last executing test programs: 2m4.677968174s ago: executing program 0 (id=132): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m4.267129347s ago: executing program 0 (id=135): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000001fb195d574202b200000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 2m4.007882368s ago: executing program 0 (id=136): r0 = syz_usb_connect$hid(0x3, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004043552205000000000001090224000100001000090400000103000000092100000001220b000905810300"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xb, {[@local, @global=@item_4={0x3, 0x1, 0x3}, @main=@item_4={0x3, 0x0, 0x9, '(D%J'}]}}, 0x0}, 0x0) 2m1.852494732s ago: executing program 0 (id=141): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.impure\x00', &(0x7f0000000200)='+$$+\x00', 0x5, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m1.01843311s ago: executing program 0 (id=144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x6, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) 1m58.259724833s ago: executing program 0 (id=155): r0 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r0, 0x1, 0x0, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 1m57.783164961s ago: executing program 32 (id=155): r0 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r0, 0x1, 0x0, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 1m51.885079098s ago: executing program 3 (id=193): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000200)=@req={0xc8, 0x5, 0xffff, 0x1}, 0x10) 1m50.898320527s ago: executing program 3 (id=199): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$char_usb(r0, &(0x7f0000000000)=""/25, 0x19) 1m50.752096979s ago: executing program 3 (id=201): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_UID={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x20000050) 1m50.608384291s ago: executing program 3 (id=202): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x10c0845, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 1m50.308007875s ago: executing program 3 (id=204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 1m49.391444969s ago: executing program 3 (id=207): capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0x1, 0x9, 0x6, 0x3, 0xd9000000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000340)=""/14) 1m48.806761936s ago: executing program 33 (id=207): capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0x1, 0x9, 0x6, 0x3, 0xd9000000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000340)=""/14) 4.411309823s ago: executing program 5 (id=856): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x503, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1804}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 4.254826686s ago: executing program 4 (id=859): r0 = gettid() r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0x10000}], 0x1, 0x40001023, 0x0) rt_sigqueueinfo(r0, 0xb, &(0x7f0000000440)={0x0, 0x0, 0xfffffffb}) 4.064370081s ago: executing program 5 (id=861): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 3.964104539s ago: executing program 4 (id=862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xce4, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r0, 0x0, 0x100000000000000}, 0x38) 3.865474557s ago: executing program 5 (id=864): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x9, 0xa41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x67, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf826, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x29bf, 0x0, 0x0, 0x40, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) 3.800431553s ago: executing program 1 (id=865): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="02030c65420002000000ab5d888e", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x7, 0x6, @broadcast}, 0x14) 3.631105507s ago: executing program 5 (id=866): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="359374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) 3.549585483s ago: executing program 1 (id=867): r0 = syz_usbip_server_init(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) write$usbip_server(r0, &(0x7f0000000300)=@ret_submit={{0x3, 0x1000, 0x0, 0x0, 0x2}, 0x10, 0x0, 0x2e0, 0x0, 0x1}, 0x30) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 3.512157296s ago: executing program 4 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.362998328s ago: executing program 5 (id=869): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x560, 0x0, 0x7fffffff}]}) 3.260983576s ago: executing program 4 (id=870): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfe}, 0x2) 2.928441813s ago: executing program 4 (id=871): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nogrpid}, {@gquota}, {@usrquota}, {@gqnoenforce}, {@nodiscard}, {@attr2}, {@nodiscard}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2.914668714s ago: executing program 5 (id=872): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/54, 0x36}}], 0x40000a3, 0x2, 0x0) 1.950113162s ago: executing program 2 (id=873): r0 = socket(0x2, 0x1, 0x0) listen(r0, 0xe) select(0x40, &(0x7f0000000040)={0x8, 0x5, 0x4008, 0x8000000000000003, 0x3, 0x1000000000090, 0x4c}, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 1.402874537s ago: executing program 1 (id=874): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x39, 0x1, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x40}], 0x0, 0x98, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.352311991s ago: executing program 2 (id=875): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000000000fb6b00000008000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000000) 1.032578176s ago: executing program 1 (id=876): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000120005ff00000000000000800000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 952.307123ms ago: executing program 2 (id=877): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in6=@rand_addr=' \x01\x00', 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x138}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 706.083773ms ago: executing program 1 (id=878): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac10009"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 543.322696ms ago: executing program 4 (id=879): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 542.715096ms ago: executing program 2 (id=880): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000080)={&(0x7f0000000ac0)={{@host, 0x7f}, {@hyper, 0x2}, 0x400, "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"}, 0x418, 0x7}) 320.676584ms ago: executing program 1 (id=881): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000140)={[{@filestreams}, {@noquota}, {@nouuid}, {@pquota}, {@bsdgroups}, {@dax}, {@sysvgroups}, {@attr2}, {@dax_always}]}, 0x1, 0x9799, &(0x7f0000009780)="$eJzs/QWcrWWhuH/Phg1sOgRBpKTEJCVEkQ5FlBQlBGlJARFQOpRQQRFQQQEF6e7uku7u7u54Pxs2qNsLDuf3nv/Bw3VdH/esWTFr7nV/n/tx1jzDWssuuOS8AwPjDLzdO6f/6Pw971pxqTEX3fCE3QffuO8uiz067OKR3z4Zd+5hp/MMO513YGBg0LD7GfT2ZYPnOv6EEQYGDwz93z8aY9TRRhhjYGC0YWeH3c/AbG+fjH7QO7d7c7h4oFMM/XY7v/3vrcYceidDP1l+pdfXGxgYGPJPXz90XDP82wOVtuw8Cy34D6t33UYYdvWgf1z31ungt/+NfsDAwOj7Dbz39jH0tiP909f+bzb0e44z1cDSd30I3/v/XMvOs9Aiw/kPXYsjDrtstqFrfPg1aGz47XyXJdd+eNgUDho2cYP/ab18GNv9/1PLzrPgogPvvY4HFltgi4fefGu/OXj+gYHBCwwMDF5wYGDwQh+2R/3P9KFufFVVVfWhNM+8Mw99zj7CcD8PDHnn51r6ufDi12a8b2Bg8GJvP08cvNI7zwWrqqqqqqqq6j+zeeadeT54/j/O+z3/n+K07cft+X9VVVVVVVXV/50WmWfemYc+1x/u+f9E7/f8/6lHjjjw7b/9n3u2t7/qjQ/3QVRVVVVVVVXV+7bgIvj8f4r3e/5/6fFTXNHz/6qqqqqqqqr/Oy3x5ptvbvVPr7M37OLp3rmenv+f8eAdK3xoA66qqqqqqqqq/3ZvPH7qmf94zffJBoZ7vfe3GvZ7gUFHn33VVR/aQP8zGvTvvw/Z+sMe0/+/DXUecugUAwPrLf1hD6U+hP7PvFZ9/X9S/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7j2O/7/7+v9nHLvKO+8F/+lpZr7p1H985Vvv/T94sUUe3+ZDGvqH0Uf1+P/AWoMGBob5jrPWwMDAYvMssdR0AwMDp9408zRTD7x73exDr5tzvBHfeoP4d/4zkQXG5Tveesq3T4duKAPjv3sfR791/4u8uf+Ig4YbxD817okHHrjmsi/OMvzptO/9OEZ497MxT3jknf+WZYThbjTkPb74nft/57EM7zxs7NMNHfv0G6+7wfQbbbb5F9Zad+U1VltjtfXmmGnWGWeZY45ZZ51+9bXWWW2Gtz++15xN8dbH+T7InI0x/Jw9Ps8/z9nwj+295myK95+zt+5xj0uGfO2dORv835yz+d5/zqZYa9g3GnfukQZWemtuBg0MjDv/SAObDj0z4ygDA+MuMOy2Ew297VfGG2FgYLd/PNChn43y7jY4aOuht1l2wSXnfXs3NTDwj9N/9B7vZz/ysJHPPex0nmGn8779bcYZ+MemOHiu408YYehc/Mt0jDHqaCOMMTAw2rCzw+5nYI63T0Y77Z3bvcf7rA830LdeZmXnt/+91ZgDAwOjD/1kspXP2GHo1P8vvE/7/9P///+b1+yD3t0eBw37N+w2b3vNs9Ai//heb03D0Lkbcdhlsw01+R9+a/t/6d/GO8WQgSneZ7zv87o4b0Xb1zqnTrDt/9Tr4tB4J3qf8b7P6/i+53iXuW/vh9++q/+x8Q63r1v0rY9zf5B93cD77+tGpDtY7fJJh9/XfeO9h/gvu8t35miU4W70Xvu6ifaZfOuh9z/3++/rFh069pH+ZV83wsDAuPO9s68buuNbcKSB3YaemWnomYVGGjh46JmZ3zoz6sDZQ898cZX111l16AUL//t2MN2gf/kDTVhnCw63zgb902MfNNzfdw5++3T0A955D6f32G8OGvaw/st9BW2347zPeN/n/adwnodetuoxQyb4n3r/KRrvkPcf73u9X/Z7jnfXF8646394vO+us5H+aboW/iDrbIp/XWdDH+KI/7QyPujPYavC7d/+fKJ3722TLR9592eKkYa73//qZ4qF33+djbPWcF+3034Dg95vbhb6IHMzyb/tg7b557n5oD9vTTfV29eP+D5zM8ocK077ztyM/N+cm4X+u3Mz98CI/zo3gwcWGBgYmHrY/mHBDzI3E73/3HzQ7WY0uP3bn6/27kXz73Lohe/MzfBz8V/NzYL/3bmZ4t3tZuq3rptyhIGRRx7YdOWNN95wxrc/vnN2prc/vv8anP+DzOU4/zNzOfHg95rLf2yqY9x3xQH/xRr8t336O/c//393LgfencuBtYZfLPWfWr//c5e/u/zd5e8uf3f5u8tf3Hsc/3/39f/3GmfO3Yf9cmOkKyafcMcPe7wfch/p4//DfP/l+P+OE05+xQgD7173vsdn377Nf+Tx2dnePhn9oHduN/zxQR7oex+f3W+O2bb/Xzo++//UO2v1A/werv2/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9x7HP+f4Z2/A3hwxsWfGXYgdKRHt1tu8Q97vB9yH+nj/8N8/+X4/+LLbffoCAPvXve+x//fvo3j+P89ry6463/y8f931mrH/+u/KH93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yF/cex//nfufvAI44Yu/N3/l7gOvG3fnUD3u8H3If1eP/vf+/t/b/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3HDjv8PDPf2lt9uu8Dg+P//7d7Df/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9O/pjFf9n8MYv/d/PHLP7fyx+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL//fzxyz+K+WPWfxXzh+z+P8gf8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bx/2H+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx/1H+mMV/w/wxi/9G+WMW/43zxyz+P84fs/hvkj9m8f9J/pjFf9P8MYv/ZvljFv/N88cs/j/NH7P4/yx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/z/PHLP6/yB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/y/zxyz+v8ofs/j/On/M4r9b/pjFf/f8MYv/b/LHLP6/zR+z+O+RP2bx/13+mMV/z/wxi/9e+WMW/73zxyz+v88fs/j/IX/M4v/H/DGL/z75Yxb/ffPHLP5/yh+z+P85f8ziv1/+mMV///wxi/8B+WMW/7/kj1n8/5o/ZvE/MH/M4n9Q/pjF/2/5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/j/PX/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388ck/oMG8scs/oPyxyz+I+SPWfxHzB+z+A/OH7P4j5Q/ZvEfOX/M4j9K/pjFf0j+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/j+WPWfzHzx+z+E+QP2bx/3j+mMV/wvwxi/9E+WMW/0/kj1n8J84fs/h/Mn/M4j9J/pjFf9L8MYv/ZPljFv/J88cs/lPkj1n8P5U/ZvGf8h3/IR/SuP5Ds/hP1frHLP5T549Z/KfJH7P4T5s/ZvH/dP6YxX+6/DGL/2fyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+X8wfs/hPnz9m8Z8hf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+X8ofs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+X88cs/nPmj1n8v5I/ZvH/av6YxX+u/DGL/9fyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4fz1/zOL/jfwxi/+i+WMW/2/mj1n8F8sfs/h/K3/M4v/t/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4v+d/DGL/7L5Yxb/7+aPWfy/lz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/+/nj1n8V8ofs/ivnD9m8f9B/pjFf5X8MYv/qvljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8zi/8P8MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/6P8MYv/hvljFv+N8scs/hvnj1n8f5w/ZvHfJH/M4v+T/DGL/6b5Yxb/zfLHLP6b549Z/H+aP2bx/1n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/n+ePWfx/kT9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/1/mj1n8f5U/ZvH/df6YxX+3/DGL/+75Yxb/3+SPWfx/mz9m8d8jf8zi/7v8MYv/nvljFv+98scs/nvnj1n8f58/ZvH/Q/6Yxf+P+WMW/33yxyz+++aPWfz/lD9m8f9z/pjFf7/8MYv//vljFv8D8scs/n/JH7P4/zV/zOJ/YP6Yxf+g/DGL/9/+1f+B//Vx/Ydm8T+49Y9Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj8m8X+r/P89if+gy/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv4j04UW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6YxP+tT/P/9yz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5Y9Z/MfPH7P4T5A/ZvH/eP6YxX/C/DGL/0T5Yxb/T+SPWfwnzh+z+H8yf8ziP0n+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfw/lT9m8Z8yf8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+n84fs/hPlz9m8f9M/pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/6fPHLP4z5I8NOn/PkQYGBj7y/jPmj1nW/0z5Yxb/mfPHLP6z5I9Z/L+UP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/L+ePWfznzB+z+H8lf8zi/9X8MYv/XPljFv+v5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8f96/pjF/xv5Yxb/RfPHLP7fzB+z+C+WP2bx/1b+mMX/2/ljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/O/ljFv9l88cs/t/NH7P4fy9/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP7fzx+z+K+UP2bxXzl/zOL/g/yxj6j/kIHh/FfJH/uI+r/VP/uvmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+P8wfs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P8ofs/hvmD9m8d8of8ziv3H+mMX/x/ljFv9N8scs/j/JH7P4b5o/ZvHfLH/M4r95/pjF/6f5Yxb/n+WPWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/ef6Yxf8X+WMW/53yxyz+O+ePWfx3yR+z+O+aP2bx/2X+mMX/V/ljFv9f549Z/HfLH7P4754/ZvH/Tf6Yxf+3+WMW/z3yxyz+v8sfs/jvmT9m8d8rf8ziv3f+mMX/9/ljFv8/5I9Z/P+YP2bx3yd/zOK/b/6Yxf9P+WMW/z/nj1n898sfs/jvnz9m8T8gf8zi/5f8MYv/X/PHLP4H5o9Z/A/KH7P4/y1/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv+/549Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjEf8SB/DGL/6D8MYv/CPljFv8R88cs/oPzxyz+I+WPWfxHzh+z+I+SP2bxH5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMX/Y/ljFv/x88cs/hPkj1n8P54/ZvGfMH/M4j9R/pjF/xP5Yxb/ifPHLP6fzB+z+E+SP2bxnzR/zOI/Wf6YxX/y/DGL/xT5Yxb/T+WPWfynzB+z+E+VP2bxnzp/zOI/Tf6YxX/a/DGL/6fzxyz+0+WPWfw/kz9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9S/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n8v5w/ZvGfM3/M4v+V/DGL/1fzxyz+c+WPWfy/lj9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6Yxf/r+WMW/2/kj1n8F80fs/h/M3/M4r9Y/pjF/1v5Yxb/b+ePWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+SPWfyXzR+z+H83f8zi/738MYv/cvljFv/l88cs/ivkj1n8V8wfs/h/P3/M4r9S/pjFf+X8MYv/D/LHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv8f5o9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4v/j/DGL/yb5Yxb/n+SPWfw3zR+z+G+WP2bx3zx/zOL/0/wxi//P8scs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+P88f8zi/4v8MYv/TvljFv+d88cs/rvkj1n8d80fs/j/Mn/M4v+r/DGL/6/zxyz+u+WPWfx3zx+z+P8mf8zi/9v8MYv/HvljFv/f5Y9Z/PfMH7P475U/ZvHfO3/M4v/7/DGL/x/yxyz+f8wfs/jvkz9m8d83f8zi/6f8MYv/n/PHLP775Y9Z/PfPH7P4H5A/ZvH/S/6Yxf+v+WMW/wPzxyz+B+WPWfz/lj9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/9/zxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/7KPrP/K/+D+UP/bR9f/X9f9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/JvEfPJA/ZvEflD9m8R8hf8ziP2L+mMV/cP6YxX+k/DGL/8j5Yxb/UfLHLP5D8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+H8sf8ziP37+mMV/gvwxi//H88cs/hPmj1n8J8ofs/h/In/M4j9x/pjF/5P5Yxb/SfLHLP6T5o9Z/CfLH7P4T54/ZvGfIn/M4v+p/DGL/5T5Yxb/qfLHLP5T549Z/KfJH7P4T5s/ZvH/dP6YxX+6/DGL/2fyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+X8wfs/hPnz9m8Z8hf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+X8ofs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+X88cs/nPmj1n8v5I/ZvH/av6YxX+u/DGL/9fyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4fz1/zOL/jfwxi/+i+WMW/2/mj1n8F8sfs/h/K3/M4v/t/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4v+d/DGL/7L5Yxb/7+aPWfy/lz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/+/nj1n8V8ofs/ivnD9m8f9B/pjFf5X8MYv/qvljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8zi/8P8MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/6P8MYv/hvljFv+N8scs/hvnj1n8f5w/ZvHfJH/M4v+T/DGL/6b5Yxb/zfLHLP6b549Z/H+aP2bx/1n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/n+ePWfx/kT9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/1/mj1n8f5U/ZvH/df6YxX+3/DGL/+75Yxb/3+SPWfx/mz9m8d8jf8zi/7v8MYv/nvljFv+98scs/nvnj1n8f58/ZvH/Q/6Yxf+P+WMW/33yxyz+++aPWfz/lD9m8f9z/pjFf7/8MYv//vljFv8D8scs/n/JH7P4/zV/zOJ/YP6Yxf+g/DGL/9/yxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvH/e/6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9J/EcayB+z+A/KH7P4j5A/ZvEfMX/M4j84f8ziP1L+mMV/5Pwxi/8o+WMW/yH5Yxb/UfPHLP6j5Y9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8P5Y/ZvEfP3/M4j9B/pjF/+P5Yxb/CfPHLP4T5Y9Z/D+RP2bxnzh/zOL/yfwxi/8k+WMW/0nzxyz+k+WPWfwnzx+z+E+RP2bx/1T+mMV/yvwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+H86f8ziP13+mMX/M/ljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv8v5Y9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjF/8v5Yxb/OfPHLP5fyR+z+H81f8ziP1f+mMX/a/ljFv+588cs/vPkj1n8580fG+Y/yrCzH1n/+fLHLOt//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bx/3r+mMX/G/ljFv9F88cs/t/MH7P4L5Y/ZvH/Vv6Yxf/b+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf87+WMW/2Xzxyz+380fs/h/L3/M4r9c/pjFf/n8MYv/CvljFv8V88cs/t/PH7P4r5Q/ZvFfOX/M4v+D/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjF/4f5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/0f5Yxb/DfPHLP4b5Y9Z/DfOH7P4/zh/zOK/Sf6Yxf8n+WMW/03zxyz+m+WPWfw3zx+z+P80f8zi/7P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+P88fs/j/In/M4r9T/pjFf+f8MYv/LvljFv9d88cs/r/MH7P4/yp/zOL/6/wxi/9u+WMW/93zxyz+v8kfs/j/Nn/M4r9H/pjF/3f5Yxb/PfPHLP575Y9Z/PfOH7P4/z5/zOL/h/wxi/8f88cs/vvkj1n8980fs/j/KX/M4v/n/DGL/375Yxb//fPHLP4H5I9Z/P+SP2bx/2v+mMX/wPwxi/9B+WMW/7/lj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOL/9/wxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+T+I88kD9m8R+UP2bxHyF/zOI/Yv6YxX9w/pjFf6T8MYv/yPljFv9R8scs/kPyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4fyx/zOI/fv6YxX+C/DGL/8fzxyz+E+aPWfwnyh+z+H8if8ziP3H+mMX/k/ljFv9J8scs/pPmj1n8J8sfs/hPnj9m8Z8if8zi/6n8MYv/lPljFv+p8scs/lPnj1n8p8kfs/hPmz9m8f90/pjFf7r8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP5fyh+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5fzxyz+c+aPWfy/kj9m8f9q/pjFf678MYv/1/LHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/h/PX/M4v+N/DGL/6L5Yxb/b+aPWfwXyx+z+H8rf8zi/+38MYv/4vljFv8l8scs/kvmj1n8l8ofs/gvnT9m8V8mf8zi/538MYv/svljFv/v5o9Z/L+XP2bxXy5/7CPqP2g465GXzx/7iPq/1T+v/xXyxyz+K+aPWfy/nz9m8V8pf8ziv3L+mMX/B/ljFv9V8scGnT9o2Mx8tP1XzR+zrP/V8scs/qvnj1n818gfs/ivmT9m8V8rf8zi/8P8MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/6P8MYv/hvljFv+N8scs/hvnj1n8f5w/ZvHfJH/M4v+T/DGL/6b5Yxb/zfLHLP6b549Z/H+aP2bx/1n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/n+ePWfx/kT9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/1/mj1n8f5U/ZvH/df6YxX+3/DGL/+75Yxb/3+SPWfx/mz9m8d8jf8zi/7v8MYv/nvljFv+98scs/nvnj1n8f58/ZvH/Q/6Yxf+P+WMW/33yxyz+++aPWfz/lD9m8f9z/pjFf7/8MYv//vljFv8D8scs/n/JH7P4/zV/zOJ/YP6Yxf+g/DGL/9/yxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvH/e/6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwHRoXLLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT8m8R9lIH/M4j8of8ziP0L+mMV/xPwxi//g/DGL/0j5Yxb/kfPHLP6j5I9Z/Ifkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzX9YQ/7lnMV/vPwxi//H8scs/uPnj1n8J8gfs/h/PH/M4j9h/pjFf6L8MYv/J/LHLP4T549Z/D+ZP2bxnyR/zOI/af6YxX+y/DGL/+T5Yxb/KfLHLP6fyh+z+E+ZP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/T+ePWfynyx+z+H8mf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/6X8MYv/rPljFv/Z8scs/rPnj1n858gfs/h/OX/M4j9n/pjF/yv5Yxb/r+aPWfznyh+z+H8tf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/9fzxyz+38gfs/gvmj9m8f9m/pjFf7H8MYv/t/LHLP7fzh+z+C+eP2bxXyJ/zOK/ZP6YxX+p/DGL/9L5Yxb/ZfLHLP7fyR+z+C+bP2bx/27+mMX/e/ljFv/l8scs/svnj1n8V8gfs/ivmD9m8f9+/pjFf6X8MYv/yvljFv8f5I9Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/j/MH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/KH7P4b5g/ZvHfKH/M4r9x/pjF/8f5Yxb/TfLHLP4/yR+z+G+aP2bx3yx/zOK/ef6Yxf+n+WMW/5/lj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3QP+2CIv/jmljFv+f549Z/H+RP2bx3yl/zOK/c/6YxX+Xt/1ff/PDGtd/aBb/XVv/mMX/l/ljFv9f5Y9Z/H+dP2bx3y1/zOK/e/6Yxf83+WMW/9/mj1n898gfs/j/Ln/M4r9n/pjFf6/8MYv/3vljFv/f549Z/P+QP2bx/2P+mMV/n/wxi/+++WMW/z/lj1n8/5w/ZvHfL3/M4r9//pjF/4D8MYv/X/LHLP5/zR+z+B+YP2bxPyh/zOL/t/wxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/P+eP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5YxL/IQP5Yxb/QfljFv8R8scs/iPmj1n8B+ePWfxHyh+z+I+cP2bxHyV/zOI/JH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//H8scs/uPnj1n8J8gfs/h/PH/M4j9h/pjFf6L8MYv/J/LHLP4T549Z/D+ZP2bxnyR/zOI/af6YxX+y/DGL/+T5Yxb/KfLHLP6fyh+z+E+ZP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/T+ePWfynyx+z+H8mf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/6X8MYv/rPljFv/Z8scs/rPnj1n858gfs/h/OX/M4j9n/pjF/yv5Yxb/r+aPWfznyh+z+H8tf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/9fzxyz+38gfs/gvmj9m8f9m/pjFf7H8MYv/t/LHLP7fzh+z+C+eP2bxXyJ/zOK/ZP6YxX+p/DGL/9L5Yxb/ZfLHLP7fyR+z+C+bP2bx/27+mMX/e/ljFv/l8scs/svnj1n8V8gfs/ivmD9m8f9+/pjFf6X8MYv/yvljFv8f5I9Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/j/MH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/KH7P4b5g/ZvHfKH/M4r9x/pjF/8f5Yxb/TfLHLP4/yR+z+G+aP2bx3yx/zOK/ef6Yxf+n+WMW/5/lj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx/3n+mMX/F/ljFv+d8scs/jvnj1n8d8kfs/jvmj9m8f9l/pjF/1f5Yxb/X+ePWfx3yx+z+O+eP2bx/03+mMX/t/ljFv898scs/r/LH7P475k/ZvHfK3/M4r93/pjF//f5Yxb/P+SPWfz/mD9m8d8nf8ziv2/+mMX/T/ljFv8/549Z/PfLH7P4758/ZvE/IH/M4v+X/DGL/1/zxyz+B+aPWfwPyh+z+P8tf8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/v+ePWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvAfNHhgyBP5Ywb/oev/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYn/qAP5Yxb/QfljFv8R8scs/iPmj1n8B+ePWfxHyh+z+I+cP2bxHyV/zOI/JH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//H8scs/uPnj1n8J8gfs/h/PH/M4j9h/pjFf6L8MYv/J/LHLP4T549Z/D+ZP2bxnyR/zOI/af6YxX+y/DGL/+T5Yxb/KfLHLP6fyh+z+E+ZP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/T+ePWfynyx+z+H8mf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/9PljFv8ZBga2+rCG9J+cxX/G1j9m8Z8pf8ziP3P+mMV/lvwxi/+X8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8zi/+X8MYv/nPljFv+v5I9Z/L+aP2bxnyt/zOL/tfwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/RfLHLP5fzx+z+H8jf8ziv2j+mMX/m/ljFv/F8scs/t/KH7P4fzt/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fyd/zOK/bP6Yxf+7+WMW/+/lj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMX/+/ljFv+V8scs/ivnj1n8f5A/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/j/MH/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/KH/M4r9h/pjFf6P8MYv/xvljFv8f549Z/DfJH7P4/yR/zOK/af6YxX+z/DGL/+b5Yxb/n+aPWfx/lj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6Yxf/n+WMW/1/kj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMX/l/ljFv9f5Y9Z/H+dP2bx3y1/zOK/e/6Yxf83+WMW/9/mj1n898gfs/j/Ln/M4r9n/pjFf6/8MYv/3vljFv/f549Z/P+QP2bx/2P+mMV/n/wxi/+++WMW/z/lj1n8/5w/ZvHfL3/M4r9//pjF/4D8MYv/X/LHLP5/zR+z+B+YP2bxPyh/zOL/t/wxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/P+eP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5YxL/0Qbyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5Y9Z/MfPH7P4T5A/ZvH/eP6YxX/C/DGL/0T5Yxb/T+SPWfwnzh+z+H8yf8ziP0n+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfw/lT9m8Z8yf8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+n84fs/hPlz9m8f9M/pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/6fPHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/0v5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvH/cv6YxX/O/DGL/1fyxyz+X80fs/jPlT9m8f9a/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/6/nj1n8v5E/ZvFfNH/M4v/N/DGL/2L5Yxb/b+WPWfy/nT9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/kz9m8V82f8zi/938MYv/9/LHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4v/9/DGL/0r5Yxb/lfPHLP4/yB+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/H+YP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+UP2bx3zB/zOK/Uf6YxX/j/DGL/4/zxyz+m+SPWfx/kj9m8d80f8ziv1n+mMV/8/wxi/9P88cs/j/LH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8zi//P8MYv/L/LHLP475Y9Z/HfOH7P475I/ZvHfNX/M4v/L/DGL/6/yxyz+v84fs/jvlj9m8d89f8zi/5v8MYv/b/PHLP575I9Z/H+XP2bx3zN/zOK/V/6YxX/v/DGL/+/zxyz+f8gfs/j/MX/M4r9P/pjFf9/8MYv/n/LHLP5/zh+z+O+XP2bx3z9/zOJ/QP6Yxf8v+WMW/7/mj1n8D8wfs/gflD9m8f9b/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+f88fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxif/oA/ljFv9B+WMW/xHyxyz+I+aPWfwH549Z/EfKH7P4j5w/ZvEfJX/M4j8kf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL/8fyxyz+4+ePWfwnyB+z+H88f8ziP2H+mMV/ovwxi/8n8scs/hPnj1n8P5k/ZvGfJH/M4j9p/pjFf7L8MYv/5PljFv8p8scs/p/KH7P4T5k/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv9P549Z/KfLH7P4fyZ/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/pfwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+H85f8ziP2f+mMX/K/ljFv+v5o9Z/OfKH7P4fy1/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/1/PHLP7fyB+z+C+aP2bx/2b+mMV/sfwxi/+38scs/t/OH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/0vljFv9l8scs/t/JH7P4L5s/ZvH/bv6Yxf97+WMW/+Xyxyz+y4+aP2XxX6H1j1n8V8wfs/h/P3/M4r9S/pjFf+X8MYv/D/LHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv8f5o9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4v/j/DGL/yb5Yxb/n+SPWfw3zR+z+G+WP2bx3zx/zOL/0/wxi//P8scs/lvkj1n8t8wfs/hvlT9m8d9a5j/KB7ydxX8bmf8HzeK/bf6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/H+eP2bx/0X+mMV/p/wxi//O+WMW/13yxyz+u+aPWfx/mT9m8f9V/pjF/9f5Yxb/3fLHLP67549Z/H+TP2bx/23+mMV/j/wxi//v8scs/nvmj1n898ofs/jvnT9m8f99/pjF/w/5Yxb/P+aPWfz3yR+z+O+bP2bx/1P+mMX/z/ljFv/98scs/vvnj1n8D8gfs/j/JX/M4v/X/DGL/4H5Yxb/g/LHLP5/yx+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPyxd/wHhgwMfJT9T88fs6z/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/7/ljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMM/+ffK4T8w+qNtBZjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9J/McYyB+z+A/KH7P4j5A/ZvEfMX/M4j84f8ziP1L+mMV/5Pwxi/8o+WMW/yH5Yxb/UfPHLP6j5Y9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8P5Y/ZvEfP3/M4j9B/pjF/+P5Yxb/CfPHLP4T5Y9Z/D+RP2bxnzh/zOL/yfwxi/8k+WMW/0nzxyz+k+WPWfwnzx+z+E+RP2bx/1T+mMV/yvwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+H86f8ziP13+mMX/M/ljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv8v5Y9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjF/8v5Yxb/OfPHLP5fyR+z+H81f8ziP1f+mMX/a/ljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfy/nj9m8f9G/pjFf9H8MYv/N/PHLP6L5Y9Z/L+VP2bx/3b+mMV/8fwxi/8S+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bx/07+mMV/2fwxi/9388cs/t/LH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/9/PHLP4r5Y9Z/FfOH7P4/yB/zOK/Sv6YxX9Vo/8HeMAW/9WM/h8gi//q+WMW/zXyxyz+a+aPWfzXyh+z+P8wf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P8of8ziv2H+mMV/o/wxi//G+WMW/x/nj1n8N8kfs/j/JH/M4r9p/pjFf7P8MYv/5vljFv+f5o9Z/H+WP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjF/+f5Yxb/X+SPWfx3yh+z+O+cP2bx3yV/zOK/a/6Yxf+X+WMW/1/lj1n8f50/ZvHfLX/M4r97/pjF/zf5Yxb/3+aPWfz3yB+z+P8uf8ziv2f+mMV/r/wxi//e+WMW/9/nj1n8/5A/ZvH/Y/6YxX+f/DGL/775Yxb/P+WPWfz/nD9m8d8vf8ziv3/+mMX/gPwxi/9f8scs/n/NH7P4H5g/ZvE/KH/M4v+3/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8/54/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljEv8xB/LHLP6D8scs/iPkj1n8R8wfs/gPzh+z+I+UP2bxHzl/zOI/Sv6YxX9I/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iP9YH8X/r/blz/oVn8x279Yxb/cfLHLP7j5o9Z/MfLH7P4fyx/zOI/fv6YxX+C/DGL/8fzxyz+E+aPWfwnyh+z+H8if8ziP3H+mMX/k/ljFv9J8scs/pPmj1n8J8sfs/hPnj9m8Z8if8zi/6n8MYv/lPljFv+p8scs/lPnj1n8p8kfs/hPmz9m8f90/pjFf7r8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP5fyh+z+M+aP2bxny1/zOI/e/7Yv/gPu2ycD3lM/3/1Hv5z5I9Z1v+X88cs/nPmj1n8v5I/ZvH/av6YxX+u/DGL/9fyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4fz1/zOL/jfwxi/+i+WMW/2/mj1n8F8sfs/h/K3/M4v/t/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4v+d/DGL/7L5Yxb/7+aPWfy/lz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/+/nj1n8V8ofs/ivnD9m8f9B/pjFf5X8MYv/qvljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8zi/8P8MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/6P8MYv/hvljFv+N8scs/hvnj1n8f5w/ZvHfJH/M4v+T/DGL/6b5Yxb/zfLHLP6b549Z/H+aP2bx/1n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/n+ePWfx/kT9m8d8pf8ziv3P+mMV/l/wxi/+u+f9T/5gJi/8v88cs/r/KH7P4/zp/zOK/W/6YxX/3/LGPqv+Q4fx/kz/2UfUfGM7/t/ljFv898scs/r/LH7P475k/ZvHfK3/M4r93/pjF//f5Yxb/P+SPWfz/mD9m8d8nf8ziv2/+mMX/T/ljFv8/549Z/PfLH7P4758/ZvE/IH/M4v+X/DGL/1/zxyz+B+aPWfwPyh+z+P8tf8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/v+ePWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/4PD+W/8vj+s/NIv/Q61/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZPybxH2sgf8ziPyh/zOI/Qv6YxX/E/DGL/+D8MYv/SPljFv+R88cs/qPkj1n8h+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvH/WP6YxX/8/DGL/wT5Yxb/j+ePWfwnzB+z+E+UP2bx/0T+mMV/4vwxi/8n88cs/pPkj1n8J80fs/hPlj9m8Z88f8ziP0X+mMX/U/ljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8zi/+n8MYv/dPljFv/P5I9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+UP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/L+ePWfznzB+z+H8lf8zi/9X8MYv/XPljFv+v5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8f96/pjF/xv5Yxb/RfPHLP7fzB+z+C+WP2bx/1b+mMX/2/ljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/O/ljFv9l88cs/t/NH7P4fy9/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP7fzx+z+K+UP2bxXzl/zOL/g/wxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6Yxf+H+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf9H+WMW/w3zxyz+G+WPWfw3zh+z+P84f8ziv0n+mMX/J/ljFv9N88cs/pvlj1n8N88fs/j/NH/M4v+z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/j/PH7P4/yJ/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP6/zB+z+P8qf8zi/+v8MYv/bvljFv/d88cs/r/JH7P4/zZ/zOK/R/6Yxf93+WMW/z3zxyz+e+WPWfz3zh+z+P8+f8zi/4f8MYv/H/PHLP775I9Z/PfNH7P4/yl/zOL/5/wxi/9++WMW//3zxyz+B+SPWfz/kj9m8f9r/pjF/8D8MYv/QfljFv+/5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zi//f8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfk/iPPZA/ZvEflD9m8R8hf8ziP2L+mMV/cP6YxX+k/DGL/8j5Yxb/UfLHLP5D8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+H8sf8ziP37+mMV/gvwxi//H88cs/hPmj1n8J8ofs/h/In/M4j9x/pjF/5P5Yxb/SfLHLP6T5v//Y+f+w7Wu6zuO3/wmytmnXZd6zTYcGnNtRiKjUQtRUTz+OGWimb9Rj0CCyA8JMAQ2Wqlj06VuFmxi4ZizVUscbq5fKxqWNVsjtlY5xbUwxhwsMmfsOnAOwdnbc+186ft18/14/ME593183ynP6+V9e3FdhbL0/zn9Q1n6D9c/lKX/UfqHsvT/ef1DWfqP0D+Upf/R+oey9D9G/1CW/q/RP5Sl/0j9Q1n6/4L+oSz9j9U/lKX/L+ofytL/tfqHsvT/Jf1DWfr/sv6hLP2P0z+Upf/r9A9l6T9K/1CW/q/XP5Sl//H6h7L0H61/KEv/E/QPZek/Rv9Qlv6/on8oS/+x+oey9H+D/qEs/X9V/1CW/uP0D2Xp/0b9Q1n6v0n/UJb+v6Z/KEv/N+sfytJ/vP6hLP1P1D+Upf8E/UNZ+p+kfyhL/5P1D2Xpf4r+oSz9J+ofytL/VP1DWfqfpn8oS/9J+oey9D9d/1CW/m36h7L0P0P/UJb+Z+ofytL/LP1DWfqfrX8oS/92/UNZ+r9F/1CW/m/VP5Sl/zn6h7L0f5v+oSz9z9U/lKX/ZP1DWfqfp38oS//z9Q9l6f92/UNZ+l+gfyhL/3foH8rS/0L9Q1n6X6R/KEv/i/UPZel/if6hLP0v1T+Upf9l+oey9L9c/1CW/lP0D2Xpf4X+oSz9r9Q/lKX/VfqHsvTv0D+Upf/V+oey9J+qfyhL/2n6h7L0n65/KEv/d+ofytL/Gv1DWfrP0D+Upf9M/UNZ+l+rfyhL/1n6h7L0v07/UJb+s/UPZek/R/9Qlv5z9Q9l6T9P/1CW/tfrH8rSf77+oSz936V/KEv/BfqHsvRfqH8oS/9F+oey9L9B/1CW/u/WP5Sl/2L9Q1n636h/KEv/JfqHsvRfqn8oS/9l+oey9P91/UNZ+v+G/qEs/ZfrH8rS/z36h7L0/039Q1n6v1f/UJb+79M/lKX/TfqHsvS/Wf9Qlv636B/K0v+39A9l6b9C/1CW/r+tfyhL/9/RP5Sl/636h7L0v03/UJb+v6t/KEv/9+sfytL/dv1DWfrfoX8oS/879Q9l6f97+oey9P99/UNZ+t+lfyhL/w/oH8rS/4P6h7L0X6l/KEv/VfqHsvT/A/1DWfr/of6hLP3v1j+Upf9q/UNZ+t+jfyhL/w/pH8rS/8P6h7L0X6N/KEv/e/UPZen/R/qHsvRfq38oS/8/1j+Upf99+oey9P8T/UNZ+t+vfyhL/4/oH8rS/0/1D2Xp/1H9Q1n6f0z/UJb+H9c/lKX/n+kfytL/E/qHsvR/QP9Qlv7r9A9l6f+g/qEs/f9c/1CW/uv1D2Xp/5D+oSz9/0L/UJb+f6l/KEv/h/UPZen/V/qHsvT/pP6hLP0/pX8oS/9P6x/K0v8z+oey9P+s/qEs/f9a/1CW/p/TP5Sl/+f1D2Xpv0H/UJb+X9A/lKX/3+gfytJ/o/6hLP0f0T+Upf8X9Q9l6f8l/UNZ+j+qfyhL/y/rH8rS/yv6h7L0/1v9Q1n6P6Z/KEv/r+ofytL/7/QPZen/Nf1DWfr/vf6hLP036R/K0v/r+oey9N+sfyhL/3/QP5Sl/z/qH8rS/xv6h7L0/yf9Q1n6f1P/UJb+39I/lKX/t/UPZen/uP6hLP3/Wf9Qlv5P6B/K0v9J/UNZ+m/RP5Sl/1P6h7L0/xf9Q1n6f0f/UJb+/6p/KEv/7+ofytJ/q/6hLP2f1j+Upf/39A9l6b9N/1CW/v+mfyhL/+36h7L0/3f9Q1n6P6N/KEv//9A/lKX/Dv1DWfrv1D+Upf9/6h/K0v/7+oey9N+lfyhL/x/oH8rS/1n9Q1n6/1D/UJb+z+kfytL/v/QPZen/vP6hLP1/pH8oS//d+oeS9H9lS/9Qlv799A9l6d9f/1CW/gP0D2XpP1D/UJb+g/QPZek/WP9Qlv5D9A9l6T9U/1CW/i/TP5Sl/zD9Q1n6v1z/UJb+r9A/lKX/IfqHsvT/Kf1DWfofqn/oJdcfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/5q5CxddM2XGjI45vvGNb3yz75sX+99MAADAT9qPP/S/2H8nAAAAAAAAAAAAAAAAAAAAkFcT/3diL/Y/IwAAAAAAAAAAAAAA/H/X1n7StgH9DnhqwP4PfvbRjj1fx+y6YNqaNQ+W7q9dPz4zeMn++z/YvXv37lXPjJ/Y9XBIq9Xq/F97ZdfjoT2PO19/6fCVR+x9VCZ87s7HL518yFlz1t028Ourbml/etCeZwe1Lr96+oyO1/dvtcopg1oLOh8c36/VKqcNat3a+WB054NJg1prOx+csOfBy1qf7nzwuitnzbiq84nTK/+ewUtFW/vS1oADFts64N8G++9/6fAnpnV/7eUlu19tYKtr/yPWffHwHj/r9gL77379clLP/ff5HxB4QX3b/7Obu7/28pL/4/3/Qxt3LYp+9sL77379crL9Q32Cz/8HbLTn5/4en/+PCl5y3/2JQzfe3rn/tvPue3XXUwP/N5//f/z65ZSe++9/wOf/zs/xE7s//w9ptcqpB/nbAam0tS/b1tv7f+/7H/gzPW767b//e7685RWd+7/3udbyrqcG9XH/E3t7/7+px98r0Ddt7at393j/78P+WyODl9y3/63rDtnz+X/L/Vcett/P+rL/U3vuf9S8mdeNmrtw0XHTZ06Z2jG149pxo8ceP2bcuLFjR+35RLD314P8TYEkDu79vzWsx02/Vqtj3/2G+26Z2Ln/7Q8t/3DXU0P7uP/Ten3/P8r7P4RG9G8NHtxaMGXevDnH7/21++Hovb/u/cuC/ffhv/+PPrbrL+v+M8N+rdYR++5HXjpuSOf+b5hd1nc9NbiP+5/U6/4nHPhnlUDfHOT7/1U9bg7Y/4lbb5zfuf9jvv+qLV1P9fW//0/vdf93e/+Hg9HW3qr1TbRz/ycMWXZGtevS5s//oD5N7H/4jlt3VrsuZ9g/1KeJ/U9e8aYrql2XM+0f6tPE/h+cedmKatflLPuH+jSx/+d/eueR1a7L2fYP9Wli/49956k11a5Lu/1DfZrY/wfuaj+h2nV5i/1DfZrY/3HX/2B8tevyVvuH+jSx/6tffu7aatflHPuH+jSx/zN2n3xYtevyNvuH+jSx/37Lvru02nU51/6hPk3s/8kpK2ZVuy6T7R/q08T+1w4f+Wy163Ke/UN9mtj/8qffMKnadTnf/qE+Tez/K3esfKzadXm7/UN9mtj/xy9+1cpq1+UC+4f6NLH/H454aFi16/IO+4f6NLH/TZvWPlDtulxo/1CfJva/au2AEdWuy0X2D/VpYv9LTp/6aLXrcrH9Q32a2P+YsV+6qNp1ucT+oT5N7P+Iz37zqWrX5VL7h/o0sf9zH54/t9p1ucz+oT5N7H/+kR/7UbXrcrn9Q32a2P+bO46cVu26TLF/qE8T+y+3DdtU7bpcYf9Qnyb2f+H21ROqXZcr7R/q08T+1x/6+Y9Wuy5X2T/Up4n975h97bhq16XD/qE+Tez/2+9Z8t5q1+Vq+4f6NLH/25/7Wql2XabaP9Snif1vHX3hxdWuyzT7h/o0sf/VZz3zSLXrMt3+oT5N7H/F+sfnVbsu77R/qE8T+9+w4cwnql2Xa+wf6tPE/o8ZOeqQatdlhv1DfZrY/6wLln+w2nWZaf9Qnyb2f8r9d7ym2nW51v6hPk3sf+hXx3+i2nWZZf9Qnyb2/6nx7/tktetynf1DfZrY/84JRx9b7brMtn+oTxP73/zA6DurXZc59g/1aWL/73/krorXZa79Q32a2P/s1z6/vdp1mWf/UJ8m9v/GyecvrHZdrrd/qE8T+z/s7klfqHZd5ts/1KeJ/V/yre+dU+26vMv+oT5N7P/ow694dbXrssD+oT5N7H/a9I03V7suC+0f6tPE/ieu2jym2nVZZP9Qnyb2f+iTc++pdl1usH+oTxP73zbg8LOrXZd3d+1/8bC9T9g//AQ1sf97Fz/8jWrXZbH3f6hPE/u/+aaPdFS7LjfaP9Snif1/ZtfgHdWuyxL7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9mBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1kH0bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUQAAAP//p0ziYA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) 312.622664ms ago: executing program 2 (id=882): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x270, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x10, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0xe0, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x7, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0xa4, 0x18, 0x0, 0x1, [@IFLA_PORT_VF={0x4}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @private2}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}]}]}]}, 0x270}}, 0x0) 0s ago: executing program 2 (id=883): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) kernel console output (not intermixed with test programs): sb 1-1: Manufacturer: syz [ 105.035759][ T55] usb 1-1: SerialNumber: syz [ 105.047509][ T55] usb 1-1: config 0 descriptor?? [ 105.056418][ T6152] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.076900][ T6152] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.085067][ T6163] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.92: corrupted inode contents [ 105.101726][ T55] ums-usbat 1-1:0.23: USB Mass Storage device detected [ 105.115112][ T6163] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #2: comm syz.2.92: mark_inode_dirty error [ 105.157859][ T6163] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.92: corrupted inode contents [ 105.207792][ T6163] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.92: mark_inode_dirty error [ 105.341603][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.389809][ T55] ums-usbat: probe of 1-1:0.23 failed with error -5 [ 105.425735][ T55] usb 1-1: USB disconnect, device number 2 [ 106.805555][ T6207] loop1: detected capacity change from 0 to 1024 [ 108.047369][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.259533][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 108.287263][ T23] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 108.308431][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.327045][ T23] usb 3-1: Product: syz [ 108.336153][ T23] usb 3-1: Manufacturer: syz [ 108.346724][ T23] usb 3-1: SerialNumber: syz [ 108.365948][ T23] usb 3-1: config 0 descriptor?? [ 108.382987][ T23] gspca_main: sq930x-2.14.0 probing 2770:930c [ 108.614488][ T6253] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.838291][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.945690][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.120763][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.234890][ T6259] loop3: detected capacity change from 0 to 4096 [ 109.241983][ T23] gspca_sq930x: ucbus_write failed -71 [ 109.259567][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.342343][ T6259] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 109.411901][ T6259] ntfs3: loop3: Failed to load $Extend (-22). [ 109.430286][ T6259] ntfs3: loop3: Failed to initialize $Extend. [ 109.496744][ T23] gspca_sq930x: Sensor ov9630 not yet treated [ 109.508495][ T23] sq930x: probe of 3-1:0.0 failed with error -22 [ 109.566774][ T23] usb 3-1: USB disconnect, device number 2 [ 109.746798][ T5859] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.981840][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.014261][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.058766][ T5859] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 110.086955][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.087448][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.110034][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.126045][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.138982][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.148235][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 110.157672][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.181463][ T5859] usb 1-1: config 0 descriptor?? [ 110.656010][ T5859] uclogic 0003:5543:0522.0002: No inputs registered, leaving [ 110.694252][ T5859] uclogic 0003:5543:0522.0002: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.0-1/input0 [ 110.890229][ T5859] usb 1-1: USB disconnect, device number 3 [ 110.922805][ T6285] fido_id[6285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 111.205412][ T6276] loop3: detected capacity change from 0 to 32768 [ 111.247870][ T6278] loop2: detected capacity change from 0 to 32768 [ 111.282919][ T6276] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.409239][ T6271] chnl_net:caif_netlink_parms(): no params data found [ 111.521690][ T6300] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root [ 111.521690][ T6300] [ 111.603756][ T6276] XFS (loop3): Ending clean mount [ 111.636035][ T6302] loop0: detected capacity change from 0 to 1024 [ 111.653096][ T6300] ERROR: (device loop2): remounting filesystem as read-only [ 111.670155][ T6302] EXT4-fs: Ignoring removed orlov option [ 111.670211][ T6276] XFS (loop3): Quotacheck needed: Please wait. [ 111.774615][ T6302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.852782][ T6276] XFS (loop3): Quotacheck: Done. [ 112.166008][ T5783] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.248460][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.255757][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.263751][ T6271] bridge_slave_0: entered allmulticast mode [ 112.267052][ T5788] Bluetooth: hci1: command tx timeout [ 112.272699][ T6271] bridge_slave_0: entered promiscuous mode [ 112.388009][ T42] hsr_slave_0: left promiscuous mode [ 112.454010][ T42] hsr_slave_1: left promiscuous mode [ 112.463239][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.489582][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.515372][ T5786] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 112.553979][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.566943][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.587387][ T5786] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 112.604922][ T42] bridge_slave_1: left allmulticast mode [ 112.610721][ T42] bridge_slave_1: left promiscuous mode [ 112.624375][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.641790][ T42] bridge_slave_0: left allmulticast mode [ 112.666837][ T42] bridge_slave_0: left promiscuous mode [ 112.672665][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.840816][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 112.867270][ T42] veth1_macvtap: left promiscuous mode [ 112.877153][ T42] veth0_macvtap: left promiscuous mode [ 112.883013][ T42] veth1_vlan: left promiscuous mode [ 112.907173][ T42] veth0_vlan: left promiscuous mode [ 113.232379][ T9] kernel write not supported for file /snd/pcmC0D0p (pid: 9 comm: kworker/0:1) [ 113.952302][ T42] team0 (unregistering): Port device team_slave_1 removed [ 113.996281][ T42] team0 (unregistering): Port device team_slave_0 removed [ 114.055009][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.099885][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.346810][ T5788] Bluetooth: hci1: command tx timeout [ 114.609500][ T42] bond0 (unregistering): Released all slaves [ 114.679746][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.687097][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.694321][ T6271] bridge_slave_1: entered allmulticast mode [ 114.702224][ T6271] bridge_slave_1: entered promiscuous mode [ 114.907236][ T6271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.939642][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.952783][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.111109][ T6271] team0: Port device team_slave_0 added [ 115.132675][ T6271] team0: Port device team_slave_1 added [ 115.301095][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.316719][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.343571][ T6271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.359047][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.366046][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.401042][ T6271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.510727][ T6271] hsr_slave_0: entered promiscuous mode [ 115.518218][ T6271] hsr_slave_1: entered promiscuous mode [ 115.524770][ T6271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.543359][ T6271] Cannot create hsr debugfs directory [ 116.004721][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.160738][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.284767][ T6370] loop2: detected capacity change from 0 to 256 [ 116.329165][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.417760][ T5788] Bluetooth: hci1: command tx timeout [ 116.485764][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.498839][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.507754][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.516813][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.526866][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 116.535179][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.728755][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.377118][ T6271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 117.437983][ T6394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.169'. [ 117.441098][ T6271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 117.485600][ T6271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 117.528494][ T6271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 117.844312][ T6409] warning: `syz.3.173' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.090463][ T6373] chnl_net:caif_netlink_parms(): no params data found [ 118.241326][ T6422] loop3: detected capacity change from 0 to 4096 [ 118.456496][ T6431] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.508465][ T5788] Bluetooth: hci1: command tx timeout [ 118.577021][ T5788] Bluetooth: hci2: command tx timeout [ 118.924871][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.955840][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.972863][ T6373] bridge_slave_0: entered allmulticast mode [ 118.998420][ T6373] bridge_slave_0: entered promiscuous mode [ 119.094329][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.117667][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.146882][ T6373] bridge_slave_1: entered allmulticast mode [ 119.154492][ T6373] bridge_slave_1: entered promiscuous mode [ 119.186490][ T6450] capability: warning: `syz.2.181' uses deprecated v2 capabilities in a way that may be insecure [ 119.316563][ T6373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.449265][ T6373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.641716][ T6373] team0: Port device team_slave_0 added [ 119.654359][ T6373] team0: Port device team_slave_1 added [ 119.680307][ T6271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.828108][ T5926] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.965582][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.984074][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.020802][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.057048][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.072635][ T6373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.072736][ T5926] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 120.112778][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.125351][ T6271] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.148501][ T5926] usb 3-1: config 0 descriptor?? [ 120.175063][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.207444][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.266480][ T6373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.301185][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.308556][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.363444][ T42] hsr_slave_0: left promiscuous mode [ 120.390311][ T42] hsr_slave_1: left promiscuous mode [ 120.400995][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.408553][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.421211][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.429737][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.438577][ T42] bridge_slave_1: left allmulticast mode [ 120.444293][ T42] bridge_slave_1: left promiscuous mode [ 120.455018][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.473096][ T42] bridge_slave_0: left allmulticast mode [ 120.479109][ T42] bridge_slave_0: left promiscuous mode [ 120.484914][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.552338][ T42] veth1_macvtap: left promiscuous mode [ 120.560703][ T42] veth0_macvtap: left promiscuous mode [ 120.570720][ T42] veth1_vlan: left promiscuous mode [ 120.576242][ T42] veth0_vlan: left promiscuous mode [ 120.593721][ T5926] hkems 0003:2006:0118.0003: item fetching failed at offset 4/7 [ 120.610268][ T5926] hkems 0003:2006:0118.0003: parse failed [ 120.620923][ T5926] hkems: probe of 0003:2006:0118.0003 failed with error -22 [ 120.656898][ T5788] Bluetooth: hci2: command tx timeout [ 120.814729][ T5926] usb 3-1: USB disconnect, device number 3 [ 121.047097][ T6484] loop3: detected capacity change from 0 to 40427 [ 121.070806][ T6484] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 121.084833][ T6484] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 121.117815][ T6484] F2FS-fs (loop3): invalid crc value [ 121.162969][ T6484] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.284824][ T6484] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 121.294770][ T6484] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.912423][ T42] team0 (unregistering): Port device team_slave_1 removed [ 122.043030][ T42] team0 (unregistering): Port device team_slave_0 removed [ 122.153443][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.259913][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.269025][ T6501] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 122.504461][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.198'. [ 122.671491][ T6507] loop2: detected capacity change from 0 to 256 [ 122.736919][ T5788] Bluetooth: hci2: command tx timeout [ 122.788403][ T28] audit: type=1800 audit(122.739:3): pid=6507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.200" name="file1" dev="loop2" ino=1048601 res=0 errno=0 [ 122.819787][ T6511] loop3: detected capacity change from 0 to 512 [ 122.915522][ T6511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.093713][ T5783] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 123.116798][ T5783] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 123.142667][ T5783] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 123.157342][ T5783] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 123.168717][ T5783] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 123.180755][ T5783] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 123.192424][ T5783] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 123.205027][ T5783] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 123.217704][ T5783] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 123.230234][ T5783] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 123.440857][ T42] bond0 (unregistering): Released all slaves [ 123.532644][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.539865][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.791970][ T6373] hsr_slave_0: entered promiscuous mode [ 123.834994][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.853337][ T6373] hsr_slave_1: entered promiscuous mode [ 123.879828][ T6373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.901884][ T6373] Cannot create hsr debugfs directory [ 124.737996][ T6373] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.760426][ T6373] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.817668][ T5788] Bluetooth: hci2: command tx timeout [ 124.895776][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.951834][ T6373] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.019486][ T6373] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.104037][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.192652][ T6271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.220779][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.247072][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.254434][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.265347][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.278571][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.288310][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 125.297468][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.308870][ T28] audit: type=1326 audit(125.259:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d76f8ebe9 code=0x7ffc0000 [ 125.331887][ T28] audit: type=1326 audit(125.279:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d76f8ebe9 code=0x7ffc0000 [ 125.364347][ T28] audit: type=1326 audit(125.279:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5d76f8ebe9 code=0x7ffc0000 [ 125.441251][ T28] audit: type=1326 audit(125.279:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d76f8ebe9 code=0x7ffc0000 [ 125.490217][ T28] audit: type=1326 audit(125.279:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d76f8ebe9 code=0x7ffc0000 [ 125.515061][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.535651][ T28] audit: type=1326 audit(125.279:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f5d76f8ebe9 code=0x7ffc0000 [ 125.707085][ T28] audit: type=1326 audit(125.279:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d76f8ebe9 code=0x7ffc0000 [ 126.087564][ T6271] veth0_vlan: entered promiscuous mode [ 126.215769][ T6569] loop2: detected capacity change from 0 to 32768 [ 126.251326][ T6569] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 126.251399][ T6271] veth1_vlan: entered promiscuous mode [ 126.260234][ T6569] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 126.294380][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 126.331689][ T6569] syz.2.218: attempt to access beyond end of device [ 126.331689][ T6569] loop2: rw=12288, sector=99999999, nr_sectors = 1 limit=32768 [ 126.346786][ T6569] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 126.372662][ T6373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.782304][ T6373] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.949899][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.957156][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.997527][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.004730][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.021937][ T6553] bridge_slave_0: entered allmulticast mode [ 127.038312][ T6553] bridge_slave_0: entered promiscuous mode [ 127.060181][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.076978][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.084297][ T6553] bridge_slave_1: entered allmulticast mode [ 127.108395][ T6553] bridge_slave_1: entered promiscuous mode [ 127.211981][ T6271] veth0_macvtap: entered promiscuous mode [ 127.252973][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.260247][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.349597][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.377277][ T5788] Bluetooth: hci0: command tx timeout [ 127.407984][ T6271] veth1_macvtap: entered promiscuous mode [ 127.446175][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.492124][ T6373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.557462][ T6553] team0: Port device team_slave_0 added [ 127.600412][ T6553] team0: Port device team_slave_1 added [ 127.689369][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.703128][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.717563][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.728418][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.742115][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.753031][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.762114][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.789531][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.803749][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.812070][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.838661][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.990136][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.013608][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.036781][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.055902][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.069155][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.088363][ T6271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.107147][ T6271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.117576][ T6271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.126447][ T6271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.251369][ T6553] hsr_slave_0: entered promiscuous mode [ 128.266161][ T6553] hsr_slave_1: entered promiscuous mode [ 128.284588][ T6553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.307041][ T6553] Cannot create hsr debugfs directory [ 128.525228][ T42] hsr_slave_0: left promiscuous mode [ 128.537777][ T42] hsr_slave_1: left promiscuous mode [ 128.555369][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.569562][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.587980][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.605691][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.614256][ T42] bridge_slave_1: left allmulticast mode [ 128.623548][ T42] bridge_slave_1: left promiscuous mode [ 128.646931][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.660149][ T42] bridge_slave_0: left allmulticast mode [ 128.665858][ T42] bridge_slave_0: left promiscuous mode [ 128.698076][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.772283][ T42] veth1_macvtap: left promiscuous mode [ 128.778066][ T42] veth0_macvtap: left promiscuous mode [ 128.784227][ T42] veth1_vlan: left promiscuous mode [ 128.802860][ T42] veth0_vlan: left promiscuous mode [ 129.420394][ T42] team0 (unregistering): Port device team_slave_1 removed [ 129.456911][ T5788] Bluetooth: hci0: command tx timeout [ 129.481928][ T42] team0 (unregistering): Port device team_slave_0 removed [ 129.527611][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.576195][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.048302][ T42] bond0 (unregistering): Released all slaves [ 130.305884][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.331239][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.367908][ T6373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.588985][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.597395][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.919076][ T6553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.938737][ T6553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.955581][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.133'. [ 130.978953][ T6553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.010307][ T6553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.222221][ T6654] loop2: detected capacity change from 0 to 1024 [ 131.319373][ T6373] veth0_vlan: entered promiscuous mode [ 131.339254][ T6654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.362414][ T6373] veth1_vlan: entered promiscuous mode [ 131.525819][ T6654] EXT4-fs (loop2): can't enable nombcache during remount [ 131.536855][ T5788] Bluetooth: hci0: command tx timeout [ 131.543211][ T6373] veth0_macvtap: entered promiscuous mode [ 131.612578][ T6373] veth1_macvtap: entered promiscuous mode [ 131.669738][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.676192][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.789955][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'. [ 131.809129][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'. [ 131.844026][ T6667] bridge0: port 3(vlan2) entered blocking state [ 131.852022][ T6667] bridge0: port 3(vlan2) entered disabled state [ 131.864144][ T6667] vlan2: entered allmulticast mode [ 131.869518][ T6667] bridge0: entered allmulticast mode [ 131.884679][ T6667] vlan2: left allmulticast mode [ 131.890332][ T6667] bridge0: left allmulticast mode [ 131.911300][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.914004][ T6670] loop2: detected capacity change from 0 to 2048 [ 131.939299][ T6670] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 131.956952][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.979684][ T6670] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.988248][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.016661][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.042333][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.082668][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.129051][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.153560][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.164230][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.184720][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.200161][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.215629][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.222895][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.275463][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.282813][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.359800][ T6373] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.384725][ T6373] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.393865][ T6373] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.394158][ T6674] loop1: detected capacity change from 0 to 1024 [ 132.403155][ T6373] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.735231][ T2903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.785621][ T2903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.926552][ T2903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.966128][ T2903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.226322][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.237212][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.282294][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.476433][ T6701] loop2: detected capacity change from 0 to 1024 [ 133.601286][ T6701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.627328][ T5788] Bluetooth: hci0: command tx timeout [ 133.742834][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.795615][ T6715] loop1: detected capacity change from 0 to 128 [ 133.797188][ T6713] syz.4.243 (6713) used greatest stack depth: 20232 bytes left [ 133.827833][ T6715] EXT4-fs: Ignoring removed nobh option [ 133.884335][ T6715] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.069745][ T6715] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop1' because it doesn't have stable inode numbers [ 134.312574][ T6271] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.558873][ T6733] loop1: detected capacity change from 0 to 512 [ 134.630312][ T6553] veth0_vlan: entered promiscuous mode [ 134.651659][ T6733] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.248: invalid indirect mapped block 10 (level 1) [ 134.710201][ T6553] veth1_vlan: entered promiscuous mode [ 134.735857][ T6733] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.248: invalid indirect mapped block 8 (level 1) [ 134.810705][ T6733] EXT4-fs (loop1): 1 truncate cleaned up [ 134.820528][ T6733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.853007][ T6733] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 779448419 > max in inode 19 [ 134.945134][ T6271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.958767][ T6553] veth0_macvtap: entered promiscuous mode [ 134.986021][ T6553] veth1_macvtap: entered promiscuous mode [ 135.039672][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.077189][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.146483][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.173699][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.211073][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.243604][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.266428][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.293983][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.331986][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.357651][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.386217][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.446380][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.480049][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.518318][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.577979][ T6553] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.632363][ T6553] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.657984][ T6553] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.697368][ T6553] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.077529][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.085407][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.195621][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.247245][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.269689][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 136.325637][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 136.827319][ T6786] tun0: tun_chr_ioctl cmd 1074025681 [ 137.104989][ T6768] loop1: detected capacity change from 0 to 32768 [ 137.568835][ T6802] tap0: tun_chr_ioctl cmd 1074025677 [ 137.578830][ T6802] tap0: linktype set to 6 [ 137.603857][ T6804] loop5: detected capacity change from 0 to 2048 [ 137.633411][ T6804] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=18576, location=18576 [ 137.690919][ T6804] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.880287][ T6806] loop1: detected capacity change from 0 to 4096 [ 138.302308][ T6790] loop4: detected capacity change from 0 to 32768 [ 138.387964][ T6790] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.456770][ T5926] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 138.600966][ T6790] XFS (loop4): Ending clean mount [ 138.686730][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 138.700969][ T5926] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 138.741352][ T5926] usb 6-1: config 0 has no interface number 0 [ 138.789590][ T5926] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 138.816730][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.824799][ T5926] usb 6-1: Product: syz [ 138.850647][ T5926] usb 6-1: Manufacturer: syz [ 138.855334][ T5926] usb 6-1: SerialNumber: syz [ 138.918082][ T5926] usb 6-1: config 0 descriptor?? [ 138.938359][ T5926] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 139.007929][ T6373] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.182362][ T5926] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 139.271454][ T5926] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 139.357698][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 139.675603][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 139.683967][ T5859] usb 6-1: USB disconnect, device number 2 [ 139.717855][ T5859] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 139.805176][ T5859] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 139.844458][ T5859] quatech2 6-1:0.51: device disconnected [ 140.097485][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 140.650824][ T6885] process 'syz.2.293' launched './file0' with NULL argv: empty string added [ 140.727122][ T28] audit: type=1326 audit(140.669:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.4.294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e9a58ebe9 code=0x0 [ 140.813995][ T6892] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 141.137780][ T6898] loop5: detected capacity change from 0 to 4096 [ 141.249325][ T6898] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 141.298635][ T6898] ntfs3: loop5: Failed to load $Extend (-22). [ 141.319507][ T6898] ntfs3: loop5: Failed to initialize $Extend. [ 141.337442][ T55] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 141.526895][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 141.585352][ T55] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.636662][ T55] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.666700][ T55] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.673420][ T55] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 141.709543][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.735892][ T55] usb 2-1: config 0 descriptor?? [ 141.781548][ T6921] loop4: detected capacity change from 0 to 2048 [ 141.852534][ T6921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.200564][ T2929] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 142.224526][ T55] wacom 0003:056A:00B9.0004: unknown main item tag 0x0 [ 142.232664][ T55] wacom 0003:056A:00B9.0004: unknown main item tag 0x0 [ 142.239926][ T2929] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 142.266713][ T55] wacom 0003:056A:00B9.0004: unknown main item tag 0x0 [ 142.276924][ T55] wacom 0003:056A:00B9.0004: unknown main item tag 0x0 [ 142.284900][ T55] wacom 0003:056A:00B9.0004: unknown main item tag 0x0 [ 142.288897][ T2929] EXT4-fs (loop4): This should not happen!! Data will be lost [ 142.288897][ T2929] [ 142.305602][ T2929] EXT4-fs (loop4): Total free blocks count 0 [ 142.318882][ T2929] EXT4-fs (loop4): Free/Dirty block details [ 142.333057][ T2929] EXT4-fs (loop4): free_blocks=2415919104 [ 142.337505][ T55] wacom 0003:056A:00B9.0004: Unknown device_type for 'HID 056a:00b9'. Assuming pen. [ 142.356076][ T2929] EXT4-fs (loop4): dirty_blocks=16 [ 142.363777][ T2929] EXT4-fs (loop4): Block reservation details [ 142.384768][ T2929] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 142.403923][ T6373] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.406503][ T55] wacom 0003:056A:00B9.0004: hidraw0: USB HID v0.00 Device [HID 056a:00b9] on usb-dummy_hcd.1-1/input0 [ 142.476369][ T55] input: Wacom Intuos4 6x9 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B9.0004/input/input7 [ 142.603979][ T6937] loop5: detected capacity change from 0 to 1024 [ 142.638381][ T6937] UDF-fs: bad mount option "y•^7ÍÙY‘yÍöçŽ){Üm«_(q¼ŒèS#X00000000000000000000ÿÿ" or missing value [ 142.689676][ T55] usb 2-1: USB disconnect, device number 3 [ 142.772663][ T6935] fido_id[6935]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 143.018946][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.071247][ T6949] loop4: detected capacity change from 0 to 128 [ 143.097725][ T6949] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.236833][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 143.251084][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.276428][ T23] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 143.327081][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.368312][ T23] usb 3-1: config 0 descriptor?? [ 143.783874][ T6971] loop1: detected capacity change from 0 to 1024 [ 143.811489][ T23] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 143.936304][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.319'. [ 144.153977][ T12] hfsplus: b-tree write err: -5, ino 4 [ 144.366973][ T8] usb 3-1: USB disconnect, device number 4 [ 144.589108][ T6989] netlink: 128 bytes leftover after parsing attributes in process `syz.1.323'. [ 144.630487][ T6989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.323'. [ 144.823125][ T6997] loop1: detected capacity change from 0 to 512 [ 144.901837][ T6997] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.326: casefold flag without casefold feature [ 144.955250][ T7000] loop5: detected capacity change from 0 to 256 [ 144.982203][ T6997] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.326: couldn't read orphan inode 15 (err -117) [ 145.048497][ T7002] loop4: detected capacity change from 0 to 1024 [ 145.093652][ T6997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.120693][ T7000] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 145.281152][ T6997] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 145.307070][ T28] audit: type=1800 audit(145.249:12): pid=7002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.328" name="bus" dev="loop4" ino=20 res=0 errno=0 [ 145.444328][ T48] hfsplus: b-tree write err: -5, ino 4 [ 145.465098][ T6271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.631369][ T7014] loop4: detected capacity change from 0 to 256 [ 145.852358][ T7022] loop2: detected capacity change from 0 to 8 [ 145.891051][ T7022] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 146.542564][ T7040] loop4: detected capacity change from 0 to 4096 [ 147.317158][ T5926] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.506832][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 147.529589][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.542564][ T5926] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 147.572224][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.611603][ T5926] usb 3-1: config 0 descriptor?? [ 147.617913][ T7052] loop5: detected capacity change from 0 to 32768 [ 147.655654][ T7052] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.345 (7052) [ 147.720595][ T7052] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.739394][ T7052] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 147.762154][ T7052] BTRFS info (device loop5): force clearing of disk cache [ 147.792016][ T7052] BTRFS info (device loop5): enabling auto defrag [ 147.807460][ T7052] BTRFS info (device loop5): max_inline at 0 [ 147.824782][ T7052] BTRFS info (device loop5): enabling disk space caching [ 147.844042][ T7052] BTRFS info (device loop5): disk space caching is enabled [ 147.962070][ T7052] BTRFS info (device loop5): enabling ssd optimizations [ 148.002558][ T7052] BTRFS info (device loop5): rebuilding free space tree [ 148.059150][ T7052] BTRFS info (device loop5): disabling free space tree [ 148.074143][ T5926] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 148.091450][ T7052] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 148.114314][ T7052] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.567995][ T5926] usb 3-1: USB disconnect, device number 5 [ 148.650107][ T12] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 148.870640][ T7068] loop4: detected capacity change from 0 to 32768 [ 149.439269][ T6553] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.455869][ T28] audit: type=1800 audit(149.399:13): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.354" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 149.807169][ T7122] loop2: detected capacity change from 0 to 256 [ 149.914139][ T7122] FAT-fs (loop2): Directory bread(block 64) failed [ 149.956877][ T7122] FAT-fs (loop2): Directory bread(block 65) failed [ 149.964368][ T7122] FAT-fs (loop2): Directory bread(block 66) failed [ 150.018666][ T7122] FAT-fs (loop2): Directory bread(block 67) failed [ 150.025819][ T7122] FAT-fs (loop2): Directory bread(block 68) failed [ 150.107051][ T7122] FAT-fs (loop2): Directory bread(block 69) failed [ 150.126925][ T7122] FAT-fs (loop2): Directory bread(block 70) failed [ 150.133546][ T7122] FAT-fs (loop2): Directory bread(block 71) failed [ 150.227971][ T7122] FAT-fs (loop2): Directory bread(block 72) failed [ 150.234579][ T7122] FAT-fs (loop2): Directory bread(block 73) failed [ 150.244105][ T7130] loop5: detected capacity change from 0 to 64 [ 150.972082][ T7138] loop5: detected capacity change from 0 to 256 [ 151.079291][ T7138] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 151.539977][ T7129] loop1: detected capacity change from 0 to 32768 [ 151.660967][ T7129] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 151.782955][ T7129] XFS (loop1): Ending clean mount [ 151.848658][ T7129] XFS (loop1): Quotacheck needed: Please wait. [ 151.925753][ T7129] XFS (loop1): Quotacheck: Done. [ 152.166946][ T6271] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 152.965129][ T7194] loop2: detected capacity change from 0 to 764 [ 153.132792][ T7194] Symlink component flag not implemented [ 153.161968][ T7194] Symlink component flag not implemented [ 153.187256][ T7194] Symlink component flag not implemented (128) [ 153.206997][ T7194] Symlink component flag not implemented (122) [ 153.766551][ T7211] loop5: detected capacity change from 0 to 512 [ 153.798080][ T7211] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.820778][ T7191] loop1: detected capacity change from 0 to 32768 [ 153.883493][ T7211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.919397][ T7191] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 153.969547][ T7191] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 154.057572][ T6553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.128231][ T7230] loop4: detected capacity change from 0 to 512 [ 154.152572][ T7191] XFS (loop1): Ending clean mount [ 154.186569][ T7191] XFS (loop1): Quotacheck needed: Please wait. [ 154.296890][ T7230] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.386: invalid indirect mapped block 10 (level 1) [ 154.349183][ T7238] loop5: detected capacity change from 0 to 256 [ 154.356018][ T7191] XFS (loop1): Quotacheck: Done. [ 154.357981][ T7238] exfat: Deprecated parameter 'utf8' [ 154.368362][ T7238] exfat: Deprecated parameter 'namecase' [ 154.390797][ T7230] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.386: invalid indirect mapped block 8 (level 1) [ 154.423993][ T7230] EXT4-fs (loop4): 1 truncate cleaned up [ 154.434064][ T7238] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 154.451665][ T7230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.633927][ T6271] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 154.647164][ T6373] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.215924][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 155.232469][ T7259] vlan2: entered allmulticast mode [ 155.238211][ T7259] vlan1: entered allmulticast mode [ 155.243381][ T7259] veth0_vlan: entered allmulticast mode [ 155.907445][ T5926] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 156.129976][ T5926] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 156.171926][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.196330][ T5926] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 156.226382][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.264548][ T5926] usb 3-1: config 0 descriptor?? [ 156.287596][ T7276] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.307485][ T7290] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 156.736876][ T5822] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 156.779594][ T5926] lenovo 0003:17EF:60B5.0007: hidraw0: USB HID vff.ff Device [HID 17ef:60b5] on usb-dummy_hcd.2-1/input0 [ 156.949023][ T5822] usb 5-1: unable to get BOS descriptor or descriptor too short [ 156.958851][ T5822] usb 5-1: config 1 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 156.998399][ T5822] usb 5-1: config 1 interface 0 has no altsetting 0 [ 157.038021][ T5822] usb 5-1: string descriptor 0 read error: -22 [ 157.044418][ T5822] usb 5-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 157.052699][ T6613] usb 3-1: USB disconnect, device number 6 [ 157.083396][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.157766][ T7294] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 157.203467][ T5822] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input10 [ 157.636007][ C0] bcm5974 5-1:1.0: trackpad urb failed: -1 [ 157.826957][ T55] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 157.911174][ T5141] bcm5974 5-1:1.0: could not read from device [ 157.911432][ T5845] usb 5-1: USB disconnect, device number 2 [ 157.929526][ T5141] bcm5974 5-1:1.0: could not read from device [ 157.964990][ T5785] bcm5974 5-1:1.0: could not read from device [ 158.047001][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 158.061383][ T55] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 158.079939][ T55] usb 2-1: config 0 has no interface number 0 [ 158.101963][ T55] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 158.115061][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.126111][ T55] usb 2-1: Product: syz [ 158.134561][ T55] usb 2-1: Manufacturer: syz [ 158.150410][ T55] usb 2-1: SerialNumber: syz [ 158.171389][ T55] usb 2-1: config 0 descriptor?? [ 158.191054][ T55] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 158.420445][ T7345] Illegal XDP return value 4294967274 on prog (id 30) dev N/A, expect packet loss! [ 158.437908][ T55] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 158.499725][ T55] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 158.791826][ T7353] can0: slcan on ttyS3. [ 158.829251][ T7350] loop4: detected capacity change from 0 to 4096 [ 158.927958][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 158.937142][ T7352] can0 (unregistered): slcan off ttyS3. [ 158.948475][ T55] usb 2-1: USB disconnect, device number 4 [ 158.974047][ T55] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 159.003775][ T55] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 159.031604][ T55] quatech2 2-1:0.51: device disconnected [ 159.148464][ T7350] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 160.825042][ T7382] loop2: detected capacity change from 0 to 32768 [ 160.928907][ T28] audit: type=1800 audit(160.869:14): pid=7382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.428" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 160.948649][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.959895][ T7382] syz.2.428: attempt to access beyond end of device [ 160.959895][ T7382] loop2: rw=34817, sector=4680064, nr_sectors = 120 limit=32768 [ 160.961053][ T7410] loop4: detected capacity change from 0 to 512 [ 160.984477][ T7410] EXT4-fs: Ignoring removed oldalloc option [ 160.993289][ T7410] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.003796][ T7410] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.016176][ T113] blkno = 8ed30, nblocks = f [ 161.034077][ T113] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 161.034077][ T113] [ 161.057750][ T7410] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c01c, mo2=0102] [ 161.076430][ T7410] System zones: 0-2, 18-18, 34-34 [ 161.087248][ T7410] EXT4-fs (loop4): orphan cleanup on readonly fs [ 161.095056][ T113] ERROR: (device loop2): remounting filesystem as read-only [ 161.113245][ T7410] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 161.157211][ T7410] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 161.176360][ T7412] loop1: detected capacity change from 0 to 8192 [ 161.198048][ T7410] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.437: Failed to acquire dquot type 1 [ 161.212957][ T7412] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.287608][ T7410] EXT4-fs (loop4): 1 truncate cleaned up [ 161.307707][ T7410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.445508][ T7410] EXT4-fs: Ignoring removed orlov option [ 161.458998][ T7410] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 161.499197][ T7410] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.558715][ T7410] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 161.590208][ T7410] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=842c11c, mo2=0102] [ 161.620513][ T7410] EXT4-fs error (device loop4): __ext4_remount:6741: comm syz.4.437: Abort forced by user [ 161.648061][ T7410] EXT4-fs (loop4): Remounting filesystem read-only [ 161.654693][ T7410] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 161.698796][ T7420] mmap: syz.1.441 (7420) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 161.713435][ T6373] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.888097][ T7426] Bluetooth: MGMT ver 1.22 [ 162.078566][ T7429] loop1: detected capacity change from 0 to 2048 [ 162.090274][ T7430] loop4: detected capacity change from 0 to 2048 [ 162.187766][ T7429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.209014][ T7437] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.299417][ T7429] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.445: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 162.361655][ T7429] EXT4-fs (loop1): Remounting filesystem read-only [ 162.438517][ T7440] loop4: detected capacity change from 0 to 16 [ 162.470843][ T6271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.479365][ T7440] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 6000000, please upgrade kernel [ 162.931046][ T7432] loop2: detected capacity change from 0 to 32768 [ 162.995741][ T7432] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.115576][ T7432] XFS (loop2): Ending clean mount [ 163.284474][ T7440] loop4: detected capacity change from 0 to 32768 [ 163.294430][ T7458] netlink: 104 bytes leftover after parsing attributes in process `syz.5.452'. [ 163.331360][ T7440] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 163.375548][ T7440] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 163.402111][ T5789] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.530489][ T7470] netlink: 28 bytes leftover after parsing attributes in process `syz.5.456'. [ 163.550006][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.456'. [ 163.579370][ T7440] XFS (loop4): Ending clean mount [ 163.641322][ T7440] XFS (loop4): Quotacheck needed: Please wait. [ 163.809246][ T7440] XFS (loop4): Quotacheck: Done. [ 164.010446][ T7479] loop1: detected capacity change from 0 to 2048 [ 164.033412][ T7479] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 164.051079][ T6373] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 164.090693][ T7479] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.116965][ T7466] XFS (loop4): SB summary counter sanity check failed [ 164.123830][ T7466] XFS (loop4): Metadata corruption detected at xfs_sb_write_verify+0x177/0x370, xfs_sb block 0x0 [ 164.179040][ T7466] XFS (loop4): Unmount and run xfs_repair [ 164.184901][ T7466] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 164.229215][ T28] audit: type=1800 audit(164.179:15): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.458" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 164.237864][ T7466] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 164.301826][ T7466] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.323744][ T7466] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 164.338351][ T7466] 00000030: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 11 40 ...............@ [ 164.386862][ T7466] 00000040: 00 00 00 00 00 00 11 41 00 00 00 00 00 00 11 42 .......A.......B [ 164.395823][ T7466] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 164.458759][ T7466] 00000060: 00 00 04 3e b4 f5 02 00 04 00 00 04 00 00 00 00 ...>............ [ 164.475446][ T7466] 00000070: 00 00 00 00 00 00 00 00 0c 09 0a 02 0c 00 00 0a ................ [ 164.499540][ T7466] XFS (loop4): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x203/0x670 (fs/xfs/xfs_buf.c:1559). Shutting down filesystem. [ 164.525750][ T7492] loop1: detected capacity change from 0 to 1024 [ 164.536764][ T7466] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 164.546543][ T7492] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.665656][ T7492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.809081][ T7492] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: comm syz.1.461: inode #10: comm syz.1.461: iget: illegal inode # [ 164.843242][ T7492] EXT4-fs (loop1): Remounting filesystem read-only [ 164.850116][ T7492] EXT4-fs warning (device loop1): ext4_xattr_inode_inc_ref_all:1146: inode #19: comm syz.1.461: cleanup dec ref error -5 [ 164.897875][ T7492] EXT4-fs warning (device loop1): ext4_xattr_block_set:2202: inode #19: comm syz.1.461: dec ref error=-5 [ 164.999000][ T6271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.291022][ T7504] Zero length message leads to an empty skb [ 165.617969][ T7486] loop5: detected capacity change from 0 to 40427 [ 165.677002][ T7486] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 165.695297][ T7486] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 165.753590][ T7486] F2FS-fs (loop5): invalid crc value [ 165.799188][ T7486] F2FS-fs (loop5): Found nat_bits in checkpoint [ 166.023551][ T7486] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 166.035796][ T7486] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 166.593849][ T7538] loop5: detected capacity change from 0 to 4096 [ 166.615983][ T7538] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 167.207575][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 167.369052][ T7560] loop5: detected capacity change from 0 to 4096 [ 167.409612][ T7560] NILFS (loop5): invalid segment: Checksum error in segment payload [ 167.425285][ T8] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 167.439491][ T7560] NILFS (loop5): trying rollback from an earlier position [ 167.447554][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.457633][ T8] usb 3-1: Product: syz [ 167.467130][ T8] usb 3-1: Manufacturer: syz [ 167.480440][ T8] usb 3-1: SerialNumber: syz [ 167.489446][ T7560] NILFS (loop5): recovery complete [ 167.500399][ T8] usb 3-1: config 0 descriptor?? [ 167.535779][ T8] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 167.867076][ T5845] kernel write not supported for file /snd/pcmC0D0p (pid: 5845 comm: kworker/1:5) [ 167.922535][ T7558] loop4: detected capacity change from 0 to 32768 [ 167.932354][ T7555] loop1: detected capacity change from 0 to 32768 [ 167.970155][ T7555] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.478 (7555) [ 168.003687][ T7555] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.014843][ T7558] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.480 (7558) [ 168.028862][ T7555] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 168.040343][ T7555] BTRFS info (device loop1): using free space tree [ 168.054893][ T7558] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 168.073578][ T7558] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 168.117327][ T7558] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 168.127074][ T7558] BTRFS info (device loop4): use zstd compression, level 3 [ 168.134513][ T7558] BTRFS info (device loop4): using free space tree [ 168.269705][ T7558] BTRFS info (device loop4): enabling ssd optimizations [ 168.310099][ T7555] BTRFS info (device loop1): enabling ssd optimizations [ 168.320612][ T7558] BTRFS info (device loop4): auto enabling async discard [ 168.353404][ T7555] BTRFS info (device loop1): auto enabling async discard [ 168.375331][ T8] usb 3-1: USB disconnect, device number 7 [ 168.740542][ T6271] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.013349][ T5822] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 169.226805][ T5822] usb 6-1: Using ep0 maxpacket: 16 [ 169.264884][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.323806][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.361843][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.384087][ T5822] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 169.448261][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.488492][ T5822] usb 6-1: config 0 descriptor?? [ 169.930939][ T5822] hid (null): invalid report_size 42190 [ 169.969579][ T5822] hid (null): report_id 4263223746 is invalid [ 169.975756][ T5822] hid (null): unknown global tag 0xe [ 170.007132][ T5822] hid (null): global environment stack underflow [ 170.056007][ T5822] hid (null): global environment stack underflow [ 170.076242][ T5822] hid (null): global environment stack underflow [ 170.089393][ T5822] hid (null): report_id 0 is invalid [ 170.111995][ T5822] hid (null): unknown global tag 0xc [ 170.128365][ T5822] hid (null): unknown global tag 0xd [ 170.163040][ T5822] hid (null): unknown global tag 0xc [ 170.178879][ T5822] hid (null): global environment stack underflow [ 170.193139][ T5822] hid (null): bogus close delimiter [ 170.241369][ T5822] usb 6-1: USB disconnect, device number 3 [ 170.450998][ T6373] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 170.993851][ T5822] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 171.228836][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 171.261017][ T5822] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 171.290203][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.311633][ T5822] usb 3-1: config 0 descriptor?? [ 171.323593][ T7639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 171.393177][ T7657] loop5: detected capacity change from 0 to 1024 [ 171.418625][ T7657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.441848][ T7656] loop4: detected capacity change from 0 to 2048 [ 171.469478][ T7657] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.513411][ T7660] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.534822][ T7657] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.608062][ T7657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.811546][ T7668] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #2: comm syz.5.497: corrupted in-inode xattr: bad e_name length [ 171.837489][ T5822] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 171.933055][ T7656] NILFS (loop4): error -2 truncating bmap (ino=16) [ 172.073821][ T6553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.077602][ T8] usb 3-1: USB disconnect, device number 8 [ 172.110191][ T7660] NILFS (loop4): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 172.148810][ T7671] fido_id[7671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 172.177365][ T7660] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16) [ 172.226871][ T7660] Remounting filesystem read-only [ 172.251400][ T48] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 172.296779][ T48] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 172.304161][ T48] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 172.323110][ T48] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 172.332269][ T48] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 172.372652][ T48] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 172.384007][ T48] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 172.412294][ T48] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.436846][ T48] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.456349][ T48] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.472508][ T48] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 172.482785][ T48] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 172.498359][ T48] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 172.520119][ T48] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 172.531772][ T48] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.554581][ T48] NILFS (loop4): discard dirty page: offset=229376, ino=3 [ 172.574717][ T48] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.624863][ T48] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.641403][ T48] NILFS (loop4): discard dirty block: blocknr=50, size=1024 [ 172.651603][ T48] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.664592][ T48] NILFS (loop4): discard dirty page: offset=0, ino=15 [ 172.672930][ T48] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 172.684366][ T48] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.721289][ T48] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.737218][ T48] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.753968][ T6373] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 172.786856][ T6373] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 172.793923][ T6373] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 172.846854][ T6373] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.855791][ T6373] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.875571][ T6373] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.899230][ T6373] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 172.905992][ T6373] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 172.943724][ T6373] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.976850][ T6373] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.985803][ T6373] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 173.145574][ T7694] loop2: detected capacity change from 0 to 128 [ 173.239051][ T7677] loop1: detected capacity change from 0 to 32768 [ 173.341079][ T7677] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 173.461185][ T7677] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 173.917478][ T6271] ocfs2: Unmounting device (7,1) on (node local) [ 174.131865][ T7716] loop5: detected capacity change from 0 to 512 [ 174.211993][ T7718] netlink: 27 bytes leftover after parsing attributes in process `syz.2.513'. [ 174.236428][ T7716] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.466193][ T7716] Quota error (device loop5): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 174.517883][ T7716] EXT4-fs warning (device loop5): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 174.577982][ T7732] netlink: 748 bytes leftover after parsing attributes in process `syz.1.516'. [ 174.625190][ T7726] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 174.658599][ T7732] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 174.666371][ T7726] Quota error (device loop5): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 174.715289][ T7726] EXT4-fs warning (device loop5): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 174.806125][ T7738] netlink: 32 bytes leftover after parsing attributes in process `syz.4.517'. [ 174.969646][ T6553] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 175.442460][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.523'. [ 175.598953][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.523'. [ 175.613387][ T7730] loop2: detected capacity change from 0 to 32768 [ 175.726413][ T7730] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 175.783664][ T7768] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.527'. [ 175.823972][ T7768] netlink: zone id is out of range [ 175.852471][ T7768] netlink: zone id is out of range [ 175.867284][ T7768] netlink: del zone limit has 8 unknown bytes [ 175.999766][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.523'. [ 176.052629][ T5789] (syz-executor,5789,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 176.105033][ T5789] ocfs2: Unmounting device (7,2) on (node local) [ 176.650303][ T7788] loop2: detected capacity change from 0 to 2048 [ 176.751521][ T7788] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.874814][ T7791] loop5: detected capacity change from 0 to 4096 [ 176.932784][ T7791] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 177.063988][ T7791] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 177.296857][ T28] audit: type=1804 audit(177.229:16): pid=7791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.534" name="/newroot/62/file0/file0" dev="loop5" ino=0 res=1 errno=0 [ 177.685863][ T7808] loop1: detected capacity change from 0 to 512 [ 177.755042][ T7808] EXT4-fs (loop1): orphan cleanup on readonly fs [ 177.848469][ T7808] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.539: bad orphan inode 13 [ 177.924153][ T7808] ext4_test_bit(bit=12, block=18) = 1 [ 177.956664][ T7808] is_bad_inode(inode)=0 [ 177.988074][ T7808] NEXT_ORPHAN(inode)=2130706432 [ 177.993016][ T7808] max_ino=32 [ 177.996245][ T7808] i_nlink=1 [ 178.030470][ T7808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.248583][ T6271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.402729][ T7847] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 179.453841][ T7847] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 179.525724][ T7827] loop5: detected capacity change from 0 to 32768 [ 179.559838][ T7827] XFS: ikeep mount option is deprecated. [ 179.597536][ T7831] loop2: detected capacity change from 0 to 32768 [ 179.627444][ T7831] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.548 (7831) [ 179.726096][ T7827] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.735996][ T7831] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.767098][ T7831] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 179.775890][ T7831] BTRFS info (device loop2): setting nodatasum [ 179.795963][ T7831] BTRFS info (device loop2): force zlib compression, level 3 [ 179.851132][ T7831] BTRFS info (device loop2): enabling ssd optimizations [ 179.897001][ T7831] BTRFS info (device loop2): allowing degraded mounts [ 179.929224][ T7831] BTRFS info (device loop2): using free space tree [ 179.959816][ T7862] loop4: detected capacity change from 0 to 128 [ 180.040190][ T7862] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.102623][ T7827] XFS (loop5): Ending clean mount [ 180.130983][ T7827] XFS (loop5): Quotacheck needed: Please wait. [ 180.235342][ T7862] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.554: No space for directory leaf checksum. Please run e2fsck -D. [ 180.303632][ T7841] loop1: detected capacity change from 0 to 32768 [ 180.314219][ T7827] XFS (loop5): Quotacheck: Done. [ 180.331588][ T7862] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.554: checksumming directory block 0 [ 180.567905][ T5789] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.600894][ T6373] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.727581][ T6553] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.711730][ T7908] loop2: detected capacity change from 0 to 256 [ 181.810885][ T7908] FAT-fs (loop2): Directory bread(block 64) failed [ 181.827873][ T7908] FAT-fs (loop2): Directory bread(block 65) failed [ 181.867117][ T7908] FAT-fs (loop2): Directory bread(block 66) failed [ 181.912255][ T7908] FAT-fs (loop2): Directory bread(block 67) failed [ 181.956898][ T7908] FAT-fs (loop2): Directory bread(block 68) failed [ 181.963521][ T7908] FAT-fs (loop2): Directory bread(block 69) failed [ 182.052598][ T7908] FAT-fs (loop2): Directory bread(block 70) failed [ 182.076922][ T7908] FAT-fs (loop2): Directory bread(block 71) failed [ 182.131826][ T7908] FAT-fs (loop2): Directory bread(block 72) failed [ 182.152065][ T7908] FAT-fs (loop2): Directory bread(block 73) failed [ 182.924741][ T7911] loop1: detected capacity change from 0 to 32768 [ 182.943646][ T7909] loop4: detected capacity change from 0 to 32768 [ 182.969489][ T7911] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.557 (7911) [ 183.016800][ T7909] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 183.060495][ T7932] loop2: detected capacity change from 0 to 256 [ 183.068072][ T7911] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 183.134198][ T7911] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 183.151138][ T7911] BTRFS info (device loop1): using free space tree [ 183.397294][ T7938] (syz.4.563,7938,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 183.463806][ T7938] (syz.4.563,7938,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 183.566692][ T7938] (syz.4.563,7938,0):ocfs2_rename:1485 ERROR: status = -2 [ 183.574698][ T7938] (syz.4.563,7938,0):ocfs2_rename:1690 ERROR: status = -2 [ 183.587151][ T7911] BTRFS info (device loop1): enabling ssd optimizations [ 183.594170][ T7911] BTRFS info (device loop1): auto enabling async discard [ 183.700147][ T7954] loop2: detected capacity change from 0 to 1024 [ 183.801967][ T6373] ocfs2: Unmounting device (7,4) on (node local) [ 183.808260][ T7954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.113337][ T7911] BTRFS warning (device loop1): failed to trim 3 block group(s), last error -512 [ 184.235210][ T7928] loop5: detected capacity change from 0 to 32768 [ 184.338462][ T7911] BTRFS warning (device loop1): failed to trim 1 device(s), last error -512 [ 184.487470][ T6271] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 184.697080][ T28] audit: type=1800 audit(184.639:17): pid=7954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.567" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 184.911536][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.237359][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 185.461167][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.527176][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.565856][ T8] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 185.591560][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.645365][ T8] usb 2-1: config 0 descriptor?? [ 186.098291][ T8] maltron 0003:058F:9410.000A: unbalanced delimiter at end of report description [ 186.137958][ T8] maltron: probe of 0003:058F:9410.000A failed with error -22 [ 186.360589][ T23] usb 2-1: USB disconnect, device number 5 [ 186.504425][ T7990] loop4: detected capacity change from 0 to 32768 [ 186.551765][ T7990] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.825797][ T7990] XFS (loop4): Ending clean mount [ 186.866721][ T8] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 187.059690][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.098985][ T8] usb 3-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 187.128843][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.169850][ T8] usb 3-1: config 0 descriptor?? [ 187.215269][ T6373] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.658455][ T8] input: HID 28bd:1903 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:1903.000B/input/input11 [ 187.769168][ T8] uclogic 0003:28BD:1903.000B: input,hidraw0: USB HID vff.ff Mouse [HID 28bd:1903] on usb-dummy_hcd.2-1/input0 [ 187.852651][ T8] usb 3-1: USB disconnect, device number 9 [ 188.110783][ T8061] fido_id[8061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 188.357469][ T23] kernel write not supported for file /input/event2 (pid: 23 comm: kworker/1:0) [ 188.832493][ T8054] loop5: detected capacity change from 0 to 32768 [ 188.918009][ T8054] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.109171][ T8054] XFS (loop5): Ending clean mount [ 189.505874][ T6553] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 190.141246][ T8134] loop1: detected capacity change from 0 to 8 [ 190.397279][ T8134] SQUASHFS error: Unable to read inode 0x87 [ 191.430043][ T8175] loop4: detected capacity change from 0 to 1024 [ 191.470309][ T8149] loop5: detected capacity change from 0 to 32768 [ 191.495982][ T8149] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.620 (8149) [ 191.510542][ T8175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.561863][ T8149] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 191.586516][ T8149] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 191.606042][ T8149] BTRFS info (device loop5): using free space tree [ 191.633457][ T6373] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.741229][ T8149] BTRFS info (device loop5): enabling ssd optimizations [ 191.809689][ T8149] BTRFS info (device loop5): auto enabling async discard [ 192.183666][ T6553] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 192.197318][ T55] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 192.391662][ T8168] loop2: detected capacity change from 0 to 32768 [ 192.409431][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 192.416215][ T8168] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.627 (8168) [ 192.442001][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.474105][ T55] usb 5-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 192.505667][ T8168] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 192.520894][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.530507][ T8168] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 192.547538][ T55] usb 5-1: config 0 descriptor?? [ 192.561065][ T5822] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 192.589539][ T8168] BTRFS info (device loop2): using free space tree [ 192.827308][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 192.870216][ T5822] usb 2-1: config 0 has an invalid interface number: 135 but max is 0 [ 192.879265][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.890676][ T5822] usb 2-1: config 0 has no interface number 0 [ 192.900313][ T8168] BTRFS info (device loop2): enabling ssd optimizations [ 192.910562][ T5822] usb 2-1: config 0 interface 135 altsetting 89 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 192.917749][ T8168] BTRFS info (device loop2): auto enabling async discard [ 192.932559][ T5822] usb 2-1: config 0 interface 135 has no altsetting 0 [ 192.949099][ T5822] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 192.978554][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.996078][ T5822] usb 2-1: Product: syz [ 193.002376][ T5822] usb 2-1: Manufacturer: syz [ 193.012689][ T5822] usb 2-1: SerialNumber: syz [ 193.035848][ T5822] usb 2-1: config 0 descriptor?? [ 193.062359][ T55] wacom 0003:056A:00B8.000C: unknown main item tag 0x0 [ 193.090299][ T5822] em28xx 2-1:0.135: audio device (0ccd:10af): interface 135, class 1 [ 193.110019][ T55] wacom 0003:056A:00B8.000C: unknown main item tag 0x0 [ 193.140576][ T55] wacom 0003:056A:00B8.000C: unknown main item tag 0x0 [ 193.148714][ T55] wacom 0003:056A:00B8.000C: unknown main item tag 0x0 [ 193.157192][ T55] wacom 0003:056A:00B8.000C: unknown main item tag 0x0 [ 193.164330][ T55] wacom 0003:056A:00B8.000C: unknown main item tag 0x0 [ 193.200020][ T55] wacom 0003:056A:00B8.000C: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 193.254933][ T55] wacom 0003:056A:00B8.000C: hidraw0: USB HID v5.59 Device [HID 056a:00b8] on usb-dummy_hcd.4-1/input0 [ 193.340524][ T5789] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 193.364598][ T5859] usb 2-1: USB disconnect, device number 6 [ 193.365083][ T55] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B8.000C/input/input12 [ 193.503897][ T8239] loop5: detected capacity change from 0 to 512 [ 193.597079][ T8239] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.649974][ T55] usb 5-1: USB disconnect, device number 3 [ 193.729222][ T8239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.034944][ T6553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.253167][ T8253] loop4: detected capacity change from 0 to 256 [ 194.629397][ T8264] xt_hashlimit: max too large, truncated to 1048576 [ 194.662137][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.676711][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.731244][ T8264] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 195.177219][ T5859] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 195.383106][ T8289] loop5: detected capacity change from 0 to 256 [ 195.400988][ T5859] usb 2-1: Using ep0 maxpacket: 32 [ 195.414803][ T8289] exfat: Deprecated parameter 'namecase' [ 195.441501][ T5859] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 195.478413][ T8289] exfat: Deprecated parameter 'utf8' [ 195.489568][ T5859] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 195.509361][ T5859] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 195.529520][ T5859] usb 2-1: config 1 has no interface number 0 [ 195.535764][ T8289] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 195.562023][ T5859] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.587968][ T5859] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 18008, setting to 1024 [ 195.613672][ T5859] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 195.645330][ T5859] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 195.721358][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.765893][ T8276] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 195.770541][ T8269] loop4: detected capacity change from 0 to 32768 [ 195.800866][ T5859] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 195.941628][ T8269] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 196.029840][ T8276] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 196.051103][ T8269] (syz.4.644,8269,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=65, rec_len=64016, name_len=255 [ 196.077066][ T5859] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 196.348114][ T6373] ocfs2: Unmounting device (7,4) on (node local) [ 196.638101][ T5859] usb 2-1: USB disconnect, device number 7 [ 196.673726][ T5859] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 197.584170][ T8345] loop4: detected capacity change from 0 to 256 [ 197.667722][ T8345] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 197.947149][ T5926] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 198.073715][ T8325] loop2: detected capacity change from 0 to 32768 [ 198.152729][ T8325] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 198.177446][ T5926] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.226557][ T5926] usb 2-1: config 0 has no interface number 0 [ 198.240324][ T5926] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 198.254052][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.270729][ T5926] usb 2-1: config 0 descriptor?? [ 198.288431][ T5926] usb 2-1: selecting invalid altsetting 1 [ 198.304113][ T5926] dvb_ttusb_budget: ttusb_init_controller: error [ 198.311159][ T5926] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 198.452433][ T8325] XFS (loop2): Ending clean mount [ 198.464576][ T5926] DVB: Unable to find symbol cx22700_attach() [ 198.605742][ T8377] loop4: detected capacity change from 0 to 512 [ 198.623356][ T5926] DVB: Unable to find symbol tda10046_attach() [ 198.627987][ T8377] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 198.644457][ T5926] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 198.667303][ T5926] usb 2-1: USB disconnect, device number 8 [ 198.688163][ T5789] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 198.691178][ T8377] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 198.738847][ T8377] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 198.803456][ T8377] System zones: 1-12 [ 198.832891][ T8377] EXT4-fs (loop4): 1 truncate cleaned up [ 198.871202][ T8377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.999432][ T8377] EXT4-fs warning (device loop4): ext4_group_extend:1868: can't shrink FS - resize aborted [ 199.055768][ T6373] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.529772][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 199.578057][ T5792] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 199.782299][ T5792] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 199.813848][ T5792] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.835313][ T5792] usb 5-1: config 0 interface 0 has no altsetting 0 [ 199.843852][ T5792] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 199.881917][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.899522][ T5792] usb 5-1: config 0 descriptor?? [ 200.114390][ T8414] capability: warning: `syz.2.689' uses 32-bit capabilities (legacy support in use) [ 200.360125][ T5792] pantherlord 0003:0810:0002.000D: unknown main item tag 0x6 [ 200.392640][ T5792] pantherlord 0003:0810:0002.000D: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.4-1/input0 [ 200.421139][ T8418] loop1: detected capacity change from 0 to 2048 [ 200.433068][ T5792] pantherlord 0003:0810:0002.000D: no output reports found [ 200.468658][ T8418] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 200.553805][ T8418] syz.1.699: attempt to access beyond end of device [ 200.553805][ T8418] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 200.577151][ T8424] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.648839][ T5792] usb 5-1: USB disconnect, device number 4 [ 200.933888][ T8432] loop5: detected capacity change from 0 to 256 [ 200.998274][ T8432] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 201.192058][ T8440] tmpfs: Bad value for 'gid' [ 201.505964][ T8448] loop4: detected capacity change from 0 to 4096 [ 201.528325][ T8448] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 201.593690][ T8448] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 201.613681][ T8448] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 201.653730][ T8448] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 201.683429][ T8448] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 201.708669][ T8453] bond_slave_0: entered promiscuous mode [ 201.714470][ T8453] bond_slave_1: entered promiscuous mode [ 201.740496][ T8448] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 201.761892][ T8453] bond_slave_0: left promiscuous mode [ 201.767516][ T8453] bond_slave_1: left promiscuous mode [ 201.771979][ T8448] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 201.822339][ T8448] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 201.840718][ T8448] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 201.867912][ T8448] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 201.890454][ T8448] ntfs: volume version 3.1. [ 202.078537][ T8457] netlink: 27 bytes leftover after parsing attributes in process `syz.5.710'. [ 202.514907][ T8447] loop2: detected capacity change from 0 to 40427 [ 202.571584][ T8466] loop5: detected capacity change from 0 to 128 [ 202.605034][ T8447] F2FS-fs (loop2): invalid crc value [ 202.890428][ T6553] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 202.896548][ T8447] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 202.928361][ T6553] FAT-fs (loop5): Filesystem has been set read-only [ 203.168047][ T8483] loop5: detected capacity change from 0 to 1024 [ 203.345264][ T42] hfsplus: b-tree write err: -5, ino 4 [ 203.361887][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 203.571803][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 203.623741][ T8] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 203.644417][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.662007][ T8] usb 5-1: Product: syz [ 203.666252][ T8] usb 5-1: Manufacturer: syz [ 203.671362][ T8] usb 5-1: SerialNumber: syz [ 203.684089][ T8] usb 5-1: config 0 descriptor?? [ 203.693493][ T8] gspca_main: sq930x-2.14.0 probing 2770:930c [ 204.116996][ T8502] bond0: option lp_interval: invalid value (0) [ 204.134624][ T8502] bond0: option lp_interval: allowed values 1 - 2147483647 [ 204.355009][ T8507] netlink: 128 bytes leftover after parsing attributes in process `syz.5.728'. [ 204.355600][ T8492] loop1: detected capacity change from 0 to 32768 [ 204.378735][ T8507] netlink: 40 bytes leftover after parsing attributes in process `syz.5.728'. [ 204.526056][ T8509] loop2: detected capacity change from 0 to 512 [ 204.538823][ T8] gspca_sq930x: ucbus_write failed -71 [ 204.639021][ T8509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.797273][ T8] gspca_sq930x: Sensor ov9630 not yet treated [ 204.803523][ T8] sq930x: probe of 5-1:0.0 failed with error -22 [ 204.842017][ T8] usb 5-1: USB disconnect, device number 5 [ 204.890144][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.114429][ T8520] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 205.578177][ T8538] loop2: detected capacity change from 0 to 164 [ 205.649427][ T8538] rock: directory entry would overflow storage [ 205.656156][ T8538] rock: sig=0x4f50, size=4, remaining=3 [ 205.706736][ T8538] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 206.215603][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 206.227931][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 206.529732][ T8560] tap0: tun_chr_ioctl cmd 1074025677 [ 206.535301][ T8560] tap0: linktype set to 6 [ 206.583732][ T8558] loop2: detected capacity change from 0 to 4096 [ 207.068622][ T8552] loop5: detected capacity change from 0 to 32768 [ 207.128471][ T8566] loop2: detected capacity change from 0 to 4096 [ 207.346850][ T8571] ialloc: diAlloc returned -17! [ 207.539386][ T8566] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 208.045096][ T8568] loop4: detected capacity change from 0 to 32768 [ 208.112903][ T8568] read_mapping_page failed! [ 208.217399][ T5822] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 208.261349][ T113] read_mapping_page failed! [ 208.414666][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.427992][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.439408][ T5822] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 208.450022][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.469162][ T5822] usb 2-1: config 0 descriptor?? [ 208.660524][ T8591] loop5: detected capacity change from 0 to 4096 [ 208.675494][ T8591] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 208.925935][ T5822] uclogic 0003:5543:0522.000E: No inputs registered, leaving [ 208.979044][ T5822] uclogic 0003:5543:0522.000E: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.1-1/input0 [ 209.019442][ T2903] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.203722][ T5822] usb 2-1: USB disconnect, device number 9 [ 209.294048][ T2903] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.330030][ T8592] fido_id[8592]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 209.474477][ T2903] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.636849][ T2903] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.510155][ T55] IPVS: starting estimator thread 0... [ 210.575042][ T8596] loop4: detected capacity change from 0 to 40427 [ 210.592486][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.604918][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.614231][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.621545][ T8609] IPVS: using max 18 ests per chain, 43200 per kthread [ 210.641315][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.656555][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.677759][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.695992][ T8596] F2FS-fs (loop4): invalid crc value [ 210.756634][ T8596] F2FS-fs (loop4): Found nat_bits in checkpoint [ 210.991822][ T8596] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 211.228075][ T5845] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 211.295633][ T6373] syz-executor: attempt to access beyond end of device [ 211.295633][ T6373] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 211.334930][ T6373] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 211.437073][ T5845] usb 2-1: Using ep0 maxpacket: 16 [ 211.476008][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.497086][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.532612][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 211.558551][ T5845] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 211.597039][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.642350][ T5845] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 211.662109][ T5845] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 211.677373][ T5845] usb 2-1: Manufacturer: syz [ 211.694754][ T5845] usb 2-1: config 0 descriptor?? [ 212.096838][ T5845] rc_core: IR keymap rc-hauppauge not found [ 212.102947][ T5845] Registered IR keymap rc-empty [ 212.118205][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.157192][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.190919][ T5845] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 212.219195][ T5845] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 212.237574][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.246847][ C1] mceusb 2-1:0.0: long-range (0x1) receiver active [ 212.274474][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.346883][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.380978][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.441586][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.487197][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.548720][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.597433][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.621275][ T8612] chnl_net:caif_netlink_parms(): no params data found [ 212.669348][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.706849][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 212.743745][ T5791] Bluetooth: hci3: command tx timeout [ 212.769071][ T5845] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 212.824437][ T5845] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 212.840324][ T8640] loop4: detected capacity change from 0 to 32768 [ 212.860658][ T8640] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.776 (8640) [ 212.887858][ T5845] usb 2-1: USB disconnect, device number 10 [ 212.921937][ T8640] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.965958][ T8640] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 213.003273][ T8640] BTRFS info (device loop4): max_inline at 0 [ 213.031699][ T8640] BTRFS info (device loop4): enabling disk space caching [ 213.102161][ T8640] BTRFS info (device loop4): turning off barriers [ 213.109228][ T8640] BTRFS info (device loop4): turning on flush-on-commit [ 213.116304][ T8640] BTRFS info (device loop4): doing ref verification [ 213.124134][ T8640] BTRFS info (device loop4): force clearing of disk cache [ 213.131850][ T8640] BTRFS info (device loop4): enabling ssd optimizations [ 213.139303][ T8640] BTRFS info (device loop4): max_inline at 4096 [ 213.146530][ T2903] hsr_slave_0: left promiscuous mode [ 213.148066][ T8640] BTRFS info (device loop4): disk space caching is enabled [ 213.162363][ T2903] hsr_slave_1: left promiscuous mode [ 213.170798][ T2903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.180695][ T2903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.199790][ T2903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.256856][ T2903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.319219][ T2903] bridge_slave_1: left allmulticast mode [ 213.324944][ T2903] bridge_slave_1: left promiscuous mode [ 213.375750][ T2903] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.465339][ T8640] BTRFS info (device loop4): auto enabling async discard [ 213.471947][ T2903] bridge_slave_0: left allmulticast mode [ 213.478739][ T2903] bridge_slave_0: left promiscuous mode [ 213.494878][ T2903] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.534292][ T8640] BTRFS info (device loop4): rebuilding free space tree [ 213.593863][ T2903] veth1_macvtap: left promiscuous mode [ 213.602352][ T2903] veth0_macvtap: left promiscuous mode [ 213.622094][ T2903] veth1_vlan: left promiscuous mode [ 213.636992][ T2903] veth0_vlan: left promiscuous mode [ 213.660030][ T8640] BTRFS info (device loop4): disabling free space tree [ 213.687058][ T8640] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 213.726433][ T8640] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 214.550783][ T6373] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.826947][ T5791] Bluetooth: hci3: command tx timeout [ 215.714789][ T8713] loop4: detected capacity change from 0 to 128 [ 215.755510][ T8713] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.970048][ T6373] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.324992][ T2903] team0 (unregistering): Port device team_slave_1 removed [ 216.474065][ T2903] team0 (unregistering): Port device team_slave_0 removed [ 216.574654][ T2903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.652087][ T2903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.896741][ T5791] Bluetooth: hci3: command tx timeout [ 217.645451][ T2903] bond0 (unregistering): Released all slaves [ 217.855159][ T8722] netlink: 132 bytes leftover after parsing attributes in process `syz.4.795'. [ 217.870015][ T8723] netlink: 'syz.4.795': attribute type 12 has an invalid length. [ 217.895955][ T8723] netlink: 132 bytes leftover after parsing attributes in process `syz.4.795'. [ 217.998579][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.030453][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.067124][ T8612] bridge_slave_0: entered allmulticast mode [ 218.075594][ T8612] bridge_slave_0: entered promiscuous mode [ 218.104810][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.171834][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.237730][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.244931][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.287363][ T8612] bridge_slave_1: entered allmulticast mode [ 218.299814][ T8612] bridge_slave_1: entered promiscuous mode [ 218.481684][ T8612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.497266][ T8741] loop5: detected capacity change from 0 to 1024 [ 218.525429][ T8612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.547030][ T5859] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 218.718311][ T8612] team0: Port device team_slave_0 added [ 218.752665][ T8612] team0: Port device team_slave_1 added [ 218.789292][ T5859] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 218.827902][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.868277][ T5859] usb 5-1: config 0 descriptor?? [ 218.977468][ T5791] Bluetooth: hci3: command tx timeout [ 218.992032][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.016807][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.043306][ T8612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.069552][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.089562][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.130569][ T8612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.290549][ T8612] hsr_slave_0: entered promiscuous mode [ 219.341649][ T8612] hsr_slave_1: entered promiscuous mode [ 219.541684][ T5859] usb 5-1: Cannot set autoneg [ 219.547483][ T5859] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 219.574173][ T5859] usb 5-1: USB disconnect, device number 6 [ 219.691746][ T8744] loop1: detected capacity change from 0 to 32768 [ 219.796260][ T8744] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 219.891163][ T8744] XFS (loop1): Ending clean mount [ 219.933808][ T8744] XFS (loop1): Quotacheck needed: Please wait. [ 220.113561][ T8744] XFS (loop1): Quotacheck: Done. [ 220.411078][ T6271] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 220.431406][ T8782] loop4: detected capacity change from 0 to 2048 [ 220.448084][ T8782] NILFS (loop4): invalid segment: Magic number mismatch [ 220.455492][ T8782] NILFS (loop4): trying rollback from an earlier position [ 220.503458][ T8782] NILFS (loop4): recovery complete [ 220.544315][ T8784] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.860265][ T8788] overlayfs: upper fs does not support tmpfile. [ 220.874689][ T8788] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 220.895394][ T8788] overlayfs: failed to set xattr on upper [ 220.911961][ T8788] overlayfs: ...falling back to redirect_dir=nofollow. [ 220.967898][ T8788] overlayfs: ...falling back to uuid=null. [ 221.150135][ T8795] netlink: 108 bytes leftover after parsing attributes in process `syz.1.812'. [ 221.486322][ T8612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.539562][ T8612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.561234][ T8612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.584167][ T8612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.606948][ T8806] netlink: 'syz.5.818': attribute type 1 has an invalid length. [ 221.629684][ T8806] netlink: 6 bytes leftover after parsing attributes in process `syz.5.818'. [ 221.663600][ T8806] block nbd0: shutting down sockets [ 221.913271][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 221.941661][ T8820] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 221.958757][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.821'. [ 221.968746][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.5.821'. [ 221.997255][ T8823] ip6gretap1: entered allmulticast mode [ 222.085071][ T8612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.204872][ T8612] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.238424][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.245669][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.267976][ T8826] loop1: detected capacity change from 0 to 128 [ 222.300490][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.307743][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.352371][ T8826] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.443862][ T8833] program syz.5.824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.589173][ T8826] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x17) [ 222.632472][ T8836] loop5: detected capacity change from 0 to 1024 [ 222.730152][ T6271] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.757438][ T8836] tmpfs: Bad value for 'nr_inodes' [ 222.923475][ T59] hfsplus: b-tree write err: -5, ino 4 [ 223.136891][ T8845] loop5: detected capacity change from 0 to 2048 [ 223.187088][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 223.226542][ T8845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.243277][ T8612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.297013][ T8612] veth0_vlan: entered promiscuous mode [ 223.324166][ T8612] veth1_vlan: entered promiscuous mode [ 223.368452][ T8612] veth0_macvtap: entered promiscuous mode [ 223.378453][ T8845] EXT4-fs error (device loop5): ext4_find_extent:936: inode #2: comm syz.5.827: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 223.400626][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 223.428713][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.432347][ T8612] veth1_macvtap: entered promiscuous mode [ 223.453653][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 223.475433][ T8845] EXT4-fs (loop5): Remounting filesystem read-only [ 223.490328][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.509465][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.536960][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.538950][ T23] usb 2-1: config 0 descriptor?? [ 223.556881][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.584123][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.591437][ T23] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 223.629338][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.667079][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.690278][ T8612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.737880][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.767007][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.796089][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.815642][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.833476][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.844422][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.866102][ T8612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.875120][ T5141] bcm5974 2-1:0.0: could not read from device [ 223.920751][ T6553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.922276][ T8843] bcm5974 2-1:0.0: could not read from device [ 223.943806][ T5141] bcm5974 2-1:0.0: could not read from device [ 223.965063][ T23] usb 2-1: USB disconnect, device number 11 [ 223.965714][ T8612] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.996899][ T8612] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.015322][ T8612] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.043498][ T8612] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.274408][ T8865] loop5: detected capacity change from 0 to 16 [ 224.344001][ T8865] erofs: (device loop5): mounted with root inode @ nid 36. [ 224.384975][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.424738][ T8865] erofs: (device loop5): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 224.426949][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.528858][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.549156][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.676348][ T8868] loop4: detected capacity change from 0 to 4096 [ 224.948909][ T8878] loop1: detected capacity change from 0 to 16 [ 225.014822][ T8878] erofs: (device loop1): mounted with root inode @ nid 36. [ 225.805811][ T8893] loop1: detected capacity change from 0 to 2048 [ 225.819429][ T8871] loop5: detected capacity change from 0 to 32768 [ 225.892232][ T8871] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 225.910083][ T8893] loop1: p1 < > p4 [ 225.910083][ T8893] p4: [ 225.955358][ T8893] loop1: p4 size 722688 extends beyond EOD, truncated [ 225.977103][ T8876] loop2: detected capacity change from 0 to 32768 [ 226.048658][ T8876] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 226.092392][ T8876] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 226.143768][ T8871] XFS (loop5): Ending clean mount [ 226.245796][ T8871] XFS (loop5): Quotacheck needed: Please wait. [ 226.279764][ T8876] (syz.2.767,8876,0):ocfs2_double_lock:1190 ERROR: status = -2 [ 226.505783][ T8871] XFS (loop5): Quotacheck: Done. [ 226.702435][ T6087] udevd[6087]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 226.734630][ T6129] udevd[6129]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 226.876997][ T6553] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 226.919074][ T8612] ocfs2: Unmounting device (7,2) on (node local) [ 227.451751][ T8911] loop4: detected capacity change from 0 to 32768 [ 227.541274][ T8911] syz.4.838: attempt to access beyond end of device [ 227.541274][ T8911] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 227.585560][ T8911] metapage_write_end_io: I/O error [ 227.624437][ T8911] blkno = 8ed2c, nblocks = 1 [ 227.642624][ T8911] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 227.642624][ T8911] [ 227.684850][ T8911] ERROR: (device loop4): remounting filesystem as read-only [ 227.732023][ T8911] UFO tlock:0xffffc9000285a048 [ 227.836138][ T8911] ERROR: (device loop4): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 227.836138][ T8911] [ 227.864233][ T8911] jfs_readdir: unexpected rc = -5 from dtReadNext [ 227.981519][ T112] blkno = 8ed2c, nblocks = 4 [ 228.001164][ T112] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 228.001164][ T112] [ 228.028920][ T6373] syz-executor: attempt to access beyond end of device [ 228.028920][ T6373] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 228.085213][ T6373] metapage_write_end_io: I/O error [ 228.101784][ T6373] JFS: metapage_get_blocks failed [ 228.136840][ T6373] JFS: metapage_get_blocks failed [ 228.146713][ T6373] JFS: metapage_get_blocks failed [ 228.151840][ T6373] JFS: metapage_get_blocks failed [ 228.350105][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 229.920464][ T9006] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 229.927709][ T9006] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 229.959855][ T9006] vhci_hcd vhci_hcd.0: Device attached [ 230.122320][ T9008] usbip_core: unknown command [ 230.132311][ T9008] vhci_hcd: unknown pdu 0 [ 230.147346][ T9008] usbip_core: unknown command [ 230.166846][ T55] vhci_hcd: vhci_device speed not set [ 230.181115][ T2929] vhci_hcd: stop threads [ 230.185436][ T2929] vhci_hcd: release socket [ 230.210119][ T2929] vhci_hcd: disconnect device [ 230.246806][ T55] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 230.283278][ T55] usb 35-1: enqueue for inactive port 0 [ 230.387574][ T55] vhci_hcd: vhci_device speed not set [ 230.655648][ T8996] loop2: detected capacity change from 0 to 32768 [ 230.698194][ T8996] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.863 (8996) [ 230.769455][ T8996] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 230.812983][ T8996] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 230.862533][ T8996] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 230.913816][ T8996] BTRFS info (device loop2): use lzo compression, level 0 [ 230.937035][ T8996] BTRFS info (device loop2): using free space tree [ 231.036874][ T8996] BTRFS info (device loop2): enabling ssd optimizations [ 231.044104][ T8996] BTRFS info (device loop2): auto enabling async discard [ 231.095544][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 231.095560][ T28] audit: type=1800 audit(231.039:19): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.863" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 231.471693][ T8612] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 231.755401][ T5785] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (5785) [ 231.780812][ T9027] loop4: detected capacity change from 0 to 32768 [ 231.810485][ T9027] XFS: attr2 mount option is deprecated. [ 231.905743][ T9027] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 232.168759][ T9027] XFS (loop4): Ending clean mount [ 232.197764][ T9071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.875'. [ 232.231831][ T9027] XFS (loop4): Quotacheck needed: Please wait. [ 232.382165][ T9027] XFS (loop4): Quotacheck: Done. [ 232.582283][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 232.797175][ T6373] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 233.151884][ T9084] netlink: 'syz.2.882': attribute type 25 has an invalid length. [ 233.186772][ T9084] netlink: 'syz.2.882': attribute type 7 has an invalid length. [ 233.424848][ T59] ------------[ cut here ]------------ [ 233.426187][ T42] ------------[ cut here ]------------ [ 233.431647][ T59] WARNING: CPU: 1 PID: 59 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 233.437202][ T42] WARNING: CPU: 0 PID: 42 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 233.447996][ T59] Modules linked in: [ 233.448029][ T59] CPU: 1 PID: 59 Comm: kworker/u4:4 Not tainted 6.6.102-syzkaller #0 [ 233.458843][ T42] Modules linked in: [ 233.458863][ T42] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted 6.6.102-syzkaller #0 [ 233.458886][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.458903][ T42] Workqueue: phy11 ieee80211_csa_finalize_work [ 233.458958][ T42] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 233.459002][ T42] Code: 48 89 df e8 ca b4 ea f7 e9 dc fc ff ff e8 b0 6d 93 f7 eb 24 e8 a9 6d 93 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 98 6d 93 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 8a 6d 93 f7 48 8b 7c 24 08 4c 8b 7c [ 233.459023][ T42] RSP: 0018:ffffc90000b2f9c0 EFLAGS: 00010293 [ 233.459045][ T42] RAX: ffffffff89f2198e RBX: 0000000000000001 RCX: ffff88801ce6da00 [ 233.459063][ T42] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 233.459077][ T42] RBP: dffffc0000000000 R08: ffff888075c655af R09: 1ffff1100eb8cab5 [ 233.459095][ T42] R10: dffffc0000000000 R11: ffffed100eb8cab6 R12: 0000000000000001 [ 233.459111][ T42] R13: ffff888075c665d9 R14: ffff88805a222c70 R15: ffff88805a222ce8 [ 233.463015][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.471152][ T42] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 233.471175][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.471192][ T42] CR2: 00002000007af030 CR3: 000000005fc95000 CR4: 00000000003506f0 [ 233.471213][ T42] Call Trace: [ 233.471222][ T42] [ 233.471256][ T42] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 233.475133][ T59] Workqueue: phy12 ieee80211_csa_finalize_work [ 233.483241][ T42] ieee80211_csa_finalize+0x59a/0xf00 [ 233.483277][ T42] ? mutex_lock_nested+0x20/0x20 [ 233.483306][ T42] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 233.483331][ T42] ? ieee80211_csa_finalize_work+0x140/0x140 [ 233.483364][ T42] ? read_lock_is_recursive+0x20/0x20 [ 233.483398][ T42] ieee80211_csa_finalize_work+0xf6/0x140 [ 233.494040][ T59] [ 233.499997][ T42] ? process_scheduled_works+0x957/0x15b0 [ 233.507300][ T59] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 233.528742][ C1] ------------[ cut here ]------------ [ 233.528792][ C1] WARNING: CPU: 1 PID: 59 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 233.528841][ C1] Modules linked in: [ 233.528859][ C1] CPU: 1 PID: 59 Comm: kworker/u4:4 Not tainted 6.6.102-syzkaller #0 [ 233.528882][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.528899][ C1] Workqueue: phy12 ieee80211_csa_finalize_work [ 233.528936][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 233.528969][ C1] Code: 24 4c 89 e7 e8 fe 37 d5 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 89 12 98 f7 0f 0b e9 f6 f7 ff ff e8 7d 12 98 f7 <0f> 0b e9 48 fb ff ff e8 71 12 98 f7 48 c7 c7 c0 00 24 8e 4c 89 e6 [ 233.528988][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 233.528978][ T42] process_scheduled_works+0xa45/0x15b0 [ 233.529006][ C1] [ 233.529015][ C1] RAX: ffffffff89ed78a3 RBX: ffffffff89ed66a6 RCX: ffff88801cefda00 [ 233.529034][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.529050][ C1] RBP: 0000000000000000 R08: ffff88801cefda00 R09: 0000000000000003 [ 233.529057][ T42] ? assign_work+0x400/0x400 [ 233.529067][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888075c763c0 [ 233.529084][ C1] R13: dffffc0000000000 R14: ffff888075c768b0 R15: ffff88805e390824 [ 233.529094][ T42] ? assign_work+0x39e/0x400 [ 233.529104][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 233.529125][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.529129][ T42] worker_thread+0xa55/0xfc0 [ 233.529143][ C1] CR2: 0000555573f91588 CR3: 00000000671a2000 CR4: 00000000003506e0 [ 233.529166][ C1] Call Trace: [ 233.529159][ T42] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 233.529176][ C1] [ 233.529190][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 233.529225][ T42] kthread+0x2fa/0x390 [ 233.529236][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 233.529246][ T42] ? pr_cont_work+0x560/0x560 [ 233.529275][ T42] ? kthread_blkcg+0xd0/0xd0 [ 233.529279][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 233.529298][ T42] ret_from_fork+0x48/0x80 [ 233.529325][ T42] ? kthread_blkcg+0xd0/0xd0 [ 233.529329][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 233.529348][ T42] ret_from_fork_asm+0x11/0x20 [ 233.529368][ C1] __iterate_interfaces+0x243/0x500 [ 233.529399][ T42] [ 233.529394][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 233.529414][ T42] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 233.529420][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 233.529433][ T42] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted 6.6.102-syzkaller #0 [ 233.529446][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 233.529471][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.529471][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 233.529499][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 233.529494][ T42] Workqueue: phy11 ieee80211_csa_finalize_work [ 233.529524][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 233.529539][ T42] [ 233.529549][ T42] Call Trace: [ 233.529553][ C1] ? hw_scan_work+0xf40/0xf40 [ 233.529562][ T42] [ 233.529584][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 233.529577][ T42] dump_stack_lvl+0x16c/0x230 [ 233.529604][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 233.529637][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 233.529630][ T42] ? show_regs_print_info+0x20/0x20 [ 233.529664][ C1] handle_softirqs+0x280/0x820 [ 233.529688][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 233.529675][ T42] ? load_image+0x3b0/0x3b0 [ 233.529723][ C1] ? do_softirq+0x180/0x180 [ 233.529731][ T42] panic+0x2c0/0x710 [ 233.529756][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 233.529768][ T42] ? bpf_jit_dump+0xd0/0xd0 [ 233.529787][ C1] __irq_exit_rcu+0xc7/0x190 [ 233.529808][ C1] ? irq_exit_rcu+0x20/0x20 [ 233.529811][ T42] ? ret_from_fork_asm+0x11/0x20 [ 233.529837][ C1] irq_exit_rcu+0x9/0x20 [ 233.529846][ T42] __warn+0x2e0/0x470 [ 233.529855][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 233.529873][ T42] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 233.529885][ C1] [ 233.529892][ C1] [ 233.529900][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 233.529907][ T42] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 233.529935][ C1] RIP: 0010:vprintk_emit+0x44f/0x600 [ 233.529938][ T42] report_bug+0x2be/0x4f0 [ 233.529960][ C1] Code: 51 01 00 00 e8 32 4a 1b 00 45 89 f7 48 85 db 48 8b 5c 24 08 75 07 e8 20 4a 1b 00 eb 06 e8 19 4a 1b 00 fb 48 c7 c7 00 3f d2 8c <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 69 bd [ 233.529962][ T42] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 233.529979][ C1] RSP: 0018:ffffc900015a7580 EFLAGS: 00000293 [ 233.529997][ C1] RAX: ffffffff816a4107 RBX: ffffffff816a3fc1 RCX: ffff88801cefda00 [ 233.530004][ T42] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 233.530013][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8cd23f00 [ 233.530027][ C1] RBP: ffffc900015a7670 R08: ffffffff90da35c7 R09: 1ffffffff21b46b8 [ 233.530035][ T42] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 233.530043][ C1] R10: dffffc0000000000 R11: fffffbfff21b46b9 R12: dffffc0000000000 [ 233.530058][ C1] R13: ffffc900015a76e0 R14: 0000000000000039 R15: 0000000000000039 [ 233.530066][ T42] handle_bug+0xcf/0x120 [ 233.530077][ C1] ? vprintk_emit+0x301/0x600 [ 233.530091][ T42] exc_invalid_op+0x1a/0x50 [ 233.530104][ C1] ? vprintk_emit+0x447/0x600 [ 233.530116][ T42] asm_exc_invalid_op+0x1a/0x20 [ 233.530136][ C1] ? vprintk_emit+0x301/0x600 [ 233.530145][ T42] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 233.530162][ C1] ? printk_sprint+0x460/0x460 [ 233.530176][ T42] Code: 48 89 df e8 ca b4 ea f7 e9 dc fc ff ff e8 b0 6d 93 f7 eb 24 e8 a9 6d 93 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 98 6d 93 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 8a 6d 93 f7 48 8b 7c 24 08 4c 8b 7c [ 233.530193][ T42] RSP: 0018:ffffc90000b2f9c0 EFLAGS: 00010293 [ 233.530184][ C1] ? kthread_probe_data+0x103/0x160 [ 233.530211][ T42] RAX: ffffffff89f2198e RBX: 0000000000000001 RCX: ffff88801ce6da00 [ 233.530226][ T42] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 233.530227][ C1] ? vprintk_emit+0x521/0x600 [ 233.530238][ T42] RBP: dffffc0000000000 R08: ffff888075c655af R09: 1ffff1100eb8cab5 [ 233.530252][ T42] R10: dffffc0000000000 R11: ffffed100eb8cab6 R12: 0000000000000001 [ 233.530250][ C1] ? copy_from_kernel_nofault_allowed+0xbd/0x130 [ 233.530265][ T42] R13: ffff888075c665d9 R14: ffff88805a222c70 R15: ffff88805a222ce8 [ 233.530282][ C1] ? copy_from_kernel_nofault+0x1d2/0x320 [ 233.530289][ T42] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 233.530320][ C1] _printk+0xd0/0x110 [ 233.530345][ T42] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 233.530352][ C1] ? set_worker_desc+0x1c0/0x1c0 [ 233.530374][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 233.530384][ T42] ieee80211_csa_finalize+0x59a/0xf00 [ 233.530407][ C1] ? load_image+0x3b0/0x3b0 [ 233.530416][ T42] ? mutex_lock_nested+0x20/0x20 [ 233.530437][ C1] ? _printk+0xd0/0x110 [ 233.530445][ T42] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 233.530470][ T42] ? ieee80211_csa_finalize_work+0x140/0x140 [ 233.530474][ C1] ? load_image+0x3b0/0x3b0 [ 233.530504][ C1] ? print_modules+0xfd/0x1f0 [ 233.530504][ T42] ? read_lock_is_recursive+0x20/0x20 [ 233.530527][ C1] show_ip+0x30/0x40 [ 233.530538][ T42] ieee80211_csa_finalize_work+0xf6/0x140 [ 233.530555][ C1] show_iret_regs+0x1d/0x50 [ 233.530572][ T42] ? process_scheduled_works+0x957/0x15b0 [ 233.530584][ C1] __show_regs+0x34/0x610 [ 233.530598][ T42] process_scheduled_works+0xa45/0x15b0 [ 233.530615][ C1] ? dump_stack_print_info+0xf5/0x150 [ 233.530644][ C1] show_regs+0x44/0x90 [ 233.530658][ T42] ? assign_work+0x400/0x400 [ 233.530670][ C1] __warn+0x160/0x470 [ 233.530692][ T42] ? assign_work+0x39e/0x400 [ 233.530698][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 233.530746][ T42] worker_thread+0xa55/0xfc0 [ 233.530756][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 233.530774][ T42] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 233.530787][ C1] report_bug+0x2be/0x4f0 [ 233.530812][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 233.530835][ T42] kthread+0x2fa/0x390 [ 233.530844][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 233.530853][ T42] ? pr_cont_work+0x560/0x560 [ 233.530880][ T42] ? kthread_blkcg+0xd0/0xd0 [ 233.530876][ C1] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 233.530899][ T42] ret_from_fork+0x48/0x80 [ 233.530907][ C1] handle_bug+0xcf/0x120 [ 233.530923][ T42] ? kthread_blkcg+0xd0/0xd0 [ 233.530932][ C1] exc_invalid_op+0x1a/0x50 [ 233.530944][ T42] ret_from_fork_asm+0x11/0x20 [ 233.530958][ C1] asm_exc_invalid_op+0x1a/0x20 [ 233.530997][ T42] [ 233.530988][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 233.531018][ C1] Code: 48 89 df e8 ca b4 ea f7 e9 dc fc ff ff e8 b0 6d 93 f7 eb 24 e8 a9 6d 93 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 98 6d 93 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 8a 6d 93 f7 48 8b 7c 24 08 4c 8b 7c [ 233.531316][ T42] Kernel Offset: disabled