last executing test programs: 1m11.967718398s ago: executing program 2 (id=269): pipe(&(0x7f0000000500)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100, 0x1, 0x32e}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0) 1m11.872676894s ago: executing program 2 (id=270): syz_mount_image$minix(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1800003, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="28eab73baea79cebfbcb377495a5091fc0b79703c790e209a76c53adec0a444df808db4a70188c30fc5f9c81caa83f2882fced04170dc6602feb4f971fa7b7c3d8be7345ca210ed1a2e91f15f7cf9f851773d36f4149ae4855f777c47e1a9ffb174a9daee48821b82196b5336460ba85b4ca92c2fe9b7ae175cab7acdd2c107c335a67c1a38efd4a2a19b18fe8ca", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES8], 0x11, 0x1d6, &(0x7f0000000bc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/49, 0x31) 1m11.381992992s ago: executing program 2 (id=273): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x1000d, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000480)=0x7e) 1m10.985412595s ago: executing program 2 (id=274): syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0, @ANYBLOB="2c757466382c616c6c6f775f7574696d653d3030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030303030303030303030303030333737372c0002e5cc2c3640db32594e71db"], 0x1, 0x1528, &(0x7f0000003240)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 1m10.661496034s ago: executing program 2 (id=276): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0xb4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}}}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1m10.141112055s ago: executing program 2 (id=280): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0xffffffffffffffea, 0x0, 0x0}) 1m9.585504847s ago: executing program 32 (id=280): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0xffffffffffffffea, 0x0, 0x0}) 7.105317046s ago: executing program 3 (id=693): mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5.402734895s ago: executing program 1 (id=709): socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r0], 0x0) 5.274994562s ago: executing program 4 (id=711): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @local, 0x7}], 0x1c) sendto$inet6(r0, &(0x7f0000000140)='l', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) 5.126234372s ago: executing program 3 (id=713): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x7000000) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000019c0)=""/4102, 0x1000}, {&(0x7f0000000000)=""/46, 0x5c}], 0x2, 0x0, 0x800) 5.029077337s ago: executing program 3 (id=714): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x7}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000180)="b1", 0x1, 0x2004c850, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 4.925658653s ago: executing program 3 (id=716): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000001f00)=ANY=[], 0x1, 0x210, &(0x7f0000000700)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) getdents64(r0, 0xfffffffffffffffe, 0xffffffffffffff15) 4.714773635s ago: executing program 3 (id=717): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xeff, 0x7, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.249024273s ago: executing program 3 (id=719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f7a6500000000c26598d1000000f0000000000000000000000000000000000500031a0501000011"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 4.230771544s ago: executing program 4 (id=720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x1, 0x3, 0x101}, 0x14}}, 0x0) 3.94932429s ago: executing program 33 (id=719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f7a6500000000c26598d1000000f0000000000000000000000000000000000500031a0501000011"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 3.94304741s ago: executing program 4 (id=723): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(0x3) 3.836329536s ago: executing program 4 (id=724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 3.671513156s ago: executing program 1 (id=726): set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4a, 0x3, 0x0, 0x5, 0x0, 0x2, 0x6c, 0x87a, 0x6, 0x7, 0x0, 0x3, 0x1, 0x3, 0x8ca, 0x8005], 0x2000, 0x1f2a15}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 3.551610783s ago: executing program 4 (id=727): syz_mount_image$xfs(&(0x7f0000005a00), &(0x7f0000009640)='./bus\x00', 0x18040, &(0x7f0000000100)={[{@nolazytime}, {@dax_never}, {@inode32}, {@prjquota}, {@grpquota}, {@bsdgroups}, {@dax}]}, 0x4, 0x9736, &(0x7f0000012d80)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) 3.532463364s ago: executing program 1 (id=728): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000025c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c80), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbfe250e00000008000300", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x200048c5}, 0x80) 3.406487341s ago: executing program 1 (id=729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)={0x34, r1, 0x5, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_IE={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x30048011}, 0x4c000) 3.112795729s ago: executing program 1 (id=730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105c9, &(0x7f0000020bc0)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 1.924878478s ago: executing program 4 (id=732): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0], 0xff, 0x5e54, &(0x7f0000005d80)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkfOszwD+7dFrJxCXhBCCIbZzwJBNdtenxAQnDhCahh7SQGhpQx1jrx2DT/Wuc1LULE3aBhGpkdqL9KIUEEVIbZWoQiqVUhSpSO1duSrKDWolLnyRVCaCSlQkW30z7/vuzOzszPow9sz3/n6R/ffOfDPzzjffzO6z0TMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANNr08dk/GyqKovxT+2t9UVxe/nttsaf8cmHnpV4hAAAAcL7eqv3991ekE/as4kIN2/zbB/7ju4uLi4vFF948/fZfLC6mMzYWxciaoqidF/37L36+2LhN8EwxMTTc8PVwl5sf6XL+aJfzx7qcP97l/DVdzp/ocv6yHbDM2vrvY2pXdkPtn+vru7S4qhirnXdDm0s9M7RmeDj+LqdmqHaZxbGDxeHiSDFbTC+7zFDtv6J4ZVN5W/cW8baGG25rQ1EUZ3761P64hqGwj28omm6spvGxe+PuYuObP31q/7fnX39vu9l1NyxbaVFs2Vyu89miWPp1VTFUrEn7JK5zuGGdG9qsc6RpnUO1y5X/bl3nmVWuM97vibDOH3ZY54Zw2uPXF0WxUKy4TatniuFiXcutpv09UT8iyusoH8p3FaNndZxsWsVxUl7mJ9c3Hyetx2Tc/5vCPhldYQ2ND8cbXx5ftt/P9Tgp73U/HKvldd9f3ujEROOvVpuO1XKbp25c+Rho+9i1OQbSsdxwDGzudgwMj4/UjoHhpTVvbjoGZpZdZrgYqt3W6Rs7HwNT80dPTM098eQth4/uOzR7aPbYzPTO7dt2bN+2Y8fUwcNHZqfrf5/dLh0g64rhdAxuDq818Rj8YMu2jYfk4jcu3PNgok+eB+V9/8xN5YIuHy5WOMbLbZ7dcv7Pg/R9v+F5MNrwPGj7mtrmeTC6iudBuc2ZLav7njna8KfdGnr1Wri+4Ri4lN8Py9t86EMrvxZuCOt67sNn+/1wZNkxEO/WUHjulaekn/cmbg/7ZflxcW15xmXjxam52ZO3Pr5vfv7kTBHGRXFlw2PVerysa7hPxbLjZfisj5c9f/fLm65tc/r6sK8mbu78WJXbbJ/s/FjVXt3b78+mU7cWYVxgF3t/tvtuVu7PlCU67M9ym2dvOf+fBVMuaXj9G+v2+jcyNlp//RtJe2Os6fVv+UMzUltZUZy5ZXWvf2Phz8V+/buqT17/yn310K2dj4Fym+emzvYYGO34+nd9mENhPR8KiWGiIfe/XTt/oX6YNjyWXY+b0dGxcNyMxltsPm62LbtMeW3lbW+ZPrfjZsv1zY9V088tFTxuyn31l9Odj5tym1dnzv+1Y238Z8Nrx3i3Y2BsZLxc71g6COqvd4tr4zFwa7G/OF4cKQ6ky5SPcnlbk1tXdwyMhz8X+7Xjmj45Bsp99eLWzsdAuc0Ptl3Yn522hFPSNg0/O7X+fmGlzH/t6NL1te62C535y3V+Ynvn3w2V27y+/WxzRuf9dHM45bI2+6n1+bPSMX2guDj76ZqwziM7Ov9uqtzmqp2rPJ72FEXx2sxrtd93hd/v/uOp//xu0+992/1O+bWZ1+6beuBHZ7N+AADO3du1vxfG6z9rNvwf69X8/38AAABgIMTcPxxmIv8DAABAZcTcPxJmIv8DAABAZcTcPxpmkkn+f+T2XS+99XSR3g1wMYjnx91w/5317WLHeyF8vXFxSXn6x7419tJXnl7dbQ8XRfHL+97XdvtH7ozrqjsR1/mR5tOXuea6Vd3+ww8ubdf4/glndtWvP96f1R4Gsav8ytTW2vVufGKmNl+9r6jNBxaee6Z+/fWv4/ant9W3/+vwpiV7Dg41XX5LWM8NYW4M7ylz/56l/VDOeLmXNnzgX6/87NLtxcsNbX5n7W6++Ef1643vEfXClfXt4/1eaf3/8tXvvFRu//iN7df/9HD79Z8O1/uTMH+xu7594z7/SsP6/ySsP95evNyt3/x+2/W//J769i+H4+LrYbau/+4/f/9b7R6veDt77qhfLt7+9P9ur10uXl+8/tb1Tzw907Q/Wq//1Tfr17P70Z+NNG4fT4+3Ez18R/PxPRQe36YeeVEU3/nTomk/Fx+tX+6fW9Yfr+/EHe3Xf3PLOk8MXVe7/NL9Wd90v772t1vb3t+4nj3/sL7p/rxwT9h/b079oLze0w+E4zGc/38/rF9f63uZvnxP8+tN3P7r6+vP23h9Uy3rf6Fl/QvXlfuu+/rvfbO+/pfvWtO0/j2fDMfTvfXZbf2H/uaKpst/49v1x+PkY5PHjs+dOnygYa82Po/XTKxdd9nl73jnFeG1tPXrvcfnH5k9uXF643RRbBzAtwzs9fq/Geb/1MfChb+Fuh/9rH7cPf+p+vetD/68/vUL4fSHw+MZvz9+7a/Gmo7X1sd94a76PN/1fzisY7Xe89X/vm5VG57+/Cun/umPX2/9uSDenxPvnqjdvxc3XV07b+jV+vmtr1fd/Ne7m5/XPx6drs3vhf26GN6ZefPV9dtrvf743iTPf7r+/I0/ycXLFy3vJ7J+pPl+nO/6fxx+jvn+Nc2vf/H4+N7TLe/mvL4YKpewEF4fioX6+XGruL+fP3N129uL78NTLLz3bJa5orkn5qaOHD526vGp+dm5+am5J57ce/T4qWPze2vvXbr3i90uv/T8Xld7fh+Y3bm9qD3bj9dHj13q9Z94cP+B26ZvOjB7cN+pg/MPnpg9eWj/3Nz+2QNzN+07eHD2sW6XP3xg98zWXdtu2zp56PCB3bfv2rVt1+ThY8fLZdQX1cXO6S9NHju5t3aRud3bd83s2LF9evLo8QOzu2+bnp481e3yte9Nk+WlH508OXtk3/zho7OTc4efnN09s2vnzq1d3/3x6ImDcxunTp46NnVqbvbkVP2+bJyvnVx+7+t2efIwdzy83rUYCj+df+7mnen9cUvf+vKKV1XfpPnH0+KN8F5Q8ftbt69j7h8LM8kk/wMAAEAOYu4Pb/y/dIb8DwAAAJURc/+aMBP5HwAAACoj5v6JMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9y/tiiyzP8AAACQg5j714WZyP8AAABQGTH3XxZmIv8DAABAZcTcf3mYSR75f6z1n/r/+v/6/439/7it/n+h/6//f470//X/O9H/1/8f5PX3Yf9/be/7/0vHtP4/q7Gq/v/40um97v/H3P+OMJM88j8AAABkIeb+d4aZyP8AAABQGTH3XxFmIv8DAABAZcTcvz7MJJP87/P/9f/1/33+v/6//n8v6f/r/3ei/6//P8jr78P+v8//p+/02+f/x9z/K2EmmeR/AAAAyEHM/e8KM5H/AQAAoDJi7r8yzET+BwAAgMqIuf+qMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9z/7jCTTPI/AAAA5CDm/qvDTOR/AAAAqIyY+98TZiL/AwAAQGXE3H9NmEkm+V//X/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9Ndv/X/Y+5/b5hJJvkfAAAAchBz/7VhJvI/AAAAVEbM/e8LM5H/AQAAoDJi7t8QZpJJ/tf/1//X/9f/1//X/++lwer/D694jv5/nf5/M/1//X/9f/1/Ouu3/n/M/e8PM8kk/wMAAEAOYu7/QJiJ/A8AAACVEXP/dWEm8j8AAABURsz9G8NMMsn/+v/6//r/+v/6//r/vTRY/f+V6f/X6f830//X/9f/1/+ns37r/8fcvynMJJP8DwAAADmIuX9zmIn8DwAAAJURc//1YSbyPwAAAFRGzP03hJlkkv/1//X/9f/1//X/9f97Sf9f/78T/X/9/0Fev/7/6vr/492uiErrt/5/zP03hplkkv8BAAAgBzH33xRmIv8DAABAZcTc/8EwE/kfAAAAKiPm/i1hJpnkf/1//X/9f/1//X/9/17S/9f/70T/X/9/kNev/+/z/+mu3/r/Mfd/KMwkk/wPAAAAOYi5/8NhJvI/AAAAVEbM/TeHmcj/AAAAUBkx90+GmWSS//X/9f/1//X/9f/1/3upqv3/9Dqq/6//r/+v/6//r//Pivqt/x9z/y1hJpnkfwAAAMhBzP23hpnI/wAAAFAZMfdPhZnI/wAAAFAZMfdPh5lkkv/1//X/9f/1//X/9f97qar9f5//r/9f6P/r/+v/6//TVb/1/2PunwkzyST/AwAAQA5i7t8aZiL/AwAAQGXE3L8tzET+BwAAgMqIuX97mEkm+V///xz7/2uav9T/b79+/X/9f/1//X/9f/3/TvT/9f8Hef36//r/NBtuc1q/9f9j7t8RZpJJ/gcAAIAcxNy/M8xE/gcAAIDKiLn/tjAT+R8AAAAqI+b+28NMMsn/+v8+/1//X/9f/39Q+//jxSDQ/9f/70T/X/9/kNev/6//T3f91v+PuX9XmEkm+R8AAAByEHP/R8JM5H8AAACojJj77wgzkf8BAABgoLT7HMIo5v6Phplkkv/1/6ve/19co/+v/6//33n9g9v/Hwz6//r/nej/6/8P8vr1//X/6a7f+v8x9+8OM8kk/wMAAEAOYu6/M8xE/gcAAIDKiLn/rjAT+R8AAAAqI+b+PWEmmeR//f+q9/99/r/+/+D0/8fi46r/r/9/FvT/9f8L/f9zdq79+fBji/5/H/X/y2NI/59+1G/9/5j77w4zyST/AwAAQA5i7v9YmIn8DwAAAJURc//Hw0zkfwAAAKiMmPs/EWaSSf7X/9f/1//X/++X/n+k/6//fzb0//X/C/3/c3ap+/ODvv5+6v/7/H/6Vb/1/2PuvyfMJJP8DwAAADmIuf+TYSbyPwAAAFRGzP2/GmYi/wMAAEBlxNx/b5hJJvlf/1//X/9f/1//X/+/l/T/9f870f/X/x/k9ev/6//TXb/1/2Pu/7Uwk0zyPwAAAOQg5v77wkzkfwAAAKiMmPs/FWYi/wMAAEBlxNz/62EmmeR//f+L0/8fTtev/6//r/+v/6//fyHp/+v/F/r/5+xS9+cHff36//r/dNdv/f+Y+38jzCST/A8AAAA5iLn/N8NM5H8AAACojJj7fyvMRP4HAACAyoi5//4wk0zyv/6/z//X/9f/1//X/+8l/X/9/070//X/B3n9+v/6/3TXb/3/mPt/O8wkk/wPAAAAOYi5/4EwE/kfAAAAKiPm/k+Hmcj/AAAAUBkx938mzCST/K//r/+v/6//r/+v/99L+v/6/53o/+v/D/L69f/1/+mu3/r/Mfc/GGaSSf4HAACAHMTc/9kwE/kfAAAAKiPm/t8JM5H/AQAAoDJi7v/dMJNM8r/+v/6//r/+v/6//n8v6f8v7/+Xr2GXsv8/vpoN9f9XRf9f/1//X/+fzvqt/x9z/+fCTDLJ/wAAAJCDmPt/L8xE/gcAAIDKiLn/98NM5H8AAACojJj7HwozyST/6//r/+v/6//r/+v/95L+v8//70T/X/9/kNev/6//T3f91v+Puf/zYSaZ5H8AAADIQcz9fxBmIv8DAABAZcTcvzfMRP4HAACAyoi5/+Ewk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOvX/9f/p7t+6//H3L8vzCST/A8AAAA5iLn/C2Em8j8AAABURsz9+8NM5H8AAACojJj7D4SZZJL/9f/1//X/9f/1//X/e0n/X/+/E/1//f9BXr/+v/4/3fVb/z/m/tkwk0zyPwAAAOQg5v6DYSbyPwAAAFRGzP2HwkzkfwAAAKiMmPsfCTPJJP/r/+v/6//r/+v/6//3kv6//n8n+v/6/4O8fv1//X+667f+f8z9h8NMMsn/AAAAkIOY+78YZiL/AwAAQGXE3P+lMBP5HwAAACoj5v4jYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9E/1//f5DXr/+v/093/db/j7n/aJhJJvkfAAAAchBz/7EwE/kfAAAAKiPm/uNhJvI/AAAAVEbM/SfCTDLJ//r/+v/6//r/+v/6/72k/7+8/z8erlP/X/9f/3+w16//r/9Pd/3W/4+5/w/DTDLJ/wAAAJCDmPtPhpnI/wAAAFAZMffPhZnI/wAAAFAZMffPh5lkkv/1//X/9f/1//X/9f97Sf/f5/93ov+v/z/I69f/1/+nu37r/8fcfyrMJJP8DwAAADmIuf/RMBP5HwAAACoj5v7HwkzkfwAAAKiMmPsfDzPJJP/r//8/e3e961t5xHF406aWpum19Ap6Cb2GXkbdhbq7u7u7u1N3d1rqmtCEPTOQAmudA/zY75p5nn+mhZ3whk1IviGfLP2//n+Z/v+889P/6//1/5dF/3+79//X/SOv/z+n/9f/6//1/2xbrf/P3X+/uGXI/gcAAIAJcvffP26x/wEAAKCN3P0PiFvsfwAAAGgjd/8D45Yh+1//r//X/y/T//v+f/5e9f/6/8ug//f9/zP9/y120f380d+v/9f/s2+1/j93/4PiliH7HwAAACbI3f/guMX+BwAAgDZy9z8kbrH/AQAAoI3c/Q+NW4bsf/2//l//r//X/+v/T0n/r//fov/X/x/5/fp//T/7Vuv/c/c/LG4Zsv8BAABggtz9D49b7H8AAABoI3f/I+IW+x8AAADayN3/yLhlyP7X/+v/9f/6f/2//v+U9P/6/y36f/3/kd+v/9f/s2+1/j93/6PiliH7HwAAACbI3f/ouMX+BwAAgDZy9z8mbrH/AQAAoI3c/Y+NW4bsf/2//l//r//X/+v/T0n/r//fov/X/x/5/fp//T/7Tt7/3+fK6+6l9v+5+6+MW4bsfwAAAJggd//j4hb7HwAAANrI3f/4uMX+BwAAgDZy9z8hbhmy//X/+v/r+/9rr9D/6//1/9f/cf3/bUP/r//fov9ftf+/tL8T+n/9v/6fPSfv/3d6/////7n7nxi3DNn/AAAAMEHu/ifFLfY/AAAAtJG7/8lxi/0PAAAAbeTuf0rcMmT/H6X/v1v+D/2/7//r//X/+v9D0f/r/7fo/1ft/33//9b2//e+hPfr/5lgtf4/d/9T45Yh+x8AAAAmyN3/tLjF/gcAAIA2cvc/PW6x/wEAAKCN3P3PiFuG7P+j9P++/6//v6n36//1/2f6/+Xp//X/W/T/+v8jv9/3//X/7Fut/8/d/8y4Zcj+BwAAgAly9z8rbrH/AQAAoI3c/c+OW+x/AAAAaCN3/3PiliH7X/+v/9f/6/9vVf9/R/2//n+b/l//v0X/r/8/8vv1//p/9q3W/+fuf27cMmT/AwAAwAS5+58Xt9j/AAAA0Ebu/ufHLfY/AAAAtJG7/wVxy5D9r//X/+v/9f++/6//PyX9f7v+/wr9//X0//p//b/+n22r9f+5+18YtwzZ/wAAADBB7v4XxS32PwAAALSRu//FcYv9DwAAAG3k7n9J3DJk/+v/9f/6f/2//l//f0r6/3b9v+//34D+X/+v/9f/s221/j93/0vjliH7HwAAACbI3f+yuMX+BwAAgDZy9788brH/AQAAoI3c/a+IW4bsf/2//l//r//X/+v/T0n/r//fov+/6f7/rjfz19P/r/V+/b/+n32r9f+5+18ZtwzZ/wAAADBB7v5XxS32PwAAALSRu//VcYv9DwAAAG3k7n9N3DJk/99c/3/N3c//vP7/0uj/b/r9+n/9v/5f/6//1/9v0f/7/v+R36//1/+zb7X+P3f/a+OWIfsfAAAAJsjd/7q4xf4HAACANnL3vz5usf8BAACgjdz9b4hbhux/3//X/+v/9f/6f/3/Ken/9f9b9P/6/yO/X/+v/2ffav1/7v43xi1D9j8AAABMkLv/TXGL/Q8AAABt5O5/c9xi/wMAAEAbufvfErcM2f/6f/3/hff/d9D/J/1//F71//r/y6D/1/+f6f9vsYvu54/+fv2//p99q/X/ufvfGrcM2f8AAAAwQe7+t8Ut9j8AAAC0kbv/7XGL/Q8AAABt5O5/R9wyZP/r//X/F97/+/5/0f/H71X/r/+/DPp//f+Z/v8Wu+h+/ujv1//r/9m3Wv+fu/+dccuQ/Q8AAAAT5O5/V9xi/wMAAEAbufvfHbfY/wAAANBG7v73xC1D9r/+X/+v/9f/6//1/6ek/9f/b9H/6/+P/H79v/6ffav1/7n73xu3DNn/AAAAMEHu/vfFLfY/AAAAtJG7//1xi/0PAAAAbeTu/0DcMmT/6/+P3v/f9+p4gf5f/6//1/8vSf+v/9+i/9f/H/n9+n/9P/tW6/9z938wbhmy/wEAAGCC3P0filvsfwAAAGgjd/+H4xb7HwAAANrI3f+RuGXI/p/R/9/pRj/Wp//3/X/9v/5f/782/b/+f4v+X/9/5Pfr//X/7Fut/8/d/9G4Zcj+BwAAgAly938sbrH/AQAAoI3c/R+PW+x/AAAAaCN3/yfiliH7f0b/f2P6/3O3ef9/7T31//r/ov/X/5/p//X/O/T/+v8jv1//r/9n32r9f+7+T8YtQ/Y/AAAATJC7/1Nxi/0PAAAAbeTu/3TcYv8DAABAG7n7PxM33OseF/ek25X+X//v+//6f/2//v+U9P/6/y36f/3/kd+v/9f/s2+1/j93/2fjFv/9HwAAANrI3f+5uMX+BwAAgDZy938+brH/AQAAoI3c/V+IW4bsf/2//l//r//X/+v/T0n/r//fov/X/x/5/fp//T/7Vuv/c/d/MW4Zsv8BAABggtz9X4pb7H8AAABoI3f/l+MW+x8AAADayN3/lbhlyP7X/+v/9f/6f/2//v+U9P/6/y36f/3/kd+v/9f/s2+1/j93/1fjliH7HwAAACbI3f+1uMX+BwAAgDZy918Vt9j/AAAA0Ebu/q/HLUP2v/5f/6//1//r//X/p6T/1/9v0f/foP/Pf5no/w/zfv2//p99q/X/ufu/EbcM2f8AAAAwQe7+b8Yt9j8AAAC0kbv/W3GL/Q8AAABt5O7/dtwyZP937v+3fkz/f07/r/8/0//r/09M/6//36L/9/3/I79f/6//Z99q/X/u/u/ELUP2PwAAAEyQu/+7cYv9DwAAAG3k7v9e3GL/AwAAQBu5+78ftwzZ/537/y36/3P6f/3/mf5f/39i+n/9/xb9v/7/yO/X/+v/2bda/5+7/wdxy5D9DwAAABPk7v9h3GL/AwAAQBu5+38Ut9j/AAAA0Ebu/h/HLUP2v/5f/6//1//r//X/p6T/1/9v0f/r/4/8fv2//p99q/X/uft/ErcM2f8AAAAwQe7+n8Yt9j8AAAC0kbv/Z3GL/Q8AAABt5O7/edwyZP/r//X/+n/9v/5f/39K+n/9/xb9v/7/yO/X/+v/2bda/5+7/xdxy5D9DwAAABPk7v9l3GL/AwAAQBu5+38Vt9j/AAAA0Ebu/l/HLUP2v/5f/6//1//r//X/p6T/1/9v0f/r/4/8fv2//p99q/X/uft/E7cM2f8AAAAwQe7+38Yt9j8AAAC0kbv/d3GL/Q8AAABt5O7/fdwyZP/r//X/+n/9v/5f/39K+n/9/xb9v/7/yO/X/+v/2bda/5+7/+q4Zcj+BwAAgAly9/8hbrH/AQAAoI3c/X+MW+x/AAAAaCN3/zVxy5D937n/v+rON/9j+v9zbfv/u+j/9f/6/1Xo//X/W/T/+v8jv1//r/9n32r9f+7+P8UtQ/Y/AAAATJC7/89xi/0PAAAAbeTu/0vcYv8DAABAG7n7/xq3DNn/nfv/Lfr/c237f9//1//r/5eh/9f/b9H/6/+P/H79v/6ffav1/7n7/xa3DNn/AAAAMEHu/r/HLfY/AAAAtJG7/x9xi/0PAAAAbeTu/2fcMmT/6//1//p//b/+X/9/Svp//f8W/b/+/8jv1//r/9m3Wv+fu/9fccuQ/Q8AAAAT5O7/d9xi/wMAAEAbufv/E7fY/wAAANBG7v7/xi1D9r/+X/+v/9f/6//1/6ek/9f/b9H/6/+P/H79v/6ffav1/7n7/xcAAP//mdcmSQ==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='./file0\x00') 1.71547441s ago: executing program 0 (id=733): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0002"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1.533536231s ago: executing program 0 (id=734): r0 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8a) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.527088931s ago: executing