last executing test programs: 3m34.171432983s ago: executing program 2 (id=70): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f00000001c0)='./file2\x00', 0x400, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES16], 0x1, 0x194, &(0x7f0000000640)="$eJzsmD9P+kAYx7/X8if88ktw1UUTScDB0hY1MjgwO2ii0bhJpBK0iIEOwGZ8Ec6+AmfiwvvQQZ0cxM3Joebawx4oYuI/jM9neO57dw/Hc0+Tb5OCIIg/y831w9VZMhHj+j8SiIr1WzXIUaT8Vvxx5qK0cn6i31+22svZ/vMYANd9//+HALRzKhwxd93eXyfEuA6lq8Py/iYYNKG3oWBDaAsMW0LvSbrC8zVtt2Rb2k7FLnCh82DwYPKQ6a+vc8RQkOpj0n6t0dzP27ZV/UIxrH+dnIIlqT75eXV7owf9gwEFhtAZMKwJvYhotzd+S6T7T4SC89Vvvv/vFuPxITlhjEqpJD5BMHBxFwNGo56fEoE/uacMScmfQpJ/pJ3yYbrWaM6WyvmiVbQOTDOzoM/p+ryZ9ozIj2/4X8zzp3/S+eEBuREWQT3vOFXDj89zsx6FUzVfc9yI538KUtN+1UysyXjvgzE2xYeUChwPrJYgCIIgCIIgCIIgCIIgCOIjTIJ5X0F7yL5YMle97KcAAAD//5Z1cak=") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3855f026cbf8c41ff5b565176b461e9327059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a06e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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") truncate(0x0, 0xe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x108, 0x140, 0x0, {}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @func={0x4, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x42}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x7}, 0x94) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='clear_refs\x00') writev(r4, &(0x7f0000002440)=[{&(0x7f0000000280)='3', 0x1}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000540), 0x1003, r5}, 0x38) 3m26.513849442s ago: executing program 2 (id=82): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = fsopen(0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 3m23.441036468s ago: executing program 2 (id=84): fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r2 = dup(r1) getpid() r3 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) syz_open_dev$sg(&(0x7f0000000240), 0x9, 0x141040) pwritev(r1, 0x0, 0x0, 0xfffffffe, 0x5) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, 0x0, 0x40880) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019c80)=""/102400, 0x19000) sendfile(r1, r3, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4080, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x8000, 0x0, 0x0) recvmmsg(r6, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2160, 0x0) 3m19.55427813s ago: executing program 2 (id=89): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0x230, 0x0, 0xffffffff, 0x2d4, 0x0, 0x39c, 0x39c, 0xffffffff, 0x39c, 0x39c, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1b, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) syz_ublk_setup_io_uring(0x6548, 0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0xf0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}]}]}, 0x44}}, 0x20048004) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0xa, 0x78, 0x28e, 0x0, 0x66b8, 0x46ed0086}) 3m16.229689684s ago: executing program 2 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00005a6000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000247000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000370000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffd30}, 0x68) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r4, &(0x7f0000000a40)=[{{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x10, @loopback, 0x7fffffff}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000440)=[{0x78, 0x102, 0x93dc, "afe34381a171bd21c6448159e8cc4c54f20055bc3ff138cbe79b0589f029d0a545b48db85c1c4fcae480abbad317950a85f084a188cdbd05867971b881a10926d83335a75f369d8fa4b574212bfafb2b7a1256d744325b216ce3998d966875856083d28264"}, {0x88, 0x10e, 0x1, "8f0e280eaa8bd4ec663d6b4c45f2f35554c05986f1e38560727f25ffb28eb2ca13f5b5862093fd19dcfdd936567ddb355123d8a4f8e768c2eee7f40b21e7814a4c35e613683338980ea414a888e32a5f7ad5f3ab86a448d2739b31d6d543d502135593d5bf7cf0c5c14544f95f83678dd52ed77a6f"}, {0xc0, 0x114, 0xfffffff0, "4ff1a05460e8b2a00e534c656ebbd98893d3f242898b1dd4d0ff986332d62ac5052806327b9588671f21d093d353abd9fadbf6a1b649047a200f82f4da13c846abdcf8a6377e8fb062cec3af6b21e7aded63e03027d512738e522f7d048c1a4bd208b1dfa241980b81a0ddacf7454cd9da31125036bcc8174dd7b22de85e0459dc971530a674d0d29118cec34206b7404a4bf2ea1db4d3374ae5e078311cc65d63594f0e4f4585178295"}], 0x1c0}}, {{&(0x7f0000000700)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=[{0x80, 0x104, 0x3, "f802896d88a1eac7ec3d39f9ab0ed15a7035efc1ea14fb12f44dbc713c40fd611e4a7e2cf3fd59c54ff67fdc96d3148a92bd839d1a223f42c016443ac554e424bf8a133cd2e67cf4bea04701c8eb9528d324f1f2d3485c48b4ba519bd4a8e366816049c5bfb48270f1e6fce30f8d365c"}, {0x30, 0x108, 0x4, "d808e92500d340eaa1b29820a4e6094a25b37a683006436737fd"}], 0xb0}}], 0x2, 0x404c041) socket$unix(0x1, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) io_uring_setup(0x14cf, 0x0) 3m12.402377753s ago: executing program 2 (id=94): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r6 = syz_open_pts(r5, 0x2000) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000340)=0x8) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r7 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x295c3e750d7bf054) syz_open_dev$tty1(0xc, 0x4, 0x1) 2m56.15208019s ago: executing program 32 (id=94): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r6 = syz_open_pts(r5, 0x2000) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000340)=0x8) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r7 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x295c3e750d7bf054) syz_open_dev$tty1(0xc, 0x4, 0x1) 9.30244543s ago: executing program 4 (id=506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001180)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @from_mac}, 0x0, 0x5c, @default, @val={0x1, 0x4, [{0x1}, {0xc, 0x1}, {0x60, 0x1}, {0x18, 0x1}]}, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0x3aeb359a31dabaf4}, 0x0) 8.480145425s ago: executing program 4 (id=508): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001680)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff2, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x5, 0xf}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20045005}, 0x0) 8.208335244s ago: executing program 0 (id=509): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0xfbfffff8, 0x1008, 0xfbfbfffd, 0x2, 0x0, "1fb73a6900f4ff0900000000000000d3861000", 0x1, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xd) 8.183874975s ago: executing program 4 (id=510): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 7.965386212s ago: executing program 0 (id=512): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 7.482059227s ago: executing program 0 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r1, &(0x7f00000000c0)=@name, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getown(r0, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x4e23, @multicast2}}}, 0x88) close(r5) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 6.298328624s ago: executing program 4 (id=514): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$eJzs3QeYJHWhcP1ZYMkZRERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQJGcc84555xzzjnn+D3L7iquB/S+331fvPec8zy7M11dVVP9/3VXzUz1dC85z2JzDgyMPjC0KQZG7JY751xo4x3nvGKfnfY8ZYoxx5982ORhC0w67OKkg4Z9HGlgYGCkYesZNm2sR088aaSBUd6d/vfGGmPMQeMMDEw37OLswz7ONPTDRI8Nn++dERpxQwf97eKg7Yf+e7fxhnyJIZ8sffOF5wwMDIz/nuWHLDLNP91QaUvOMe88f7f6m9sQq8HDPn/vv1GH/pvogYGBie4d4PvHe+cd9CHcpCFfc/wdHxx93Q/ha/+Pa8k55p1vBP8hj8WRh02bachjfMTHoLER7+c3rzLr7sOG8N3728DAkF3cPzxW/ke05BzzLDDw/vv5gYfHHPeMd97db4717MDAWM8NDIz1/MDAWC8MDIz14sDAWC992C71/6855px+ziGP9+GXh7EPvy+PT/eLfVZ/ce+BgYHRhs4z1ttDjxdjTzH8mFBVVVX/2c0x5/RzwfF/9A86/m+19Ry3dvyvqqr6n9t8c8w5/ZDj+AjH/7E/6Pj/vRtvXGPo7/5nn2noUm9/uDeiqqqq/kvNMx8e/8f/oOP/eDtcv3/H/6qqqv+5Lbrgu8f/sUc4/k/8Qcf/Nea/87Jh8w3/vuGt96zy3eePDZv+xnumj/ye6a+/Z/rg96znvfOP+p7pr75n+ugDA2M9Omz6m3+fPNazQ5b55/WM9fLfn48z6Sjvmf7Ke6aP+p7prw7bpiHTR3vP9LfeM//of58+9pD/phj2dV/7gKGuqqr6j2nR6eeZa+A9z7MfNnn4E/vxeaHHHLP1XR/W9lZVVVVVVVXVf723nzr97L//zfcnB97zt6t/+xvWYb8XGHTsudde+6Ft6H9Gg/759yFbfNjb9P+3Ic6jHz7FwMBaS3zYm1IfQv9j/la9/q+Uv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe5/z/3/7+/+Be7+0w7BZZ5nszvsW+/uSkw6sNuyzW+6cc6HVPoRt/xD633r+f2C1QQMDw3zHH2K50ByLLj7VwMDAYvfdOdmMA3+7buYh18064cjv/jHnwMBU7/4/eNL3WfOwd1l4980dJv7bOo59d/3zvbPfyING2Ij3NNs59x+06pKvzDDixy+8/+342/tLLPXyflMO/1uWkUaYafT3WXj4+offlhGdh237VEO2feoN1lxn6vU33uSrq625/CorrbLSWtNNN+0M0884w3Rfn2XqlVdbY6Vphv7/PmM29K0rRv53xmzsEcfsqTneO2Yj3rYJTj4Ix+yf39XjH1bx7hrPm+3hy4eP2Sj/5pgN/3ojf/CYTbHasC806cDggeXeHZpBAwOTjjJ4YKMhF6YdbWBg0sHD5p10yLzfnHCkgYEd/35DBw17sdGh8wzaYsg8/2HvWzLLsBHZdPh8I77O+ogb+q/et+SEsXe5c4T3Lfm/1f/R8f+fvGYe9LeBGv4GCMPmGer1Ib/PxD9t7xSjvHuQe7/t/YDXxXk3un+tuepjS/x3vS4Obe/YH7C9H/A6fu+7vVNN+8weQ1f137a9I+zrFhh65b+zrxv44H3dyLT8SldNPuK+bv7338R/eBwPH6PRRpjp/fZ1O85/3uZD1j/wwfu6BVYb9uIBf9/XjTQwMOnIw/d1Q3Z8ow4e2HHIhemGXBht8MChQy5M/+6FMQbOHXLhayusvcaKg959mYFh651myHpnn3DQ0AfQTQetOtou77wzyrBteXmsf9zWYfePKd57PJ9jwmGDOWzZ4esdMuvw9b66zdDrRh223lf+C+sdvixt76RnDb1utGHrfXWE9Q7+gPUOX/afHg9TDfqHJ6rC/uZDfV8jevyO/gHb+wGvw433t3fdp1z24f+G1+Ee9H7bO8oHb+/7vW/I+27v45c/se9/1+uG0/3s3n2G3ldGH3Y/e+u/cP8dvuyI+7GhLwQydLc/+r+zH5vin/ZjW4480giD/Z7e7/vcFWH+YY+Iv61txQNfWW342A8eYb3/6vvc99yWQbAfG3+En+cGbb7vwCAa80fXeGHDt3f+4DEfPPCPP1sMH/Phy37QmI/274z5Jz54zEf8Pvn9xnyqzw69fvAI2//eMV9kt9lvGj7mo46w3n815qN98LHjn8d8YGAwjfmOkw0dtw/an77fmA9fdviYD/k6s044ysDcAwMDUw4b81H/nTGf9L/nfj4mzD/085X+NunZGRf+yvAxH3GM/9WYj/pfHPPN7v3b/XzKd6/7zEgDo446sNHyG2yw3rRD/x9+cbqh//O+6NkVh47zBx1L389o+LIf9LgY5d8xGv/fMhr0r4wmG+X9jP7+0Br5oEWf+z/dF43yXzU6l/dFp847dNw+6Pui9xvz4cvScXDi9yw/4s+hH/D6WXib3h2f+bcd/vPef8LrZw3/efd/5OtnDf+d5Goj7uTr363f/7vL313+7vJ3l7+49zn/P8Xw8//vjH3AJMN+6Bx81cy3zv5hb++H3P/q8//DfP/h/P/st8581ZAfrYZd94HnZ4fO8x95fnamoR8memz4fCOeHxxxQ//V+dl9dt3gqv9H52f/jxr+WP03fi5u/+8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIX9z7n/6cZ/jyAhxZf6PvDToQO3nTaozb9sLf3Q+5/9fn/Yb7/cP5/06Om3XSkgb9d94Hn/4fO4zj/f/+Cmy/zn3z+f/hjtfP/9S/K313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFvc/5/9mHPw/giNnm/tzw5wPcsN1+e3zY2/sh97/1/H/v/++t/b+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3LDz/wMjvE3iwt0vMDj//z+79/FfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/j/IH7P4/zB/zOK/ZP6YxX+p/DGL/4/yxyz+P84fs/gvnT9m8V8mf8ziv2z+mMX/J/ljFv/l8scs/svnj1n8f5o/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/j/LH/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi//P88cs/r/IH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/X+ePWfy3yh+z+P8mf8ziv3X+mMX/t/ljFv9t8scs/tvmj1n8t8sfs/hvnz9m8f9d/pjF//f5Yxb/HfLHLP5/yB+z+P8xf8ziv2P+mMV/p/wxi/+f8scs/jvnj1n8d8kfs/jvmj9m8f9z/pjF/y/5Yxb/3fLHLP5/zR+z+O+eP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6DBvLHLP6D8scs/iPlj1n8R84fs/iPkj9m8R+cP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/h/JH/M4j9J/pjF/6P5Yxb/SfPHLP4fyx+z+E+WP2bx/3j+mMX/E/ljFv/J88cs/p/MH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8P5s/ZvGfMn/M4v+5/DGL/+fzxyz+X8gfs/hPlT9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/+v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Rv6YxX/W/DGL/zfzxyz+s+WPWfy/lT9m8f92/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v5M/ZvGfO3/M4j9P/pjFf978MYv/d/PHLP7z5Y9Z/L+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/7+ePWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/H+SPWfx/mD9m8V8yf8ziv1T+mMX/R/ljFv8f549Z/JfOH7P4L5M/ZvFfNn/M4v+T/DGL/3L5Yxb/5fPHLP4/zR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/X+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/+v88cs/lvlj1n8f5M/ZvHfOn/M4v/b/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P4/y5/zOL/+/wxi/8O+WMW/z/kj1n8/5g/ZvHfMX/M4r9T/pjF/0/5Yxb/nfPHLP675I9Z/HfNH7P4/zl/zOL/l/wxi/9u+WMW/7/mj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vzf25bDP7H4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvF/99P8/zmL/6D8MYv/SPljFv+R88cs/qPkj1n8B+ePWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/h/JH7P4T5I/ZvH/aP6YxX/S/DGL/8fyxyz+k+WPWfw/nj9m8f9E/pjFf/L8MYv/J/PHLP6fyh+z+E+RP2bx/3T+mMX/M/ljFv/P5o9Z/KfMH7P4fy5/zOL/+fwxi/8X8scs/lPlj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/ev6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+RP2bxnzV/zOL/zfwxi/9s+WMW/2/lj1n8v50/ZvGfPX/M4j9H/pjFf878MYv/XPljFv/v5I9Z/OfOH7P4z5M/ZvGfN3/M4v/d/DGL/3z5Yxb/7+WPWfznzx+z+C+QP2bxXzB/zOK/UP6Yxf/7+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf8H+WMW/x/mj1n8l8wfs/gvlT9m8f9R/pjF/8f5Yxb/pfPHLP7L5I9Z/JfNH7P4/yR/zOK/XP6YxX/5/DGL/0/zxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/n+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/ef6Yxf8X+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx/2X+mMX/V/ljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8zi/+v8MYv/VvljFv/f5I9Z/LfOH7P4/zZ/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP6/yx+z+P8+f8ziv0P+mMX/D/ljFv8/5o9Z/HfMH7P475Q/ZvH/U/6YxX/n/DGL/y75Yxb/XfPHLP5/zh+z+P8lf8ziv1v+mMX/r/ljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/5IH8MYv/oPwxi/9I+WMW/5Hzxyz+o+SPWfwH549Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+H8kfs/hPkj9m8f9o/pjFf9L8MYv/x/LHLP6T5Y9Z/D+eP2bx/0T+mMV/8vwxi/8n88cs/p/KH7P4T5E/ZvH/dP6Yxf8z+WMW/8/mj1n8p8wfs/h/Ln/M4v/5/DGL/xfyxyz+U+WPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8f96/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v5E/ZvGfNX/M4v/N/DGL/2z5Yxb/b+WPWfy/nT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/+/kj1n8584fs/jPkz9m8Z83f8zi/938MYv/fPljFv/v5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjF//v5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/wf5Yxb/H+aPWfyXzB+z+C+VP2bx/1H+mMX/x/ljFv+l88cs/svkj1n8l80fs/j/JH/M4r9c/pjFf/n8MYv/T/PHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv+f5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8f95/pjF/xf5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvH/Zf6Yxf9X+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOL/6/wxi/9W+WMW/9/kj1n8t84fs/j/Nn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/r/LH7P4/z5/zOK/Q/6Yxf8P+WMW/z/mj1n8d8wfs/jvlD9m8f9T/pjFf+f8MYv/LvljFv9d88cs/n/OH7P4/yV/zOK/W/6Yxf+v+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/DVf7vjPfvzmnxP0Ll/+9n8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGL/zv5YxL/UQbyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyR/zOI/Sf6Yxf+j+WMW/0nzxyz+H8sfs/hPlj9m8f94/pjF/xP5Yxb/yfPHLP6fzB+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/D+bP2bxnzJ/zOL/ufwxi//n88cs/l/IH7P4T5U/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6Yxf9r+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf/r+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0b+mMV/1vwxi/8388cs/rPlj1n8v5U/ZvH/dv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+TP2bxnzt/zOI/T/6YxX/e/DGL/3fzxyz+8+WPWfy/lz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/+/nj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/x/kj1n8f5g/ZvFfMn/M4r9U/pjF/0f5Yxb/H+ePWfyXzh+z+C+TP2bxXzZ/zOL/k/wxi/9y+WMW/+Xzxyz+P80fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/lj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf/n+WMW/1/kj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/l/ljFv9f5Y9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/r/PHLP5b5Y9Z/H+TP2bx3zp/zOL/2/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P8uf8zi//v8MYv/DvljFv8/5I9Z/P+YP2bx3zF/zOK/U/6Yxf9P+WMW/53zxyz+u+SPWfx3zR+z+P85f8zi/5f8MYv/bvljFv+/5o9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vtJ/Uf7F9db/PeX+v+rLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/wQP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv+P5I9Z/CfJH7P4fzR/zOI/af6Yxf9j+WMW/8nyxyz+H88fs/h/In/M4j95/pjF/5P5Yxb/T+WPWfynyB+z+H86f8zi/5n8MYv/Z/PHLP5T5o9Z/D+XP2bx/3z+mMX/C/ljFv+p8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fz1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMV/tvwxi/+38scs/t/OH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/d/LHLP5z549Z/OfJH7P4z5s/ZvH/bv6YxX++/DGL//fyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/8P88cs/kvmj1n8l8ofs/j/KH/M4v/j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+SP2bxXy5/zOK/fP6Yxf+n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/8/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+P8yf8zi/6v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f91/pjFf6v8MYv/b/LHLP5b549Z/H+bP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/3+WPWfx/nz9m8d8hf8zi/4f8MYv/H/PHLP475o9Z/HfKH7P4/yl/zOK/c/6YxX+X/DGL/675Yxb/P+ePWfz/kj9m8d8tf8zi/9f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP+pA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/kj1n8J8kfs/h/NH/M4j9p/pjF/2P5Yxb/yfLHLP4fzx+z+H8if8ziP3n+mMX/k/ljFv9P5Y9Z/KfIH7P4fzp/zOL/mfwxi/9n88cs/lPmj1n8P5c/ZvH/fP6Yxf8L+WMW/6nyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/PX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/IH7P4z5o/ZvH/Zv6YxX+2/DGL/7fyxyz+384fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi/938scs/nPnj1n858kfs/jPmz9m8f9u/pjFf778MYv/9/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+D/DGL/w/zxyz+S+aPWfyXyh+z+P8of8zi/+P8MYv/0vljFv9l8scs/svmj1n8f5I/ZvFfLn/M4r98/pjF/6f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/z/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/PH/M4v+L/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/3X+mMV/q/wxi/9v8scs/lvnj1n8f5s/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv/f5Y9Z/H+fP2bx3yF/zOL/h/wxi/8f88cs/jvmj1n8d8ofs/j/KX/M4r9z/pjFf5f8MYv/rvljFv8/549Z/P+SP2bx3y1/zOL/1/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/TOI/2kD+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/j+SPWfwnyR+z+H80f8ziP2n+mMX/Y/ljFv/J8scs/h/PH7P4fyJ/zOI/ef6Yxf+T+WMW/0/lj1n8p8gfs/h/On/M4v+Z/DGL/2fzxyz+U+aPWfw/lz9m8f98/pjF/wv5Yxb/qfLHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H89f8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+38gfs/jPmj9m8f9m/pjFf7b8MYv/t/LHLP7fzh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/3fyxyz+c+ePWfznyR+z+M+bP2bx/27+mMV/vvwxi//38scs/vPnj1n8F8gfs/gvmD9m8V8of8zi//38MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/4P8MYv/D/PHLP5L5o9Z/JfKH7P4/yh/zOL/4/wxi//S+WMW/2Xyxyz+y+aPWfx/kj9m8V8uf8ziv3z+mMX/p/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//P8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P88f8zi/4v8MYv/hvljFv+N8scs/hvnj1n8N8kfs/j/Mn/M4v+r/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvH/df6YxX+r/DGL/2/yxyz+W+ePWfx/mz9m8d8mf8ziv23+mMV/u/wxi//2+WMW/9/lj1n8f58/ZvHfIX/M4v+H/DGL/x/zxyz+O+aPWfx3yh+z+P8pf8ziv3P+mMV/l/wxi/+u+WMW/z/nj1n8/5I/ZvHfLX/M4v/X/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4j/6QP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j+h2P+dzd//Oov/RGL/D8riP3H+mMX/I/ljFv9J8scs/h/NH7P4T5o/ZvH/WP6YxX+y/DGL/8fzxyz+n8gfs/hPnj9m8f9k/pjF/1P5Yxb/KfLHLP6fzh+z+H8mf8zi/9n8MYv/lPljFv/P5Y9Z/D+fP2bx/0L+mMV/qvwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/PH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/N/LHLP6z5o9Z/L+ZP2bxny1/zOL/rfwxi/+388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/538MYv/3PljFv958scs/vPmj1n8v5s/ZvGfL3/M4v+9/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yB/zOL/w/wxi/+S+WMW/6Xyxyz+P8ofs/j/OH/M4r90/pjFf5n8MYv/svljFv+f5I9Z/JfLH7P4L58/ZvH/af6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+z/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/PH7P4/yJ/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfx/nT9m8d8qf8zi/5v8MYv/1vljFv/f5o9Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/3f5Yxb/3+ePWfx3yB+z+P8hf8zi/8f8MYv/jvljFv+d8scs/n/KH7P475w/ZvHfJX/M4r9r/pjF/8/5Yxb/v+SPWfx3yx+z+P81f8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8xkD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf8j+WMW/0nyxyz+H80fs/hPmj9m8f9Y/pjFf7L8MYv/x/PHLP6fyB+z+E+eP2bx/2T+mMX/U/ljFv8p8scs/p/OH7P4fyZ/zOL/2fwxi/+U+WMW/8/lj1n8P58/ZvH/Qv6YxX+q/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X88fs