last executing test programs: 3m59.779992415s ago: executing program 0 (id=1604): r0 = syz_io_uring_setup(0x10, &(0x7f00000001c0), &(0x7f00000007c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000380)=@IORING_OP_MSG_RING={0x28, 0x4, 0x0, r0, 0x0, 0x1, 0x8, 0x2, 0x0, {0x0, 0x0, r0, 0x1000}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 3m59.619316877s ago: executing program 0 (id=1607): mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000d80)='./security\x00', &(0x7f0000000dc0)='securityfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000e00)='./security/ima/policy\x00', 0x2000, 0x149) pread64(r0, &(0x7f0000000e40)=""/245, 0xf5, 0x8f) 3m59.511109158s ago: executing program 0 (id=1609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)={0x2, 0x0, [{0x4, 0x1, 0x7, 0x0, 0x5, 0x0, 0x6}, {0x80000008, 0x5, 0x6, 0x3981, 0x401, 0xd, 0x5}]}) 3m58.899222525s ago: executing program 0 (id=1613): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000080)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000300)="$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") mount$overlay(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x2000000, &(0x7f0000000c00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x8100, 0x101) getdents64(r0, 0x0, 0x0) 3m57.773357857s ago: executing program 0 (id=1618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000030601010000006800000000020000080500010007"], 0x40}, 0x1, 0x0, 0x0, 0x2000c045}, 0x8000) 3m57.131849772s ago: executing program 0 (id=1625): r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x441, 0x1, r1, 0x0) fanotify_mark(r0, 0x22d, 0x8000032, r1, 0x0) 3m56.597924007s ago: executing program 32 (id=1625): r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x441, 0x1, r1, 0x0) fanotify_mark(r0, 0x22d, 0x8000032, r1, 0x0) 5.635766315s ago: executing program 1 (id=3326): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f000000a8c0)="$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") syz_mount_image$vfat(&(0x7f000000a780), &(0x7f000000a7c0)='./bus\x00', 0x8000a0, 0x0, 0x3, 0x0, &(0x7f000000a800)) mkdirat(0xffffffffffffff9c, &(0x7f000000a840)='./bus/file0\x00', 0x1c7) rmdir(&(0x7f000000a880)='./bus\x00') 5.088918313s ago: executing program 5 (id=3328): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x1, 0x1, 0x2}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000380)=0x1) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000005c0)=0x1) 4.324381443s ago: executing program 5 (id=3331): syz_mount_image$ocfs2(&(0x7f0000000180), &(0x7f0000000480)='./file1\x00', 0x88c0, &(0x7f00000004c0)={[{@dir_resv_level={'dir_resv_level', 0x3d, 0x402}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@noacl}, {@journal_async_commit}, {@coherency_full}, {@heartbeat_none}, {@atime_quantum={'atime_quantum', 0x3d, 0x3}}, {@acl}]}, 0xfd, 0x4421, &(0x7f0000023ac0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000002a80)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000002ac0)) syz_mount_image$ext4(0x0, &(0x7f0000002b00)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000002b40)) rename(&(0x7f0000002b80)='./bus/file0\x00', &(0x7f0000002bc0)='./file0\x00') 3.957466145s ago: executing program 4 (id=3336): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a107000000000002000000010000000200000001000015b600000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f00000009c0)="3c288d8b3b7d97f8c475ed07c88ca0836243c44dddf9e0f57bfa33a44b9d48f76902f42fc722f03e6dd8ce26c87191adc51558ec6f6c4d909831", 0x3a}], 0x2}}], 0x2, 0x20004090) 3.751583977s ago: executing program 4 (id=3338): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x1000000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 3.448720292s ago: executing program 4 (id=3339): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000300)='\b', 0x1}], 0x1}}], 0x1, 0x14) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000061c0)={0x0, 0x88, "0200000000000000703fe6153c598ae93aa83725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f8a7494c5de7f7ba36ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d"}, &(0x7f0000000040)=0x90) 3.170695171s ago: executing program 4 (id=3343): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) 2.843884599s ago: executing program 2 (id=3344): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './proc'}, 0xa) 2.838061721s ago: executing program 1 (id=3354): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='measure #', 0x9) 2.832525802s ago: executing program 4 (id=3355): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000140)={[{@filestreams}, {@largeio}, {@logbufs}, {@inode64}], [{@flag='nomand'}]}, 0x4, 0x9652, &(0x7f000001c300)="$eJzs2gm8pnMBsP/nDGNfxlBJqamIFlmzRDUzmKGQLNGOLClLSYU2LVLaiGjPvmUrSyhbK8neQgmhkiXSYhvm/zkzZxjjonp7379yXdfnc87zPPdz3/f5Pb/vvZzDbD5p44mDwVyD6Y0bzNo5V0+eMubKDW47YquFjl7+5Lv2e/iKS4wfeZww8jhxMBiMGnl7aPqysYNTTh01mH3a8oead+55huYfDFYYeTmyn8Eq0x/mv2zGelNnadaBDj30bZ/pX9NacPhHDD85dL+9DhsMBmNm2n5oMBja8xEfVNrmEyZPesjqQbdhq9Ejz2f+mmP61/wXDgbznz7g42PmdYceh480/DP3fP7Zozd4HH72/1ybT5i87iz+w+fibCPLVhk+x2c9B43NepzfsuQWq41M4bTjbTAYvsQ97Fz5n2jzCZPWGzz6dX5wxOrn7zN1+nVzzsH0G8Xcg8FgnpHr63yPt0v9Z02YuOK0e/aM1yPsM47lPem4OO5NJz4wfJMeDAYLDwZj15lxL6iqqqr/jSZMXHFNuP/P9Vj3/5NOWuz07v9VVVX/u607YeKKw/f6We7/8z3W/X+XxS74yPT/9j9+lelbPfD4foiqqqr6t5q0Lt7/xzzW/X+VNS9Zr/t/VVXV/24brT/t/j/fLPf/RR7r/v/6E1dffGS9Gb833D/TLodm+v8J9820fLaZlt870/LRM+1n5vXnmGn53TMtn3P4PVh/3GAwdsa/F5zy0OKx44bfG1l+z0zLxz/073SWWGum5RNmWj5ppuUTR8Y6vHzyTMsnz7T+Oo8x1VVVVf81bbTipDUHM/07+5HFi854n+7/551xzTKP13irqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrqf7MHbjvz7MFgMDQYDEYNBlMGI89nfhxMnTp16vDrk8699NLHbaD/HQ2dc/XkKWOu3OC2I7Za6OjlT75rv4dm6X+2//1PUP9Jw/5zHTtuMNhp08d7KPU41PnvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3FD+9vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uIeuO3Ms0eOgVGDwZTByPM9Zzyese/r3jCy6mqbnXzHgQ9tucT47UeenXP15CnbPw5jfxwaGv6sY67c4LYjtlro6OVPvmu/J8DZ87//Ceo/aZr/9kODwcj5PWb4XN5gwkabLD0YDA684+TNVh48+N6qw++tPna2wWzTNl162ve1l+Ad77nO9Mfxw98WeXAfJ03b/7pTD5ltaJZBzNRLz7n+iLduftdKsz4u9eifY9SMJ4dde9qdU6dOnfqwhSPN9Sgbz9j/jM8y63k+Mvalh8e+7K47vmPZd+2+xzLb77jldttst81Oy6+46korr7D8yqu9eNltt99hm+Wmf3+UORs37fua/8qczTfrnN02YeY5m/WzPdqcjXvsOZu2xyl7DG0yY85m/zfnbM3HnrNx24/8oCXGjx5sMW1qhgaDJdYaPdht+MXycw4GS6w9su6iw+uuMXbUYLDvQx90+NmcDx6DQ3sOr7P5pI0nPjSyR37CR1ynH7biEuNHHieMPE6cPsRxg4cOxbGDU04dNTwXD5vmeeeeZ2j+wWCFkZcj+xmsNvLuwTPWmzpLsw506KFv+0z/mtaCwzsZfvK25c68avhcnGX7/xf9H13/H+G16tCDEzU08jWyznSvCZPXfehnTZuG4bmbbWTZKsMms87Z/80eMd5xsw/GPMZ4J607ccXhxbPM/4xN8Pi6fcnz3zf92Bq/yvStHvg/RqHxzvcY4113Ao53vsca77Hvv/jU6bv6vzbeWa516037Pv5fudYNHvtaNxvtYJuLFp/1WvfKRx/iw87jGXM05ywrPdq1breDVthzeP/jH/tat97w2Ec/7Fo3ajBYYs0Z17rhC9+k0YN9h1+sMPxi8ujB0cMvVpz2Yu7BucMvXvSWnXfYenjBOjPmZLnh/Y4fOzTN/fxVbl5q6v5Tp641MpbxYx8+1pHjY9zM9/MJY6dP5oxtZ+x3eNUZ+73pKdPfmzSy3wn/xn5nbEvjvWPB6e9NHtnvxFn2O/ox9jtj20ecD0sPPXjhepTrzaRZrjcjf+PM+HEP+5pj+tf8Fw4G859OvrOs+0+vmXT+zvUY450wccU1h8c3y/n74OFI5+/Fk68cvlfMPxgMFh4Mxq4zY+z/ZkOPNt7ZH3u8E2G8sz/WeC8/Zsf1/y+MdzDTeB92nG2+0fRjZZ2R42zyv3H8zth21uvY6GnvTr/sr/OvXMfGPeI69uHZRs0y2TP1aL+zbQ3rT3++6EO/5159wlEz5n70LPv9Z7+zzfRZhuA6NmaWv+dHrXPdYIjmfM9j17hk6IDHnvPRg4f/bTFjzmds+1hzPvlfmfOnP/ac/6u/Jy/9nOnvj55l/DPP+YafftqnZsz5HLPs95/N+eTHvnc8cs7HD0bTnC937/R5e6zr6aPN+YxtZ8z58Edcfezsg7WH71kjcz7pX5nzRf/vHOfzwPrTn2/z4KKzjjj5NTPmfNY5/mdzPunfnfNxDx7nS0x779mjBnPMMdhty1133WX56d9nvFxh+ne+Ft199fR5fqx76aMZzdj2sc6Ltf4VozH/ktHQPzNabPZHM3ro1Dp8512e/H96LVrr3zUa8LXoyqOmz9tj/V70aHM+Y1u6Dy4y0/az/h260frTfu+eb5b74IxN8D541hnr7T1jlyOb3T/LMGfcV++baflsMy2/d6blo2faz8zrzzHT8rtnWj78EeaYaf0ZrOOG/+YdWT7lodXHDv/yNG5k+T0zLR//0LZLrDXT8gkzLZ800/KJDx0aS0yeafnkmdZfZ/BvNuO/SW8/60W+/tX677/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFPXDbmWePHAOjBoMpg+nPh0YeB3sObXjry4cfB4PB6FWOn7rh4z3ex7mhc66ePGXMlRvcdsRWCx29/Ml37fcEOHv+9z9B/SdN899+aDAYOb/HbD8YDDaYsNEmSw8Ggw2nHr/KqMGD7y06/N4aY0cNBvsOPWwHcz64ztCew+tsPmnjiYPBXCNrjHvED33EefSwFZcYP/I4YeRx4vTr07jBQ8fr2MEpp44azD5t+UPNO/c8Q/MPBiuMvBzZz2CV6Q/zXzZjvamzNOtAhx76ts/0r2ktOPwjhp/stt3kZwzP1Szb/9c041q9/ah/umrnv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y9/dv+ff0fJEK1F3+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uAduO/PskWNg1GAwZTD9+dCeI4+DoRNPed7IITJ69yuOPOTxHu/j3NA5V0+eMubKDW47YquFjl7+5Lv2ewKcPf/7n6D+k6b5bz80GIyc32O2HwwGG0zYaJOlB4PBIUdesfuowYPvLTr83hpjRw0G+w49bAdzPrjO0J7D62w+aeOJg8FcI2uMe8QPfcR59LAVlxg/8jhh5HHi9OvTuMFDx+vYwSmnjhrMPm35Q8079zxD8w8GK4y8HNnPYJXpD/NfNmO9qbM060CHHvq2z/SvaS04/COGn+w139UnDs/VLNv/1zTjWr39qH+6aue/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3vgtjPPHjkGRg0GUwbTn48aeRza88YbPrjJ8OPw64XW2fvqx3u8j3ND51w9ecqYKze47YitFjp6+ZPv2u8JcPb873+C+k8a9p/r2HGDwU6bPt5Dqcehzn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIX98BtZ5498nTUQ0tH7dlxgQ2dc/XkKWOu3OC2I7Za6OjlT75rv8d7QP9pj+L/4fwxi/9H8scs/h/NH7P4fyx/zOK/V/6Yxf/j+WMW/73zxyz+n8gfs/h/Mn/M4r9P/pjF/1P5Yxb/T+ePWfw/kz9m8f9s/pjF/3P5Yxb/ffPHLP775Y9Z/D+fP2bx3z9/zOJ/QP6Yxf8L+WMW/wPzxyz+B+WPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/b+SPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4v/N/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvH/Vv6Yxf/b+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bx/07+mMX/9Pwxi/8Z+WMW/zPzxyz+380fs/h/L3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8v58/ZvH/Qf6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6Yxf/8/DGL/wX5Yxb/n+aPWfwvzB+z+P8sf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bxvzJ/zOJ/Vf6Yxf/X+WMW/9/kj1n8r84fs/j/Nn/M4n9N/pjF/9r8MYv/dfljFv/f5Y9Z/K/PH7P435A/ZvG/MX/M4v/7/DGL/x/yxyz+f8wfs/jflD9m8f9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8/5w/ZvG/PX/M4n9H/pjF/y/5Yxb/O/PHLP5/zR+z+P8tf8zi//f8MYv/P/LHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjFf0r+mMX//vwxi/8D+WMW/6n5YxL/2Qb5Yxb/ofwxi/+o/DGL/2z5Yxb/2fPHLP6j88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+I/JH7P4L5Q/ZvEfmz9m8V84f8ziv0j+mMX/SfljFv8n549Z/J+SP2bxXzR/zOL/1Pwxi/9i+WMW/6flj1n8n54/ZvFfPH/M4v+M/DGL/zPzxyz+4/LHLP7Pyh+z+D87/0c0+8ijwf85+WOW83+J/DGL/5L5Yxb/5+aPWfyXyh+z+C+dP2bxf17+mMX/+fljFv8X5I9Z/F+YP2bxXyZ/zOL/ovwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOL/4vwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+L8kf8ziv3r+mMV/jfwxi/9L88cs/i/LH7P4vzx/zOI/Pn/M4j8hf8ziPzF/zOK/Zv6YxX+t/DGL/9r5Yxb/SfljFv/JKv/Z/uU1Lf7rqPz/9Sz+6+aPWfxfkT9m8X9l/pjFf738MYv/+vljFv8N8scs/q/KH7P4b5g/ZvF/df6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/F+TP2bx3yx/zOK/ef6Yxf+1+WMW/9flj1n8X58/ZvF/Q/6Yxf+N+WMW/zflj1n835w/ZvHfIn/M4r9l/pjFf6v8MYv/W/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/W/DGL//b5Yxb/t+WPWfzfnj9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3fkj1n835k/ZvHfJX/M4v+u/DGL/675Yxb/d+ePWfzfkz9m8X9v/pjFf7f8MYv/7vljFv898scs/u/LH7P4vz9/zOL/gfwxi/8H88cs/h/KH7P475k/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvHfK3/M4v/x/DGL/975Yxb/T+SPWfw/mT9m8d8nf8zi/6n8MYv/p/PHLP6fyR+z+H82f8zi/7n8MYv/vvljFv/98scs/p/PH7P4758/ZvE/IH/M4v+F/DGL/4H5Yxb/g/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8f9m/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/h/K3/M4v/t/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4fyd/zOJ/ev6Yxf+M/DGL/5n5Yxb/7+aPWfy/lz9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9+/pjF/4L8MYv/T/PHLP4X5o9Z/H+WP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X5k/ZvG/Kn/M4v/r/DGL/2/yxyz+V+ePWfx/mz9m8b8mf8zif23+2BPe/+6pw99nuy5/7AnvP73Zfpc/ZvG/Pn/M4n9D/pjF/8b8MYv/7/PHLP5/yB+z+P8xf8zif1P+mMX/T/ljFv+b88cs/rfkj1n8b80fs/jflj9m8f9z/pjF//b8MYv/HfljFv+/5I9Z/O/MH7P4/zV/zOL/t/wxi//f88cs/v/IH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv8p+WMW//vzxyz+D+SPWfyn5o9J/Gcf5I9Z/Ifyxyz+o/LHLP6z5Y9Z/GfPH7P4j84fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOI/Jn/M4r9Q/pjFf2z+mMV/4fwxi/8i+WMW/yflj1n8n5w/ZvF/Sv6YxX/R/DGL/1Pzxyz+i+WPWfyflj9m8X96/pjFf/H8MYv/M/LHLP7PzB+z+I/LH7P4Pyt/zOL/7Pwxi/9z8scs/kvkj1n8l8wfs/g/N3/M4r9U/pjFf+n8MYv/8/LHLP7Pzx+z+L8gf8zi/8L8MYv/MvljFv8X5Y9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv8X549Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/yX5Yxb/1fPHLP5r5I9Z/F+aP2bxf1n+mMX/5fljFv/x+WMW/wn5Yxb/ifljFv8188cs/mvlj1n8184fs/hPyh+z+E/OH7P4r5M/ZvFfN3/M4v+K/DGL/yvzxyz+6+WPWfzXzx+z+G+QP2bxf1X+mMV/w/wxi/+rB5fmD1n8N+r8xyz+G+ePWfw3yR+z+G+aP2bxf83D/Uf9/z6u/9Is/pt1/mMW/83zxyz+r80fs/i/Ln/M4v/6/DGL/xvyxyz+b8wfs/i/KX/M4v/m/DGL/xb5Yxb/LfPHLP5b5Y9Z/N+SP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/t+aPWfy3zx+z+L8tf8zi//b8MYv/DvljFv8d88cs/jvlj1n8d84fs/i/I3/M4v/O/DGL/y75Yxb/d+WPWfx3zR+z+L87f8zi/578MYv/e/PHLP675Y9Z/HfPH7P475E/ZvF/X/6Yxf/9+WMW/w/kj1n8P5g/ZvH/UP6YxX/P/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/175Yxb/j+ePWfz3zh+z+H8if8zi/8n8MYv/PvljFv9P5Y9Z/D+dP2bx/0z+mMX/s/ljFv/P5Y9Z/PfNH7P475c/ZvH/fP6YxX///DGL/wH5Yxb/L+SPWfwPzB+z+B+UP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/N/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/1v5Yxb/b+ePWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf87+WMW/9Pzxyz+Z0zzn/PxGtV/bRb/Mzv/MYv/d/PHLP7fyx+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/7+ePWfx/kD9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8T8/f8zif0H+mMX/p/ljFv8L88cs/j/LH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8r8wfs/hflT9m8f91/pjF/zf5Yxb/q/PHLP6/zR+z+F+TP2bxvzZ/zOJ/Xf6Yxf93+WMW/+vzxyz+N+SPWfxvzB+z+P8+f8zi/4f8MYv/H/PHLP435Y9Z/P+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/P+ePWfxvzx+z+N+RP2bx/0v+mMX/zvwxi/9f88cs/n/LH7P4/z1/zOL/j/wxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxn5I/ZvG/P3/M4v9A/pjFf2r+mMR/9CB/zOI/lD9m8R+VP2bxny1/zOI/e/6YxX90/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/zH5Yxb/hfLHLP5j88cs/gvnj1n8F8kfs/g/KX/M4v/k/DGL/1Pyxyz+i+aPWfyfmj9m8V8sf8zi/7T8MYv/0/PHLP6L549Z/J+RP2bxf2b+mMV/XP6Yxf9Z+WMW/2fnj1n8n5M/ZvFfIn/M4r9k/pjF/7n5Yxb/pfLHLP5L549Z/J+XP2bxf37+mMX/BfljFv8X5o9Z/JfJH7P4vyh/zOK/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4vzh/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4vyR+z+K+eP2bxXyN/zOL/0vwxi//L8scs/i/PH7P4j88fs/hPyB+z+E/MH7P4r5k/ZvFfK3/M4r92/pjFf1L+mMV/cv6YxX+d/DGL/7r5Yxb/V+SPWfxfmT9m8V8vf8ziv37+mMV/g/wxi/+r8scs/hvmj1n8X50/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/X5I9Z/DfLH7P4b54/ZvF/bf6Yxf91+WMW/9fnj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n8t8gfs/hvmT9m8d8qf8zi/5b8MYv/1vljFv9t8scs/tvmj1n8t8sfs/i/NX/M4r99/pjF/235Yxb/t+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6Yxf8d+WMW/3fmj1n8d8kfs/i/K3/M4r9r/pjF/935Yxb/9+SPWfzfmz9m8d8tf8ziv3v+mMV/j/wxi//78scs/u/PH7P4fyB/zOL/wfwxi/+H8scs/nvmj1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n898ofs/h/PH/M4r/3w/07FEay+H8idMzi/8n8MYv/PvljFv9P5Y9Z/D+dP2bx/0z+mMX/s/ljFv/P5Y9Z/PfNH7P475c/ZvH/fP6YxX///DGL/wH5Yxb/L+SPWfwPzB+z+B+UP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/N/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/1v5Yxb/b+ePWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf87+WMW/9Pzxyz+Z+SPWfzPzB+z+H83f8zi/738MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/8/PHLP4X5I9Z/H+aP2bxvzB/zOL/s/wxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/K/DGL/1X5Yxb/X+ePWfx/kz9m8b86f8zi/9v8MYv/NfljFv9r88cs/tflj1n8f5c/ZvG/Pn/M4n9D/pjF/8b8MYv/7/PHLP5/yB+z+P8xf8zif1P+mMX/T/ljFv+b88cs/rfkj1n8b80fs/jflj9m8f9z/pjF//b8MYv/HfljFv+/5I9Z/O/MH7P4/zV/zOL/t/wxi//f88cs/v/IH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv8p+WMW//vzxyz+D+SPWfyn5o9J/OcY5I9Z/Ifyxyz+o/LHLP6z5Y9Z/GfPH7P4j84fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOI/Jn/M4r9Q/pjFf2z+mMV/4fwxi/8i+WMW/yflj1n8n5w/ZvF/Sv6YxX/R/DGL/1Pzxyz+i+WPWfyflj9m8X96/pjFf/H8MYv/M/LHLP7PzB+z+I/LH7P4Pyt/zOL/7Pwxi/9z8scs/kvkj1n8l8wfs/g/N3/M4r9U/pjFf+n8MYv/8/LHLP7Pzx+z+L8gf8zi/8L8MYv/MvljFv8X5Y9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv8X549Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/yX5Yxb/1fPHLP5r5I9Z/F+aP2bxf1n+mMX/5fljFv/x+WMW/wn5Yxb/ifljFv8188cs/mvlj1n8184fs/hPyh+z+E/OH7P4r5M/ZvFfN3/M4v+K/DGL/yvzxyz+6+WPWfzXzx+z+G+QP2bxf1X+mMV/w/wxi/+r88cs/hvlj1n8N84fs/hvkj9m8d80f8zi/5r8MYv/ZvljFv/N88cs/q/NH7P4vy5/zOL/+vwxi/8b8scs/m/MH7P4vyl/zOL/5vwxi/8W+WMW/y3zxyz+W+WPWfzfkj9m8d86f8ziv03+mMV/2/wxi/92+WMW/7fmj1n8t88fs/i/LX/M4v/2/DGL/w75Yxb/HfPHLP475Y9Z/HfOH7P4vyN/zOL/zvwxi/8u+WMW/3flj1n8d80fs/i/O3/M4v+e/DGL/3vzxyz+u+WPWfx3zx+z+O+RP2bxf1/+mMX//fljFv8P5I9Z/D+YP2bx/1D+mMV/z/wxi/+H88cs/h/JH7P4fzR/zOL/sfwxi/9e+WMW/4/nj1n8984fs/h/In/M4v/J/DGL/z75Yxb/T+WPWfw/nT9m8f9M/pjF/7P5Yxb/z+WPWfz3zR+z+O+XP2bx/3z+mMV///wxi/8B+WMW/y/kj1n8D8wfs/gflD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/zfzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf9b+WMW/2/nj1n8T84fs/ifkj9m8T81f8zif1r+mMX/O/ljFv/T88cs/mfkj1n8z8wfs/h/N3/M4v+9/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW//Pzxyz+F+SPWfx/mj9m8b8wf8zi/7P8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMX/yvwxi/9V+WMW/1/nj1n8f5M/ZvG/On/M4v/b/DGL/zX5Yxb/a/PHLP7X5Y9Z/H+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/+/zxyz+f8gfs/j/MX/M4n9T/pjF/0/5Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvH/c/6Yxf/2/DGL/x35Yxb/v+SPWfzvzB+z+P81f8zi/7f8MYv/3/PHLP7/yB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/KfljFv/788cs/g/kj1n8p+aPSfznHOSPWfyH8scs/qPyxyz+s+WPWfxnzx+z+I/OH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziP0btP+ZR37H4L6T2f/Qs/mPzxyz+C+ePWfwXyR+z+D8pf8zi/+T8MYv/U/LHLP6L5o9Z/J+aP2bxXyx/zOL/tPwxi//T88cs/ovnj1n8n5E/ZvF/Zv6YxX9c/pjF/1n5Yxb/Z+ePWfyfkz9m8V8if8ziv2T+mMX/ufljFv+l8scs/kvnj1n8n5c/ZvF/fv6Yxf8F+WMW/xfmj1n8l8kfs/i/KH/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/i/OH/M4r9y/pjFf5X8MYv/qvljFv/V8scs/i/JH7P4r54/ZvFfI3/M4v/S/DGL/8vyxyz+L88fs/iPzx+z+E/IH7P4T8wfs/ivmT9m8V8rf8ziv3b+mMV/Uv6YxX9y/pjFf538MYv/uvljFv9X5I9Z/F+ZP2bxXy9/zOK/fv6YxX+D/DGL/6vyxyz+G+aPWfxfnT9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/9fkj1n8N8sfs/hvnj9m8X9t/pjF/3X5Yxb/1+ePWfzfkD9m8X9j/pjF/035Yxb/N+ePWfy3yB+z+G+ZP2bx3yp/zOL/lvwxi//W+WMW/23yxyz+2+aPWfy3yx+z+L81f8ziv33+mMX/bfljFv+3549Z/HfIH7P475g/ZvHfKX/M4r9z/pjF/x35Yxb/d+aPWfx3yR+z+L8rf8ziv2v+mMX/3fljFv/35I9Z/N+bP2bx3y1/zOK/e/6YxX+P/DGL//vyxyz+788fs/h/IH/M4v/B/DGL/4fyxyz+e+aPWfw/nD9m8f9I/pjF/6P5Yxb/j+WPWfz3yh+z+H88f8ziv3f+mMX/E/ljFv9P5o9Z/PfJH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOK/b/6YxX+//DGL/+fzxyz+++ePWfwPyB+z+H8hf8zif2D+mMX/oPwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/L+ZP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP7fyh+z+H87f8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+38kfs/ifnj9m8T8jf8zif2b+mMX/u/ljFv/v5Y9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+J+fP2bxvyB/zOL/0/wxi/+F+WMW/5/lj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+P88fs/j/In/M4v/L/DGL/6/yxyz+V+aPWfyvyh+z+P86f8zi/5v8MYv/1fljFv/f5o9Z/K/JH7P4X5s/ZvG/Ln/M4v+7/DGL//X5Yxb/G/LHLP435o9Z/H+fP2bx/0P+mMX/j/ljFv+b8scs/n/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/n/PHLP63549Z/O/IH7P4/yV/zOJ/Z/6Yxf+v+WMW/7/lj1n8/54/ZvH/R/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4T8kfs/jfnz9m8X8gf8ziPzV/TOI/1yB/zOI/lD9m8R+VP2bxn+0x/ddd4P/9wP47s/jP3vmPWfxH549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