program 1 (id=735): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7fffffffffe, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrusage(0x1, &(0x7f0000000100)) 1.257253646s ago: executing program 0 (id=736): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000180)=0xa, 0x4) 918.551236ms ago: executing program 0 (id=737): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000280)=0x3, 0x200000, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r0, 0x289e0cb5, 0x0) 627.953223ms ago: executing program 0 (id=738): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x19, 0x3) execveat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) 0s ago: executing program 0 (id=739): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 81.579927][ T5757] cgroup: Unknown subsys name 'net' [ 81.719665][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.435443][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.155542][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.181584][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.200949][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.222755][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.233714][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.240765][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.243605][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.250779][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.259672][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.266796][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.274241][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.277666][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.284255][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.292632][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.304389][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.308437][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.315808][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.318826][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.326908][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.340587][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.349502][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.350036][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.376001][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.385072][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.848191][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 85.938210][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 85.988766][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 86.007197][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 86.101892][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.109215][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.117649][ T5770] bridge_slave_0: entered allmulticast mode [ 86.125383][ T5770] bridge_slave_0: entered promiscuous mode [ 86.177269][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.184586][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.192047][ T5770] bridge_slave_1: entered allmulticast mode [ 86.199055][ T5770] bridge_slave_1: entered promiscuous mode [ 86.274424][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.319189][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.326597][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.334089][ T5772] bridge_slave_0: entered allmulticast mode [ 86.341639][ T5772] bridge_slave_0: entered promiscuous mode [ 86.352847][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.371606][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.378770][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.386464][ T5775] bridge_slave_0: entered allmulticast mode [ 86.393927][ T5775] bridge_slave_0: entered promiscuous mode [ 86.414393][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.423042][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.431836][ T5772] bridge_slave_1: entered allmulticast mode [ 86.438850][ T5772] bridge_slave_1: entered promiscuous mode [ 86.479052][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.488175][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.496960][ T5775] bridge_slave_1: entered allmulticast mode [ 86.504784][ T5775] bridge_slave_1: entered promiscuous mode [ 86.523527][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.531434][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.538729][ T5769] bridge_slave_0: entered allmulticast mode [ 86.546521][ T5769] bridge_slave_0: entered promiscuous mode [ 86.557806][ T5770] team0: Port device team_slave_0 added [ 86.569329][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.582381][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.604086][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.614521][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.621886][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.629111][ T5769] bridge_slave_1: entered allmulticast mode [ 86.636471][ T5769] bridge_slave_1: entered promiscuous mode [ 86.644854][ T5770] team0: Port device team_slave_1 added [ 86.674003][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.736749][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.743988][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.770451][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.784965][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.792072][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.818442][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.835719][ T5772] team0: Port device team_slave_0 added [ 86.861597][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.874547][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.906576][ T5772] team0: Port device team_slave_1 added [ 86.918912][ T5775] team0: Port device team_slave_0 added [ 86.937790][ T5775] team0: Port device team_slave_1 added [ 87.007192][ T5770] hsr_slave_0: entered promiscuous mode [ 87.014362][ T5770] hsr_slave_1: entered promiscuous mode [ 87.035532][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.050520][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.076881][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.093925][ T5769] team0: Port device team_slave_0 added [ 87.104337][ T5769] team0: Port device team_slave_1 added [ 87.121122][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.128131][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.154617][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.172329][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.179336][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.205762][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.233512][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.241947][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.272772][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.410727][ T5772] hsr_slave_0: entered promiscuous mode [ 87.417437][ T5772] hsr_slave_1: entered promiscuous mode [ 87.424045][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.433072][ T5772] Cannot create hsr debugfs directory [ 87.439377][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.446771][ T5773] Bluetooth: hci1: command tx timeout [ 87.446870][ T51] Bluetooth: hci3: command tx timeout [ 87.453758][ T5777] Bluetooth: hci2: command tx timeout [ 87.458278][ T5779] Bluetooth: hci0: command tx timeout [ 87.466451][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.502176][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.516671][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.524049][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.563470][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.602288][ T5775] hsr_slave_0: entered promiscuous mode [ 87.609050][ T5775] hsr_slave_1: entered promiscuous mode [ 87.615591][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.623407][ T5775] Cannot create hsr debugfs directory [ 87.760394][ T5769] hsr_slave_0: entered promiscuous mode [ 87.767691][ T5769] hsr_slave_1: entered promiscuous mode [ 87.777899][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.785799][ T5769] Cannot create hsr debugfs directory [ 88.187197][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.202863][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.214241][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.230533][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.318306][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.340992][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.351423][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.372611][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.453429][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.487281][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.498371][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.523865][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.589265][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.627472][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.639621][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.658278][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.679843][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.700941][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.767027][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.774472][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.802622][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.809826][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.899767][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.962290][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.993960][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.001159][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.035690][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.042932][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.067225][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.088123][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.162022][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.208313][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.215550][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.257619][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.279136][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.286415][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.338776][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.346034][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.395812][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.403381][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.522404][ T51] Bluetooth: hci3: command tx timeout [ 89.522441][ T5773] Bluetooth: hci1: command tx timeout [ 89.528115][ T5779] Bluetooth: hci0: command tx timeout [ 89.535855][ T5777] Bluetooth: hci2: command tx timeout [ 89.599912][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.747311][ T5770] veth0_vlan: entered promiscuous mode [ 89.775588][ T5770] veth1_vlan: entered promiscuous mode [ 89.847701][ T5770] veth0_macvtap: entered promiscuous mode [ 89.868175][ T5770] veth1_macvtap: entered promiscuous mode [ 89.909928][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.955906][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.006585][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.038305][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.048944][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.059277][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.068687][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.186551][ T5772] veth0_vlan: entered promiscuous mode [ 90.223062][ T5772] veth1_vlan: entered promiscuous mode [ 90.287350][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.307814][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.344280][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.367245][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.417841][ T5772] veth0_macvtap: entered promiscuous mode [ 90.446081][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.452327][ T5772] veth1_macvtap: entered promiscuous mode [ 90.456155][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.527911][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.546536][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.559087][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.596361][ T5769] veth0_vlan: entered promiscuous mode [ 90.621657][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.642624][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.675393][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.698521][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.709949][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.718777][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.728287][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.743224][ T5775] veth0_vlan: entered promiscuous mode [ 90.772607][ T5775] veth1_vlan: entered promiscuous mode [ 90.779749][ T5769] veth1_vlan: entered promiscuous mode [ 90.938801][ T5769] veth0_macvtap: entered promiscuous mode [ 90.982598][ T5775] veth0_macvtap: entered promiscuous mode [ 91.006629][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.017879][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.029629][ T5775] veth1_macvtap: entered promiscuous mode [ 91.069111][ T5769] veth1_macvtap: entered promiscuous mode [ 91.160951][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.172411][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.184549][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.214327][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.221542][ T5866] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.228709][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.247890][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.259942][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.291516][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.311587][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.322056][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.333233][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.353164][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.371258][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.384593][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.397042][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.410604][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.421205][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.432118][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.459253][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.476923][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.492721][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.505518][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.517938][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.528694][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.539691][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.553682][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.566552][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.587306][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.596636][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.601833][ T5777] Bluetooth: hci2: command tx timeout [ 91.611224][ T5773] Bluetooth: hci1: command tx timeout [ 91.611247][ T5779] Bluetooth: hci0: command tx timeout [ 91.616666][ T5773] Bluetooth: hci3: command tx timeout [ 91.627939][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.712137][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.761855][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.790458][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.799260][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.000132][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.014310][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.133653][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.159121][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.191256][ T9] cfg80211: failed to load regulatory.db [ 92.261331][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.291514][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.379719][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.413649][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.725113][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 92.930911][ T5894] syz.1.16[5894]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.681859][ T5777] Bluetooth: hci2: command tx timeout [ 93.687453][ T51] Bluetooth: hci1: command tx timeout [ 93.687458][ T5773] Bluetooth: hci3: command tx timeout [ 93.699237][ T5779] Bluetooth: hci0: command tx timeout [ 93.793415][ T5894] loop1: detected capacity change from 0 to 32768 [ 94.216231][ T5926] netlink: 548 bytes leftover after parsing attributes in process `syz.0.32'. [ 94.261994][ T5922] loop2: detected capacity change from 0 to 4096 [ 94.500769][ T5922] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 94.533996][ T5922] ntfs3: loop2: Failed to load $Extend (-22). [ 94.561408][ T5922] ntfs3: loop2: Failed to initialize $Extend. [ 94.823560][ T5938] capability: warning: `syz.0.36' uses 32-bit capabilities (legacy support in use) [ 94.849855][ T5936] syz.2.30 (5936) used greatest stack depth: 20432 bytes left [ 94.879965][ T5938] program syz.0.36 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.407617][ T5946] loop2: detected capacity change from 0 to 1024 [ 95.482441][ T5946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.791927][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.044870][ T5964] warning: `syz.0.