last executing test programs: 6.128729358s ago: executing program 1 (id=2700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x5, 0x1c, 0x10, 0x18, 0x6}, @ipv4=@igmp={{0x7, 0x4, 0x2, 0x3b, 0x24, 0x66, 0x0, 0xfb, 0x2, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x3, 0xf3}]}}, {0x0, 0x10, 0x0, @multicast1}}}, 0x2e) 5.662275709s ago: executing program 1 (id=2705): add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d", 0x307, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* '], 0x8) 5.469412194s ago: executing program 0 (id=2707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}]}, 0x24}}, 0x0) 5.469253634s ago: executing program 1 (id=2708): unshare(0x60000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c00020000000000000000010800040000000000140000001100010000000000000000000200000a"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a34000000140a01000000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000420000000020a01000000000000000000020000000900010073797a3000000000140000001100010000000000000000000200000a"], 0x7c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 5.2351419s ago: executing program 0 (id=2711): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 5.015498715s ago: executing program 0 (id=2713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x5, 0x1c, 0x10, 0x18, 0x6}, @ipv4=@igmp={{0x7, 0x4, 0x2, 0x3b, 0x24, 0x66, 0x0, 0xfb, 0x2, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x3, 0xf3}]}}, {0x0, 0x10, 0x0, @multicast1}}}, 0x2e) 4.631142735s ago: executing program 0 (id=2716): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000340)={0x1d, r2}, 0x10) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) 4.495755728s ago: executing program 0 (id=2718): r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x10, &(0x7f0000001040)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@commit={'commit', 0x3d, 0xd1}}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x42, 0x30, 0x70, 0x32, 0x36, 0x25, 0x6d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 4.258267264s ago: executing program 1 (id=2727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x28e81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x2, 0x110000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x30000, 0x8000}) 3.916104572s ago: executing program 1 (id=2724): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 3.315721157s ago: executing program 3 (id=2726): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x2000, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 3.119236472s ago: executing program 3 (id=2729): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) fsync(r0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 2.564990456s ago: executing program 1 (id=2732): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="600e0f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.128395597s ago: executing program 2 (id=2735): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xffffffffffffffff, 0x2000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f00000000c0), 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.00234678s ago: executing program 0 (id=2736): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 1.302159337s ago: executing program 3 (id=2737): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000f80)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x3, 0x4, 0x100fff}) 973.448685ms ago: executing program 2 (id=2738): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x22004d0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f00000047c0)={0x2020}, 0x2020) 530.526736ms ago: executing program 3 (id=2739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 529.678187ms ago: executing program 2 (id=2747): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x6}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 385.82726ms ago: executing program 2 (id=2740): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000740)=@ll={0x11, 0x8906, r2, 0x1, 0x3, 0x6, @link_local}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000480)="27031c00160014000200beb40d211ec7c12a8e2f39ded0740ddf331a0a35f4fcb8c00fbcd6dd", 0x26}], 0x1}, 0x400c0c8) 243.448274ms ago: executing program 2 (id=2741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 242.835623ms ago: executing program 3 (id=2742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000300)={0x0, 0x200, 0x0, 0x0}) 1.149429ms ago: executing program 3 (id=2743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0xbcce, 0x4, 0x10001, 0xd6a, 0xffffffff, 0x10000}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0x100000, 0x49323de44ee88a26, 0x9, 0x49, 0xe2, 0x7, 0x6, 0xe, 0x0, 0x0, 0xb2, 0x2}, {0xf000, 0xdddd0000, 0x4, 0x5, 0xbb, 0x5, 0x38, 0x4, 0x7, 0xfd, 0xd9, 0x2}, {0xeeef0000, 0x41000, 0x2, 0xc6, 0x3, 0xd, 0x6, 0x9, 0x0, 0x5, 0x42, 0xa}, {0x7000, 0x8000000, 0x0, 0x9, 0x44, 0xcb, 0x5, 0x9, 0x40, 0x9, 0x1, 0x5}, {0xffff1000, 0x2000, 0x8, 0x7, 0xe, 0x2, 0x6, 0x8f, 0x1, 0xd, 0x5, 0x1}, {0x80a0001, 0x80a0000, 0x3, 0x5, 0x61, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x6, 0x4}, {0x7002, 0xeeee0000, 0xd, 0xff, 0x3, 0x80, 0x3, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x8000000, 0x2000, 0x0, 0x3, 0x4, 0x6, 0x9, 0x8, 0x4, 0xc6, 0x0, 0x81}, {0xf000, 0x3}, {0x15000, 0x8}, 0x20000038, 0x0, 0xeeee8000, 0x400e0, 0x0, 0x1101, 0x7000, [0x9, 0x1ff, 0x8, 0x8001]}) 0s ago: executing program 2 (id=2752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)='\v', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000380)="3c805dd29b8c50ae7c6e3f97a1ec", 0xe}, {&(0x7f0000002380)="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", 0xfb2}], 0x2}}], 0x2, 0x4000000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) gettid() socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0xe0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) kernel console output (not intermixed with test programs): ystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 993.580389][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.586822][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.894166][ T6239] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 995.928678][ T6239] (NULL device *): queue 0 connect admin queue failed (-111). [ 995.974319][ T6239] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 996.010473][ T6239] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 996.566480][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 996.768445][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.826546][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.838342][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 996.852099][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 996.861705][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.889675][ T8] usb 3-1: config 0 descriptor?? [ 997.387584][T12569] Invalid ELF header magic: != ELF [ 998.057109][T11545] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 998.090384][T11545] (NULL device *): queue 0 connect admin queue failed (-111). [ 998.110656][T11545] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 998.136491][T11545] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 998.179561][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 998.194673][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 998.202239][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 998.209721][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 998.219729][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 998.229839][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 998.246964][ T8] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 999.626785][ T8] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 999.646862][ T8] usb 3-1: USB disconnect, device number 18 [ 999.694040][ T9017] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1000.018281][ T9017] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.046857][ T9017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.082799][ T9017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.101030][T12588] fido_id[12588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1000.126140][ T9017] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1000.156579][ T9017] usb 4-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 1000.193660][ T9017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.217029][ T6239] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1000.258245][ T9017] usb 4-1: config 0 descriptor?? [ 1000.261373][ T6239] (NULL device *): queue 0 connect admin queue failed (-111). [ 1000.316416][ T6239] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1000.334117][ T9017] usb 4-1: can't set config #0, error -71 [ 1000.336762][ T6239] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1000.350361][ T9017] usb 4-1: USB disconnect, device number 20 [ 1000.845843][T12600] Invalid ELF header magic: != ELF [ 1001.647127][ T9017] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1002.460203][ T4805] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1002.530520][ T4805] (NULL device *): queue 0 connect admin queue failed (-111). [ 1002.576613][ T4805] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1002.622044][ T4805] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1003.266405][ T9017] usb 4-1: Using ep0 maxpacket: 8 [ 1003.322276][ T9017] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.374776][ T9017] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.508481][ T9017] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1003.594798][ T9017] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1003.661556][ T9017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.742112][ T9017] usb 4-1: config 0 descriptor?? [ 1003.766948][ T9017] usb 4-1: can't set config #0, error -71 [ 1003.798876][T12617] loop3: detected capacity change from 0 to 2048 [ 1003.800122][ T9017] usb 4-1: USB disconnect, device number 21 [ 1004.140651][T12621] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1905'. [ 1004.776771][T12625] Invalid ELF header magic: != ELF [ 1004.918923][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1005.332303][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1005.360558][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1005.662512][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1005.670984][T12629] jffs2: notice: (12629) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1007.736395][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1007.843332][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1007.928934][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1008.003445][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1008.443281][T12647] loop3: detected capacity change from 0 to 32768 [ 1009.256468][T12664] Invalid ELF header magic: != ELF [ 1010.152420][T11545] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1010.243703][T11545] (NULL device *): queue 0 connect admin queue failed (-111). [ 1010.366402][T11545] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1010.386353][T11545] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1012.126405][ T2183] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1012.468086][T11545] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1012.828856][T11545] (NULL device *): queue 0 connect admin queue failed (-111). [ 1012.848647][T11545] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1012.881518][T11545] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1012.996648][ T2183] usb 2-1: Using ep0 maxpacket: 32 [ 1013.023760][ T2183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.106550][ T2183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.123272][T12690] loop3: detected capacity change from 0 to 8 [ 1013.136580][ T2183] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1013.166695][ T2183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.220382][ T2183] usb 2-1: config 0 descriptor?? [ 1013.298725][T12690] SQUASHFS error: Unable to read directory block [2c0:35] [ 1013.968054][ T2183] ft260 0003:0403:6030.000C: item fetching failed at offset 0/2 [ 1014.205157][ T2183] ft260 0003:0403:6030.000C: failed to parse HID [ 1016.325803][T11545] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1016.347239][ T2183] ft260: probe of 0003:0403:6030.000C failed with error -22 [ 1016.367597][ T2183] usb 2-1: USB disconnect, device number 28 [ 1016.393836][T11545] (NULL device *): queue 0 connect admin queue failed (-111). [ 1016.401788][T11545] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1016.409851][T11545] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1018.461037][T12711] loop3: detected capacity change from 0 to 40427 [ 1018.466396][T12166] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1018.526560][T12166] (NULL device *): queue 0 connect admin queue failed (-111). [ 1018.534112][T12166] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1018.553533][T12711] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 1018.565127][T12711] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1018.586438][T12166] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1018.621069][T12711] F2FS-fs (loop3): invalid crc value [ 1019.067733][T12711] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1019.075332][T12711] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1019.085355][T12729] netem: change failed [ 1019.286808][ T2183] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1019.521710][ T2183] usb 2-1: Using ep0 maxpacket: 8 [ 1019.628125][ T2183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.803313][ T2183] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1019.966844][ T2183] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 1020.035890][ T2183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.089044][ T2183] usb 2-1: config 0 descriptor?? [ 1021.036917][T11545] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1021.347869][ T2183] input: HID 04f2:1236 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F2:1236.000D/input/input20 [ 1021.348010][T11545] (NULL device *): queue 0 connect admin queue failed (-111). [ 1021.576540][T11545] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1021.589012][ T2183] chicony 0003:04F2:1236.000D: input,hidraw0: USB HID v0.05 Joystick [HID 04f2:1236] on usb-dummy_hcd.1-1/input0 [ 1021.636460][T11545] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1021.690539][ T2183] usb 2-1: USB disconnect, device number 29 [ 1021.886813][T12742] fido_id[12742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1024.770274][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1024.832850][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 1024.866391][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1024.906376][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1025.086408][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1026.585242][T12770] loop3: detected capacity change from 0 to 512 [ 1026.676680][T12770] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1949: iget: bad i_size value: -1099511627766 [ 1026.732444][T12770] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1949: couldn't read orphan inode 15 (err -117) [ 1026.812876][T12770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.076529][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1027.095644][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 1027.103691][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1027.112008][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1028.526784][ T8] usb 4-1: device not accepting address 22, error -71 [ 1028.631342][T12770] EXT4-fs warning (device loop3): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 1028.936660][T12772] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1029.178469][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1029.339053][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1029.346958][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1029.354694][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1029.513356][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.699068][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1031.764657][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 1031.782912][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1031.842067][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1034.461553][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1034.496793][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 1034.504624][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1034.565358][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1036.617213][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1036.677853][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 1036.685409][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1036.720666][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1037.975703][T12812] loop3: detected capacity change from 0 to 40427 [ 1038.047571][T12812] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 1038.068370][T12812] F2FS-fs (loop3): invalid crc value [ 1038.107983][T12812] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1038.325467][T12812] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1038.604518][ T5773] syz-executor: attempt to access beyond end of device [ 1038.604518][ T5773] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1038.629070][ T5773] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1038.776464][ T4805] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1038.816674][ T4805] (NULL device *): queue 0 connect admin queue failed (-111). [ 1038.846972][ T4805] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1038.926325][ T4805] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1040.937077][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1041.280148][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1041.316389][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1041.342118][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1043.429114][T11545] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1043.496539][T11545] (NULL device *): queue 0 connect admin queue failed (-111). [ 1043.504179][T11545] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1043.536373][T11545] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1044.406418][ T8579] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1044.596536][ T8579] usb 4-1: Using ep0 maxpacket: 16 [ 1044.624533][ T8579] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.635763][ T8579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1044.647587][ T8579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1044.657571][ T8579] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1044.679892][ T8579] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1044.701029][ T8579] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1044.711402][ T8579] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1044.723454][ T8579] usb 4-1: Manufacturer: syz [ 1045.180269][ T8579] usb 4-1: config 0 descriptor?? [ 1045.576868][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1045.621406][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1045.652307][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1045.675844][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1045.711374][ T8579] rc_core: IR keymap rc-hauppauge not found [ 1045.730513][ T8579] Registered IR keymap rc-empty [ 1045.745804][ T8579] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1045.786633][ T8579] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1045.841338][ T8579] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1045.865971][ T8579] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 1045.891785][ T8579] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1045.938534][ T8579] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1045.986698][ T8579] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.026582][ T8579] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.076700][ T8579] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.123473][ T8579] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.226572][ T8579] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.286510][ T8579] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.327763][ T8579] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.369236][ T8579] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.418431][ T8579] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1046.450337][ T8579] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1046.513649][ T8579] usb 4-1: USB disconnect, device number 24 [ 1047.147563][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1985'. [ 1047.736525][T12166] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1048.166703][T12166] (NULL device *): queue 0 connect admin queue failed (-111). [ 1048.215904][T12166] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1048.225691][T12166] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1048.482764][T12914] netlink: 