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/838scs/rPmj1n8v5k/ZvGfLX/M4v+t/DGL/7fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/nfwxi//c+WMW/3nyxyz+8+aPWfy/mz9m8Z8vf8zi/738MYv//PljFv8F8scs/gvmj1n8F8ofs/h/P3/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/j/IH/M4v/D/DGL/5L5Yxb/pfLHLP4/yh+z+P84f8ziv3T+mMV/mfwxi/+y+WMW/5/kj1n8l8sfs/gvnz9m8f9p/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/7P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P88fs/j/In/M4r9h/pjFf6P8MYv/xvljFv9N8scs/r/MH7P4/yp/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/H+dP2bx3yp/zOL/m/wxi//W+WMW/9/mj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/d/ljFv/f549Z/HfIH7P4/yF/zOL/x/wxi/+O+WMW/53yxyz+f8ofs/jvnD9m8d8lf8ziv2v+mMX/z/ljFv+/5I9Z/HfLH7P4/zV/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH5P4jzmQP2bxH5Q/ZvEfKX/M4j9y/pjFf5T8MYv/4Pwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjF/yP5Yxb/SfLHLP4fzR+z+E+aP2bx/1j+mMV/svwxi//H88cs/p/IH7P4T54/ZvH/ZP6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4v/Z/DGL/5T5Yxb/z+WPWfw/nz9m8f9C/pjFf6r8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fzx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/zfyxyz+s+aPWfy/mT9m8Z8tf8zi/638MYv/t/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v+d/DGL/9z5Yxb/efLHLP7z5o9Z/L+bP2bxny9/zOL/vfwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+H8/f8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+P8gf8zi/8P8MYv/kvljFv+l8scs/j/KH7P4/zh/zOK/dP6YxX+Z/DGL/7L5Yxb/n+SPWfyXyx+z+C+fP2bx/2n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/s/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/zx+z+P8if8ziv2H+mMV/I5n/aP/mfBb/jWX+/24W/03yxyz+v8wfs/j/Kn/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8f50/ZvHfKn/M4v+b/DGL/9b5Yxb/3+aPWfy3yR+z+G+bP2bx3y5/zOK/ff6Yxf93+WMW/9/nj1n8d8gfs/j/IX/M4v/H/DGL/475Yxb/nfLHLP5/yh+z+O+cP2bx3yV/zOK/a/6Yxf/P+WMW/7/kj1n8d8sfs/j/NX/M4r97/pjFf4/8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj1n838kfk/iPNZA/ZvEflD9m8R8pf8ziP3L+mMV/lPwxi//g/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/I/ljFv9J8scs/h/NH7P4T5o/ZvH/WP6YxX+y/DGL/8fzxyz+n8gfs/hPnj9m8f9k/pjF/1P5Yxb/KfLHLP6fzh+z+H8mf8zi/9n8MYv/lPljFv/P5Y9Z/D+fP2bx/0L+mMV/qvwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/PH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/N/LHLP6z5o9Z/L+ZP2bxny1/zOL/rfwxi/+388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/538MYv/3PljFv958scs/vPmj1n8v5s/ZvGfL3/M4v+9/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yB/zOL/w/wxi/+S+WMW/6Xyxyz+P8ofs/j/OH/M4r90/pjFf5n8MYv/svljFv+f5I9Z/JfLH7P4L58/ZvH/af6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+z/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/PH7P4/yJ/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfx/nT9m8d8qf8zi/5v8MYv/1vljFv/f5o9Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/3f5Yxb/3+ePWfx3yB+z+P8hf8zi/8f8MYv/jvljFv+d8scs/n/KH7P475w/ZvHfJX/M4r9r/pjF/8/5Yxb/v+SPWfx3yx+z+P81f8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I89kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf8j+WMW/0ne1//td9555//Npv0nZvH/aI9/zOI/af6Yxf9j+WMW/8nyxyz+H88fs/h/In/M4j95/pjF/5P5Yxb/T+WPWfynyB+z+H86f8zi/5n8MYv/Z/PHLP5T5o9Z/D+XP2bx/3z+mMX/C/ljFv+p8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fz1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMV/tvwxi/+38scs/t/OH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/d/LHLP5z549Z/OfJH7P4z5s/ZvH/bv6YxX++/DGL//fyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/8P88cs/kvmj1n8l8ofs/j/KH/M4v/j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+SP2bxXy5/zOK/fP6Yxf+n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/8/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+P8yf8zi/6v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f91/pjFf6v8MYv/b/LHLP5b549Z/H+bP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/3+WPWfx/nz9m8d8hf8zi/4f8MYv/H/PHLP475o9Z/HfKH7P4/yl/zOK/c/6YxX+X/DGL/675Yxb/P+ePWfz/kj9m8d8tf8zi/9f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8p/SINGHAOL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP7jDOSPWfwH5Y9Z/EfKH7P4j5w/ZvEfJX/M4j84f8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvH/SP6YxX+S/DGL/0fzxyz+k+aPWfw/lj9m8Z8sf8zi//H8MYv/J/LHLP6T549Z/D+ZP2bx/1T+mMV/ivwxi/+n88cs/p/JH7P4fzZ/zOI/Zf6Yxf9z+WMW/8/nj1n8v5A/ZvGfKn/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/9fzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/jfwxi/+s+WMW/2/mj1n8Z8sfs/h/K3/M4v/t/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fyd/zOI/d/6YxX+e/DGL/7z5Yxb/7+aPWfznyx+z+H8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+388fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8gfs/j/MH/M4r9k/pjFf6n8MYv/j/LHLP4/zh+z+C+dP2bxXyZ/zOK/bP6Yxf8n+WMW/+Xyxyz+y+ePWfx/mj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P8sf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/8/zxyz+v8gfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/8v88cs/r/KH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv9f549Z/LfKH7P4/yZ/zOK/df6Yxf+3+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/13+mMX/9/ljFv8d8scs/n/IH7P4/zF/zOK/Y/6YxX+n/DGL/5/yxyz+O+ePWfx3yR+z+O+aP2bx/3P+mMX/L/ljFv/d8scs/n/NH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938sck/uMO5I9Z/Aflj1n8R8ofs/iPnD9m8R8lf8ziPzh/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8f9I/pjFf5L8MYv/R/PHLP6T5o9Z/D+WP2bxnyx/zOL/8fwxi/8n8scs/pPnj1n8P5k/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/h/Nn/M4j9l/pjF/3P5Yxb/z+ePWfy/kD9m8Z8qf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/1/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+N/DGL/6z5Yxb/b+aPWfxnyx+z+H8rf8zi/+38MYv/7PljFv858scs/nPmj1n858ofs/h/J3/M4j93/pjFf578MYv/vPljFv/v5o9Z/OfLH7P4fy9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP7fzx+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yB+z+P8wf8ziv2T+mMV/qfwxi/+P8scs/j/OH7P4L50/ZvFfJn/M4r9s/pjF/yf5Yxb/5fLHLP7L549Z/H+aP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yx/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP6/yB+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/1/nj1n8t8ofs/j/Jn/M4r91/pjF/7f5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvH/Xf6Yxf/3+WMW/x3yxyz+f8gfs/j/MX/M4r9j/pjFf6f8MYv/n/LHLP47549Z/HfJH7P475o/ZvH/c/6Yxf8v+WMW/93yxyz+f80fs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+4w3kj1n8B+WPWfxHyh+z+I+cP2bxHyV/zOI/OH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bx/0j+mMV/kvwxi/9H88cs/v8fe/SUNgoBQAHwVn/mY7Zt27Zt27Zt27Zt27Zt673vrKAzs4UZ1X/U8j+a/6jlf3T/Ucv/GP6jlv8x/Uct/2P5j1r+x/YftfyP4z9q+R/Xf9TyP57/qOV/fP9Ry/8E/qOW/wn9Ry3/E/mPWv4n9h+1/E/iP2r5n9R/1PI/mf+o5X9y/1HL/xT+o5b/Kf1HLf9T+Y9a/qf2H7X8T+M/avmf1n/U8j+d/6jlf3r/Ucv/DP6jlv8Z/Uct/zP5j1r+Z/YftfzP4j9q+Z/Vf9TyP5v/qOV/dv9Ry/8c/qOW/zn9Ry3/c/mPWv7n9h+1/M/jP2r5n9d/1PI/n/+o5X9+/1HL/wL+o5b/Bf1HLf8L+Y9a/hf2H7X8L+I/avlf1H/U8r+Y/6jlf3H/Ucv/Ev6jlv8l/Uct/0v5j1r+l/Yftfwv4z9q+V/Wf9Tyv5z/qOV/ef9Ry/8K/qOW/xX9Ry3/K/mPWv5X9h+1/K/iP2r5X9V/1PK/mv+o5X91/1HL/xr+o5b/Nf1HLf9r+Y9a/tf2H7X8r+M/avlf13/U8r+e/6jlf33/Ucv/Bv6jlv8N/Uct/xv5j1r+N/Yftfxv4j9q+d/Uf9Tyv5n/qOV/c/9Ry/8W/qOW/y39Ry3/W/mPWv639h+1/G/jP2r539Z/1PK/nf+o5X97/1HL/w7+o5b/Hf1HLf87+Y9a/nf2H7X87+I/avnf1X/U8r+b/6jlf3f/Ucv/Hv6jlv89/Uct/3v5j1r+9/Yftfzv4z9q+d/Xf9Tyv5//qOV/f/9Ry/8B/qOW/wP9Ry3/B/mPWv4P9h+1/B/iP2r5P9R/1PJ/mP+o5f9w/1HL/xH+o5b/I/1HLf9H+Y9a/o/2H7X8H+M/avk/1n/U8n+c/6jl/3j/Ucv/Cf6jlv8T/Uct/yf5j1r+T/Yftfyf4j9q+T/Vf9Tyf5r/qOX/dP9Ry/8Z/qOW/zP9Ry3/Z/mPWv7P9h+1/J/jP2r5P9d/1PJ/nv+o5f98/1HL/wX+o5b/C/1HLf8X+Y9a/i/2H7X8X+I/avm/1H/U8n+Z/6jl/3L/Ucv/Ff6jlv8r/Uct/1f5j1r+r/Yftfxf4z9q+b/Wf9Tyf53/qOX/ev9Ry/8N/qOW/xv9Ry3/N/mPWv5v9h+1/N/iP2r5v9V/1PJ/m/+o5f92/1HL/x3+o5b/O/1HLf93+Y9a/u/2H7X83+M/avm/13/U8n+f/6jl/37/Ucv/A/6jlv8H/Uct/w/5j1r+H/Yftfw/4j9q+X/Uf9Ty/5j/qOX/cf9Ry/8T/qOW/yf9Ry3/T/mPWv6f9h+1/D/jP2r5f9Z/1PL/nP+o5f95/1HL/wv+o5b/F/1HLf8v+Y9a/l/2H7X8v+I/avl/1X/U8v+a/6jl/3X/Ucv/G/6jlv83/Uct/2/5j1r+3/Yftfy/4z9q+X/Xf9Ty/57/qOX/ff9Ry/8H/qOW/w/9Ry3/H/mPWv4/9h+1/H/iP2r5/9R/1PL/mf+o5f9z/1HL/xf+/2tgUNH/l/6jlv+v/Ect/1/7j1r+v/Eftfx/6z9q+f/Of9Ty/73/qOX/B/9Ry/+P/qOW/5/8Ry3/P/uPWv5/8R+1/P/qP2r5/81/1PL/u/+o5f8P/1HL/5/+o5b/v/xHLf9/+49a/v/xH5X8jzLIf9TyP5j/qOV/cP9Ry/8Q/qOW/wH/Ucv/kP6jlv+h/Ect/0P7j1r+h/EftfwP6z9q+R/Of9TyP7z/qOV/BP9Ry/+I/qOW/5H8Ry3/I/uP/nf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzL3t3G5lUWfhw/Xds9/dm/m3N4DRkMNt3Ela1dmQw2H+pjwVQdiwETyBZWRqUw9xDcQK0GJQZjmIwEEXWbugkkxowXwwSElUQlTkXjRDTEIaiLmBomMqJxqbnb3qW91zbrVa9rL/b5vGjvc8rvdFvy3TllawYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQEqbt91yw9qOjrZNXnjhhRcDL07170xAaq9Ff6p/JAAAAAAAAAAAAAAAwEhyfDvRqf45AgAAAADA6aal9V3d1VVDTlUPPpjz87be902vXnn9nucfX1l+3//hy4e55ITBBz09PT0vNXfN7D+cVBRF6bNN7z+eXDkuXb+z6/LtfUeh+O2zza3btjcf3PmVrz88d+r0ObW9Z2uLNde1d7QtmVAUobq22Fo6aKgqijCxttheOmgsHUyqLe4vHSztPZhSHCgdXHjtho51pRMnfGo47bS0fraoHlJsMeR3g8H9d3Zt2lV+P8oly1erKfr7r2v+4d6Kj5WN0H/5+qGqsv8x/wSBEY2t/9sXlt+PcskT7v+PttetGu5jI/dfvn6YoH9IZ5jn/yGN9j7v79k/Y4Tn/7nDXHJg/9O/rOwq9X/TL1+o7z9VczLP/6XP13cUqiv7nzDk+b/0HF9Tfv6fVBShdpy/HHBaaWn9XPdo9//K7of2X3NWxaZqcP9HV+2pLvV/+K4H3t9/qvak+h+4fqgZ5f5f9ZkDQ3+swNi0tO7uqbj/j6H/YsEwlxzof/7uY1eV+j9j55F9gz42lv5rK/tfvOXGTyzevO2W+vYb165vW992U2NjQ9PSZU2NFy1f3PtI0Pd2nL8qcHoY3/2/mFqxqSqKtoH9og8ve6nU/8Fz//G3/lOTx9j/xFHv/8+5/8Owzp9QTJxYbF27Zcumhr635cPGvrd9/9kw/Z/49f+I/c8r/3/A8tfdpS/IB/a/eedXP1Lq/95Jqx7oPzVxjP1PGq3/ztc+LxBhnPf/dRWbIf23v/qddaX+//TK8UP9p8b69f/kUfvf5f4P49HSWvEXfv7HSv2v/tfh4f6c4CSEKf78D9LJ0f/Wab/4Ztw6TNU/pJOj/6Wb2yL/sm34P/1DOjn6/9WOqiNx63CG/iGdHP1/rfvBjXHrME3/kE6O/vfPfuSpuHX4f/1DOjn6P75++lVx61Cnf0gnR/+XfWnv6rh1mK5/SCdH/1WvTHsibh1m6B/SydF/fdXZn4pbh9fpH9LJ0f91nQ+/GLcOM/UP6eTo//M7fx35fTrh9fqHdHL0/9Qft+6IW4dZ+od0cvT/wqz2+rh1OFP/kE6O/u+/4YlH4tbhDfqHdHL0//S3Pngsbh2C/iGdHP1/49kja+LWYbb+IZ0c/e9beOwPcetwlv4hnRz9//ujV38gbh3eqH9IJ0f/Yf/y78atw9n6h3Ry9H/Fk3c1xK3DHP1DOjn671xx251x63CO/iGdHP03NS+cHbcO5+of0snR/4w///3uuHWYq39IJ0f/H7vvvZX/7vdJCufpH9LJ0f/NG1Y/GrcO5+sf0snR/8oZPRfErcM8/UM6Ofo/fPS+H8Wtw3z9Qzo5+r/7ziVXxK3Dm/QP6eTo/we3ntcdtw5v1j+kk6P/l2vvuDVuHRboH9LJ0f+Xf1azLG4dFuof0snR/48f+v6uuHV4i/4hnRz9v/i+x86JW4cL9A/p5Oh/98Wzvhi3Dm/VP6STo/93P7Nxfdw6LNI/pJOj/8l7f380bh3q9Q/p5Oh//qqDH4pbhwv1D+nk6H/DojW/i1uHxfqHdHL0/8yBpw/FrcMS/UM6Ofrf8dinm+PWoUH/kE6O/h+/rOM/cevQqH9IJ0f//2z6ycfj1mGp/iGdHP2feejbX4hbhyb9Qzo5+r/6wckz49bhIv1DOjn633jN7O/FrcMy/UM6Ofq/ZO5Dl8atw9v0D+nk6P89f11xc9w6XKx/SCdH/3X33PNc3Dos1z+kk6P/edfefk3cOlyif0gnR//Xz6l/Mm4dLtU/pJOj/zuOtyyIW4cV+od0cvTfddvz++LWYaX+IZ0c/Xd/8uW6uHV4u/4hnRz9751y5b1x6/AO/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBfduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8FAAD//xDC0no=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) readahead(r0, 0x5, 0x8000000000000000) 6.252167915s ago: executing program 0 (id=524): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) 6.201392867s ago: executing program 5 (id=516): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fdatasync(r0) 4.270114627s ago: executing program 4 (id=520): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x20, 0x5, 0x8, {0x8, 0x6, "e278a0cad3ed"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.793186022s ago: executing program 5 (id=521): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000280)={0x8, 0x7}) 3.473867112s ago: executing program 1 (id=525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r1, &(0x7f00000000c0)=@name, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getown(r0, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x4e23, @multicast2}}}, 0x88) close(r5) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 3.23280326s ago: executing program 5 (id=526): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe40, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1003}, 0x38) 2.605718239s ago: executing program 5 (id=527): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0xfbfffff8, 0x1008, 0xfbfbfffd, 0x2, 0x0, "1fb73a6900f4ff0900000000000000d3861000", 0x1, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xd) 2.604360879s ago: executing program 0 (id=537): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x27f9, 0x1000, 0x1, 0x35d}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f00000005c0)={0x7e9, 0x3, 0x1, 0x2, 0x3, [0xd, 0x0, 0xfffffffd, 0xca]}) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r1, r1, 0x0) 2.418193025s ago: executing program 3 (id=528): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfff}}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r5, &(0x7f00000002c0)={0x130, 0x0, r6, {0x4000000000007, 0xc, 0x0, '\x00', {0x6, 0xaf22, 0x6, 0x6, 0x0, r7, 0xa000, '\x00', 0x7, 0x8, 0xd60b, 0x80000000005, {0x4002008, 0xfffffff0}, {0x203d7f, 0x2, 0xc000000}, {0x100000000408, 0x72}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) 2.417904534s ago: executing program 1 (id=529): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r1, &(0x7f0000000d00)=[{&(0x7f0000000600)='e\f', 0x2}], 0x1) 1.979937079s ago: executing program 5 (id=530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0000081, 0x0, 0x5}]}) 1.770800405s ago: executing program 0 (id=531): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086666048800000000000109022400010000100809040090010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x22, 0x5, {[@main=@item_012={0x2, 0x0, 0x9, "56b4"}, @local=@item_012={0x1, 0x2, 0x9, '%'}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0x11a}}}}, 0x0) 1.710261627s ago: executing program 3 (id=532): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) 1.684500618s ago: executing program 1 (id=533): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfff}}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r5, &(0x7f00000002c0)={0x130, 0x0, r6, {0x4000000000007, 0xc, 0x0, '\x00', {0x6, 0xaf22, 0x6, 0x6, 0x0, r7, 0xa000, '\x00', 0x7, 0x8, 0xd60b, 0x80000000005, {0x4002008, 0xfffffff0}, {0x203d7f, 0x2, 0xc000000}, {0x100000000408, 0x72}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) 1.660937789s ago: executing program 5 (id=534): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) 1.530841093s ago: executing program 3 (id=535): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f00000001c0), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./bus\x00', 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 1.492528134s ago: executing program 1 (id=536): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x50, 0x15, 0x520e, {0x803, 0x5d4}, {0xfffa, 0x2}, @cond=[{0x36, 0x520, 0x3, 0x8, 0xeb, 0x7}, {0xec9a, 0x6, 0xe28, 0x6, 0x40, 0x4}]}) 1.026856458s ago: executing program 3 (id=538): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe40, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1003}, 0x38) 969.45108ms ago: executing program 4 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r1, &(0x7f00000000c0)=@name, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getown(r0, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x4e23, @multicast2}}}, 0x88) close(r6) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 725.960278ms ago: executing program 3 (id=540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "6c5b1acb23471e53a309d5202bdba2d8", 0x8}}}, 0x1a) bind$inet(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x10000, 0x0) 660.30483ms ago: executing program 1 (id=541): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmmsg$unix(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2120, 0x0) 569.420053ms ago: executing program 3 (id=542): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80045b09, 0x0) 0s ago: executing program 1 (id=543): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000600)={[{@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0x6}}, {}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@namecase}, {@gid}, {@namecase}, {@umask={'umask', 0x3d, 0x75}}, {@errors_continue}, {}]}, 0x1, 0x1535, &(0x7f0000001380)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/175, 0xaf) kernel console output (not intermixed with test programs): 50:50:50:50:50:50 [ 87.294170][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.329786][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.340825][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.355224][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.459348][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.478131][ T4380] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 87.525356][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.579806][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.263875][ T4386] sched: RT throttling activated [ 89.326047][ T4390] Zero length message leads to an empty skb [ 89.600516][ T4375] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.423704][ T4375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.435074][ T4375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.445247][ T4375] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 90.456468][ T4375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.471401][ T4375] usb 4-1: config 0 descriptor?? [ 90.751423][ T4396] loop1: detected capacity change from 0 to 32768 [ 90.774749][ T4396] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.9 (4396) [ 90.810375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 90.986545][ T4396] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 90.997006][ T4396] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 91.000442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 91.006394][ T4396] BTRFS info (device loop1): using free space tree [ 91.013838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 91.020378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 91.030409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 91.701874][ T4375] usbhid 4-1:0.0: can't add hid device: -71 [ 91.708311][ T4375] usbhid: probe of 4-1:0.0 failed with error -71 [ 91.757105][ T4396] BTRFS info (device loop1): enabling ssd optimizations [ 91.830555][ T127] cfg80211: failed to load regulatory.db [ 91.850814][ T4375] usb 4-1: USB disconnect, device number 2 [ 92.564089][ T4427] loop3: detected capacity change from 0 to 4096 [ 93.140508][ T4292] Bluetooth: hci5: command 0x1003 tx timeout [ 93.147553][ T4290] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 93.634424][ T4273] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 94.600363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 94.620358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 94.630360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 94.640359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 94.650360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 95.119953][ T4444] 9pnet_fd: Insufficient options for proto=fd [ 96.420759][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.428808][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.202186][ T4451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.201633][ T4292] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 100.211572][ T4292] CPU: 1 PID: 4292 Comm: kworker/u5:9 Not tainted syzkaller #0 [ 100.219217][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 100.229325][ T4292] Workqueue: hci1 hci_rx_work [ 100.234084][ T4292] Call Trace: [ 100.237409][ T4292] [ 100.240397][ T4292] dump_stack_lvl+0x188/0x24e [ 100.245133][ T4292] ? show_regs_print_info+0x12/0x12 [ 100.250392][ T4292] ? load_image+0x400/0x400 [ 100.254961][ T4292] sysfs_create_dir_ns+0x26a/0x290 [ 100.260130][ T4292] ? sysfs_warn_dup+0xa0/0xa0 [ 100.264861][ T4292] ? do_raw_spin_unlock+0x11d/0x230 [ 100.270105][ T4292] kobject_add_internal+0x61c/0xcc0 [ 100.275357][ T4292] kobject_add+0x160/0x230 [ 100.279814][ T4292] ? kobject_init+0x1d0/0x1d0 [ 100.284539][ T4292] ? klist_children_get+0x50/0x50 [ 100.289616][ T4292] ? get_device_parent+0x121/0x3f0 [ 100.294769][ T4292] device_add+0x48c/0x1000 [ 100.299217][ T4292] ? kmem_cache_free+0xf7/0x290 [ 100.304113][ T4292] hci_conn_add_sysfs+0xd1/0x1e0 [ 100.309089][ T4292] le_conn_complete_evt+0x1062/0x1670 [ 100.314511][ T4292] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 100.320793][ T4292] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 100.326457][ T4292] ? skb_pull_data+0xf7/0x200 [ 100.331169][ T4292] hci_le_enh_conn_complete_evt+0x185/0x460 [ 100.337096][ T4292] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 100.343544][ T4292] ? hci_remote_host_features_evt+0x270/0x270 [ 100.349637][ T4292] hci_event_packet+0x7b9/0x1280 [ 100.354607][ T4292] ? bis_list+0x280/0x280 [ 100.358967][ T4292] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 100.364900][ T4292] ? kcov_remote_start+0x4c7/0x7e0 [ 100.370039][ T4292] ? mt_dump_node+0x750/0x1920 [ 100.374832][ T4292] ? hci_send_to_monitor+0x9c/0x4a0 [ 100.380066][ T4292] hci_rx_work+0x3eb/0xd40 [ 100.384522][ T4292] ? _raw_spin_unlock+0x40/0x40 [ 100.389413][ T4292] ? process_one_work+0x7b0/0x1160 [ 100.394548][ T4292] process_one_work+0x8a2/0x1160 [ 100.399524][ T4292] ? worker_detach_from_pool+0x240/0x240 [ 100.405185][ T4292] ? _raw_spin_lock_irq+0xb7/0xf0 [ 100.410239][ T4292] ? _raw_spin_lock_irqsave+0x100/0x100 [ 100.415854][ T4292] ? kthread_data+0x4b/0xc0 [ 100.420404][ T4292] worker_thread+0xaa2/0x1270 [ 100.425140][ T4292] ? __kthread_parkme+0x162/0x1c0 [ 100.430203][ T4292] kthread+0x29d/0x330 [ 100.434306][ T4292] ? worker_clr_flags+0x1a0/0x1a0 [ 100.439358][ T4292] ? kthread_blkcg+0xd0/0xd0 [ 100.443975][ T4292] ret_from_fork+0x1f/0x30 [ 100.448438][ T4292] [ 100.471267][ T4292] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 100.484815][ T4292] Bluetooth: hci1: failed to register connection device [ 103.528412][ T4479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 106.100748][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 106.616868][ T4467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.673888][ T4467] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 106.746899][ T4467] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 106.765217][ T4467] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.778512][ T4467] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.789913][ T4467] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 106.807765][ T4467] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.815320][ T4467] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.829165][ T4467] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 106.839598][ T4467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.300686][ T4467] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 107.514570][ T4467] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 107.647810][ T4495] loop3: detected capacity change from 0 to 512 [ 107.659807][ T4495] EXT4-fs: Ignoring removed bh option [ 108.261055][ T4467] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 108.270607][ T4467] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 108.288554][ T4495] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 108.332833][ T4495] EXT4-fs (loop3): 1 truncate cleaned up [ 108.338609][ T4495] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.390141][ T4467] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 108.670411][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.820447][ T4292] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.826651][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.900893][ T4290] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.547439][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 109.623215][ T4507] loop1: detected capacity change from 0 to 512 [ 111.052844][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 111.059050][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.064556][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 111.070568][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 111.072491][ T4292] Bluetooth: hci1: command 0x0406 tx timeout [ 111.090896][ T4507] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.164837][ T4507] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.24: invalid indirect mapped block 83886080 (level 1) [ 111.183791][ T4507] EXT4-fs (loop1): 1 orphan inode deleted [ 111.189573][ T4507] EXT4-fs (loop1): 1 truncate cleaned up [ 111.195324][ T4507] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 111.591098][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 111.844144][ T4518] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.908595][ T4526] netlink: 64 bytes leftover after parsing attributes in process `syz.4.27'. [ 113.050278][ T4525] 9pnet_virtio: no channels available for device syz [ 113.140515][ T4292] Bluetooth: hci4: command 0x0406 tx timeout [ 115.511952][ T4535] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 115.569305][ T26] audit: type=1326 audit(1781796434.445:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.1.32" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab4db9ce59 code=0x0 [ 116.325128][ T4548] netlink: 'syz.2.34': attribute type 1 has an invalid length. [ 116.720672][ T4548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 119.901168][ T4546] input: syz0 as /devices/virtual/input/input6 [ 123.422001][ T4586] Bluetooth: MGMT ver 1.22 [ 126.147889][ T4600] can0: slcan on ptm0. [ 126.195865][ T4600] xt_CONNSECMARK: invalid mode: 66 [ 126.612216][ T4593] can0 (unregistered): slcan off ptm0. [ 126.691541][ T4605] process 'syz.2.44' launched '/dev/fd/6' with NULL argv: empty string added [ 127.921172][ T4616] loop4: detected capacity change from 0 to 128 [ 127.928374][ T4616] ======================================================= [ 127.928374][ T4616] WARNING: The mand mount option has been deprecated and [ 127.928374][ T4616] and is ignored by this kernel. Remove the mand [ 127.928374][ T4616] option from the mount to silence this warning. [ 127.928374][ T4616] ======================================================= [ 127.964882][ T4616] EXT4-fs: inline encryption not supported [ 129.063951][ T4616] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 129.073799][ T4616] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.114588][ T4612] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.40: checksumming directory block 0 [ 129.368432][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 129.684703][ T4623] loop4: detected capacity change from 0 to 512 [ 130.401429][ T4623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.545104][ T4623] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.49: iget: bad i_size value: 38620345925642 [ 130.750866][ T4623] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.49: couldn't read orphan inode 15 (err -117) [ 132.329644][ T4623] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.813009][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.831830][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.462815][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 135.912782][ T4669] ubi16: attaching mtd0 [ 135.926664][ T4669] ubi16: scanning is finished [ 135.931533][ T4669] ubi16: empty MTD device detected [ 137.314712][ T4669] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 139.604455][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.643087][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.680621][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.690104][ T4695] device bridge_slave_0 left promiscuous mode [ 139.745107][ T4695] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.890207][ T4695] device bridge_slave_1 left promiscuous mode [ 139.910623][ T4695] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.187433][ T4695] bond0: (slave bond_slave_0): Releasing backup interface [ 140.428146][ T4695] bond0: (slave bond_slave_1): Releasing backup interface [ 140.484602][ T4703] sctp: failed to load transform for md5: -4 [ 140.501429][ T4702] sctp: failed to load transform for md5: -2 [ 140.654294][ T4695] team0: Port device team_slave_0 removed [ 140.778911][ T4695] team0: Port device team_slave_1 removed [ 140.792635][ T4695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.800115][ T4695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.858067][ T4695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.883942][ T4695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.939285][ T4721] binder: 4717:4721 ioctl c05c5340 200000000000 returned -22 [ 141.536834][ T4692] netlink: 'syz.0.59': attribute type 10 has an invalid length. [ 141.545855][ T4692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.59'. [ 141.555617][ T4692] bridge0: port 3(dummy0) entered blocking state [ 141.562074][ T4692] bridge0: port 3(dummy0) entered disabled state [ 141.569339][ T4692] device dummy0 entered promiscuous mode [ 141.575456][ T4692] bridge0: port 3(dummy0) entered blocking state [ 141.581915][ T4692] bridge0: port 3(dummy0) entered forwarding state [ 141.921317][ T4723] sctp: failed to load transform for md5: -2 [ 142.512379][ T4739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 142.784049][ T4741] loop4: detected capacity change from 0 to 8 [ 143.166257][ T4738] SQUASHFS error: Failed to read block 0x29b: -5 [ 143.172753][ T4738] SQUASHFS error: Unable to read metadata cache entry [299] [ 146.664249][ T4758] loop2: detected capacity change from 0 to 16 [ 147.002277][ T4758] erofs: (device loop2): mounted with root inode @ nid 36. [ 147.734717][ T4767] loop0: detected capacity change from 0 to 1024 [ 148.151207][ T4767] EXT4-fs: Ignoring removed nobh option [ 148.798686][ T4767] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 148.798686][ T4767] [ 150.077575][ T4792] loop4: detected capacity change from 0 to 128 [ 150.100194][ T4292] Bluetooth: hci1: unexpected event for opcode 0x041b [ 150.222552][ T4788] netlink: 'syz.3.75': attribute type 10 has an invalid length. [ 150.678154][ T4788] team0: Port device netdevsim0 added [ 150.690579][ T4792] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 151.502681][ T4799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.78'. [ 153.286805][ T4812] loop3: detected capacity change from 0 to 128 [ 153.315273][ T4812] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 153.343185][ T4812] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.630427][ T4817] loop1: detected capacity change from 0 to 1024 [ 155.020556][ T4817] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 155.561053][ T4821] xt_policy: output policy not valid in PREROUTING and INPUT [ 158.554572][ T4828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 161.459949][ T4855] input: syz1 as /devices/virtual/input/input8 [ 164.785428][ T4868] loop3: detected capacity change from 0 to 64 [ 167.434037][ T4877] overlayfs: missing 'workdir' [ 168.002278][ T56] kworker/u4:4: attempt to access beyond end of device [ 168.002278][ T56] loop3: rw=1, sector=161, nr_sectors = 1 limit=64 [ 168.038659][ T56] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 168.038777][ T56] kworker/u4:4: attempt to access beyond end of device [ 168.038777][ T56] loop3: rw=1, sector=162, nr_sectors = 1 limit=64 [ 168.038802][ T56] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 168.038834][ T56] kworker/u4:4: attempt to access beyond end of device [ 168.038834][ T56] loop3: rw=1, sector=163, nr_sectors = 1 limit=64 [ 168.038856][ T56] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 168.038887][ T56] kworker/u4:4: attempt to access beyond end of device [ 168.038887][ T56] loop3: rw=1, sector=167, nr_sectors = 1 limit=64 [ 168.038910][ T56] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 168.038941][ T56] kworker/u4:4: attempt to access beyond end of device [ 168.038941][ T56] loop3: rw=1, sector=169, nr_sectors = 1 limit=64 [ 168.038963][ T56] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 168.038993][ T56] kworker/u4:4: attempt to access beyond end of device [ 168.038993][ T56] loop3: rw=1, sector=171, nr_sectors = 1 limit=64 [ 168.039014][ T56] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 168.039044][ T56] kworker/u4:4: attempt to access beyond end of device [ 168.039044][ T56] loop3: rw=1, sector=172, nr_sectors = 1 limit=64 [ 168.039066][ T56] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 168.039097][ T56] kworker/u4:4: attempt to access beyond end of device [ 168.039097][ T56] loop3: rw=1, sector=173, nr_sectors = 1 limit=64 [ 168.039119][ T56] Buffer I/O error on dev loop3, logical block 173, lost async page write [ 168.045781][ T56] kworker/u4:4: attempt to access beyond end of device [ 168.045781][ T56] loop3: rw=1, sector=174, nr_sectors = 1 limit=64 [ 168.045813][ T56] Buffer I/O error on dev loop3, logical block 174, lost async page write [ 168.045847][ T56] kworker/u4:4: attempt to access beyond end of device [ 168.045847][ T56] loop3: rw=1, sector=175, nr_sectors = 1 limit=64 [ 168.045870][ T56] Buffer I/O error on dev loop3, logical block 175, lost async page write [ 175.661141][ T4292] Bluetooth: hci4: link tx timeout [ 175.668008][ T4292] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 175.678221][ T4292] Bluetooth: hci4: link tx timeout [ 175.683519][ T4292] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 177.700383][ T4292] Bluetooth: hci4: command 0x0406 tx timeout [ 178.467513][ T4289] Bluetooth: hci4: link tx timeout [ 178.472810][ T4289] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 178.622602][ T4289] Bluetooth: hci4: link tx timeout [ 178.628169][ T4289] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 179.124150][ T4289] Bluetooth: hci4: link tx timeout [ 179.129432][ T4289] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 179.478519][ T4289] Bluetooth: hci4: link tx timeout [ 179.483801][ T4289] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 181.145198][ T4289] Bluetooth: hci4: link tx timeout [ 181.150808][ T4289] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 182.182187][ T4940] trusted_key: encrypted_key: insufficient parameters specified [ 183.457314][ T4289] Bluetooth: hci4: link tx timeout [ 183.462571][ T4289] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 186.980540][ T4979] loop4: detected capacity change from 0 to 1024 [ 187.201179][ T4979] EXT4-fs: Ignoring removed oldalloc option [ 187.639096][ T4984] ceph: No mds server is up or the cluster is laggy [ 187.666700][ T4453] libceph: connect (1)[c::]:6789 error -101 [ 187.894347][ T4453] libceph: mon0 (1)[c::]:6789 connect error [ 187.903343][ T4979] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 187.927258][ T4979] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.895264][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 188.907483][ T4995] loop0: detected capacity change from 0 to 512 [ 188.919369][ T4995] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 188.951932][ T4292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.961096][ T4292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.969620][ T4292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.994086][ T4995] EXT4-fs (loop0): 1 truncate cleaned up [ 188.999813][ T4995] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 189.257311][ T4292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.267243][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 189.275870][ T4292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.989525][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 191.019261][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 191.088742][ T5014] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 191.095641][ T5014] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.366397][ T5014] vhci_hcd vhci_hcd.0: Device attached [ 191.393747][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 191.640477][ T4439] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 192.307176][ T4991] chnl_net:caif_netlink_parms(): no params data found [ 194.142375][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 194.186693][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.186838][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.301270][ T4991] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.301433][ T4991] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.302807][ T4991] device bridge_slave_0 entered promiscuous mode [ 194.305261][ T4991] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.305384][ T4991] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.311108][ T4991] device bridge_slave_1 entered promiscuous mode [ 194.427768][ T4991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.449868][ T4991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.578346][ T4991] team0: Port device team_slave_0 added [ 194.601883][ T4991] team0: Port device team_slave_1 added [ 194.658890][ T4991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.658910][ T4991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.658935][ T4991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.680555][ T4991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.680573][ T4991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.680601][ T4991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.971131][ T5016] vhci_hcd: connection reset by peer [ 194.981627][ T4454] vhci_hcd: stop threads [ 194.986476][ T4454] vhci_hcd: release socket [ 195.002930][ T4454] vhci_hcd: disconnect device [ 195.073491][ T4991] device hsr_slave_0 entered promiscuous mode [ 195.163962][ T4991] device hsr_slave_1 entered promiscuous mode [ 195.193248][ T4991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.210434][ T4991] Cannot create hsr debugfs directory [ 195.588337][ T5059] IPVS: lc: FWM 3 0x00000003 - no destination available [ 196.180433][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 196.711193][ T5071] IPVS: sh: FWM 3 0x00000003 - no destination available [ 196.719007][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 196.791345][ T5071] overlayfs: failed to clone lowerpath [ 196.949887][ T4439] vhci_hcd: vhci_device speed not set [ 198.260413][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 198.269438][ T4456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.826778][ T5083] loop0: detected capacity change from 0 to 64 [ 199.896595][ T4456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.173224][ T4456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.260506][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 201.181012][ T4456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.460492][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 201.475857][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 202.340429][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 202.646173][ T4415] bio_check_eod: 7 callbacks suppressed [ 202.646189][ T4415] kworker/u4:11: attempt to access beyond end of device [ 202.646189][ T4415] loop0: rw=1, sector=161, nr_sectors = 1 limit=64 [ 203.487511][ T4415] buffer_io_error: 6 callbacks suppressed [ 203.487528][ T4415] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 203.683485][ T4415] kworker/u4:11: attempt to access beyond end of device [ 203.683485][ T4415] loop0: rw=1, sector=162, nr_sectors = 1 limit=64 [ 203.697050][ T4415] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 203.707384][ T4415] kworker/u4:11: attempt to access beyond end of device [ 203.707384][ T4415] loop0: rw=1, sector=163, nr_sectors = 1 limit=64 [ 203.721580][ T4415] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 203.730223][ T4415] kworker/u4:11: attempt to access beyond end of device [ 203.730223][ T4415] loop0: rw=1, sector=167, nr_sectors = 1 limit=64 [ 203.744289][ T4415] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 203.832174][ T4415] kworker/u4:11: attempt to access beyond end of device [ 203.832174][ T4415] loop0: rw=1, sector=169, nr_sectors = 1 limit=64 [ 203.852575][ T4415] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 203.862455][ T4415] kworker/u4:11: attempt to access beyond end of device [ 203.862455][ T4415] loop0: rw=1, sector=171, nr_sectors = 1 limit=64 [ 203.877164][ T4415] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 203.886875][ T4415] kworker/u4:11: attempt to access beyond end of device [ 203.886875][ T4415] loop0: rw=1, sector=172, nr_sectors = 1 limit=64 [ 203.930450][ T4415] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 203.946450][ T4415] kworker/u4:11: attempt to access beyond end of device [ 203.946450][ T4415] loop0: rw=1, sector=173, nr_sectors = 1 limit=64 [ 204.014993][ T4991] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 204.079609][ T4415] Buffer I/O error on dev loop0, logical block 173, lost async page write [ 204.127160][ T4415] kworker/u4:11: attempt to access beyond end of device [ 204.127160][ T4415] loop0: rw=1, sector=174, nr_sectors = 1 limit=64 [ 204.162617][ T4991] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 204.172305][ T4415] Buffer I/O error on dev loop0, logical block 174, lost async page write [ 204.185911][ T4991] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 204.193182][ T4415] kworker/u4:11: attempt to access beyond end of device [ 204.193182][ T4415] loop0: rw=1, sector=175, nr_sectors = 1 limit=64 [ 204.273195][ T4415] Buffer I/O error on dev loop0, logical block 175, lost async page write [ 204.340711][ T4991] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 206.981330][ T4290] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 208.747358][ T4991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.457238][ T4991] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.535419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.552390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.574455][ T5149] syz.1.149 uses obsolete (PF_INET,SOCK_PACKET) [ 213.910555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.297006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.831177][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.839229][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.870937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.890195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.899199][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.906465][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.931734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.952330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.967278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.985269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.996705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.012946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.026380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.037775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.069031][ T5159] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 215.140205][ T5247] batman_adv: batadv0: Adding interface: dummy0 [ 215.148052][ T5247] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.173600][ T5247] batman_adv: batadv0: Interface activated: dummy0 [ 215.186672][ T5248] batadv0: mtu less than device minimum [ 215.195020][ T5248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.207833][ T5248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.220467][ T5248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.232918][ T5248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.245355][ T5248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.257795][ T5248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.270382][ T5248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.282857][ T5248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.295521][ T5248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.348194][ T4991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.445932][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.475845][ T5256] xt_connbytes: Forcing CT accounting to be enabled [ 215.483672][ T5256] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 215.496044][ T5256] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 215.570705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.584561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.804620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.957476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.908609][ T5275] loop0: detected capacity change from 0 to 4096 [ 221.018031][ T5276] tipc: Started in network mode [ 221.024267][ T5276] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 221.031743][ T5276] tipc: Enabled bearer , priority 0 [ 221.237922][ T5275] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 221.267617][ T4456] device hsr_slave_0 left promiscuous mode [ 221.327100][ T4456] device hsr_slave_1 left promiscuous mode [ 222.253623][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.326471][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.503164][ T4274] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 224.522404][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.530044][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.637912][ T4456] device bridge_slave_1 left promiscuous mode [ 224.653152][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.696033][ T4456] device bridge_slave_0 left promiscuous mode [ 224.711714][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.815891][ T4456] device veth1_macvtap left promiscuous mode [ 224.857081][ T4456] device veth0_macvtap left promiscuous mode [ 226.025842][ T4456] device veth1_vlan left promiscuous mode [ 226.056293][ T4456] device veth0_vlan left promiscuous mode [ 227.874697][ T5326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.158'. [ 227.950051][ T5328] loop3: detected capacity change from 0 to 512 [ 227.988657][ T5328] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 228.060961][ T5328] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 228.082747][ T5328] EXT4-fs (loop3): 1 truncate cleaned up [ 228.129357][ T5328] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 229.192071][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 229.262862][ T5335] loop4: detected capacity change from 0 to 131072 [ 229.475745][ T5335] F2FS-fs (loop4): Found nat_bits in checkpoint [ 229.670140][ T5335] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 230.802274][ T26] audit: type=1804 audit(1781796549.675:3): pid=5351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.160" name="/newroot/32/file0/file1" dev="loop4" ino=7 res=1 errno=0 [ 231.011803][ T26] audit: type=1804 audit(1781796549.685:4): pid=5350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.160" name="/newroot/32/file0/file1" dev="loop4" ino=7 res=1 errno=0 [ 231.249417][ T26] audit: type=1800 audit(1781796549.685:5): pid=5351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.160" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 231.620540][ T26] audit: type=1800 audit(1781796549.685:6): pid=5350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.160" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 231.642376][ T26] audit: type=1804 audit(1781796549.685:7): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.160" name="/newroot/32/file0/file1" dev="loop4" ino=7 res=1 errno=0 [ 232.164817][ T4456] team0 (unregistering): Port device team_slave_1 removed [ 232.207417][ T4456] team0 (unregistering): Port device team_slave_0 removed [ 232.247826][ T4456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.296254][ T4456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.719331][ T4456] bond0 (unregistering): Released all slaves [ 233.529177][ T5295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.153'. [ 233.650383][ T4375] tipc: Node number set to 11578026 [ 233.852751][ T5361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.163'. [ 234.359108][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.375434][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.430553][ T4991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.011314][ T5391] xt_connbytes: Forcing CT accounting to be enabled [ 235.018112][ T5391] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 236.427712][ T5366] syz.0.164 (5366) used greatest stack depth: 18096 bytes left [ 236.621434][ T5402] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 236.628104][ T5402] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 236.665036][ T5402] vhci_hcd vhci_hcd.0: Device attached [ 236.695197][ T5405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 236.951029][ T4321] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 237.430399][ T5403] vhci_hcd: connection reset by peer [ 237.437823][ T4415] vhci_hcd: stop threads [ 237.449540][ T4415] vhci_hcd: release socket [ 237.627841][ T4415] vhci_hcd: disconnect device [ 238.563070][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.481466][ T5442] loop4: detected capacity change from 0 to 128 [ 239.494543][ T5442] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 239.512966][ T5442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.560919][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.703780][ T5443] device dummy0 left promiscuous mode [ 239.709361][ T5443] bridge0: port 3(dummy0) entered disabled state [ 239.721601][ T5443] batman_adv: batadv0: Adding interface: dummy0 [ 239.727912][ T5443] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.753559][ T5443] batman_adv: batadv0: Interface activated: dummy0 [ 239.764247][ T5444] net_ratelimit: 10 callbacks suppressed [ 239.764259][ T5444] batadv0: mtu less than device minimum [ 239.776748][ T5444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.788365][ T5444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.799968][ T5444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.811589][ T5444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.823174][ T5444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.834755][ T5444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.846378][ T5444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.858066][ T5444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.869706][ T5444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 240.244774][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.297244][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.449107][ T4991] device veth0_vlan entered promiscuous mode [ 240.671302][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.680877][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.694057][ T4991] device veth1_vlan entered promiscuous mode [ 240.742426][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.340000][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.643055][ T4991] device veth0_macvtap entered promiscuous mode [ 241.711671][ T4991] device veth1_macvtap entered promiscuous mode [ 241.868273][ T4991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.907259][ T4991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.927016][ T4991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.112262][ T4991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.212517][ T4991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.223189][ T4991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.685769][ T4321] vhci_hcd: vhci_device speed not set [ 242.698313][ T4991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.744783][ T5463] CUSE: unknown device info "" [ 242.749697][ T5463] CUSE: unknown device info "Ö" [ 242.755810][ T5463] CUSE: unknown device info "" [ 242.760731][ T5463] CUSE: unknown device info "" [ 242.765670][ T5463] CUSE: unknown device info "" [ 242.770547][ T5463] CUSE: unknown device info "" [ 242.775659][ T5463] CUSE: unknown device info "ðÿÿÿ" [ 242.780807][ T5463] CUSE: unknown device info "" [ 242.785654][ T5463] CUSE: unknown device info "" [ 242.790581][ T5463] CUSE: unknown device info "" [ 242.795532][ T5463] CUSE: unknown device info "" [ 242.800467][ T5463] CUSE: unknown device info "r" [ 242.805318][ T5463] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 242.811073][ T5463] CUSE: unknown device info "ÿÿÿÿ" [ 242.816278][ T5463] CUSE: unknown device info "" [ 242.821410][ T5463] CUSE: unknown device info "€" [ 242.826783][ T5463] CUSE: DEVNAME unspecified [ 242.876065][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.173335][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.204557][ T4991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.268450][ T4290] Bluetooth: hci0: unexpected event for opcode 0x041b [ 243.473683][ T4991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.851076][ T4991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.868805][ T5483] loop0: detected capacity change from 0 to 16 [ 243.880188][ T4991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.915432][ T4991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.321576][ T4290] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 245.826073][ T4991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.731949][ T4991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.852197][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.911955][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.987703][ T4290] Bluetooth: hci0: unexpected event for opcode 0x0804 [ 247.174882][ T5502] loop3: detected capacity change from 0 to 128 [ 247.244170][ T5502] hpfs: bad mount options. [ 248.966609][ T5514] netlink: 36 bytes leftover after parsing attributes in process `syz.1.194'. [ 250.721708][ T5528] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 250.785901][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.797406][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.806677][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.822123][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.829844][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 250.840800][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.038283][ T5518] loop3: detected capacity change from 0 to 32768 [ 252.089611][ T5518] (syz.3.186,5518,1):ocfs2_read_virt_blocks:999 ERROR: Inode #18 contains a hole at offset 0 [ 252.112282][ T5518] (syz.3.186,5518,1):ocfs2_read_dir_block:511 ERROR: status = -5 [ 252.724751][ T5518] (syz.3.186,5518,0):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 252.819646][ T5518] (syz.3.186,5518,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 252.819689][ T5518] (syz.3.186,5518,0):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 252.850483][ T5518] (syz.3.186,5518,1):ocfs2_initialize_super:2255 ERROR: status = -22 [ 252.858730][ T5518] (syz.3.186,5518,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 252.901374][ T5529] chnl_net:caif_netlink_parms(): no params data found [ 252.930602][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 253.964578][ T5551] loop0: detected capacity change from 0 to 131072 [ 254.709616][ T5551] F2FS-fs (loop0): Found nat_bits in checkpoint [ 254.743256][ T5551] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 255.103245][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 256.324810][ T5572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.871182][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.877603][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.055384][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 258.067224][ T26] audit: type=1800 audit(1781796576.945:8): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.193" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 258.093582][ T26] audit: type=1804 audit(1781796576.945:9): pid=5574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.193" name="/newroot/45/file0/file1" dev="loop0" ino=7 res=1 errno=0 [ 258.128709][ T26] audit: type=1800 audit(1781796576.945:10): pid=5574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.193" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 258.148490][ T26] audit: type=1804 audit(1781796576.945:11): pid=5576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.193" name="/newroot/45/file0/file1" dev="loop0" ino=7 res=1 errno=0 [ 258.313414][ T5529] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.332664][ T5529] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.359871][ T5529] device bridge_slave_0 entered promiscuous mode [ 258.429418][ T5529] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.457674][ T5529] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.497856][ T5529] device bridge_slave_1 entered promiscuous mode [ 258.587630][ T5529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.647447][ T5529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.784363][ T5529] team0: Port device team_slave_0 added [ 258.897139][ T5529] team0: Port device team_slave_1 added [ 259.028709][ T5529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.049672][ T5529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.107314][ T5529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.213917][ T5529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.241024][ T5529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.290457][ T5529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.417883][ T5529] device hsr_slave_0 entered promiscuous mode [ 259.432509][ T5529] device hsr_slave_1 entered promiscuous mode [ 259.439381][ T5529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.454289][ T5529] Cannot create hsr debugfs directory [ 260.100799][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 260.678455][ T5529] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 260.688951][ T5529] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 260.712771][ T4643] device hsr_slave_0 left promiscuous mode [ 260.719330][ T4643] device hsr_slave_1 left promiscuous mode [ 260.726696][ T4643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.741535][ T4643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.758541][ T4643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.767936][ T4643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.784683][ T4643] device bridge_slave_1 left promiscuous mode [ 260.795751][ T4643] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.808428][ T4643] device bridge_slave_0 left promiscuous mode [ 260.821353][ T4643] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.853132][ T4643] device veth1_macvtap left promiscuous mode [ 260.859256][ T4643] device veth0_macvtap left promiscuous mode [ 260.867678][ T4643] device veth1_vlan left promiscuous mode [ 260.873776][ T4643] device veth0_vlan left promiscuous mode [ 261.554256][ T4643] team0 (unregistering): Port device team_slave_1 removed [ 261.596675][ T4643] team0 (unregistering): Port device team_slave_0 removed [ 261.639055][ T4643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.686613][ T4643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.939829][ T4643] bond0 (unregistering): Released all slaves [ 262.035334][ T5529] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 262.059250][ T5529] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 262.241685][ T5529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.276651][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.293598][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.324681][ T5529] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.339101][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.360598][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.369183][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.376413][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.391157][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.414186][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.424417][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.434295][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.441470][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.483528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.497062][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.506517][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.518303][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.542610][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.564916][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.576946][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.600727][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.620785][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.634617][ T5529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.661924][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.681178][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.689835][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.017359][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.030551][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.044421][ T5529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.517037][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.528445][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.568895][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.578479][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.596229][ T5529] device veth0_vlan entered promiscuous mode [ 263.607344][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.617066][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.631847][ T5529] device veth1_vlan entered promiscuous mode [ 263.669743][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.679502][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.688232][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.697165][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.709089][ T5529] device veth0_macvtap entered promiscuous mode [ 263.724424][ T5529] device veth1_macvtap entered promiscuous mode [ 263.746819][ T5529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.757638][ T5529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.770197][ T5529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.786607][ T5529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.798122][ T5529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.814770][ T5529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.828219][ T5529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.839390][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.851999][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.860711][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.869585][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.884939][ T5529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.895690][ T5529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.906926][ T5529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.920110][ T5529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.930419][ T5529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.950322][ T5529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.967783][ T5529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.978630][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.994026][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.010056][ T5529] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.023266][ T5529] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.032432][ T5529] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.041779][ T5529] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.127931][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.147219][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.159017][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 264.187750][ T4454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.196422][ T4454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.205645][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 264.438663][ T5670] loop4: detected capacity change from 0 to 128 [ 264.469652][ T5672] loop5: detected capacity change from 0 to 256 [ 264.497144][ T5673] loop3: detected capacity change from 0 to 512 [ 264.542253][ T5670] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 264.574924][ T5673] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 264.592568][ T5670] FAT-fs (loop4): bogus number of directory entries (127) [ 264.599790][ T5670] FAT-fs (loop4): Can't find a valid FAT filesystem [ 264.920216][ T5675] xt_TPROXY: Can be used only with -p tcp or -p udp [ 265.730756][ T5678] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 266.525383][ T5690] loop4: detected capacity change from 0 to 8 [ 266.536827][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 267.056562][ T5690] SQUASHFS error: zlib decompression failed, data probably corrupt [ 267.102219][ T5690] SQUASHFS error: Failed to read block 0x9b: -5 [ 267.108750][ T5690] SQUASHFS error: Unable to read metadata cache entry [99] [ 267.116904][ T5690] SQUASHFS error: Unable to read inode 0x127 [ 267.309644][ T5698] CUSE: unknown device info "" [ 267.314564][ T5698] CUSE: unknown device info "Ö" [ 267.319485][ T5698] CUSE: unknown device info "" [ 267.324339][ T5698] CUSE: unknown device info "" [ 267.329236][ T5698] CUSE: unknown device info "" [ 267.334093][ T5698] CUSE: unknown device info "" [ 267.339098][ T5698] CUSE: unknown device info "ðÿÿÿ" [ 267.344319][ T5698] CUSE: unknown device info "" [ 267.349214][ T5698] CUSE: unknown device info "" [ 267.354067][ T5698] CUSE: unknown device info "" [ 267.359050][ T5698] CUSE: unknown device info "" [ 267.363926][ T5698] CUSE: unknown device info "r" [ 267.369336][ T5698] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 267.374985][ T5698] CUSE: unknown device info "ÿÿÿÿ" [ 267.380323][ T5698] CUSE: unknown device info "" [ 267.385184][ T5698] CUSE: unknown device info "€" [ 267.390094][ T5698] CUSE: DEVNAME unspecified [ 267.405188][ T5290] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 268.147702][ T5709] loop5: detected capacity change from 0 to 1024 [ 268.185945][ T5709] EXT4-fs: Ignoring removed oldalloc option [ 268.206816][ T5709] EXT4-fs: Ignoring removed oldalloc option [ 268.699028][ T4290] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 268.727233][ T5709] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 268.816712][ T5720] loop3: detected capacity change from 0 to 256 [ 269.081565][ T4290] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 270.114881][ T4290] Bluetooth: hci2: unexpected event for opcode 0x040e [ 270.123428][ T4290] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 270.147823][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 270.227243][ T4290] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 270.516115][ T22] usb 1-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 270.532197][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 270.541903][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.697841][ T5754] xt_TPROXY: Can be used only with -p tcp or -p udp [ 271.729788][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.738885][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.759072][ T22] usb 1-1: Product: syz [ 271.763792][ T22] usb 1-1: Manufacturer: syz [ 271.768455][ T22] usb 1-1: SerialNumber: syz [ 271.781190][ T22] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 271.794226][ T22] cdc_ncm 1-1:1.0: bind() failure [ 272.426971][ T5756] CUSE: unknown device info "" [ 272.431921][ T5756] CUSE: unknown device info "Ö" [ 272.436866][ T5756] CUSE: unknown device info "" [ 272.441723][ T5756] CUSE: unknown device info "" [ 272.446623][ T5756] CUSE: unknown device info "" [ 272.451471][ T5756] CUSE: unknown device info "" [ 272.456382][ T5756] CUSE: unknown device info "ðÿÿÿ" [ 272.461502][ T5756] CUSE: unknown device info "" [ 272.466414][ T5756] CUSE: unknown device info "" [ 272.471284][ T5756] CUSE: unknown device info "" [ 272.476222][ T5756] CUSE: unknown device info "" [ 272.481146][ T5756] CUSE: unknown device info "r" [ 272.486033][ T5756] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 272.491715][ T5756] CUSE: unknown device info "ÿÿÿÿ" [ 272.496938][ T5756] CUSE: unknown device info "" [ 272.501854][ T5756] CUSE: unknown device info "€" [ 272.506797][ T5756] CUSE: DEVNAME unspecified [ 273.088115][ T4290] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 273.097084][ T4290] Bluetooth: hci1: Injecting HCI hardware error event [ 273.114710][ T4289] Bluetooth: hci1: hardware error 0x00 [ 273.697119][ T4375] usb 1-1: USB disconnect, device number 2 [ 273.859390][ T4290] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 273.936082][ T5773] loop4: detected capacity change from 0 to 512 [ 274.045925][ T5773] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 274.066195][ T5773] System zones: 1-12 [ 274.103303][ T5773] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.227: Directory hole found for htree index block 0 [ 274.205117][ T5773] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 274.230891][ T5773] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.227: Directory hole found for htree index block 0 [ 274.326625][ T5773] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 274.342775][ T5773] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 275.085552][ T5777] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 275.408651][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 275.485697][ T4290] Bluetooth: unknown link type 96 [ 276.188463][ T4289] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 276.534152][ T4289] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 276.784253][ T5529] EXT4-fs (loop5): unmounting filesystem. [ 277.204953][ T5812] loop5: detected capacity change from 0 to 2048 [ 277.245904][ T5812] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.293970][ T5818] xt_connbytes: Forcing CT accounting to be enabled [ 277.300738][ T5818] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 277.424865][ T4439] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 277.528606][ T5822] loop4: detected capacity change from 0 to 512 [ 277.579530][ T5822] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 277.611223][ T5822] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 277.638488][ T5822] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 277.649183][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 277.672824][ T4439] usb 4-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 277.709278][ T5822] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 277.741691][ T4439] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 277.777494][ T5822] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 277.785576][ T5822] EXT4-fs (loop4): failed to initialize system zone (-117) [ 277.793310][ T5822] EXT4-fs (loop4): mount failed [ 277.820831][ T4439] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.891529][ T4439] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.938720][ T4439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.947743][ T4439] usb 4-1: Product: syz [ 277.959247][ T4439] usb 4-1: Manufacturer: syz [ 277.963900][ T4439] usb 4-1: SerialNumber: syz [ 278.014482][ T4439] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 278.021362][ T4439] cdc_ncm 4-1:1.0: bind() failure [ 278.129161][ T5834] loop5: detected capacity change from 0 to 256 [ 278.351640][ T5290] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 279.313295][ T5847] loop4: detected capacity change from 0 to 1024 [ 279.348332][ T5847] EXT4-fs: Ignoring removed oldalloc option [ 279.360596][ T5847] EXT4-fs: Ignoring removed oldalloc option [ 279.541687][ T5847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 280.452409][ T5859] loop5: detected capacity change from 0 to 256 [ 280.459971][ T5859] exfat: Deprecated parameter 'namecase' [ 280.492579][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 280.528811][ T5859] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5cb490d, utbl_chksum : 0xe619d30d) [ 280.543317][ T130] usb 4-1: USB disconnect, device number 3 [ 280.776247][ T5866] loop3: detected capacity change from 0 to 128 [ 281.544439][ T5880] loop3: detected capacity change from 0 to 256 [ 281.917460][ T5884] loop0: detected capacity change from 0 to 256 [ 282.001970][ T5880] FAT-fs (loop3): Directory bread(block 64) failed [ 282.180665][ T5880] FAT-fs (loop3): Directory bread(block 65) failed [ 282.361283][ T5880] FAT-fs (loop3): Directory bread(block 66) failed [ 282.367986][ T5880] FAT-fs (loop3): Directory bread(block 67) failed [ 282.374643][ T5880] FAT-fs (loop3): Directory bread(block 68) failed [ 282.381211][ T5880] FAT-fs (loop3): Directory bread(block 69) failed [ 282.425899][ T5880] FAT-fs (loop3): Directory bread(block 70) failed [ 282.432523][ T5880] FAT-fs (loop3): Directory bread(block 71) failed [ 282.490048][ T5880] FAT-fs (loop3): Directory bread(block 72) failed [ 282.496666][ T5880] FAT-fs (loop3): Directory bread(block 73) failed [ 283.683075][ T5900] loop0: detected capacity change from 0 to 1024 [ 283.713959][ T5902] loop3: detected capacity change from 0 to 256 [ 283.747516][ T5900] EXT4-fs: Ignoring removed oldalloc option [ 283.769656][ T5904] unsupported nlmsg_type 40 [ 283.782412][ T5900] EXT4-fs: Ignoring removed oldalloc option [ 283.841908][ T5902] FAT-fs (loop3): Directory bread(block 64) failed [ 283.860574][ T5900] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 283.881180][ T5902] FAT-fs (loop3): Directory bread(block 65) failed [ 283.920956][ T5902] FAT-fs (loop3): Directory bread(block 66) failed [ 284.021732][ T5902] FAT-fs (loop3): Directory bread(block 67) failed [ 284.028458][ T5902] FAT-fs (loop3): Directory bread(block 68) failed [ 284.097071][ T5902] FAT-fs (loop3): Directory bread(block 69) failed [ 284.113983][ T5872] loop5: detected capacity change from 0 to 32768 [ 284.144945][ T5902] FAT-fs (loop3): Directory bread(block 70) failed [ 284.152194][ T5902] FAT-fs (loop3): Directory bread(block 71) failed [ 284.173812][ T5902] FAT-fs (loop3): Directory bread(block 72) failed [ 284.181614][ T5902] FAT-fs (loop3): Directory bread(block 73) failed [ 284.288275][ T26] audit: type=1800 audit(1781796601.901:12): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.262" name="file0" dev="loop3" ino=1048602 res=0 errno=0 [ 284.479649][ T5902] bio_check_eod: 7 callbacks suppressed [ 284.479802][ T5902] syz.3.262: attempt to access beyond end of device [ 284.479802][ T5902] loop3: rw=2051, sector=1160, nr_sectors = 32 limit=256 [ 284.664706][ T5910] loop4: detected capacity change from 0 to 2048 [ 284.803553][ T5910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.869497][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 285.035881][ T26] audit: type=1800 audit(1781796602.613:13): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.265" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 285.283075][ T5925] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 285.354164][ T5930] netlink: 'syz.3.268': attribute type 3 has an invalid length. [ 286.525125][ T5940] loop0: detected capacity change from 0 to 1024 [ 286.680596][ T5940] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 286.900754][ T5949] loop4: detected capacity change from 0 to 256 [ 287.843651][ T130] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 288.080518][ T130] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.139869][ T5959] netlink: 'syz.0.276': attribute type 21 has an invalid length. [ 288.176372][ T5957] loop4: detected capacity change from 0 to 764 [ 288.199318][ T130] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 288.218234][ T5959] netlink: 128 bytes leftover after parsing attributes in process `syz.0.276'. [ 288.229858][ T130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 288.259614][ T130] usb 6-1: Product: syz [ 288.274325][ T5959] netlink: 'syz.0.276': attribute type 4 has an invalid length. [ 288.275395][ T130] usb 6-1: Manufacturer: syz [ 288.290212][ T5961] loop3: detected capacity change from 0 to 764 [ 288.294406][ T5959] netlink: 'syz.0.276': attribute type 3 has an invalid length. [ 288.320166][ T5957] Symlink component flag not implemented [ 288.348845][ T5959] netlink: 3 bytes leftover after parsing attributes in process `syz.0.276'. [ 288.358366][ T5957] Symlink component flag not implemented [ 288.367325][ T130] usb 6-1: SerialNumber: syz [ 288.413254][ T5961] rock: directory entry would overflow storage [ 288.437027][ T5961] rock: sig=0x4654, size=5, remaining=4 [ 289.226791][ T5967] CUSE: unknown device info "" [ 289.231716][ T5967] CUSE: unknown device info "Ö" [ 289.339874][ T5967] CUSE: unknown device info "" [ 289.345949][ T5967] CUSE: unknown device info "" [ 289.355564][ T5967] CUSE: unknown device info "" [ 289.362245][ T5967] CUSE: unknown device info "" [ 289.368342][ T5967] CUSE: unknown device info "ðÿÿÿ" [ 289.386670][ T5967] CUSE: unknown device info "" [ 289.391806][ T5967] CUSE: unknown device info "" [ 289.397053][ T5967] CUSE: unknown device info "" [ 289.402221][ T5967] CUSE: unknown device info "" [ 289.410515][ T5967] CUSE: unknown device info "r" [ 289.420223][ T5967] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 289.426384][ T5967] CUSE: unknown device info "ÿÿÿÿ" [ 289.433447][ T5967] CUSE: unknown device info "" [ 289.438631][ T5967] CUSE: unknown device info "€" [ 289.444715][ T5967] CUSE: DEVNAME unspecified [ 289.701033][ T5982] loop3: detected capacity change from 0 to 64 [ 290.509084][ T130] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 290.543394][ T5989] loop4: detected capacity change from 0 to 128 [ 290.612120][ T5989] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 290.665253][ T130] usb 6-1: USB disconnect, device number 2 [ 290.707099][ T5989] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 290.740596][ T130] usblp0: removed [ 290.759065][ T5993] loop5: detected capacity change from 0 to 256 [ 290.862771][ T5269] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 291.103674][ T6000] loop0: detected capacity change from 0 to 64 [ 291.144299][ T6003] loop3: detected capacity change from 0 to 8 [ 291.781492][ T6003] SQUASHFS error: Unable to read inode 0xe3 [ 292.313736][ T6008] CUSE: unknown device info "" [ 292.318905][ T6008] CUSE: unknown device info "Ö" [ 292.324174][ T6008] CUSE: unknown device info "" [ 292.329084][ T6008] CUSE: unknown device info "" [ 292.334416][ T6008] CUSE: unknown device info "" [ 292.353169][ T6008] CUSE: unknown device info "" [ 292.368807][ T6008] CUSE: unknown device info "ðÿÿÿ" [ 292.395881][ T6008] CUSE: unknown device info "" [ 292.401215][ T6008] CUSE: unknown device info "" [ 292.406268][ T6008] CUSE: unknown device info "" [ 292.411421][ T6008] CUSE: unknown device info "" [ 292.416383][ T6008] CUSE: unknown device info "r" [ 292.421510][ T6008] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 292.427374][ T6008] CUSE: unknown device info "ÿÿÿÿ" [ 292.432843][ T6008] CUSE: unknown device info "" [ 292.437902][ T6008] CUSE: unknown device info "€" [ 292.442985][ T6008] CUSE: DEVNAME