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.653154][ T5982] input: syz0 as /devices/virtual/input/input5 [ 97.703474][ T6018] loop1: detected capacity change from 0 to 16 [ 97.735133][ T6018] erofs: (device loop1): mounted with root inode @ nid 36. [ 97.991100][ T6027] syz_tun: entered allmulticast mode [ 98.024109][ T6026] syz_tun: left allmulticast mode [ 98.235847][ T6030] loop0: detected capacity change from 0 to 4096 [ 98.322316][ T6030] ntfs: volume version 3.1. [ 98.535712][ T6048] netlink: 88 bytes leftover after parsing attributes in process `syz.2.84'. [ 98.607025][ T6030] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 98.799057][ T6056] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 98.919721][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 98.963430][ T6062] loop0: detected capacity change from 0 to 128 [ 99.041957][ T6062] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.073677][ T6062] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.177518][ T6065] loop1: detected capacity change from 0 to 4096 [ 99.243711][ T6065] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 99.297678][ T6062] ======================================================= [ 99.297678][ T6062] WARNING: The mand mount option has been deprecated and [ 99.297678][ T6062] and is ignored by this kernel. Remove the mand [ 99.297678][ T6062] option from the mount to silence this warning. [ 99.297678][ T6062] ======================================================= [ 99.367850][ T6062] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.473571][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.674766][ T6078] loop0: detected capacity change from 0 to 1024 [ 99.955848][ T1133] hfsplus: b-tree write err: -5, ino 4 [ 100.171011][ T786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.371472][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 100.385886][ T786] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 100.404652][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.453942][ T786] pvrusb2: Hardware description: Terratec Grabster AV400 [ 100.476430][ T786] pvrusb2: ********** [ 100.496038][ T786] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 100.549673][ T786] pvrusb2: Important functionality might not be entirely working. [ 100.577404][ T786] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 100.617323][ T786] pvrusb2: ********** [ 100.659971][ T2319] pvrusb2: Invalid write control endpoint [ 100.821855][ T2319] pvrusb2: Invalid write control endpoint [ 100.829370][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 100.868959][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 100.888447][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 100.920368][ T2319] pvrusb2: Device being rendered inoperable [ 100.942221][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 100.960549][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 100.985017][ T5781] usb 2-1: USB disconnect, device number 2 [ 100.988431][ T2319] pvrusb2: Attached sub-driver cx25840 [ 101.014972][ T6095] loop3: detected capacity change from 0 to 32768 [ 101.018926][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 101.054625][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 101.203045][ T6106] loop0: detected capacity change from 0 to 8192 [ 101.229593][ T6106] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 101.250384][ T6106] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 101.281618][ T6106] REISERFS (device loop0): using ordered data mode [ 101.288313][ T6106] reiserfs: using flush barriers [ 101.297237][ T6106] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.315564][ T6106] REISERFS (device loop0): checking transaction log (loop0) [ 101.574755][ T6106] REISERFS (device loop0): Using tea hash to sort names [ 101.597089][ T6106] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 101.636490][ T6106] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 101.939070][ T6104] loop2: detected capacity change from 0 to 32768 [ 102.070987][ T6104] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.092612][ T6121] loop3: detected capacity change from 0 to 2048 [ 102.211243][ T6121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.307784][ T6131] loop0: detected capacity change from 0 to 4096 [ 102.316973][ T6131] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 102.351801][ T6131] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 102.385117][ T6121] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz.3.115: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 102.415285][ T6131] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 102.450086][ T6131] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 102.460705][ T6131] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 102.483049][ T6121] EXT4-fs (loop3): Remounting filesystem read-only [ 102.503046][ T6131] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 102.534915][ T6131] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 102.604756][ T6131] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 102.629663][ T6104] XFS (loop2): Ending clean mount [ 102.644841][ T6134] loop1: detected capacity change from 0 to 64 [ 102.652906][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.673789][ T6131] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 102.712726][ T6131] ntfs: volume version 3.1. [ 102.735562][ T6104] XFS (loop2): Quotacheck needed: Please wait. [ 102.911126][ T6104] XFS (loop2): Quotacheck: Done. [ 103.121763][ T6136] loop3: detected capacity change from 0 to 4096 [ 103.139660][ T6136] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 103.330398][ T6141] capability: warning: `syz.0.121' uses deprecated v2 capabilities in a way that may be insecure [ 103.444509][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.758342][ T6147] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.860662][ T5759] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.063513][ T5759] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.080669][ T5759] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.093775][ T5759] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.104167][ T5759] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 104.139345][ T6157] binder: 6156:6157 ioctl 40046205 0 returned -22 [ 104.160272][ T5759] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 104.208218][ T5759] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.222122][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.240542][ T5759] usb 1-1: Product: syz [ 104.246617][ T5759] usb 1-1: Manufacturer: syz [ 104.277727][ T5759] cdc_wdm 1-1:1.0: skipping garbage [ 104.290478][ T5759] cdc_wdm 1-1:1.0: skipping garbage [ 104.310996][ T5759] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 104.317177][ T5759] cdc_wdm 1-1:1.0: Unknown control protocol [ 104.720539][ T786] usb 1-1: USB disconnect, device number 2 [ 104.940315][ T5759] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.123791][ T5759] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.139217][ T5759] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 105.151987][ T5759] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.161695][ T5759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 105.180344][ T5759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 105.206153][ T5759] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.217140][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.226135][ T5759] usb 3-1: Product: syz [ 105.231358][ T5759] usb 3-1: Manufacturer: syz [ 105.258451][ T5759] cdc_wdm 3-1:1.0: skipping garbage [ 105.273623][ T5759] cdc_wdm 3-1:1.0: skipping garbage [ 105.287022][ T5759] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 105.300364][ T5759] cdc_wdm 3-1:1.0: Unknown control protocol [ 105.528614][ T6187] loop0: detected capacity change from 0 to 64 [ 105.574762][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 105.574777][ T28] audit: type=1800 audit(1770162066.464:3): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.141" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 106.103493][ T5781] usb 3-1: USB disconnect, device number 2 [ 106.145936][ T6194] vlan2: entered allmulticast mode [ 106.160636][ T6194] veth0_to_bond: entered allmulticast mode [ 106.226783][ T6198] loop2: detected capacity change from 0 to 512 [ 106.401060][ T6198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.434723][ T6198] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.535588][ T28] audit: type=1800 audit(1770162067.424:4): pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.146" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 106.682784][ T6211] loop1: detected capacity change from 0 to 2048 [ 106.737004][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.792171][ T6215] netlink: 48 bytes leftover after parsing attributes in process `syz.0.153'. [ 106.850813][ T6211] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.069799][ T6223] netlink: 48 bytes leftover after parsing attributes in process `syz.3.157'. [ 107.293064][ T6229] Zero length message leads to an empty skb [ 107.365653][ T6233] loop2: detected capacity change from 0 to 256 [ 107.451193][ T6233] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 107.640811][ T6233] exFAT-fs (loop2): error, invalid size(size(0) > aligned(9223372036854777344) [ 107.640811][ T6233] [ 107.667980][ T6241] loop0: detected capacity change from 0 to 2048 [ 107.675841][ T6243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.167'. [ 107.685561][ T6233] exFAT-fs (loop2): Filesystem has been set read-only [ 107.722360][ T6241] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.958974][ T6246] UDF-fs: bad mount option "#! [ 107.958974][ T6246] s" or missing value [ 108.388422][ T6259] loop0: detected capacity change from 0 to 256 [ 108.441304][ T6259] exfat: Deprecated parameter 'utf8' [ 108.446733][ T6259] exfat: Deprecated parameter 'namecase' [ 108.504613][ T6259] exfat: Deprecated parameter 'namecase' [ 108.530535][ T6259] exfat: Deprecated parameter 'utf8' [ 108.595759][ T6259] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 108.888297][ T6249] loop1: detected capacity change from 0 to 40427 [ 108.935465][ T6249] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 108.962190][ T6249] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 108.993314][ T6249] F2FS-fs (loop1): invalid crc value [ 109.068079][ T6249] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.265094][ T6249] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 109.289580][ T6249] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 109.698615][ T6290] loop2: detected capacity change from 0 to 4096 [ 109.723597][ T6294] mmap: syz.0.189 (6294) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.750691][ T6290] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 110.726383][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 111.084196][ T6332] vivid-002: disconnect [ 111.104449][ T6331] vivid-002: reconnect [ 111.411578][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 111.559687][ T6345] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 111.606624][ T6345] overlayfs: overlapping lowerdir path [ 111.943678][ T6356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.213'. [ 112.012882][ T6357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.213'. [ 112.128922][ T6362] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 112.306131][ T6368] loop0: detected capacity change from 0 to 128 [ 112.338771][ T6368] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 112.380709][ T6368] hpfs: filesystem error: improperly stopped [ 112.391042][ T6368] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 112.408314][ T6368] hpfs: You really don't want any checks? You are crazy... [ 112.436586][ T6368] hpfs: hpfs_map_sector(): read error [ 112.454549][ T6368] hpfs: code page support is disabled [ 112.465964][ T6368] hpfs: hpfs_map_4sectors(): unaligned read [ 112.478041][ T6368] hpfs: hpfs_map_4sectors(): unaligned read [ 112.486425][ T6368] hpfs: filesystem error: unable to find root dir [ 112.560428][ T5781] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 112.774883][ T5781] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.791040][ T5781] usb 4-1: not running at top speed; connect to a high speed hub [ 112.804940][ T6375] loop1: detected capacity change from 0 to 512 [ 112.811452][ T5781] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.811506][ T5781] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.828377][ T5781] usb 4-1: string descriptor 0 read error: -22 [ 112.846146][ T5781] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.872689][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.928917][ T5781] usb 4-1: 0:2 : does not exist [ 113.119023][ T6375] EXT4-fs (loop1): Test dummy encryption mode enabled [ 113.128726][ T6375] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.167994][ T6375] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.200509][ T6369] loop2: detected capacity change from 0 to 32768 [ 113.227265][ T6369] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.219 (6369) [ 113.264713][ T6375] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.222: bad orphan inode 131083 [ 113.315484][ T6369] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.326980][ T6369] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 113.336334][ T6369] BTRFS info (device loop2): force clearing of disk cache [ 113.344758][ T6369] BTRFS info (device loop2): enabling auto defrag [ 113.351319][ T6369] BTRFS info (device loop2): enabling ssd optimizations [ 113.358506][ T6369] BTRFS info (device loop2): setting nodatacow, compression disabled [ 113.366759][ T6369] BTRFS info (device loop2): enabling disk space caching [ 113.374089][ T6369] BTRFS info (device loop2): disk space caching is enabled [ 113.382827][ T6375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.562610][ T6369] BTRFS info (device loop2): rebuilding free space tree [ 113.719296][ T6369] BTRFS info (device loop2): disabling free space tree [ 113.741422][ T6369] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.766078][ T6369] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.803725][ T6375] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 113.831553][ T5781] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 113.867704][ T6369] BTRFS info (device loop2): checking UUID tree [ 113.873237][ T5781] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 113.986703][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.044380][ T5781] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 114.102016][ T5781] usb 4-1: USB disconnect, device number 2 [ 114.276943][ T6409] Bluetooth: MGMT ver 1.22 [ 114.396625][ T3462] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 114.577070][ T5772] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.989867][ T6422] loop3: detected capacity change from 0 to 64 [ 115.008870][ T6422] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 115.462804][ T6414] loop0: detected capacity change from 0 to 32768 [ 115.569289][ T6414] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 115.706283][ T6414] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 115.850461][ T6414] XFS (loop0): Ending clean mount [ 115.968762][ T6424] loop1: detected capacity change from 0 to 40427 [ 116.008812][ T6424] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 116.049414][ T6424] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 116.060487][ T786] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.094281][ T6424] F2FS-fs (loop1): invalid crc value [ 116.108203][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 116.126051][ T6424] F2FS-fs (loop1): Found nat_bits in checkpoint [ 116.251005][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 116.271207][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.316727][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.332790][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 116.343669][ T5779] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 116.368106][ T786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.403024][ T786] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.423047][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.441031][ T6424] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 116.448562][ T6424] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.457180][ T786] usb 4-1: config 0 descriptor?? [ 116.550836][ T6424] syz.1.233: attempt to access beyond end of device [ 116.550836][ T6424] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 116.811975][ T3471] kworker/u4:9: attempt to access beyond end of device [ 116.811975][ T3471] loop1: rw=1, sector=77856, nr_sectors = 8 limit=40427 [ 116.827564][ T3471] kworker/u4:9: attempt to access beyond end of device [ 116.827564][ T3471] loop1: rw=1, sector=77920, nr_sectors = 8 limit=40427 [ 116.882114][ T5775] syz-executor: attempt to access beyond end of device [ 116.882114][ T5775] loop1: rw=2051, sector=77864, nr_sectors = 56 limit=40427 [ 116.907326][ T5775] F2FS-fs (loop1): Issue discard(9733, 9733, 7) failed, ret: -5 [ 116.954801][ T786] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 116.973023][ T786] microsoft 0003:045E:07DA.0001: unsupported Resolution Multiplier 0 [ 116.987785][ T786] microsoft 0003:045E:07DA.0001: implement() called with n (152) > 32! (kworker/1:2) [ 117.135055][ T786] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 117.180425][ T786] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 117.206733][ T786] microsoft 0003:045E:07DA.0001: no inputs found [ 117.235506][ T786] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 117.273767][ T786] usb 4-1: USB disconnect, device number 3 [ 117.300487][ T6451] overlayfs: statfs failed on './file0' [ 117.316739][ T6458] loop0: detected capacity change from 0 to 512 [ 117.375213][ T6458] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 117.432819][ T6458] EXT4-fs (loop0): 1 truncate cleaned up [ 117.442496][ T6458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.537548][ T6456] fido_id[6456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 117.538307][ T6461] program syz.1.241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.686631][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.948840][ T6473] loop2: detected capacity change from 0 to 64 [ 117.955279][ T786] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.144266][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 118.152661][ T786] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.169110][ T786] usb 2-1: config 0 has no interface number 0 [ 118.188479][ T786] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.211768][ T786] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.223240][ T786] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 118.232681][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.251635][ T786] usb 2-1: config 0 descriptor?? [ 118.367520][ T6481] netlink: 'syz.3.254': attribute type 12 has an invalid length. [ 118.942552][ T786] input: HID 28bd:0094 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.0002/input/input6 [ 118.989954][ T6498] loop7: detected capacity change from 0 to 7 [ 119.010116][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.019717][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.031219][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.040519][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.055210][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.064482][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.074148][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.083419][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.099355][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.103714][ T786] uclogic 0003:28BD:0094.0002: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 119.108862][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.135059][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.144313][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.158079][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.167346][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.175344][ T5989] ldm_validate_partition_table(): Disk read failed. [ 119.190145][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.199396][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.221001][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.230341][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.238488][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.248128][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.270282][ T5989] Dev loop7: unable to read RDB block 0 [ 119.281178][ T786] usb 2-1: USB disconnect, device number 3 [ 119.309535][ T5989] loop7: unable to read partition table [ 119.319064][ T5989] loop7: partition table beyond EOD, truncated [ 119.339466][ T6498] ldm_validate_partition_table(): Disk read failed. [ 119.358154][ T6498] Dev loop7: unable to read RDB block 0 [ 119.372560][ T6498] loop7: unable to read partition table [ 119.386619][ T6498] loop7: partition table beyond EOD, truncated [ 119.397949][ T6498] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 119.495202][ T6500] fido_id[6500]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 119.649055][ T6505] loop3: detected capacity change from 0 to 512 [ 119.792258][ T6505] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.263: ea_inode with extended attributes [ 119.834941][ T6505] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.263: error while reading EA inode 11 err=-117 [ 119.843606][ T6494] loop0: detected capacity change from 0 to 32768 [ 119.875845][ T6505] EXT4-fs (loop3): 1 orphan inode deleted [ 119.910462][ T6494] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.259 (6494) [ 119.954066][ T6505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.982470][ T6494] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.020808][ T6494] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 120.033477][ T6494] BTRFS info (device loop0): using free space tree [ 120.165136][ T6494] BTRFS info (device loop0): enabling ssd optimizations [ 120.173691][ T6494] BTRFS info (device loop0): auto enabling async discard [ 120.217465][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.511972][ T6494] BTRFS error (device loop0): target device is invalid! [ 120.675829][ T5770] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.677074][ T6535] loop1: detected capacity change from 0 to 2048 [ 120.775777][ T6535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.869315][ T6535] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 120.992585][ T6544] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 121.032515][ T6535] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 121.047557][ T6544] EXT4-fs (loop1): This should not happen!! Data will be lost [ 121.047557][ T6544] [ 121.058405][ T6544] EXT4-fs (loop1): Total free blocks count 0 [ 121.090791][ T6535] EXT4-fs (loop1): This should not happen!! Data will be lost [ 121.090791][ T6535] [ 121.104456][ T6544] EXT4-fs (loop1): Free/Dirty block details [ 121.110792][ T6544] EXT4-fs (loop1): free_blocks=2415919504 [ 121.116716][ T6544] EXT4-fs (loop1): dirty_blocks=32 [ 121.133953][ T6546] loop2: detected capacity change from 0 to 64 [ 121.146770][ T6544] EXT4-fs (loop1): Block reservation details [ 121.155580][ T5989] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (5989) [ 121.218170][ T6546] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 121.320316][ T786] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.540445][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 121.548860][ T786] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.570414][ T786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.634271][ T786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.673769][ T786] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.743547][ T786] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.778884][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.027048][ T6557] loop2: detected capacity change from 0 to 256 [ 122.040371][ T786] usb 1-1: GET_CAPABILITIES returned 0 [ 122.051780][ T6557] exfat: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 122.060082][ T786] usbtmc 1-1:16.0: can't read capabilities [ 122.289640][ T786] usb 1-1: USB disconnect, device number 3 [ 122.360386][ T6550] loop3: detected capacity change from 0 to 32768 [ 122.465793][ T6550] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.666480][ T5772] syz-executor (5772) used greatest stack depth: 19720 bytes left [ 122.704883][ T6550] XFS (loop3): Ending clean mount [ 122.787322][ T3471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.831155][ T6575] netlink: 4444 bytes leftover after parsing attributes in process `syz.1.279'. [ 123.012257][ T5769] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.044457][ T3471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.264543][ T3471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.538787][ T3471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.133019][ T6598] loop0: detected capacity change from 0 to 128 [ 124.189260][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.206327][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.224292][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.234964][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.248727][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 124.256455][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.303025][ T6598] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.349227][ T6598] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.605425][ T6611] loop3: detected capacity change from 0 to 8 [ 124.753807][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.228509][ T6629] sctp: [Deprecated]: syz.3.297 (pid 6629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.228509][ T6629] Use struct sctp_sack_info instead [ 125.492969][ T6636] loop1: detected capacity change from 0 to 1024 [ 125.563461][ T6636] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.603655][ T6638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.302'. [ 125.634645][ T6636] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 125.652346][ T6636] EXT4-fs (loop1): orphan cleanup on readonly fs [ 125.709456][ T6636] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 125.751806][ T6636] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 125.843619][ T6636] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 125.922024][ T6636] EXT4-fs (loop1): 1 truncate cleaned up [ 125.968945][ T6636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.248445][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.268722][ T6602] chnl_net:caif_netlink_parms(): no params data found [ 126.321459][ T51] Bluetooth: hci3: command tx timeout [ 127.187643][ T6645] loop3: detected capacity change from 0 to 32768 [ 127.354450][ T6645] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.569527][ T6645] XFS (loop3): Ending clean mount [ 127.584039][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.609886][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.636232][ T6602] bridge_slave_0: entered allmulticast mode [ 127.660500][ T5759] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.681807][ T6602] bridge_slave_0: entered promiscuous mode [ 127.713005][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.730610][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.742758][ T5769] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.751222][ T6602] bridge_slave_1: entered allmulticast mode [ 127.759635][ T6602] bridge_slave_1: entered promiscuous mode [ 127.853410][ T5759] usb 2-1: Using ep0 maxpacket: 16 [ 127.873880][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 127.893065][ T6602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.904779][ T5759] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 127.917107][ T6602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.940344][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.948505][ T5759] usb 2-1: Product: syz [ 127.978624][ T5759] usb 2-1: Manufacturer: syz [ 127.984058][ T5759] usb 2-1: SerialNumber: syz [ 128.002204][ T5759] usb 2-1: config 0 descriptor?? [ 128.012734][ T5759] hub 2-1:0.0: bad descriptor, ignoring hub [ 128.039891][ T3471] hsr_slave_0: left promiscuous mode [ 128.056228][ T5759] hub: probe of 2-1:0.0 failed with error -5 [ 128.073598][ T5759] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 128.088296][ T3471] hsr_slave_1: left promiscuous mode [ 128.120422][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.150050][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.181717][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.189186][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.251790][ T3471] bridge_slave_1: left allmulticast mode [ 128.257532][ T3471] bridge_slave_1: left promiscuous mode [ 128.276947][ T3471] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.306759][ T6564] usb 2-1: USB disconnect, device number 4 [ 128.341051][ T3471] bridge_slave_0: left allmulticast mode [ 128.346884][ T3471] bridge_slave_0: left promiscuous mode [ 128.354461][ T3471] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.396030][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.400940][ T51] Bluetooth: hci3: command tx timeout [ 128.542040][ T3471] veth1_macvtap: left promiscuous mode [ 128.549812][ T3471] veth0_macvtap: left promiscuous mode [ 128.564186][ T3471] veth1_vlan: left promiscuous mode [ 128.584333][ T3471] veth0_vlan: left promiscuous mode [ 129.293244][ T6696] loop1: detected capacity change from 0 to 256 [ 129.313047][ T6696] exfat: Deprecated parameter 'utf8' [ 129.356036][ T6696] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 129.917562][ T3471] team0 (unregistering): Port device team_slave_1 removed [ 129.972749][ T3471] team0 (unregistering): Port device team_slave_0 removed [ 130.027550][ T3471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.095912][ T3471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.480407][ T51] Bluetooth: hci3: command tx timeout [ 130.519971][ T3471] bond0 (unregistering): Released all slaves [ 130.738451][ T6602] team0: Port device team_slave_0 added [ 130.786306][ T6602] team0: Port device team_slave_1 added [ 130.899030][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.961949][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.049599][ T6602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.085581][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.110474][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.170416][ T6602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.174572][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.400026][ T6602] hsr_slave_0: entered promiscuous mode [ 131.413578][ T6602] hsr_slave_1: entered promiscuous mode [ 131.426820][ T9] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 131.437094][ T6602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.453712][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 131.470889][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.477618][ T6602] Cannot create hsr debugfs directory [ 131.487337][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 131.500339][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 131.530839][ T9] usb 1-1: Product: syz [ 131.535112][ T9] usb 1-1: Manufacturer: syz [ 131.546008][ T9] usb 1-1: SerialNumber: syz [ 131.574943][ T9] usb 1-1: config 0 descriptor?? [ 131.595152][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 131.620869][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 131.663222][ T9] usb 1-1: selecting invalid altsetting 0 [ 131.878288][ T9] usb 1-1: USB disconnect, device number 4 [ 132.113179][ T6085] udevd[6085]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.312732][ T6602] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 132.372655][ T6602] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 132.405562][ T6602] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 132.468456][ T6602] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 132.555732][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 132.561306][ T51] Bluetooth: hci3: command tx timeout [ 132.702706][ T6602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.758440][ T9] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 132.777224][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 132.791467][ T6602] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.820645][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 132.858696][ T9] usb 1-1: string descriptor 0 read error: -22 [ 132.862515][ T6752] netlink: 'syz.1.331': attribute type 3 has an invalid length. [ 132.873953][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 132.873985][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 132.896089][ T9] usb 1-1: config 0 descriptor?? [ 132.910313][ T6752] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.331'. [ 132.928538][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 132.951211][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.958660][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.980349][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 132.993863][ T9] usb 1-1: selecting invalid altsetting 0 [ 133.007454][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.014696][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.134187][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.141935][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.157824][ T6755] loop3: detected capacity change from 0 to 4096 [ 133.164374][ T9] usb 1-1: USB disconnect, device number 5 [ 133.405465][ T6764] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.628022][ T28] audit: type=1326 audit(1770162094.514:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84239aeb9 code=0x7ffc0000 [ 133.730457][ T28] audit: type=1326 audit(1770162094.514:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84239aeb9 code=0x7ffc0000 [ 133.795798][ T28] audit: type=1326 audit(1770162094.544:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84239aeb9 code=0x7ffc0000 [ 133.851279][ T28] audit: type=1326 audit(1770162094.544:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84239aeb9 code=0x7ffc0000 [ 133.933379][ T28] audit: type=1326 audit(1770162094.544:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff84239aeb9 code=0x7ffc0000 [ 133.998695][ T6777] loop1: detected capacity change from 0 to 1024 [ 134.016995][ T28] audit: type=1326 audit(1770162094.544:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84239aeb9 code=0x7ffc0000 [ 134.044982][ T6602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.070776][ T28] audit: type=1326 audit(1770162094.544:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84239aeb9 code=0x7ffc0000 [ 134.170316][ T28] audit: type=1326 audit(1770162094.544:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84239aeb9 code=0x7ffc0000 [ 134.241020][ T28] audit: type=1326 audit(1770162094.554:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ff84239aeb9 code=0x7ffc0000 [ 134.291006][ T28] audit: type=1326 audit(1770162094.554:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84239aeb9 code=0x7ffc0000 [ 134.446597][ T42] hfsplus: b-tree write err: -5, ino 8 [ 134.688249][ T6797] loop3: detected capacity change from 0 to 512 [ 134.738785][ T6797] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 134.773202][ T6797] EXT4-fs (loop3): orphan cleanup on readonly fs [ 134.792349][ T6797] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.340: Block bitmap for bg 0 marked uninitialized [ 134.947466][ T6797] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 134.981429][ T6797] EXT4-fs (loop3): 1 orphan inode deleted [ 135.007917][ T6797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 135.154705][ T6797] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 135.220916][ T6797] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 135.226340][ T6811] block nbd0: Unsupported socket: should be TCP or UNIX. [ 135.265455][ T6602] veth0_vlan: entered promiscuous mode [ 135.289154][ T6797] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.340: Block bitmap for bg 0 marked uninitialized [ 135.351289][ T6602] veth1_vlan: entered promiscuous mode [ 135.455917][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.474683][ T6602] veth0_macvtap: entered promiscuous mode [ 135.499843][ T6602] veth1_macvtap: entered promiscuous mode [ 135.592686][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.643364][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.670356][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.694569][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.710840][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.730346][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.759630][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.812965][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.865074][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.905475][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.938880][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.967185][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.979761][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.002360][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.033242][ T6602] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.060330][ T6602] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.087700][ T6602] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.110627][ T6602] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.299454][ T6840] macvlan0: entered allmulticast mode [ 136.323551][ T6840] veth1_vlan: entered allmulticast mode [ 136.440949][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.490790][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.605720][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.626446][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.150264][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.159228][ T6869] ax25_connect(): syz.1.361 uses autobind, please contact jreuter@yaina.de [ 137.371467][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 137.389186][ T8] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 137.408075][ T8] usb 1-1: config 0 has no interface number 0 [ 137.422799][ T8] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 137.464321][ T8] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 137.496273][ T8] usb 1-1: config 0 interface 126 has no altsetting 0 [ 137.538649][ T8] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 137.570305][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.578373][ T8] usb 1-1: Product: syz [ 137.587478][ T8] usb 1-1: Manufacturer: syz [ 137.593208][ T8] usb 1-1: SerialNumber: syz [ 137.601366][ T8] usb 1-1: config 0 descriptor?? [ 137.607324][ T6860] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 137.662639][ T6860] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 137.912527][ T6894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.369'. [ 138.149701][ T8] ir_usb 1-1:0.126: IR Dongle converter detected [ 138.230908][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 138.347036][ T8] usb 1-1: IRDA class descriptor not found, device not bound [ 138.459725][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 138.504265][ T6915] program syz.4.376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.607033][ T23] usb 1-1: USB disconnect, device number 6 [ 139.137125][ T6935] loop6: detected capacity change from 0 to 7 [ 139.201058][ T6935] Dev loop6: unable to read RDB block 7 [ 139.242995][ T6935] loop6: unable to read partition table [ 139.248956][ T6935] loop6: partition table beyond EOD, truncated [ 139.302055][ T6935] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 139.968046][ T6960] loop1: detected capacity change from 0 to 2048 [ 140.033164][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 140.053315][ T6960] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 140.120571][ T6960] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 140.128307][ T6960] UDF-fs: Scanning with blocksize 512 failed [ 140.205724][ T6973] program syz.4.395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.274346][ T6960] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.073543][ T7002] loop0: detected capacity change from 0 to 1024 [ 141.102563][ T7002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.287498][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.407'. [ 141.296903][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.407'. [ 141.406298][ T7016] loop1: detected capacity change from 0 to 128 [ 141.410764][ T27] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 141.604949][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.616633][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.656418][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.681201][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.712217][ T27] usb 1-1: Product: syz [ 141.716453][ T27] usb 1-1: Manufacturer: syz [ 141.733897][ T27] usb 1-1: SerialNumber: syz [ 142.080531][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 142.081020][ T5779] Bluetooth: hci4: command 0x1003 tx timeout [ 142.401257][ T27] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 142.456949][ T27] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 142.512310][ T27] usb 1-1: USB disconnect, device number 7 [ 142.539454][ T7044] process 'syz.1.419' launched './file1' with NULL argv: empty string added [ 142.569402][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.842809][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.422'. [ 143.040621][ T786] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 143.240326][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 143.247863][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.275029][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.302625][ T786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.378334][ T786] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.408678][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.448402][ T786] usb 4-1: config 0 descriptor?? [ 143.534322][ T7076] loop0: detected capacity change from 0 to 128 [ 143.556260][ T7076] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.886616][ T7052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.908602][ T7052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.954952][ T786] microsoft 0003:045E:07DA.0003: unknown main item tag 0x2 [ 143.971396][ T786] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 143.979757][ T786] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 143.993646][ T786] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 144.002511][ T786] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 144.009918][ T786] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 144.021726][ T786] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 144.029192][ T786] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 144.037256][ T786] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 144.056918][ T786] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input7 [ 144.080010][ T786] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 144.248010][ T5759] usb 4-1: USB disconnect, device number 4 [ 144.385016][ T7088] loop1: detected capacity change from 0 to 256 [ 144.410921][ T7088] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.454241][ T7088] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 144.501010][ T7088] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 144.523150][ T7090] loop4: detected capacity change from 0 to 256 [ 144.706224][ T7085] loop0: detected capacity change from 0 to 32768 [ 145.389994][ T7103] netlink: 52 bytes leftover after parsing attributes in process `syz.1.440'. [ 145.407552][ T7106] loop3: detected capacity change from 0 to 512 [ 145.428586][ T7106] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.440992][ T7106] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.482886][ T7106] EXT4-fs error (device loop3): __ext4_iget:5071: inode #15: block 1803188595: comm syz.3.442: invalid block [ 145.550877][ T7106] EXT4-fs (loop3): Remounting filesystem read-only [ 145.584742][ T7106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.755104][ T7117] loop4: detected capacity change from 0 to 4096 [ 145.774406][ T7117] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 145.787932][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.085466][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 146.085483][ T28] audit: type=1800 audit(1770162106.974:23): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.445" name="file2" dev="loop4" ino=33 res=0 errno=0 [ 146.158680][ T7125] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 146.190870][ T7125] overlayfs: conflicting lowerdir path [ 146.410297][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.433028][ T7133] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 146.555554][ T7139] IPVS: nq: FWM 3 0x00000003 - no destination available [ 146.556888][ T8] IPVS: starting estimator thread 0... [ 146.600259][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 146.608899][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.625248][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.650259][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.660547][ T7140] IPVS: using max 20 ests per chain, 48000 per kthread [ 146.673045][ T23] usb 2-1: config 0 descriptor?? [ 146.711653][ T7142] Bluetooth: MGMT ver 1.22 [ 146.770755][ T5759] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.918705][ T23] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 