8R+TP2bxXyh/zOI/Nn/M4r9w/pjFf5H8MYv/k/LHLP5Pzh+z+D8lf8ziv2j+mMX/qfljFv/F8scs/k/LH7P4Pz1/zOK/eP6Yxf8Z+WMW/2fmj1n8x+WPWfyflT9m8X92/pjF/zn5Yxb/JfLHLP5L5o9Z/J+bP2bxXyp/zOK/dP6Yxf95+WMW/+fnj1n8X5A/ZvF/Yf6YxX+Z/DGL/4vyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/4vzxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/kvwxi//q+WMW/zXyxyz+L80fs/i/LH/M4v/y/DGL//j8MYv/hPwxi//E/DGL/5r5Yxb/tfLHLP5r549Z/Cflj1n8J+ePWfzXyR+z+K+bP2bxf0X+mMX/lfljFv/18scs/uvnj1n8N8gfs/i/Kn/M4r9h/pjF/9X5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvF/Tf6YxX+z/DGL/+b5Yxb/1+aPWfxflz9m8X99/pjF/w35Yxb/N+aPWfzflD9m8X9z/pjFf4v8MYv/lvljFv+t8scs/m/JH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/W/PHLP7b549Z/N+WP2bxf3v+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfzfkT9m8X9n/pjFf5f8MYv/u/LHLP675o9Z/N+dP2bxf0/+mMX/vfljFv/d8scs/rvnj1n898gfs/i/L3/M4v/+/DGL/wfyxyz+H8wfs/h/KH/M4r9n/pjF/8P5Yxb/j+SPWfw/mj9m8f9Y/pjFf6/8MYv/x/PHLP57549Z/D+RP2bx/2T+mMV/n/wxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi//n8scs/vvmj1n898sfs/h/Pn/M4r9//pjF/4D8MYv/F/LHLP4H5o9Z/A/KH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/m/ljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zi/638MYv/t/PHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4v+d/DGL/+n5Yxb/M/LHLP5n5o9Z/L+bP2bx/17+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+H8/f8zi/4P8MYv/D/PHLP4/yh+z+P84f8zi/5P8MYv/+fljFv8L8scs/j/NH7P4X5g/ZvH/Wf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4n9l/pjF/6r8MYv/r/PHLP6/yR+z+F+dP2bx/23+mMX/mvwxi/+1+WMW/+vyxyz+v/un/qP/347rvzSL//Wd/5jF/4b8MYv/jfljFv/f549Z/P+QP2bx/2P+mMX/pvwxi/+f8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zi/+f8MYv/7fljFv878scs/n/JH7P435k/ZvH/a/6Yxf9v+WMW/7/nj1n8/5E/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/lPyxyz+9+ePWfwfyB+z+E/NH5P4zz3IH7P4D+WPWfxH5Y9Z/GfLH7P4z54/ZvEfnT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX9M/pjFf6H8MYv/2Pwxi//C+WMW/0Xyxyz+T8ofs/g/OX/M4v+U/DGL/6L5Yxb/p+aPWfwXyx+z+D8tf8zi//T8MYv/4vljFv9n5I9Z/J+ZP2bxH5c/ZvF/Vv6Yxf/Z+WMW/+fkj1n8l8gfs/gvmT9m8X9u/pjFf6n8MYv/0vljFv/n5Y9Z/J+fP2bxf0H+mMX/hfljFv9l8scs/i/KH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/i/OH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/S/LHLP6r549Z/NfIH7P4vzR/zOL/svwxi//L88cs/uPzxyz+E/LHLP4T88cs/mvmj1n818ofs/ivnT9m8Z+UP2bxn5w/ZvFfJ3/M4r9u/pjF/xX5Yxb/V+aPWfzXyx+z+K+fP2bx3yB/zOL/qvwxi/+G+WMW/1fnj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMX/NfljFv/N8scs/pvnj1n8X5s/ZvF/Xf6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/y3yxyz+W+aPWfy3yh+z+L8lf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+b80fs/hvnz9m8X9b/pjF/+35Yxb/HfLHLP475o9Z/HfKH7P475w/ZvF/R/6Yxf+d+WMW/13yxyz+78ofs/jvmj9m8X93/pjF/z35Yxb/9+aPWfx3yx+z+O+eP2bx3yN/zOL/vvwxi//788cs/h/IH7P4fzB/zOL/ofwxi/+e+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/73yxyz+H88fs/jvnT9m8f9E/pjF/5P5Yxb/ffLHLP6fyh+z+H86f8zi/5n8MYv/Z/PHLP6fyx+z+O+bP2bx3y9/zOL/+fwxi//++WMW/wPyxyz+X8gfs/gfmD9m8T8of8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/b+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/7fyxyz+384fs/ifnD9m8T8lf8zif2r+mMX/tPwxi/938scs/qfnj1n8z8gfs/ifmT9m8f9u/pjF/3v5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+5+ePWfwvyB+z+P80f8zif2H+mMX/Z/ljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi/+V+WMW/6vyxyz+v84fs/j/Jn/M4n91/pjF/7f5Yw/3H/14D+c/71H8r8kfs5z/1+aPWfyvyx+z+P8uf8zif33+mMX/hvwxi/+N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+m/DGL/5/yxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOL/5/wxi//t+WMW/zvyxyz+f8kfs/jfmT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+U/LHLP73549Z/B/IH7P4T80fk/jPM8gfs/gP5Y9Z/Eflj1n8Z8sfs/jPnj9m8R+dP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHnvj+cz34Vv6P7InvP6155ssfs/jPnz9m8V8gf8ziv2D+mMV/TP6YxX+h/DGL/9j8MYv/wvljFv9F8scs/k/KH7P4Pzl/zOL/lPwxi/+i+WMW/6fmj1n8F8sfs/g/LX/M4v/0/DGL/+L5Yxb/Z+SPWfyfmT9m8R+XP2bxf1b+mMX/2fljFv/n5I9Z/JfIH7P4L5k/ZvF/bv6YxX+p/DGL/9L5Yxb/5+WPWfyfnz9m8X9B/pjF/4X5Yxb/ZfLHLP4vyh+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4vzh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/0vyxyz+q+ePWfzXyB+z+L80f8zi/7L8MYv/y/PHLP7j88cs/hPyxyz+E/PHLP5r5o9Z/NfKH7P4r50/ZvGflD9m8Z+cP2bxXyd/zOK/bv6Yxf8V+WMW/1fmj1n818sfs/ivnz9m8d8gf8zi/6r8MYv/hvljFv9X549Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjF/zX5Yxb/zfLHLP6b549Z/F+bP2bxf13+mMX/9fljFv835I9Z/N+YP2bxf1P+mMX/zfljFv8t8scs/lvmj1n8t8ofs/i/JX/M4r91/pjFf5v8MYv/tvljFv/t8scs/m/NH7P4b58/ZvF/W/6Yxf/t+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bxf0f+mMX/nfljFv9d8scs/u/KH7P475o/ZvF/d/6Yxf89+WMW//fmj1n8d8sfs/jvnj9m8d8jf8zi/778MYv/+/PHLP4fyB+z+H8wf8zi/6H8MYv/nvljFv8P549Z/D+SP2bx/2j+mMX/Y/ljFv+98scs/h/PH7P4750/ZvH/RP6Yxf+T+WMW/33yxyz+n8ofs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/jvmz9m8d8vf8zi//n8MYv//vljFv8D8scs/l/IH7P4H5g/ZvE/KH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/2/mj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi/+38scs/t/OH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/d/LHLP6n549Z/M/IH7P4n5k/ZvH/bv6Yxf97+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/ufnj1n8L8gfs/j/NH/M4n9h/pjF/2f5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/lfljFv+r8scs/r/OH7P4/yZ/zOJ/df6Yxf+3+WMW/2vyxyz+1+aPWfyvyx+z+P8uf8zif33+mMX/hvwxi/+N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+m/DGL/5/yxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOL/5/wxi//t+WMW/zvyxyz+f8kfs/jfmT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+U/LHLP73549Z/B/IH7P4T80fk/jPO8gfs/gP5Y9Z/Eflj1n8Z8sfs/jPnj9m8R+dP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf0z+mMV/ofwxi//Y/DGL/8L5Yxb/RfLHLP5Pyh+z+D85f8zi/5T8MYv/ovljFv+n5o9Z/BfLH7P4Py1/zOL/9Pwxi//i+WMW/2fkj1n8n5k/ZvEflz9m8X9W/pjF/9n5Yxb/5+SPWfyXyB+z+C+ZP2bxf27+mMV/qfwxi//S+WMW/+flj1n8n58/ZvF/Qf6Yxf+F+WMW/2Xyxyz+L8ofs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+L84fs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/9L8scs/qvnj1n818gfs/i/NH/M4v+y/DGL/8vzxyz+4/PHLP4T8scs/hPzxyz+a+aPWfzXyh+z+K+dP2bxn5Q/ZvGfnD9m8V8nf8ziv27+mMX/FfljFv9X5o9Z/NfLH7P4r58/ZvHfIH/M4v+q/DGL/4b5Yxb/V+ePWfw3yh+z+G+cP2bx3yR/zOK/af6Yxf81+WMW/83yxyz+m+ePWfxfmz9m8X9d/pjF//X5Yxb/N+SPWfzfmD9m8X9T/pjF/835Yxb/LfLHLP5b5o9Z/LfKH7P4vyV/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP5vzR+z+G+fP2bxf1v+mMX/7fljFv8d8scs/jvmj1n8d8ofs/jvnD9m8X9H/pjF/535Yxb/XfLHLP7vyh+z+O+aP2bxf3f+mMX/PfljFv/35o9Z/HfLH7P4754/ZvHfI3/M4v++/DGL//vzxyz+H8gfs/h/MH/M4v+h/DGL/575Yxb/D+ePWfw/kj9m8f9o/pjF/2P5Yxb/vfLHLP4fzx+z+O+dP2bx/0T+mMX/k/ljFv998scs/p/KH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P475s/ZvHfL3/M4v/5/DGL//75Yxb/A/LHLP5fyB+z+B+YP2bxPyh/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi//X8scs/l/PH7P4fyN/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv9v5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/t/LHLP7fzh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/3fyxyz+p+ePWfzPyB+z+J+ZP2bx/27+mMX/e/ljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zi//38MYv/D/LHLP4/zB+z+P8of8zi/+P8MYv/T/LHLP7n549Z/C/IH7P4/zR/zOJ/Yf6Yxf9n+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/5X5Yxb/q/LHLP6/zh+z+P8mf8zif3X+mMX/t/ljFv9r8scs/tfmj1n8r8sfs/j/Ln/M4n99/pjF/4b8MYv/jfljFv/f549Z/P+QP2bx/2P+mMX/pvwxi/+f8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zi/+f8MYv/7fljFv878scs/n/JH7P435k/ZvH/a/6Yxf9v+WMW/7/nj1n8/5E/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/lPyxyz+9+ePWfwfyB+z+E/NH5P4zzfIH7P4D+WPWfxH5Y9Z/GfLH7P4z54/ZvEfnT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX9M/pjFf6H8MYv/2Pwxi//C+WMW/0Xyxyz+T8ofs/g/OX/M4v+U/DGL/6L5Yxb/p+aPWfwXyx+z+D8tf8zi//T8MYv/4vljFv9n5I9Z/J+ZP2bxH5c/ZvF/Vv6Yxf/Z+WMW/+fkj1n8l8gfs/gvmT9m8X9u/pjFf6n8MYv/0vljFv/n5Y9Z/J+fP2bxf0H+mMX/hfljFv9l8scs/i/KH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/i/OH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/S/LHLP6r549Z/NfIH7P4vzR/zOL/svwxi//L88cs/uPzxyz+E/LHLP4T88cs/mvmj1n818ofs/ivnT9m8Z+UP2bxn5w/ZvFfJ3/M4r9u/pjF/xX5Yxb/V+aPWfzXyx+z+K+fP2bx3yB/zOL/qvwxi/+G+WMW/1fnj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMX/NfljFv/N8scs/pvnj1n8X5s/ZvF/Xf6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/y3yxyz+W+aPWfy3yh+z+L8lf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+b80fs/hvnz9m8X9b/pjF/+35Yxb/HfLHLP475o9Z/HfKH7P475w/9qD/tic+of3fkT9mOf/fmT9m8d8lf8zi/678MYv/rvljFv93549Z/N+TP2bxf2/+mMV/t/wxi//u+WMW/z3yxyz+78sfs/i/P3/M4v+B/DGL/wfzxyz+H8ofs/jvmT9m8f9w/pjF/yP5Yxb/j+aPWfw/lj9m8d8rf8zi//H8MYv/3vljFv9P5I9Z/D+ZP2bx3yd/zOL/qfwxi/+n88cs/p/JH7P4fzZ/zOL/ufwxi/+++WMW//3yxyz+n88fs/jvnz9m8T8gf8zi/4X8MYv/gfljFv+D8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bx/2b+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+H8rf8zi/+38MYv/yfljFv9T8scs/qfmj1n8T8sfe0L7z/7g0vm+kz/2hPZ/aOl8p+ePWfzPyB+z+J+ZP2bx/27+mMX/e/ljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zi//38MYv/D/LHLP4/zB+z+P8of8zi/+P8MYv/T/LHLP7n549Z/C/IH7P4/zR/zOJ/Yf6Yxf9n+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/5X5Yxb/q/LHLP6/zh+z+P8mf8zif3X+mMX/t/ljFv9r8scs/tfmj1n8r8sfs/j/Ln/M4n99/pjF/4b8MYv/jfljFv/f549Z/P+QP2bx/2P+mMX/pvwxi/+f8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zi/+f8MYv/7fljFv878scs/n/JH7P435k/ZvH/a/6Yxf9v+WMW/7/nj1n8/5E/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/lPyxyz+9+ePWfwfyB+z+E/NH5P4zz/IH7P4D+WPWfxH5Y9Z/GfLH7P4z54/ZvEfnT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX9M/pjFf6H8MYv/2Pwxi//C+WMW/0Xyxyz+T8ofs/g/OX/M4v+U/DGL/6L5Yxb/p+aPWfwXyx+z+D8tf8zi//T8MYv/4vljFv9n5I9Z/J+ZP2bxH5c/ZvF/Vv6Yxf/Z+WMW/+fkj1n8l8gfs/gvmT9m8X9u/pjFf6n8MYv/0vljFv/n5Y9Z/J+fP2bxf0H+mMX/hfljFv9l8scs/i/KH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/i/OH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/S/LHLP6r549Z/NfIH7P4vzR/zOL/svwxi//L88cs/uPzxyz+E/LHLP4T88cs/mvmj1n818ofs/ivnT9m8Z+UP2bxn5w/ZvFfJ3/M4r9u/pjF/xX5Yxb/V+aPWfzXyx+z+K+fP2bx3yB/zOL/qvwxi/+G+WMW/1fnj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMX/NfljFv/N8scs/pvnj1n8X5s/ZvF/Xf6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/y3yxyz+W+aPWfy3yh+z+L8lf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+b80fs/hvnz9m8X9b/pjF/+35Yxb/HfLHLP475o9Z/HfKH7P475w/ZvF/R/6Yxf+d+WMW/13yxyz+78ofs/jvmj9m8X93/pjF/z35Yxb/9+aPWfx3yx+z+O+eP2bx3yN/zOL/vvwxi//788cs/h/IH7P4fzB/zOL/ofwxi/+e+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/73yxyz+H88fs/jvnT9m8f9E/pjF/5P5Yxb/ffLHLP6fyh+z+H86f8zi/5n8MYv/Z/PHLP6fyx+z+O+bP2bx3y9/zOL/+fwxi//++WMW/wPyxyz+X8gfs/gfmD9m8T8of8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP/ZE9Z/Fev6j8seeqP6DWc7/o/PHLP7H5I9Z/I/NH7P4fzN/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/L+VP2bx/3b+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfy/kz9m8T89f8zif0b+mMX/zPwxi/9388cs/t/LH7P4n5U/ZvGHfxNeIv9z8scs/ufmj1n8z8sfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL//n5Yxb/C/LHLP4/zR+z+F+YP2bx/1n+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/Zf6Yxf+q/DGL/6/zxyz+v8kfs/hfnT9m8f9t/pjF/5r8MYv/tfljFv/r8scs/r/LH7P4X58/ZvG/IX/M4n9j/pjF//f5Yxb/P+SPWfz/mD9m8b8pf8zi/6f8MYv/zfljFv9b8scs/rfmj1n8b8sfs/j/OX/M4n97/pjF/478MYv/X/LHLP535o9Z/P+aP2bx/1v+mMX/7/ljFv9/5I9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv/lPwxi//9+WMW/wfyxyz+U/PHJP4LDPLHLP5D+WMW/1H5Yxb/2fLHLP6z549Z/Efnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxH5M/ZvFfKH/M4j82f8ziv3D+mMV/kfwxi/+T8scs/k/OH7P4PyV/zOK/aP6Yxf+p+WMW/8Xyxyz+T8sfs/g/PX/M4r94/pjF/xn5Yxb/Z+aPWfzH5Y9Z/J+VP2bxf3b+mMX/OfljFv8l8scs/kvmj1n8n5s/ZvFfKn/M4r90/pjF/3n5Yxb/5+ePWfxfkD9m8X9h/pjFf5n8MYv/i/LHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjFf6X8MYv/i/PHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+S/DGL/+r5Yxb/NfLHLP4vzR+z+L8sf8zi//L8MYv/+Pwxi/+E/DGL/8T8MYv/mvljFv+1RP5z/RvrWvzXFvn/O1n8J+WPWfwn549Z/NfJH7P4r5s/ZvF/Rf6Yxf+V+WMW//Xyxyz+6+ePWfw3yB+z+L8qf8ziv2H+mMX/1fljFv+N8scs/hvnj1n8N8kfs/hvmj9m8X9N/pjFf7P8MYv/5vljFv/X5o9Z/F+XP2bxf33+mMX/DfljFv835o9Z/N+UP2bxf3P+mMV/i/wxi/+W+WMW/63yxyz+b8kfs/hvnT9m8d8mf8ziv23+mMV/u/wxi/9b88cs/tvnj1n835Y/ZvF/e/6YxX+H/DGL/475Yxb/nfLHLP47549Z/N+RP2bxf2f+mMV/l/wxi/+78scs/rvmj1n8350/ZvF/T/6Yxf+9+WMW/93yxyz+u+ePWfz3yB+z+L8vf8zi//78MYv/B/LHLP4fzB+z+H8of8ziv2f+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMV/r/wxi//H88cs/nvnj1n8P5E/ZvH/ZP6YxX+f/DGL/6fyxyz+n84fs/h/Jn/M4v/Z/DGL/+fyxyz+++aPWfz3yx+z+H8+f8ziv3/+mMX/gPwxi/8X8scs/gfmj1n8D8ofs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+b+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOL/rfwxi/+388cs/ifnj1n8T8kfs/ifmj9m8T8tf8zi/538MYv/6fljFv8z8scs/mfmj1n8v5s/ZvH/Xv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi//5+WMW/wvyxyz+P80fs/hfmD9m8f9Z/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif2X+mMX/qvwxi/+v88cs/r/JH7P4X50/ZvH/bf6Yxf+a/DGL/7X5Yxb/6/LHLP6/yx+z+F+fP2bxvyF/zOJ/Y/6Yxf/3+WMW/z/kj1n8/5g/ZvG/KX/M4v+n/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4/zl/zOJ/e/6Yxf+O/DGL/1/yxyz+d+aPWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL/5T8MYv//fljFv8H8scs/lPzxyT+Cw7yxyz+Q/ljFv9R+WMW/9nyxyz+s+f/sGYbebT4j84fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOI/Jn/M4r9Q/pjFf2z+mMV/4fwxi/8i+WMW/yflj1n8n5w/ZvF/Sv6YxX/R/DGL/1Pzxyz+i+WPWfyflj9m8X96/pjFf/H8MYv/M/LHLP7PzB+z+I/LH7P4Pyt/zOL/7Pwxi/9z8scs/kvkj1n8l8wfs/g/N3/M4r9U/pjFf+n8MYv/8/LHLP7Pzx+z+L8gf8zi/8L8MYv/MvljFv8X5Y9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv8X549Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/yX5Yxb/1fPHLP5r5I9Z/F+aP2bxf1n+mMX/5fljFv/x+WMW/wn5Yxb/ifljFv8188cs/mvlj1n8184fs/hPyh+z+E/OH7P4r5M/ZvFfN3/M4v+K/DGL/yvzxyz+6+WPWfzXzx+z+G+QP2bxf1X+mMV/w/wxi/+r88cs/hvlj1n8N84fs/hvkj9m8d80f8zi/5r8MYv/ZvljFv/N88cs/q/NH7P4vy5/zOL/+vwxi/8b8scs/m/MH7P4vyl/zOL/5vwxi/8W+WMW/y3zxyz+W+WPWfzfkj9m8d86f8ziv03+mMV/2/wxi/92+WMW/7fmj1n8t88fs/i/LX/M4v/2/DGL/w75Yxb/HfPHLP475Y9Z/HfOH7P4vyN/zOL/zvwxi/8u+WMW/3flj1n8d80fs/i/O3/M4v+e/DGL/3vzxyz+u+WPWfx3zx+z+O+RP2bxf1/+mMX//fn/f+zRgwEYhgIFwG8WqW3btm3btpmktm3btm3btu12gTdB390KF7X8D/QftfwP8h+1/A/2H7X87+E/avnf03/U8r+X/6jlf2//Ucv/Pv6jlv99/Uct//v5j1r+9/cftfwf4D9q+T/Qf9Tyf5D/qOX/YP9Ry/8h/qOW/0P9Ry3/h/mPWv4P9x+1/B/hP2r5P9J/1PJ/lP+o5f9o/1HL/zH+o5b/Y/1HLf/H+Y9a/o/3H7X8n+A/avk/0X/U8n+S/6jl/2T/Ucv/Kf6jlv9T/Uct/6f5j1r+T/cftfyf4T9q+T/Tf9Tyf5b/qOX/bP9Ry/85/qOW/3P9Ry3/5/mPWv7P9x+1/F/gP2r5v9B/1PJ/kf+o5f9i/1HL/yX+o5b/S/1HLf+X+Y9a/i/3H7X8X+E/avm/0n/U8n+V/6jl/2r/Ucv/Nf6jlv9r/Uct/9f5j1r+r/cftfzf4D9q+b/Rf9Tyf5P/qOX/Zv9Ry/8t/qOW/1v9Ry3/t/mPWv5v9x+1/N/hP2r5v9N/1PJ/l/+o5f9u/1HL/z3+o5b/e/1HLf/3+Y9a/u/3H7X8P+A/avl/0H/U8v+Q/6jl/2H/Ucv/I/6jlv9H/Uct/4/5j1r+H/cftfw/4T9q+X/Sf9Ty/5T/qOX/af9Ry/8z/qOW/2f9Ry3/z/mPWv6f9x+1/L/gP2r5f9F/1PL/kv+o5f9l/1HL/yv+o5b/V/1HLf+v+Y9a/l/3H7X8v+E/avl/03/U8v+W/6jl/23/Ucv/O/6jlv93/Uct/+/5j1r+3/cftfx/4D9q+f/Qf9Ty/5H/qOX/Y/9Ry/8n/qOW/0/9Ry3/n/mPWv4/9x+1/H/hP2r5/9J/1PL/lf+o5f9r/1HL/zf+o5b/b/1HLf/f+Y9a/r/3H7X8/+A/avn/0X/U8v+T/6jl/2f/Ucv/L/6jlv9f/Uct/7/5j1r+f/cflfwP+Iv/qOX/r/6jlv+/+Y9a/v/uP2r5/4f/qOX/n/6jlv9/+Y9a/v/tP2r5/4//qOX/v/6jlv//+Y9a/v/vP2r5H8J/1PI/pP+o5X8o/1HL/9D+o5b/Af6jlv9h/Ect/8P6j1r+h/MftfwP7z9q+R/Bf9TyP6L/qOV/JP9Ry//I/qOW/1H8Ry3/o/qPWv5H8x+1/I/uP2r5H8N/1PI/pv+o5X8s/1HL/9j+o5b/cfxHLf/j+o9a/sfzH7X8j+8/avmfwH/U8j+h/6jlfyL/Ucv/xP6jlv9J/Ect/5P6j1r+J/MftfxP7j9q+Z/Cf9TyP6X/qOV/Kv9Ry//U/qOW/2n8Ry3/0/qPWv6n8x+1/E/vP2r5n8F/1PI/o/+o5X8m/1HL/8z+o5b/WfxHLf+z+o9a/mfzH7X8z+4/avmfw3/U8j+n/6jlfy7/Ucv/3P6jlv95/Ect//P6j1r+5/MftfzP7z9q+V/Af9Tyv6D/qOV/If9Ry//C/qOW/0X8Ry3/i/qPWv4X8x+1/C/uP2r5X8J/1PK/pP+o5X8p/1HL/9L+o5b/ZfxHLf/L+o9a/pfzH7X8L+8/avlfwX/U8r+i/6jlfyX/Ucv/yv6jlv9V/Ect/6v6j1r+V/Mftfyv7j9q+V/Df9Tyv6b/qOV/Lf9Ry//a/qOW/3X8Ry3/6/qPWv7X8x+1/K/vP2r538B/1PK/of+o5X8j/1HL/8b+o5b/TfxHLf+b+o9a/jfzH7X8b+4/avnfwn/U8r+l/6jlfyv/Ucv/1v6jlv9t/Ect/9v6j1r+t/Mftfxv7z9q+d/Bf9Tyv6P/qOV/J/9Ry//O/qOW/138Ry3/u/qPWv538x+1/O/uP2r5H+g/avkf5D9q+R/sP/rT/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Af7dhtbZ1n4cfzuto6xP/9kxAWXockmFwqJMNs9ZLwgbDK21UE3nscAR7d2Y6PdZtdhV8A9vJhECA+STLJEibJlKGEmNBIDwQoiGnRREw0+AKIQReNECLolLtac9rS0x67xXPW6FuXzedFz7vvsd29r8t19LzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjv1dC48Mj4mmGnxg89+ODhlr7XOUdX3nzgtz0XDryWP142wiXHDT3o7e3tnfPc7B3lw1OKoij9bDvLx5Mqx6Xr76z/Qmf/UVjQ89KS41N+3njkwJrTH6nrPnp/bd/Z2uKmdRtaWz42rijCxbVFZ+mgrqYowuLa4r7SQX3pYElt8UjpYHbfwanFt0sH56/d3NpcOrE0+nsG/ysaGncW44cVWwz702Bo/zvrv3XnwOsolxy42oSi3P8VXd9/q+KzASfof+D6YWFl/1X/BoETqq7/FxYMvI5yyX+5/09+atUrI3124v4Hrh8+rn9IZ4Tn/2GNVj73Vzz/zxjhkoP7q2q6jpf6v/S2Z2eWT034d57/371+uLiy/3HDnv9Lz/GLBp7/TymKcMkYvx3wntLQuOvIaPf/0fufML1iUzO0/zPaN+8v9f/4ku89UT5VW2X/i0a5/49bWvFrBarT0Pjl3or7fxX9Fx8Z4ZKD/b/9xK8fLvX/2O8fOHPIZ9X0f0ll/7M62rbM2rq967wNbU3rW9a3bKqbPX/OvPq6eRfMndX3SND/dYzfFXhvGNv9v5hcsakpipbB/TXdB54u9T/3wQfnlE9NqrL/xaPe/2e4/8OIPjSumDix6Gzq6Giv6/86cFjf/7X/h43QfxV//z/rnPIPqy2/1hTFtMH9XWfevaLU/zuHnt1dPjWxyv6XjNr/gsGfF4gwxvt/c8VmWP8HD73U9/y/7N6DZ5RPVfv3/6Wj9v+q+z+MRUNjxf/w8x9W6n9XcVlkp6HBf/+DdHL0/9g7N/TErcMn9A/p5Oj/d587em7cOizTP6STo/8JGx94Pm4dLtU/pJOj/+VT56+IW4fL9A/p5Oh/7avn/jluHRr1D+nk6P+cL+3ujFuH5fqHdHL0/1D7nG1x67BC/5BOjv5/etpDr8Wtw+X6h3Ry9H/s2D03xq3DFfqHdHL0373n7B/ErcOV+od0cvR/+bqFIW4drtI/pJOj/+nT/vh43DpcrX9IJ0f/8/7099Pi1uEa/UM6Ofq/4/Mr9sWtw7X6h3Ry9D/++ldejFuHlfqHdHL0v/TsbQvj1uE6/UM6Ofpv/klzb9w6rNI/pJOj/1lf/9GGuHW4Xv+QTo7+Dy9/dE/cOtygf0gnR/976oopcetwo/4hnRz9f+27px+KW4dP6h/SydH/b556cn7cOqzWP6STo//nPnD7N+LW4Sb9Qzo5+r93zYtnxa1Dk/4hnRz9P7z3+S/GrcMa/UM6Ofp/4422/4tbh7X6h3Ry9D950qmvx61Ds/4hnRz9L7z1K+1x69Cif0gnR/9tu7t/GLcO6/QP6eTo/8PHp62KW4f1+od0cvS/cu7e98etw836h3Ry9P++ZRfuiluHDfqHdHL0f1HPRy+KW4eN+od0cvTf8cxnvxq3DrfoH9LJ0f/ema8tjluHVv1DOjn6f3n10h/HrUOb/iGdHP2/9eh1m+LWYZP+IZ0c/T/5s7ePxa3DZv1DOjn6//8LFv01bh226B/SydH/4iVvro1bh0/pH9LJ0f/G7n+8HLcO7fqHdHL0P/Pw1cvi1mGr/iGdHP1/57y6/XHr0KF/SCdH/3deua8+bh226R/SydH//oN33R23DrfqH9LJ0f+bv5gxPW4dPq1/SCdH//dPOXRt3Dp06h/SydH/LzfVPhO3Dtv1D+nk6P9v+6buiFuHLv1DOjn6f/r1nj/ErcNt+od0cvS/esKvJsatw+36h3Ry9D+1a8t9cetwh/4hnRz9z7+n6fy4dfiM/iGdHP1v/csL34xbhx36h3S2bu+6pam1taXdG2+88Wbwzcn+kwlI7d3oT/avBAAAAAAAAAAAAAAAOJEc/5zoZP8eAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf7IDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgWAAAAABDmbx1E7wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwEAAP//EojiuQ==") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.134001341s ago: executing program 2 (id=3346): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000580)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000600)=0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000006780)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x30, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.851576226s ago: executing program 3 (id=3347): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000500)=0x5, 0x4) sendmsg$802154_raw(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)='q\x00\x00', 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x80) recvmmsg(r0, &(0x7f0000004e40)=[{{0x0, 0x0, 0x0}, 0xfffffff9}], 0x1, 0x23, 0x0) 1.849935382s ago: executing program 5 (id=3348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) 1.827029858s ago: executing program 2 (id=3349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x9, 0x6, 