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.824244][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.842658][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.853430][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.860643][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.875345][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.919405][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.940225][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.950733][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.960280][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.997171][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.015108][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.026478][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.049198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.058416][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.069641][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.082863][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.092237][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.111085][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.138729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.153909][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.170271][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.229629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.259370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.295214][ T4257] device veth0_vlan entered promiscuous mode [ 75.316854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.339232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.429252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.456459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.478717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.487415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.507241][ T4257] device veth1_vlan entered promiscuous mode [ 75.537046][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.573033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.583051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.593326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.623925][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.633874][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.644992][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.677578][ T4262] device veth0_vlan entered promiscuous mode [ 75.696238][ T4252] device veth0_vlan entered promiscuous mode [ 75.708881][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.720878][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.734044][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.746803][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.760005][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.773074][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.783505][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.792837][ T4258] Bluetooth: hci0: command 0x040f tx timeout [ 75.801087][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 75.802619][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.807274][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 75.818194][ T4260] Bluetooth: hci4: command 0x040f tx timeout [ 75.833580][ T4257] device veth0_macvtap entered promiscuous mode [ 75.849552][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.859647][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.869872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.878603][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 75.897098][ T4252] device veth1_vlan entered promiscuous mode [ 75.908831][ T4262] device veth1_vlan entered promiscuous mode [ 75.932183][ T4257] device veth1_macvtap entered promiscuous mode [ 75.947412][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.960201][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.969721][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.978893][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.988727][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.997243][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.006054][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.043470][ T4262] device veth0_macvtap entered promiscuous mode [ 76.051504][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.060660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.071288][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.080617][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.089853][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.098939][ T4251] device veth0_vlan entered promiscuous mode [ 76.115113][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.127353][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.140283][ T4262] device veth1_macvtap entered promiscuous mode [ 76.164483][ T4251] device veth1_vlan entered promiscuous mode [ 76.173616][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.183781][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.194634][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.204805][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.215702][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.225650][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.236005][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.244055][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.255483][ T4257] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.265654][ T4257] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.276775][ T4257] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.286039][ T4257] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.300511][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.310170][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.324037][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.371127][ T4252] device veth0_macvtap entered promiscuous mode [ 76.384307][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.395598][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.410523][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.442773][ T4252] device veth1_macvtap entered promiscuous mode [ 76.451601][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.460774][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.471452][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.481870][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.520022][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.535143][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.550146][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.570831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.581832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.593008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.602420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.611501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.621075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.632742][ T4251] device veth0_macvtap entered promiscuous mode [ 76.646018][ T4262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.656009][ T4262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.665262][ T4262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.675088][ T4262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.722231][ T4251] device veth1_macvtap entered promiscuous mode [ 76.731083][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.745859][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.762261][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.775138][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.783949][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.792396][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.801869][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.815498][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.825380][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.837238][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.848598][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.860917][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.873200][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.885539][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.910505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.921059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.936333][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.947199][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.957733][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.970040][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.982856][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.000817][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.011025][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.023799][ T4252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.033805][ T4252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.043374][ T4252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.052557][ T4252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.064264][ T4263] device veth0_vlan entered promiscuous mode [ 77.093743][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.093880][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.117521][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.129405][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.130113][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.141179][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.163152][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.174232][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.185985][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.206014][ T4263] device veth1_vlan entered promiscuous mode [ 77.222959][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.231879][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.242194][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.252723][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.271817][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.282750][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.293258][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.305934][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.317319][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.328089][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.339786][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.352256][ T4251] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.361341][ T4251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.371508][ T4251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.381091][ T4251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.427813][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.446784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.489322][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.497494][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.619213][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.635148][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.645221][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.670526][ T4263] device veth0_macvtap entered promiscuous mode [ 77.684354][ T4263] device veth1_macvtap entered promiscuous mode [ 77.736510][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.752857][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.763317][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.774296][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.784636][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.795974][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.806459][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.817346][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.828994][ T4337] loop3: detected capacity change from 0 to 256 [ 77.836431][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.847569][ T4337] ======================================================= [ 77.847569][ T4337] WARNING: The mand mount option has been deprecated and [ 77.847569][ T4337] and is ignored by this kernel. Remove the mand [ 77.847569][ T4337] option from the mount to silence this warning. [ 77.847569][ T4337] ======================================================= [ 77.864877][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.887898][ T4258] Bluetooth: hci0: command 0x0419 tx timeout [ 77.894910][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.900269][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 77.900316][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 77.922714][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 77.930344][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.932535][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.940889][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.940905][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.940921][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.940933][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.940946][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.943968][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.949840][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.959398][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 77.995768][ T4263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.038920][ T4263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.048284][ T4263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.057019][ T4263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.066090][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.071185][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.081458][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.083814][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.097156][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.102401][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.120485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.132107][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.141192][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.150854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.159073][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.167167][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.176302][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.376229][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.379217][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.454239][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.457783][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.486557][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.500707][ T4342] ALSA: seq fatal error: cannot create timer (-22) [ 78.509681][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.549385][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.557398][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.680332][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.745635][ T1271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.785724][ T1271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.811514][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.271250][ T4361] loop1: detected capacity change from 0 to 1764 [ 79.623755][ T4252] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 79.670166][ T4372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 79.701571][ T4252] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 80.023010][ T4387] capability: warning: `syz.4.23' uses 32-bit capabilities (legacy support in use) [ 80.583739][ T4403] sp0: Synchronizing with TNC [ 80.612305][ T4405] loop4: detected capacity change from 0 to 512 [ 80.752989][ T4405] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 80.852453][ T4405] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.857080][ T4399] loop3: detected capacity change from 0 to 32768 [ 80.929629][ T4399] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.28 (4399) [ 81.013414][ T4399] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.096086][ T4399] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 81.118520][ T4399] BTRFS info (device loop3): using free space tree [ 81.233132][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 81.294775][ T4424] ax25_connect(): syz.2.33 uses autobind, please contact jreuter@yaina.de [ 81.337646][ T4401] loop1: detected capacity change from 0 to 32768 [ 81.514720][ T4399] BTRFS info (device loop3): enabling ssd optimizations [ 81.811275][ T4257] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.828946][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.106371][ T4437] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 82.185284][ T14] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.222826][ T14] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 82.239050][ T14] usb 5-1: can't read configurations, error -71 [ 83.001715][ T4467] netlink: 68 bytes leftover after parsing attributes in process `syz.4.43'. [ 83.032800][ T4467] nbd: must specify a size in bytes for the device [ 83.304070][ T4469] loop0: detected capacity change from 0 to 2048 [ 83.325863][ T4442] loop2: detected capacity change from 0 to 40427 [ 83.407775][ T4442] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 83.415763][ T4469] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 83.416235][ T4442] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 83.471149][ T4469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.557914][ T4442] F2FS-fs (loop2): invalid crc value [ 83.658876][ T4475] loop4: detected capacity change from 0 to 512 [ 83.664297][ T4442] F2FS-fs (loop2): Found nat_bits in checkpoint [ 83.706335][ T4475] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.817896][ T4475] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.883252][ T4478] loop0: detected capacity change from 0 to 64 [ 83.932610][ T4475] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.973423][ T4442] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 83.990357][ T4461] loop1: detected capacity change from 0 to 32768 [ 84.003578][ T4442] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 84.041864][ T4461] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 84.056934][ T4475] EXT4-fs (loop4): 1 truncate cleaned up [ 84.103822][ T4475] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 84.117615][ T4461] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 84.190531][ T26] audit: type=1800 audit(1749049340.347:2): pid=4475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.46" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 84.324422][ T4461] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 84.395733][ T4297] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 84.428313][ T4297] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 84.504631][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 84.550529][ T4465] loop3: detected capacity change from 0 to 32768 [ 84.574577][ T4297] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 146ms [ 84.600614][ T4297] gfs2: fsid=syz:syz.0: jid=0: Done [ 84.615637][ T4461] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 85.167791][ T4461] gfs2: fsid=syz:syz.0: found 1 quota changes [ 85.398031][ T4498] syz.3.53 (4498): /proc/4497/oom_adj is deprecated, please use /proc/4497/oom_score_adj instead. [ 85.642099][ T4502] loop0: detected capacity change from 0 to 256 [ 85.654960][ T4252] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 85.654960][ T4252] inode = 11 2339 [ 85.654960][ T4252] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 85.718678][ T4504] Bluetooth: MGMT ver 1.22 [ 85.737910][ T4252] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 85.747204][ T4252] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4252 [syz-executor] gfs2_quota_sync+0x32c/0x6f0 [ 85.803770][ T4252] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 85.821031][ T4502] FAT-fs (loop0): Directory bread(block 64) failed [ 85.851841][ T4502] FAT-fs (loop0): Directory bread(block 65) failed [ 85.862042][ T4252] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 85.890310][ T4502] FAT-fs (loop0): Directory bread(block 66) failed [ 85.897203][ T4502] FAT-fs (loop0): Directory bread(block 67) failed [ 85.921718][ T4252] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 85.934691][ T4502] FAT-fs (loop0): Directory bread(block 68) failed [ 85.960958][ T4252] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 85.973875][ T4502] FAT-fs (loop0): Directory bread(block 69) failed [ 86.019188][ T4502] FAT-fs (loop0): Directory bread(block 70) failed [ 86.036445][ T4252] gfs2: fsid=syz:syz.0: File system withdrawn [ 86.072843][ T4502] FAT-fs (loop0): Directory bread(block 71) failed [ 86.087981][ T4502] FAT-fs (loop0): Directory bread(block 72) failed [ 86.088392][ T4252] CPU: 0 PID: 4252 Comm: syz-executor Not tainted 6.1.141-syzkaller #0 [ 86.096272][ T4502] FAT-fs (loop0): Directory bread(block 73) failed [ 86.107836][ T4252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.107871][ T4252] Call Trace: [ 86.107882][ T4252] [ 86.107892][ T4252] dump_stack_lvl+0x168/0x22e [ 86.107926][ T4252] ? kobject_uevent_env+0x35f/0x8a0 [ 86.107956][ T4252] ? show_regs_print_info+0x12/0x12 [ 86.107984][ T4252] ? load_image+0x3b0/0x3b0 [ 86.108007][ T4252] ? kobject_uevent_env+0x35f/0x8a0 [ 86.108053][ T4252] gfs2_withdraw+0x143f/0x1780 [ 86.108105][ T4252] ? gfs2_lm+0x220/0x220 [ 86.108144][ T4252] ? gfs2_consist_inode_i+0xf1/0x110 [ 86.108170][ T4252] gfs2_inode_refresh+0xb5e/0xfc0 [ 86.108204][ T4252] ? gfs2_inode_metasync+0xf0/0xf0 [ 86.108235][ T4252] ? gfs2_glock_nq+0xcf0/0x14e0 [ 86.108264][ T4252] gfs2_instantiate+0x15e/0x210 [ 86.108290][ T4252] gfs2_glock_wait+0x1d0/0x2a0 [ 86.108317][ T4252] do_sync+0x49a/0xc00 [ 86.108354][ T4252] ? gfs2_quota_sync+0x32c/0x6f0 [ 86.108387][ T4252] ? slot_put+0x1e0/0x1e0 [ 86.108422][ T4252] ? gfs2_quota_sync+0x32c/0x6f0 [ 86.108458][ T4252] ? do_raw_spin_unlock+0x11d/0x230 [ 86.108497][ T4252] gfs2_quota_sync+0x32c/0x6f0 [ 86.108545][ T4252] gfs2_sync_fs+0x48/0xb0 [ 86.108592][ T4252] sync_filesystem+0xe6/0x220 [ 86.108617][ T4252] generic_shutdown_super+0x6b/0x340 [ 86.108657][ T4252] kill_block_super+0x7c/0xe0 [ 86.108694][ T4252] deactivate_locked_super+0x93/0xf0 [ 86.108721][ T4252] cleanup_mnt+0x463/0x4f0 [ 86.108749][ T4252] ? lockdep_hardirqs_on+0x94/0x140 [ 86.108773][ T4252] task_work_run+0x1ca/0x250 [ 86.108804][ T4252] ? task_work_cancel+0x230/0x230 [ 86.108849][ T4252] ? exit_to_user_mode_loop+0x3b/0x110 [ 86.108885][ T4252] exit_to_user_mode_loop+0xe6/0x110 [ 86.108929][ T4252] exit_to_user_mode_prepare+0xb1/0x140 [ 86.108993][ T4252] syscall_exit_to_user_mode+0x16/0x40 [ 86.109017][ T4252] do_syscall_64+0x58/0xa0 [ 86.313021][ T4252] ? clear_bhb_loop+0x60/0xb0 [ 86.317939][ T4252] ? clear_bhb_loop+0x60/0xb0 [ 86.323124][ T4252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.329275][ T4252] RIP: 0033:0x7f251a38fc57 [ 86.334044][ T4252] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 86.354914][ T4252] RSP: 002b:00007ffe39b62518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 86.363465][ T4252] RAX: 0000000000000000 RBX: 00007f251a41089d RCX: 00007f251a38fc57 [ 86.371750][ T4252] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe39b625d0 [ 86.379946][ T4252] RBP: 00007ffe39b625d0 R08: 0000000000000000 R09: 0000000000000000 [ 86.388755][ T4252] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe39b63660 [ 86.397437][ T4252] R13: 00007f251a41089d R14: 000000000001419f R15: 00007ffe39b636a0 [ 86.405730][ T4252] [ 86.671746][ T127] cfg80211: failed to load regulatory.db [ 86.675552][ T4522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.61'. [ 86.906964][ T4252] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 86.996180][ T4252] CPU: 0 PID: 4252 Comm: syz-executor Not tainted 6.1.141-syzkaller #0 [ 87.005025][ T4252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.015993][ T4252] Call Trace: [ 87.019307][ T4252] [ 87.022274][ T4252] dump_stack_lvl+0x168/0x22e [ 87.027005][ T4252] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 87.032344][ T4252] ? show_regs_print_info+0x12/0x12 [ 87.037681][ T4252] ? load_image+0x3b0/0x3b0 [ 87.042413][ T4252] ? do_raw_spin_unlock+0x11d/0x230 [ 87.047762][ T4252] gfs2_assert_warn_i+0x18f/0x2c0 [ 87.052850][ T4252] gfs2_quota_cleanup+0x4b4/0x6a0 [ 87.058083][ T4252] gfs2_put_super+0x22f/0x8c0 [ 87.062915][ T4252] ? gfs2_evict_inode+0x1170/0x1170 [ 87.068200][ T4252] generic_shutdown_super+0x130/0x340 [ 87.073920][ T4252] kill_block_super+0x7c/0xe0 [ 87.078741][ T4252] deactivate_locked_super+0x93/0xf0 [ 87.084172][ T4252] cleanup_mnt+0x463/0x4f0 [ 87.088734][ T4252] ? lockdep_hardirqs_on+0x94/0x140 [ 87.094604][ T4252] task_work_run+0x1ca/0x250 [ 87.099311][ T4252] ? task_work_cancel+0x230/0x230 [ 87.104362][ T4252] ? exit_to_user_mode_loop+0x3b/0x110 [ 87.110399][ T4252] exit_to_user_mode_loop+0xe6/0x110 [ 87.115811][ T4252] exit_to_user_mode_prepare+0xb1/0x140 [ 87.121556][ T4252] syscall_exit_to_user_mode+0x16/0x40 [ 87.127052][ T4252] do_syscall_64+0x58/0xa0 [ 87.131521][ T4252] ? clear_bhb_loop+0x60/0xb0 [ 87.136316][ T4252] ? clear_bhb_loop+0x60/0xb0 [ 87.141138][ T4252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.147267][ T4252] RIP: 0033:0x7f251a38fc57 [ 87.152149][ T4252] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 87.173699][ T4252] RSP: 002b:00007ffe39b62518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 87.182243][ T4252] RAX: 0000000000000000 RBX: 00007f251a41089d RCX: 00007f251a38fc57 [ 87.190332][ T4252] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe39b625d0 [ 87.198759][ T4252] RBP: 00007ffe39b625d0 R08: 0000000000000000 R09: 0000000000000000 [ 87.206765][ T4252] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe39b63660 [ 87.215041][ T4252] R13: 00007f251a41089d R14: 000000000001419f R15: 00007ffe39b636a0 [ 87.224389][ T4252] [ 87.265879][ T4533] loop4: detected capacity change from 0 to 4096 [ 87.370875][ T4533] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 87.594299][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 87.611174][ T4547] capability: warning: `syz.3.70' uses deprecated v2 capabilities in a way that may be insecure [ 87.624128][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 87.991065][ T4552] loop0: detected capacity change from 0 to 1024 [ 88.189450][ T4552] hfsplus: bad catalog entry type [ 88.355524][ T1271] hfsplus: b-tree write err: -5, ino 4 [ 89.633057][ T4566] loop4: detected capacity change from 0 to 32768 [ 89.885335][ T4566] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 89.968987][ T4610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.92'. [ 89.982316][ T4566] (syz.4.75,4566,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 90.043019][ T4610] device erspan0 entered promiscuous mode [ 90.061288][ T4566] (syz.4.75,4566,1):ocfs2_get_suballoc_slot_bit:2709 ERROR: read block 47244640256 failed -12 [ 90.087221][ T4610] device erspan0 left promiscuous mode [ 90.163713][ T4566] (syz.4.75,4566,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: status = -12 [ 90.244136][ T4566] (syz.4.75,4566,1):ocfs2_test_inode_bit:2823 ERROR: get alloc slot and bit failed -12 [ 90.297583][ T4566] (syz.4.75,4566,1):ocfs2_test_inode_bit:2864 ERROR: status = -12 [ 90.337034][ T4566] (syz.4.75,4566,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 90.372125][ T4590] loop0: detected capacity change from 0 to 40427 [ 90.458727][ T4590] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 90.506387][ T4590] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 90.590954][ T4590] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 90.633349][ T4621] loop3: detected capacity change from 0 to 1024 [ 90.641889][ T4262] ocfs2: Unmounting device (7,4) on (node local) [ 90.677395][ T4590] F2FS-fs (loop0): invalid crc value [ 90.738465][ T4590] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.011302][ T4620] loop2: detected capacity change from 0 to 8192 [ 91.037916][ T4590] F2FS-fs (loop0): Start checkpoint disabled! [ 91.053714][ T75] hfsplus: b-tree write err: -5, ino 4 [ 91.144997][ T4630] loop1: detected capacity change from 0 to 256 [ 91.183609][ T4590] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 91.215541][ T4590] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 91.242916][ T26] audit: type=1800 audit(1749049347.397:3): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.96" name="bus" dev="loop2" ino=1048615 res=0 errno=0 [ 91.268224][ T4630] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 91.748526][ T4638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 91.787646][ T4642] netlink: 44 bytes leftover after parsing attributes in process `syz.1.105'. [ 91.790574][ T4640] loop3: detected capacity change from 0 to 1024 [ 91.807370][ T4642] netlink: 43 bytes leftover after parsing attributes in process `syz.1.105'. [ 91.848079][ T11] kworker/u4:1: attempt to access beyond end of device [ 91.848079][ T11] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 91.860164][ T4642] netlink: 'syz.1.105': attribute type 6 has an invalid length. [ 91.957820][ T4642] netlink: 'syz.1.105': attribute type 5 has an invalid length. [ 92.003994][ T4642] netlink: 43 bytes leftover after parsing attributes in process `syz.1.105'. [ 92.085737][ T11] hfsplus: b-tree write err: -5, ino 4 [ 92.936688][ T4668] loop3: detected capacity change from 0 to 64 [ 92.949184][ T4669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 93.015860][ T4668] hfs: keylen 94 too large [ 93.043326][ T4668] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 93.171868][ T4671] loop0: detected capacity change from 0 to 64 [ 93.273713][ T4675] loop4: detected capacity change from 0 to 1024 [ 93.404462][ T4675] hfsplus: bad catalog entry type [ 93.522501][ T4280] hfsplus: b-tree write err: -5, ino 4 [ 93.664223][ T4685] loop0: detected capacity change from 0 to 64 [ 94.303312][ T4700] loop1: detected capacity change from 0 to 4096 [ 94.369674][ T4708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 94.406702][ T4708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.135'. [ 94.502612][ T4700] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 94.988147][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.197581][ T14] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 95.246103][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.259287][ T4733] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.276497][ T14] usb 5-1: Product: syz [ 95.276551][ T14] usb 5-1: Manufacturer: syz [ 95.276566][ T14] usb 5-1: SerialNumber: syz [ 95.328110][ T14] usb 5-1: config 0 descriptor?? [ 95.353146][ T14] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 95.476257][ T1169] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.690143][ T1169] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 95.706736][ T26] audit: type=1400 audit(1749049351.857:4): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3ADD pid=4744 comm="syz.0.153" [ 95.736661][ T1169] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 95.736932][ T4747] loop3: detected capacity change from 0 to 1024 [ 95.764239][ T14] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 95.772740][ T1169] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 95.775735][ T4749] xt_time: unknown flags 0xc [ 95.794749][ T4747] EXT4-fs: Ignoring removed bh option [ 95.800701][ T4747] EXT4-fs: inline encryption not supported [ 95.834655][ T1169] usb 2-1: config 220 has no interface number 2 [ 95.872189][ T4747] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 95.913925][ T1169] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 95.973874][ T22] usb 5-1: USB disconnect, device number 4 [ 95.973869][ T4747] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.154: lblock 2 mapped to illegal pblock 2 (length 1) [ 96.010700][ T1169] usb 2-1: config 220 interface 0 has no altsetting 0 [ 96.024972][ T1169] usb 2-1: config 220 interface 76 has no altsetting 0 [ 96.039710][ T4755] loop2: detected capacity change from 0 to 256 [ 96.050672][ T4747] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 96.068096][ T4753] loop0: detected capacity change from 0 to 4096 [ 96.086209][ T1169] usb 2-1: config 220 interface 1 has no altsetting 0 [ 96.088637][ T4747] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.154: lblock 0 mapped to illegal pblock 48 (length 1) [ 96.108887][ T4755] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 96.158899][ T1169] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 96.178061][ T4753] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 96.195317][ T1169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.208645][ T4753] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 96.227490][ T4747] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 96.259649][ T4747] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.154: Failed to acquire dquot type 0 [ 96.259692][ T1169] usb 2-1: Product: syz [ 96.314598][ T4753] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 96.329444][ T1169] usb 2-1: Manufacturer: syz [ 96.348341][ T1169] usb 2-1: SerialNumber: syz [ 96.358189][ T4747] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 96.370765][ T4753] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 96.441340][ T4747] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.154: mark_inode_dirty error [ 96.458859][ T4753] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 96.496683][ T4747] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 96.534516][ T4753] ntfs: volume version 3.1. [ 96.557281][ T4747] EXT4-fs (loop3): 1 orphan inode deleted [ 96.575674][ T4747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 96.577206][ T46] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.621148][ T4753] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 96.622235][ T1169] usb 2-1: selecting invalid altsetting 0 [ 96.688028][ T4753] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 96.699228][ T1169] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 96.729662][ T46] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 96.739039][ T4753] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 96.755019][ T1169] usb 2-1: No valid video chain found. [ 96.772165][ T46] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:3: Failed to release dquot type 0 [ 96.801842][ T4753] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 96.816130][ T1169] usb 2-1: selecting invalid altsetting 0 [ 96.823625][ T4753] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 96.847428][ T4747] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.154: lblock 0 mapped to illegal pblock 48 (length 1) [ 96.848713][ T1169] usbtest: probe of 2-1:220.1 failed with error -22 [ 96.875372][ T4753] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 96.949560][ T1169] usb 2-1: USB disconnect, device number 2 [ 97.059126][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 97.363286][ T4770] loop3: detected capacity change from 0 to 256 [ 97.452529][ T4770] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 97.848127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.683084][ T4801] loop1: detected capacity change from 0 to 64 [ 99.136117][ T4813] loop0: detected capacity change from 0 to 1024 [ 99.413970][ T4813] hfsplus: xattr searching failed [ 99.713358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 99.722350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 100.249609][ T4834] netlink: 'syz.3.194': attribute type 62 has an invalid length. [ 100.287978][ T4836] xt_socket: unknown flags 0x8 [ 100.423272][ T4838] loop1: detected capacity change from 0 to 512 [ 100.564869][ T4838] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.613613][ T4838] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.620279][ T4845] loop3: detected capacity change from 0 to 4096 [ 100.647840][ T4845] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 100.727362][ T4838] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.196: corrupted inode contents [ 100.743594][ T4845] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 100.826892][ T4838] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #2: comm syz.1.196: mark_inode_dirty error [ 100.876618][ T4838] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.196: corrupted inode contents [ 100.930764][ T4838] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.196: mark_inode_dirty error [ 101.014899][ T46] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 101.038009][ T4257] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 101.114060][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 101.703154][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 101.703170][ T26] audit: type=1326 audit(1749049357.857:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98e98e929 code=0x7ffc0000 [ 101.750131][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.781315][ T26] audit: type=1326 audit(1749049357.857:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98e98e929 code=0x7ffc0000 [ 101.785083][ T4874] loop0: detected capacity change from 0 to 64 [ 101.806197][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.885796][ T26] audit: type=1326 audit(1749049357.937:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fd98e98e929 code=0x7ffc0000 [ 101.909908][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.960991][ T26] audit: type=1326 audit(1749049357.937:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98e98e929 code=0x7ffc0000 [ 102.054895][ T26] audit: type=1326 audit(1749049357.937:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98e98e929 code=0x7ffc0000 [ 102.077745][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.086931][ T26] audit: type=1326 audit(1749049357.967:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fd98e98e929 code=0x7ffc0000 [ 102.108863][ T4879] loop3: detected capacity change from 0 to 256 [ 102.109273][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.231157][ T4879] exfat: Deprecated parameter 'namecase' [ 102.252926][ T26] audit: type=1326 audit(1749049357.967:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98e98e929 code=0x7ffc0000 [ 102.275117][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.327058][ T4884] loop1: detected capacity change from 0 to 1024 [ 102.374663][ T26] audit: type=1326 audit(1749049357.967:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98e98e929 code=0x7ffc0000 [ 102.467250][ T4879] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 102.549232][ T4886] loop2: detected capacity change from 0 to 2048 [ 102.572333][ T4888] syz.0.218 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 102.592263][ T4325] hfsplus: b-tree write err: -5, ino 4 [ 102.654051][ T4886] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 102.846001][ T4891] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.847730][ T4886] syz.2.217: attempt to access beyond end of device [ 102.847730][ T4886] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 103.023210][ T4886] syz.2.217: attempt to access beyond end of device [ 103.023210][ T4886] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 103.145579][ T4886] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 103.187015][ T4886] NILFS (loop2): error -5 reading inode: ino=15 [ 103.218634][ T4901] vivid-001: disconnect [ 103.227081][ T4900] syz.2.217: attempt to access beyond end of device [ 103.227081][ T4900] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 103.238835][ T4899] vivid-001: reconnect [ 103.339888][ T4900] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 103.398103][ T4900] NILFS (loop2): error -5 reading inode: ino=15 [ 103.705060][ T4909] loop3: detected capacity change from 0 to 512 [ 103.756942][ T4909] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.810710][ T4909] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 103.838283][ T4909] System zones: 1-12 [ 103.848886][ T4909] EXT4-fs (loop3): 1 truncate cleaned up [ 103.856560][ T4909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 104.167125][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 104.570431][ T4928] loop0: detected capacity change from 0 to 128 [ 104.615111][ T4928] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 104.665073][ T4934] loop3: detected capacity change from 0 to 128 [ 104.774771][ T4934] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 104.807111][ T4928] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.854592][ T4934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.011615][ T4936] loop2: detected capacity change from 0 to 128 [ 105.033517][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 105.156243][ T4936] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 105.174834][ T4929] loop1: detected capacity change from 0 to 32768 [ 105.224609][ T4929] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.235 (4929) [ 105.265872][ T4936] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.326097][ T4929] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.390292][ T4929] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 105.442768][ T4929] BTRFS info (device loop1): using free space tree [ 105.808205][ T1169] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.829272][ T4929] BTRFS info (device loop1): enabling ssd optimizations [ 106.018476][ T1169] usb 4-1: Using ep0 maxpacket: 32 [ 106.036225][ T4252] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.061005][ T1169] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 106.114594][ T1169] usb 4-1: config 4 has no interface number 0 [ 106.124795][ T1169] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.147348][ T1169] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.173646][ T1169] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 106.187194][ T4940] loop0: detected capacity change from 0 to 32768 [ 106.192657][ T1169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.255744][ T1169] hub 4-1:4.128: USB hub found [ 106.289672][ T4330] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4330) [ 106.457192][ T1169] hub 4-1:4.128: 2 ports detected [ 106.462584][ T1169] hub 4-1:4.128: Using single TT (err -22) [ 106.497571][ T4957] loop2: detected capacity change from 0 to 32768 [ 106.525128][ T4957] XFS: ikeep mount option is deprecated. [ 106.545883][ T4957] XFS: noikeep mount option is deprecated. [ 106.657809][ T4940] XFS (loop0): Mounting V5 Filesystem [ 106.664121][ T1169] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 106.687791][ T1169] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 106.782327][ T4940] XFS (loop0): Ending clean mount [ 106.792947][ T1169] usb 4-1: USB disconnect, device number 2 [ 106.881092][ T4957] XFS (loop2): Mounting V5 Filesystem [ 106.900942][ T4940] XFS (loop0): Quotacheck needed: Please wait. [ 107.072162][ T4957] XFS (loop2): Ending clean mount [ 107.093994][ T4957] XFS (loop2): Quotacheck needed: Please wait. [ 107.133184][ T4940] XFS (loop0): Quotacheck: Done. [ 107.265902][ T4957] XFS (loop2): Quotacheck: Done. [ 107.551840][ T4263] XFS (loop2): Unmounting Filesystem [ 107.555046][ T4988] loop1: detected capacity change from 0 to 1024 [ 107.613418][ T4988] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.247: Invalid block bitmap block 0 in block_group 0 [ 107.650455][ T4988] Quota error (device loop1): write_blk: dquota write failed [ 107.678195][ T4988] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 107.690510][ T4988] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.247: Failed to acquire dquot type 0 [ 107.722712][ T4988] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.247: Freeing blocks not in datazone - block = 0, count = 4096 [ 107.737807][ T4297] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 107.786608][ T4251] XFS (loop0): Unmounting Filesystem [ 107.860068][ T4988] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.247: Invalid inode bitmap blk 0 in block_group 0 [ 