146.980275][ T5759] usb 1-1: Using ep0 maxpacket: 32 [ 146.994729][ T5759] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 147.008524][ T5759] usb 1-1: config 0 has no interface number 0 [ 147.043901][ T5759] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 147.053086][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.070255][ T5759] usb 1-1: Product: syz [ 147.074517][ T5759] usb 1-1: Manufacturer: syz [ 147.079150][ T5759] usb 1-1: SerialNumber: syz [ 147.102551][ T5759] usb 1-1: config 0 descriptor?? [ 147.111621][ T5759] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 147.160503][ T23] usb 2-1: USB disconnect, device number 5 [ 147.351260][ T5759] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 147.377668][ T5759] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 147.821874][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 147.843420][ T5759] usb 1-1: USB disconnect, device number 8 [ 147.881790][ T5759] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 147.905052][ T5759] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 147.931586][ T5759] quatech2 1-1:0.51: device disconnected [ 148.011439][ T7162] loop3: detected capacity change from 0 to 128 [ 148.028596][ T7158] loop1: detected capacity change from 0 to 512 [ 148.073491][ T7158] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.126245][ T7158] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 148.162712][ T7158] EXT4-fs (loop1): 1 truncate cleaned up [ 148.169747][ T7158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.324608][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.510435][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.710290][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 148.735925][ T9] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 148.757047][ T9] usb 5-1: config 0 has no interface number 0 [ 148.782084][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=2c.30 [ 148.820256][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.842908][ T9] usb 5-1: Product: syz [ 148.847150][ T9] usb 5-1: Manufacturer: syz [ 148.880275][ T9] usb 5-1: SerialNumber: syz [ 148.894605][ T9] usb 5-1: config 0 descriptor?? [ 148.925415][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 149.392270][ T7168] loop3: detected capacity change from 0 to 32768 [ 149.457686][ T7168] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 149.559876][ T9] gspca_stv06xx: vv6410 sensor detected [ 149.583105][ T7168] XFS (loop3): Ending clean mount [ 149.622196][ T7168] XFS (loop3): Quotacheck needed: Please wait. [ 149.630467][ T7175] loop1: detected capacity change from 0 to 32768 [ 149.751784][ T7175] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 149.800758][ T7168] XFS (loop3): Quotacheck: Done. [ 149.877802][ T9] STV06xx: probe of 5-1:0.65 failed with error -71 [ 149.905198][ T9] usb 5-1: USB disconnect, device number 2 [ 149.916447][ T7175] XFS (loop1): Ending clean mount [ 149.948409][ T7175] XFS (loop1): Quotacheck needed: Please wait. [ 150.003273][ T5769] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 150.044411][ T7175] XFS (loop1): Quotacheck: Done. [ 150.225643][ T5775] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 151.620173][ C1] sched: RT throttling activated [ 151.650338][ T5759] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 151.785549][ T7227] loop3: detected capacity change from 0 to 2048 [ 151.842042][ T5759] usb 2-1: Using ep0 maxpacket: 16 [ 151.868184][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.905592][ T7230] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.939862][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.984296][ T5759] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 152.078576][ T5759] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 152.132471][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.198684][ T5759] usb 2-1: config 0 descriptor?? [ 152.746697][ T5759] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 152.888997][ T7222] random: crng reseeded on system resumption [ 153.051186][ T7209] loop0: detected capacity change from 0 to 262144 [ 153.110993][ T7209] F2FS-fs (loop0): invalid crc value [ 153.116773][ T5759] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 153.159013][ T7209] F2FS-fs (loop0): Found nat_bits in checkpoint [ 153.167943][ T5759] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 153.219861][ T7209] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 153.404814][ T7209] F2FS-fs (loop0): recover xattr in inode (7), error(0) [ 153.947251][ T8] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 153.947489][ T786] usb 2-1: USB disconnect, device number 6 [ 153.986963][ T8] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 154.034392][ T8] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 154.074258][ T8] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 154.177338][ T7258] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.877228][ T7276] loop1: detected capacity change from 0 to 128 [ 154.922153][ T7276] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.960844][ T7276] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.125376][ T7276] fscrypt (loop1, inode 12): Unsupported encryption flags (0x29) [ 155.273865][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.744255][ T7303] loop4: detected capacity change from 0 to 64 [ 155.963084][ T7306] loop1: detected capacity change from 0 to 64 [ 156.035093][ T7306] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 156.196307][ T7313] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 156.972480][ T7331] loop0: detected capacity change from 0 to 4096 [ 157.010969][ T7331] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 157.462070][ T11] ntfs3: loop0: ino=1e, ntfs3_write_inode failed, -22. [ 157.535402][ T7348] loop1: detected capacity change from 0 to 1024 [ 157.669206][ T7348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 157.728749][ T7348] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.884953][ T7348] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 157.996405][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 158.042211][ T7343] loop3: detected capacity change from 0 to 32768 [ 158.066691][ T7343] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.515 (7343) [ 158.178413][ T7343] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.213056][ T7343] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 158.258480][ T7343] BTRFS info (device loop3): using free space tree [ 158.465352][ T7343] BTRFS info (device loop3): enabling ssd optimizations [ 158.475656][ T7343] BTRFS info (device loop3): auto enabling async discard [ 158.861236][ T7398] loop0: detected capacity change from 0 to 8 [ 159.065055][ T5769] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.377494][ T7407] loop0: detected capacity change from 0 to 512 [ 159.434902][ T7407] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.529: corrupted in-inode xattr: invalid ea_ino [ 159.499567][ T7407] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.529: couldn't read orphan inode 15 (err -117) [ 159.551978][ T7407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.932450][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.447672][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 160.999921][ T7453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.542'. [ 161.528924][ T786] kernel read not supported for file /input/event1 (pid: 786 comm: kworker/1:2) [ 161.567941][ T7442] loop3: detected capacity change from 0 to 32768 [ 161.679015][ T7442] [ 161.679015][ T7442] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.679015][ T7442] [ 161.854967][ T7477] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 161.862156][ T5759] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 161.870636][ T7477] pim6reg1: linktype set to 270 [ 161.882154][ T7442] ERROR: (device loop3): dbReAlloc: the block is outside the filesystem [ 161.882154][ T7442] [ 161.899185][ T7442] ERROR: (device loop3): remounting filesystem as read-only [ 161.906670][ T7442] jfs_mkdir: dtInsert returned -EIO [ 161.912202][ T7442] ERROR: (device loop3): jfs_mkdir: [ 161.912202][ T7442] [ 162.070380][ T5759] usb 5-1: Using ep0 maxpacket: 16 [ 162.105820][ T5759] usb 5-1: config 0 has no interfaces? [ 162.111677][ T5759] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 162.156644][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.189965][ T5759] usb 5-1: config 0 descriptor?? [ 162.709746][ T8] usb 5-1: USB disconnect, device number 3 [ 162.865654][ T23] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 163.063347][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.095690][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.122115][ T23] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 163.140208][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.181088][ T23] usb 1-1: config 0 descriptor?? [ 163.632345][ T23] uclogic 0003:28BD:0075.0005: interface is invalid, ignoring [ 163.750866][ T7519] loop3: detected capacity change from 0 to 2048 [ 163.789188][ T7519] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.926410][ T786] usb 1-1: USB disconnect, device number 9 [ 163.940564][ T7499] loop1: detected capacity change from 0 to 40427 [ 163.975779][ T7499] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 164.023113][ T7499] F2FS-fs (loop1): Image doesn't support compression [ 164.068153][ T7499] F2FS-fs (loop1): Image doesn't support compression [ 164.083484][ T7527] UDF-fs: bad mount option "#! [ 164.083484][ T7527] s" or missing value [ 164.125634][ T7499] F2FS-fs (loop1): invalid crc value [ 164.179063][ T7499] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.377143][ T7499] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 164.713806][ T5775] syz-executor: attempt to access beyond end of device [ 164.713806][ T5775] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 164.787798][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 164.800027][ T7547] loop3: detected capacity change from 0 to 1024 [ 164.841469][ T7547] EXT4-fs: Ignoring removed bh option [ 164.919353][ T7545] loop4: detected capacity change from 0 to 4096 [ 164.931750][ T7547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.107310][ T7545] ntfs: volume version 3.1. [ 165.292704][ T7547] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.562: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 165.330541][ T7545] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 165.390328][ T7547] EXT4-fs (loop3): Remounting filesystem read-only [ 166.261207][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.475306][ T3471] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.613197][ T3471] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.686679][ T3471] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.876521][ T3471] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.641872][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.654154][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.672705][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.700606][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.736696][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 167.746032][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.904591][ T7585] loop1: detected capacity change from 0 to 32768 [ 167.927957][ T7585] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.576 (7585) [ 167.986448][ T7585] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.010368][ T7585] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 168.021549][ T7585] BTRFS info (device loop1): using free space tree [ 168.291726][ T7585] BTRFS info (device loop1): enabling ssd optimizations [ 168.298880][ T7585] BTRFS info (device loop1): auto enabling async discard [ 168.666034][ T5775] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.447563][ T7600] chnl_net:caif_netlink_parms(): no params data found [ 169.840996][ T51] Bluetooth: hci1: command tx timeout [ 170.146109][ T3471] hsr_slave_0: left promiscuous mode [ 170.190486][ T3471] hsr_slave_1: left promiscuous mode [ 170.251363][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.270426][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.291678][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 170.312491][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.319983][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.385868][ T8] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.396522][ T3471] bridge_slave_1: left allmulticast mode [ 170.420081][ T3471] bridge_slave_1: left promiscuous mode [ 170.450614][ T3471] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.476740][ T3471] bridge_slave_0: left allmulticast mode [ 170.500279][ T3471] bridge_slave_0: left promiscuous mode [ 170.516254][ T3471] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.299911][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 171.496234][ T3471] veth1_macvtap: left promiscuous mode [ 171.502248][ T3471] veth0_macvtap: left promiscuous mode [ 171.509775][ T3471] veth1_vlan: left promiscuous mode [ 171.516047][ T3471] veth0_vlan: left promiscuous mode [ 171.929833][ T51] Bluetooth: hci1: command tx timeout [ 172.370052][ T3471] team0 (unregistering): Port device team_slave_1 removed [ 172.433723][ T3471] team0 (unregistering): Port device team_slave_0 removed [ 172.489444][ T3471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.548319][ T3471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.013269][ T3471] bond0 (unregistering): Released all slaves [ 173.160962][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.168180][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.190807][ T7600] bridge_slave_0: entered allmulticast mode [ 173.205286][ T7600] bridge_slave_0: entered promiscuous mode [ 173.230907][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.265799][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.298106][ T7600] bridge_slave_1: entered allmulticast mode [ 173.328573][ T7600] bridge_slave_1: entered promiscuous mode [ 173.435473][ T7600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.479348][ T7600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.683042][ T7600] team0: Port device team_slave_0 added [ 173.694823][ T7600] team0: Port device team_slave_1 added [ 173.749121][ T7600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.766969][ T7600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.825817][ T7600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.844828][ T7600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.852358][ T7600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.886064][ T7600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.980271][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 174.018744][ T51] Bluetooth: hci1: command tx timeout [ 174.074416][ T7600] hsr_slave_0: entered promiscuous mode [ 174.132206][ T7600] hsr_slave_1: entered promiscuous mode [ 174.150242][ T7600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.157875][ T7600] Cannot create hsr debugfs directory [ 174.190328][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 174.202783][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 174.238019][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.291858][ T9] usb 2-1: config 0 descriptor?? [ 174.515521][ T7697] loop0: detected capacity change from 0 to 32768 [ 174.560600][ T7697] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.744433][ T7721] loop4: detected capacity change from 0 to 4096 [ 174.773724][ T9] logitech 0003:046D:C294.0007: unknown main item tag 0xe [ 174.802964][ T9] logitech 0003:046D:C294.0007: item fetching failed at offset 3/5 [ 174.812183][ T9] logitech 0003:046D:C294.0007: parse failed [ 174.818546][ T9] logitech: probe of 0003:046D:C294.0007 failed with error -22 [ 174.843341][ T7697] XFS (loop0): Ending clean mount [ 174.998043][ T9] usb 2-1: USB disconnect, device number 7 [ 175.138894][ T5770] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.823264][ T7742] loop1: detected capacity change from 0 to 16 [ 175.855729][ T7742] erofs: (device loop1): mounted with root inode @ nid 36. [ 175.888318][ T7600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.896146][ T7600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.914493][ T7600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.927846][ T7600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.090572][ T51] Bluetooth: hci1: command tx timeout [ 176.152087][ T7755] program syz.0.614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.367000][ T7600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.415792][ T7600] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.456992][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.465783][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.536277][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.543506][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.006245][ T7772] loop1: detected capacity change from 0 to 32768 [ 177.112614][ T7772] JBD2: Ignoring recovery information on journal [ 177.157020][ T7777] loop4: detected capacity change from 0 to 2048 [ 177.181296][ T7777] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.191189][ T7772] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 177.369747][ T7772] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 177.390427][ T7772] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 177.403662][ T7772] OCFS2: File system is now read-only. [ 177.409221][ T7772] (syz.1.621,7772,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 177.417879][ T7772] (syz.1.621,7772,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 177.425936][ T7772] (syz.1.621,7772,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 177.434399][ T7772] (syz.1.621,7772,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 177.443094][ T7772] (syz.1.621,7772,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 177.451258][ T7772] (syz.1.621,7772,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 177.459390][ T7772] (syz.1.621,7772,0):ocfs2_block_group_alloc_contig:433 ERROR: status = -30 [ 177.468283][ T7772] (syz.1.621,7772,0):ocfs2_block_group_alloc:705 ERROR: status = -30 [ 177.476759][ T7772] (syz.1.621,7772,0):ocfs2_block_group_alloc:758 ERROR: status = -30 [ 177.486848][ T7772] (syz.1.621,7772,0):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30 [ 177.495435][ T7772] (syz.1.621,7772,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 177.505675][ T7772] (syz.1.621,7772,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 177.514821][ T7772] (syz.1.621,7772,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 177.524977][ T7772] (syz.1.621,7772,0):ocfs2_expand_inline_dir:2841 ERROR: status = -30 [ 177.533318][ T7772] (syz.1.621,7772,0):ocfs2_extend_dir:3205 ERROR: status = -30 [ 177.541563][ T7772] (syz.1.621,7772,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 177.550269][ T7772] (syz.1.621,7772,0):ocfs2_mknod:298 ERROR: status = -30 [ 177.557376][ T7772] (syz.1.621,7772,0):ocfs2_mknod:502 ERROR: status = -30 [ 177.564706][ T7772] (syz.1.621,7772,0):ocfs2_create:676 ERROR: status = -30 [ 177.606287][ T7772] syz.1.621 (7772) used greatest stack depth: 17712 bytes left [ 177.611003][ T28] audit: type=1800 audit(1770162138.474:24): pid=7777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.622" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 177.947922][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 177.980729][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.626'. [ 178.113840][ T7600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.297516][ T7600] veth0_vlan: entered promiscuous mode [ 178.344908][ T7600] veth1_vlan: entered promiscuous mode [ 178.446788][ T7600] veth0_macvtap: entered promiscuous mode [ 178.509365][ T7600] veth1_macvtap: entered promiscuous mode [ 178.578367][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.621537][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.640999][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.675098][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.710581][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.730196][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.756067][ T7600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.798893][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.830370][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.873698][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.889666][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.900395][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.911511][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.924508][ T7600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.943147][ T7817] loop1: detected capacity change from 0 to 64 [ 178.964492][ T7600] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.998374][ T7600] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.030393][ T7600] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.039202][ T7600] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.135489][ T7822] netlink: 332 bytes leftover after parsing attributes in process `syz.4.632'. [ 179.359202][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.397059][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.456253][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.485937][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.794042][ T7837] loop0: detected capacity change from 0 to 128 [ 179.926851][ T7837] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.975409][ T7846] loop4: detected capacity change from 0 to 128 [ 179.994773][ T7837] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.117905][ T7846] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.148248][ T7846] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.407898][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.434643][ T6602] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.226643][ T7883] loop0: detected capacity change from 0 to 4096 [ 181.245235][ T7883] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 181.254534][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 181.337312][ T7883] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 181.453624][ T27] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 181.473161][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.497780][ T27] usb 4-1: config 0 descriptor?? [ 181.985457][ T27] hackrf 4-1:0.0: Board ID: 00 [ 182.010751][ T27] hackrf 4-1:0.0: Firmware version: [ 182.070787][ T27] hackrf 4-1:0.0: Registered as swradio24 [ 182.076717][ T27] videodev: could not get a free minor [ 182.102479][ T27] hackrf 4-1:0.0: Failed to register as video device (-23) [ 182.126840][ T27] hackrf: probe of 4-1:0.0 failed with error -23 [ 182.305786][ T27] usb 4-1: USB disconnect, device number 5 [ 182.375620][ T7916] program syz.0.662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.905132][ T7935] loop0: detected capacity change from 0 to 32768 [ 183.940501][ T7935] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.668 (7935) [ 183.999179][ T7935] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.043441][ T7935] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 184.086832][ T7935] BTRFS info (device loop0): turning on sync discard [ 184.110729][ T7935] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 184.156897][ T7935] BTRFS info (device loop0): use zstd compression, level 3 [ 184.170652][ T7935] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 184.197472][ T7935] BTRFS info (device loop0): trying to use backup root at mount time [ 184.210526][ T7935] BTRFS info (device loop0): enabling auto defrag [ 184.226031][ T7935] BTRFS info (device loop0): using free space tree [ 184.269347][ T7964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.283795][ T7964] bond0: (slave bond1): Enslaving as an active interface with an up link [ 184.297668][ T3462] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 184.319545][ T7935] BTRFS error (device loop0): failed to load root extent [ 184.334879][ T7935] BTRFS warning (device loop0): try to load backup roots slot 1 [ 184.351644][ T3471] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 184.402108][ T7935] BTRFS warning (device loop0): couldn't read tree root [ 184.415110][ T7935] BTRFS warning (device loop0): try to load backup roots slot 2 [ 184.443891][ T3471] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 184.485075][ T7935] BTRFS warning (device loop0): couldn't read tree root [ 184.515723][ T7935] BTRFS warning (device loop0): try to load backup roots slot 3 [ 184.561377][ T7935] BTRFS info (device loop0): enabling ssd optimizations [ 184.579419][ T7935] BTRFS info (device loop0): rebuilding free space tree [ 184.656836][ T7935] BTRFS info (device loop0): checking UUID tree [ 185.170438][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 185.356233][ T8002] nbd0: detected capacity change from 0 to 63 [ 185.378270][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.390116][ T51] block nbd0: Receive control failed (result -104) [ 185.420311][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.430333][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.452340][ T27] usb 2-1: New USB device found, idVendor=0463, idProduct=ffff, bcdDevice= 0.00 [ 185.461971][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.478349][ T27] usb 2-1: config 0 descriptor?? [ 185.504868][ T5770] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.913965][ T27] hid-generic 0003:0463:FFFF.0008: unknown main item tag 0x0 [ 185.948465][ T27] hid-generic 0003:0463:FFFF.0008: unknown main item tag 0x0 [ 185.956441][ T27] hid-generic 0003:0463:FFFF.0008: unknown main item tag 0x0 [ 185.968875][ T27] hid-generic 0003:0463:FFFF.0008: unknown main item tag 0x0 [ 185.977604][ T27] hid-generic 0003:0463:FFFF.0008: unknown main item tag 0x0 [ 185.998939][ T27] hid-generic 0003:0463:FFFF.0008: unknown main item tag 0x0 [ 186.009040][ T27] hid-generic 0003:0463:FFFF.0008: unknown main item tag 0x0 [ 186.027563][ T27] hid-generic 0003:0463:FFFF.0008: unknown main item tag 0x0 [ 186.039376][ T27] hid-generic 0003:0463:FFFF.0008: unknown main item tag 0x0 [ 186.047916][ T27] hid-generic 0003:0463:FFFF.0008: unknown main item tag 0x0 [ 186.068856][ T27] hid-generic 0003:0463:FFFF.0008: unknown main item tag 0x0 [ 186.076479][ T27] hid-generic 0003:0463:FFFF.0008: unknown main item tag 0x0 [ 186.084216][ T27] hid-generic 0003:0463:FFFF.0008: unknown main item tag 0x0 [ 186.101740][ T27] hid-generic 0003:0463:FFFF.0008: unknown main item tag 0x0 [ 186.109194][ T27] hid-generic 0003:0463:FFFF.0008: unknown main item tag 0x0 [ 186.124968][ T5759] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 186.156464][ T27] hid-generic 0003:0463:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 0463:ffff] on usb-dummy_hcd.1-1/input0 [ 186.213011][ T27] usb 2-1: USB disconnect, device number 8 [ 186.323159][ T8016] fido_id[8016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 186.341068][ T5759] usb 4-1: Using ep0 maxpacket: 16 [ 186.371595][ T5759] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.390545][ T5759] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 186.417681][ T5759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.444205][ T5759] usb 4-1: config 0 descriptor?? [ 186.889480][ T5759] hid (null): unknown global tag 0xd [ 186.924240][ T5759] hid (null): unknown global tag 0xe [ 186.978708][ T8039] loop4: detected capacity change from 0 to 512 [ 187.064461][ T8039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.078980][ T8039] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.125843][ T5759] usb 4-1: USB disconnect, device number 6 [ 187.132875][ T28] audit: type=1800 audit(1770162148.024:25): pid=8039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.703" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 187.262818][ T6602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.810312][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 187.965372][ T8070] loop0: detected capacity change from 0 to 512 [ 187.979080][ T8070] EXT4-fs: Ignoring removed bh option [ 187.987042][ T8072] loop3: detected capacity change from 0 to 64 [ 188.000621][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 188.017841][ T27] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 188.029973][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.041669][ T8070] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 188.063742][ T27] usb 2-1: config 0 has no interface number 0 [ 188.105637][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 188.127716][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.141827][ T7600] VFS: Lookup of 'À.' in minix loop3 would have caused loop [ 188.150385][ T7600] VFS: Lookup of 'À.' in minix loop3 would have caused loop [ 188.158708][ T8070] EXT4-fs (loop0): 1 truncate cleaned up [ 188.169423][ T27] usb 2-1: Product: syz [ 188.187907][ T8070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.189617][ T27] usb 2-1: Manufacturer: syz [ 188.234984][ T27] usb 2-1: SerialNumber: syz [ 188.256213][ T27] usb 2-1: config 0 descriptor?? [ 188.380091][ T5770] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 188.407975][ T5770] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 188.423511][ T5770] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 188.455156][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.539664][ T27] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 188.570316][ T27] usb 2-1: No valid video chain found. [ 188.613607][ T27] usb 2-1: USB disconnect, device number 9 [ 188.656120][ T8076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.718'. [ 189.167316][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.409789][ T8094] netlink: 44 bytes leftover after parsing attributes in process `syz.1.728'. [ 189.469653][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.490351][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.505208][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.527591][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.535554][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 189.543997][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.963480][ T8092] loop4: detected capacity change from 0 to 32768 [ 190.123789][ T8092] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 190.187617][ T8092] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.263275][ T8095] chnl_net:caif_netlink_parms(): no params data found [ 190.406999][ T8092] XFS (loop4): Ending clean mount [ 190.455982][ T8092] XFS (loop4): Quotacheck needed: Please wait. [ 190.612952][ T8092] XFS (loop4): Quotacheck: Done. [ 190.793444][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.821647][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.830476][ T8095] bridge_slave_0: entered allmulticast mode [ 190.937966][ T8095] bridge_slave_0: entered promiscuous mode [ 190.969542][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.000700][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.033824][ T8095] bridge_slave_1: entered allmulticast mode [ 191.055177][ T6602] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 191.055252][ T8101] loop1: detected capacity change from 0 to 131072 [ 191.073722][ T8095] bridge_slave_1: entered promiscuous mode [ 191.079006][ T8101] F2FS-fs (loop1): invalid crc value [ 191.114769][ T8101] F2FS-fs (loop1): Found nat_bits in checkpoint [ 191.172633][ T8101] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 191.214835][ T8095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.229165][ T8095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.327916][ T8095] team0: Port device team_slave_0 added [ 191.359012][ T8095] team0: Port device team_slave_1 added [ 191.451887][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.458998][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.550395][ T8095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.586258][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.600787][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.600836][ T51] Bluetooth: hci1: command tx timeout [ 191.635678][ T8095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.836686][ T8095] hsr_slave_0: entered promiscuous mode [ 191.868598][ T8095] hsr_slave_1: entered promiscuous mode [ 191.898098][ T8095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.910191][ T8095] Cannot create hsr debugfs directory [ 192.358041][ T8135] loop0: detected capacity change from 0 to 16 [ 192.450948][ T8135] erofs: (device loop0): mounted with root inode @ nid 36. [ 192.550951][ T8135] syz.0.738: attempt to access beyond end of device [ 192.550951][ T8135] loop0: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 192.600652][ T8135] syz.0.738: attempt to access beyond end of device [ 192.600652][ T8135] loop0: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 192.668389][ T8136] syz.0.738: attempt to access beyond end of device [ 192.668389][ T8136] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 192.745872][ T8095] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 192.769776][ T8095] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 192.819307][ T8095] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 192.851579][ T5770] BUG: Bad page state in process syz-executor pfn:64ba7 [ 192.859200][ T5770] page:ffffea000192e9c0 refcount:0 mapcount:0 mapping:ffff88805dc40d20 index:0x2 pfn:0x64ba7 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 192.869605][ T5770] aops:z_erofs_cache_aops ino:0 [ 192.874587][ T5770] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 192.882635][ T5770] page_type: 0xffffffff() [ 192.887587][ T5770] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805dc40d20 [ 192.896352][ T5770] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 192.905375][ T5770] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 192.912806][ T5770] page_owner tracks the page as allocated [ 192.919367][ T5770] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8135, tgid 8134 (syz.0.738), ts 192485808263, free_ts 192188893838 [ 192.941614][ T5770] post_alloc_hook+0x1c1/0x200 [ 192.946498][ T5770] get_page_from_freelist+0x1951/0x19e0 [ 192.952186][ T5770] __alloc_pages+0x1f0/0x460 [ 192.956831][ T5770] z_erofs_do_read_page+0x2181/0x36b0 [ 192.962376][ T5770] z_erofs_readahead+0x88b/0xda0 [ 192.967361][ T5770] read_pages+0x189/0x850 [ 192.971773][ T5770] page_cache_ra_unbounded+0x68a/0x770 [ 192.977460][ T5770] force_page_cache_ra+0x2c1/0x320 [ 192.982691][ T5770] generic_fadvise+0x47e/0x780 [ 192.988125][ T5770] __x64_sys_fadvise64+0x140/0x180 [ 192.993454][ T5770] do_syscall_64+0x55/0xa0 [ 192.997950][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.004131][ T5770] page last free stack trace: [ 193.008852][ T5770] free_unref_page_prepare+0x7b2/0x8c0 [ 193.014456][ T5770] free_unref_page_list+0xbe/0x860 [ 193.019647][ T5770] release_pages+0x1f7a/0x2200 [ 193.024560][ T5770] tlb_flush_mmu+0x377/0x510 [ 193.029219][ T5770] tlb_finish_mmu+0xc3/0x1d0 [ 193.033918][ T5770] exit_mmap+0x428/0xb90 [ 193.038218][ T5770] __mmput+0x118/0x3c0 [ 193.042442][ T5770] exit_mm+0x1f2/0x2c0 [ 193.046566][ T5770] do_exit+0x8dd/0x2460 [ 193.050808][ T5770] do_group_exit+0x21b/0x2d0 [ 193.055448][ T5770] __x64_sys_exit_group+0x3f/0x40 [ 193.060694][ T5770] do_syscall_64+0x55/0xa0 [ 193.065168][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.071159][ T5770] Modules linked in: [ 193.075132][ T5770] CPU: 0 PID: 5770 Comm: syz-executor Not tainted syzkaller #0 [ 193.082721][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.092830][ T5770] Call Trace: [ 193.096142][ T5770] [ 193.099109][ T5770] dump_stack_lvl+0x18c/0x250 [ 193.103826][ T5770] ? show_regs_print_info+0x20/0x20 [ 193.109061][ T5770] ? swiotlb_print_info+0x70/0x70 [ 193.114126][ T5770] bad_page+0x14b/0x170 [ 193.118307][ T5770] free_unref_page_prepare+0x85f/0x8c0 [ 193.123817][ T5770] free_unref_page+0x32/0x2e0 [ 193.128530][ T5770] ? __folio_put+0xef/0x210 [ 193.133059][ T5770] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 193.139509][ T5770] erofs_shrink_workstation+0x11f/0x290 [ 193.145084][ T5770] ? erofs_shrinker_unregister+0x170/0x170 [ 193.150921][ T5770] ? io_schedule+0xd0/0xd0 [ 193.155458][ T5770] ? kobject_put+0x428/0x460 [ 193.160077][ T5770] erofs_shrinker_unregister+0x5d/0x170 [ 193.165651][ T5770] erofs_put_super+0x4e/0x150 [ 193.170366][ T5770] ? erofs_free_inode+0xb0/0xb0 [ 193.175249][ T5770] generic_shutdown_super+0x134/0x2b0 [ 193.180659][ T5770] kill_block_super+0x44/0x90 [ 193.185366][ T5770] erofs_kill_sb+0x4c/0x140 [ 193.189904][ T5770] deactivate_locked_super+0x97/0x100 [ 193.195307][ T5770] cleanup_mnt+0x43b/0x4d0 [ 193.199789][ T5770] task_work_run+0x1d4/0x260 [ 193.204422][ T5770] ? task_work_cancel+0x220/0x220 [ 193.209504][ T5770] ? exit_to_user_mode_loop+0x3b/0x110 [ 193.215016][ T5770] exit_to_user_mode_loop+0xe6/0x110 [ 193.220380][ T5770] exit_to_user_mode_prepare+0xee/0x180 [ 193.225978][ T5770] syscall_exit_to_user_mode+0x1a/0x50 [ 193.231473][ T5770] do_syscall_64+0x61/0xa0 [ 193.235922][ T5770] ? clear_bhb_loop+0x40/0x90 [ 193.240623][ T5770] ? clear_bhb_loop+0x40/0x90 [ 193.245326][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.251243][ T5770] RIP: 0033:0x7fefdd99c117 [ 193.255703][ T5770] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 193.275376][ T5770] RSP: 002b:00007ffe4793d798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 193.283830][ T5770] RAX: 0000000000000000 RBX: 00007fefdda0471f RCX: 00007fefdd99c117 [ 193.291841][ T5770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4793d850 [ 193.299845][ T5770] RBP: 00007ffe4793d850 R08: 00007ffe4793e850 R09: 00000000ffffffff [ 193.307848][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4793e8e0 [ 193.315887][ T5770] R13: 00007fefdda0471f R14: 000000000002f0da R15: 00007ffe4793e920 [ 193.323906][ T5770] [ 193.328429][ T5770] Disabling lock debugging due to kernel taint [ 193.335904][ T5770] BUG: Bad page state in process syz-executor pfn:65c6c [ 193.343036][ T5770] page:ffffea0001971b00 refcount:0 mapcount:0 mapping:ffff88805dc40d20 index:0x3 pfn:0x65c6c [ 193.353316][ T5770] aops:z_erofs_cache_aops ino:0 [ 193.358218][ T5770] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 193.366016][ T5770] page_type: 0xffffffff() [ 193.370496][ T5770] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805dc40d20 [ 193.379131][ T5770] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 193.388084][ T5770] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 193.395907][ T5770] page_owner tracks the page as allocated [ 193.401735][ T5770] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8135, tgid 8134 (syz.0.738), ts 192485825397, free_ts 192188878895 [ 193.423722][ T5770] post_alloc_hook+0x1c1/0x200 [ 193.428543][ T5770] get_page_from_freelist+0x1951/0x19e0 [ 193.434184][ T5770] __alloc_pages+0x1f0/0x460 [ 193.438902][ T5770] z_erofs_do_read_page+0x2181/0x36b0 [ 193.444703][ T5770] z_erofs_readahead+0x88b/0xda0 [ 193.449690][ T5770] read_pages+0x189/0x850 [ 193.454276][ T5770] page_cache_ra_unbounded+0x68a/0x770 [ 193.459769][ T5770] force_page_cache_ra+0x2c1/0x320 [ 193.464954][ T5770] generic_fadvise+0x47e/0x780 [ 193.469763][ T5770] __x64_sys_fadvise64+0x140/0x180 [ 193.474965][ T5770] do_syscall_64+0x55/0xa0 [ 193.479446][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.485424][ T5770] page last free stack trace: [ 193.490158][ T5770] free_unref_page_prepare+0x7b2/0x8c0 [ 193.495846][ T5770] free_unref_page_list+0xbe/0x860 [ 193.501854][ T5770] release_pages+0x1f7a/0x2200 [ 193.506668][ T5770] tlb_flush_mmu+0x377/0x510 [ 193.511403][ T5770] tlb_finish_mmu+0xc3/0x1d0 [ 193.516041][ T5770] exit_mmap+0x428/0xb90 [ 193.520489][ T5770] __mmput+0x118/0x3c0 [ 193.524600][ T5770] exit_mm+0x1f2/0x2c0 [ 193.528710][ T5770] do_exit+0x8dd/0x2460 [ 193.532959][ T5770] do_group_exit+0x21b/0x2d0 [ 193.537594][ T5770] __x64_sys_exit_group+0x3f/0x40 [ 193.542723][ T5770] do_syscall_64+0x55/0xa0 [ 193.547191][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.553173][ T5770] Modules linked in: [ 193.557101][ T5770] CPU: 0 PID: 5770 Comm: syz-executor Tainted: G B syzkaller #0 [ 193.566241][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.576332][ T5770] Call Trace: [ 193.579638][ T5770] [ 193.582587][ T5770] dump_stack_lvl+0x18c/0x250 [ 193.587300][ T5770] ? show_regs_print_info+0x20/0x20 [ 193.592546][ T5770] ? swiotlb_print_info+0x70/0x70 [ 193.597604][ T5770] bad_page+0x14b/0x170 [ 193.601783][ T5770] free_unref_page_prepare+0x85f/0x8c0 [ 193.607272][ T5770] free_unref_page+0x32/0x2e0 [ 193.612065][ T5770] ? __folio_put+0xef/0x210 [ 193.616589][ T5770] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 193.623030][ T5770] erofs_shrink_workstation+0x11f/0x290 [ 193.628601][ T5770] ? erofs_shrinker_unregister+0x170/0x170 [ 193.634428][ T5770] ? io_schedule+0xd0/0xd0 [ 193.638872][ T5770] ? kobject_put+0x428/0x460 [ 193.643578][ T5770] erofs_shrinker_unregister+0x5d/0x170 [ 193.649148][ T5770] erofs_put_super+0x4e/0x150 [ 193.653858][ T5770] ? erofs_free_inode+0xb0/0xb0 [ 193.658740][ T5770] generic_shutdown_super+0x134/0x2b0 [ 193.664133][ T5770] kill_block_super+0x44/0x90 [ 193.668834][ T5770] erofs_kill_sb+0x4c/0x140 [ 193.673405][ T5770] deactivate_locked_super+0x97/0x100 [ 193.678800][ T5770] cleanup_mnt+0x43b/0x4d0 [ 193.683244][ T5770] task_work_run+0x1d4/0x260 [ 193.687868][ T5770] ? task_work_cancel+0x220/0x220 [ 193.692922][ T5770] ? exit_to_user_mode_loop+0x3b/0x110 [ 193.698438][ T5770] exit_to_user_mode_loop+0xe6/0x110 [ 193.703753][ T5770] exit_to_user_mode_prepare+0xee/0x180 [ 193.709361][ T5770] syscall_exit_to_user_mode+0x1a/0x50 [ 193.714858][ T5770] do_syscall_64+0x61/0xa0 [ 193.719327][ T5770] ? clear_bhb_loop+0x40/0x90 [ 193.724040][ T5770] ? clear_bhb_loop+0x40/0x90 [ 193.728745][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.734666][ T5770] RIP: 0033:0x7fefdd99c117 [ 193.739106][ T5770] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 193.758753][ T5770] RSP: 002b:00007ffe4793d798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 193.767220][ T5770] RAX: 0000000000000000 RBX: 00007fefdda0471f RCX: 00007fefdd99c117 [ 193.775229][ T5770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4793d850 [ 193.783229][ T5770] RBP: 00007ffe4793d850 R08: 00007ffe4793e850 R09: 00000000ffffffff [ 193.791222][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4793e8e0 [ 193.799210][ T5770] R13: 00007fefdda0471f R14: 000000000002f0da R15: 00007ffe4793e920 [ 193.807212][ T5770] [ 193.810875][ T5770] BUG: Bad page state in process syz-executor pfn:65c6b [ 193.818010][ T5770] page:ffffea0001971ac0 refcount:0 mapcount:0 mapping:ffff88805dc40d20 index:0x4 pfn:0x65c6b [ 193.828235][ T5770] aops:z_erofs_cache_aops ino:0 [ 193.833244][ T5770] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 193.841225][ T5770] page_type: 0xffffffff() [ 193.845609][ T5770] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805dc40d20 [ 193.854270][ T5770] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 193.862944][ T5770] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 193.870338][ T5770] page_owner tracks the page as allocated [ 193.876081][ T5770] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8135, tgid 8134 (syz.0.738), ts 192485842552, free_ts 192188848630 [ 193.898065][ T5770] post_alloc_hook+0x1c1/0x200 [ 193.902936][ T5770] get_page_from_freelist+0x1951/0x19e0 [ 193.909044][ T5770] __alloc_pages+0x1f0/0x460 [ 193.913770][ T5770] z_erofs_do_read_page+0x2181/0x36b0 [ 193.919191][ T5770] z_erofs_readahead+0x88b/0xda0 [ 193.924623][ T5770] read_pages+0x189/0x850 [ 193.928995][ T5770] page_cache_ra_unbounded+0x68a/0x770 [ 193.934684][ T5770] force_page_cache_ra+0x2c1/0x320 [ 193.939843][ T5770] generic_fadvise+0x47e/0x780 [ 193.944686][ T5770] __x64_sys_fadvise64+0x140/0x180 [ 193.949840][ T5770] do_syscall_64+0x55/0xa0 [ 193.954350][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.960504][ T5770] page last free stack trace: [ 193.960569][ T51] Bluetooth: hci1: command tx timeout [ 193.965208][ T5770] free_unref_page_prepare+0x7b2/0x8c0 [ 193.976148][ T5770] free_unref_page_list+0xbe/0x860 [ 193.981368][ T5770] release_pages+0x1f7a/0x2200 [ 193.986286][ T5770] tlb_flush_mmu+0x377/0x510 [ 193.991060][ T5770] tlb_finish_mmu+0xc3/0x1d0 [ 193.995728][ T5770] exit_mmap+0x428/0xb90 [ 194.000011][ T5770] __mmput+0x118/0x3c0 [ 194.004475][ T5770] exit_mm+0x1f2/0x2c0 [ 194.008601][ T5770] do_exit+0x8dd/0x2460 [ 194.013586][ T5770] do_group_exit+0x21b/0x2d0 [ 194.018297][ T5770] __x64_sys_exit_group+0x3f/0x40 [ 194.023429][ T5770] do_syscall_64+0x55/0xa0 [ 194.027892][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.033864][ T5770] Modules linked in: [ 194.037834][ T5770] CPU: 0 PID: 5770 Comm: syz-executor Tainted: G B syzkaller #0 [ 194.046990][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.057084][ T5770] Call Trace: [ 194.060397][ T5770] [ 194.063351][ T5770] dump_stack_lvl+0x18c/0x250 [ 194.068062][ T5770] ? show_regs_print_info+0x20/0x20 [ 194.073384][ T5770] ? swiotlb_print_info+0x70/0x70 [ 194.078442][ T5770] bad_page+0x14b/0x170 [ 194.082620][ T5770] free_unref_page_prepare+0x85f/0x8c0 [ 194.088114][ T5770] free_unref_page+0x32/0x2e0 [ 194.092831][ T5770] ? __folio_put+0xef/0x210 [ 194.097363][ T5770] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 194.103839][ T5770] erofs_shrink_workstation+0x11f/0x290 [ 194.109439][ T5770] ? erofs_shrinker_unregister+0x170/0x170 [ 194.115298][ T5770] ? io_schedule+0xd0/0xd0 [ 194.119837][ T5770] ? kobject_put+0x428/0x460 [ 194.124454][ T5770] erofs_shrinker_unregister+0x5d/0x170 [ 194.130032][ T5770] erofs_put_super+0x4e/0x150 [ 194.134737][ T5770] ? erofs_free_inode+0xb0/0xb0 [ 194.139702][ T5770] generic_shutdown_super+0x134/0x2b0 [ 194.145100][ T5770] kill_block_super+0x44/0x90 [ 194.149799][ T5770] erofs_kill_sb+0x4c/0x140 [ 194.154331][ T5770] deactivate_locked_super+0x97/0x100 [ 194.159722][ T5770] cleanup_mnt+0x43b/0x4d0 [ 194.164164][ T5770] task_work_run+0x1d4/0x260 [ 194.168779][ T5770] ? task_work_cancel+0x220/0x220 [ 194.173831][ T5770] ? exit_to_user_mode_loop+0x3b/0x110 [ 194.179316][ T5770] exit_to_user_mode_loop+0xe6/0x110 [ 194.184721][ T5770] exit_to_user_mode_prepare+0xee/0x180 [ 194.190306][ T5770] syscall_exit_to_user_mode+0x1a/0x50 [ 194.195828][ T5770] do_syscall_64+0x61/0xa0 [ 194.200289][ T5770] ? clear_bhb_loop+0x40/0x90 [ 194.205006][ T5770] ? clear_bhb_loop+0x40/0x90 [ 194.209707][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.215624][ T5770] RIP: 0033:0x7fefdd99c117 [ 194.220064][ T5770] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 194.239697][ T5770] RSP: 002b:00007ffe4793d798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 194.248137][ T5770] RAX: 0000000000000000 RBX: 00007fefdda0471f RCX: 00007fefdd99c117 [ 194.256128][ T5770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4793d850 [ 194.264127][ T5770] RBP: 00007ffe4793d850 R08: 00007ffe4793e850 R09: 00000000ffffffff [ 194.272119][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4793e8e0 [ 194.280141][ T5770] R13: 00007fefdda0471f R14: 000000000002f0da R15: 00007ffe4793e920 [ 194.288148][ T5770] [ 194.308930][ T8095] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 194.565604][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.573884][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.000636][ T51] Bluetooth: hci1: command tx timeout [ 198.080368][ T51] Bluetooth: hci1: command tx timeout