0x3, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x6, 0x2, 0x9, 0x0, r0, 0x100}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000680)=r0}, 0x20) 1.610510733s ago: executing program 3 (id=3350): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 1.601181036s ago: executing program 2 (id=3351): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2a0471a, &(0x7f0000000080)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000100)="$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") sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0xa) ioctl$FITRIM(r0, 0x40e8662e, &(0x7f00000005c0)={0xc3e1, 0xd000003, 0x7}) 1.294796902s ago: executing program 2 (id=3352): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000280), &(0x7f00000002c0)=0x40) 1.294565121s ago: executing program 3 (id=3353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x0, 0x0, 0x10000}}]}}}]}, 0x60}}, 0x0) 1.062857547s ago: executing program 1 (id=3356): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x22000042, 0x1, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10, 0x0}, 0x0) 854.475488ms ago: executing program 5 (id=3357): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, &(0x7f0000000080)=""/91, 0x5b) 811.572664ms ago: executing program 3 (id=3358): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x2, 0x7fffffff}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r0, 0x0, 0x0) 766.803393ms ago: executing program 1 (id=3359): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") r0 = syz_create_resource$binfmt(&(0x7f00000004c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) fchmodat(0xffffffffffffff9c, &(0x7f0000003000)='./file0\x00', 0x17f) 580.884888ms ago: executing program 5 (id=3360): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='1', 0x1) 580.667801ms ago: executing program 3 (id=3361): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macvtap0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x7fff], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 580.549516ms ago: executing program 4 (id=3362): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 302.531601ms ago: executing program 1 (id=3363): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @local}, {0x306}, 0x8, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 232.655905ms ago: executing program 3 (id=3364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 98.851376ms ago: executing program 2 (id=3365): r0 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000000440)="$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") mknodat$loop(r0, 0x0, 0x1, 0x1) r1 = open(&(0x7f0000025700)='./file1\x00', 0x4827e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) 12.322494ms ago: executing program 5 (id=3366): syz_open_procfs(0x0, &(0x7f00000002c0)='oom_adj\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 0s ago: executing program 1 (id=3367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0xb}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) kernel console output (not intermixed with test programs): ce loop1): remove_tree: Can't read quota data block 1 [ 488.755600][ T7608] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:23: Failed to release dquot type 0 [ 488.755624][ T7608] loop1: lost filesystem error report for type 5 error -117 [ 488.785019][T14200] fido_id[14200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 488.819648][T14206] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 488.819664][T14206] loop1: lost filesystem error report for type 5 error -117 [ 488.854868][T14206] EXT4-fs (loop1): 1 orphan inode deleted [ 488.856169][T14206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.944323][ T5636] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 489.031668][T14206] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz.1.2937: Invalid inode table block 18446744069414584321 in block_group 0 [ 489.054524][T14206] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 489.124830][T14166] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 489.227437][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.254530][ T5639] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 18446744069414584321 in block_group 0 [ 489.254555][ T5639] loop1: lost filesystem error report for type 5 error -117 [ 489.336163][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.353772][ T7608] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 489.353792][ T7608] Quota error (device loop4): write_blk: dquota write failed [ 489.353801][ T7608] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 489.353811][ T7608] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 489.353822][ T7608] Quota error (device loop4): write_blk: dquota write failed [ 489.353830][ T7608] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 489.353896][ T7608] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 489.353907][ T7608] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 489.463663][T14166] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 489.463683][T14166] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 489.579975][T14166] syz.2.2928: attempt to access beyond end of device [ 489.579975][T14166] loop2: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 489.736925][T14213] loop5: detected capacity change from 0 to 4096 [ 489.764751][T14213] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 489.801418][ T5644] syz-executor: attempt to access beyond end of device [ 489.801418][ T5644] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 489.904374][T14213] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 489.914205][ T5644] CPU: 0 UID: 0 PID: 5644 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 489.914228][ T5644] Tainted: [L]=SOFTLOCKUP [ 489.914233][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 489.914241][ T5644] Call Trace: [ 489.914246][ T5644] [ 489.914253][ T5644] dump_stack_lvl+0xe8/0x150 [ 489.914278][ T5644] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 489.914302][ T5644] f2fs_write_end_bio+0xf7d/0x1310 [ 489.914329][ T5644] __submit_merged_bio+0x258/0x6a0 [ 489.914342][ T5644] ? rcu_is_watching+0x16/0xb0 [ 489.914364][ T5644] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 489.914385][ T5644] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 489.914419][ T5644] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 489.914448][ T5644] ? __lock_acquire+0x747/0x2de0 [ 489.914477][ T5644] ? __lock_acquire+0x747/0x2de0 [ 489.914494][ T5644] ? __lock_acquire+0x747/0x2de0 [ 489.914508][ T5644] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 489.914551][ T5644] ? __lock_acquire+0x747/0x2de0 [ 489.914579][ T5644] ? rcu_is_watching+0x16/0xb0 [ 489.914595][ T5644] ? __kasan_check_byte+0x12/0x40 [ 489.914627][ T5644] ? rcu_is_watching+0x16/0xb0 [ 489.914645][ T5644] ? lock_release+0x4b/0x3c0 [ 489.914659][ T5644] ? lock_release+0x4b/0x3c0 [ 489.914677][ T5644] ? is_bpf_text_address+0x292/0x2b0 [ 489.914690][ T5644] ? is_bpf_text_address+0x26/0x2b0 [ 489.914704][ T5644] ? kernel_text_address+0xa5/0xe0 [ 489.914721][ T5644] ? __kernel_text_address+0xd/0x30 [ 489.914735][ T5644] ? unwind_get_return_address+0x4d/0x90 [ 489.914751][ T5644] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 489.914767][ T5644] ? arch_stack_walk+0xfb/0x150 [ 489.914790][ T5644] ? stack_trace_save+0xa9/0x100 [ 489.914805][ T5644] ? __pfx_stack_trace_save+0x10/0x10 [ 489.914823][ T5644] ? check_path+0x21/0x40 [ 489.914843][ T5644] ? add_lock_to_list+0xc7/0x100 [ 489.914861][ T5644] ? lockdep_unlock+0x5c/0xd0 [ 489.914873][ T5644] ? __lock_acquire+0x1511/0x2de0 [ 489.914905][ T5644] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 489.914921][ T5644] do_writepages+0x338/0x560 [ 489.914942][ T5644] ? do_raw_spin_unlock+0xf5/0x200 [ 489.914958][ T5644] filemap_fdatawrite+0x1e9/0x2f0 [ 489.914975][ T5644] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 489.915018][ T5644] ? do_raw_spin_unlock+0xf5/0x200 [ 489.915034][ T5644] f2fs_sync_dirty_inodes+0x471/0x970 [ 489.915059][ T5644] f2fs_write_checkpoint+0x867/0x24d0 [ 489.915099][ T5644] kill_f2fs_super+0x2df/0x700 [ 489.915117][ T5644] ? rcu_do_enqueue+0x616/0x870 [ 489.915132][ T5644] ? lockdep_hardirqs_on+0x7b/0x110 [ 489.915147][ T5644] ? __pfx_kill_f2fs_super+0x10/0x10 [ 489.915173][ T5644] ? __pfx_call_rcu+0x10/0x10 [ 489.915188][ T5644] ? shrinker_free+0x2a7/0x3b0 [ 489.915203][ T5644] deactivate_locked_super+0xbe/0x110 [ 489.915222][ T5644] cleanup_mnt+0x204/0x2a0 [ 489.915247][ T5644] task_work_run+0x1d9/0x260 [ 489.915265][ T5644] ? __pfx_task_work_run+0x10/0x10 [ 489.915286][ T5644] exit_to_user_mode_loop+0x204/0x770 [ 489.915302][ T5644] ? rcu_is_watching+0x16/0xb0 [ 489.915322][ T5644] do_syscall_64+0x32c/0x530 [ 489.915335][ T5644] ? trace_irq_disable+0x3b/0x140 [ 489.915351][ T5644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.915363][ T5644] ? clear_bhb_loop+0x70/0xc0 [ 489.915378][ T5644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.915390][ T5644] RIP: 0033:0x00007f059cda0d57 [ 489.915404][ T5644] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 489.915415][ T5644] RSP: 002b:00007ffd25273ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 489.915430][ T5644] RAX: 0000000000000000 RBX: 00007f059ce36fb3 RCX: 00007f059cda0d57 [ 489.915439][ T5644] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd25273b80 [ 489.915447][ T5644] RBP: 00007ffd25273b80 R08: 00007ffd25274b80 R09: 00000000ffffffff [ 489.915455][ T5644] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd25274c10 [ 489.915463][ T5644] R13: 00007f059ce36fb3 R14: 00000000000778bb R15: 00007ffd25274c50 [ 489.915483][ T5644] [ 489.915502][ T5644] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 490.899011][T14228] rnbd_client L610: Mapping device / on session s+, (access_mode: rw, nr_poll_queues: 0) [ 490.899059][T14228] rnbd_client L1256: Session s+ not found, and path parameter not given [ 491.635772][T14219] loop3: detected capacity change from 0 to 40427 [ 491.678812][T14219] F2FS-fs (loop3): invalid crc value [ 491.840387][T14245] loop4: detected capacity change from 0 to 16 [ 491.840923][T14245] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 491.946418][ T5660] udevd[5660]: incorrect cramfs checksum on /dev/loop4 [ 492.025217][T14219] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 492.043449][ T5660] udevd[5660]: incorrect cramfs checksum on /dev/loop4 [ 492.138444][T14233] loop5: detected capacity change from 0 to 32768 [ 492.159053][T14233] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2949 (14233) [ 492.195627][T14233] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 492.195653][T14233] BTRFS info (device loop5): using blake2b checksum algorithm [ 492.291961][T14219] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 492.291983][T14219] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 492.291999][T14219] F2FS-fs (loop3): Start checkpoint disabled! [ 492.371661][T14233] BTRFS info (device loop5): enabling ssd optimizations [ 492.371682][T14233] BTRFS info (device loop5): turning on async discard [ 492.371692][T14233] BTRFS info (device loop5): enabling free space tree [ 492.546813][T10564] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 492.615808][ T5764] kernel write not supported for file /input/mice (pid: 5764 comm: kworker/0:5) [ 492.654747][T14219] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 492.672212][T14219] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 494.123072][T14281] loop4: detected capacity change from 0 to 32768 [ 494.139797][T14281] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2965 (14281) [ 494.166055][T14281] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 494.166079][T14281] BTRFS info (device loop4): using sha256 checksum algorithm [ 494.313255][T14294] loop3: detected capacity change from 0 to 4096 [ 494.327065][T14281] BTRFS info (device loop4): enabling ssd optimizations [ 494.327084][T14281] BTRFS info (device loop4): turning on async discard [ 494.327095][T14281] BTRFS info (device loop4): enabling free space tree [ 494.405342][T14280] loop5: detected capacity change from 0 to 32768 [ 494.451687][T14280] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 494.456004][T14281] jffs2: notice: (14281) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 494.485151][T14317] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 494.587245][T14280] XFS (loop5): Ending clean mount [ 494.895678][T10564] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 494.927246][ T5638] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 495.607375][T14347] loop1: detected capacity change from 0 to 256 [ 495.607981][T14347] exfat: Deprecated parameter 'namecase' [ 495.795127][T14347] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 495.884551][ T33] audit: type=1800 audit(1793829360.571:108): pid=14347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2982" name="file1" dev="loop1" ino=164 res=0 errno=-22 [ 496.625139][T14375] loop3: detected capacity change from 0 to 1024 [ 496.699893][T14375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 496.699973][T14375] ext4 filesystem being mounted at /600/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.775111][ T33] audit: type=1800 audit(1793829361.461:109): pid=14375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2995" name="bus" dev="loop3" ino=18 res=0 errno=-22 [ 496.812082][ T33] audit: type=1800 audit(1793829361.501:110): pid=14375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2995" name="bus" dev="loop3" ino=18 res=0 errno=-22 [ 497.031882][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 497.070681][T14357] loop5: detected capacity change from 0 to 32768 [ 497.093951][T14357] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2985 (14357) [ 497.114281][T14357] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 497.114304][T14357] BTRFS info (device loop5): using sha256 checksum algorithm [ 497.258734][T14357] BTRFS info (device loop5): enabling ssd optimizations [ 497.258755][T14357] BTRFS info (device loop5): turning on async discard [ 497.258765][T14357] BTRFS info (device loop5): enabling free space tree [ 497.452395][T14357] jffs2: notice: (14357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 497.568965][ T5764] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 497.716363][T10564] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 497.728905][ T5764] usb 3-1: Using ep0 maxpacket: 32 [ 497.733782][ T5764] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 497.736213][ T5764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.777499][ T5764] usb 3-1: config 0 descriptor?? [ 498.037772][ T5764] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 498.046057][ T5764] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 498.071679][ T5764] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 498.071717][ T5764] usb 3-1: media controller created [ 498.143639][ T5764] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.293026][ T5764] az6027: usb out operation failed. (-71) [ 498.302063][ T5764] az6027: usb out operation failed. (-71) [ 498.302076][ T5764] stb0899_attach: Driver disabled by Kconfig [ 498.302083][ T5764] az6027: no front-end attached [ 498.302083][ T5764] [ 498.302689][ T5764] az6027: usb out operation failed. (-71) [ 498.302701][ T5764] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 498.304079][ T5764] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input46 [ 498.370386][ T5764] dvb-usb: schedule remote query interval to 400 msecs. [ 498.370402][ T5764] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 498.431967][ T5764] usb 3-1: USB disconnect, device number 31 [ 498.594538][ T5764] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 498.969157][ T1234] asus 0005:0B05:8502.0024: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 499.248015][T14435] fido_id[14435]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 499.649840][T14427] loop1: detected capacity change from 0 to 32768 [ 499.730653][T14427] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 499.834186][T14429] loop5: detected capacity change from 0 to 40427 [ 499.874735][T14429] F2FS-fs (loop5): invalid crc value [ 499.885705][T14427] XFS (loop1): Ending clean mount [ 499.905414][T14427] XFS (loop1): Quotacheck needed: Please wait. [ 500.080913][T14466] netlink: 'syz.2.3021': attribute type 9 has an invalid length. [ 500.179186][T14429] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 500.261426][T14427] XFS (loop1): Quotacheck: Done. [ 500.265866][T14429] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 500.503369][ T33] audit: type=1326 audit(1793829365.191:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.3023" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059cd9fb19 code=0x7ffc0000 [ 500.550324][ T33] audit: type=1326 audit(1793829365.241:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.3023" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059cd9fb19 code=0x7ffc0000 [ 500.554197][ T5639] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 500.555312][ T33] audit: type=1326 audit(1793829365.241:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.3023" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059cd9fb19 code=0x7ffc0000 [ 500.555345][ T33] audit: type=1326 audit(1793829365.241:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.3023" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059cd9fb19 code=0x7ffc0000 [ 500.556302][ T33] audit: type=1326 audit(1793829365.241:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.3023" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f059cd9fb19 code=0x7ffc0000 [ 500.556332][ T33] audit: type=1326 audit(1793829365.241:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.3023" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059cd9fb19 code=0x7ffc0000 [ 500.556357][ T33] audit: type=1326 audit(1793829365.241:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.3023" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059cd9fb19 code=0x7ffc0000 [ 500.854985][T10564] syz-executor: attempt to access beyond end of device [ 500.854985][T10564] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 500.939165][T10564] CPU: 0 UID: 0 PID: 10564 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 500.939194][T10564] Tainted: [L]=SOFTLOCKUP [ 500.939201][T10564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 500.939209][T10564] Call Trace: [ 500.939215][T10564] [ 500.939222][T10564] dump_stack_lvl+0xe8/0x150 [ 500.939248][T10564] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 500.939272][T10564] f2fs_write_end_bio+0xf7d/0x1310 [ 500.939299][T10564] __submit_merged_bio+0x258/0x6a0 [ 500.939312][T10564] ? rcu_is_watching+0x16/0xb0 [ 500.939334][T10564] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 500.939355][T10564] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 500.939390][T10564] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 500.939419][T10564] ? __lock_acquire+0x747/0x2de0 [ 500.939447][T10564] ? __lock_acquire+0x747/0x2de0 [ 500.939466][T10564] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 500.939482][T10564] ? __lock_acquire+0x747/0x2de0 [ 500.939531][T10564] ? rcu_is_watching+0x16/0xb0 [ 500.939550][T10564] ? rcu_is_watching+0x16/0xb0 [ 500.939566][T10564] ? __kasan_check_byte+0x12/0x40 [ 500.939595][T10564] ? is_bpf_text_address+0x292/0x2b0 [ 500.939608][T10564] ? is_bpf_text_address+0x26/0x2b0 [ 500.939623][T10564] ? kernel_text_address+0xa5/0xe0 [ 500.939638][T10564] ? __kernel_text_address+0xd/0x30 [ 500.939653][T10564] ? unwind_get_return_address+0x4d/0x90 [ 500.939669][T10564] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 500.939684][T10564] ? arch_stack_walk+0xfb/0x150 [ 500.939708][T10564] ? stack_trace_save+0xa9/0x100 [ 500.939722][T10564] ? __pfx_stack_trace_save+0x10/0x10 [ 500.939739][T10564] ? check_path+0x21/0x40 [ 500.939759][T10564] ? add_lock_to_list+0xc7/0x100 [ 500.939778][T10564] ? lockdep_unlock+0x5c/0xd0 [ 500.939790][T10564] ? __lock_acquire+0x1511/0x2de0 [ 500.939823][T10564] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.939843][T10564] ? do_raw_spin_unlock+0xf5/0x200 [ 500.939856][T10564] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 500.939872][T10564] do_writepages+0x338/0x560 [ 500.939893][T10564] ? do_raw_spin_unlock+0xf5/0x200 [ 500.939909][T10564] filemap_fdatawrite+0x1e9/0x2f0 [ 500.939925][T10564] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 500.939969][T10564] ? do_raw_spin_unlock+0xf5/0x200 [ 500.939984][T10564] f2fs_sync_dirty_inodes+0x471/0x970 [ 500.940010][T10564] f2fs_write_checkpoint+0x867/0x24d0 [ 500.940050][T10564] kill_f2fs_super+0x2df/0x700 [ 500.940069][T10564] ? rcu_do_enqueue+0x616/0x870 [ 500.940084][T10564] ? lockdep_hardirqs_on+0x7b/0x110 [ 500.940098][T10564] ? __pfx_kill_f2fs_super+0x10/0x10 [ 500.940124][T10564] ? __pfx_call_rcu+0x10/0x10 [ 500.940139][T10564] ? shrinker_free+0x2a7/0x3b0 [ 500.940155][T10564] deactivate_locked_super+0xbe/0x110 [ 500.940173][T10564] cleanup_mnt+0x204/0x2a0 [ 500.940194][T10564] task_work_run+0x1d9/0x260 [ 500.940211][T10564] ? __pfx_task_work_run+0x10/0x10 [ 500.940232][T10564] exit_to_user_mode_loop+0x204/0x770 [ 500.940248][T10564] ? rcu_is_watching+0x16/0xb0 [ 500.940268][T10564] do_syscall_64+0x32c/0x530 [ 500.940282][T10564] ? trace_irq_disable+0x3b/0x140 [ 500.940298][T10564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.940310][T10564] ? clear_bhb_loop+0x70/0xc0 [ 500.940326][T10564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.940338][T10564] RIP: 0033:0x00007f2e311a0d57 [ 500.940352][T10564] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 500.940363][T10564] RSP: 002b:00007ffe0f1ffdc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 500.940378][T10564] RAX: 0000000000000000 RBX: 00007f2e31236fb3 RCX: 00007f2e311a0d57 [ 500.940387][T10564] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0f1ffe80 [ 500.940395][T10564] RBP: 00007ffe0f1ffe80 R08: 00007ffe0f200e80 R09: 00000000ffffffff [ 500.940403][T10564] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0f200f10 [ 500.940411][T10564] R13: 00007f2e31236fb3 R14: 000000000007a38c R15: 00007ffe0f200f50 [ 500.940432][T10564] [ 501.157396][T10564] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 501.468614][T14478] loop9: detected capacity change from 0 to 7 [ 501.484127][T14478] Dev loop9: unable to read RDB block 7 [ 501.484155][T14478] loop9: unable to read partition table [ 501.484291][T14478] loop9: partition table beyond EOD, truncated [ 501.484313][T14478] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 501.599014][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.599054][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.037405][ T1234] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 502.188143][ T1234] usb 5-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 502.189105][ T1234] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 502.189120][ T1234] usb 5-1: config 0 has no interface number 0 [ 502.189155][ T1234] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 502.189170][ T1234] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 502.189185][ T1234] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 502.190624][ T1234] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 502.190639][ T1234] usb 5-1: Product: syz [ 502.190647][ T1234] usb 5-1: SerialNumber: syz [ 502.193909][ T1234] usb 5-1: config 0 descriptor?? [ 502.288989][ T1234] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 502.315126][ T1234] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input48 [ 502.366276][T14496] device-mapper: table: 248:4: crypt: Error decoding and setting key (-EINVAL) [ 502.366294][T14496] device-mapper: ioctl: error adding target to table [ 502.544382][T14501] loop5: detected capacity change from 0 to 16 [ 502.554996][T14501] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 502.613504][ T5660] udevd[5660]: incorrect cramfs checksum on /dev/loop5 [ 502.642192][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 502.642421][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 502.642604][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 502.642667][ T5764] usb 5-1: USB disconnect, device number 35 [ 502.642782][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 502.642793][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 502.715897][ T5764] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 502.764424][ T5660] udevd[5660]: incorrect cramfs checksum on /dev/loop5 [ 503.446851][T14503] loop3: detected capacity change from 0 to 40427 [ 503.467802][T14503] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 503.467822][T14503] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 503.486778][T14503] F2FS-fs (loop3): invalid crc value [ 503.549773][T14523] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3044'. [ 503.749996][T14503] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 503.792715][T14503] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 503.792736][T14503] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 503.959414][T14503] syz.3.3036: attempt to access beyond end of device [ 503.959414][T14503] loop3: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 504.089981][ T5636] syz-executor: attempt to access beyond end of device [ 504.089981][ T5636] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 504.146808][ T5636] CPU: 0 UID: 0 PID: 5636 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 504.146834][ T5636] Tainted: [L]=SOFTLOCKUP [ 504.146839][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 504.146846][ T5636] Call Trace: [ 504.146852][ T5636] [ 504.146858][ T5636] dump_stack_lvl+0xe8/0x150 [ 504.146883][ T5636] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 504.146907][ T5636] f2fs_write_end_bio+0xf7d/0x1310 [ 504.146935][ T5636] __submit_merged_bio+0x258/0x6a0 [ 504.146948][ T5636] ? rcu_is_watching+0x16/0xb0 [ 504.146970][ T5636] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 504.146991][ T5636] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 504.147025][ T5636] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 504.147054][ T5636] ? __lock_acquire+0x747/0x2de0 [ 504.147086][ T5636] ? __lock_acquire+0x747/0x2de0 [ 504.147103][ T5636] ? __lock_acquire+0x747/0x2de0 [ 504.147118][ T5636] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 504.147162][ T5636] ? __lock_acquire+0x747/0x2de0 [ 504.147190][ T5636] ? rcu_is_watching+0x16/0xb0 [ 504.147206][ T5636] ? __kasan_check_byte+0x12/0x40 [ 504.147226][ T5636] ? rcu_is_watching+0x16/0xb0 [ 504.147243][ T5636] ? lock_release+0x4b/0x3c0 [ 504.147257][ T5636] ? lock_release+0x4b/0x3c0 [ 504.147275][ T5636] ? is_bpf_text_address+0x292/0x2b0 [ 504.147289][ T5636] ? is_bpf_text_address+0x26/0x2b0 [ 504.147303][ T5636] ? kernel_text_address+0xa5/0xe0 [ 504.147319][ T5636] ? __kernel_text_address+0xd/0x30 [ 504.147334][ T5636] ? unwind_get_return_address+0x4d/0x90 [ 504.147350][ T5636] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 504.147365][ T5636] ? arch_stack_walk+0xfb/0x150 [ 504.147389][ T5636] ? stack_trace_save+0xa9/0x100 [ 504.147404][ T5636] ? __pfx_stack_trace_save+0x10/0x10 [ 504.147422][ T5636] ? check_path+0x21/0x40 [ 504.147441][ T5636] ? add_lock_to_list+0xc7/0x100 [ 504.147460][ T5636] ? lockdep_unlock+0x5c/0xd0 [ 504.147472][ T5636] ? __lock_acquire+0x1511/0x2de0 [ 504.147504][ T5636] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 504.147520][ T5636] do_writepages+0x338/0x560 [ 504.147541][ T5636] ? do_raw_spin_unlock+0xf5/0x200 [ 504.147557][ T5636] filemap_fdatawrite+0x1e9/0x2f0 [ 504.147574][ T5636] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 504.147623][ T5636] ? do_raw_spin_unlock+0xf5/0x200 [ 504.147639][ T5636] f2fs_sync_dirty_inodes+0x471/0x970 [ 504.147665][ T5636] f2fs_write_checkpoint+0x867/0x24d0 [ 504.147704][ T5636] kill_f2fs_super+0x2df/0x700 [ 504.147723][ T5636] ? rcu_do_enqueue+0x616/0x870 [ 504.147737][ T5636] ? lockdep_hardirqs_on+0x7b/0x110 [ 504.147752][ T5636] ? __pfx_kill_f2fs_super+0x10/0x10 [ 504.147777][ T5636] ? __pfx_call_rcu+0x10/0x10 [ 504.147793][ T5636] ? shrinker_free+0x2a7/0x3b0 [ 504.147809][ T5636] deactivate_locked_super+0xbe/0x110 [ 504.147827][ T5636] cleanup_mnt+0x204/0x2a0 [ 504.147848][ T5636] task_work_run+0x1d9/0x260 [ 504.147866][ T5636] ? __pfx_task_work_run+0x10/0x10 [ 504.147887][ T5636] exit_to_user_mode_loop+0x204/0x770 [ 504.147903][ T5636] ? rcu_is_watching+0x16/0xb0 [ 504.147923][ T5636] do_syscall_64+0x32c/0x530 [ 504.147937][ T5636] ? trace_irq_disable+0x3b/0x140 [ 504.147953][ T5636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.147965][ T5636] ? clear_bhb_loop+0x70/0xc0 [ 504.147980][ T5636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.147992][ T5636] RIP: 0033:0x00007f73ec5a0d57 [ 504.148006][ T5636] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 504.148017][ T5636] RSP: 002b:00007ffd7cf6e478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 504.148031][ T5636] RAX: 0000000000000000 RBX: 00007f73ec636fb3 RCX: 00007f73ec5a0d57 [ 504.148040][ T5636] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7cf6e530 [ 504.148048][ T5636] RBP: 00007ffd7cf6e530 R08: 00007ffd7cf6f530 R09: 00000000ffffffff [ 504.148057][ T5636] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd7cf6f5c0 [ 504.148064][ T5636] R13: 00007f73ec636fb3 R14: 000000000007b0b1 R15: 00007ffd7cf6f600 [ 504.148085][ T5636] [ 504.297484][ T5636] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 504.683348][T14518] loop4: detected capacity change from 0 to 32768 [ 504.709484][T14518] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3043 (14518) [ 504.744919][T14518] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 504.744944][T14518] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 504.856251][T14518] BTRFS info (device loop4): enabling ssd optimizations [ 504.856272][T14518] BTRFS info (device loop4): turning on async discard [ 504.856282][T14518] BTRFS info (device loop4): enabling free space tree [ 505.069212][ T5638] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 506.054035][T14578] loop3: detected capacity change from 0 to 164 [ 506.097128][ T1234] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 506.114843][T14578] Unsupported NM flag settings (240) [ 506.115718][T14578] Unsupported NM flag settings (240) [ 506.247583][ T1234] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 506.248418][ T1234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.248448][ T1234] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 506.248463][ T1234] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 506.248475][ T1234] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 506.248488][ T1234] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 506.248513][ T1234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.255895][T14572] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 506.347840][ T1234] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 506.365021][ T1234] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 506.365083][ T1234] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 506.392257][ T1234] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 506.393334][ T1234] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 506.393386][ T1234] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 506.428736][ T1234] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 506.650060][T14587] loop3: detected capacity change from 0 to 8 [ 506.672420][T14587] SQUASHFS error: zlib decompression failed, data probably corrupt [ 506.672444][T14587] SQUASHFS error: Failed to read block 0x9b: -5 [ 506.672453][T14587] SQUASHFS error: Unable to read metadata cache entry [99] [ 506.674287][T14587] SQUASHFS error: Unable to read inode 0x127 [ 506.909742][T14592] bridge0: port 3(veth0_to_bridge) entered blocking state [ 506.909842][T14592] bridge0: port 3(veth0_to_bridge) entered disabled state [ 506.909948][T14592] veth0_to_bridge: entered allmulticast mode [ 506.910965][T14592] veth0_to_bridge: entered promiscuous mode [ 506.911054][T14592] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 506.959743][T14592] bridge0: port 3(veth0_to_bridge) entered blocking state [ 506.959808][T14592] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 507.044633][ T5763] usb 5-1: USB disconnect, device number 36 [ 507.065913][ T5763] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 507.085051][ T5763] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 507.085613][ T5763] keyspan 5-1:1.0: device disconnected [ 507.136871][ T1234] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 507.232654][T14599] loop3: detected capacity change from 0 to 1024 [ 507.260379][T14599] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 507.265352][T14599] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 507.266367][T14599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.301140][ T1234] usb 6-1: Using ep0 maxpacket: 32 [ 507.308151][ T1234] usb 6-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 507.311361][ T1234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.326313][ T1234] usb 6-1: config 0 descriptor?? [ 507.475854][T14599] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 507.545021][ T1234] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 507.561659][ T1234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 507.563300][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.563957][ T1234] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 507.563991][ T1234] usb 6-1: media controller created [ 507.625041][ T1234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 507.778982][ T1234] az6027: usb out operation failed. (-71) [ 507.779268][ T1234] az6027: usb out operation failed. (-71) [ 507.779277][ T1234] stb0899_attach: Driver disabled by Kconfig [ 507.779283][ T1234] az6027: no front-end attached [ 507.779283][ T1234] [ 507.781772][ T1234] az6027: usb out operation failed. (-71) [ 507.781784][ T1234] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 507.783100][ T1234] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input49 [ 507.885080][ T1234] dvb-usb: schedule remote query interval to 400 msecs. [ 507.885098][ T1234] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 507.912247][ T1234] usb 6-1: USB disconnect, device number 8 [ 508.034720][ T1234] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 508.292174][T14603] loop2: detected capacity change from 0 to 32768 [ 508.309797][T14614] 8021q: adding VLAN 0 to HW filter on device bond2 [ 508.319024][T14614] team0: Port device bond2 added [ 508.402476][T14603] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 508.497378][T14603] XFS (loop2): Ending clean mount [ 508.504025][T14603] XFS (loop2): Quotacheck needed: Please wait. [ 508.781117][T14603] XFS (loop2): Quotacheck: Done. [ 508.842298][ T33] kauditd_printk_skb: 12 callbacks suppressed [ 508.842313][ T33] audit: type=1800 audit(1793829373.531:130): pid=14603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3072" name="file1" dev="loop2" ino=6150 res=0 errno=-22 [ 509.151907][ T5644] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 509.199264][T14651] bond0: no command found in slaves file - use +ifname or -ifname [ 509.797338][T14665] loop3: detected capacity change from 0 to 64 [ 509.842242][T14665] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 509.894638][T14665] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 509.946122][T14665] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 510.280318][T14677] loop2: detected capacity change from 0 to 128 [ 510.325739][T14677] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 510.348671][T14677] ext4 filesystem being mounted at /649/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 510.482458][ T5644] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 510.688943][T14659] loop1: detected capacity change from 0 to 40427 [ 510.732925][T14659] F2FS-fs (loop1): invalid crc value [ 510.990347][T14659] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 511.066742][ T1234] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 511.092065][T14659] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 511.219266][ T1234] usb 4-1: New USB device found: idVendor=0b05, idProduct=1abe, bcdDevice=0.00 [ 511.220143][ T1234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.220162][ T1234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.220185][ T1234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.285457][ T5639] syz-executor: attempt to access beyond end of device [ 511.285457][ T5639] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 511.323706][ T1234] usb 4-1: config 0 descriptor?? [ 511.355949][ T5639] CPU: 0 UID: 0 PID: 5639 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 511.355974][ T5639] Tainted: [L]=SOFTLOCKUP [ 511.355979][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 511.355986][ T5639] Call Trace: [ 511.355992][ T5639] [ 511.355998][ T5639] dump_stack_lvl+0xe8/0x150 [ 511.356027][ T5639] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 511.356056][ T5639] f2fs_write_end_bio+0xf7d/0x1310 [ 511.356084][ T5639] __submit_merged_bio+0x258/0x6a0 [ 511.356097][ T5639] ? rcu_is_watching+0x16/0xb0 [ 511.356121][ T5639] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 511.356142][ T5639] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 511.356176][ T5639] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 511.356205][ T5639] ? __lock_acquire+0x747/0x2de0 [ 511.356234][ T5639] ? __lock_acquire+0x747/0x2de0 [ 511.356250][ T5639] ? __lock_acquire+0x747/0x2de0 [ 511.356265][ T5639] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 511.356310][ T5639] ? rcu_is_watching+0x16/0xb0 [ 511.356329][ T5639] ? rcu_is_watching+0x16/0xb0 [ 511.356345][ T5639] ? __kasan_check_byte+0x12/0x40 [ 511.356376][ T5639] ? is_bpf_text_address+0x292/0x2b0 [ 511.356391][ T5639] ? is_bpf_text_address+0x26/0x2b0 [ 511.356405][ T5639] ? kernel_text_address+0xa5/0xe0 [ 511.356428][ T5639] ? __kernel_text_address+0xd/0x30 [ 511.356443][ T5639] ? unwind_get_return_address+0x4d/0x90 [ 511.356460][ T5639] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 511.356475][ T5639] ? arch_stack_walk+0xfb/0x150 [ 511.356499][ T5639] ? stack_trace_save+0xa9/0x100 [ 511.356513][ T5639] ? __pfx_stack_trace_save+0x10/0x10 [ 511.356530][ T5639] ? check_path+0x21/0x40 [ 511.356550][ T5639] ? add_lock_to_list+0xc7/0x100 [ 511.356568][ T5639] ? lockdep_unlock+0x5c/0xd0 [ 511.356580][ T5639] ? __lock_acquire+0x1511/0x2de0 [ 511.356613][ T5639] ? do_raw_spin_lock+0x12b/0x2f0 [ 511.356633][ T5639] ? do_raw_spin_unlock+0xf5/0x200 [ 511.356646][ T5639] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 511.356662][ T5639] do_writepages+0x338/0x560 [ 511.356684][ T5639] ? do_raw_spin_unlock+0xf5/0x200 [ 511.356699][ T5639] filemap_fdatawrite+0x1e9/0x2f0 [ 511.356722][ T5639] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 511.356765][ T5639] ? do_raw_spin_unlock+0xf5/0x200 [ 511.356780][ T5639] f2fs_sync_dirty_inodes+0x471/0x970 [ 511.356806][ T5639] f2fs_write_checkpoint+0x867/0x24d0 [ 511.356845][ T5639] kill_f2fs_super+0x2df/0x700 [ 511.356863][ T5639] ? rcu_do_enqueue+0x616/0x870 [ 511.356878][ T5639] ? lockdep_hardirqs_on+0x7b/0x110 [ 511.356897][ T5639] ? __pfx_kill_f2fs_super+0x10/0x10 [ 511.356922][ T5639] ? __pfx_call_rcu+0x10/0x10 [ 511.356937][ T5639] ? shrinker_free+0x2a7/0x3b0 [ 511.356954][ T5639] deactivate_locked_super+0xbe/0x110 [ 511.356975][ T5639] cleanup_mnt+0x204/0x2a0 [ 511.356998][ T5639] task_work_run+0x1d9/0x260 [ 511.357017][ T5639] ? __pfx_task_work_run+0x10/0x10 [ 511.357041][ T5639] exit_to_user_mode_loop+0x204/0x770 [ 511.357057][ T5639] ? rcu_is_watching+0x16/0xb0 [ 511.357079][ T5639] do_syscall_64+0x32c/0x530 [ 511.357094][ T5639] ? trace_irq_disable+0x3b/0x140 [ 511.357111][ T5639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.357126][ T5639] ? clear_bhb_loop+0x70/0xc0 [ 511.357142][ T5639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.357155][ T5639] RIP: 0033:0x00007f80075a0d57 [ 511.357170][ T5639] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 511.357182][ T5639] RSP: 002b:00007ffc646eaa38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 511.357197][ T5639] RAX: 0000000000000000 RBX: 00007f8007636fb3 RCX: 00007f80075a0d57 [ 511.357207][ T5639] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc646eaaf0 [ 511.357215][ T5639] RBP: 00007ffc646eaaf0 R08: 00007ffc646ebaf0 R09: 00000000ffffffff [ 511.357224][ T5639] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc646ebb80 [ 511.357233][ T5639] R13: 00007f8007636fb3 R14: 000000000007ccd6 R15: 00007ffc646ebbc0 [ 511.357255][ T5639] [ 511.666324][ T5639] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 512.094722][ T1234] hid_parser_main: 774 callbacks suppressed [ 512.094742][ T1234] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 512.094761][ T1234] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 512.094776][ T1234] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 512.094791][ T1234] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 512.094805][ T1234] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 512.094820][ T1234] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 512.094834][ T1234] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 512.094848][ T1234] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 512.094863][ T1234] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 512.094877][ T1234] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 512.219211][ T1234] asus 0003:0B05:1ABE.0025: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.3-1/input0 [ 512.299937][T14686] loop4: detected capacity change from 0 to 32768 [ 512.363329][ T5763] usb 4-1: USB disconnect, device number 30 [ 512.386426][T14686] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 512.471730][T14686] XFS (loop4): Ending clean mount [ 512.484834][T14686] XFS (loop4): Quotacheck needed: Please wait. [ 512.603568][T14703] fido_id[14703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 512.706801][ T5771] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 512.738906][T14715] loop5: detected capacity change from 0 to 7 [ 512.818271][T14686] XFS (loop4): Quotacheck: Done. [ 512.864953][ T5771] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 512.879482][ T5771] usb 6-1: config index 0 descriptor too short (expected 796, got 28) [ 512.879502][ T5771] usb 6-1: config 1 has an invalid interface number: 3 but max is -1 [ 512.879514][ T5771] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 512.879526][ T5771] usb 6-1: config 1 has no interface number 0 [ 512.884255][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.884273][ T5771] usb 6-1: Product: syz [ 512.884282][ T5771] usb 6-1: Manufacturer: syz [ 512.884290][ T5771] usb 6-1: SerialNumber: syz [ 512.993448][ T33] audit: type=1800 audit(1793829377.681:131): pid=14686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3102" name="file1" dev="loop4" ino=6150 res=0 errno=-22 [ 513.032767][ T5771] usb 6-1: 3:0 : does not exist [ 513.032783][ T5771] usb 6-1: 3:0 : does not exist [ 513.320022][ T5771] usb 6-1: USB disconnect, device number 9 [ 513.466970][T14715] Dev loop5: unable to read RDB block 7 [ 513.466999][T14715] loop5: unable to read partition table [ 513.467128][T14715] loop5: partition table beyond EOD, truncated [ 513.467152][T14715] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 513.529585][ T5638] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 513.679371][ T5763] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 513.835886][ T5763] usb 4-1: New USB device found: idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 513.848452][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.871296][ T5763] usb 4-1: config 0 descriptor?? [ 513.879435][ T5763] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 514.105955][ T5763] gp8psk: usb in 128 operation failed. [ 514.243651][T14733] loop5: detected capacity change from 0 to 256 [ 514.269112][T14733] exfat: Deprecated parameter 'utf8' [ 514.269127][T14733] exfat: Deprecated parameter 'utf8' [ 514.269167][T14733] exfat: Deprecated parameter 'utf8' [ 514.334872][ T5763] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 514.363924][T14733] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 514.538258][ T5763] gp8psk: usb in 149 operation failed. [ 514.538274][ T5763] gp8psk: failed to get FPGA version [ 514.539070][ T5763] gp8psk: usb in 138 operation failed. [ 514.539080][ T5763] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 514.539105][ T5763] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 514.586834][ T5763] usb 4-1: USB disconnect, device number 31 [ 514.884524][T14734] loop2: detected capacity change from 0 to 32768 [ 515.219684][ T33] audit: type=1326 audit(1793829379.911:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14744 comm="syz.5.3135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3119fb19 code=0x7ffc0000 [ 515.221722][ T33] audit: type=1326 audit(1793829379.911:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14744 comm="syz.5.3135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3119fb19 code=0x7ffc0000 [ 515.224704][ T33] audit: type=1326 audit(1793829379.911:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14744 comm="syz.5.3135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3119fb19 code=0x7ffc0000 [ 515.226392][ T33] audit: type=1326 audit(1793829379.911:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14744 comm="syz.5.3135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3119fb19 code=0x7ffc0000 [ 515.339750][ T33] audit: type=1326 audit(1793829380.031:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14744 comm="syz.5.3135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f2e3119fb19 code=0x7ffc0000 [ 515.339785][ T33] audit: type=1326 audit(1793829380.031:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14744 comm="syz.5.3135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3119fb19 code=0x7ffc0000 [ 515.339809][ T33] audit: type=1326 audit(1793829380.031:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14744 comm="syz.5.3135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3119fb19 code=0x7ffc0000 [ 515.427276][ T33] audit: type=1326 audit(1793829380.121:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14744 comm="syz.5.3135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3119fb19 code=0x7ffc0000 [ 515.427310][ T33] audit: type=1326 audit(1793829380.121:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14744 comm="syz.5.3135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3119fb19 code=0x7ffc0000 [ 515.427463][ T33] audit: type=1326 audit(1793829380.121:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14744 comm="syz.5.3135" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f2e3119fb19 code=0x7ffc0000 [ 515.493314][T14751] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 515.760375][T14758] loop1: detected capacity change from 0 to 256 [ 515.872911][T14758] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fcb6, chksum : 0xd46cbfa8, utbl_chksum : 0xe619d30d) [ 515.873103][T14758] exFAT-fs (loop1): failed to load alloc-bitmap [ 515.873110][T14758] exFAT-fs (loop1): failed to recognize exfat type [ 515.966646][ T5763] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 516.127253][ T5763] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 516.128738][ T5763] usb 3-1: config index 0 descriptor too short (expected 796, got 28) [ 516.128756][ T5763] usb 3-1: config 1 has an invalid interface number: 3 but max is -1 [ 516.128767][ T5763] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 516.128780][ T5763] usb 3-1: config 1 has no interface number 0 [ 516.133323][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.133347][ T5763] usb 3-1: Product: syz [ 516.133355][ T5763] usb 3-1: Manufacturer: syz [ 516.133364][ T5763] usb 3-1: SerialNumber: syz [ 516.224732][ T5763] usb 3-1: 3:0 : does not exist [ 516.224749][ T5763] usb 3-1: 3:0 : does not exist [ 516.524985][ T5763] usb 3-1: USB disconnect, device number 32 [ 516.583145][ T5646] udevd[5646]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.619452][T14754] loop3: detected capacity change from 0 to 32768 [ 516.691615][T14754] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 516.764881][T14754] XFS (loop3): Ending clean mount [ 516.834480][T14754] XFS (loop3): Quotacheck needed: Please wait. [ 517.051734][T14754] XFS (loop3): Quotacheck: Done. [ 517.908290][ T5636] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 518.344530][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3150'. [ 518.710137][T14801] loop5: detected capacity change from 0 to 32768 [ 518.724462][T14801] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3148 (14801) [ 518.750724][T14801] BTRFS info (device loop5): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 518.750749][T14801] BTRFS info (device loop5): using xxhash64 checksum algorithm [ 518.903233][T14801] BTRFS info (device loop5): enabling ssd optimizations [ 518.903254][T14801] BTRFS info (device loop5): turning on async discard [ 518.903264][T14801] BTRFS info (device loop5): enabling free space tree [ 518.914921][ T5763] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 519.083457][T10564] BTRFS info (device loop5): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 519.101071][ T5763] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 519.104205][ T5763] usb 5-1: config index 0 descriptor too short (expected 796, got 28) [ 519.104224][ T5763] usb 5-1: config 1 has an invalid interface number: 3 but max is -1 [ 519.104235][ T5763] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 519.104247][ T5763] usb 5-1: config 1 has no interface number 0 [ 519.147208][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.147227][ T5763] usb 5-1: Product: syz [ 519.147236][ T5763] usb 5-1: Manufacturer: syz [ 519.147244][ T5763] usb 5-1: SerialNumber: syz [ 519.241337][ T5763] usb 5-1: 3:0 : does not exist [ 519.241356][ T5763] usb 5-1: 3:0 : does not exist [ 519.617112][ T5763] usb 5-1: USB disconnect, device number 37 [ 519.702453][ T5660] udevd[5660]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.067199][ T5763] asus 0005:0B05:8502.0026: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 520.244937][T14830] loop1: detected capacity change from 0 to 32768 [ 520.338803][T14830] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 520.401593][T14830] XFS (loop1): Ending clean mount [ 520.448724][T14830] XFS (loop1): Quotacheck needed: Please wait. [ 520.488969][T14850] fido_id[14850]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 520.695667][T14841] loop2: detected capacity change from 0 to 32768 [ 520.754411][T14830] XFS (loop1): Quotacheck: Done. [ 520.769757][T14841] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3158 (14841) [ 520.816347][T14841] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 520.816372][T14841] BTRFS info (device loop2): using crc32c checksum algorithm [ 520.879886][ T33] kauditd_printk_skb: 5 callbacks suppressed [ 520.879900][ T33] audit: type=1800 audit(1793829385.571:147): pid=14830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3155" name="file1" dev="loop1" ino=6150 res=0 errno=-22 [ 520.988292][T14841] BTRFS info (device loop2): enabling ssd optimizations [ 520.988311][T14841] BTRFS info (device loop2): turning on flush-on-commit [ 520.988323][T14841] BTRFS info (device loop2): enabling free space tree [ 520.988346][T14841] BTRFS info (device loop2): enabling auto defrag [ 520.988358][T14841] BTRFS info (device loop2): use lzo compression, level 1 [ 520.988371][T14841] BTRFS info (device loop2): max_inline set to 4096 [ 521.216769][ T5764] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 521.319191][ T5639] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 521.370282][ T5764] usb 4-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 521.373582][ T5764] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 521.373599][ T5764] usb 4-1: config 0 has no interface number 0 [ 521.373624][ T5764] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 521.373639][ T5764] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 521.373654][ T5764] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 521.376263][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 521.376279][ T5764] usb 4-1: Product: syz [ 521.376288][ T5764] usb 4-1: SerialNumber: syz [ 521.430139][ T5764] usb 4-1: config 0 descriptor?? [ 521.493447][ T5764] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 521.494736][ T5764] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input51 [ 521.933353][T14886] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 522.082096][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 522.082288][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 522.082474][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 522.082652][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 522.082830][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 522.083004][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 522.083170][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 522.083343][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 522.083518][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 522.083693][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 522.111450][ T5764] usb 4-1: USB disconnect, device number 32 [ 522.111566][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 522.242948][ T5764] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 522.431776][ T5644] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 522.490598][T14890] mtrr: base(0x2000) is not aligned on a size(0x0000) boundary [ 523.283516][T14899] loop1: detected capacity change from 0 to 131072 [ 523.317236][T14899] F2FS-fs (loop1): invalid crc value [ 523.376714][T14899] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 523.390706][T14899] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 523.919817][T14913] loop4: detected capacity change from 0 to 2048 [ 523.951528][T14913] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.520387][T14922] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3180'. [ 524.795330][T14929] loop1: detected capacity change from 0 to 512 [ 524.825029][T14929] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 524.825043][T14929] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 524.878169][T14929] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.3183: bad orphan inode 131083 [ 524.878193][T14929] loop1: lost filesystem error report for type 5 error -117 [ 524.888927][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 524.888942][ C0] EXT4-fs (loop1): initial error at time 1793829389: ext4_orphan_get:1430 [ 524.888957][ C0] EXT4-fs (loop1): last error at time 1793829389: ext4_orphan_get:1430 [ 524.930757][T14929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.101720][T14929] EXT4-fs error (device loop1): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.1.3183: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 525.332698][T14929] EXT4-fs error (device loop1) in ext4_delete_entry:2746: Corrupt filesystem [ 525.343066][T14929] EXT4-fs warning (device loop1): ext4_rename_delete:3742: inode #2: comm syz.1.3183: Deleting old file: nlink 5, error=-117 [ 525.462175][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.471629][ T5763] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 525.607816][T14943] loop4: detected capacity change from 0 to 1024 [ 525.621557][ T5763] usb 3-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 525.637010][ T5763] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 525.637028][ T5763] usb 3-1: config 0 has no interface number 0 [ 525.637053][ T5763] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 525.637069][ T5763] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 525.637084][ T5763] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 525.698094][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 525.698113][ T5763] usb 3-1: Product: syz [ 525.698121][ T5763] usb 3-1: SerialNumber: syz [ 525.729724][ T5763] usb 3-1: config 0 descriptor?? [ 525.749047][ T5763] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 525.750344][ T5763] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input52 [ 526.175229][T14949] loop1: detected capacity change from 0 to 256 [ 526.194435][T14949] exfat: Deprecated parameter 'utf8' [ 526.209052][T14949] exfat: Deprecated parameter 'namecase' [ 526.209113][T14949] exfat: Deprecated parameter 'namecase' [ 526.209156][T14949] exfat: Deprecated parameter 'namecase' [ 526.209164][T14949] exfat: Bad value for 'namecase' [ 526.371016][T14935] loop5: detected capacity change from 0 to 32768 [ 526.387687][ T5763] usb 3-1: USB disconnect, device number 33 [ 526.387806][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 526.418823][T14935] (syz.5.3185,14935,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 526.421861][T14935] (syz.5.3185,14935,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 526.463616][ T5763] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 526.575931][T14935] JBD2: Ignoring recovery information on journal [ 526.675135][T14935] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 527.046405][T10564] ocfs2: Unmounting device (7,5) on (node local) [ 527.187885][T14970] netlink: 'syz.4.3202': attribute type 3 has an invalid length. [ 527.483101][T14976] loop2: detected capacity change from 0 to 256 [ 527.483707][T14976] exfat: Deprecated parameter 'utf8' [ 527.483721][T14976] exfat: Deprecated parameter 'utf8' [ 527.483765][T14976] exfat: Deprecated parameter 'utf8' [ 527.550206][T14976] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 527.863352][T14965] loop3: detected capacity change from 0 to 32768 [ 527.915995][T14965] JBD2: Ignoring recovery information on journal [ 527.965894][T14992] program syz.5.3210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.015271][T14965] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 528.447043][ T1234] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 528.505442][ T5636] ocfs2: Unmounting device (7,3) on (node local) [ 528.607427][ T1234] usb 6-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 528.617800][ T1234] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 528.617818][ T1234] usb 6-1: config 0 has no interface number 0 [ 528.617842][ T1234] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 528.617857][ T1234] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 528.617871][ T1234] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 528.646013][ T1234] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 528.646030][ T1234] usb 6-1: Product: syz [ 528.646040][ T1234] usb 6-1: SerialNumber: syz [ 528.648096][ T1234] usb 6-1: config 0 descriptor?? [ 528.709401][ T1234] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 528.775465][ T1234] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input53 [ 529.042611][ C0] cm109_urb_ctl_callback: 45 callbacks suppressed [ 529.042631][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 529.042819][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 529.042999][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 529.043178][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 529.043352][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 529.043523][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 529.043689][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 529.043864][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 529.044042][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 529.044229][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 529.070408][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 529.070433][ T1234] usb 6-1: USB disconnect, device number 10 [ 529.165473][ T1234] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 529.393510][T15014] rnbd_client L127: Can't parse path ip:027.0.0.1*Ãú3°Æ;*\L 3ìc8’Q¥Î;•®.f¿O¥œ3æŒXFð©i]HÌ2î‡éoûW«£Ø£5+¿@çÎ: -22 [ 529.443314][T15017] loop4: detected capacity change from 0 to 128 [ 529.468460][T15017] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 529.473985][T15017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 529.745652][T15025] loop3: detected capacity change from 0 to 128 [ 529.763879][T15025] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 529.763915][T15025] hpfs: filesystem error: improperly stopped [ 529.763924][T15025] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 529.763933][T15025] hpfs: You really don't want any checks? You are crazy... [ 529.763940][T15025] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 529.764068][T15025] hpfs: code page support is disabled [ 529.764249][T15025] hpfs: hpfs_map_4sectors(): unaligned read [ 529.764302][T15025] hpfs: hpfs_map_4sectors(): unaligned read [ 529.764309][T15025] hpfs: filesystem error: unable to find root dir [ 529.891093][T15025] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 530.789870][T15032] loop4: detected capacity change from 0 to 32768 [ 530.808472][T15032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3228 (15032) [ 530.850459][T15032] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 530.850485][T15032] BTRFS info (device loop4): using crc32c checksum algorithm [ 530.965294][T15032] BTRFS info (device loop4): enabling ssd optimizations [ 530.965315][T15032] BTRFS info (device loop4): turning on flush-on-commit [ 530.965325][T15032] BTRFS info (device loop4): enabling free space tree [ 530.965335][T15032] BTRFS info (device loop4): enabling auto defrag [ 530.965345][T15032] BTRFS info (device loop4): use lzo compression, level 1 [ 530.965357][T15032] BTRFS info (device loop4): max_inline set to 4096 [ 531.540108][ T5638] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 531.754113][T15046] loop3: detected capacity change from 0 to 32768 [ 531.826090][T15046] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 531.928815][T15046] XFS (loop3): Ending clean mount [ 531.934965][T15046] XFS (loop3): Quotacheck needed: Please wait. [ 532.271697][T15046] XFS (loop3): Quotacheck: Done. [ 532.314760][ T33] audit: type=1800 audit(1793829397.001:148): pid=15046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3234" name="file1" dev="loop3" ino=6150 res=0 errno=-22 [ 532.363523][T15067] loop1: detected capacity change from 0 to 40427 [ 532.380557][T15067] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 532.380575][T15067] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 532.406294][T15067] F2FS-fs (loop1): invalid crc value [ 532.754158][ T5636] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 532.784783][T15067] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 532.848041][T15095] loop5: detected capacity change from 0 to 512 [ 532.860641][T15095] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 532.860654][T15095] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 532.894243][T15095] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.3254: corrupted in-inode xattr: overlapping e_value [ 532.894269][T15095] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 532.908441][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 532.908459][ C0] EXT4-fs (loop5): initial error at time 1793829397: ext4_iget_extra_inode:6027: inode 15 [ 532.908479][ C0] EXT4-fs (loop5): last error at time 1793829397: ext4_iget_extra_inode:6027: inode 15 [ 532.927459][T15095] EXT4-fs (loop5): Remounting filesystem read-only [ 532.928542][T15095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.163269][T10564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.189342][T15067] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 533.189363][T15067] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 533.374983][T15088] f2fs_ckpt-7:1: attempt to access beyond end of device [ 533.374983][T15088] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 533.454059][T15088] CPU: 0 UID: 0 PID: 15088 Comm: f2fs_ckpt-7:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.454085][T15088] Tainted: [L]=SOFTLOCKUP [ 533.454090][T15088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 533.454097][T15088] Call Trace: [ 533.454103][T15088] [ 533.454110][T15088] dump_stack_lvl+0xe8/0x150 [ 533.454135][T15088] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 533.454159][T15088] f2fs_write_end_bio+0xf7d/0x1310 [ 533.454186][T15088] __submit_merged_bio+0x258/0x6a0 [ 533.454199][T15088] ? rcu_is_watching+0x16/0xb0 [ 533.454221][T15088] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 533.454242][T15088] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 533.454295][T15088] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 533.454345][T15088] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 533.454390][T15088] ? rcu_is_watching+0x16/0xb0 [ 533.454409][T15088] ? __kasan_check_byte+0x12/0x40 [ 533.454428][T15088] ? rcu_is_watching+0x16/0xb0 [ 533.454452][T15088] ? unwind_next_frame+0x1baf/0x2550 [ 533.454472][T15088] ? ret_from_fork_asm+0x1a/0x30 [ 533.454484][T15088] ? unwind_next_frame+0x8f/0x2550 [ 533.454502][T15088] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 533.454518][T15088] ? arch_stack_walk+0x11b/0x150 [ 533.454537][T15088] ? ret_from_fork_asm+0x1a/0x30 [ 533.454553][T15088] ? stack_trace_save+0xa9/0x100 [ 533.454567][T15088] ? __pfx_stack_trace_save+0x10/0x10 [ 533.454585][T15088] ? check_path+0x21/0x40 [ 533.454601][T15088] ? check_noncircular+0xdb/0x150 [ 533.454620][T15088] ? add_lock_to_list+0xc7/0x100 [ 533.454639][T15088] ? lockdep_unlock+0x5c/0xd0 [ 533.454651][T15088] ? __lock_acquire+0x1511/0x2de0 [ 533.454683][T15088] ? do_raw_spin_lock+0x12b/0x2f0 [ 533.454703][T15088] ? do_raw_spin_unlock+0xf5/0x200 [ 533.454716][T15088] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 533.454732][T15088] do_writepages+0x338/0x560 [ 533.454753][T15088] ? do_raw_spin_unlock+0xf5/0x200 [ 533.454768][T15088] filemap_fdatawrite+0x1e9/0x2f0 [ 533.454785][T15088] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 533.454827][T15088] ? do_raw_spin_unlock+0xf5/0x200 [ 533.454842][T15088] f2fs_sync_dirty_inodes+0x471/0x970 [ 533.454868][T15088] f2fs_write_checkpoint+0x867/0x24d0 [ 533.454907][T15088] __checkpoint_and_complete_reqs+0x135/0x480 [ 533.454930][T15088] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 533.454958][T15088] ? schedule+0x90/0x2b0 [ 533.454978][T15088] issue_checkpoint_thread+0xd5/0x270 [ 533.454997][T15088] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 533.455013][T15088] ? __pfx_autoremove_wake_function+0x10/0x10 [ 533.455032][T15088] ? __kthread_parkme+0x71/0x1f0 [ 533.455046][T15088] ? __kthread_parkme+0x199/0x1f0 [ 533.455065][T15088] kthread+0x38b/0x480 [ 533.455079][T15088] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 533.455094][T15088] ? __pfx_kthread+0x10/0x10 [ 533.455109][T15088] ret_from_fork+0x514/0xb70 [ 533.455126][T15088] ? __pfx_ret_from_fork+0x10/0x10 [ 533.455139][T15088] ? __switch_to+0xc78/0x1410 [ 533.455154][T15088] ? __pfx_kthread+0x10/0x10 [ 533.455169][T15088] ret_from_fork_asm+0x1a/0x30 [ 533.455193][T15088] [ 533.455218][T15088] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 533.864786][T15107] loop4: detected capacity change from 0 to 8 [ 533.948154][T15107] SQUASHFS error: Failed to read block 0x26067d: -5 [ 533.948171][T15107] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 533.948180][T15107] SQUASHFS error: Unable to read directory block [26067d:1fff] [ 534.277824][ T1234] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 534.427171][ T1234] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 534.440135][ T1234] usb 4-1: config index 0 descriptor too short (expected 796, got 28) [ 534.440154][ T1234] usb 4-1: config 1 has an invalid interface number: 3 but max is -1 [ 534.440166][ T1234] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 534.440178][ T1234] usb 4-1: config 1 has no interface number 0 [ 534.442582][ T1234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.442598][ T1234] usb 4-1: Product: syz [ 534.442607][ T1234] usb 4-1: Manufacturer: syz [ 534.442615][ T1234] usb 4-1: SerialNumber: syz [ 534.516112][ T1234] usb 4-1: 3:0 : does not exist [ 534.516129][ T1234] usb 4-1: 3:0 : does not exist [ 534.761455][ T1234] usb 4-1: USB disconnect, device number 33 [ 534.990377][ T5646] udevd[5646]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.682572][T15144] loop3: detected capacity change from 0 to 512 [ 535.683265][T15144] EXT4-fs: quotafile must be on filesystem root [ 535.925807][T15148] ªªªªª»: renamed from vlan0 (while UP) [ 536.147970][T15140] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input54 [ 536.525391][T15168] netlink: 'syz.1.3275': attribute type 4 has an invalid length. [ 536.525409][T15168] netlink: 'syz.1.3275': attribute type 8 has an invalid length. [ 536.525417][T15168] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3275'. [ 536.708987][ T1234] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 536.729219][T15172] loop1: detected capacity change from 0 to 1024 [ 536.729958][T15172] EXT4-fs: Ignoring removed mblk_io_submit option [ 536.732454][T15172] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 536.732732][T15172] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 536.780169][T15172] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.3278: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 536.780202][T15172] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 536.780388][T15172] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3278: couldn't read orphan inode 11 (err -117) [ 536.780407][T15172] loop1: lost filesystem error report for type 5 error -117 [ 536.781926][T15172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.866746][ T1234] usb 3-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 536.868898][ T1234] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.868931][ T1234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 536.868946][ T1234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 536.868959][ T1234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 536.868973][ T1234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 536.868986][ T1234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 536.868999][ T1234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 536.869012][ T1234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 536.869025][ T1234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 536.869038][ T1234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 536.869052][ T1234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 536.869066][ T1234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 536.869108][ T1234] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 255, changing to 11 [ 536.869124][ T1234] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59391, setting to 1024 [ 536.869139][ T1234] usb 3-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 536.873389][ T1234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.873406][ T1234] usb 3-1: Product: syz [ 536.873415][ T1234] usb 3-1: Manufacturer: syz [ 536.873424][ T1234] usb 3-1: SerialNumber: syz [ 537.123024][T15172] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.3278: Invalid block bitmap block 0 in block_group 0 [ 537.167746][T15166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.167840][T15166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.167903][T15166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.167985][T15166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.168048][T15166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.168128][T15166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.168197][T15166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.168282][T15166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.168345][T15166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.168425][T15166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.168486][T15166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.168569][T15166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.273078][ T1234] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 537.288586][T15172] Quota error (device loop1): write_blk: dquota write failed [ 537.288614][T15172] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 537.288656][T15172] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.3278: Failed to acquire dquot type 0 [ 537.315511][ T1234] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 537.369194][ T1234] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 537.388387][ T1234] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 537.392031][ T1234] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 537.495039][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.748689][T15183] kAFS: Invalid Command on /proc/fs/afs/cells file [ 537.756677][ T1234] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 537.819530][T15187] loop5: detected capacity change from 0 to 256 [ 537.917625][ T1234] usb 4-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 537.918653][ T1234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.918671][ T1234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.918684][ T1234] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.918709][ T1234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.939749][ T1234] usb 4-1: config 0 descriptor?? [ 538.090992][ T5764] usb 3-1: USB disconnect, device number 34 [ 538.174849][ T5764] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 538.211056][ T5764] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 538.240133][ T5764] keyspan 3-1:1.0: device disconnected [ 538.491065][ T1234] smartjoyplus 0003:0B43:0003.0027: unexpected long global item [ 538.491503][ T1234] smartjoyplus 0003:0B43:0003.0027: parse failed [ 538.491545][ T1234] smartjoyplus 0003:0B43:0003.0027: probe with driver smartjoyplus failed with error -22 [ 538.713887][ T1234] usb 4-1: USB disconnect, device number 34 [ 538.754506][T15206] phram: parameter too long [ 539.481595][T15229] bond0: invalid ARP target specified [ 540.043819][T15222] loop2: detected capacity change from 0 to 32768 [ 540.659986][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3314'. [ 540.875607][T15259] bond0: no command found in slaves file - use +ifname or -ifname [ 541.235728][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3320'. [ 541.321356][T15256] loop2: detected capacity change from 0 to 32768 [ 541.369424][T15256] JBD2: Ignoring recovery information on journal [ 541.456258][T15256] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 