107.883730][ T1271] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 107.894386][ T1271] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:5: Failed to release dquot type 0 [ 107.934794][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.956419][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 107.985779][ T4297] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 107.991357][ T4988] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 108.005501][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.017403][ T4988] EXT4-fs (loop1): 1 orphan inode deleted [ 108.037447][ T4297] usb 4-1: config 0 descriptor?? [ 108.037794][ T4988] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.053346][ T4986] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.244258][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 108.518820][ T4297] lenovo 0003:17EF:6009.0001: report_id 1754907481 is invalid [ 108.553481][ T4297] lenovo 0003:17EF:6009.0001: item 0 4 1 8 parsing failed [ 108.582275][ T4297] lenovo 0003:17EF:6009.0001: hid_parse failed [ 108.601886][ T4297] lenovo: probe of 0003:17EF:6009.0001 failed with error -22 [ 108.716612][ T4297] usb 4-1: USB disconnect, device number 3 [ 108.855868][ T5000] loop1: detected capacity change from 0 to 64 [ 108.858382][ T4998] loop0: detected capacity change from 0 to 1024 [ 108.897618][ T5000] hfs: bad catalog entry type 0 [ 108.943180][ T4998] hfsplus: bad catalog entry type [ 109.075136][ T11] hfsplus: b-tree write err: -5, ino 4 [ 109.183633][ T5004] netlink: 'syz.1.254': attribute type 3 has an invalid length. [ 109.232615][ T5008] device vlan2 entered promiscuous mode [ 109.255375][ T5008] device wlan1 entered promiscuous mode [ 109.415461][ T5010] loop0: detected capacity change from 0 to 256 [ 109.826723][ T5018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 110.102931][ T5022] loop2: detected capacity change from 0 to 2048 [ 110.161795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.176683][ T5022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.523443][ T5028] loop0: detected capacity change from 0 to 190 [ 110.602384][ T5028] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 110.622204][ T5031] loop1: detected capacity change from 0 to 128 [ 110.661899][ T5028] ntfs: (device loop0): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 110.705540][ T5031] FAT-fs (loop1): Directory bread(block 162) failed [ 110.738939][ T5028] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 110.786788][ T5031] FAT-fs (loop1): Directory bread(block 163) failed [ 110.804024][ T5031] FAT-fs (loop1): Directory bread(block 164) failed [ 110.853231][ T5031] FAT-fs (loop1): Directory bread(block 165) failed [ 110.878756][ T5028] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 110.892335][ T5031] FAT-fs (loop1): Directory bread(block 166) failed [ 110.931523][ T5031] FAT-fs (loop1): Directory bread(block 167) failed [ 110.968075][ T5028] ntfs: volume version 3.1. [ 110.969629][ T5031] FAT-fs (loop1): Directory bread(block 168) failed [ 110.972795][ T5028] ntfs: (device loop0): load_system_files(): Volume is dirty. Will not be able to remount read-write. Run chkdsk and mount in Windows. [ 111.017132][ T5031] FAT-fs (loop1): Directory bread(block 169) failed [ 111.113532][ T5031] FAT-fs (loop1): Directory bread(block 162) failed [ 111.122168][ T5028] ntfs: (device loop0): ntfs_read_locked_inode(): Inode is an extent inode! [ 111.147372][ T5028] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 111.183440][ T5031] FAT-fs (loop1): Directory bread(block 163) failed [ 111.204114][ T5028] syz.0.266: attempt to access beyond end of device [ 111.204114][ T5028] loop0: rw=0, sector=224, nr_sectors = 8 limit=190 [ 111.226600][ T5031] syz.1.268: attempt to access beyond end of device [ 111.226600][ T5031] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 111.248575][ T5028] syz.0.266: attempt to access beyond end of device [ 111.248575][ T5028] loop0: rw=0, sector=240, nr_sectors = 8 limit=190 [ 111.267552][ T5031] syz.1.268: attempt to access beyond end of device [ 111.267552][ T5031] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 111.288311][ T4452] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.295110][ T5040] syz.1.268: attempt to access beyond end of device [ 111.295110][ T5040] loop1: rw=3, sector=234, nr_sectors = 6 limit=128 [ 111.330397][ T5040] syz.1.268: attempt to access beyond end of device [ 111.330397][ T5040] loop1: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 111.406833][ T5042] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 111.406833][ T5042] program syz.3.272 not setting count and/or reply_len properly [ 111.486176][ T4452] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.508297][ T4452] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 111.574372][ T4452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.637347][ T4452] usb 3-1: config 0 descriptor?? [ 111.890265][ T5053] lo speed is unknown, defaulting to 1000 [ 111.897379][ T5053] lo speed is unknown, defaulting to 1000 [ 111.934361][ T5053] lo speed is unknown, defaulting to 1000 [ 112.026083][ T5053] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.074911][ T4452] lg-g15 0003:046D:C222.0002: unbalanced collection at end of report description [ 112.105753][ T4452] lg-g15: probe of 0003:046D:C222.0002 failed with error -22 [ 112.128789][ T5053] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 112.338586][ T4452] usb 3-1: USB disconnect, device number 2 [ 112.376258][ T5053] lo speed is unknown, defaulting to 1000 [ 112.385081][ T5053] lo speed is unknown, defaulting to 1000 [ 112.386643][ T5053] lo speed is unknown, defaulting to 1000 [ 112.411827][ T5053] lo speed is unknown, defaulting to 1000 [ 112.420827][ T5053] lo speed is unknown, defaulting to 1000 [ 113.264868][ T4325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.298815][ T4267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.310140][ T4267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.325133][ T4267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.334587][ T4267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.344610][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 113.357951][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.522390][ T4325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.627082][ T5082] lo speed is unknown, defaulting to 1000 [ 113.679980][ T4325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.757391][ T5092] loop1: detected capacity change from 0 to 4096 [ 113.798853][ T5092] __ntfs_error: 14 callbacks suppressed [ 113.798873][ T5092] ntfs: (device loop1): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 113.824833][ T5092] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 113.882770][ T4325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.922943][ T5092] ntfs: volume version 3.1. [ 113.940595][ T5092] ntfs: (device loop1): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 114.005140][ T5092] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 114.030237][ T5092] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 114.093714][ T5092] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 114.200785][ T5105] loop2: detected capacity change from 0 to 1024 [ 114.247289][ T5105] EXT4-fs: Ignoring removed orlov option [ 114.362625][ T5092] ntfs: (device loop1): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported. Sorry. [ 114.379151][ T5105] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.472728][ T5092] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -95. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 114.785345][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 114.887280][ T5082] chnl_net:caif_netlink_parms(): no params data found [ 114.958902][ T5121] tmpfs: Bad value for 'gid' [ 115.323536][ T5134] loop2: detected capacity change from 0 to 256 [ 115.366129][ T5134] exfat: Deprecated parameter 'namecase' [ 115.374358][ T5134] exfat: Deprecated parameter 'namecase' [ 115.387928][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 115.446594][ T5134] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xec4b13f1, utbl_chksum : 0xe619d30d) [ 115.645671][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.655404][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.673161][ T5082] device bridge_slave_0 entered promiscuous mode [ 115.714986][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.733295][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.744423][ T5082] device bridge_slave_1 entered promiscuous mode [ 115.834425][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.883042][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.935975][ T5082] team0: Port device team_slave_0 added [ 115.979488][ T5082] team0: Port device team_slave_1 added [ 116.043992][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.051471][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.079402][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.092699][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.101517][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.131022][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.253810][ T5082] device hsr_slave_0 entered promiscuous mode [ 116.262052][ T5082] device hsr_slave_1 entered promiscuous mode [ 116.272391][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.280827][ T5082] Cannot create hsr debugfs directory [ 116.477002][ T4325] device hsr_slave_0 left promiscuous mode [ 116.484632][ T4325] device hsr_slave_1 left promiscuous mode [ 116.492136][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.500147][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.510318][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.518047][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.526558][ T4325] device bridge_slave_1 left promiscuous mode [ 116.535745][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.552425][ T4325] device bridge_slave_0 left promiscuous mode [ 116.559467][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.595352][ T4325] device veth1_macvtap left promiscuous mode [ 116.602158][ T4325] device veth0_macvtap left promiscuous mode [ 116.608800][ T4325] device veth1_vlan left promiscuous mode [ 116.615188][ T4325] device veth0_vlan left promiscuous mode [ 117.356984][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 117.407605][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 117.455452][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.476129][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 117.513257][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.049167][ T4325] bond0 (unregistering): Released all slaves [ 118.264877][ T5082] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.317389][ T5082] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.330972][ T5082] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.355578][ T5082] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 