unspecified [ 294.874466][ T6032] xt_connbytes: Forcing CT accounting to be enabled [ 294.881852][ T6032] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 295.081569][ T6056] loop4: detected capacity change from 0 to 1024 [ 295.194295][ T6062] loop0: detected capacity change from 0 to 256 [ 295.248391][ T6056] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 295.376730][ T6056] EXT4-fs error (device loop4): ext4_get_first_dir_block:3594: inode #11: comm syz.4.302: directory missing '.' [ 295.426140][ T6056] EXT4-fs (loop4): Remounting filesystem read-only [ 295.643863][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 295.903700][ T6071] loop4: detected capacity change from 0 to 256 [ 296.894452][ T6040] loop3: detected capacity change from 0 to 32768 [ 297.103738][ T6074] loop5: detected capacity change from 0 to 4096 [ 297.189796][ T6074] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 297.327508][ T6088] CUSE: unknown device info "" [ 297.332517][ T6088] CUSE: unknown device info "Ö" [ 297.337639][ T6088] CUSE: unknown device info "" [ 297.342577][ T6088] CUSE: unknown device info "" [ 297.348217][ T6088] CUSE: unknown device info "" [ 297.353307][ T6088] CUSE: unknown device info "" [ 297.358360][ T6088] CUSE: unknown device info "ðÿÿÿ" [ 297.363508][ T6088] CUSE: unknown device info "" [ 297.368434][ T6088] CUSE: unknown device info "" [ 297.373326][ T6088] CUSE: unknown device info "" [ 297.378411][ T6088] CUSE: unknown device info "" [ 297.383662][ T6088] CUSE: unknown device info "r" [ 297.388841][ T6088] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 297.394668][ T6088] CUSE: unknown device info "ÿÿÿÿ" [ 297.400395][ T6088] CUSE: unknown device info "" [ 297.405438][ T6088] CUSE: unknown device info "€" [ 297.410746][ T6088] CUSE: DEVNAME unspecified [ 298.210558][ T6074] ntfs3: loop5: ino=1e, "file1" attr_set_size [ 300.077249][ T6111] loop5: detected capacity change from 0 to 1024 [ 300.201404][ T6111] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 300.247454][ T6111] EXT4-fs error (device loop5): ext4_get_first_dir_block:3594: inode #11: comm syz.5.317: directory missing '.' [ 300.349902][ T6111] EXT4-fs (loop5): Remounting filesystem read-only [ 300.432145][ T6118] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 300.744898][ T6092] loop3: detected capacity change from 0 to 32768 [ 300.777964][ T6120] loop4: detected capacity change from 0 to 256 [ 300.824591][ T5529] EXT4-fs (loop5): unmounting filesystem. [ 300.902447][ T6120] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 300.977595][ T6120] FAT-fs (loop4): Filesystem has been set read-only [ 300.984531][ T6120] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 301.005788][ T6125] loop5: detected capacity change from 0 to 256 [ 301.094315][ T6092] JBD2: Ignoring recovery information on journal [ 301.181269][ T5269] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.372585][ T6128] CUSE: unknown device info "" [ 301.377564][ T6128] CUSE: unknown device info "Ö" [ 301.383328][ T6128] CUSE: unknown device info "" [ 301.388277][ T6128] CUSE: unknown device info "" [ 301.393252][ T6128] CUSE: unknown device info "" [ 301.398819][ T6128] CUSE: unknown device info "" [ 301.403944][ T6128] CUSE: unknown device info "ðÿÿÿ" [ 301.409463][ T6128] CUSE: unknown device info "" [ 301.414398][ T6128] CUSE: unknown device info "" [ 301.457826][ T6128] CUSE: unknown device info "" [ 301.463064][ T6128] CUSE: unknown device info "" [ 301.468137][ T6128] CUSE: unknown device info "r" [ 301.473270][ T6128] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 301.479184][ T6128] CUSE: unknown device info "ÿÿÿÿ" [ 301.484577][ T6128] CUSE: unknown device info "" [ 301.489658][ T6128] CUSE: unknown device info "€" [ 301.494705][ T6128] CUSE: DEVNAME unspecified [ 301.618520][ T6092] JBD2: recovery failed [ 301.928742][ T6092] (syz.3.312,6092,1):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 302.088219][ T6092] (syz.3.312,6092,0):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 302.108661][ T6092] (syz.3.312,6092,0):ocfs2_check_volume:2489 ERROR: status = -5 [ 302.152445][ T6092] (syz.3.312,6092,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 302.239613][ T6136] device geneve2 entered promiscuous mode [ 302.280548][ T6092] (syz.3.312,6092,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 302.437919][ T6141] loop0: detected capacity change from 0 to 16 [ 302.497594][ T6141] erofs: (device loop0): mounted with root inode @ nid 36. [ 302.648038][ T6139] loop4: detected capacity change from 0 to 2048 [ 302.670845][ T4290] Bluetooth: hci2: unexpected event for opcode 0x080d [ 302.731424][ T6139] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=301129, location=301129 [ 302.843536][ T6139] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.135441][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 303.350393][ T4290] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 304.128296][ T6173] loop4: detected capacity change from 0 to 256 [ 304.220007][ T7] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 304.246860][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.276523][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.340904][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 304.378050][ T5290] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.389570][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 304.590315][ T7] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 304.598488][ T7] usb 1-1: Manufacturer: syz [ 304.611726][ T7] usb 1-1: config 0 descriptor?? [ 305.225291][ T7] appleir 0003:05AC:8243.0001: item fetching failed at offset 0/1 [ 305.235030][ T7] appleir 0003:05AC:8243.0001: parse failed [ 305.251363][ T7] appleir: probe of 0003:05AC:8243.0001 failed with error -22 [ 305.373720][ T6198] loop3: detected capacity change from 0 to 256 [ 305.402934][ T6201] loop5: detected capacity change from 0 to 256 [ 305.410094][ T6201] exfat: Deprecated parameter 'utf8' [ 305.429037][ T4453] usb 1-1: USB disconnect, device number 3 [ 305.480928][ T6201] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 305.494620][ T6198] FAT-fs (loop3): Directory bread(block 64) failed [ 305.534806][ T6198] FAT-fs (loop3): Directory bread(block 65) failed [ 305.564521][ T6198] FAT-fs (loop3): Directory bread(block 66) failed [ 305.653334][ T6198] FAT-fs (loop3): Directory bread(block 67) failed [ 305.684801][ T6198] FAT-fs (loop3): Directory bread(block 68) failed [ 305.717247][ T6198] FAT-fs (loop3): Directory bread(block 69) failed [ 305.737815][ T6198] FAT-fs (loop3): Directory bread(block 70) failed [ 305.756124][ T6198] FAT-fs (loop3): Directory bread(block 71) failed [ 305.817683][ T6198] FAT-fs (loop3): Directory bread(block 72) failed [ 305.851877][ T6198] FAT-fs (loop3): Directory bread(block 73) failed [ 306.166906][ T6211] loop5: detected capacity change from 0 to 2048 [ 306.554985][ T6223] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.384157][ T6204] loop4: detected capacity change from 0 to 32768 [ 307.413217][ T6211] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 307.494195][ T6231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.353'. [ 307.537700][ T6204] ERROR: (device loop4): dbDiscardAG: -EIO [ 307.537700][ T6204] [ 307.578868][ T6211] Remounting filesystem read-only [ 307.600989][ T6204] ERROR: (device loop4): remounting filesystem as read-only [ 307.655718][ T4290] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 307.664696][ T4290] Bluetooth: hci3: Injecting HCI hardware error event [ 307.675045][ T4290] Bluetooth: hci3: hardware error 0x00 [ 307.885917][ T26] audit: type=1326 audit(1781796623.996:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411a99ce59 code=0x7ffc0000 [ 307.998483][ T26] audit: type=1326 audit(1781796624.014:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411a99ce59 code=0x7ffc0000 [ 308.136801][ T26] audit: type=1326 audit(1781796624.024:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f411a99ce59 code=0x7ffc0000 [ 308.174220][ T6241] loop4: detected capacity change from 0 to 2048 [ 308.228648][ T6217] loop3: detected capacity change from 0 to 32768 [ 308.235974][ T26] audit: type=1326 audit(1781796624.024:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411a99ce59 code=0x7ffc0000 [ 308.267308][ T6241] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 308.301877][ T6241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.355695][ T26] audit: type=1326 audit(1781796624.024:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411a99ce59 code=0x7ffc0000 [ 308.402017][ T6217] XFS (loop3): Mounting V5 Filesystem [ 308.642017][ T6217] XFS (loop3): Ending clean mount [ 308.754214][ T26] audit: type=1800 audit(1781796624.810:19): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.350" name="file2" dev="loop3" ino=6151 res=0 errno=0 [ 308.949169][ T6266] CUSE: unknown device info "" [ 308.954182][ T6266] CUSE: unknown device info "Ö" [ 308.959145][ T6266] CUSE: unknown device info "" [ 308.964370][ T6266] CUSE: unknown device info "" [ 308.969316][ T6266] CUSE: unknown device info "" [ 308.974480][ T6266] CUSE: unknown device info "" [ 308.979392][ T6266] CUSE: unknown device info "ðÿÿÿ" [ 308.984652][ T6266] CUSE: unknown device info "" [ 308.989632][ T6266] CUSE: unknown device info "" [ 308.994619][ T6266] CUSE: unknown device info "" [ 308.999715][ T6266] CUSE: unknown device info "" [ 309.005103][ T6266] CUSE: unknown device info "r" [ 309.010176][ T6266] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 309.016042][ T6266] CUSE: unknown device info "ÿÿÿÿ" [ 309.021387][ T6266] CUSE: unknown device info "" [ 309.026579][ T6266] CUSE: unknown device info "€" [ 309.031616][ T6266] CUSE: DEVNAME unspecified [ 309.878767][ T4290] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 309.961751][ T4279] XFS (loop3): Unmounting Filesystem [ 310.156274][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 310.209602][ T4453] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 310.364252][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.396830][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.408109][ T4453] usb 5-1: Using ep0 maxpacket: 8 [ 310.416008][ T4453] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 310.431925][ T6278] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 310.453778][ T4453] usb 5-1: config 179 has no interface number 0 [ 310.464578][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.486158][ T4453] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 310.542161][ T6282] CUSE: unknown device info "" [ 310.556996][ T22] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 310.569575][ T6282] CUSE: unknown device info "Ö" [ 310.594222][ T4453] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 310.606392][ T6282] CUSE: unknown device info "" [ 310.638739][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.664372][ T6282] CUSE: unknown device info "" [ 310.698573][ T4453] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 310.717706][ T6282] CUSE: unknown device info "" [ 310.743598][ T22] usb 1-1: config 0 descriptor?? [ 310.776100][ T6282] CUSE: unknown device info "" [ 310.814439][ T6282] CUSE: unknown device info "ðÿÿÿ" [ 310.825199][ T4453] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 310.869660][ T6282] CUSE: unknown device info "" [ 310.900698][ T6282] CUSE: unknown device info "" [ 310.936196][ T4453] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 310.961018][ T6282] CUSE: unknown device info "" [ 311.017708][ T6282] CUSE: unknown device info "" [ 311.059396][ T6282] CUSE: unknown device info "r" [ 311.075333][ T4453] usb 5-1: config 179 interface 65 has no altsetting 0 [ 311.082564][ T4453] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 311.118252][ T6282] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 311.179826][ T6282] CUSE: unknown device info "ÿÿÿÿ" [ 311.194690][ T6282] CUSE: unknown device info "" [ 311.201377][ T4453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.229576][ T22] hid-rmi 0003:0461:4E72.0002: item fetching failed at offset 10/11 [ 311.251610][ T6282] CUSE: unknown device info "€" [ 311.271083][ T22] hid-rmi 0003:0461:4E72.0002: parse failed [ 311.342225][ T22] hid-rmi: probe of 0003:0461:4E72.0002 failed with error -22 [ 311.372087][ T6282] CUSE: DEVNAME unspecified [ 311.396958][ T4453] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9 [ 311.703165][ T4453] usb 5-1: USB disconnect, device number 2 [ 311.709132][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 311.709593][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 311.741468][ T130] usb 1-1: USB disconnect, device number 4 [ 311.761507][ T4453] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 312.395053][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 312.409308][ T6298] loop0: detected capacity change from 0 to 4096 [ 312.416002][ T6304] loop3: detected capacity change from 0 to 128 [ 312.443178][ T6302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.371'. [ 312.462749][ T6304] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 312.487199][ T6298] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 312.642507][ T6298] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 312.737776][ T6306] loop5: detected capacity change from 0 to 1024 [ 312.771429][ T6306] EXT4-fs: Ignoring removed nobh option [ 312.796046][ T6306] EXT4-fs: Ignoring removed i_version option [ 312.858394][ T6310] CUSE: unknown device info "" [ 312.863491][ T6310] CUSE: unknown device info "Ö" [ 312.868447][ T6310] CUSE: unknown device info "" [ 312.873714][ T6310] CUSE: unknown device info "" [ 312.878615][ T6310] CUSE: unknown device info "" [ 312.883581][ T6310] CUSE: unknown device info "" [ 312.889301][ T6310] CUSE: unknown device info "ðÿÿÿ" [ 312.894571][ T6310] CUSE: unknown device info "" [ 312.899469][ T6310] CUSE: unknown device info "" [ 312.904523][ T6310] CUSE: unknown device info "" [ 312.909546][ T6310] CUSE: unknown device info "" [ 312.914853][ T6310] CUSE: unknown device info "r" [ 312.919893][ T6310] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 312.925796][ T6310] CUSE: unknown device info "ÿÿÿÿ" [ 312.931191][ T6310] CUSE: unknown device info "" [ 312.936269][ T6310] CUSE: unknown device info "€" [ 312.941398][ T6310] CUSE: DEVNAME unspecified [ 313.230951][ T6306] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 313.965202][ T5529] EXT4-fs (loop5): unmounting filesystem. [ 314.267840][ T6329] CUSE: unknown device info "" [ 314.309512][ T6329] CUSE: unknown device info "Ö" [ 314.366694][ T6329] CUSE: unknown device info "" [ 314.441449][ T6329] CUSE: unknown device info "" [ 314.479140][ T6329] CUSE: unknown device info "" [ 314.549289][ T6329] CUSE: unknown device info "" [ 314.617271][ T6329] CUSE: unknown device info "ðÿÿÿ" [ 314.622695][ T6329] CUSE: unknown device info "" [ 314.676407][ T6329] CUSE: unknown device info "" [ 314.721070][ T6329] CUSE: unknown device info "" [ 314.774188][ T6329] CUSE: unknown device info "" [ 314.806428][ T6329] CUSE: unknown device info "r" [ 314.844107][ T6329] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 314.885106][ T6329] CUSE: unknown device info "ÿÿÿÿ" [ 314.932547][ T6329] CUSE: unknown device info "" [ 316.338671][ T6329] CUSE: unknown device info "€" [ 316.343695][ T6329] CUSE: DEVNAME unspecified [ 316.647262][ T6318] loop4: detected capacity change from 0 to 32768 [ 316.661608][ T4290] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 316.676415][ T6318] XFS: attr2 mount option is deprecated. [ 316.883389][ T6318] XFS (loop4): Mounting V5 Filesystem [ 317.014483][ T6318] XFS (loop4): Ending clean mount [ 317.150075][ T6318] XFS (loop4): Quotacheck needed: Please wait. [ 317.311515][ T6318] XFS (loop4): Quotacheck: Done. [ 317.498278][ T4282] XFS (loop4): Unmounting Filesystem [ 317.557458][ T6352] loop5: detected capacity change from 0 to 32768 [ 317.752655][ T6352] XFS (loop5): Mounting V5 Filesystem [ 317.975552][ T6352] XFS (loop5): Ending clean mount [ 318.043348][ T6352] XFS (loop5): Quotacheck needed: Please wait. [ 318.171778][ T6352] XFS (loop5): Quotacheck: Done. [ 318.990195][ T5529] XFS (loop5): Unmounting Filesystem [ 319.551984][ T6412] loop3: detected capacity change from 0 to 256 [ 319.841280][ T6415] loop4: detected capacity change from 0 to 164 [ 320.354245][ T6415] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 320.654224][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.661340][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.705970][ T6397] loop0: detected capacity change from 0 to 32768 [ 320.928214][ T6397] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 321.136036][ T6433] CUSE: unknown device info "" [ 321.160855][ T6433] CUSE: unknown device info "Ö" [ 321.195066][ T6433] CUSE: unknown device info "" [ 321.226924][ T6433] CUSE: unknown device info "" [ 321.253413][ T6433] CUSE: unknown device info "" [ 321.284045][ T6433] CUSE: unknown device info "" [ 321.320076][ T6433] CUSE: unknown device info "ðÿÿÿ" [ 321.352424][ T6433] CUSE: unknown device info "" [ 321.383555][ T6433] CUSE: unknown device info "" [ 321.410784][ T6433] CUSE: unknown device info "" [ 321.437569][ T6433] CUSE: unknown device info "" [ 321.494214][ T6433] CUSE: unknown device info "r" [ 321.543510][ T6433] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 321.632973][ T6433] CUSE: unknown device info "ÿÿÿÿ" [ 321.657031][ T6433] CUSE: unknown device info "" [ 321.696310][ T6433] CUSE: unknown device info "€" [ 321.718441][ T6433] CUSE: DEVNAME unspecified [ 321.985098][ T6440] loop4: detected capacity change from 0 to 512 [ 322.013659][ T6440] EXT4-fs: Ignoring removed bh option [ 322.071368][ T6440] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 322.101173][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 322.150044][ T6443] raw_sendmsg: syz.5.402 forgot to set AF_INET. Fix it! [ 322.220669][ T6440] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.400: corrupted in-inode xattr [ 322.279945][ T6440] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.400: couldn't read orphan inode 15 (err -117) [ 322.392398][ T6440] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 322.567029][ T6452] CUSE: unknown device info "" [ 322.571963][ T6452] CUSE: unknown device info "Ö" [ 322.576888][ T6452] CUSE: unknown device info "" [ 322.581917][ T6452] CUSE: unknown device info "" [ 322.586802][ T6452] CUSE: unknown device info "" [ 322.591652][ T6452] CUSE: unknown device info "" [ 322.596595][ T6452] CUSE: unknown device info "ðÿÿÿ" [ 322.601710][ T6452] CUSE: unknown device info "" [ 322.606586][ T6452] CUSE: unknown device info "" [ 322.611456][ T6452] CUSE: unknown device info "" [ 322.616457][ T6452] CUSE: unknown device info "" [ 322.621324][ T6452] CUSE: unknown device info "r" [ 322.626842][ T6452] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 322.632511][ T6452] CUSE: unknown device info "ÿÿÿÿ" [ 322.637985][ T6452] CUSE: unknown device info "" [ 322.642864][ T6452] CUSE: unknown device info "€" [ 322.647762][ T6452] CUSE: DEVNAME unspecified [ 322.735318][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 322.979139][ T6464] loop3: detected capacity change from 0 to 1024 [ 323.064558][ T6461] loop4: detected capacity change from 0 to 4096 [ 323.094814][ T6461] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 323.223063][ T6461] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 323.327883][ T4393] hfsplus: b-tree write err: -5, ino 8 [ 323.631980][ T6482] CUSE: unknown device info "" [ 323.637005][ T6482] CUSE: unknown device info "Ö" [ 323.642066][ T6482] CUSE: unknown device info "" [ 323.647074][ T6482] CUSE: unknown device info "" [ 323.652001][ T6482] CUSE: unknown device info "" [ 323.656988][ T6482] CUSE: unknown device info "" [ 323.661881][ T6482] CUSE: unknown device info "ðÿÿÿ" [ 323.667135][ T6482] CUSE: unknown device info "" [ 323.672068][ T6482] CUSE: unknown device info "" [ 323.677020][ T6482] CUSE: unknown device info "" [ 323.682079][ T6482] CUSE: unknown device info "" [ 323.687472][ T6482] CUSE: unknown device info "r" [ 323.692506][ T6482] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 323.698375][ T6482] CUSE: unknown device info "ÿÿÿÿ" [ 323.703768][ T6482] CUSE: unknown device info "" [ 323.708953][ T6482] CUSE: unknown device info "€" [ 323.714001][ T6482] CUSE: DEVNAME unspecified [ 324.668142][ T4290] Bluetooth: hci2: ISO packet for unknown connection handle 14 [ 324.698499][ T6458] loop0: detected capacity change from 0 to 32768 [ 324.732727][ T6458] XFS: attr2 mount option is deprecated. [ 324.899921][ T6458] XFS (loop0): Mounting V5 Filesystem [ 325.014918][ T6505] CUSE: unknown device info "" [ 325.019933][ T6505] CUSE: unknown device info "Ö" [ 325.025078][ T6505] CUSE: unknown device info "" [ 325.029948][ T6505] CUSE: unknown device info "" [ 325.034831][ T6505] CUSE: unknown device info "" [ 325.039680][ T6505] CUSE: unknown device info "" [ 325.044562][ T6505] CUSE: unknown device info "ðÿÿÿ" [ 325.049676][ T6505] CUSE: unknown device info "" [ 325.054547][ T6505] CUSE: unknown device info "" [ 325.059427][ T6505] CUSE: unknown device info "" [ 325.064389][ T6505] CUSE: unknown device info "" [ 325.277154][ T6505] CUSE: unknown device info "r" [ 325.282114][ T6505] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 325.287829][ T6505] CUSE: unknown device info "ÿÿÿÿ" [ 325.293085][ T6505] CUSE: unknown device info "" [ 325.298008][ T6505] CUSE: unknown device info "€" [ 325.325714][ T6505] CUSE: DEVNAME unspecified [ 325.336312][ T4439] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 325.392567][ T6458] XFS (loop0): Ending clean mount [ 325.452769][ T6458] XFS (loop0): Quotacheck needed: Please wait. [ 325.554713][ T4439] usb 4-1: Using ep0 maxpacket: 32 [ 325.566066][ T4439] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 325.582205][ T4439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.599404][ T4439] usb 4-1: Product: syz [ 325.667048][ T6475] loop5: detected capacity change from 0 to 32768 [ 325.674157][ T6458] XFS (loop0): Quotacheck: Done. [ 325.716712][ T4439] usb 4-1: Manufacturer: syz [ 325.721396][ T4439] usb 4-1: SerialNumber: syz [ 325.728163][ T4439] usb 4-1: config 0 descriptor?? [ 325.736113][ T4439] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 325.745525][ T4439] dvb-usb: bulk message failed: -22 (2/0) [ 325.760662][ T4439] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 325.771794][ T4439] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 325.806733][ T6510] CUSE: unknown device info "" [ 325.811765][ T6510] CUSE: unknown device info "Ö" [ 325.816621][ T6510] CUSE: unknown device info "" [ 325.821502][ T6510] CUSE: unknown device info "" [ 325.826441][ T6510] CUSE: unknown device info "" [ 325.831293][ T6510] CUSE: unknown device info "" [ 325.836202][ T6510] CUSE: unknown device info "ðÿÿÿ" [ 325.841337][ T6510] CUSE: unknown device info "" [ 325.846228][ T6510] CUSE: unknown device info "" [ 325.851098][ T6510] CUSE: unknown device info "" [ 325.856142][ T6510] CUSE: unknown device info "" [ 325.861003][ T6510] CUSE: unknown device info "r" [ 325.865904][ T6510] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 325.871560][ T6510] CUSE: unknown device info "ÿÿÿÿ" [ 325.876886][ T6510] CUSE: unknown device info "" [ 325.881746][ T6510] CUSE: unknown device info "€" [ 325.886669][ T6510] CUSE: DEVNAME unspecified [ 325.930473][ T4439] usb 4-1: media controller created [ 325.954402][ T6493] dvb-usb: bulk message failed: -22 (3/0) [ 326.079969][ T4439] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.119430][ T4439] usb 4-1: selecting invalid altsetting 7 [ 326.153470][ T4439] cxusb: set interface failed [ 326.158240][ T4439] dvb-usb: bulk message failed: -22 (1/0) [ 326.189764][ T4274] XFS (loop0): Unmounting Filesystem [ 326.460322][ T6526] loop4: detected capacity change from 0 to 1764 [ 326.467789][ T4439] DVB: Unable to find symbol lgdt330x_attach() [ 326.490914][ T4439] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 326.707550][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 326.927153][ T7] usb 6-1: too many configurations: 76, using maximum allowed: 8 [ 326.943914][ T4439] rc_core: IR keymap rc-dvico-portable not found [ 326.950435][ T4439] Registered IR keymap rc-empty [ 326.981603][ T7] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 327.013036][ T4439] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 327.044348][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.110011][ T4439] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input10 [ 327.131966][ T7] usb 6-1: Product: syz [ 327.142763][ T7] usb 6-1: Manufacturer: syz [ 327.153609][ T7] usb 6-1: SerialNumber: syz [ 327.177010][ T4439] dvb-usb: schedule remote query interval to 100 msecs. [ 327.218660][ T4439] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 327.228891][ T7] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 327.281537][ T4439] usb 4-1: USB disconnect, device number 4 [ 327.360496][ T6547] loop3: detected capacity change from 0 to 2048 [ 327.533217][ T6555] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.277906][ T4276] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 328.299940][ T4439] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 328.436743][ T6559] loop0: detected capacity change from 0 to 256 [ 328.491993][ T6547] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=104, inode=18446744073709551376, rec_len=255, name_len=5 [ 328.743032][ T6547] Remounting filesystem read-only [ 328.787296][ T6560] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=104, inode=18446744073709551376, rec_len=255, name_len=5 [ 328.954770][ T130] usb 6-1: USB disconnect, device number 3 [ 329.202491][ T6575] loop3: detected capacity change from 0 to 1764 [ 329.459667][ T4321] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 329.626184][ T4276] usb 6-1: Service connection timeout for: 256 [ 329.645291][ T4276] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 329.675709][ T4321] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 329.691922][ T4276] ath9k_htc: Failed to initialize the device [ 329.706486][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.733020][ T130] usb 6-1: ath9k_htc: USB layer deinitialized [ 329.766421][ T4321] usb 1-1: Product: syz [ 329.780072][ T4321] usb 1-1: Manufacturer: syz [ 329.793039][ T4321] usb 1-1: SerialNumber: syz [ 329.810038][ T4321] usb 1-1: config 0 descriptor?? [ 329.828945][ T4321] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 330.526075][ T4321] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 330.637034][ T4321] sq905c: probe of 1-1:0.0 failed with error -71 [ 330.895176][ T4321] usb 1-1: USB disconnect, device number 5 [ 332.045738][ T6583] loop3: detected capacity change from 0 to 32768 [ 332.068993][ T6593] loop0: detected capacity change from 0 to 1024 [ 332.211729][ T6583] [ 332.211729][ T6583] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.211729][ T6583] [ 332.308184][ T6581] loop5: detected capacity change from 0 to 40427 [ 332.311839][ T6583] ERROR: (device loop3): diWrite: ixpxd invalid [ 332.311839][ T6583] [ 332.360143][ T6581] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 332.371748][ T6583] ERROR: (device loop3): txCommit: [ 332.371748][ T6583] [ 332.407349][ T6581] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 332.447800][ T6583] ERROR: (device loop3): dtSearch: stack overrun! [ 332.447800][ T6583] [ 332.456511][ T6583] btstack dump: [ 332.510282][ T6581] F2FS-fs (loop5): invalid crc value [ 332.522678][ T6583] bn = 0, index = 0 [ 332.526571][ T6583] bn = 0, index = 0 [ 332.530419][ T6583] bn = 0, index = 0 [ 332.546912][ T6581] F2FS-fs (loop5): Found nat_bits in checkpoint [ 332.570933][ T6583] bn = 0, index = 0 [ 332.588780][ T6583] bn = 0, index = 0 [ 332.606351][ T6583] bn = 0, index = 0 [ 332.635299][ T6583] bn = 0, index = 0 [ 332.644700][ T6599] loop0: detected capacity change from 0 to 128 [ 332.651727][ T6583] bn = 0, index = 0 [ 332.655596][ T6583] jfs_mkdir: dtSearch returned -5 [ 332.806567][ T6581] F2FS-fs (loop5): Start checkpoint disabled! [ 332.821332][ T4279] [ 332.821332][ T4279] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.821332][ T4279] [ 332.861832][ T4279] [ 332.861832][ T4279] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.861832][ T4279] [ 332.886390][ T6581] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 333.180414][ T6599] EXT4-fs (loop0): Test dummy encryption mode enabled [ 333.219504][ T6599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 333.270242][ T6599] System zones: 1-3, 19-19, 35-36 [ 333.329793][ T6599] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 333.413022][ T6599] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.443037][ T6611] loop3: detected capacity change from 0 to 128 [ 333.545958][ T6611] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 333.623066][ T6611] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.654833][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 333.739675][ T6611] EXT4-fs warning (device loop3): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 333.875483][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 334.104573][ T6621] CUSE: unknown device info "" [ 334.109640][ T6621] CUSE: unknown device info "Ö" [ 334.124953][ T6621] CUSE: unknown device info "" [ 334.130000][ T6621] CUSE: unknown device info "" [ 334.134955][ T6621] CUSE: unknown device info "" [ 334.139917][ T6621] CUSE: unknown device info "" [ 334.144861][ T6621] CUSE: unknown device info "ðÿÿÿ" [ 334.150187][ T6621] CUSE: unknown device info "" [ 334.155087][ T6621] CUSE: unknown device info "" [ 334.160812][ T6621] CUSE: unknown device info "" [ 334.166185][ T6621] CUSE: unknown device info "" [ 334.171279][ T6621] CUSE: unknown device info "r" [ 334.176721][ T6621] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 334.182882][ T6621] CUSE: unknown device info "ÿÿÿÿ" [ 334.188297][ T6621] CUSE: unknown device info "" [ 334.193396][ T6621] CUSE: unknown device info "€" [ 334.198443][ T6621] CUSE: DEVNAME unspecified [ 335.265101][ T6614] loop5: detected capacity change from 0 to 32768 [ 335.511877][ T6614] JBD2: Ignoring recovery information on journal [ 335.792151][ T127] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 336.035518][ T127] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.106504][ T127] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 336.241910][ T127] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 336.320337][ T127] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 336.362315][ T6614] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 336.415239][ T127] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 336.474075][ T127] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 336.510158][ T127] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 336.557176][ T127] usb 1-1: Product: syz [ 336.568370][ T127] usb 1-1: Manufacturer: syz [ 336.605135][ T127] cdc_wdm 1-1:1.0: skipping garbage [ 336.610421][ T127] cdc_wdm 1-1:1.0: skipping garbage [ 336.650356][ T127] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 336.656356][ T127] cdc_wdm 1-1:1.0: Unknown control protocol [ 336.820763][ T5529] ocfs2: Unmounting device (7,5) on (node local) [ 336.897485][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 337.190611][ T127] usb 1-1: USB disconnect, device number 6 [ 337.872992][ T6646] loop3: detected capacity change from 0 to 64 [ 338.020982][ T6646] syz.3.466: attempt to access beyond end of device [ 338.020982][ T6646] loop3: rw=0, sector=412, nr_sectors = 2 limit=64 [ 338.084010][ T6646] Trying to free block not in datazone [ 338.095843][ T6571] net_ratelimit: 10 callbacks suppressed [ 338.095860][ T6571] Set syz1 is full, maxelem 65536 reached [ 338.158195][ T6649] syz.3.466: attempt to access beyond end of device [ 338.158195][ T6649] loop3: rw=0, sector=412, nr_sectors = 2 limit=64 [ 338.178780][ T6649] buffer_io_error: 6 callbacks suppressed [ 338.178795][ T6649] Buffer I/O error on dev loop3, logical block 206, async page read [ 338.219372][ T26] audit: type=1800 audit(1781796652.388:20): pid=6649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.466" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 338.349787][ T6653] loop4: detected capacity change from 0 to 2048 [ 338.356579][ T22] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 338.522390][ T6653] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 339.363149][ T6662] loop3: detected capacity change from 0 to 1024 [ 339.428540][ T22] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 339.446538][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.467452][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 339.478725][ T22] usb 6-1: config 0 descriptor?? [ 339.491628][ T22] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 339.500331][ T6662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 339.652688][ T6662] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.470: lblock 2 mapped to illegal pblock 2 (length 1) [ 339.747839][ T6662] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 339.767178][ T6662] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.470: lblock 0 mapped to illegal pblock 48 (length 1) [ 339.848075][ T6662] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 339.959622][ T6662] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.470: Failed to acquire dquot type 0 [ 340.087298][ T6662] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 340.146165][ T22] gspca_sunplus: reg_w_riv err -71 [ 340.166858][ T22] sunplus: probe of 6-1:0.0 failed with error -71 [ 340.208269][ T6662] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.470: mark_inode_dirty error [ 340.842872][ T22] usb 6-1: USB disconnect, device number 4 [ 340.864576][ T6662] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 340.944616][ T6662] EXT4-fs (loop3): 1 orphan inode deleted [ 340.950444][ T6662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 341.009741][ T6679] loop4: detected capacity change from 0 to 1024 [ 341.095362][ T6679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.117755][ T5217] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 341.652915][ T5217] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 341.890900][ T5217] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:30: Failed to release dquot type 0 [ 341.940957][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 341.955710][ T5217] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 342.022764][ T6690] device vlan0 entered promiscuous mode [ 342.065455][ T5217] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 342.085903][ T6690] team0: Port device vlan0 added [ 342.095565][ T5217] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:30: Failed to release dquot type 0 [ 342.122962][ T4279] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 342.195055][ T4279] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 342.261281][ T4279] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 342.496025][ T6699] loop5: detected capacity change from 0 to 764 [ 343.479318][ T6709] CUSE: unknown device info "" [ 343.484330][ T6709] CUSE: unknown device info "Ö" [ 343.489535][ T6709] CUSE: unknown device info "" [ 343.494472][ T6709] CUSE: unknown device info "" [ 343.499413][ T6709] CUSE: unknown device info "" [ 343.504684][ T6709] CUSE: unknown device info "" [ 343.509665][ T6709] CUSE: unknown device info "ðÿÿÿ" [ 343.514813][ T6709] CUSE: unknown device info "" [ 343.519843][ T6709] CUSE: unknown device info "" [ 343.525334][ T6709] CUSE: unknown device info "" [ 343.530618][ T6709] CUSE: unknown device info "" [ 343.535831][ T6709] CUSE: unknown device info "r" [ 343.540949][ T6709] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 343.546767][ T6709] CUSE: unknown device info "ÿÿÿÿ" [ 343.552235][ T6709] CUSE: unknown device info "" [ 343.557268][ T6709] CUSE: unknown device info "€" [ 343.562413][ T6709] CUSE: DEVNAME unspecified [ 344.960708][ T4439] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 345.153000][ T4439] usb 6-1: Using ep0 maxpacket: 16 [ 345.163425][ T4439] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.184824][ T4439] usb 6-1: config 0 has no interface number 0 [ 345.195708][ T4439] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.237851][ T4439] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.365592][ T4439] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 345.559902][ T4439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.923109][ T4439] usb 6-1: config 0 descriptor?? [ 346.278631][ T6736] loop0: detected capacity change from 0 to 1024 [ 346.509989][ C0] hrtimer: interrupt took 40271 ns [ 346.639876][ T4439] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0003/input/input11 [ 346.980867][ T4439] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0003/input/input12 [ 347.257879][ T4439] uclogic 0003:28BD:0071.0003: input,hiddev0,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.5-1/input1 [ 347.334615][ T6744] CUSE: unknown device info "" [ 347.339552][ T6744] CUSE: unknown device info "Ö" [ 347.345136][ T6744] CUSE: unknown device info "" [ 347.350024][ T6744] CUSE: unknown device info "" [ 347.355465][ T6744] CUSE: unknown device info "" [ 347.360326][ T6744] CUSE: unknown device info "" [ 347.365251][ T6744] CUSE: unknown device info "ðÿÿÿ" [ 347.370370][ T6744] CUSE: unknown device info "" [ 347.375233][ T6744] CUSE: unknown device info "" [ 347.380143][ T6744] CUSE: unknown device info "" [ 347.385093][ T6744] CUSE: unknown device info "" [ 347.390198][ T6744] CUSE: unknown device info "r" [ 347.395172][ T6744] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 347.400944][ T6744] CUSE: unknown device info "ÿÿÿÿ" [ 347.406260][ T6744] CUSE: unknown device info "" [ 347.411213][ T6744] CUSE: unknown device info "€" [ 347.416072][ T6744] CUSE: DEVNAME unspecified [ 347.482624][ T4439] usb 6-1: USB disconnect, device number 5 [ 347.600444][ T127] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 347.721664][ T6748] fido_id[6748]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 347.823130][ T127] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 347.848132][ T6757] CUSE: unknown device info "" [ 347.853170][ T6757] CUSE: unknown device info "Ö" [ 347.858217][ T6757] CUSE: unknown device info "" [ 347.863136][ T6757] CUSE: unknown device info "" [ 347.868108][ T6757] CUSE: unknown device info "" [ 347.873614][ T6757] CUSE: unknown device info "" [ 347.878788][ T6757] CUSE: unknown device info "ðÿÿÿ" [ 347.883989][ T6757] CUSE: unknown device info "" [ 347.889008][ T6757] CUSE: unknown device info "" [ 347.893978][ T6757] CUSE: unknown device info "" [ 347.898997][ T6757] CUSE: unknown device info "" [ 347.904760][ T6757] CUSE: unknown device info "r" [ 347.909810][ T6757] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 347.915694][ T6757] CUSE: unknown device info "ÿÿÿÿ" [ 347.921233][ T6757] CUSE: unknown device info "" [ 347.926229][ T6757] CUSE: unknown device info "€" [ 347.931286][ T6757] CUSE: DEVNAME unspecified [ 348.024522][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.194347][ T127] usb 5-1: Product: syz [ 348.276061][ T127] usb 5-1: Manufacturer: syz [ 348.359387][ T127] usb 5-1: SerialNumber: syz [ 348.525469][ T127] usb 5-1: config 0 descriptor?? [ 348.946090][ T127] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 349.070344][ T6763] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 349.799567][ T127] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 349.817553][ T127] usb 5-1: USB disconnect, device number 3 [ 349.900732][ T6750] loop0: detected capacity change from 0 to 32768 [ 350.015789][ T6750] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.497 (6750) [ 350.094407][ T6767] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 350.169351][ T6750] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 350.295167][ T6750] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 350.568501][ T6750] BTRFS info (device loop0): using free space tree [ 350.602529][ T6759] loop3: detected capacity change from 0 to 32768 [ 351.005866][ T6759] JBD2: Ignoring recovery information on journal [ 351.023770][ T6750] BTRFS error (device loop0): open_ctree failed: -12 [ 351.206259][ T6759] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 351.306542][ T5290] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by udevd (5290) [ 351.602050][ T4279] ocfs2: Unmounting device (7,3) on (node local) [ 351.800500][ T6805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.512'. [ 351.836754][ T6805] device bond0 entered promiscuous mode [ 351.863903][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 351.874731][ T6805] device bond_slave_0 entered promiscuous mode [ 351.885852][ T6805] device bond_slave_1 entered promiscuous mode [ 351.915713][ T6805] device batadv0 entered promiscuous mode [ 351.932538][ T6805] device hsr1 entered promiscuous mode [ 351.960357][ T6805] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 351.997469][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 352.078681][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 352.085842][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 352.142504][ T7] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 352.167557][ T7] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 352.197017][ T7] usb 5-1: Product: syz [ 352.211331][ T7] usb 5-1: Manufacturer: syz [ 352.220814][ T7] usb 5-1: SerialNumber: syz [ 352.241663][ T7] usb 5-1: config 0 descriptor?? [ 352.258570][ T6803] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 352.278749][ T7] hub 5-1:0.0: bad descriptor, ignoring hub [ 352.290288][ T7] hub: probe of 5-1:0.0 failed with error -5 [ 352.516510][ T7] usb 5-1: USB disconnect, device number 4 [ 353.525728][ T6817] device vlan0 entered promiscuous mode [ 353.594334][ T6817] team0: Port device vlan0 added [ 353.708416][ T6807] loop3: detected capacity change from 0 to 40427 [ 353.723538][ T127] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 353.747792][ T6807] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 353.771986][ T6807] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 353.808004][ T6807] F2FS-fs (loop3): invalid crc value [ 353.851414][ T4320] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 353.950262][ T6807] F2FS-fs (loop3): Found nat_bits in checkpoint [ 354.157703][ T4320] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 354.194517][ T4320] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 354.242307][ T6807] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 354.305964][ T6807] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 354.320814][ T4320] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 354.417462][ T4320] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 354.640230][ T4320] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 354.700701][ T6813] loop4: detected capacity change from 0 to 32768 [ 354.754444][ T4320] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 354.821433][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 354.865119][ T4320] usb 6-1: Product: syz [ 354.873953][ T127] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 354.894767][ T26] audit: type=1800 audit(1781796667.987:21): pid=6807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.511" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 354.919062][ T4320] usb 6-1: Manufacturer: syz [ 354.920058][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.935048][ T127] usb 1-1: config 0 descriptor?? [ 354.992851][ T6813] XFS (loop4): Mounting V5 Filesystem [ 355.004812][ T4320] cdc_wdm 6-1:1.0: skipping garbage [ 355.037373][ T4320] cdc_wdm 6-1:1.0: skipping garbage [ 355.098484][ T6813] XFS (loop4): Ending clean mount [ 355.109785][ T4320] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 355.136654][ T4320] cdc_wdm 6-1:1.0: Unknown control protocol [ 355.280920][ T4320] usb 6-1: USB disconnect, device number 6 [ 355.378972][ T127] hackrf 1-1:0.0: Board ID: 00 [ 355.388495][ T127] hackrf 1-1:0.0: Firmware version: [ 355.413928][ T127] hackrf 1-1:0.0: Registered as swradio24 [ 355.419743][ T127] videodev: could not get a free minor [ 355.443640][ T127] hackrf 1-1:0.0: Failed to register as video device (-23) [ 355.465117][ T127] hackrf: probe of 1-1:0.0 failed with error -23 [ 355.498076][ T4282] XFS (loop4): Unmounting Filesystem [ 355.633319][ T6815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.647105][ T6815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.694506][ T127] usb 1-1: USB disconnect, device number 7 [ 356.932404][ T127] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 357.261238][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 357.284978][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.308772][ T127] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 357.308804][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.338645][ T127] usb 5-1: config 0 descriptor?? [ 357.660569][ T6872] CUSE: unknown device info "" [ 357.672908][ T6872] CUSE: unknown device info "Ö" [ 357.728914][ T6872] CUSE: unknown device info "" [ 357.734864][ T6872] CUSE: unknown device info "" [ 357.739867][ T6872] CUSE: unknown device info "" [ 357.764832][ T6872] CUSE: unknown device info "" [ 357.773364][ T6872] CUSE: unknown device info "ðÿÿÿ" [ 357.785082][ T6872] CUSE: unknown device info "" [ 357.790124][ T6872] CUSE: unknown device info "" [ 357.793247][ T127] isku 0003:1E7D:319C.0004: item fetching failed at offset 5/7 [ 357.807479][ T6872] CUSE: unknown device info "" [ 357.814624][ T6872] CUSE: unknown device info "" [ 357.819915][ T127] isku 0003:1E7D:319C.0004: parse failed [ 357.825665][ T6872] CUSE: unknown device info "r" [ 357.825867][ T127] isku: probe of 0003:1E7D:319C.0004 failed with error -22 [ 357.838296][ T6872] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 357.844072][ T6872] CUSE: unknown device info "ÿÿÿÿ" [ 357.853314][ T6872] CUSE: unknown device info "" [ 357.863539][ T6872] CUSE: unknown device info "€" [ 357.871014][ T6872] CUSE: DEVNAME unspecified [ 358.028638][ T22] usb 5-1: USB disconnect, device number 5 [ 358.235679][ T6889] loop3: detected capacity change from 0 to 512 [ 358.253857][ T6889] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 358.298145][ T4320] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 358.324138][ T6889] EXT4-fs (loop3): 1 truncate cleaned up [ 358.337459][ T6889] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 358.425922][ T6889] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.535: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 358.475581][ T6889] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 358.486305][ T6886] loop5: detected capacity change from 0 to 32768 [ 358.506020][ T6889] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.535: Deleting old file: nlink 4, error=-117 [ 358.521238][ T4320] usb 1-1: Using ep0 maxpacket: 8 [ 358.523415][ T6886] (syz.5.534,6886,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 358.533509][ T4320] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.548798][ T6886] (syz.5.534,6886,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 358.587586][ T4320] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.612514][ T6886] JBD2: Ignoring recovery information on journal [ 358.649062][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 358.662159][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 358.677276][ T4320] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 358.691049][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.716405][ T6886] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 358.792970][ T4320] usb 1-1: config 0 descriptor?? [ 359.575376][ T4320] smartjoyplus 0003:6666:8804.0005: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.0-1/input0 [ 359.664381][ T4320] smartjoyplus 0003:6666:8804.0005: Force feedback for SmartJoy PLUS PS2/USB adapter [ 359.756673][ T6886] [ 359.759074][ T6886] ====================================================== [ 359.766116][ T6886] WARNING: possible circular locking dependency detected [ 359.773171][ T6886] syzkaller #0 Not tainted [ 359.777616][ T6886] ------------------------------------------------------ [ 359.784660][ T6886] syz.5.534/6886 is trying to acquire lock: [ 359.790578][ T6886] ffff8880410ca378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x307/0x770 [ 359.800079][ T6886] [ 359.800079][ T6886] but task is already holding lock: [ 359.807492][ T6886] ffff888056cc1ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 359.817899][ T6886] [ 359.817899][ T6886] which lock already depends on the new lock. [ 359.817899][ T6886] [ 359.828323][ T6886] [ 359.828323][ T6886] the existing dependency chain (in reverse order) is: [ 359.837364][ T6886] [ 359.837364][ T6886] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 359.845966][ T6886] down_read+0x42/0x2d0 [ 359.850768][ T6886] ocfs2_start_trans+0x3a4/0x6f0 [ 359.856271][ T6886] ocfs2_shutdown_local_alloc+0x1f8/0xaa0 [ 359.862580][ T6886] ocfs2_dismount_volume+0x1ff/0x940 [ 359.868422][ T6886] generic_shutdown_super+0x130/0x340 [ 359.874411][ T6886] kill_block_super+0x7c/0xe0 [ 359.879827][ T6886] deactivate_locked_super+0x93/0xf0 [ 359.885666][ T6886] cleanup_mnt+0x42c/0x4b0 [ 359.890659][ T6886] task_work_run+0x1d0/0x260 [ 359.895887][ T6886] exit_to_user_mode_loop+0xe6/0x110 [ 359.901813][ T6886] exit_to_user_mode_prepare+0xee/0x180 [ 359.907930][ T6886] syscall_exit_to_user_mode+0x16/0x40 [ 359.913966][ T6886] do_syscall_64+0x58/0xa0 [ 359.918932][ T6886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.925453][ T6886] [ 359.925453][ T6886] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 359.932981][ T6886] ocfs2_start_trans+0x2a5/0x6f0 [ 359.938481][ T6886] ocfs2_truncate_file+0x668/0x1580 [ 359.944257][ T6886] ocfs2_setattr+0x16b8/0x1d30 [ 359.949598][ T6886] notify_change+0xc74/0xf40 [ 359.954803][ T6886] do_truncate+0x1ac/0x240 [ 359.959846][ T6886] path_openat+0x2861/0x2ee0 [ 359.965010][ T6886] do_filp_open+0x1f1/0x430 [ 359.970071][ T6886] do_sys_openat2+0x150/0x4b0 [ 359.975331][ T6886] __x64_sys_openat+0x135/0x160 [ 359.980936][ T6886] do_syscall_64+0x4c/0xa0 [ 359.985912][ T6886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.992388][ T6886] [ 359.992388][ T6886] -> #1 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 360.000259][ T6886] down_write+0x36/0x60 [ 360.004993][ T6886] ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 360.011547][ T6886] ocfs2_truncate_file+0xe35/0x1580 [ 360.017319][ T6886] ocfs2_setattr+0x16b8/0x1d30 [ 360.022664][ T6886] notify_change+0xc74/0xf40 [ 360.027850][ T6886] do_truncate+0x1ac/0x240 [ 360.032838][ T6886] path_openat+0x2861/0x2ee0 [ 360.037991][ T6886] do_filp_open+0x1f1/0x430 [ 360.043050][ T6886] do_sys_openat2+0x150/0x4b0 [ 360.048297][ T6886] __x64_sys_openat+0x135/0x160 [ 360.053727][ T6886] do_syscall_64+0x4c/0xa0 [ 360.058709][ T6886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.065179][ T6886] [ 360.065179][ T6886] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 360.073046][ T6886] __lock_acquire+0x2d07/0x7d10 [ 360.078555][ T6886] lock_acquire+0x1bb/0x4a0 [ 360.083625][ T6886] down_read+0x42/0x2d0 [ 360.088395][ T6886] ocfs2_init_acl+0x307/0x770 [ 360.093647][ T6886] ocfs2_mknod+0x15e8/0x25b0 [ 360.098815][ T6886] ocfs2_create+0x1b6/0x4b0 [ 360.103888][ T6886] path_openat+0x1181/0x2ee0 [ 360.109058][ T6886] do_filp_open+0x1f1/0x430 [ 360.114126][ T6886] do_sys_openat2+0x150/0x4b0 [ 360.119382][ T6886] __x64_sys_openat+0x135/0x160 [ 360.124807][ T6886] do_syscall_64+0x4c/0xa0 [ 360.129880][ T6886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.136350][ T6886] [ 360.136350][ T6886] other info that might help us debug this: [ 360.136350][ T6886] [ 360.146614][ T6886] Chain exists of: [ 360.146614][ T6886] &oi->ip_xattr_sem --> sb_internal#4 --> &journal->j_trans_barrier [ 360.146614][ T6886] [ 360.160582][ T6886] Possible unsafe locking scenario: [ 360.160582][ T6886] [ 360.168075][ T6886] CPU0 CPU1 [ 360.173475][ T6886] ---- ---- [ 360.178870][ T6886] lock(&journal->j_trans_barrier); [ 360.184200][ T6886] lock(sb_internal#4); [ 360.191021][ T6886] lock(&journal->j_trans_barrier); [ 360.198872][ T6886] lock(&oi->ip_xattr_sem); [ 360.203503][ T6886] [ 360.203503][ T6886] *** DEADLOCK *** [ 360.203503][ T6886] [ 360.211679][ T6886] 8 locks held by syz.5.534/6886: [ 360.216736][ T6886] #0: ffff888077ba8460 (sb_writers#34){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 360.226043][ T6886] #1: ffff8880410ca648 (&type->i_mutex_dir_key#24){+.+.}-{3:3}, at: path_openat+0x7d2/0x2ee0 [ 360.236385][ T6886] #2: ffff8880715609c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x4810 [ 360.250280][ T6886] #3: ffff888071562648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x4810 [ 360.264021][ T6886] #4: ffff88805370df48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x11e/0x2700 [ 360.278020][ T6886] #5: ffff888077ba8650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0xf77/0x25b0 [ 360.287331][ T6886] #6: ffff888056cc1ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 360.298098][ T6886] #7: ffff88801e6be990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x200f/0x2230 [ 360.307990][ T6886] [ 360.307990][ T6886] stack backtrace: [ 360.313932][ T6886] CPU: 1 PID: 6886 Comm: syz.5.534 Not tainted syzkaller #0 [ 360.321330][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 360.331424][ T6886] Call Trace: [ 360.334717][ T6886] [ 360.337667][ T6886] dump_stack_lvl+0x188/0x24e [ 360.342388][ T6886] ? load_image+0x400/0x400 [ 360.346988][ T6886] ? show_regs_print_info+0x12/0x12 [ 360.352196][ T6886] ? print_circular_bug+0x12b/0x1a0 [ 360.357417][ T6886] check_noncircular+0x296/0x330 [ 360.362378][ T6886] ? add_chain_block+0x940/0x940 [ 360.367369][ T6886] ? _find_first_zero_bit+0xcf/0x100 [ 360.372683][ T6886] ? add_lock_to_list+0x191/0x280 [ 360.377737][ T6886] __lock_acquire+0x2d07/0x7d10 [ 360.380700][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 360.382633][ T6886] ? verify_lock_unused+0x140/0x140 [ 360.395347][ T6886] ? __lock_acquire+0x7d10/0x7d10 [ 360.400424][ T6886] ? do_raw_spin_lock+0x128/0x2f0 [ 360.405493][ T6886] lock_acquire+0x1bb/0x4a0 [ 360.410044][ T6886] ? ocfs2_init_acl+0x307/0x770 [ 360.414947][ T6886] ? __might_sleep+0xd0/0xd0 [ 360.419655][ T6886] ? read_lock_is_recursive+0x10/0x10 [ 360.425051][ T6886] ? trace_ocfs2_claim_new_inode_at_loc+0x240/0x240 [ 360.431654][ T6886] ? dquot_alloc_inode+0x14c/0xa20 [ 360.436798][ T6886] down_read+0x42/0x2d0 [ 360.440971][ T6886] ? ocfs2_init_acl+0x307/0x770 [ 360.445847][ T6886] ocfs2_init_acl+0x307/0x770 [ 360.450540][ T6886] ? ocfs2_mknod_locked+0x155/0x290 [ 360.455769][ T6886] ? ocfs2_acl_chmod+0x330/0x330 [ 360.460742][ T6886] ? dquot_alloc_inode+0x889/0xa20 [ 360.465866][ T6886] ? dquot_alloc_inode+0x14c/0xa20 [ 360.470983][ T6886] ? ocfs2_block_signals+0x97/0xe0 [ 360.476182][ T6886] ? ocfs2_init_security_get+0x135/0x1a0 [ 360.481834][ T6886] ocfs2_mknod+0x15e8/0x25b0 [ 360.486454][ T6886] ? ocfs2_mkdir+0x4b0/0x4b0 [ 360.491086][ T6886] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 360.497011][ T6886] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 360.502940][ T6886] ? ocfs2_inode_unlock+0xa1/0x140 [ 360.508065][ T6886] ? __lock_acquire+0x7d10/0x7d10 [ 360.513122][ T6886] ? __rwlock_init+0x140/0x140 [ 360.517930][ T6886] ? _raw_spin_unlock+0x24/0x40 [ 360.522797][ T6886] ? do_raw_spin_unlock+0x11d/0x230 [ 360.528007][ T6886] ? rcu_is_watching+0x11/0xa0 [ 360.532856][ T6886] ? ocfs2_lookup+0x4c9/0xa70 [ 360.537553][ T6886] ocfs2_create+0x1b6/0x4b0 [ 360.542071][ T6886] ? ocfs2_update_inode_fsync_trans+0x200/0x200 [ 360.548324][ T6886] ? rwsem_write_trylock+0x135/0x1c0 [ 360.553624][ T6886] ? ocfs2_lookup+0xa70/0xa70 [ 360.558318][ T6886] ? inode_permission+0xef/0x480 [ 360.563292][ T6886] ? bpf_lsm_inode_create+0x5/0x10 [ 360.568521][ T6886] ? security_inode_create+0xb3/0x100 [ 360.574013][ T6886] ? ocfs2_lookup+0xa70/0xa70 [ 360.578965][ T6886] path_openat+0x1181/0x2ee0 [ 360.583590][ T6886] ? do_filp_open+0x430/0x430 [ 360.588565][ T6886] do_filp_open+0x1f1/0x430 [ 360.593079][ T6886] ? vfs_tmpfile+0x480/0x480 [ 360.594353][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 360.597686][ T6886] ? _raw_spin_unlock+0x24/0x40 [ 360.597715][ T6886] ? alloc_fd+0x58f/0x630 [ 360.597746][ T6886] do_sys_openat2+0x150/0x4b0 [ 360.597778][ T6886] ? do_sys_open+0xe0/0xe0 [ 360.597805][ T6886] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 360.597837][ T6886] ? lock_chain_count+0x20/0x20 [ 360.597868][ T6886] __x64_sys_openat+0x135/0x160 [ 360.597898][ T6886] do_syscall_64+0x4c/0xa0 [ 360.597920][ T6886] ? clear_bhb_loop+0x60/0xb0 [ 360.597951][ T6886] ? clear_bhb_loop+0x60/0xb0 [ 360.597983][ T6886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.598014][ T6886] RIP: 0033:0x7f97c019ce59 [ 360.598043][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.598061][ T6886] RSP: 002b:00007f97c104b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 360.620964][ T7] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 360.621594][ T6886] RAX: ffffffffffffffda RBX: 00007f97c0415fa0 RCX: 00007f97c019ce59 [ 360.628985][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.632521][ T6886] RDX: 00000000000c4842 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 360.632540][ T6886] RBP: 00007f97c0232e6f R08: 0000000000000000 R09: 0000000000000000 [ 360.638727][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.641818][ T6886] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000000 [ 360.641834][ T6886] R13: 00007f97c0416038 R14: 00007f97c0415fa0 R15: 00007ffd0f85a848 [ 360.646680][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.651237][ T6886] [ 360.663106][ T4320] usb 1-1: USB disconnect, device number 8 [ 360.728666][ T26] audit: type=1800 audit(1781796673.443:22): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.534" name="file1" dev="loop5" ino=16978 res=0 errno=0 [ 360.826019][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.839702][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 360.852039][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.881731][ T6911] fido_id[6911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 360.954296][ T5529] ocfs2: Unmounting device (7,5) on (node local) [ 361.085435][ T7] usb 4-1: GET_CAPABILITIES returned 0 [ 361.092900][ T7] usbtmc 4-1:16.0: can't read capabilities [ 361.310476][ T7] usb 4-1: USB disconnect, device number 5