541.712107][ T5763] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 541.779760][ T5644] ocfs2: Unmounting device (7,2) on (node local) [ 541.973616][T15273] loop5: detected capacity change from 0 to 32768 [ 541.987811][ T5763] usb 5-1: Using ep0 maxpacket: 32 [ 541.996412][ T5763] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 542.012288][T15273] (syz.5.3325,15273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 542.012720][ T5763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.013660][T15273] (syz.5.3325,15273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 542.057511][ T5763] usb 5-1: config 0 descriptor?? [ 542.070172][T15273] JBD2: Ignoring recovery information on journal [ 542.129610][T15273] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 542.320786][ T5763] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 542.366271][ T5763] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 542.384556][ T5763] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 542.384593][ T5763] usb 5-1: media controller created [ 542.448210][T15281] loop2: detected capacity change from 0 to 2048 [ 542.493062][T15281] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 542.541253][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 542.629893][ T5763] az6027: usb out operation failed. (-71) [ 542.631548][ T5763] az6027: usb out operation failed. (-71) [ 542.631558][ T5763] stb0899_attach: Driver disabled by Kconfig [ 542.631565][ T5763] az6027: no front-end attached [ 542.631565][ T5763] [ 542.632747][ T5763] az6027: usb out operation failed. (-71) [ 542.632756][ T5763] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 542.634039][ T5763] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input55 [ 542.713692][T10564] ocfs2: Unmounting device (7,5) on (node local) [ 542.795835][ T5763] dvb-usb: schedule remote query interval to 400 msecs. [ 542.795853][ T5763] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 542.833357][ T5763] usb 5-1: USB disconnect, device number 38 [ 543.030752][ T5763] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 543.258247][T15294] loop2: detected capacity change from 0 to 256 [ 543.720410][T15276] loop1: detected capacity change from 0 to 40427 [ 543.741480][T15276] F2FS-fs (loop1): invalid crc value [ 544.083831][T15276] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 544.190966][T15276] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 544.279768][T15293] loop5: detected capacity change from 0 to 32768 [ 544.340711][T15293] JBD2: Ignoring recovery information on journal [ 544.434237][T15293] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 544.500798][ T5639] syz-executor: attempt to access beyond end of device [ 544.500798][ T5639] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 544.593676][ T5639] CPU: 0 UID: 0 PID: 5639 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 544.593702][ T5639] Tainted: [L]=SOFTLOCKUP [ 544.593707][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 544.593715][ T5639] Call Trace: [ 544.593721][ T5639] [ 544.593727][ T5639] dump_stack_lvl+0xe8/0x150 [ 544.593751][ T5639] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 544.593777][ T5639] f2fs_write_end_bio+0xf7d/0x1310 [ 544.593804][ T5639] __submit_merged_bio+0x258/0x6a0 [ 544.593816][ T5639] ? rcu_is_watching+0x16/0xb0 [ 544.593838][ T5639] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 544.593859][ T5639] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 544.593893][ T5639] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 544.593922][ T5639] ? __lock_acquire+0x747/0x2de0 [ 544.593949][ T5639] ? __lock_acquire+0x747/0x2de0 [ 544.593967][ T5639] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 544.593983][ T5639] ? __lock_acquire+0x747/0x2de0 [ 544.594029][ T5639] ? rcu_is_watching+0x16/0xb0 [ 544.594051][ T5639] ? __lock_acquire+0x747/0x2de0 [ 544.594074][ T5639] ? is_bpf_text_address+0x292/0x2b0 [ 544.594087][ T5639] ? is_bpf_text_address+0x26/0x2b0 [ 544.594114][ T5639] ? lock_acquire+0x115/0x350 [ 544.594135][ T5639] ? ktime_get+0x45/0x220 [ 544.594152][ T5639] ? ktime_get+0x45/0x220 [ 544.594167][ T5639] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 544.594183][ T5639] ? ktime_get+0x1f5/0x220 [ 544.594198][ T5639] ? lapic_next_event+0x11/0x20 [ 544.594213][ T5639] ? clockevents_program_event+0x491/0x630 [ 544.594229][ T5639] ? __pfx_clockevents_program_event+0x10/0x10 [ 544.594251][ T5639] ? irqentry_exit+0x2a0/0x9b0 [ 544.594265][ T5639] ? lockdep_hardirqs_on+0x7b/0x110 [ 544.594279][ T5639] ? irqentry_exit+0x2a0/0x9b0 [ 544.594291][ T5639] ? trace_irq_disable+0x3b/0x140 [ 544.594314][ T5639] ? do_raw_spin_lock+0x12b/0x2f0 [ 544.594333][ T5639] ? do_raw_spin_unlock+0xf5/0x200 [ 544.594346][ T5639] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 544.594362][ T5639] do_writepages+0x338/0x560 [ 544.594388][ T5639] ? do_raw_spin_unlock+0xf5/0x200 [ 544.594403][ T5639] filemap_fdatawrite+0x1e9/0x2f0 [ 544.594421][ T5639] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 544.594464][ T5639] ? do_raw_spin_unlock+0xf5/0x200 [ 544.594480][ T5639] f2fs_sync_dirty_inodes+0x471/0x970 [ 544.594505][ T5639] f2fs_write_checkpoint+0x867/0x24d0 [ 544.594545][ T5639] kill_f2fs_super+0x2df/0x700 [ 544.594563][ T5639] ? rcu_do_enqueue+0x616/0x870 [ 544.594577][ T5639] ? lockdep_hardirqs_on+0x7b/0x110 [ 544.594591][ T5639] ? __pfx_kill_f2fs_super+0x10/0x10 [ 544.594617][ T5639] ? __pfx_call_rcu+0x10/0x10 [ 544.594632][ T5639] ? shrinker_free+0x2a7/0x3b0 [ 544.594648][ T5639] deactivate_locked_super+0xbe/0x110 [ 544.594666][ T5639] cleanup_mnt+0x204/0x2a0 [ 544.594687][ T5639] task_work_run+0x1d9/0x260 [ 544.594705][ T5639] ? __pfx_task_work_run+0x10/0x10 [ 544.594726][ T5639] exit_to_user_mode_loop+0x204/0x770 [ 544.594742][ T5639] ? rcu_is_watching+0x16/0xb0 [ 544.594762][ T5639] do_syscall_64+0x32c/0x530 [ 544.594775][ T5639] ? trace_irq_disable+0x3b/0x140 [ 544.594791][ T5639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.594803][ T5639] ? clear_bhb_loop+0x70/0xc0 [ 544.594818][ T5639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.594830][ T5639] RIP: 0033:0x00007f80075a0d57 [ 544.594844][ T5639] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 544.594855][ T5639] RSP: 002b:00007ffc646eaa38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 544.594870][ T5639] RAX: 0000000000000000 RBX: 00007f8007636fb3 RCX: 00007f80075a0d57 [ 544.594878][ T5639] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc646eaaf0 [ 544.594886][ T5639] RBP: 00007ffc646eaaf0 R08: 00007ffc646ebaf0 R09: 00000000ffffffff [ 544.594895][ T5639] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc646ebb80 [ 544.594902][ T5639] R13: 00007f8007636fb3 R14: 0000000000084e8f R15: 00007ffc646ebbc0 [ 544.594923][ T5639] [ 544.749521][ T5639] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 545.201881][T15327] kAFS: Invalid Command on /proc/fs/afs/cells file [ 545.640875][T10564] ocfs2: Unmounting device (7,5) on (node local) [ 545.936105][T15340] loop2: detected capacity change from 0 to 512 [ 545.972702][T15340] EXT4-fs (loop2): 1 truncate cleaned up [ 545.973743][T15340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.139170][ T5644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.199954][ T33] audit: type=1807 audit(1793829410.881:149): action=measure res=1 [ 546.251971][T15343] ima: policy update completed [ 546.252130][ T33] audit: type=1802 audit(1793829410.941:150): pid=15343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.3354" res=1 errno=0 [ 546.304464][T15347] netlink: 'syz.3.3353': attribute type 14 has an invalid length. [ 546.357947][ T33] audit: type=1800 audit(1793829411.041:151): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15233 res=0 errno=-22 [ 546.429699][T15328] loop4: detected capacity change from 0 to 32768 [ 546.431337][ T33] audit: type=1800 audit(1793829411.121:152): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15479 res=0 errno=-22 [ 546.474112][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3348'. [ 546.499982][T15328] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 546.588655][ T33] audit: type=1800 audit(1793829411.271:153): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15479 res=0 errno=-22 [ 546.632481][T15328] XFS (loop4): Ending clean mount [ 546.853358][T15367] loop1: detected capacity change from 0 to 256 [ 546.867374][ T33] audit: type=1800 audit(1793829411.561:154): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15110 res=0 errno=-22 [ 546.870778][ T5638] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 546.977478][ T33] audit: type=1800 audit(1793829411.661:155): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15110 res=0 errno=-22 [ 547.247523][ T33] audit: type=1800 audit(1793829411.941:156): pid=15371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3360" name="nr_requests" dev="sysfs" ino=21254 res=0 errno=-22 [ 547.563276][ T33] audit: type=1800 audit(1793829412.251:157): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4845 res=0 errno=-22 [ 547.640685][T15382] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[10564] was attempted by ""[15382] [ 547.677269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.677567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.677778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.678025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.678222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.678472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.678655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.678903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.679096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.679340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.328587][ C0] sched: DL replenish lagged too much [ 552.686569][ C0] net_ratelimit: 22948 callbacks suppressed [ 552.686587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.686858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.687047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.687292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.687472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.687714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.687894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.688144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.688324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.688567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.696646][ C0] net_ratelimit: 23035 callbacks suppressed [ 557.696664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.696847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.697071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.697314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.697493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.697705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.697977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.698155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.698367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.698629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.706575][ C0] net_ratelimit: 22382 callbacks suppressed [ 562.706621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.706814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.707047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.707300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.707487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.707709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.707970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.708157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.708403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.708656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.179835][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.192613][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.716664][ C0] net_ratelimit: 21569 callbacks suppressed [ 567.716682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.716875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.717107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.717361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.717547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.717791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.718072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.718271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.718521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.718774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.726609][ C0] net_ratelimit: 21798 callbacks suppressed [ 572.726628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.726862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.727499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.727716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.727954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.728207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.728431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.728653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.728916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.729104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.736608][ C0] net_ratelimit: 21410 callbacks suppressed [ 577.736627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.736860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.737139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.737329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.737551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.737805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.737999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.738223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.738476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.738661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.746553][ C0] net_ratelimit: 23385 callbacks suppressed [ 582.746571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.746832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.747016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.747234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.747503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.747686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.747933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.748180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.748361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.748577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.756519][ C0] net_ratelimit: 23602 callbacks suppressed [ 587.756536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.756766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.757014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.757196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.757413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.757659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.757849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.758087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.758335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.758516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.766572][ C0] net_ratelimit: 23874 callbacks suppressed [ 592.766591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.766852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.767033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.767247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.767490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.767669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.767890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.768156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.768365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.768579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.776487][ C0] net_ratelimit: 23924 callbacks suppressed [ 597.776505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.776761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.776941][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.777160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.777427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.777606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.777828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.778121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.778302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.778515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.786640][ C0] net_ratelimit: 23405 callbacks suppressed [ 602.786659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.786910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.787092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.787308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.787555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.787744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.787983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.788261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.788443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.788668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.796490][ C0] net_ratelimit: 23368 callbacks suppressed [ 607.796514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.796738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.796985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.797167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.797383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.797636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.797849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.798065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.798324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.798512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.806625][ C0] net_ratelimit: 23818 callbacks suppressed [ 612.806642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.806825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.807041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.807315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.807501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.807715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.807958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.808136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.808363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.808634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.816507][ C0] net_ratelimit: 24003 callbacks suppressed [ 617.816525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 