118.550063][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.572562][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.583420][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.601286][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.613366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.625738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.649020][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.656551][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.676989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.697274][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.716232][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.728146][ T1271] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.736131][ T1271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.762345][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.775633][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.797230][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.810623][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.862971][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.883236][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.915775][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.942419][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.956180][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.974136][ T5082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.986784][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.003016][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.012959][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.309049][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.317644][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.333310][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.548305][ T4258] Bluetooth: hci3: command 0x040f tx timeout [ 119.780677][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.801288][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.839964][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.859893][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.877487][ T5082] device veth0_vlan entered promiscuous mode [ 119.887361][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.896886][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.913490][ T5082] device veth1_vlan entered promiscuous mode [ 119.960897][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.970124][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.984242][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.994812][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.006756][ T5082] device veth0_macvtap entered promiscuous mode [ 120.023412][ T5082] device veth1_macvtap entered promiscuous mode [ 120.045171][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.065050][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.077714][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.089895][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.100955][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.118654][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.132951][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.145757][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.157912][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.167192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.176388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.186869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.199366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.214788][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.226425][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.237033][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.249184][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.260933][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.272204][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.283869][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.294687][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.306696][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.329095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.338407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.352792][ T5082] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.362143][ T5082] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.371735][ T5082] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.382047][ T5082] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.474568][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.484715][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.505035][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.536660][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.547344][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.565879][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.750670][ T5211] loop2: detected capacity change from 0 to 512 [ 120.821766][ T5213] netlink: 24 bytes leftover after parsing attributes in process `syz.5.280'. [ 120.864670][ T5213] netlink: 176 bytes leftover after parsing attributes in process `syz.5.280'. [ 120.895866][ T5213] netlink: 80 bytes leftover after parsing attributes in process `syz.5.280'. [ 120.910568][ T5211] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 120.923802][ T5211] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.155332][ T5210] loop3: detected capacity change from 0 to 8192 [ 121.204928][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 121.627873][ T4258] Bluetooth: hci3: command 0x0419 tx timeout [ 121.827956][ T4297] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.834856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 121.888440][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'. [ 122.033279][ T4297] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 122.077909][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.096864][ T4297] usb 3-1: Product: syz [ 122.135424][ T4297] usb 3-1: Manufacturer: syz [ 122.160984][ T4297] usb 3-1: SerialNumber: syz [ 122.210112][ T4297] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 122.399704][ T4297] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 122.891491][ T5235] loop1: detected capacity change from 0 to 32768 [ 123.050102][ T4296] usb 3-1: USB disconnect, device number 3 [ 123.065374][ T5235] ERROR: (device loop1): diAllocAG: numfree > numinos [ 123.065374][ T5235] [ 123.098857][ T5235] ERROR: (device loop1): remounting filesystem as read-only [ 123.139015][ T5235] ialloc: diAlloc returned -5! [ 123.403661][ T5266] netlink: 68 bytes leftover after parsing attributes in process `syz.3.331'. [ 123.468365][ T4297] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 123.477251][ T4297] ath9k_htc: Failed to initialize the device [ 123.501330][ T5264] loop0: detected capacity change from 0 to 8192 [ 123.510739][ T4296] usb 3-1: ath9k_htc: USB layer deinitialized [ 123.847637][ T5255] loop5: detected capacity change from 0 to 32768 [ 123.932193][ T5255] [ 123.932193][ T5255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.932193][ T5255] [ 124.031058][ T4454] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.070788][ T5255] ERROR: (device loop5): diWrite: ixpxd invalid [ 124.070788][ T5255] [ 124.164109][ T5279] tmpfs: Cannot retroactively limit size [ 124.165370][ T5255] ERROR: (device loop5): txCommit: [ 124.165370][ T5255] [ 124.247867][ T4454] usb 4-1: Using ep0 maxpacket: 8 [ 124.255416][ T4454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.307998][ T4454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.377864][ T4454] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 124.419534][ T4454] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 124.457429][ T4454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.501263][ T5082] [ 124.501263][ T5082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.501263][ T5082] [ 124.520536][ T4454] usb 4-1: config 0 descriptor?? [ 124.548514][ T5082] [ 124.548514][ T5082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.548514][ T5082] [ 124.804354][ T5296] loop1: detected capacity change from 0 to 512 [ 124.828808][ T5296] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.948335][ T4454] logitech 0003:046D:C293.0003: nested delimiters [ 124.955026][ T4454] logitech 0003:046D:C293.0003: item 0 4 2 10 parsing failed [ 124.973934][ T4454] logitech 0003:046D:C293.0003: parse failed [ 124.991253][ T5296] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 125.001191][ T4454] logitech: probe of 0003:046D:C293.0003 failed with error -22 [ 125.033693][ T5296] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.192913][ T4454] usb 4-1: USB disconnect, device number 4 [ 125.336039][ T5311] loop2: detected capacity change from 0 to 512 [ 125.347907][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 125.361213][ T4325] Quota error (device loop1): remove_tree: Cycle in quota tree detected: block 5 index 0 [ 125.404809][ T4325] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:7: Failed to release dquot type 0 [ 125.457306][ T5311] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.343: invalid indirect mapped block 256 (level 2) [ 125.552696][ T5311] EXT4-fs (loop2): Remounting filesystem read-only [ 125.565451][ T5311] EXT4-fs (loop2): 2 truncates cleaned up [ 125.571811][ T5311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 125.645220][ T5316] loop5: detected capacity change from 0 to 1024 [ 125.721973][ T5316] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 125.758126][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 125.956167][ T5324] nbd: must specify a device to reconfigure [ 125.991462][ T5082] EXT4-fs (loop5): unmounting filesystem. [ 126.219999][ T5332] loop5: detected capacity change from 0 to 256 [ 126.247233][ T5326] loop2: detected capacity change from 0 to 4096 [ 126.336861][ T5332] FAT-fs (loop5): Directory bread(block 64) failed [ 126.369304][ T5332] FAT-fs (loop5): Directory bread(block 65) failed [ 126.389625][ T5332] FAT-fs (loop5): Directory bread(block 66) failed [ 126.416208][ T5332] FAT-fs (loop5): Directory bread(block 67) failed [ 126.427612][ T5326] ntfs: volume version 3.1. [ 126.454421][ T5332] FAT-fs (loop5): Directory bread(block 68) failed [ 126.478159][ T5332] FAT-fs (loop5): Directory bread(block 69) failed [ 126.505320][ T5332] FAT-fs (loop5): Directory bread(block 70) failed [ 126.538085][ T4296] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 126.548016][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.560948][ T5332] FAT-fs (loop5): Directory bread(block 71) failed [ 126.588285][ T5332] FAT-fs (loop5): Directory bread(block 72) failed [ 126.607780][ T5332] FAT-fs (loop5): Directory bread(block 73) failed [ 126.740828][ T4296] usb 1-1: config 0 has an invalid interface number: 151 but max is 2 [ 126.755381][ T22] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 126.775072][ T4296] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 