'syz.3.1992': attribute type 1 has an invalid length. [ 1049.729203][T12934] dummy0: entered promiscuous mode [ 1049.784542][T12934] dummy0: left promiscuous mode [ 1050.298171][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1050.369027][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 1050.431819][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1050.527597][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1050.965151][T12942] loop3: detected capacity change from 0 to 64 [ 1052.972194][ T4805] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1052.999063][ T28] audit: type=1800 audit(1787917802.449:79): pid=12942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2003" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 1053.047027][ T4805] (NULL device *): queue 0 connect admin queue failed (-111). [ 1053.054671][ T4805] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1053.092071][ T4805] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1053.469635][T12953] loop3: detected capacity change from 0 to 4096 [ 1053.533638][T12953] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1055.021783][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.028326][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.186571][ T6239] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1055.231630][ T6239] (NULL device *): queue 0 connect admin queue failed (-111). [ 1055.250170][ T6239] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1055.278036][ T6239] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1056.715388][T12984] syz.2.2021[12984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1056.715677][T12984] syz.2.2021[12984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1057.056517][ T9017] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1057.238603][T12995] loop3: detected capacity change from 0 to 4096 [ 1057.295285][ T9017] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.315287][ T9017] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1057.336822][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1057.354339][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'. [ 1057.369984][ T9017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.382021][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1057.405988][ T9017] usb 2-1: config 0 descriptor?? [ 1057.425717][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1057.447618][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1057.462127][T13001] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1057.613509][T13005] Bluetooth: MGMT ver 1.22 [ 1057.697259][T12995] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1057.732167][T12995] Remounting filesystem read-only [ 1057.738266][T13007] jffs2: notice: (13007) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1057.837857][ T5773] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 1057.845342][ T5773] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 1057.877577][ T5773] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 1057.884612][ T5773] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 1057.892607][ T5773] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 1057.904048][ T5773] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 1057.925392][ T9017] ath6kl: Unsupported hardware version: 0x0 [ 1057.976426][ T9017] ath6kl: Failed to init ath6kl core: -22 [ 1057.982824][ T9017] ath6kl_usb: probe of 2-1:0.0 failed with error -22 [ 1058.073564][T13014] usb usb1: selecting invalid altsetting 1 [ 1058.155421][ T2183] usb 2-1: USB disconnect, device number 30 [ 1058.288019][T13026] loop3: detected capacity change from 0 to 512 [ 1058.303771][T13026] EXT4-fs: Ignoring removed bh option [ 1058.353090][T13026] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.2037: corrupted in-inode xattr: e_value size too large [ 1058.379537][T13026] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.2037: couldn't read orphan inode 15 (err -117) [ 1058.424184][T13026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1059.310778][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.500894][T12166] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1059.597760][T12166] (NULL device *): queue 0 connect admin queue failed (-111). [ 1059.605328][T12166] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1059.636743][T12166] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1059.683916][T13049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2046'. [ 1059.702246][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 1059.735659][T13045] loop3: detected capacity change from 0 to 4096 [ 1059.824447][T13045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.999760][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.058339][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1062.072427][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1062.080592][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1062.126400][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1062.196504][ T2183] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1062.326765][ T5785] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 1062.376577][ T2183] usb 2-1: Using ep0 maxpacket: 8 [ 1062.384017][ T2183] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1062.395510][ T2183] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1062.415680][ T2183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.424357][ T2183] usb 2-1: Product: syz [ 1062.436401][ T2183] usb 2-1: Manufacturer: syz [ 1062.446379][ T2183] usb 2-1: SerialNumber: syz [ 1062.458993][ T2183] usb 2-1: config 0 descriptor?? [ 1062.477852][ T2183] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1062.501666][ T2183] usb 2-1: setting power ON [ 1062.510635][ T2183] dvb-usb: bulk message failed: -22 (2/0) [ 1062.523267][ T2183] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1062.538883][ T2183] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1062.551885][ T2183] usb 2-1: media controller created [ 1062.578759][ T2183] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1062.601536][ T2183] usb 2-1: selecting invalid altsetting 6 [ 1062.607399][ T2183] usb 2-1: digital interface selection failed (-22) [ 1062.614203][ T2183] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1062.626546][ T2183] usb 2-1: setting power OFF [ 1062.631303][ T2183] dvb-usb: bulk message failed: -22 (2/0) [ 1062.646393][ T2183] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1062.655956][ T2183] (NULL device *): no alternate interface [ 1062.694061][T13072] dvb-usb: bulk message failed: -22 (3/0) [ 1062.731597][ T2183] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1062.748923][ T2183] usb 2-1: USB disconnect, device number 31 [ 1062.756674][T11773] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1062.776490][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1062.966600][T11773] usb 4-1: Using ep0 maxpacket: 16 [ 1062.976442][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.988895][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.995040][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2064'. [ 1063.008806][T11773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.008844][T11773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.008869][T11773] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1063.008916][T11773] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1063.008942][T11773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.010356][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1063.074362][T11773] usb 4-1: config 0 descriptor?? [ 1063.101209][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1063.110707][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.137536][ T8] usb 3-1: config 0 descriptor?? [ 1063.569116][T11773] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1063.652365][T11773] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1063.761782][T11773] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 1063.808986][ T8] logitech-hidpp-device 0003:046D:C262.000F: item fetching failed at offset 23/24 [ 1063.991616][T11773] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1064.027455][ T8] logitech-hidpp-device 0003:046D:C262.000F: hidpp_probe:parse failed [ 1064.082391][T11773] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1064.094553][ T8] logitech-hidpp-device: probe of 0003:046D:C262.000F failed with error -22 [ 1064.145869][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1064.160904][T11773] microsoft 0003:045E:07DA.000E: unsupported Resolution Multiplier 0 [ 1064.187015][ T8] usb 3-1: USB disconnect, device number 19 [ 1064.205575][T11773] microsoft 0003:045E:07DA.000E: implement() called with n (56) > 32! (kworker/0:3) [ 1065.168551][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 1065.176136][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1065.185144][T13104] sit0: entered promiscuous mode [ 1065.192084][T11773] microsoft 0003:045E:07DA.000E: No inputs registered, leaving [ 1065.217668][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1065.220572][T13104] netlink: 'syz.0.2069': attribute type 1 has an invalid length. [ 1065.245627][T11773] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1065.266646][T13104] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2069'. [ 1065.276793][T11773] microsoft 0003:045E:07DA.000E: no inputs found [ 1065.283365][T11773] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 1065.313152][T11773] usb 4-1: USB disconnect, device number 25 [ 1065.465735][T13107] fido_id[13107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1065.946649][ T2183] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1067.141229][ T2183] usb 4-1: Using ep0 maxpacket: 16 [ 1067.159628][ T2183] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.181875][ T2183] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1067.206437][ T2183] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1067.213174][ T2183] usb 4-1: New USB device found, idVendor=045e, idProduct=076c, bcdDevice= 0.00 [ 1067.246394][ T2183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.258081][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1067.264970][ T2183] usb 4-1: config 0 descriptor?? [ 1067.305733][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 1067.326850][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1067.355011][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1069.039653][ T2183] usbhid 4-1:0.0: can't add hid device: -71 [ 1069.045745][ T2183] usbhid: probe of 4-1:0.0 failed with error -71 [ 1069.113716][ T2183] usb 4-1: USB disconnect, device number 26 [ 1069.437822][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1069.466846][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1069.484744][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1069.502936][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1069.536376][ T2183] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1069.738709][ T2183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.766466][ T2183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.786367][ T2183] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1069.795488][ T2183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.827554][ T2183] usb 4-1: config 0 descriptor?? [ 1070.310319][ T2183] hid-steam 0003:28DE:1142.0010: unbalanced collection at end of report description [ 1070.331286][ T2183] hid-steam 0003:28DE:1142.0010: steam_probe:parse of hid interface failed [ 1070.346551][ T2183] hid-steam: probe of 0003:28DE:1142.0010 failed with error -22 [ 1071.576728][ T4805] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1071.590560][ T8582] usb 4-1: USB disconnect, device number 27 [ 1071.610018][ T4805] (NULL device *): queue 0 connect admin queue failed (-111). [ 1071.628901][ T4805] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1071.666365][ T4805] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1072.566542][T13169] netlink: 'syz.0.2094': attribute type 21 has an invalid length. [ 1072.617146][T13169] IPv6: NLM_F_CREATE should be specified when creating new route [ 1072.625578][T13169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1072.633319][T13169] IPv6: NLM_F_CREATE should be set when creating new route [ 1072.640690][T13169] IPv6: NLM_F_CREATE should be set when creating new route [ 1072.648178][T13169] IPv6: NLM_F_CREATE should be set when creating new route [ 1072.673351][T13171] Invalid ELF header magic: != ELF [ 1072.918427][T13172] netlink: 'syz.0.2094': attribute type 21 has an invalid length. [ 1073.292699][T13172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1073.666751][T11773] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1073.741447][ T6239] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1073.754315][ T6239] (NULL device *): queue 0 connect admin queue failed (-111). [ 1073.767666][ T6239] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1073.775700][ T6239] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1073.902580][T11773] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1073.917696][T11773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.918673][T13182] loop3: detected capacity change from 0 to 1024 [ 1073.932429][T11773] usb 2-1: Product: syz [ 1073.932452][T11773] usb 2-1: Manufacturer: syz [ 1073.952053][T11773] usb 2-1: SerialNumber: syz [ 1073.960086][T11773] usb 2-1: config 0 descriptor?? [ 1073.969454][T11773] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 1074.219770][T11773] usb 2-1: USB disconnect, device number 32 [ 1074.863879][T13205] Invalid ELF header magic: != ELF [ 1075.727738][T13213] gretap0: entered promiscuous mode [ 1075.734268][T13213] macsec1: entered promiscuous mode [ 1075.747591][T13213] gretap0: left promiscuous mode [ 1075.827297][ T4805] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1075.849956][ T4805] (NULL device *): queue 0 connect admin queue failed (-111). [ 1075.858131][ T4805] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1075.865982][ T4805] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1075.985698][T13217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2114'. [ 1076.066696][ T5849] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1076.259349][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.275565][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.286709][ T5849] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1076.295890][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.313266][ T5849] usb 3-1: config 0 descriptor?? [ 1076.409869][T13224] netlink: 'syz.3.2117': attribute type 21 has an invalid length. [ 1076.418732][T13224] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2117'. [ 1076.433770][T13224] netlink: 'syz.3.2117': attribute type 4 has an invalid length. [ 1076.441724][T13224] netlink: 'syz.3.2117': attribute type 5 has an invalid length. [ 1076.450134][T13224] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2117'. [ 1076.464580][T13225] netlink: 'syz.3.2117': attribute type 21 has an invalid length. [ 1076.474397][T13225] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2117'. [ 1076.484759][T13225] netlink: 'syz.3.2117': attribute type 4 has an invalid length. [ 1076.493249][T13225] netlink: 'syz.3.2117': attribute type 5 has an invalid length. [ 1076.502042][T13225] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2117'. [ 1076.695896][T13232] loop3: detected capacity change from 0 to 128 [ 1076.752173][ T5849] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 1076.763287][ T5849] arvo 0003:1E7D:30D4.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 1076.839679][T13232] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1076.864245][T13232] System zones: 1-3, 19-19, 35-36 [ 1076.914974][T13232] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1076.948623][ T5849] arvo 0003:1E7D:30D4.0011: couldn't init struct arvo_device [ 1076.956137][ T5849] arvo 0003:1E7D:30D4.0011: couldn't install keyboard [ 1076.966406][T13232] ext4 filesystem being mounted at /487/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.062259][T13240] Invalid ELF header magic: != ELF [ 1077.823146][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1077.867783][ T5849] arvo: probe of 0003:1E7D:30D4.0011 failed with error -71 [ 1077.878430][ T5849] usb 3-1: USB disconnect, device number 20 [ 1077.896538][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1077.911495][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1077.934637][T13244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1077.945476][T13244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1077.952528][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1077.996369][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1078.141378][T13250] GUP no longer grows the stack in syz.3.2126 (13250): 200000007000-200000008000 (200000004000) [ 1078.154090][T13250] CPU: 0 PID: 13250 Comm: syz.3.2126 Not tainted syzkaller #0 [ 1078.161618][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1078.171904][T13250] Call Trace: [ 1078.175302][T13250] [ 1078.178348][T13250] dump_stack_lvl+0x18c/0x250 [ 1078.183374][T13250] ? show_regs_print_info+0x20/0x20 [ 1078.188616][T13250] ? load_image+0x420/0x420 [ 1078.193193][T13250] ? find_vma+0x134/0x1b0 [ 1078.197665][T13250] fixup_user_fault+0x691/0x750 [ 1078.202579][T13250] fault_in_user_writeable+0x71/0xd0 [ 1078.208022][T13250] futex_lock_pi+0x276/0xa00 [ 1078.212658][T13250] ? fixup_pi_state_owner+0x5f0/0x5f0 [ 1078.218149][T13250] ? futex_setup_timer+0xc0/0xc0 [ 1078.223137][T13250] ? userfaultfd_unmap_prep+0x3c0/0x3c0 [ 1078.228920][T13250] do_futex+0x23d/0x3e0 [ 1078.233119][T13250] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1078.239040][T13250] __se_sys_futex+0x3a9/0x440 [ 1078.243743][T13250] ? __x64_sys_futex+0xf0/0xf0 [ 1078.248531][T13250] ? __x64_sys_futex+0x21/0xf0 [ 1078.253310][T13250] do_syscall_64+0x55/0xb0 [ 1078.257755][T13250] ? clear_bhb_loop+0x40/0x90 [ 1078.262568][T13250] ? clear_bhb_loop+0x40/0x90 [ 1078.267264][T13250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1078.273173][T13250] RIP: 0033:0x7f1950f9e159 [ 1078.277720][T13250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.297378][T13250] RSP: 002b:00007f1951ead028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1078.305818][T13250] RAX: ffffffffffffffda RBX: 00007f1951225fa0 RCX: 00007f1950f9e159 [ 1078.313805][T13250] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 1078.321789][T13250] RBP: 00007f1951035024 R08: 0000000000000000 R09: 0000000000000082 [ 1078.329770][T13250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1078.337752][T13250] R13: 00007f1951226038 R14: 00007f1951225fa0 R15: 00007ffc728d4518 [ 1078.345750][T13250] [ 1079.196432][T13278] Invalid ELF header magic: != ELF [ 1081.409362][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1081.495347][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 1081.504279][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1081.522584][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1081.866387][ T8582] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1082.059666][ T8582] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.080349][ T8582] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1082.106439][ T8582] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1082.115649][ T8582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.129348][ T8582] usb 4-1: config 0 descriptor?? [ 1082.148798][ T8582] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1082.155674][ T8582] dvb-usb: bulk message failed: -22 (3/0) [ 1082.185192][ T8582] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1082.207665][ T8582] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1082.214823][ T8582] usb 4-1: media controller created [ 1082.239153][ T8582] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1082.267532][ T8582] dvb-usb: bulk message failed: -22 (6/0) [ 1082.280481][ T8582] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1082.293747][ T8582] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 1082.308272][ T8582] dvb-usb: schedule remote query interval to 150 msecs. [ 1082.315899][ T8582] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1082.392470][T13294] dvb-usb: bulk message failed: -22 (5/0) [ 1082.425041][ T5849] usb 4-1: USB disconnect, device number 28 [ 1082.474905][ T5849] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1082.517132][ T2183] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1082.806539][T13316] Invalid ELF header magic: != ELF [ 1082.838493][ T2183] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.888386][ T2183] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1083.034493][ T2183] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1083.110974][ T2183] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 1083.250369][ T2183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.489730][ T2183] usb 3-1: config 0 descriptor?? [ 1083.586618][ T6239] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1083.627001][ T6239] (NULL device *): queue 0 connect admin queue failed (-111). [ 1083.634752][ T6239] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1083.642705][ T6239] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1083.757130][T13320] loop3: detected capacity change from 0 to 4096 [ 1083.776591][T13320] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1084.003700][ T2183] input: HID 046d:c287 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C287.0012/input/input24 [ 1084.120801][ T2183] logitech 0003:046D:C287.0012: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c287] on usb-dummy_hcd.2-1/input0 [ 1084.345176][ T2183] logitech 0003:046D:C287.0012: missing HID_OUTPUT_REPORT 0 [ 1084.386022][ T2183] usb 3-1: USB disconnect, device number 21 [ 1084.477648][T13332] Invalid ELF header magic: != ELF [ 1085.471318][T13330] loop3: detected capacity change from 0 to 32768 [ 1085.656936][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1085.686657][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 1085.704550][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1085.721382][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1085.846392][ T8582] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1085.892559][T13349] loop3: detected capacity change from 0 to 256 [ 1086.039512][ T8582] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1086.071743][ T8582] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1086.096669][ T8582] usb 2-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 1086.105801][ T8582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.110009][T13353] loop3: detected capacity change from 0 to 512 [ 1086.132839][ T8582] usb 2-1: config 0 descriptor?? [ 1086.660750][ T8582] wacom 0003:056A:0319.0013: ignoring exceeding usage max [ 1086.784821][T13368] Invalid ELF header magic: != ELF [ 1087.401114][ T8582] usb 2-1: USB disconnect, device number 33 [ 1087.739099][ T4805] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1087.776633][ T4805] (NULL device *): queue 0 connect admin queue failed (-111). [ 1087.794576][ T4805] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1087.814838][ T4805] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1088.695834][T13403] Invalid ELF header magic: != ELF [ 1089.626038][T13412] loop3: detected capacity change from 0 to 4096 [ 1089.639090][T13412] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1089.703262][T13412] ntfs: volume version 3.1. [ 1089.896492][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1089.938780][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1089.958588][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1089.981179][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1090.220830][T13388] Bluetooth: hci4: command 0x1003 tx timeout [ 1090.265206][T13421] Invalid ELF header magic: != ELF [ 1090.308359][ T5785] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1091.026383][ T8] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1091.216391][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 1091.242781][ T8] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1091.271075][ T8] usb 4-1: config 179 has no interface number 0 [ 1091.298954][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1091.351241][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1091.391724][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1091.415023][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1091.491254][T13437] Invalid ELF header magic: != ELF [ 1092.069451][ T6239] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1092.105696][ T6239] (NULL device *): queue 0 connect admin queue failed (-111). [ 1092.128910][ T6239] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1092.150863][ T6239] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1092.284616][ T8] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1092.298755][ T8] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1092.307899][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.320608][T13419] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1092.662236][T13442] Driver unsupported XDP return value 0 on prog (id 41) dev N/A, expect packet loss! [ 1092.984729][ T8582] usb 4-1: USB disconnect, device number 29 [ 1092.984746][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1093.988710][T13474] UDC core: g1: couldn't find an available UDC or it's busy [ 1094.217075][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1094.245994][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1094.270008][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1094.291511][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1096.235783][T13496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2222'. [ 1096.246420][T13496] bridge_slave_0: default FDB implementation only supports local addresses [ 1096.376555][ T6239] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1096.396736][ T6239] (NULL device *): queue 0 connect admin queue failed (-111). [ 1096.434848][ T6239] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1096.457155][ T6239] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1096.535590][T13500] loop3: detected capacity change from 0 to 128 [ 1096.583597][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'. [ 1096.619587][T13500] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1096.664515][T13500] ext4 filesystem being mounted at /508/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1096.818732][T13500] syz.3.2224 (pid 13500) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1096.953959][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1097.156910][T13514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2227'. [ 1098.735110][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1098.791088][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 1100.992477][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1101.107753][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1101.720617][T13537] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1102.622729][T13555] loop3: detected capacity change from 0 to 4096 [ 1102.724678][T13555] ntfs3: loop3: ino=b, Correct links count -> 1. [ 1102.746481][T13555] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1103.177278][ T4805] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1103.229268][ T4805] (NULL device *): queue 0 connect admin queue failed (-111). [ 1103.253633][ T4805] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1103.280463][ T4805] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1103.752809][T13573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1103.935229][T13578] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1104.256473][ T5849] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1104.266584][T11773] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1104.337516][T13586] Invalid ELF header magic: != ELF [ 1105.246481][ T5849] usb 4-1: Using ep0 maxpacket: 32 [ 1105.263939][ T5849] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1105.283646][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.303200][ T5849] usb 4-1: config 0 descriptor?? [ 1105.336545][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1105.341684][ T5849] as10x_usb: device has been detected [ 1105.362942][T11773] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 1105.373517][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 1105.376498][T11773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1105.385063][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1105.392285][ T5849] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1105.404192][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1105.406886][T11773] usb 2-1: Product: syz [ 1105.434546][T11773] usb 2-1: Manufacturer: syz [ 1105.457107][ T5849] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1105.582992][ T5849] as10x_usb: error during firmware upload part1 [ 1105.598358][ T5849] Registered device nBox DVB-T Dongle [ 1105.624711][ T5849] usb 4-1: USB disconnect, device number 30 [ 1105.647938][T11773] msi2500 2-1:1.0: Registered as swradio24 [ 1105.653859][T11773] msi2500 2-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 1105.700580][T11773] usb 2-1: USB disconnect, device number 34 [ 1105.955857][ T5849] Unregistered device nBox DVB-T Dongle [ 1105.970304][ T5849] as10x_usb: device has been disconnected [ 1106.415264][T13617] Invalid ELF header magic: != ELF [ 1107.426408][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1107.466435][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1107.474014][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1107.506378][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1108.128735][T13638] Invalid ELF header magic: != ELF [ 1109.330353][T13649] Invalid ELF header magic: != ELF [ 1109.576876][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1109.787840][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 1109.956499][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1110.005148][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1111.766502][T13667] program syz.1.2288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1112.026669][T11773] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1112.110890][T13674] Invalid ELF header magic: != ELF [ 1112.419155][T12166] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1112.481094][T12166] (NULL device *): queue 0 connect admin queue failed (-111). [ 1112.522169][T12166] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1112.678739][T12166] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1113.945180][T11773] usb 3-1: Using ep0 maxpacket: 8 [ 1113.953309][T11773] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1113.986317][T11773] usb 3-1: config 179 has no interface number 0 [ 1113.992688][T11773] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1114.041240][T11773] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1114.081609][T11773] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1114.106632][T11773] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1114.141525][T11773] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1114.171434][T11773] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1114.199382][T11773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.224054][T13664] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1114.752593][T11773] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input28 [ 1114.776416][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1114.806571][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 1114.845028][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1114.883745][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1115.050091][ T2183] usb 3-1: USB disconnect, device number 22 [ 1115.050142][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1115.064979][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 1115.068140][ T2183] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1115.551971][T13689] Invalid ELF header magic: != ELF [ 1116.462894][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.469667][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.581721][T13700] netlink: 'syz.2.2299': attribute type 32 has an invalid length. [ 1116.624071][T13700] bond1: Setting coupled_control to off (0) [ 1116.631356][T13700] bond1: entered promiscuous mode [ 1116.696769][ T5845] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1116.937203][ T4805] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1116.962049][T13707] Invalid ELF header magic: != ELF [ 1117.078847][ T4805] (NULL device *): queue 0 connect admin queue failed (-111). [ 1117.180082][ T4805] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1117.307766][ T4805] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1117.565495][T13709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2302'. [ 1117.590768][T13709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2302'. [ 1117.618917][T13709] netlink: 'syz.2.2302': attribute type 15 has an invalid length. [ 1117.727801][ T5845] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1117.747096][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.755285][ T5845] usb 2-1: Product: syz [ 1117.767322][ T5845] usb 2-1: Manufacturer: syz [ 1117.772210][ T5845] usb 2-1: SerialNumber: syz [ 1117.797282][ T5845] usb 2-1: config 0 descriptor?? [ 1117.811596][ T5845] hub 2-1:0.0: bad descriptor, ignoring hub [ 1117.821590][ T5845] hub: probe of 2-1:0.0 failed with error -5 [ 1118.030846][ T5845] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1118.060166][ T5845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1118.080239][ T5845] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1118.097231][ T5845] usb 2-1: media controller created [ 1118.162899][T13721] (null): rxe_set_mtu: Set mtu to 1024 [ 1118.163727][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1118.246663][T13698] dib0700: tx buffer length is larger than 4. Not supported. [ 1118.297162][ T5845] DVB: Unable to find symbol dib7000p_attach() [ 1118.303520][ T5845] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1118.446339][ T5845] rc_core: IR keymap rc-dib0700-rc5 not found [ 1118.452507][ T5845] Registered IR keymap rc-empty [ 1118.476771][ T5845] dvb-usb: could not initialize remote control. [ 1118.493372][ T5845] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1118.532132][ T5845] usb 2-1: USB disconnect, device number 35 [ 1118.624010][ T5845] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1118.624268][T13721] infiniband syz0: set down [ 1118.681633][T13721] infiniband syz0: added syzkaller0 [ 1118.830429][T13721] RDS/IB: syz0: added [ 1118.865226][T13721] smc: adding ib device syz0 with port count 1 [ 1118.916508][T13721] smc: ib device syz0 port 1 has pnetid [ 1119.327884][T13721] syz0: rxe_query_port: returned err = -19 [ 1119.371840][ T4805] smc: removing ib device syz0 [ 1119.497454][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1119.533051][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1119.551679][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1119.576837][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1119.991146][T13721] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 1120.506500][ T5845] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1120.691983][ T5845] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1120.708869][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.719004][ T5845] usb 3-1: Product: syz [ 1120.723347][ T5845] usb 3-1: Manufacturer: syz [ 1120.732104][ T5845] usb 3-1: SerialNumber: syz [ 1120.736980][ T8] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1120.760344][ T5845] usb 3-1: config 0 descriptor?? [ 1120.768988][ T5845] hub 3-1:0.0: bad descriptor, ignoring hub [ 1120.775140][ T5845] hub: probe of 3-1:0.0 failed with error -5 [ 1120.784768][T13782] jffs2: notice: (13782) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1120.930948][ T8] usb 4-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 1120.941016][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1120.949530][ T8] usb 4-1: Product: syz [ 1120.953742][ T8] usb 4-1: Manufacturer: syz [ 1120.996670][ T5845] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1121.021291][ T5845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1121.041913][ T5845] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1121.054042][ T5845] usb 3-1: media controller created [ 1121.059868][ T8] msi2500 4-1:1.0: Registered as swradio24 [ 1121.065727][ T8] msi2500 4-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 1121.095729][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1121.191372][T13766] dib0700: tx buffer length is larger than 4. Not supported. [ 1121.229187][ T5845] DVB: Unable to find symbol dib7000p_attach() [ 1121.235525][ T5845] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1121.276103][ T8579] usb 4-1: USB disconnect, device number 31 [ 1121.407142][ T5845] rc_core: IR keymap rc-dib0700-rc5 not found [ 1121.423568][ T5845] Registered IR keymap rc-empty [ 1121.433952][ T5845] dvb-usb: could not initialize remote control. [ 1121.450813][ T5845] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1121.472133][ T5845] usb 3-1: USB disconnect, device number 23 [ 1121.514525][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2340'. [ 1121.602595][ T5845] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1121.656472][T12166] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1121.676511][T12166] (NULL device *): queue 0 connect admin queue failed (-111). [ 1121.729647][T12166] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1121.767601][T12166] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1121.897599][T13809] Invalid ELF header magic: != ELF [ 1123.176535][ T2183] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1123.298900][T13837] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1123.308660][T13837] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1123.317540][T13837] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1123.326314][T13837] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1123.375566][ T2183] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.386576][ T2183] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1123.395666][ T2183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.415020][ T2183] usb 3-1: config 0 descriptor?? [ 1123.473766][T13840] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1123.501067][T13840] CIFS: Attempting to mount //127.0.0.1/share [ 1123.516459][T13840] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1123.523981][T13840] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1125.180915][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1125.188598][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 1125.188630][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1125.188652][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1125.199340][ T2183] ath6kl: Unsupported hardware version: 0x0 [ 1125.200345][ T2183] ath6kl: Failed to init ath6kl core: -22 [ 1125.200864][ T2183] ath6kl_usb: probe of 3-1:0.0 failed with error -22 [ 1125.433683][ T8] usb 3-1: USB disconnect, device number 24 [ 1126.455967][T13874] Invalid ELF header magic: != ELF [ 1126.666699][ T2183] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1127.051474][ T2183] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.091445][ T2183] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1127.119207][ T2183] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1127.146592][ T2183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.230118][ T2183] usb 4-1: config 0 descriptor?? [ 1127.260609][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1127.275237][ T2183] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1127.306880][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1127.309401][ T2183] dvb-usb: bulk message failed: -22 (3/0) [ 1127.314416][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1127.314441][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1127.353704][ T2183] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1127.363849][ T2183] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1127.371219][ T2183] usb 4-1: media controller created [ 1128.447114][ T2183] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1128.462370][T13873] dvb-usb: bulk message failed: -22 (2/0) [ 1128.504015][ T2183] dvb-usb: bulk message failed: -22 (6/0) [ 1128.512052][ T2183] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1128.520722][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2371'. [ 1128.530849][ T2183] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 1128.568467][ T2183] dvb-usb: schedule remote query interval to 150 msecs. [ 1128.575587][ T2183] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1128.583853][T11010] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1128.612131][ T2183] usb 4-1: USB disconnect, device number 32 [ 1128.676442][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'. [ 1128.681452][ T2183] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1128.781887][T11010] usb 3-1: Using ep0 maxpacket: 32 [ 1128.793354][T11010] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1128.813672][T11010] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1128.825262][T11010] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1128.846634][T11010] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1128.855750][T11010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.886556][T11010] usb 3-1: Product: syz [ 1128.890816][T11010] usb 3-1: Manufacturer: syz [ 1128.895500][T11010] usb 3-1: SerialNumber: syz [ 1128.919390][T11010] usb 3-1: config 0 descriptor?? [ 1129.337603][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1129.352325][T11010] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1129.371088][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 1129.391246][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1129.418662][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1129.561933][T11010] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1129.589686][T11010] gs_usb: probe of 3-1:0.0 failed with error -22 [ 1129.812382][ T8579] usb 3-1: USB disconnect, device number 25 [ 1129.996931][T13908] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2383'. [ 1131.200587][T13914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2386'. [ 1131.497263][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1131.552244][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 1131.560901][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1131.568990][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1131.767236][T13925] Invalid ELF header magic: != ELF [ 1133.353679][T13947] netlink: 'syz.0.2399': attribute type 1 has an invalid length. [ 1134.497295][ T6239] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1134.561577][ T6239] (NULL device *): queue 0 connect admin queue failed (-111). [ 1134.607935][ T6239] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1134.615829][ T6239] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1134.854659][T13961] jffs2: notice: (13961) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1134.986621][ T5849] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1135.196667][ T5849] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1135.229477][ T5849] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 1135.269976][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.296349][ T5849] usb 4-1: Product: syz [ 1135.300595][ T5849] usb 4-1: Manufacturer: syz [ 1135.305500][ T5849] usb 4-1: SerialNumber: syz [ 1135.706663][T13969] Invalid ELF header magic: != ELF [ 1136.703109][ T6239] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1136.792746][ T5849] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1136.800250][ T5849] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1136.823110][ T6239] (NULL device *): queue 0 connect admin queue failed (-111). [ 1136.832886][ T5849] usb 4-1: USB disconnect, device number 33 [ 1136.859800][ T6239] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1136.896808][ T6239] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1136.943759][T13098] udevd[13098]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1137.446396][ T5849] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1137.636369][ T5849] usb 2-1: Using ep0 maxpacket: 8 [ 1137.658666][ T5849] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1137.676356][ T5849] usb 2-1: config 179 has no interface number 0 [ 1137.686903][ T5849] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1137.706328][ T5849] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1137.736311][ T5849] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1137.756463][ T5849] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1137.776357][ T5849] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1137.796397][ T5849] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1137.825986][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.857156][T13976] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1137.903884][T13982] loop3: detected capacity change from 0 to 32768 [ 1137.977561][T13982] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1138.243457][ T5849] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input32 [ 1138.264718][T13982] XFS (loop3): Ending clean mount [ 1138.312002][T13982] XFS (loop3): Quotacheck needed: Please wait. [ 1138.466894][T13982] XFS (loop3): Quotacheck: Done. [ 1138.578787][T11010] usb 2-1: USB disconnect, device number 36 [ 1138.578819][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1138.593497][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1138.604215][T11010] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1138.792198][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1138.886502][ T5845] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1138.946615][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1138.961838][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1138.970756][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1138.978658][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1139.079881][ T5845] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1139.091271][ T5845] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1139.101543][ T5845] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1139.110765][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.123587][T13995] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1139.141631][ T5845] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1139.379519][ T5845] usb 3-1: USB disconnect, device number 26 [ 1140.024577][T13999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2415'. [ 1140.965028][T14033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2428'. [ 1141.022978][T11545] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1141.046004][T11545] (NULL device *): queue 0 connect admin queue failed (-111). [ 1141.115817][T14040] Invalid ELF header magic: != ELF [ 1141.425800][T11545] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1141.736178][T11545] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1143.496428][ T8579] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1143.688746][ T8579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.708774][ T8579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.739899][ T8579] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1143.761380][ T8579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.789991][ T8579] usb 3-1: config 0 descriptor?? [ 1143.816888][T11545] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1143.854253][T11545] (NULL device *): queue 0 connect admin queue failed (-111). [ 1143.870337][T11545] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1143.887169][T11545] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1144.649183][ T8579] hid-led: probe of 0003:27B8:01ED.0014 failed with error -71 [ 1144.667412][ T8579] usb 3-1: USB disconnect, device number 27 [ 1144.812095][T14091] loop3: detected capacity change from 0 to 256 [ 1145.148890][T14096] loop3: detected capacity change from 0 to 4096 [ 1145.162610][T14096] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1145.209443][T14096] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1145.224684][T14096] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1145.592606][T14104] loop3: detected capacity change from 0 to 256 [ 1145.885952][T14112] loop3: detected capacity change from 0 to 512 [ 1145.898028][T11545] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1145.940702][T11545] (NULL device *): queue 0 connect admin queue failed (-111). [ 1145.966085][T11545] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1145.985658][T11545] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1146.094729][T14112] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1146.112148][T14112] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.2462: inode has both inline data and extents flags [ 1146.127267][T14112] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.2462: couldn't read orphan inode 15 (err -117) [ 1146.151229][T14112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.419578][T14112] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1146.444433][ T28] audit: type=1800 audit(1787917895.889:80): pid=14112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2462" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1146.543941][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.666768][ T5849] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1146.689046][T14146] loop3: detected capacity change from 0 to 512 [ 1146.700650][T14146] EXT4-fs: Ignoring removed oldalloc option [ 1146.721227][T14146] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1146.763714][T14146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.780419][T14146] ext4 filesystem being mounted at /557/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.797599][ T8] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1146.845055][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.881816][ T5849] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1146.911909][ T5849] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.939282][ T5849] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1146.960560][ T5849] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1146.972304][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1146.982094][ T5849] usb 3-1: Product: syz [ 1146.989707][ T5849] usb 3-1: Manufacturer: syz [ 1146.996411][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1147.003992][ T8] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1147.016887][ T8] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1147.029339][ T5849] usb 3-1: Found UVC 1.00 device syz (8086:0ad2) [ 1147.036921][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1147.050287][ T8] usb 2-1: config 1 has no interface number 0 [ 1147.057501][ T8] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1147.076807][ T8] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1147.091691][ T8] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1147.101584][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.130194][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1147.359413][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1147.439461][T14158] loop3: detected capacity change from 0 to 512 [ 1147.451816][ T5849] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1147.471422][ T5849] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -32 (exp. 26). [ 1147.485983][ T5849] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 1147.547110][ T5849] usb 3-1: USB disconnect, device number 28 [ 1147.888060][ T5849] usb 2-1: USB disconnect, device number 37 [ 1147.907762][ T5849] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1148.056797][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1148.085250][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1148.094100][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1148.116927][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1148.456796][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1148.566633][T14187] loop3: detected capacity change from 0 to 8192 [ 1148.668705][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1148.687712][ T8] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1148.712297][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1148.732183][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.746775][ T8] usb 3-1: Product: syz [ 1148.751004][ T8] usb 3-1: Manufacturer: syz [ 1148.755722][ T8] usb 3-1: SerialNumber: syz [ 1148.986392][T11010] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1149.004224][ T8] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1149.181456][T11010] usb 4-1: not running at top speed; connect to a high speed hub [ 1149.190601][T11010] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.201966][T11010] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1149.204959][ T8] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1149.211221][T11010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.224666][ T8] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1149.248005][T11010] usb 4-1: Found UVC 1.00 device (046d:0825) [ 1149.439111][T14191] block device autoloading is deprecated and will be removed. [ 1149.448987][T14191] md: loop0 has zero or unknown size, marking faulty! [ 1149.621556][ T8] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1149.677431][ T8] usb 3-1: USB disconnect, device number 29 [ 1149.678156][T11010] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1149.716350][T11010] uvcvideo 4-1:1.1: No frame descriptor found for the default format. [ 1149.732616][T13098] udevd[13098]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1149.745430][T11010] uvcvideo 4-1:1.1: Failed to initialize the device (-22). [ 1149.959762][T11010] usb 4-1: USB disconnect, device number 34 [ 1150.136665][ T11] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1150.149755][ T11] (NULL device *): queue 0 connect admin queue failed (-111). [ 1150.157444][ T11] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1150.165190][ T11] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1150.226519][ T5845] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1150.411330][ T5845] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1150.420820][ T5845] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.436426][ T5845] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1150.452862][ T5845] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1150.462868][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1150.471461][ T5845] usb 2-1: Product: syz [ 1150.475761][ T5845] usb 2-1: Manufacturer: syz [ 1150.494687][ T5845] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 1150.950201][ T5845] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1150.974863][ T5845] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -32 (exp. 26). [ 1150.993629][ T5845] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 1151.023757][ T5845] usb 2-1: USB disconnect, device number 38 [ 1152.112072][T14238] loop3: detected capacity change from 0 to 512 [ 1152.158050][T14238] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1152.216372][ T49] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1152.269518][ T49] (NULL device *): queue 0 connect admin queue failed (-111). [ 1152.280281][ T49] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1152.317502][ T49] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1152.878129][T14236] loop0: detected capacity change from 0 to 32768 [ 1153.072459][T14244] dvmrp8: entered allmulticast mode [ 1153.133648][T14236] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1153.227425][T14248] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2515'. [ 1153.322637][T14236] (syz.0.2511,14236,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 1153.563807][T14256] loop3: detected capacity change from 0 to 1024 [ 1153.589416][ T5782] ocfs2: Unmounting device (7,0) on (node local) [ 1154.081705][T14261] loop0: detected capacity change from 0 to 256 [ 1154.387587][ T4805] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1154.427756][ T4805] (NULL device *): queue 0 connect admin queue failed (-111). [ 1154.456736][ T4805] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1154.468117][ T4805] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1155.885297][T14281] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1155.910970][T14281] bond2 (unregistering): Released all slaves [ 1156.029702][T14263] loop3: detected capacity change from 0 to 32768 [ 1156.070018][T14263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2522 (14263) [ 1156.140659][T14263] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1156.186076][T14263] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1156.208633][T14263] BTRFS info (device loop3): using free space tree [ 1157.706844][T14263] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1157.726736][T14263] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1157.774891][ T11] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1157.787395][T14263] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1157.841409][T14289] 9pnet_fd: p9_fd_create_tcp (14289): problem connecting socket to 127.0.0.1 [ 1157.867792][ T11] (NULL device *): queue 0 connect admin queue failed (-111). [ 1157.906702][ T11] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1157.914526][ T11] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1157.951139][T14263] BTRFS error (device loop3): open_ctree failed: -12 [ 1159.977797][T11545] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1160.007878][T11545] (NULL device *): queue 0 connect admin queue failed (-111). [ 1160.015446][T11545] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1160.060400][T11545] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1160.477263][T14331] netlink: 'syz.3.2541': attribute type 2 has an invalid length. [ 1160.658008][T14333] md: loop0 has zero or unknown size, marking faulty! [ 1161.209719][T14326] loop0: detected capacity change from 0 to 40427 [ 1161.241803][T14326] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1161.266895][T14326] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1161.295201][T14349] vivid-006: disconnect [ 1161.309740][T14326] F2FS-fs (loop0): invalid crc value [ 1161.323585][T14348] vivid-006: reconnect [ 1161.551512][T14326] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1161.561739][T14326] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1161.688527][ T5782] syz-executor: attempt to access beyond end of device [ 1161.688527][ T5782] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1161.740371][T14361] batman_adv: batadv0: Adding interface: ipvlan2 [ 1161.747421][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1161.766911][T14361] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.805310][T14361] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 1161.888459][T14366] md: could not open device unknown-block(7,0). [ 1162.031786][T14368] loop3: detected capacity change from 0 to 256 [ 1162.137871][ T11] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1162.170874][ T11] (NULL device *): queue 0 connect admin queue failed (-111). [ 1162.186940][ T11] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1162.226403][ T11] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1162.576558][ T2183] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1162.654362][T14387] loop0: detected capacity change from 0 to 256 [ 1162.702644][T14387] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1f3a413c, utbl_chksum : 0xe619d30d) [ 1162.736568][ T2183] usb 2-1: device descriptor read/64, error -71 [ 1162.787850][ T8579] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1162.906626][T14389] md: could not open device unknown-block(0,0). [ 1162.913474][T14389] md: md_import_device returned -6 [ 1162.986334][ T8579] usb 3-1: Using ep0 maxpacket: 16 [ 1162.998343][ T8579] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.022212][ T2183] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1163.031073][ T8579] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.048009][ T8579] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1163.061576][ T8579] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1163.068916][ T8579] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1163.078499][ T8579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.105250][ T8579] usb 3-1: config 0 descriptor?? [ 1163.197094][ T2183] usb 2-1: device descriptor read/64, error -71 [ 1163.249170][T14401] syz.3.2569 uses obsolete (PF_INET,SOCK_PACKET) [ 1163.341979][ T2183] usb usb2-port1: attempt power cycle [ 1163.552517][ T8579] zeroplus 0003:0C12:0005.0015: unknown main item tag 0x7 [ 1163.573339][ T8579] zeroplus 0003:0C12:0005.0015: unbalanced collection at end of report description [ 1163.585600][ T8579] zeroplus 0003:0C12:0005.0015: parse failed [ 1163.592194][ T8579] zeroplus: probe of 0003:0C12:0005.0015 failed with error -22 [ 1163.665610][T14409] loop5: detected capacity change from 0 to 7 [ 1163.682405][T14409] Dev loop5: unable to read RDB block 7 [ 1163.689656][T14409] loop5: unable to read partition table [ 1163.696831][T14409] loop5: partition table beyond EOD, truncated [ 1163.703510][T14409] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1163.917402][ T2183] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1163.923406][ T5845] usb 3-1: USB disconnect, device number 30 [ 1163.948848][ T2183] usb 2-1: device descriptor read/8, error -71 [ 1164.052287][T14415] Invalid ELF header magic: != ELF [ 1164.229004][ T2183] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1164.296767][ T6239] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1164.349513][ T2183] usb 2-1: device descriptor read/8, error -71 [ 1164.489747][ T6239] (NULL device *): queue 0 connect admin queue failed (-111). [ 1164.636450][ T2183] usb usb2-port1: unable to enumerate USB device [ 1164.667304][ T6239] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1164.705745][ T6239] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1164.834079][T14419] jffs2: notice: (14419) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1166.286312][T13388] Bluetooth: hci2: command 0x0406 tx timeout [ 1166.780033][ T11] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1166.820295][ T11] (NULL device *): queue 0 connect admin queue failed (-111). [ 1166.878176][ T11] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1166.906374][ T11] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1167.396372][T14449] Invalid ELF header magic: != ELF [ 1168.127364][T14457] loop0: detected capacity change from 0 to 512 [ 1168.182519][T14457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1168.520144][T14457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1168.571702][T14457] ext4 filesystem being mounted at /690/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1168.606404][T14463] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 1168.646893][T14463] EXT4-fs (loop0): Remounting filesystem read-only [ 1168.716027][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.892416][T14474] loop3: detected capacity change from 0 to 256 [ 1168.900878][T14474] exfat: Deprecated parameter 'namecase' [ 1168.936380][ T4805] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1168.977194][T14474] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 1168.992099][ T4805] (NULL device *): queue 0 connect admin queue failed (-111). [ 1169.003267][ T4805] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1169.026450][ T4805] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1169.826347][T14493] Invalid ELF header magic: != ELF [ 1170.510027][ T28] audit: type=1800 audit(1787917919.939:81): pid=14496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2604" name="idProduct" dev="configfs" ino=38809 res=0 errno=0 [ 1170.536503][T13388] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1171.101955][ T3546] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1171.150934][ T3546] (NULL device *): queue 0 connect admin queue failed (-111). [ 1171.169828][ T3546] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1171.194207][ T3546] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1171.291268][T14523] loop5: detected capacity change from 0 to 7 [ 1171.312389][T14523] Dev loop5: unable to read RDB block 7 [ 1171.336998][T14523] loop5: unable to read partition table [ 1171.342989][T14523] loop5: partition table beyond EOD, truncated [ 1171.376771][T14523] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1171.790722][T14540] FAULT_INJECTION: forcing a failure. [ 1171.790722][T14540] name failslab, interval 1, probability 0, space 0, times 1 [ 1171.808573][T14540] CPU: 0 PID: 14540 Comm: syz.2.2624 Not tainted syzkaller #0 [ 1171.816209][T14540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1171.826313][T14540] Call Trace: [ 1171.829717][T14540] [ 1171.832695][T14540] dump_stack_lvl+0x18c/0x250 [ 1171.837401][T14540] ? show_regs_print_info+0x20/0x20 [ 1171.842701][T14540] ? load_image+0x420/0x420 [ 1171.847239][T14540] ? __might_sleep+0xe0/0xe0 [ 1171.851923][T14540] ? __lock_acquire+0x7d80/0x7d80 [ 1171.856970][T14540] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1171.862948][T14540] should_fail_ex+0x394/0x4c0 [ 1171.867731][T14540] should_failslab+0x9/0x20 [ 1171.872384][T14540] slab_pre_alloc_hook+0x59/0x300 [ 1171.877477][T14540] ? pcpu_alloc+0x11e7/0x1880 [ 1171.882195][T14540] ? percpu_ref_init+0xc3/0x340 [ 1171.887127][T14540] __kmem_cache_alloc_node+0x53/0x250 [ 1171.892552][T14540] ? percpu_ref_init+0xc3/0x340 [ 1171.897448][T14540] ? percpu_ref_put+0x230/0x230 [ 1171.902424][T14540] kmalloc_trace+0x2a/0xe0 [ 1171.906860][T14540] percpu_ref_init+0xc3/0x340 [ 1171.911594][T14540] ioctx_alloc+0x20e/0x770 [ 1171.916038][T14540] __se_sys_io_setup+0x7b/0x190 [ 1171.920892][T14540] do_syscall_64+0x55/0xb0 [ 1171.925356][T14540] ? clear_bhb_loop+0x40/0x90 [ 1171.930079][T14540] ? clear_bhb_loop+0x40/0x90 [ 1171.934813][T14540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1171.940759][T14540] RIP: 0033:0x7ff8c979e159 [ 1171.945223][T14540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.964869][T14540] RSP: 002b:00007ff8ca69b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1171.973294][T14540] RAX: ffffffffffffffda RBX: 00007ff8c9a25fa0 RCX: 00007ff8c979e159 [ 1171.981454][T14540] RDX: 0000000000000000 RSI: 0000200000001440 RDI: 000000000000007f [ 1171.989605][T14540] RBP: 00007ff8c9835024 R08: 0000000000000000 R09: 0000000000000000 [ 1171.997587][T14540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.005760][T14540] R13: 00007ff8c9a26038 R14: 00007ff8c9a25fa0 R15: 00007ffce7fd41d8 [ 1172.013850][T14540] [ 1172.912839][T14581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2640'. [ 1173.011382][T14587] can0: slcan on ptm0. [ 1174.588413][ T4805] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1174.630881][ T4805] (NULL device *): queue 0 connect admin queue failed (-111). [ 1174.656462][ T4805] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1174.682483][ T4805] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1174.827644][T14586] can0 (unregistered): slcan off ptm0. [ 1176.507423][T14620] infiniband syz2: set active [ 1176.545778][T14620] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1176.577125][T14620] geneve2: left promiscuous mode [ 1176.696470][ T4805] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1176.731579][ T4805] (NULL device *): queue 0 connect admin queue failed (-111). [ 1176.756421][ T4805] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1176.764233][ T4805] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1177.787453][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2657'. [ 1177.916714][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.923273][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.063458][T14656] FAULT_INJECTION: forcing a failure. [ 1178.063458][T14656] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.096359][T14656] CPU: 0 PID: 14656 Comm: syz.0.2660 Not tainted syzkaller #0 [ 1178.104016][T14656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1178.114118][T14656] Call Trace: [ 1178.117442][T14656] [ 1178.120411][T14656] dump_stack_lvl+0x18c/0x250 [ 1178.125137][T14656] ? show_regs_print_info+0x20/0x20 [ 1178.130389][T14656] ? load_image+0x420/0x420 [ 1178.134949][T14656] ? __lock_acquire+0x7d80/0x7d80 [ 1178.140033][T14656] should_fail_ex+0x394/0x4c0 [ 1178.144785][T14656] should_failslab+0x9/0x20 [ 1178.149354][T14656] slab_pre_alloc_hook+0x59/0x300 [ 1178.154529][T14656] ? __vmalloc_node_range+0x598/0x1320 [ 1178.160044][T14656] ? __vmalloc_node_range+0x598/0x1320 [ 1178.165731][T14656] __kmem_cache_alloc_node+0x53/0x250 [ 1178.171336][T14656] ? __vmalloc_node_range+0x598/0x1320 [ 1178.176850][T14656] __kmalloc_node+0xa6/0x240 [ 1178.181499][T14656] __vmalloc_node_range+0x598/0x1320 [ 1178.187009][T14656] ? mark_lock+0x94/0x320 [ 1178.191381][T14656] ? aa_get_newest_label+0xfd/0x5c0 [ 1178.196633][T14656] ? free_vm_area+0x50/0x50 [ 1178.201156][T14656] ? end_current_label_crit_section+0x170/0x170 [ 1178.207427][T14656] ? verify_lock_unused+0x140/0x140 [ 1178.212639][T14656] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1178.218305][T14656] __vmalloc+0x7a/0x90 [ 1178.222396][T14656] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1178.228043][T14656] bpf_prog_alloc_no_stats+0x46/0x430 [ 1178.233615][T14656] bpf_prog_alloc+0x3d/0x1a0 [ 1178.238237][T14656] bpf_prog_load+0x6b2/0x1610 [ 1178.242938][T14656] ? map_freeze+0x420/0x420 [ 1178.247460][T14656] ? __might_fault+0xaa/0x120 [ 1178.252155][T14656] ? __lock_acquire+0x7d80/0x7d80 [ 1178.257195][T14656] ? file_end_write+0x159/0x250 [ 1178.262065][T14656] ? __might_fault+0xaa/0x120 [ 1178.266755][T14656] ? __might_fault+0xc6/0x120 [ 1178.271444][T14656] ? __might_fault+0xaa/0x120 [ 1178.276138][T14656] ? bpf_lsm_bpf+0x9/0x10 [ 1178.280511][T14656] ? security_bpf+0x7e/0xa0 [ 1178.285045][T14656] __sys_bpf+0x5ba/0x890 [ 1178.289400][T14656] ? bpf_link_show_fdinfo+0x390/0x390 [ 1178.294805][T14656] ? lock_chain_count+0x20/0x20 [ 1178.299683][T14656] __x64_sys_bpf+0x7c/0x90 [ 1178.304125][T14656] do_syscall_64+0x55/0xb0 [ 1178.308647][T14656] ? clear_bhb_loop+0x40/0x90 [ 1178.313344][T14656] ? clear_bhb_loop+0x40/0x90 [ 1178.318046][T14656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1178.323957][T14656] RIP: 0033:0x7fcf1fb9e159 [ 1178.328390][T14656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.348014][T14656] RSP: 002b:00007fcf209cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1178.356462][T14656] RAX: ffffffffffffffda RBX: 00007fcf1fe25fa0 RCX: 00007fcf1fb9e159 [ 1178.364501][T14656] RDX: 0000000000000094 RSI: 00002000000010c0 RDI: 0000000000000005 [ 1178.372507][T14656] RBP: 00007fcf1fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 1178.380492][T14656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1178.388648][T14656] R13: 00007fcf1fe26038 R14: 00007fcf1fe25fa0 R15: 00007ffe19a0cd08 [ 1178.396925][T14656] [ 1178.441319][T14656] syz.0.2660: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1178.498937][T14656] CPU: 1 PID: 14656 Comm: syz.0.2660 Not tainted syzkaller #0 [ 1178.506512][T14656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1178.516711][T14656] Call Trace: [ 1178.520035][T14656] [ 1178.523008][T14656] dump_stack_lvl+0x18c/0x250 [ 1178.527757][T14656] ? show_regs_print_info+0x20/0x20 [ 1178.533050][T14656] ? load_image+0x420/0x420 [ 1178.537603][T14656] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1178.544333][T14656] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1178.550887][T14656] warn_alloc+0x246/0x340 [ 1178.555265][T14656] ? zone_watermark_ok_safe+0x230/0x230 [ 1178.560863][T14656] ? __vmalloc_node_range+0x598/0x1320 [ 1178.566661][T14656] ? __vmalloc_node_range+0x598/0x1320 [ 1178.572274][T14656] ? rcu_is_watching+0x15/0xb0 [ 1178.577206][T14656] ? __vmalloc_node_range+0x598/0x1320 [ 1178.582759][T14656] ? __kmalloc_node+0xe4/0x240 [ 1178.587581][T14656] __vmalloc_node_range+0x661/0x1320 [ 1178.592926][T14656] ? mark_lock+0x94/0x320 [ 1178.597335][T14656] ? aa_get_newest_label+0xfd/0x5c0 [ 1178.602572][T14656] ? free_vm_area+0x50/0x50 [ 1178.607133][T14656] ? end_current_label_crit_section+0x170/0x170 [ 1178.613427][T14656] ? verify_lock_unused+0x140/0x140 [ 1178.618687][T14656] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1178.624278][T14656] __vmalloc+0x7a/0x90 [ 1178.628396][T14656] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1178.634068][T14656] bpf_prog_alloc_no_stats+0x46/0x430 [ 1178.639574][T14656] bpf_prog_alloc+0x3d/0x1a0 [ 1178.644228][T14656] bpf_prog_load+0x6b2/0x1610 [ 1178.648973][T14656] ? map_freeze+0x420/0x420 [ 1178.653529][T14656] ? __might_fault+0xaa/0x120 [ 1178.658251][T14656] ? __lock_acquire+0x7d80/0x7d80 [ 1178.663413][T14656] ? file_end_write+0x159/0x250 [ 1178.668325][T14656] ? __might_fault+0xaa/0x120 [ 1178.673062][T14656] ? __might_fault+0xc6/0x120 [ 1178.677972][T14656] ? __might_fault+0xaa/0x120 [ 1178.682730][T14656] ? bpf_lsm_bpf+0x9/0x10 [ 1178.687199][T14656] ? security_bpf+0x7e/0xa0 [ 1178.691773][T14656] __sys_bpf+0x5ba/0x890 [ 1178.696078][T14656] ? bpf_link_show_fdinfo+0x390/0x390 [ 1178.701623][T14656] ? lock_chain_count+0x20/0x20 [ 1178.706537][T14656] __x64_sys_bpf+0x7c/0x90 [ 1178.711015][T14656] do_syscall_64+0x55/0xb0 [ 1178.715479][T14656] ? clear_bhb_loop+0x40/0x90 [ 1178.720290][T14656] ? clear_bhb_loop+0x40/0x90 [ 1178.725022][T14656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1178.730977][T14656] RIP: 0033:0x7fcf1fb9e159 [ 1178.735430][T14656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.755100][T14656] RSP: 002b:00007fcf209cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1178.763745][T14656] RAX: ffffffffffffffda RBX: 00007fcf1fe25fa0 RCX: 00007fcf1fb9e159 [ 1178.771865][T14656] RDX: 0000000000000094 RSI: 00002000000010c0 RDI: 0000000000000005 [ 1178.779988][T14656] RBP: 00007fcf1fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 1178.781128][T14668] Invalid argument reading file caps for ./file0 [ 1178.788168][T14656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1178.788188][T14656] R13: 00007fcf1fe26038 R14: 00007fcf1fe25fa0 R15: 00007ffe19a0cd08 [ 1178.788220][T14656] [ 1178.857865][T11545] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1178.870725][T11545] (NULL device *): queue 0 connect admin queue failed (-111). [ 1178.878586][T11545] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1178.886518][T11545] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1178.916344][T14656] Mem-Info: [ 1178.919562][T14656] active_anon:9146 inactive_anon:0 isolated_anon:0 [ 1178.919562][T14656] active_file:10651 inactive_file:48344 isolated_file:0 [ 1178.919562][T14656] unevictable:768 dirty:201 writeback:0 [ 1178.919562][T14656] slab_reclaimable:11495 slab_unreclaimable:95687 [ 1178.919562][T14656] mapped:25088 shmem:4456 pagetables:766 [ 1178.919562][T14656] sec_pagetables:0 bounce:0 [ 1178.919562][T14656] kernel_misc_reclaimable:0 [ 1178.919562][T14656] free:1336755 free_pcp:5724 free_cma:0 [ 1179.032112][T14656] Node 0 active_anon:36384kB inactive_anon:0kB active_file:42604kB inactive_file:193176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100352kB dirty:804kB writeback:0kB shmem:16288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10816kB pagetables:2864kB sec_pagetables:0kB all_unreclaimable? no [ 1179.092175][T14656] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1179.128699][T14656] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1179.158030][T14656] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1179.163877][T14656] Node 0 DMA32 free:1428788kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:36544kB inactive_anon:0kB active_file:42604kB inactive_file:192356kB unevictable:1536kB writepending:804kB present:3129332kB managed:2586824kB mlocked:0kB bounce:0kB free_pcp:11716kB local_pcp:1820kB free_cma:0kB [ 1179.236472][T14656] lowmem_reserve[]: 0 0 0 0 0 [ 1179.241283][T14656] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1179.305720][T14656] lowmem_reserve[]: 0 0 0 0 0 [ 1179.313818][T14656] Node 1 Normal free:3902376kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:11872kB local_pcp:7712kB free_cma:0kB [ 1179.348537][T14656] lowmem_reserve[]: 0 0 0 0 0 [ 1179.353353][T14656] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1179.375684][T14683] can0: slcan on ptm0. [ 1179.395941][T14656] Node 0 DMA32: 1739*4kB (UME) 1401*8kB (UME) 1164*16kB (UME) 1230*32kB (UME) 641*64kB (UME) 253*128kB (UME) 109*256kB (UME) 79*512kB (UM) 43*1024kB (UME) 14*2048kB (ME) 278*4096kB (UM) = 1429300kB [ 1179.418032][T14656] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1179.465082][T14656] Node 1 Normal: 264*4kB (UME) 47*8kB (UME) 31*16kB (UME) 251*32kB (UME) 65*64kB (UME) 13*128kB (UME) 2*256kB (ME) 0*512kB 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3902376kB [ 1179.483931][T14656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1179.516430][T14656] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1179.525911][T14656] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1179.532918][T14687] loop3: detected capacity change from 0 to 512 [ 1179.539759][T14682] can0 (unregistered): slcan off ptm0. [ 1179.563823][T14687] ext4: Unknown parameter 'obj_role' [ 1179.592319][T14656] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1179.648996][T14656] 63436 total pagecache pages [ 1179.653766][T14656] 0 pages in swap cache [ 1179.683746][T14656] Free swap = 124712kB [ 1179.690106][T14656] Total swap = 124996kB [ 1179.694339][T14656] 2097051 pages RAM [ 1179.734457][T14656] 0 pages HighMem/MovableOnly [ 1179.739847][T14656] 416959 pages reserved [ 1179.744069][T14656] 0 pages cma reserved [ 1179.992466][T14702] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2678'. [ 1180.122442][T14706] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2680'. [ 1180.767270][T14703] loop0: detected capacity change from 0 to 32768 [ 1180.823769][T14703] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1180.938916][ T3546] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1181.034697][ T3546] (NULL device *): queue 0 connect admin queue failed (-111). [ 1181.067523][ T3546] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1181.075338][ T3546] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1181.098995][T14703] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1181.163306][T14703] XFS (loop0): Starting recovery (logdev: internal) [ 1181.219302][T14703] XFS (loop0): Ending recovery (logdev: internal) [ 1181.259760][ T28] audit: type=1800 audit(1787917930.709:82): pid=14703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2677" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 1181.297810][ T2183] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1181.342630][T14755] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x43f/0x660, xfs_bnobt block 0x8 [ 1181.380265][T14755] XFS (loop0): Unmount and run xfs_repair [ 1181.411941][T14703] XFS (loop0): Internal error i != 1 at line 527 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x5e7/0x820 [ 1181.456130][T14703] CPU: 1 PID: 14703 Comm: syz.0.2677 Not tainted syzkaller #0 [ 1181.463720][T14703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1181.474009][T14703] Call Trace: [ 1181.477358][T14703] [ 1181.480339][T14703] dump_stack_lvl+0x18c/0x250 [ 1181.485053][T14703] ? __xfs_printk+0x90/0x90 [ 1181.489608][T14703] ? show_regs_print_info+0x20/0x20 [ 1181.494851][T14703] xfs_corruption_error+0x122/0x170 [ 1181.500086][T14703] ? xfs_alloc_fixup_trees+0x5e7/0x820 [ 1181.505578][T14703] xfs_alloc_fixup_trees+0x64e/0x820 [ 1181.510982][T14703] ? xfs_alloc_fixup_trees+0x5e7/0x820 [ 1181.516815][T14703] ? xfs_alloc_fix_len+0x280/0x280 [ 1181.522124][T14703] ? xfs_alloc_ag_vextent_lastblock+0x432/0x700 [ 1181.528569][T14703] xfs_alloc_cur_finish+0xd5/0x470 [ 1181.533748][T14703] ? xfs_allocbt_init_cursor+0x70/0x110 [ 1181.539318][T14703] xfs_alloc_ag_vextent_near+0xd69/0x1220 [ 1181.545056][T14703] ? __xfs_free_extent_later+0x650/0x650 [ 1181.550733][T14703] ? xfs_alloc_vextent_near_bno+0x540/0x540 [ 1181.556735][T14703] ? xfs_perag_grab+0x25/0x400 [ 1181.561539][T14703] ? xfs_perag_grab+0x25/0x400 [ 1181.566393][T14703] ? xfs_alloc_vextent_prepare_ag+0x19d/0x5d0 [ 1181.572526][T14703] xfs_alloc_vextent_iterate_ags+0x607/0x8e0 [ 1181.578559][T14703] xfs_alloc_vextent_start_ag+0x370/0x810 [ 1181.584395][T14703] xfs_bmapi_allocate+0x1446/0x2b60 [ 1181.589654][T14703] ? xfs_bmapi_write+0x1170/0x1170 [ 1181.594890][T14703] ? xfs_iext_find_level+0x445/0x490 [ 1181.600230][T14703] ? xfs_iext_lookup_extent+0x41f/0x7f0 [ 1181.605986][T14703] ? xfs_iext_prev+0x34a/0x360 [ 1181.610778][T14703] ? xfs_iext_get_extent+0x1b9/0x370 [ 1181.616181][T14703] xfs_bmapi_write+0x796/0x1170 [ 1181.621094][T14703] ? xfs_bmapi_minleft+0x200/0x200 [ 1181.626351][T14703] ? xfs_trans_alloc_inode+0x195/0x340 [ 1181.631895][T14703] xfs_iomap_write_direct+0x3ba/0x680 [ 1181.637319][T14703] ? xfs_eof_alignment+0x2c0/0x2c0 [ 1181.642460][T14703] ? down_read_nested+0x1ae/0x2e0 [ 1181.647507][T14703] ? xfs_direct_write_iomap_begin+0xbd8/0x1060 [ 1181.653716][T14703] ? xfs_direct_write_iomap_begin+0xbd8/0x1060 [ 1181.659893][T14703] ? xfs_iunlock+0x1c0/0x300 [ 1181.664505][T14703] xfs_direct_write_iomap_begin+0xbff/0x1060 [ 1181.670503][T14703] ? xfs_file_dio_write_aligned+0x148/0x1d0 [ 1181.676410][T14703] ? xfs_file_write_iter+0x4fe/0x610 [ 1181.681722][T14703] ? do_iter_write+0x747/0xc50 [ 1181.686543][T14703] ? xfs_iomap_write_unwritten+0xa50/0xa50 [ 1181.692407][T14703] ? filemap_write_and_wait_range+0x1a5/0x230 [ 1181.698506][T14703] ? xas_next_entry+0x3e0/0x3e0 [ 1181.703406][T14703] ? xfs_iomap_write_unwritten+0xa50/0xa50 [ 1181.709235][T14703] iomap_iter+0x65b/0xe70 [ 1181.713594][T14703] __iomap_dio_rw+0xc60/0x1d00 [ 1181.718435][T14703] ? xfs_trans_log_inode+0x11f/0x190 [ 1181.723736][T14703] ? iomap_dio_bio_end_io+0x630/0x630 [ 1181.729145][T14703] ? xfs_file_write_checks+0x90b/0xad0 [ 1181.734649][T14703] ? __lock_acquire+0x7d80/0x7d80 [ 1181.739905][T14703] ? xfs_file_buffered_write+0x940/0x940 [ 1181.745570][T14703] iomap_dio_rw+0x45/0xa0 [ 1181.750018][T14703] xfs_file_dio_write_aligned+0x148/0x1d0 [ 1181.755844][T14703] ? direct_splice_actor+0xe8/0x130 [ 1181.761067][T14703] ? splice_direct_to_actor+0x30b/0x8e0 [ 1181.766743][T14703] ? do_splice_direct+0x1d5/0x2f0 [ 1181.772045][T14703] ? xfs_file_dio_write_unaligned+0x670/0x670 [ 1181.778136][T14703] ? end_current_label_crit_section+0x149/0x170 [ 1181.784514][T14703] xfs_file_write_iter+0x4fe/0x610 [ 1181.789652][T14703] do_iter_write+0x747/0xc50 [ 1181.794370][T14703] ? vfs_iter_write+0xa0/0xa0 [ 1181.799075][T14703] ? __asan_memset+0x22/0x40 [ 1181.803721][T14703] ? iov_iter_bvec+0xd4/0x1b0 [ 1181.808429][T14703] ? vfs_iter_write+0x6e/0xa0 [ 1181.813141][T14703] iter_file_splice_write+0x6b6/0xcf0 [ 1181.818546][T14703] ? splice_from_pipe+0x180/0x180 [ 1181.823591][T14703] ? splice_shrink_spd+0xc0/0xc0 [ 1181.828702][T14703] ? common_file_perm+0x198/0x1f0 [ 1181.833846][T14703] ? splice_from_pipe+0x180/0x180 [ 1181.838886][T14703] direct_splice_actor+0xe8/0x130 [ 1181.844024][T14703] splice_direct_to_actor+0x30b/0x8e0 [ 1181.849522][T14703] ? direct_file_splice_eof+0xb0/0xb0 [ 