126.793220][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.831400][ T4296] usb 1-1: config 0 has no interface number 0 [ 126.838412][ T22] usb 4-1: Product: syz [ 126.842688][ T22] usb 4-1: Manufacturer: syz [ 126.847408][ T22] usb 4-1: SerialNumber: syz [ 126.863111][ T4296] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 126.898741][ T22] usb 4-1: config 0 descriptor?? [ 126.908213][ T4296] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 126.931800][ T22] usbsevseg 4-1:0.0: USB 7 Segment device now attached [ 126.951724][ T4296] usb 1-1: Dual-Role OTG device on HNP port [ 126.978219][ T4296] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 127.002474][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.031382][ T4296] usb 1-1: Product: syz [ 127.035653][ T4296] usb 1-1: Manufacturer: syz [ 127.051683][ T4296] usb 1-1: SerialNumber: syz [ 127.073938][ T4296] usb 1-1: config 0 descriptor?? [ 127.121745][ T1169] usb 4-1: USB disconnect, device number 5 [ 127.138935][ T1169] usbsevseg 4-1:0.0: USB 7 Segment now disconnected [ 127.399034][ T4296] usb 1-1: USB disconnect, device number 2 [ 127.660249][ T4330] udevd[4330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.287615][ T5351] loop2: detected capacity change from 0 to 40427 [ 128.333832][ T5351] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 128.357747][ T5351] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 128.404445][ T5351] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x3ffff [ 128.442165][ T5351] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 128.465170][ T5353] loop5: detected capacity change from 0 to 32768 [ 128.486302][ T5351] F2FS-fs (loop2): invalid crc value [ 128.571864][ T5387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 128.584670][ T5351] F2FS-fs (loop2): Found nat_bits in checkpoint [ 128.606096][ T5353] XFS (loop5): Mounting V5 Filesystem [ 128.874651][ T5351] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 128.907202][ T5353] XFS (loop5): Ending clean mount [ 128.927233][ T5351] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 128.971510][ T5353] XFS (loop5): Quotacheck needed: Please wait. [ 129.141229][ T26] audit: type=1800 audit(1749049385.297:14): pid=5351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.358" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 129.233492][ T5353] XFS (loop5): Quotacheck: Done. [ 129.255540][ T26] audit: type=1800 audit(1749049385.407:15): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.359" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 129.334150][ T4263] syz-executor: attempt to access beyond end of device [ 129.334150][ T4263] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.369611][ T5410] IPVS: Unknown mcast interface: pim6reg [ 129.379672][ T5411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'. [ 129.445542][ T5413] loop3: detected capacity change from 0 to 1024 [ 129.510102][ T5082] XFS (loop5): Unmounting Filesystem [ 129.734396][ T5417] process 'syz.1.380' launched '/dev/fd/3' with NULL argv: empty string added [ 129.861255][ T4280] hfsplus: b-tree write err: -5, ino 4 [ 130.357944][ T4296] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.557923][ T4296] usb 1-1: Using ep0 maxpacket: 16 [ 130.575134][ T4296] usb 1-1: config 0 has no interfaces? [ 130.598832][ T4296] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 130.627110][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.629902][ T5442] loop1: detected capacity change from 0 to 256 [ 130.646562][ T4296] usb 1-1: Product: syz [ 130.671170][ T4296] usb 1-1: Manufacturer: syz [ 130.696338][ T4296] usb 1-1: SerialNumber: syz [ 130.725913][ T5447] loop5: detected capacity change from 0 to 256 [ 130.740859][ T4296] r8152-cfgselector 1-1: config 0 descriptor?? [ 130.741417][ T5442] exfat: Deprecated parameter 'utf8' [ 130.756245][ T5447] exfat: Deprecated parameter 'utf8' [ 130.770205][ T5442] exfat: Deprecated parameter 'utf8' [ 130.795371][ T5447] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 130.823796][ T5442] exfat: Deprecated parameter 'utf8' [ 130.909094][ T5442] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4899f300, utbl_chksum : 0xe619d30d) [ 130.986403][ T4296] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 131.197385][ T22] usb 1-1: USB disconnect, device number 3 [ 131.568168][ T4452] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.789491][ T4452] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 131.844515][ T4452] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 131.892024][ T4452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.941799][ T4452] usb 2-1: config 0 descriptor?? [ 132.400745][ T4452] elecom 0003:056E:00FC.0004: hidraw0: USB HID v1.01 Device [HID 056e:00fc] on usb-dummy_hcd.1-1/input0 [ 132.594788][ T4452] usb 2-1: USB disconnect, device number 3 [ 132.753748][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.760292][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.945661][ T5494] fido_id[5494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 133.379633][ T5524] device wlan0 entered promiscuous mode [ 133.520552][ T4452] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.545584][ T5527] loop0: detected capacity change from 0 to 8 [ 133.625319][ T5527] SQUASHFS error: xz decompression failed, data probably corrupt [ 133.643195][ T5527] SQUASHFS error: Failed to read block 0x108: -5 [ 133.658189][ T5527] SQUASHFS error: Unable to read metadata cache entry [106] [ 133.676908][ T5527] SQUASHFS error: Unable to read inode 0x11f [ 133.747006][ T4452] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.770386][ T4452] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.822485][ T4452] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 133.863804][ T4452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.884568][ T4452] usb 4-1: config 0 descriptor?? [ 134.133011][ T5543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'. [ 134.155100][ T5543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'. [ 134.307339][ T4452] ortek 0003:1223:3F07.0005: Fixing up logical maximum in report descriptor (Ortek) [ 134.355030][ T4452] ortek 0003:1223:3F07.0005: unknown main item tag 0x6 [ 134.373013][ T4452] ortek 0003:1223:3F07.0005: report_id 29495 is invalid [ 134.396988][ T4452] ortek 0003:1223:3F07.0005: item 0 2 1 8 parsing failed [ 134.423781][ T4452] ortek: probe of 0003:1223:3F07.0005 failed with error -22 [ 134.513100][ T22] usb 4-1: USB disconnect, device number 6 [ 134.799430][ T5566] netlink: 'syz.0.436': attribute type 2 has an invalid length. [ 135.382388][ T5558] loop1: detected capacity change from 0 to 32768 [ 135.477033][ T5558] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.495210][ T5558] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 135.519173][ T5558] BTRFS info (device loop1): force clearing of disk cache [ 135.568355][ T5589] loop5: detected capacity change from 0 to 256 [ 135.586293][ T5558] BTRFS info (device loop1): force zlib compression, level 3 [ 135.597793][ T127] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.627135][ T5589] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.652762][ T5558] BTRFS info (device loop1): enabling auto defrag [ 135.675973][ T5558] BTRFS info (device loop1): max_inline at 0 [ 135.692779][ T5589] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 135.705803][ T5558] BTRFS info (device loop1): using free space tree [ 135.739374][ T5589] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 135.797927][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 135.813136][ T127] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.841127][ T127] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.859019][ T127] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 135.874005][ T127] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 135.883409][ T127] usb 1-1: Product: syz [ 135.887640][ T127] usb 1-1: Manufacturer: syz [ 135.907956][ T127] hub 1-1:4.0: USB hub found [ 135.936990][ T5594] loop3: detected capacity change from 0 to 4096 [ 135.978978][ T5594] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 136.044618][ T5558] BTRFS info (device loop1): enabling ssd optimizations [ 136.077264][ T5558] BTRFS info (device loop1): rebuilding free space tree [ 136.101235][ T5594] ntfs: volume version 3.1. [ 136.127022][ T127] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 136.458078][ T4452] usb 1-1: USB disconnect, device number 4 [ 136.767724][ T4252] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.946743][ T5638] loop2: detected capacity change from 0 to 16 [ 137.024123][ T5638] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 137.073302][ T5638] erofs: (device loop2): mounted with root inode @ nid 36. [ 137.442473][ T5640] loop3: detected capacity change from 0 to 8192 [ 137.550741][ T5650] mmap: syz.0.464 (5650): VmData 54239232 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 137.894584][ T5656] netlink: 'syz.0.466': attribute type 1 has an invalid length. [ 138.419836][ T4452] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 138.506466][ T4452] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 138.774833][ T5675] fido_id[5675]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 138.795865][ T5646] loop5: detected capacity change from 0 to 32768 [ 138.867829][ T4452] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 138.906045][ T5646] find_entry called with index >= next_index [ 138.957345][ T5646] find_entry called with index >= next_index [ 139.001396][ T5646] find_entry called with index >= next_index [ 139.089739][ T4452] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.134780][ T4452] usb 1-1: config 0 has no interface number 0 [ 139.160860][ T4452] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 139.201398][ T4452] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.247119][ T4452] usb 1-1: config 0 descriptor?? [ 139.272403][ T4452] usb 1-1: selecting invalid altsetting 1 [ 139.329285][ T4452] dvb_ttusb_budget: ttusb_init_controller: error [ 139.342854][ T5657] loop2: detected capacity change from 0 to 40427 [ 139.358152][ T4452] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 139.401077][ T5657] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 139.431507][ T5657] F2FS-fs (loop2): invalid crc value [ 139.473881][ T5657] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.560584][ T5695] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 139.680969][ T5657] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 139.715750][ T4452] DVB: Unable to find symbol cx22700_attach() [ 139.783075][ T5657] F2FS-fs (loop2): Can't flush 1550 in 0 for segs_per_sec 1 != 1 [ 139.883522][ T5679] loop3: detected capacity change from 0 to 32768 [ 139.958877][ T4452] DVB: Unable to find symbol tda10046_attach() [ 139.988262][ T4452] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 139.995671][ T5679] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root [ 139.995671][ T5679] [ 140.013414][ T4452] usb 1-1: USB disconnect, device number 5 [ 140.063446][ T4263] syz-executor: attempt to access beyond end of device [ 140.063446][ T4263] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.450077][ T5708] block nbd5: NBD_DISCONNECT [ 140.689763][ T4257] BUG: Bad page state in process syz-executor pfn:73a12 [ 140.697413][ T4257] page:ffffea0001ce8480 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x73a12 [ 140.751668][ T4257] flags: 0xfff18000002046(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 140.777844][ T4257] raw: 00fff18000002046 ffffea0000a25a48 ffffc90003e47960 0000000000000000 [ 140.801218][ T4257] raw: 0000000000000004 ffff88805889dba0 00000000ffffffff 0000000000000000 [ 140.841204][ T4257] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 140.867739][ T4257] page_owner tracks the page as allocated [ 140.876879][ T4257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 5679, tgid 5678 (syz.3.473), ts 139993409733, free_ts 133640105678 [ 140.951019][ T4257] post_alloc_hook+0x173/0x1a0 [ 140.966242][ T4257] get_page_from_freelist+0x1a26/0x1ac0 [ 140.980237][ T4257] __alloc_pages+0x1df/0x4e0 [ 140.990300][ T4257] folio_alloc+0x1c/0x60 [ 140.997094][ T4257] filemap_alloc_folio+0xdb/0x460 [ 141.021165][ T4257] do_read_cache_folio+0x1bb/0x760 [ 141.030250][ T4257] do_read_cache_page+0x32/0x220 [ 141.040634][ T4257] __get_metapage+0x316/0xfa0 [ 141.049314][ T4257] dbAllocCtl+0xd4/0x9a0 [ 141.057404][ T4257] dbAllocAG+0xb9c/0xf10 [ 141.065959][ T4257] dbDiscardAG+0x2ca/0x8e0 [ 141.077377][ T4257] jfs_ioc_trim+0x42b/0x660 [ 141.090685][ T4257] jfs_ioctl+0x2b6/0x3d0 [ 141.100953][ T4257] __se_sys_ioctl+0xfa/0x170 [ 141.109253][ T4257] do_syscall_64+0x4c/0xa0 [ 141.120765][ T4257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.133568][ T4257] page last free stack trace: [ 141.142908][ T4257] free_unref_page_prepare+0x8b4/0x9a0 [ 141.154668][ T4257] free_unref_page_list+0xbb/0x8e0 [ 141.164540][ T4257] release_pages+0x1f92/0x2200 [ 141.179663][ T4257] tlb_flush_mmu+0xff/0x210 [ 141.200977][ T4257] tlb_finish_mmu+0xbd/0x1c0 [ 141.227884][ T4257] exit_mmap+0x343/0x8e0 [ 141.232327][ T4257] __mmput+0x118/0x3c0 [ 141.236615][ T4257] exit_mm+0x1e6/0x2c0 [ 141.241617][ T4257] do_exit+0x8b9/0x2400 [ 141.245979][ T4257] do_group_exit+0x217/0x2d0 [ 141.250992][ T4257] get_signal+0x1272/0x1350 [ 141.255700][ T4257] arch_do_signal_or_restart+0xb0/0x1230 [ 141.262987][ T4257] exit_to_user_mode_loop+0x70/0x110 [ 141.268684][ T4257] exit_to_user_mode_prepare+0xb1/0x140 [ 141.274452][ T4257] syscall_exit_to_user_mode+0x16/0x40 [ 141.280620][ T4257] do_syscall_64+0x58/0xa0 [ 141.290048][ T4257] Modules linked in: [ 141.295550][ T4257] CPU: 1 PID: 4257 Comm: syz-executor Not tainted 6.1.141-syzkaller #0 [ 141.305328][ T4257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.315945][ T4257] Call Trace: [ 141.319278][ T4257] [ 141.322237][ T4257] dump_stack_lvl+0x168/0x22e [ 141.327148][ T4257] ? show_regs_print_info+0x12/0x12 [ 141.332490][ T4257] ? swiotlb_print_info+0x60/0x60 [ 141.337664][ T4257] bad_page+0x14b/0x170 [ 141.342129][ T4257] free_unref_page_prepare+0x42a/0x9a0 [ 141.347773][ T4257] ? percpu_ref_put+0x19/0x180 [ 141.353098][ T4257] free_unref_page_list+0xbb/0x8e0 [ 141.358988][ T4257] release_pages+0x1f92/0x2200 [ 141.364255][ T4257] ? lru_cache_disable+0x30/0x30 [ 141.369411][ T4257] ? mlock_page_drain_local+0x75/0x490 [ 141.375093][ T4257] ? mlock_page_drain_local+0x75/0x490 [ 141.380925][ T4257] ? mlock_page_drain_local+0x289/0x490 [ 141.387070][ T4257] __pagevec_release+0x6d/0xe0 [ 141.392261][ T4257] truncate_inode_pages_range+0x2f6/0xff0 [ 141.398039][ T4257] ? mapping_evict_folio+0x520/0x520 [ 141.403656][ T4257] ? jfs_alloc_inode+0x60/0x60 [ 141.408699][ T4257] ? evict+0x7da/0x870 [ 141.412899][ T4257] ? do_raw_spin_unlock+0x11d/0x230 [ 141.418317][ T4257] ? _raw_spin_unlock+0x24/0x40 [ 141.423460][ T4257] ? iput+0x768/0x980 [ 141.427646][ T4257] dbUnmount+0x105/0x170 [ 141.432667][ T4257] jfs_umount+0x1fa/0x360 [ 141.437511][ T4257] jfs_put_super+0x88/0x190 [ 141.442233][ T4257] ? jfs_free_inode+0x20/0x20 [ 141.447396][ T4257] generic_shutdown_super+0x130/0x340 [ 141.453442][ T4257] kill_block_super+0x7c/0xe0 [ 141.458463][ T4257] deactivate_locked_super+0x93/0xf0 [ 141.464632][ T4257] cleanup_mnt+0x463/0x4f0 [ 141.469384][ T4257] ? lockdep_hardirqs_on+0x94/0x140 [ 141.478216][ T4257] task_work_run+0x1ca/0x250 [ 141.483750][ T4257] ? task_work_cancel+0x230/0x230 [ 141.489180][ T4257] ? exit_to_user_mode_loop+0x3b/0x110 [ 141.494837][ T4257] exit_to_user_mode_loop+0xe6/0x110 [ 141.500246][ T4257] exit_to_user_mode_prepare+0xb1/0x140 [ 141.506084][ T4257] syscall_exit_to_user_mode+0x16/0x40 [ 141.511751][ T4257] do_syscall_64+0x58/0xa0 [ 141.516276][ T4257] ? clear_bhb_loop+0x60/0xb0 [ 141.520981][ T4257] ? clear_bhb_loop+0x60/0xb0 [ 141.525672][ T4257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.531979][ T4257] RIP: 0033:0x7f564858fc57 [ 141.536801][ T4257] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 141.558237][ T4257] RSP: 002b:00007ffd5571a968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 141.567578][ T4257] RAX: 0000000000000000 RBX: 00007f564861089d RCX: 00007f564858fc57 [ 141.575913][ T4257] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5571aa20 [ 141.585170][ T4257] RBP: 00007ffd5571aa20 R08: 0000000000000000 R09: 0000000000000000 [ 141.596070][ T4257] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5571bab0 [ 141.606528][ T4257] R13: 00007f564861089d R14: 0000000000022362 R15: 00007ffd5571baf0 [ 141.616400][ T4257] [ 141.638967][ T4257] Disabling lock debugging due to kernel taint [ 141.645833][ T4257] BUG: Bad page state in process syz-executor pfn:28969 [ 141.656248][ T4257] page:ffffea0000a25a40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x3 pfn:0x28969 [ 141.668061][ T4257] flags: 0xfff18000002046(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 141.680352][ T4257] raw: 00fff18000002046 ffffea0001e78108 ffffc90003e47960 0000000000000000 [ 141.689806][ T4257] raw: 0000000000000003 ffff8880572ea000 00000000ffffffff 0000000000000000 [ 141.699297][ T4257] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 141.707602][ T4257] page_owner tracks the page as allocated [ 141.717239][ T4257] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 5679, tgid 5678 (syz.3.473), ts 139988976299, free_ts 133640123847 [ 141.737919][ T4257] post_alloc_hook+0x173/0x1a0 [ 141.743043][ T4257] get_page_from_freelist+0x1a26/0x1ac0 [ 141.754094][ T4257] __alloc_pages+0x1df/0x4e0 [ 141.760243][ T4257] folio_alloc+0x1c/0x60 [ 141.764824][ T4257] filemap_alloc_folio+0xdb/0x460 [ 141.770611][ T4257] do_read_cache_folio+0x1bb/0x760 [ 141.776051][ T4257] do_read_cache_page+0x32/0x220 [ 141.782162][ T4257] __get_metapage+0x316/0xfa0 [ 141.787255][ T4257] dbAllocAG+0x3dd/0xf10 [ 141.793844][ T4257] dbDiscardAG+0x2ca/0x8e0 [ 141.799556][ T4257] jfs_ioc_trim+0x42b/0x660 [ 141.805736][ T4257] jfs_ioctl+0x2b6/0x3d0 [ 141.812324][ T4257] __se_sys_ioctl+0xfa/0x170 [ 141.817230][ T4257] do_syscall_64+0x4c/0xa0 [ 141.822431][ T4257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.830302][ T4257] page last free stack trace: [ 141.835102][ T4257] free_unref_page_prepare+0x8b4/0x9a0 [ 141.842007][ T4257] free_unref_page_list+0xbb/0x8e0 [ 141.847482][ T4257] release_pages+0x1f92/0x2200 [ 141.854457][ T4257] tlb_flush_mmu+0xff/0x210 [ 141.864089][ T4257] tlb_finish_mmu+0xbd/0x1c0 [ 141.869736][ T4257] exit_mmap+0x343/0x8e0 [ 141.874209][ T4257] __mmput+0x118/0x3c0 [ 141.878579][ T4257] exit_mm+0x1e6/0x2c0 [ 141.882695][ T4257] do_exit+0x8b9/0x2400 [ 141.886959][ T4257] do_group_exit+0x217/0x2d0 [ 141.891726][ T4257] get_signal+0x1272/0x1350 [ 141.896704][ T4257] arch_do_signal_or_restart+0xb0/0x1230 [ 141.902832][ T4257] exit_to_user_mode_loop+0x70/0x110 [ 141.908612][ T4257] exit_to_user_mode_prepare+0xb1/0x140 [ 141.914293][ T4257] syscall_exit_to_user_mode+0x16/0x40 [ 141.919917][ T4257] do_syscall_64+0x58/0xa0 [ 141.924380][ T4257] Modules linked in: [ 141.928841][ T4257] CPU: 0 PID: 4257 Comm: syz-executor Tainted: G B 6.1.141-syzkaller #0 [ 141.938726][ T4257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.949100][ T4257] Call Trace: [ 141.952756][ T4257] [ 141.955753][ T4257] dump_stack_lvl+0x168/0x22e [ 141.960807][ T4257] ? show_regs_print_info+0x12/0x12 [ 141.966242][ T4257] ? swiotlb_print_info+0x60/0x60 [ 141.971391][ T4257] bad_page+0x14b/0x170 [ 141.975680][ T4257] free_unref_page_prepare+0x42a/0x9a0 [ 141.981555][ T4257] ? percpu_ref_put+0x19/0x180 [ 141.986520][ T4257] free_unref_page_list+0xbb/0x8e0 [ 141.992011][ T4257] release_pages+0x1f92/0x2200 [ 141.996887][ T4257] ? lru_cache_disable+0x30/0x30 [ 142.002300][ T4257] ? mlock_page_drain_local+0x75/0x490 [ 142.009796][ T4257] ? mlock_page_drain_local+0x75/0x490 [ 142.015469][ T4257] ? mlock_page_drain_local+0x289/0x490 [ 142.021050][ T4257] __pagevec_release+0x6d/0xe0 [ 142.026108][ T4257] truncate_inode_pages_range+0x2f6/0xff0 [ 142.031861][ T4257] ? mapping_evict_folio+0x520/0x520 [ 142.037178][ T4257] ? jfs_alloc_inode+0x60/0x60 [ 142.042323][ T4257] ? evict+0x7da/0x870 [ 142.046429][ T4257] ? do_raw_spin_unlock+0x11d/0x230 [ 142.051909][ T4257] ? _raw_spin_unlock+0x24/0x40 [ 142.057152][ T4257] ? iput+0x768/0x980 [ 142.061243][ T4257] dbUnmount+0x105/0x170 [ 142.065684][ T4257] jfs_umount+0x1fa/0x360 [ 142.070079][ T4257] jfs_put_super+0x88/0x190 [ 142.074641][ T4257] ? jfs_free_inode+0x20/0x20 [ 142.079707][ T4257] generic_shutdown_super+0x130/0x340 [ 142.085194][ T4257] kill_block_super+0x7c/0xe0 [ 142.089921][ T4257] deactivate_locked_super+0x93/0xf0 [ 142.095422][ T4257] cleanup_mnt+0x463/0x4f0 [ 142.099884][ T4257] ? lockdep_hardirqs_on+0x94/0x140 [ 142.105096][ T4257] task_work_run+0x1ca/0x250 [ 142.109719][ T4257] ? task_work_cancel+0x230/0x230 [ 142.114979][ T4257] ? exit_to_user_mode_loop+0x3b/0x110 [ 142.120813][ T4257] exit_to_user_mode_loop+0xe6/0x110 [ 142.126130][ T4257] exit_to_user_mode_prepare+0xb1/0x140 [ 142.131938][ T4257] syscall_exit_to_user_mode+0x16/0x40 [ 142.138298][ T4257] do_syscall_64+0x58/0xa0 [ 142.142867][ T4257] ? clear_bhb_loop+0x60/0xb0 [ 142.148972][ T4257] ? clear_bhb_loop+0x60/0xb0 [ 142.154282][ T4257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.160242][ T4257] RIP: 0033:0x7f564858fc57 [ 142.164695][ T4257] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 142.185849][ T4257] RSP: 002b:00007ffd5571a968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 142.194450][ T4257] RAX: 0000000000000000 RBX: 00007f564861089d RCX: 00007f564858fc57 [ 142.203162][ T4257] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5571aa20 [ 142.212007][ T4257] RBP: 00007ffd5571aa20 R08: 0000000000000000 R09: 0000000000000000 [ 142.220348][ T4257] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5571bab0 [ 142.228343][ T4257] R13: 00007f564861089d R14: 0000000000022362 R15: 00007ffd5571baf0 [ 142.236452][ T4257]