1181.854921][T14703] ? warn_unsupported+0xc0/0xc0 [ 1181.859817][T14703] ? fsnotify_perm+0x5d/0x5e0 [ 1181.864531][T14703] ? security_file_permission+0x79/0xa0 [ 1181.870099][T14703] do_splice_direct+0x1d5/0x2f0 [ 1181.874999][T14703] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1181.880562][T14703] ? rcu_read_lock_any_held+0xb4/0x140 [ 1181.886123][T14703] ? do_splice_direct+0x2f0/0x2f0 [ 1181.891201][T14703] do_sendfile+0x52b/0xe80 [ 1181.895642][T14703] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1181.901738][T14703] ? do_pwritev+0x3a0/0x3a0 [ 1181.906284][T14703] __se_sys_sendfile64+0x145/0x1a0 [ 1181.911435][T14703] ? lock_chain_count+0x20/0x20 [ 1181.916308][T14703] ? __x64_sys_sendfile64+0xb0/0xb0 [ 1181.921667][T14703] ? lockdep_hardirqs_on+0x98/0x150 [ 1181.926918][T14703] do_syscall_64+0x55/0xb0 [ 1181.931367][T14703] ? clear_bhb_loop+0x40/0x90 [ 1181.936070][T14703] ? clear_bhb_loop+0x40/0x90 [ 1181.940770][T14703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1181.946735][T14703] RIP: 0033:0x7fcf1fb9e159 [ 1181.951229][T14703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.970874][T14703] RSP: 002b:00007fcf209cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1181.979333][T14703] RAX: ffffffffffffffda RBX: 00007fcf1fe25fa0 RCX: 00007fcf1fb9e159 [ 1181.987341][T14703] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1181.995586][T14703] RBP: 00007fcf1fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 1182.003577][T14703] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 1182.011563][T14703] R13: 00007fcf1fe26038 R14: 00007fcf1fe25fa0 R15: 00007ffe19a0cd08 [ 1182.019565][T14703] [ 1182.037227][T14703] XFS (loop0): Corruption detected. Unmount and run xfs_repair [ 1183.299064][ T3546] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1183.344288][ T3546] (NULL device *): queue 0 connect admin queue failed (-111). [ 1183.367408][ T3546] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1183.377260][ T2183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.403393][ T5782] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1183.406637][ T2183] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1183.420157][ T3546] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1183.441817][ T2183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.487784][ T2183] usb 3-1: config 0 descriptor?? [ 1183.510185][ T2183] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1183.719866][ T8] usb 3-1: USB disconnect, device number 31 [ 1183.874822][T14767] sit0: left promiscuous mode [ 1183.884533][T14767] syz_tun: left promiscuous mode [ 1183.923501][T14767] hsr0: left promiscuous mode [ 1183.951944][T14767] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 1184.153516][T14769] loop0: detected capacity change from 0 to 1024 [ 1184.538227][T14779] loop3: detected capacity change from 0 to 128 [ 1185.500510][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1185.547014][T14814] bond0: invalid NS target ff00:: specified for addition [ 1185.554535][ T37] (NULL device *): queue 0 connect admin queue failed (-111). [ 1185.574654][T14814] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 1185.583057][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1185.604392][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1187.076905][T14850] loop5: detected capacity change from 0 to 3063 [ 1187.182141][T14833] loop0: detected capacity change from 0 to 32768 [ 1187.190823][T14852] loop5: detected capacity change from 3063 to 5967 [ 1187.211573][T14833] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2718 (14833) [ 1187.282750][T14833] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1187.340120][T14833] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1187.387146][T14833] BTRFS info (device loop0): force clearing of disk cache [ 1187.425568][T14833] BTRFS info (device loop0): enabling auto defrag [ 1187.450695][T14833] BTRFS info (device loop0): max_inline at 0 [ 1187.473800][T14833] BTRFS info (device loop0): enabling disk space caching [ 1187.504508][T14833] BTRFS info (device loop0): disk space caching is enabled [ 1187.657317][ T4805] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1187.700171][ T4805] (NULL device *): queue 0 connect admin queue failed (-111). [ 1187.716892][ T4805] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1187.724692][ T4805] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1187.847234][T14833] BTRFS info (device loop0): enabling ssd optimizations [ 1187.872628][T14833] BTRFS info (device loop0): rebuilding free space tree [ 1188.008949][T14833] BTRFS info (device loop0): disabling free space tree [ 1188.037496][T14833] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1188.062377][T14833] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1188.460102][T11545] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 1188.886367][ T2183] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1188.908658][T14877] loop3: detected capacity change from 0 to 32768 [ 1188.986268][T14877] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1189.092802][T14877] XFS (loop3): Ending clean mount [ 1189.120859][ T2183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1189.160184][ T2183] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1189.170969][ T2183] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1189.184164][ T2183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.228715][ T2183] usb 2-1: probing VID:PID(0424:012C) [ 1189.249229][ T2183] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 1189.270977][ T2183] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1189.291280][ T2183] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 1189.314770][ T2183] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1189.335540][ T2183] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1189.352634][ T5782] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1189.517737][ T5773] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1189.647206][ T2183] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1189.736951][ T4805] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 1189.765235][ T4805] (NULL device *): queue 0 connect admin queue failed (-111). [ 1189.794085][ T4805] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1189.841201][ T4805] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1189.890312][ T2183] usb 2-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 1190.741330][ T2183] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 1190.787911][ T2183] usb 2-1: USB disconnect, device number 43 [ 1190.814475][ T8582] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 1190.904967][ T2183] USB vub300 remote SDIO host controller[0] now disconnected [ 1190.937051][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3414 [ 1190.953978][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 14903, name: syz.0.2736 [ 1190.963131][ C1] preempt_count: 101, expected: 0 [ 1190.968175][ C1] RCU nest depth: 2, expected: 0 [ 1190.973108][ C1] 3 locks held by syz.0.2736/14903: [ 1190.978348][ C1] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: blk_mq_flush_plug_list+0x745/0x1840 [ 1190.988588][ C1] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: folio_memcg_lock+0x81/0x320 [ 1190.998160][ C1] #2: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 1191.008690][ C1] Preemption disabled at: [ 1191.008698][ C1] [<0000000000000000>] 0x0 [ 1191.017644][ C1] CPU: 1 PID: 14903 Comm: syz.0.2736 Not tainted syzkaller #0 [ 1191.025095][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1191.035143][ C1] Call Trace: [ 1191.038422][ C1] [ 1191.041280][ C1] dump_stack_lvl+0x18c/0x250 [ 1191.045958][ C1] ? show_regs_print_info+0x20/0x20 [ 1191.051155][ C1] ? load_image+0x420/0x420 [ 1191.055677][ C1] __might_resched+0x48d/0x5f0 [ 1191.060460][ C1] ? __might_sleep+0xe0/0xe0 [ 1191.065045][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1191.071022][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1191.075862][ C1] ? kasan_set_track+0x5f/0x70 [ 1191.080620][ C1] ? kasan_save_free_info+0x28/0x40 [ 1191.085817][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 1191.091104][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1191.096843][ C1] __flush_work+0x10f/0xac0 [ 1191.101432][ C1] ? flush_work+0x20/0x20 [ 1191.105846][ C1] ? __timer_delete+0x6b/0x290 [ 1191.110617][ C1] ? mark_lock+0x94/0x320 [ 1191.114945][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1191.120927][ C1] ? mod_delayed_work_on+0x1c0/0x1c0 [ 1191.126221][ C1] ? lock_chain_count+0x20/0x20 [ 1191.131092][ C1] ? __cancel_work_timer+0x36e/0x560 [ 1191.136391][ C1] __cancel_work_timer+0x3f8/0x560 [ 1191.141514][ C1] ? cancel_work_sync+0x20/0x20 [ 1191.146372][ C1] ? kobject_put+0x260/0x450 [ 1191.151025][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 1191.156052][ C1] ? kobject_put+0x421/0x450 [ 1191.160646][ C1] mmc_free_host+0x19/0x30 [ 1191.165109][ C1] call_timer_fn+0x189/0x540 [ 1191.169697][ C1] ? kref_get+0x70/0x70 [ 1191.173881][ C1] ? call_timer_fn+0xd2/0x540 [ 1191.178551][ C1] ? __run_timers+0x810/0x810 [ 1191.183231][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1191.188434][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1191.193713][ C1] ? kref_get+0x70/0x70 [ 1191.197869][ C1] __run_timers+0x570/0x810 [ 1191.202375][ C1] ? detach_timer+0x2b0/0x2b0 [ 1191.207051][ C1] ? lock_chain_count+0x20/0x20 [ 1191.211904][ C1] run_timer_softirq+0x67/0xf0 [ 1191.216664][ C1] handle_softirqs+0x27d/0x820 [ 1191.221423][ C1] ? read_tsc+0x9/0x20 [ 1191.225505][ C1] ? ktime_get+0x24b/0x280 [ 1191.229925][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1191.234686][ C1] ? do_softirq+0x1a0/0x1a0 [ 1191.239234][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1191.244524][ C1] __irq_exit_rcu+0xd3/0x190 [ 1191.249106][ C1] ? irq_exit_rcu+0x20/0x20 [ 1191.253605][ C1] irq_exit_rcu+0x9/0x20 [ 1191.257840][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1191.263469][ C1] [ 1191.266398][ C1] [ 1191.269325][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1191.275311][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 1191.281810][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 1b 98 c3 f6 65 8b 05 3c 66 6a 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1191.301508][ C1] RSP: 0018:ffffc9000b83ef20 EFLAGS: 00000206 [ 1191.307587][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: bc266e66bad74600 [ 1191.315901][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 1191.323887][ C1] RBP: ffffc9000b83efb0 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 [ 1191.331867][ C1] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: dffffc0000000000 [ 1191.339842][ C1] R13: 0000000000000001 R14: ffff888148c94390 R15: 1ffff92001707de4 [ 1191.347841][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1191.352696][ C1] ? __xa_clear_mark+0x142/0x180 [ 1191.357644][ C1] ? __wb_writeout_add+0x15a/0x2a0 [ 1191.362756][ C1] __folio_end_writeback+0x405/0xe10 [ 1191.368047][ C1] ? __folio_cancel_dirty+0x590/0x590 [ 1191.373442][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1191.379351][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1191.384216][ C1] folio_end_writeback+0x150/0x690 [ 1191.389439][ C1] ? mark_buffer_write_io_error+0x260/0x260 [ 1191.395370][ C1] end_bio_bh_io_sync+0xb7/0x110 [ 1191.400331][ C1] blk_update_request+0x539/0xe00 [ 1191.405367][ C1] blk_mq_end_request+0x3e/0x70 [ 1191.410225][ C1] null_handle_cmd+0x74e/0x990 [ 1191.415094][ C1] ? null_queue_rq+0x516/0x640 [ 1191.419861][ C1] blk_mq_request_issue_directly+0x46a/0x770 [ 1191.426013][ C1] ? blk_insert_cloned_request+0x6e0/0x6e0 [ 1191.431925][ C1] blk_mq_plug_issue_direct+0x23a/0x550 [ 1191.437773][ C1] ? mark_buffer_write_io_error+0x260/0x260 [ 1191.443777][ C1] ? blk_mq_flush_plug_list+0x745/0x1840 [ 1191.449517][ C1] blk_mq_flush_plug_list+0x912/0x1840 [ 1191.455105][ C1] ? write_cache_pages+0x10f0/0x1290 [ 1191.460439][ C1] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 1191.466685][ C1] ? do_writepages+0x590/0x590 [ 1191.471462][ C1] __blk_flush_plug+0x3e4/0x460 [ 1191.476424][ C1] ? blk_check_plugged+0x250/0x250 [ 1191.481552][ C1] blk_finish_plug+0x5d/0x80 [ 1191.486169][ C1] do_writepages+0x3e7/0x590 [ 1191.490801][ C1] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 1191.496558][ C1] ? __rwlock_init+0x150/0x150 [ 1191.501338][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1191.506549][ C1] filemap_fdatawrite_wbc+0x122/0x180 [ 1191.511943][ C1] filemap_write_and_wait_range+0x14c/0x230 [ 1191.517864][ C1] ? xas_next_entry+0x3e0/0x3e0 [ 1191.523613][ C1] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 1191.530443][ C1] blkdev_put+0xe5/0x7a0 [ 1191.534704][ C1] blkdev_release+0x84/0x90 [ 1191.539303][ C1] ? blkdev_open+0x360/0x360 [ 1191.543896][ C1] __fput+0x221/0x940 [ 1191.547892][ C1] task_work_run+0x1d4/0x260 [ 1191.552532][ C1] ? task_work_cancel+0x220/0x220 [ 1191.557562][ C1] do_exit+0x986/0x2530 [ 1191.561736][ C1] ? put_task_struct+0xc0/0xc0 [ 1191.566520][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1191.572518][ C1] ? get_signal+0x100e/0x1390 [ 1191.577218][ C1] ? lock_chain_count+0x20/0x20 [ 1191.582082][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1191.587127][ C1] do_group_exit+0x22d/0x2f0 [ 1191.591741][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1191.597207][ C1] get_signal+0x12a6/0x1390 [ 1191.601722][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 1191.607269][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1191.613192][ C1] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 1191.619261][ C1] ? get_sigframe_size+0x20/0x20 [ 1191.624341][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1191.629818][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1191.635109][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1191.640744][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1191.646213][ C1] do_syscall_64+0x61/0xb0 [ 1191.650644][ C1] ? clear_bhb_loop+0x40/0x90 [ 1191.655318][ C1] ? clear_bhb_loop+0x40/0x90 [ 1191.659991][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1191.665889][ C1] RIP: 0033:0x7fcf1fb9e159 [ 1191.670413][ C1] Code: Unable to access opcode bytes at 0x7fcf1fb9e12f. [ 1191.677711][ C1] RSP: 002b:00007fcf209aa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1191.686130][ C1] RAX: fffffffffffffe00 RBX: 00007fcf1fe26098 RCX: 00007fcf1fb9e159 [ 1191.694116][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcf1fe26098 [ 1191.702085][ C1] RBP: 00007fcf1fe26090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.710078][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1191.718220][ C1] R13: 00007fcf1fe26128 R14: 00007ffe19a0cc20 R15: 00007ffe19a0cd08 [ 1191.726329][ C1] [ 1191.729549][ C1] [ 1191.731878][ C1] ============================= [ 1191.736839][ C1] WARNING: suspicious RCU usage [ 1191.741679][ C1] syzkaller #0 Tainted: G W [ 1191.747588][ C1] ----------------------------- [ 1191.752429][ C1] kernel/rcu/srcutree.c:1377 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 1191.764425][ C1] [ 1191.764425][ C1] other info that might help us debug this: [ 1191.764425][ C1] [ 1191.774691][ C1] [ 1191.774691][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 1191.782779][ C1] 3 locks held by syz.0.2736/14903: [ 1191.787996][ C1] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: blk_mq_flush_plug_list+0x745/0x1840 [ 1191.798204][ C1] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: folio_memcg_lock+0x81/0x320 [ 1191.807730][ C1] #2: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 1191.818191][ C1] [ 1191.818191][ C1] stack backtrace: [ 1191.824074][ C1] CPU: 1 PID: 14903 Comm: syz.0.2736 Tainted: G W syzkaller #0 [ 1191.833090][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1191.843232][ C1] Call Trace: [ 1191.846537][ C1] [ 1191.849380][ C1] dump_stack_lvl+0x18c/0x250 [ 1191.854061][ C1] ? show_regs_print_info+0x20/0x20 [ 1191.859364][ C1] ? load_image+0x420/0x420 [ 1191.863937][ C1] lockdep_rcu_suspicious+0x1e1/0x300 [ 1191.869331][ C1] __synchronize_srcu+0x150/0x3d0 [ 1191.874387][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1191.880285][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 1191.886001][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1191.891888][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1191.896738][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1191.902691][ C1] ? read_tsc+0x9/0x20 [ 1191.906757][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 1191.912301][ C1] ? synchronize_srcu+0x25a/0x280 [ 1191.917412][ C1] wakeup_source_unregister+0x116/0x190 [ 1191.923070][ C1] mmc_host_classdev_release+0x47/0x100 [ 1191.928637][ C1] ? mmc_free_host+0x30/0x30 [ 1191.933252][ C1] device_release+0xbc/0x1e0 [ 1191.937873][ C1] kobject_put+0x21b/0x450 [ 1191.942330][ C1] call_timer_fn+0x189/0x540 [ 1191.946925][ C1] ? kref_get+0x70/0x70 [ 1191.951083][ C1] ? call_timer_fn+0xd2/0x540 [ 1191.955756][ C1] ? __run_timers+0x810/0x810 [ 1191.960435][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1191.965632][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1191.970861][ C1] ? kref_get+0x70/0x70 [ 1191.975017][ C1] __run_timers+0x570/0x810 [ 1191.979544][ C1] ? detach_timer+0x2b0/0x2b0 [ 1191.984219][ C1] ? lock_chain_count+0x20/0x20 [ 1191.989075][ C1] run_timer_softirq+0x67/0xf0 [ 1191.993834][ C1] handle_softirqs+0x27d/0x820 [ 1191.998599][ C1] ? read_tsc+0x9/0x20 [ 1192.002660][ C1] ? ktime_get+0x24b/0x280 [ 1192.007075][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1192.011833][ C1] ? do_softirq+0x1a0/0x1a0 [ 1192.016337][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1192.021561][ C1] __irq_exit_rcu+0xd3/0x190 [ 1192.026142][ C1] ? irq_exit_rcu+0x20/0x20 [ 1192.030646][ C1] irq_exit_rcu+0x9/0x20 [ 1192.034934][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1192.040577][ C1] [ 1192.043505][ C1] [ 1192.046433][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1192.052420][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 1192.058915][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 1b 98 c3 f6 65 8b 05 3c 66 6a 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1192.078608][ C1] RSP: 0018:ffffc9000b83ef20 EFLAGS: 00000206 [ 1192.084676][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: bc266e66bad74600 [ 1192.092654][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 1192.100639][ C1] RBP: ffffc9000b83efb0 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 [ 1192.109045][ C1] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: dffffc0000000000 [ 1192.117021][ C1] R13: 0000000000000001 R14: ffff888148c94390 R15: 1ffff92001707de4 [ 1192.125447][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1192.130298][ C1] ? __xa_clear_mark+0x142/0x180 [ 1192.135253][ C1] ? __wb_writeout_add+0x15a/0x2a0 [ 1192.140379][ C1] __folio_end_writeback+0x405/0xe10 [ 1192.145683][ C1] ? __folio_cancel_dirty+0x590/0x590 [ 1192.151051][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1192.157027][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1192.161902][ C1] folio_end_writeback+0x150/0x690 [ 1192.167011][ C1] ? mark_buffer_write_io_error+0x260/0x260 [ 1192.172924][ C1] end_bio_bh_io_sync+0xb7/0x110 [ 1192.177863][ C1] blk_update_request+0x539/0xe00 [ 1192.182921][ C1] blk_mq_end_request+0x3e/0x70 [ 1192.187796][ C1] null_handle_cmd+0x74e/0x990 [ 1192.192655][ C1] ? null_queue_rq+0x516/0x640 [ 1192.197418][ C1] blk_mq_request_issue_directly+0x46a/0x770 [ 1192.203422][ C1] ? blk_insert_cloned_request+0x6e0/0x6e0 [ 1192.209309][ C1] blk_mq_plug_issue_direct+0x23a/0x550 [ 1192.214962][ C1] ? mark_buffer_write_io_error+0x260/0x260 [ 1192.220856][ C1] ? blk_mq_flush_plug_list+0x745/0x1840 [ 1192.226499][ C1] blk_mq_flush_plug_list+0x912/0x1840 [ 1192.231959][ C1] ? write_cache_pages+0x10f0/0x1290 [ 1192.237250][ C1] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 1192.243841][ C1] ? do_writepages+0x590/0x590 [ 1192.248696][ C1] __blk_flush_plug+0x3e4/0x460 [ 1192.253632][ C1] ? blk_check_plugged+0x250/0x250 [ 1192.258744][ C1] blk_finish_plug+0x5d/0x80 [ 1192.263339][ C1] do_writepages+0x3e7/0x590 [ 1192.267944][ C1] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 1192.273752][ C1] ? __rwlock_init+0x150/0x150 [ 1192.278516][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1192.283713][ C1] filemap_fdatawrite_wbc+0x122/0x180 [ 1192.289087][ C1] filemap_write_and_wait_range+0x14c/0x230 [ 1192.294974][ C1] ? xas_next_entry+0x3e0/0x3e0 [ 1192.300014][ C1] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 1192.306604][ C1] blkdev_put+0xe5/0x7a0 [ 1192.310841][ C1] blkdev_release+0x84/0x90 [ 1192.315361][ C1] ? blkdev_open+0x360/0x360 [ 1192.319948][ C1] __fput+0x221/0x940 [ 1192.323930][ C1] task_work_run+0x1d4/0x260 [ 1192.328539][ C1] ? task_work_cancel+0x220/0x220 [ 1192.333575][ C1] do_exit+0x986/0x2530 [ 1192.337745][ C1] ? put_task_struct+0xc0/0xc0 [ 1192.342537][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1192.348513][ C1] ? get_signal+0x100e/0x1390 [ 1192.353181][ C1] ? lock_chain_count+0x20/0x20 [ 1192.358024][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1192.363047][ C1] do_group_exit+0x22d/0x2f0 [ 1192.367653][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1192.372954][ C1] get_signal+0x12a6/0x1390 [ 1192.377464][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 1192.383041][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1192.388952][ C1] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 1192.395042][ C1] ? get_sigframe_size+0x20/0x20 [ 1192.399995][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1192.405455][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1192.410828][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1192.416378][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1192.421855][ C1] do_syscall_64+0x61/0xb0 [ 1192.426623][ C1] ? clear_bhb_loop+0x40/0x90 [ 1192.431299][ C1] ? clear_bhb_loop+0x40/0x90 [ 1192.435975][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.441865][ C1] RIP: 0033:0x7fcf1fb9e159 [ 1192.446305][ C1] Code: Unable to access opcode bytes at 0x7fcf1fb9e12f. [ 1192.453327][ C1] RSP: 002b:00007fcf209aa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1192.462345][ C1] RAX: fffffffffffffe00 RBX: 00007fcf1fe26098 RCX: 00007fcf1fb9e159 [ 1192.470419][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcf1fe26098 [ 1192.478415][ C1] RBP: 00007fcf1fe26090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.486471][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.494523][ C1] R13: 00007fcf1fe26128 R14: 00007ffe19a0cc20 R15: 00007ffe19a0cd08 [ 1192.502500][ C1] [ 1192.505672][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1381 [ 1192.515248][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 14903, name: syz.0.2736 [ 1192.524428][ C1] preempt_count: 101, expected: 0 [ 1192.529475][ C1] RCU nest depth: 2, expected: 0 [ 1192.534421][ C1] 3 locks held by syz.0.2736/14903: [ 1192.539681][ C1] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: blk_mq_flush_plug_list+0x745/0x1840 [ 1192.550467][ C1] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: folio_memcg_lock+0x81/0x320 [ 1192.560090][ C1] #2: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 1192.570563][ C1] Preemption disabled at: [ 1192.570571][ C1] [<0000000000000000>] 0x0 [ 1192.579415][ C1] CPU: 1 PID: 14903 Comm: syz.0.2736 Tainted: G W syzkaller #0 [ 1192.588345][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1192.598396][ C1] Call Trace: [ 1192.601675][ C1] [ 1192.604522][ C1] dump_stack_lvl+0x18c/0x250 [ 1192.609205][ C1] ? show_regs_print_info+0x20/0x20 [ 1192.614497][ C1] ? load_image+0x420/0x420 [ 1192.619096][ C1] __might_resched+0x48d/0x5f0 [ 1192.624033][ C1] ? show_regs_print_info+0x20/0x20 [ 1192.629340][ C1] ? __might_sleep+0xe0/0xe0 [ 1192.633951][ C1] __synchronize_srcu+0x197/0x3d0 [ 1192.638976][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1192.644898][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 1192.650620][ C1] ? read_tsc+0x9/0x20 [ 1192.654684][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 1192.660229][ C1] ? synchronize_srcu+0x25a/0x280 [ 1192.665255][ C1] wakeup_source_unregister+0x116/0x190 [ 1192.670937][ C1] mmc_host_classdev_release+0x47/0x100 [ 1192.676487][ C1] ? mmc_free_host+0x30/0x30 [ 1192.681172][ C1] device_release+0xbc/0x1e0 [ 1192.685760][ C1] kobject_put+0x21b/0x450 [ 1192.690211][ C1] call_timer_fn+0x189/0x540 [ 1192.694799][ C1] ? kref_get+0x70/0x70 [ 1192.698955][ C1] ? call_timer_fn+0xd2/0x540 [ 1192.703689][ C1] ? __run_timers+0x810/0x810 [ 1192.708366][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1192.713760][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1192.719478][ C1] ? kref_get+0x70/0x70 [ 1192.723645][ C1] __run_timers+0x570/0x810 [ 1192.728154][ C1] ? detach_timer+0x2b0/0x2b0 [ 1192.732844][ C1] ? lock_chain_count+0x20/0x20 [ 1192.737702][ C1] run_timer_softirq+0x67/0xf0 [ 1192.742466][ C1] handle_softirqs+0x27d/0x820 [ 1192.747226][ C1] ? read_tsc+0x9/0x20 [ 1192.751295][ C1] ? ktime_get+0x24b/0x280 [ 1192.755819][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1192.760585][ C1] ? do_softirq+0x1a0/0x1a0 [ 1192.765088][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1192.770375][ C1] __irq_exit_rcu+0xd3/0x190 [ 1192.774996][ C1] ? irq_exit_rcu+0x20/0x20 [ 1192.779506][ C1] irq_exit_rcu+0x9/0x20 [ 1192.783746][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1192.789391][ C1] [ 1192.792341][ C1] [ 1192.795313][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1192.801382][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 1192.807879][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 1b 98 c3 f6 65 8b 05 3c 66 6a 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1192.827587][ C1] RSP: 0018:ffffc9000b83ef20 EFLAGS: 00000206 [ 1192.833673][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: bc266e66bad74600 [ 1192.841664][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 1192.849655][ C1] RBP: ffffc9000b83efb0 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 [ 1192.857624][ C1] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: dffffc0000000000 [ 1192.865681][ C1] R13: 0000000000000001 R14: ffff888148c94390 R15: 1ffff92001707de4 [ 1192.873689][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1192.878580][ C1] ? __xa_clear_mark+0x142/0x180 [ 1192.883540][ C1] ? __wb_writeout_add+0x15a/0x2a0 [ 1192.888676][ C1] __folio_end_writeback+0x405/0xe10 [ 1192.894010][ C1] ? __folio_cancel_dirty+0x590/0x590 [ 1192.899404][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1192.905300][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1192.910155][ C1] folio_end_writeback+0x150/0x690 [ 1192.915285][ C1] ? mark_buffer_write_io_error+0x260/0x260 [ 1192.921181][ C1] end_bio_bh_io_sync+0xb7/0x110 [ 1192.926118][ C1] blk_update_request+0x539/0xe00 [ 1192.931154][ C1] blk_mq_end_request+0x3e/0x70 [ 1192.936115][ C1] null_handle_cmd+0x74e/0x990 [ 1192.940906][ C1] ? null_queue_rq+0x516/0x640 [ 1192.945707][ C1] blk_mq_request_issue_directly+0x46a/0x770 [ 1192.951710][ C1] ? blk_insert_cloned_request+0x6e0/0x6e0 [ 1192.957541][ C1] blk_mq_plug_issue_direct+0x23a/0x550 [ 1192.963099][ C1] ? mark_buffer_write_io_error+0x260/0x260 [ 1192.968997][ C1] ? blk_mq_flush_plug_list+0x745/0x1840 [ 1192.974656][ C1] blk_mq_flush_plug_list+0x912/0x1840 [ 1192.980391][ C1] ? write_cache_pages+0x10f0/0x1290 [ 1192.985706][ C1] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 1192.991971][ C1] ? do_writepages+0x590/0x590 [ 1192.996743][ C1] __blk_flush_plug+0x3e4/0x460 [ 1193.001643][ C1] ? blk_check_plugged+0x250/0x250 [ 1193.006754][ C1] blk_finish_plug+0x5d/0x80 [ 1193.011340][ C1] do_writepages+0x3e7/0x590 [ 1193.015957][ C1] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 1193.021709][ C1] ? __rwlock_init+0x150/0x150 [ 1193.026577][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1193.031800][ C1] filemap_fdatawrite_wbc+0x122/0x180 [ 1193.037193][ C1] filemap_write_and_wait_range+0x14c/0x230 [ 1193.043084][ C1] ? xas_next_entry+0x3e0/0x3e0 [ 1193.047939][ C1] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 1193.054546][ C1] blkdev_put+0xe5/0x7a0 [ 1193.058789][ C1] blkdev_release+0x84/0x90 [ 1193.063309][ C1] ? blkdev_open+0x360/0x360 [ 1193.067902][ C1] __fput+0x221/0x940 [ 1193.071886][ C1] task_work_run+0x1d4/0x260 [ 1193.076575][ C1] ? task_work_cancel+0x220/0x220 [ 1193.081697][ C1] do_exit+0x986/0x2530 [ 1193.085869][ C1] ? put_task_struct+0xc0/0xc0 [ 1193.090656][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1193.096636][ C1] ? get_signal+0x100e/0x1390 [ 1193.101331][ C1] ? lock_chain_count+0x20/0x20 [ 1193.106184][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1193.111232][ C1] do_group_exit+0x22d/0x2f0 [ 1193.115875][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1193.121534][ C1] get_signal+0x12a6/0x1390 [ 1193.126043][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 1193.131587][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1193.137472][ C1] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 1193.143556][ C1] ? get_sigframe_size+0x20/0x20 [ 1193.148538][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1193.154023][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1193.159404][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1193.164949][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1193.170418][ C1] do_syscall_64+0x61/0xb0 [ 1193.174858][ C1] ? clear_bhb_loop+0x40/0x90 [ 1193.179534][ C1] ? clear_bhb_loop+0x40/0x90 [ 1193.184222][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1193.190118][ C1] RIP: 0033:0x7fcf1fb9e159 [ 1193.194685][ C1] Code: Unable to access opcode bytes at 0x7fcf1fb9e12f. [ 1193.201899][ C1] RSP: 002b:00007fcf209aa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1193.210339][ C1] RAX: fffffffffffffe00 RBX: 00007fcf1fe26098 RCX: 00007fcf1fb9e159 [ 1193.218327][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcf1fe26098 [ 1193.226388][ C1] RBP: 00007fcf1fe26090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.234362][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.242343][ C1] R13: 00007fcf1fe26128 R14: 00007ffe19a0cc20 R15: 00007ffe19a0cd08 [ 1193.250324][ C1] [ 1193.253409][ C1] ODEBUG: object ffffc900001f09c0 is NOT on stack ffffc9000b838000, but annotated. [ 1193.256258][ C1] [ 1193.256266][ C1] ====================================================== [ 1193.256272][ C1] WARNING: possible circular locking dependency detected [ 1193.256278][ C1] syzkaller #0 Tainted: G W [ 1193.256284][ C1] ------------------------------------------------------ [ 1193.256287][ C1] syz.0.2736/14903 is trying to acquire lock: [ 1193.256294][ C1] ffffffff8d1260a0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 1193.256328][ C1] [ 1193.256328][ C1] but task is already holding lock: [ 1193.256331][ C1] ffffffff97510368 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 1193.256355][ C1] [ 1193.256355][ C1] which lock already depends on the new lock. [ 1193.256355][ C1] [ 1193.256358][ C1] [ 1193.256358][ C1] the existing dependency chain (in reverse order) is: [ 1193.256361][ C1] [ 1193.256361][ C1] -> #4 (&obj_hash[i].lock){-.-.}-{2:2}: [ 1193.256374][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 1193.256385][ C1] debug_object_activate+0x6c/0x500 [ 1193.256396][ C1] insert_work+0x35/0x310 [ 1193.256407][ C1] __queue_work+0xbfd/0xfd0 [ 1193.256415][ C1] queue_work_on+0x128/0x1f0 [ 1193.256424][ C1] start_poll_synchronize_rcu_expedited+0x105/0x140 [ 1193.256439][ C1] rcu_init+0x10d/0x160 [ 1193.256449][ C1] start_kernel+0x1fd/0x4e0 [ 1193.256469][ C1] x86_64_start_reservations+0x2a/0x30 [ 1193.256487][ C1] copy_bootdata+0x0/0xd0 [ 1193.256499][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1193.256519][ C1] [ 1193.256519][ C1] -> #3 (&pool->lock){-.-.}-{2:2}: [ 1193.256533][ C1] _raw_spin_lock+0x2e/0x40 [ 1193.256543][ C1] __queue_work+0x72f/0xfd0 [ 1193.256552][ C1] queue_work_on+0x128/0x1f0 [ 1193.256562][ C1] rpm_suspend+0x1133/0x1b60 [ 1193.256577][ C1] __pm_runtime_idle+0x12f/0x1a0 [ 1193.256590][ C1] __device_attach+0x352/0x420 [ 1193.256604][ C1] bus_probe_device+0x180/0x260 [ 1193.256618][ C1] device_add+0x87c/0xc40 [ 1193.256630][ C1] serial_base_port_add+0x2f6/0x430 [ 1193.256640][ C1] serial_core_register_port+0x378/0x20b0 [ 1193.256654][ C1] serial8250_register_8250_port+0x15fd/0x1f40 [ 1193.256665][ C1] serial_pnp_probe+0x577/0x750 [ 1193.256678][ C1] pnp_device_probe+0x305/0x4b0 [ 1193.256695][ C1] really_probe+0x247/0xae0 [ 1193.256703][ C1] __driver_probe_device+0x1f5/0x390 [ 1193.256715][ C1] driver_probe_device+0x4f/0x420 [ 1193.256723][ C1] __driver_attach+0x444/0x6d0 [ 1193.256735][ C1] bus_for_each_dev+0x235/0x2b0 [ 1193.256747][ C1] bus_add_driver+0x340/0x630 [ 1193.256757][ C1] driver_register+0x23a/0x310 [ 1193.256765][ C1] serial8250_init+0x9a/0x170 [ 1193.256779][ C1] do_one_initcall+0x242/0x790 [ 1193.256790][ C1] do_initcall_level+0x13d/0x1f0 [ 1193.256799][ C1] do_initcalls+0x69/0xd0 [ 1193.256807][ C1] kernel_init_freeable+0x3d9/0x560 [ 1193.256816][ C1] kernel_init+0x1d/0x1c0 [ 1193.256825][ C1] ret_from_fork+0x48/0x80 [ 1193.256835][ C1] ret_from_fork_asm+0x11/0x20 [ 1193.256846][ C1] [ 1193.256846][ C1] -> #2 (&dev->power.lock){-...}-{2:2}: [ 1193.256860][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 1193.256868][ C1] __pm_runtime_resume+0x10f/0x170 [ 1193.256880][ C1] __uart_start+0x171/0x3e0 [ 1193.256887][ C1] uart_write+0x449/0x5d0 [ 1193.256895][ C1] n_tty_write+0xd3d/0x11e0 [ 1193.256906][ C1] file_tty_write+0x529/0x960 [ 1193.256916][ C1] vfs_write+0x474/0x9a0 [ 1193.256929][ C1] ksys_write+0x151/0x260 [ 1193.256940][ C1] do_syscall_64+0x55/0xb0 [ 1193.256950][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1193.256961][ C1] [ 1193.256961][ C1] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 1193.256972][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 1193.256981][ C1] serial8250_console_write+0x181/0x18b0 [ 1193.256992][ C1] console_flush_all+0x6ad/0xcf0 [ 1193.257003][ C1] console_unlock+0xad/0x350 [ 1193.257013][ C1] vprintk_emit+0x497/0x610 [ 1193.257023][ C1] _printk+0xde/0x130 [ 1193.257031][ C1] register_console+0xb96/0xf00 [ 1193.257042][ C1] univ8250_console_init+0x45/0x50 [ 1193.257060][ C1] console_init+0x17b/0x5d0 [ 1193.257069][ C1] start_kernel+0x2c8/0x4e0 [ 1193.257077][ C1] x86_64_start_reservations+0x2a/0x30 [ 1193.257089][ C1] copy_bootdata+0x0/0xd0 [ 1193.257101][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1193.257112][ C1] [ 1193.257112][ C1] -> #0 (console_owner){-.-.}-{0:0}: [ 1193.257124][ C1] __lock_acquire+0x37ef/0x7d80 [ 1193.257134][ C1] lock_acquire+0x19e/0x420 [ 1193.257143][ C1] console_flush_all+0x676/0xcf0 [ 1193.257154][ C1] console_unlock+0xad/0x350 [ 1193.257164][ C1] vprintk_emit+0x497/0x610 [ 1193.257174][ C1] _printk+0xde/0x130 [ 1193.257181][ C1] __debug_object_init+0x18d/0x450 [ 1193.257191][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 1193.257202][ C1] wakeup_source_unregister+0x116/0x190 [ 1193.257212][ C1] mmc_host_classdev_release+0x47/0x100 [ 1193.257225][ C1] device_release+0xbc/0x1e0 [ 1193.257242][ C1] kobject_put+0x21b/0x450 [ 1193.257254][ C1] call_timer_fn+0x189/0x540 [ 1193.257263][ C1] __run_timers+0x570/0x810 [ 1193.257272][ C1] run_timer_softirq+0x67/0xf0 [ 1193.257280][ C1] handle_softirqs+0x27d/0x820 [ 1193.257289][ C1] __irq_exit_rcu+0xd3/0x190 [ 1193.257298][ C1] irq_exit_rcu+0x9/0x20 [ 1193.257306][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1193.257318][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1193.257329][ C1] _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1193.257337][ C1] __folio_end_writeback+0x405/0xe10 [ 1193.257351][ C1] folio_end_writeback+0x150/0x690 [ 1193.257360][ C1] end_bio_bh_io_sync+0xb7/0x110 [ 1193.257370][ C1] blk_update_request+0x539/0xe00 [ 1193.257383][ C1] blk_mq_end_request+0x3e/0x70 [ 1193.257395][ C1] null_handle_cmd+0x74e/0x990 [ 1193.257405][ C1] blk_mq_request_issue_directly+0x46a/0x770 [ 1193.257414][ C1] blk_mq_plug_issue_direct+0x23a/0x550 [ 1193.257423][ C1] blk_mq_flush_plug_list+0x912/0x1840 [ 1193.257431][ C1] __blk_flush_plug+0x3e4/0x460 [ 1193.257439][ C1] blk_finish_plug+0x5d/0x80 [ 1193.257446][ C1] do_writepages+0x3e7/0x590 [ 1193.257459][ C1] filemap_fdatawrite_wbc+0x122/0x180 [ 1193.257467][ C1] filemap_write_and_wait_range+0x14c/0x230 [ 1193.257476][ C1] blkdev_put+0xe5/0x7a0 [ 1193.257485][ C1] blkdev_release+0x84/0x90 [ 1193.257493][ C1] __fput+0x221/0x940 [ 1193.257500][ C1] task_work_run+0x1d4/0x260 [ 1193.257512][ C1] do_exit+0x986/0x2530 [ 1193.257524][ C1] do_group_exit+0x22d/0x2f0 [ 1193.257537][ C1] get_signal+0x12a6/0x1390 [ 1193.257545][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 1193.257559][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1193.257571][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1193.257583][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1193.257596][ C1] do_syscall_64+0x61/0xb0 [ 1193.257605][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1193.257615][ C1] [ 1193.257615][ C1] other info that might help us debug this: [ 1193.257615][ C1] [ 1193.257618][ C1] Chain exists of: [ 1193.257618][ C1] console_owner --> &pool->lock --> &obj_hash[i].lock [ 1193.257618][ C1] [ 1193.257632][ C1] Possible unsafe locking scenario: [ 1193.257632][ C1] [ 1193.257635][ C1] CPU0 CPU1 [ 1193.257637][ C1] ---- ---- [ 1193.257639][ C1] lock(&obj_hash[i].lock); [ 1193.257645][ C1] lock(&pool->lock); [ 1193.257651][ C1] lock(&obj_hash[i].lock); [ 1193.257657][ C1] lock(console_owner); [ 1193.257662][ C1] [ 1193.257662][ C1] *** DEADLOCK *** [ 1193.257662][ C1] [ 1193.257665][ C1] 6 locks held by syz.0.2736/14903: [ 1193.257670][ C1] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: blk_mq_flush_plug_list+0x745/0x1840 [ 1193.257694][ C1] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: folio_memcg_lock+0x81/0x320 [ 1193.257717][ C1] #2: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 1193.257739][ C1] #3: ffffffff97510368 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 1193.257762][ C1] #4: ffffffff8d126180 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 1193.257783][ C1] #5: ffffffff8d00d990 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 1193.257806][ C1] [ 1193.257806][ C1] stack backtrace: [ 1193.257810][ C1] CPU: 1 PID: 14903 Comm: syz.0.2736 Tainted: G W syzkaller #0 [ 1193.257820][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1193.257826][ C1] Call Trace: [ 1193.257830][ C1] [ 1193.257834][ C1] dump_stack_lvl+0x18c/0x250 [ 1193.257846][ C1] ? load_image+0x420/0x420 [ 1193.257855][ C1] ? show_regs_print_info+0x20/0x20 [ 1193.257868][ C1] ? print_circular_bug+0x12b/0x1a0 [ 1193.257881][ C1] check_noncircular+0x2fc/0x400 [ 1193.257894][ C1] ? print_deadlock_bug+0x5d0/0x5d0 [ 1193.257905][ C1] ? lockdep_lock+0xf5/0x230 [ 1193.257918][ C1] __lock_acquire+0x37ef/0x7d80 [ 1193.257936][ C1] ? verify_lock_unused+0x140/0x140 [ 1193.257952][ C1] lock_acquire+0x19e/0x420 [ 1193.257963][ C1] ? console_flush_all+0x10b/0xcf0 [ 1193.257976][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1193.257986][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 1193.257998][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1193.258009][ C1] ? __rwlock_init+0x150/0x150 [ 1193.258022][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1193.258035][ C1] console_flush_all+0x676/0xcf0 [ 1193.258046][ C1] ? console_flush_all+0x10b/0xcf0 [ 1193.258058][ C1] ? console_flush_all+0x10b/0xcf0 [ 1193.258072][ C1] ? is_console_locked+0x20/0x20 [ 1193.258086][ C1] console_unlock+0xad/0x350 [ 1193.258098][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 1193.258113][ C1] vprintk_emit+0x497/0x610 [ 1193.258124][ C1] ? printk_sprint+0x460/0x460 [ 1193.258137][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 1193.258151][ C1] _printk+0xde/0x130 [ 1193.258166][ C1] ? load_image+0x420/0x420 [ 1193.258175][ C1] ? alloc_object+0x1c/0x640 [ 1193.258188][ C1] __debug_object_init+0x18d/0x450 [ 1193.258201][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 1193.258213][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1193.258223][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 1193.258245][ C1] ? read_tsc+0x9/0x20 [ 1193.258255][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 1193.258267][ C1] ? synchronize_srcu+0x25a/0x280 [ 1193.258280][ C1] wakeup_source_unregister+0x116/0x190 [ 1193.258291][ C1] mmc_host_classdev_release+0x47/0x100 [ 1193.258304][ C1] ? mmc_free_host+0x30/0x30 [ 1193.258316][ C1] device_release+0xbc/0x1e0 [ 1193.258328][ C1] kobject_put+0x21b/0x450 [ 1193.258342][ C1] call_timer_fn+0x189/0x540 [ 1193.258352][ C1] ? kref_get+0x70/0x70 [ 1193.258365][ C1] ? call_timer_fn+0xd2/0x540 [ 1193.258374][ C1] ? __run_timers+0x810/0x810 [ 1193.258385][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1193.258395][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1193.258407][ C1] ? kref_get+0x70/0x70 [ 1193.258420][ C1] __run_timers+0x570/0x810 [ 1193.258433][ C1] ? detach_timer+0x2b0/0x2b0 [ 1193.258444][ C1] ? lock_chain_count+0x20/0x20 [ 1193.258456][ C1] run_timer_softirq+0x67/0xf0 [ 1193.258465][ C1] handle_softirqs+0x27d/0x820 [ 1193.258475][ C1] ? read_tsc+0x9/0x20 [ 1193.258484][ C1] ? ktime_get+0x24b/0x280 [ 1193.258495][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1193.258506][ C1] ? do_softirq+0x1a0/0x1a0 [ 1193.258516][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1193.258530][ C1] __irq_exit_rcu+0xd3/0x190 [ 1193.258539][ C1] ? irq_exit_rcu+0x20/0x20 [ 1193.258550][ C1] irq_exit_rcu+0x9/0x20 [ 1193.258559][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1193.258572][ C1] [ 1193.258575][ C1] [ 1193.258578][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1193.258590][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 1193.258602][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 1b 98 c3 f6 65 8b 05 3c 66 6a 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1193.258611][ C1] RSP: 0018:ffffc9000b83ef20 EFLAGS: 00000206 [ 1193.258619][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: bc266e66bad74600 [ 1193.258627][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 1193.258634][ C1] RBP: ffffc9000b83efb0 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 [ 1193.258641][ C1] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: dffffc0000000000 [ 1193.258648][ C1] R13: 0000000000000001 R14: ffff888148c94390 R15: 1ffff92001707de4 [ 1193.258659][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1193.258668][ C1] ? __xa_clear_mark+0x142/0x180 [ 1193.258679][ C1] ? __wb_writeout_add+0x15a/0x2a0 [ 1193.258693][ C1] __folio_end_writeback+0x405/0xe10 [ 1193.258709][ C1] ? __folio_cancel_dirty+0x590/0x590 [ 1193.258723][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1193.258732][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1193.258743][ C1] folio_end_writeback+0x150/0x690 [ 1193.258754][ C1] ? mark_buffer_write_io_error+0x260/0x260 [ 1193.258768][ C1] end_bio_bh_io_sync+0xb7/0x110 [ 1193.258778][ C1] blk_update_request+0x539/0xe00 [ 1193.258794][ C1] blk_mq_end_request+0x3e/0x70 [ 1193.258807][ C1] null_handle_cmd+0x74e/0x990 [ 1193.258817][ C1] ? null_queue_rq+0x516/0x640 [ 1193.258833][ C1] blk_mq_request_issue_directly+0x46a/0x770 [ 1193.258844][ C1] ? blk_insert_cloned_request+0x6e0/0x6e0 [ 1193.258856][ C1] blk_mq_plug_issue_direct+0x23a/0x550 [ 1193.258866][ C1] ? mark_buffer_write_io_error+0x260/0x260 [ 1193.258879][ C1] ? blk_mq_flush_plug_list+0x745/0x1840 [ 1193.258889][ C1] blk_mq_flush_plug_list+0x912/0x1840 [ 1193.258899][ C1] ? write_cache_pages+0x10f0/0x1290 [ 1193.258914][ C1] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 1193.258925][ C1] ? do_writepages+0x590/0x590 [ 1193.258939][ C1] __blk_flush_plug+0x3e4/0x460 [ 1193.258950][ C1] ? blk_check_plugged+0x250/0x250 [ 1193.258961][ C1] blk_finish_plug+0x5d/0x80 [ 1193.258970][ C1] do_writepages+0x3e7/0x590 [ 1193.258988][ C1] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 1193.259003][ C1] ? __rwlock_init+0x150/0x150 [ 1193.259015][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1193.259028][ C1] filemap_fdatawrite_wbc+0x122/0x180 [ 1193.259039][ C1] filemap_write_and_wait_range+0x14c/0x230 [ 1193.259049][ C1] ? xas_next_entry+0x3e0/0x3e0 [ 1193.259061][ C1] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 1193.259074][ C1] blkdev_put+0xe5/0x7a0 [ 1193.259085][ C1] blkdev_release+0x84/0x90 [ 1193.259094][ C1] ? blkdev_open+0x360/0x360 [ 1193.259103][ C1] __fput+0x221/0x940 [ 1193.259115][ C1] task_work_run+0x1d4/0x260 [ 1193.259128][ C1] ? task_work_cancel+0x220/0x220 [ 1193.259143][ C1] do_exit+0x986/0x2530 [ 1193.259159][ C1] ? put_task_struct+0xc0/0xc0 [ 1193.259173][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1193.259184][ C1] ? get_signal+0x100e/0x1390 [ 1193.259194][ C1] ? lock_chain_count+0x20/0x20 [ 1193.259204][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1193.259214][ C1] do_group_exit+0x22d/0x2f0 [ 1193.259238][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1193.259251][ C1] get_signal+0x12a6/0x1390 [ 1193.259265][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 1193.259280][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1193.259291][ C1] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 1193.259305][ C1] ? get_sigframe_size+0x20/0x20 [ 1193.259323][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1193.259337][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1193.259350][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1193.259363][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1193.259377][ C1] do_syscall_64+0x61/0xb0 [ 1193.259387][ C1] ? clear_bhb_loop+0x40/0x90 [ 1193.259398][ C1] ? clear_bhb_loop+0x40/0x90 [ 1193.259412][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1193.259423][ C1] RIP: 0033:0x7fcf1fb9e159 [ 1193.259431][ C1] Code: Unable to access opcode bytes at 0x7fcf1fb9e12f. [ 1193.259435][ C1] RSP: 002b:00007fcf209aa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1193.259445][ C1] RAX: fffffffffffffe00 RBX: 00007fcf1fe26098 RCX: 00007fcf1fb9e159 [ 1193.259452][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcf1fe26098 [ 1193.259458][ C1] RBP: 00007fcf1fe26090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.259464][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.259470][ C1] R13: 00007fcf1fe26128 R14: 00007ffe19a0cc20 R15: 00007ffe19a0cd08 [ 1193.259480][ C1] [ 1194.911609][ C1] ------------[ cut here ]------------ [ 1194.917071][ C1] WARNING: CPU: 1 PID: 14903 at lib/debugobjects.c:558 __debug_object_init+0x18d/0x450 [ 1194.926799][ C1] Modules linked in: [ 1194.930722][ C1] CPU: 1 PID: 14903 Comm: syz.0.2736 Tainted: G W syzkaller #0 [ 1194.939765][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1194.949837][ C1] RIP: 0010:__debug_object_init+0x18d/0x450 [ 1194.955843][ C1] Code: 24 08 74 2f 41 ff c6 44 89 35 7f 11 26 13 48 c7 c1 00 3c 1d 8b 48 c7 c7 60 3c 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 a3 5e 49 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 1194.975448][ C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046 [ 1194.981528][ C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: bc266e66bad74600 [ 1194.989497][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 1194.997461][ C1] RBP: dffffc0000000000 R08: ffffc900001f0527 R09: 1ffff9200003e0a4 [ 1195.005622][ C1] R10: dffffc0000000000 R11: fffff5200003e0a5 R12: ffff88801e6a5a20 [ 1195.013603][ C1] R13: ffff88807778c9a0 R14: 0000000000000001 R15: ffffffff8acbdf00 [ 1195.021580][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1195.030501][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1195.037101][ C1] CR2: 00007f1951e8cd58 CR3: 0000000061130000 CR4: 00000000003526e0 [ 1195.045324][ C1] Call Trace: [ 1195.048598][ C1] [ 1195.051437][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 1195.056812][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1195.062785][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 1195.068504][ C1] ? read_tsc+0x9/0x20 [ 1195.072590][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 1195.078143][ C1] ? synchronize_srcu+0x25a/0x280 [ 1195.083180][ C1] wakeup_source_unregister+0x116/0x190 [ 1195.088738][ C1] mmc_host_classdev_release+0x47/0x100 [ 1195.094294][ C1] ? mmc_free_host+0x30/0x30 [ 1195.098877][ C1] device_release+0xbc/0x1e0 [ 1195.103483][ C1] kobject_put+0x21b/0x450 [ 1195.107912][ C1] call_timer_fn+0x189/0x540 [ 1195.112501][ C1] ? kref_get+0x70/0x70 [ 1195.116666][ C1] ? call_timer_fn+0xd2/0x540 [ 1195.121355][ C1] ? __run_timers+0x810/0x810 [ 1195.126038][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1195.131247][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1195.136499][ C1] ? kref_get+0x70/0x70 [ 1195.140708][ C1] __run_timers+0x570/0x810 [ 1195.145238][ C1] ? detach_timer+0x2b0/0x2b0 [ 1195.149924][ C1] ? lock_chain_count+0x20/0x20 [ 1195.154774][ C1] run_timer_softirq+0x67/0xf0 [ 1195.159536][ C1] handle_softirqs+0x27d/0x820 [ 1195.164382][ C1] ? read_tsc+0x9/0x20 [ 1195.168460][ C1] ? ktime_get+0x24b/0x280 [ 1195.172887][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1195.177644][ C1] ? do_softirq+0x1a0/0x1a0 [ 1195.182139][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1195.187337][ C1] __irq_exit_rcu+0xd3/0x190 [ 1195.191933][ C1] ? irq_exit_rcu+0x20/0x20 [ 1195.196429][ C1] irq_exit_rcu+0x9/0x20 [ 1195.200748][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1195.206390][ C1] [ 1195.209330][ C1] [ 1195.212349][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1195.218332][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 1195.224838][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 1b 98 c3 f6 65 8b 05 3c 66 6a 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1195.244563][ C1] RSP: 0018:ffffc9000b83ef20 EFLAGS: 00000206 [ 1195.250642][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: bc266e66bad74600 [ 1195.258615][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 1195.266580][ C1] RBP: ffffc9000b83efb0 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 [ 1195.274548][ C1] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: dffffc0000000000 [ 1195.282534][ C1] R13: 0000000000000001 R14: ffff888148c94390 R15: 1ffff92001707de4 [ 1195.290523][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1195.295385][ C1] ? __xa_clear_mark+0x142/0x180 [ 1195.300382][ C1] ? __wb_writeout_add+0x15a/0x2a0 [ 1195.305516][ C1] __folio_end_writeback+0x405/0xe10 [ 1195.310819][ C1] ? __folio_cancel_dirty+0x590/0x590 [ 1195.316195][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1195.322104][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1195.326956][ C1] folio_end_writeback+0x150/0x690 [ 1195.332059][ C1] ? mark_buffer_write_io_error+0x260/0x260 [ 1195.338035][ C1] end_bio_bh_io_sync+0xb7/0x110 [ 1195.342966][ C1] blk_update_request+0x539/0xe00 [ 1195.347990][ C1] blk_mq_end_request+0x3e/0x70 [ 1195.352836][ C1] null_handle_cmd+0x74e/0x990 [ 1195.357616][ C1] ? null_queue_rq+0x516/0x640 [ 1195.362388][ C1] blk_mq_request_issue_directly+0x46a/0x770 [ 1195.368359][ C1] ? blk_insert_cloned_request+0x6e0/0x6e0 [ 1195.374160][ C1] blk_mq_plug_issue_direct+0x23a/0x550 [ 1195.379785][ C1] ? mark_buffer_write_io_error+0x260/0x260 [ 1195.385687][ C1] ? blk_mq_flush_plug_list+0x745/0x1840 [ 1195.391398][ C1] blk_mq_flush_plug_list+0x912/0x1840 [ 1195.396850][ C1] ? write_cache_pages+0x10f0/0x1290 [ 1195.402138][ C1] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 1195.408371][ C1] ? do_writepages+0x590/0x590 [ 1195.413131][ C1] __blk_flush_plug+0x3e4/0x460 [ 1195.418002][ C1] ? blk_check_plugged+0x250/0x250 [ 1195.423107][ C1] blk_finish_plug+0x5d/0x80 [ 1195.427862][ C1] do_writepages+0x3e7/0x590 [ 1195.432450][ C1] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 1195.438163][ C1] ? __rwlock_init+0x150/0x150 [ 1195.442920][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1195.448209][ C1] filemap_fdatawrite_wbc+0x122/0x180 [ 1195.453578][ C1] filemap_write_and_wait_range+0x14c/0x230 [ 1195.459462][ C1] ? xas_next_entry+0x3e0/0x3e0 [ 1195.464306][ C1] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 1195.470889][ C1] blkdev_put+0xe5/0x7a0 [ 1195.475124][ C1] blkdev_release+0x84/0x90 [ 1195.479616][ C1] ? blkdev_open+0x360/0x360 [ 1195.484196][ C1] __fput+0x221/0x940 [ 1195.488195][ C1] task_work_run+0x1d4/0x260 [ 1195.492791][ C1] ? task_work_cancel+0x220/0x220 [ 1195.497809][ C1] do_exit+0x986/0x2530 [ 1195.501961][ C1] ? put_task_struct+0xc0/0xc0 [ 1195.506721][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1195.512692][ C1] ? get_signal+0x100e/0x1390 [ 1195.517357][ C1] ? lock_chain_count+0x20/0x20 [ 1195.522194][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1195.527211][ C1] do_group_exit+0x22d/0x2f0 [ 1195.531811][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1195.537005][ C1] get_signal+0x12a6/0x1390 [ 1195.541532][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 1195.547076][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1195.552959][ C1] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 1195.559020][ C1] ? get_sigframe_size+0x20/0x20 [ 1195.564043][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1195.569592][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1195.574878][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1195.580559][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1195.586022][ C1] do_syscall_64+0x61/0xb0 [ 1195.590456][ C1] ? clear_bhb_loop+0x40/0x90 [ 1195.595148][ C1] ? clear_bhb_loop+0x40/0x90 [ 1195.599844][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1195.605756][ C1] RIP: 0033:0x7fcf1fb9e159 [ 1195.610253][ C1] Code: Unable to access opcode bytes at 0x7fcf1fb9e12f. [ 1195.617270][ C1] RSP: 002b:00007fcf209aa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1195.625854][ C1] RAX: fffffffffffffe00 RBX: 00007fcf1fe26098 RCX: 00007fcf1fb9e159 [ 1195.633910][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcf1fe26098 [ 1195.642065][ C1] RBP: 00007fcf1fe26090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.650056][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1195.658035][ C1] R13: 00007fcf1fe26128 R14: 00007ffe19a0cc20 R15: 00007ffe19a0cd08 [ 1195.666178][ C1] [ 1195.669210][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1195.676500][ C1] CPU: 1 PID: 14903 Comm: syz.0.2736 Tainted: G W syzkaller #0 [ 1195.685531][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1195.695666][ C1] Call Trace: [ 1195.698940][ C1] [ 1195.701797][ C1] dump_stack_lvl+0x18c/0x250 [ 1195.706580][ C1] ? show_regs_print_info+0x20/0x20 [ 1195.711786][ C1] ? load_image+0x420/0x420 [ 1195.716300][ C1] panic+0x2ca/0x720 [ 1195.720207][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1195.724715][ C1] __warn+0x2e0/0x470 [ 1195.728695][ C1] ? __debug_object_init+0x18d/0x450 [ 1195.734059][ C1] ? __debug_object_init+0x18d/0x450 [ 1195.739684][ C1] report_bug+0x2be/0x4f0 [ 1195.744011][ C1] ? __debug_object_init+0x18d/0x450 [ 1195.749313][ C1] ? __debug_object_init+0x18d/0x450 [ 1195.754608][ C1] ? __debug_object_init+0x18f/0x450 [ 1195.759888][ C1] handle_bug+0xcf/0x120 [ 1195.764126][ C1] exc_invalid_op+0x1a/0x50 [ 1195.768659][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1195.773535][ C1] RIP: 0010:__debug_object_init+0x18d/0x450 [ 1195.779432][ C1] Code: 24 08 74 2f 41 ff c6 44 89 35 7f 11 26 13 48 c7 c1 00 3c 1d 8b 48 c7 c7 60 3c 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 a3 5e 49 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 1195.799097][ C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046 [ 1195.805166][ C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: bc266e66bad74600 [ 1195.813187][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 1195.821162][ C1] RBP: dffffc0000000000 R08: ffffc900001f0527 R09: 1ffff9200003e0a4 [ 1195.829128][ C1] R10: dffffc0000000000 R11: fffff5200003e0a5 R12: ffff88801e6a5a20 [ 1195.837093][ C1] R13: ffff88807778c9a0 R14: 0000000000000001 R15: ffffffff8acbdf00 [ 1195.845067][ C1] ? __debug_object_init+0x18d/0x450 [ 1195.850353][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 1195.855373][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1195.861259][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 1195.866981][ C1] ? read_tsc+0x9/0x20 [ 1195.871042][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 1195.876580][ C1] ? synchronize_srcu+0x25a/0x280 [ 1195.881613][ C1] wakeup_source_unregister+0x116/0x190 [ 1195.887154][ C1] mmc_host_classdev_release+0x47/0x100 [ 1195.892693][ C1] ? mmc_free_host+0x30/0x30 [ 1195.897275][ C1] device_release+0xbc/0x1e0 [ 1195.901884][ C1] kobject_put+0x21b/0x450 [ 1195.906308][ C1] call_timer_fn+0x189/0x540 [ 1195.911011][ C1] ? kref_get+0x70/0x70 [ 1195.915161][ C1] ? call_timer_fn+0xd2/0x540 [ 1195.919831][ C1] ? __run_timers+0x810/0x810 [ 1195.924515][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1195.929704][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1195.934898][ C1] ? kref_get+0x70/0x70 [ 1195.939071][ C1] __run_timers+0x570/0x810 [ 1195.943657][ C1] ? detach_timer+0x2b0/0x2b0 [ 1195.948323][ C1] ? lock_chain_count+0x20/0x20 [ 1195.953220][ C1] run_timer_softirq+0x67/0xf0 [ 1195.958091][ C1] handle_softirqs+0x27d/0x820 [ 1195.962953][ C1] ? read_tsc+0x9/0x20 [ 1195.967020][ C1] ? ktime_get+0x24b/0x280 [ 1195.971430][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1195.976246][ C1] ? do_softirq+0x1a0/0x1a0 [ 1195.980765][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1195.985956][ C1] __irq_exit_rcu+0xd3/0x190 [ 1195.990537][ C1] ? irq_exit_rcu+0x20/0x20 [ 1195.995029][ C1] irq_exit_rcu+0x9/0x20 [ 1195.999274][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1196.004989][ C1] [ 1196.008001][ C1] [ 1196.010925][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1196.016897][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 1196.023389][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 1b 98 c3 f6 65 8b 05 3c 66 6a 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1196.043081][ C1] RSP: 0018:ffffc9000b83ef20 EFLAGS: 00000206 [ 1196.049143][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: bc266e66bad74600 [ 1196.057115][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 1196.065082][ C1] RBP: ffffc9000b83efb0 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 [ 1196.073045][ C1] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: dffffc0000000000 [ 1196.081025][ C1] R13: 0000000000000001 R14: ffff888148c94390 R15: 1ffff92001707de4 [ 1196.089041][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1196.093896][ C1] ? __xa_clear_mark+0x142/0x180 [ 1196.098835][ C1] ? __wb_writeout_add+0x15a/0x2a0 [ 1196.103963][ C1] __folio_end_writeback+0x405/0xe10 [ 1196.109279][ C1] ? __folio_cancel_dirty+0x590/0x590 [ 1196.114683][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1196.120673][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1196.125544][ C1] folio_end_writeback+0x150/0x690 [ 1196.130665][ C1] ? mark_buffer_write_io_error+0x260/0x260 [ 1196.136570][ C1] end_bio_bh_io_sync+0xb7/0x110 [ 1196.141533][ C1] blk_update_request+0x539/0xe00 [ 1196.146572][ C1] blk_mq_end_request+0x3e/0x70 [ 1196.151417][ C1] null_handle_cmd+0x74e/0x990 [ 1196.156174][ C1] ? null_queue_rq+0x516/0x640 [ 1196.160973][ C1] blk_mq_request_issue_directly+0x46a/0x770 [ 1196.166946][ C1] ? blk_insert_cloned_request+0x6e0/0x6e0 [ 1196.172771][ C1] blk_mq_plug_issue_direct+0x23a/0x550 [ 1196.178309][ C1] ? mark_buffer_write_io_error+0x260/0x260 [ 1196.184216][ C1] ? blk_mq_flush_plug_list+0x745/0x1840 [ 1196.189845][ C1] blk_mq_flush_plug_list+0x912/0x1840 [ 1196.195294][ C1] ? write_cache_pages+0x10f0/0x1290 [ 1196.200587][ C1] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 1196.206821][ C1] ? do_writepages+0x590/0x590 [ 1196.211590][ C1] __blk_flush_plug+0x3e4/0x460 [ 1196.216435][ C1] ? blk_check_plugged+0x250/0x250 [ 1196.221541][ C1] blk_finish_plug+0x5d/0x80 [ 1196.226119][ C1] do_writepages+0x3e7/0x590 [ 1196.230708][ C1] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 1196.236449][ C1] ? __rwlock_init+0x150/0x150 [ 1196.241219][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1196.246425][ C1] filemap_fdatawrite_wbc+0x122/0x180 [ 1196.251813][ C1] filemap_write_and_wait_range+0x14c/0x230 [ 1196.257725][ C1] ? xas_next_entry+0x3e0/0x3e0 [ 1196.262576][ C1] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 1196.269190][ C1] blkdev_put+0xe5/0x7a0 [ 1196.273427][ C1] blkdev_release+0x84/0x90 [ 1196.277919][ C1] ? blkdev_open+0x360/0x360 [ 1196.282512][ C1] __fput+0x221/0x940 [ 1196.286489][ C1] task_work_run+0x1d4/0x260 [ 1196.291082][ C1] ? task_work_cancel+0x220/0x220 [ 1196.296100][ C1] do_exit+0x986/0x2530 [ 1196.300266][ C1] ? put_task_struct+0xc0/0xc0 [ 1196.305034][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1196.311014][ C1] ? get_signal+0x100e/0x1390 [ 1196.315682][ C1] ? lock_chain_count+0x20/0x20 [ 1196.320529][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1196.325637][ C1] do_group_exit+0x22d/0x2f0 [ 1196.330238][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1196.335433][ C1] get_signal+0x12a6/0x1390 [ 1196.339932][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 1196.345493][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1196.351555][ C1] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 1196.357706][ C1] ? get_sigframe_size+0x20/0x20 [ 1196.362643][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1196.368101][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1196.373397][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1196.378951][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1196.384408][ C1] do_syscall_64+0x61/0xb0 [ 1196.388836][ C1] ? clear_bhb_loop+0x40/0x90 [ 1196.393505][ C1] ? clear_bhb_loop+0x40/0x90 [ 1196.398306][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1196.404214][ C1] RIP: 0033:0x7fcf1fb9e159 [ 1196.408632][ C1] Code: Unable to access opcode bytes at 0x7fcf1fb9e12f. [ 1196.415663][ C1] RSP: 002b:00007fcf209aa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1196.424082][ C1] RAX: fffffffffffffe00 RBX: 00007fcf1fe26098 RCX: 00007fcf1fb9e159 [ 1196.432065][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcf1fe26098 [ 1196.440061][ C1] RBP: 00007fcf1fe26090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.448066][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1196.456046][ C1] R13: 00007fcf1fe26128 R14: 00007ffe19a0cc20 R15: 00007ffe19a0cd08 [ 1196.464026][ C1] [ 1196.467460][ C1] Kernel Offset: disabled [ 1196.471783][ C1] Rebooting in 86400 seconds..