617.816732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.816955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.817201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.817440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 617.817619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.817832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.818083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.818293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 617.818471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.826568][ C0] net_ratelimit: 23785 callbacks suppressed [ 622.826586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.826804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 622.826986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.827206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.827462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.827676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 622.827881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.828098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.828352][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.828566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 625.502072][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.508586][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.836495][ C0] net_ratelimit: 23684 callbacks suppressed [ 627.836513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.836736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.837385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.837602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 627.837788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.838007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.838254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.838474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 627.838656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.838896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.846676][ C0] net_ratelimit: 17936 callbacks suppressed [ 632.846694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.846907][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 632.847086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.847337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.848605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.848820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 632.849000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.849215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.850003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.850213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 637.856718][ C0] net_ratelimit: 14910 callbacks suppressed [ 637.856735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.856956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 637.857180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.857401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.858195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.858413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 637.858593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.858810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.859576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.859813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 642.866537][ C0] net_ratelimit: 14689 callbacks suppressed [ 642.866555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.867345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.867568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 642.867752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.867970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.868723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.868942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 642.869156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.869403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.870145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.877114][ C0] net_ratelimit: 14635 callbacks suppressed [ 647.877134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.877350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 647.877532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.877770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.878551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.878765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 647.878946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.879171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.879909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.880166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 652.886539][ C0] net_ratelimit: 14776 callbacks suppressed [ 652.886557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.886796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.887536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.887753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 652.887932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.888152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.888912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.889152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 652.889332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.889545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.896522][ C0] net_ratelimit: 14901 callbacks suppressed [ 657.896541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 657.896722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.896937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.897670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.897932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 657.898136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.898351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.899086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.899297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 657.899475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.906477][ C0] net_ratelimit: 14739 callbacks suppressed [ 662.906495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.906716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.907492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.907737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 662.907930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.908156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.908896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.909116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 662.909298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.909537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.916868][ C0] net_ratelimit: 14644 callbacks suppressed [ 667.916887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.917132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 667.917316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.917533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.918312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.918526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 667.918707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.918931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.919693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.919926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:16:ff:a9:8d:be, vlan:0) [ 669.946387][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 672.274834][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5646/1:b..l.. [ 672.284727][ C0] rcu: (detected by 0, t=10502 jiffies, g=160009, q=928 ncpus=1) [ 672.292514][ C0] task:udevd state:R running task stack:23400 pid:5646 tgid:5646 ppid:5002 task_flags:0x400140 flags:0x00080000 [ 672.305974][ C0] Call Trace: [ 672.309239][ C0] [ 672.312165][ C0] __schedule+0x17dd/0x5830 [ 672.316676][ C0] ? __lock_acquire+0x747/0x2de0 [ 672.321609][ C0] ? __pfx___schedule+0x10/0x10 [ 672.326459][ C0] preempt_schedule_irq+0x4b/0x90 [ 672.331469][ C0] irqentry_exit+0x14f/0x9b0 [ 672.336046][ C0] ? trace_irq_disable+0x3b/0x140 [ 672.341071][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 672.347040][ C0] RIP: 0010:lock_release+0x0/0x3c0 [ 672.352141][ C0] Code: e9 4f fe ff ff 41 bf 2f 00 00 00 e9 06 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 49 [ 672.371748][ C0] RSP: 0018:ffffc90003f0f3f8 EFLAGS: 00000202 [ 672.377799][ C0] RAX: 0000000000000001 RBX: ffffc90003f0f4b8 RCX: 8000000000000001 [ 672.385756][ C0] RDX: ffffc90003f0f401 RSI: ffffffff817889df RDI: ffffffff9015a560 [ 672.393712][ C0] RBP: 1ffffffff24cf401 R08: ffffc90003f0fe90 R09: 0000000000000000 [ 672.401671][ C0] R10: ffffc90003f0f4f8 R11: fffff520007e1ea1 R12: ffffc90003f08000 [ 672.409631][ C0] R13: ffffffff817889df R14: ffffc90003f0f4a8 R15: ffffc90003f0fea0 [ 672.417595][ C0] ? unwind_next_frame+0x8f/0x2550 [ 672.422726][ C0] ? unwind_next_frame+0x8f/0x2550 [ 672.427832][ C0] unwind_next_frame+0x1baa/0x2550 [ 672.432943][ C0] ? do_sys_openat2+0x115/0x200 [ 672.437790][ C0] ? unwind_next_frame+0x8f/0x2550 [ 672.442889][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 672.449032][ C0] arch_stack_walk+0x11b/0x150 [ 672.453787][ C0] ? __x64_sys_openat+0x138/0x170 [ 672.458801][ C0] stack_trace_save+0xa9/0x100 [ 672.463552][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 672.468917][ C0] save_stack+0x122/0x230 [ 672.473304][ C0] ? __pfx_save_stack+0x10/0x10 [ 672.478141][ C0] ? __free_frozen_pages+0xd1a/0xe10 [ 672.483415][ C0] ? __slab_free+0x269/0x2c0 [ 672.488005][ C0] ? qlist_free_all+0x99/0x100 [ 672.492756][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 672.498376][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 672.503386][ C0] ? __kmalloc_cache_noprof+0x29a/0x600 [ 672.508919][ C0] ? kernfs_fop_open+0x38c/0xd20 [ 672.513849][ C0] ? do_dentry_open+0x80e/0x1360 [ 672.518774][ C0] ? vfs_open_consume+0x4a/0x350 [ 672.523694][ C0] ? path_openat+0x16fc/0x20f0 [ 672.528445][ C0] ? do_file_open+0x23e/0x4a0 [ 672.533115][ C0] ? do_sys_openat2+0x115/0x200 [ 672.537966][ C0] ? page_ext_put+0x97/0xc0 [ 672.542511][ C0] __reset_page_owner+0x73/0x2a0 [ 672.547458][ C0] __free_frozen_pages+0xd1a/0xe10 [ 672.552561][ C0] __slab_free+0x269/0x2c0 [ 672.556974][ C0] qlist_free_all+0x99/0x100 [ 672.561555][ C0] kasan_quarantine_reduce+0x148/0x160 [ 672.567004][ C0] __kasan_slab_alloc+0x22/0x80 [ 672.571966][ C0] __kmalloc_cache_noprof+0x29a/0x600 [ 672.577338][ C0] ? __kmalloc_cache_noprof+0x148/0x600 [ 672.582877][ C0] ? kernfs_fop_open+0x38c/0xd20 [ 672.587808][ C0] ? kernfs_fop_open+0x38c/0xd20 [ 672.592756][ C0] kernfs_fop_open+0x38c/0xd20 [ 672.597514][ C0] ? __pfx_kernfs_fop_open+0x10/0x10 [ 672.602784][ C0] do_dentry_open+0x80e/0x1360 [ 672.607540][ C0] vfs_open_consume+0x4a/0x350 [ 672.612289][ C0] ? path_openat+0x16e1/0x20f0 [ 672.617043][ C0] path_openat+0x16fc/0x20f0 [ 672.621631][ C0] do_file_open+0x23e/0x4a0 [ 672.626126][ C0] ? __pfx_do_file_open+0x10/0x10 [ 672.631153][ C0] ? _raw_spin_unlock+0x28/0x50 [ 672.636038][ C0] ? alloc_fd+0x6af/0x760 [ 672.640364][ C0] do_sys_openat2+0x115/0x200 [ 672.645031][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 672.650219][ C0] ? rcu_is_watching+0x16/0xb0 [ 672.654979][ C0] __x64_sys_openat+0x138/0x170 [ 672.659835][ C0] do_syscall_64+0x16a/0x530 [ 672.664428][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.670511][ C0] ? clear_bhb_loop+0x70/0xc0 [ 672.675194][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.681100][ C0] RIP: 0033:0x00007f5c69ca7407 [ 672.685866][ C0] RSP: 002b:00007ffeab40dc50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 672.694268][ C0] RAX: ffffffffffffffda RBX: 00007f5c6a357880 RCX: 00007f5c69ca7407 [ 672.702226][ C0] RDX: 0000000000080000 RSI: 00007ffeab40ddd0 RDI: ffffffffffffff9c [ 672.710191][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 672.718146][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055be379a67f5 [ 672.726105][ C0] R13: 000055be379a67f5 R14: 0000000000000001 R15: 0000000000000000 [ 672.734072][ C0] [ 672.737078][ C0] rcu: rcu_preempt kthread starved for 759 jiffies! g160009 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 672.747989][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 672.757942][ C0] rcu: RCU grace-period kthread stack dump: [ 672.763809][ C0] task:rcu_preempt state:R running task stack:27400 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 672.777288][ C0] Call Trace: [ 672.780555][ C0] [ 672.783476][ C0] __schedule+0x17dd/0x5830 [ 672.787968][ C0] ? __lock_acquire+0x747/0x2de0 [ 672.792921][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 672.798023][ C0] ? __pfx___schedule+0x10/0x10 [ 672.802854][ C0] ? lock_acquire+0x115/0x350 [ 672.807543][ C0] ? schedule+0x90/0x2b0 [ 672.811774][ C0] schedule+0x164/0x2b0 [ 672.815915][ C0] schedule_timeout+0x152/0x2c0 [ 672.820757][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 672.826120][ C0] ? __pfx_process_timeout+0x10/0x10 [ 672.831393][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 672.837185][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 672.842719][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 672.848262][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 672.853108][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 672.859252][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 672.864521][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 672.869706][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 672.875515][ C0] rcu_gp_kthread+0x9c/0x340 [ 672.880093][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 672.885278][ C0] ? __kthread_parkme+0x71/0x1f0 [ 672.890201][ C0] ? __kthread_parkme+0x199/0x1f0 [ 672.895210][ C0] kthread+0x38b/0x480 [ 672.899263][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 672.904447][ C0] ? __pfx_kthread+0x10/0x10 [ 672.909024][ C0] ret_from_fork+0x514/0xb70 [ 672.913604][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 672.918700][ C0] ? __switch_to+0xc78/0x1410 [ 672.923362][ C0] ? __pfx_kthread+0x10/0x10 [ 672.927953][ C0] ret_from_fork_asm+0x1a/0x30 [ 672.932712][ C0] [ 672.935722][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 672.942029][ C0] CPU: 0 UID: 0 PID: 5652 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.953030][ C0] Tainted: [L]=SOFTLOCKUP [ 672.957341][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 672.967383][ C0] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 672.973770][ C0] RIP: 0010:memset_orig+0x36/0xb0 [ 672.978797][ C0] Code: 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 48 89 07 <48> 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 [ 672.998391][ C0] RSP: 0018:ffffc900000075c8 EFLAGS: 00000247 [ 673.004459][ C0] RAX: 0000000000000000 RBX: ffffc90000007628 RCX: 0000000000000000 [ 673.012414][ C0] RDX: 0000000000000060 RSI: 0000000000000000 RDI: ffffc90000007628 [ 673.020458][ C0] RBP: ffffc900000076b0 R08: ffffc90000007687 R09: 0000000000000000 [ 673.028412][ C0] R10: ffffc90000007628 R11: fffff52000000ed1 R12: 0000000000000000 [ 673.036455][ C0] R13: ffff8880352e8000 R14: ffffffff81b3c4c0 R15: dffffc0000000000 [ 673.044419][ C0] FS: 0000000000000000(0000) GS:ffff8881233f9000(0000) knlGS:0000000000000000 [ 673.053356][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 673.059934][ C0] CR2: 00007f3929910445 CR3: 000000007f3f6000 CR4: 00000000003526f0 [ 673.067910][ C0] Call Trace: [ 673.071189][ C0] [ 673.074027][ C0] __unwind_start+0x36/0x660 [ 673.078612][ C0] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 673.084752][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 673.090897][ C0] arch_stack_walk+0xe3/0x150 [ 673.095589][ C0] stack_trace_save+0xa9/0x100 [ 673.100339][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 673.105703][ C0] ? __lock_acquire+0x747/0x2de0 [ 673.110644][ C0] kasan_save_track+0x3f/0x90 [ 673.115340][ C0] ? ip6_mc_input+0x878/0xc80 [ 673.120053][ C0] kasan_save_free_info+0x40/0x50 [ 673.125061][ C0] __kasan_slab_free+0x70/0x90 [ 673.129811][ C0] kmem_cache_free+0x184/0x660 [ 673.134574][ C0] ip6_mc_input+0x878/0xc80 [ 673.139070][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 673.144094][ C0] ? ip6_rcv_finish+0x265/0x280 [ 673.148978][ C0] NF_HOOK+0x336/0x3c0 [ 673.153044][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 673.158236][ C0] ? NF_HOOK+0x9e/0x3c0 [ 673.162386][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 673.166975][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 673.172196][ C0] process_backlog+0x795/0x18b0 [ 673.177109][ C0] ? process_backlog+0x3de/0x18b0 [ 673.182148][ C0] __napi_poll+0xaa/0x330 [ 673.186469][ C0] net_rx_action+0x61d/0xf50 [ 673.191056][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 673.196176][ C0] handle_softirqs+0x265/0x8d0 [ 673.200944][ C0] ? __dev_queue_xmit+0x29b/0x3920 [ 673.206087][ C0] do_softirq+0x77/0xd0 [ 673.210234][ C0] [ 673.213153][ C0] [ 673.216069][ C0] __local_bh_enable_ip+0x100/0x140 [ 673.221256][ C0] ? __dev_queue_xmit+0x29b/0x3920 [ 673.226351][ C0] __dev_queue_xmit+0x1efb/0x3920 [ 673.231368][ C0] ? __dev_queue_xmit+0x29b/0x3920 [ 673.236475][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 673.241833][ C0] ? lock_acquire+0x115/0x350 [ 673.246508][ C0] ? ip6_output+0x337/0x540 [ 673.251031][ C0] ? ip6_output+0x11e/0x540 [ 673.255530][ C0] ip6_output+0x337/0x540 [ 673.259858][ C0] ? ip6_send_skb+0x10a/0x380 [ 673.264531][ C0] ip6_send_skb+0x1cd/0x380 [ 673.269029][ C0] udp_v6_send_skb+0xab2/0x13a0 [ 673.273950][ C0] udpv6_sendmsg+0x1e44/0x2610 [ 673.278714][ C0] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 673.283834][ C0] ? __lock_acquire+0x747/0x2de0 [ 673.288773][ C0] ? __asan_memset+0x22/0x50 [ 673.293352][ C0] ? iov_iter_kvec+0xb8/0x180 [ 673.298060][ C0] rxrpc_send_keepalive+0x306/0x540 [ 673.303271][ C0] ? __pfx_rxrpc_send_keepalive+0x10/0x10 [ 673.309007][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 673.314286][ C0] rxrpc_peer_keepalive_worker+0x847/0xe80 [ 673.320085][ C0] ? __pfx_rxrpc_peer_keepalive_worker+0x10/0x10 [ 673.326417][ C0] ? rcu_is_watching+0x16/0xb0 [ 673.331174][ C0] ? process_scheduled_works+0x97a/0x1630 [ 673.336881][ C0] process_scheduled_works+0xc3d/0x1630 [ 673.342432][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 673.348410][ C0] ? assign_work+0x3cf/0x5d0 [ 673.352990][ C0] worker_thread+0xa47/0xfb0 [ 673.357579][ C0] kthread+0x38b/0x480 [ 673.361635][ C0] ? __pfx_worker_thread+0x10/0x10 [ 673.366725][ C0] ? __pfx_kthread+0x10/0x10 [ 673.371302][ C0] ret_from_fork+0x514/0xb70 [ 673.375879][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 673.380974][ C0] ? __switch_to+0xc78/0x1410 [ 673.385637][ C0] ? __pfx_kthread+0x10/0x10 [ 673.390212][ C0] ret_from_fork_asm+0x1a/0x30 [ 673.394967][ C0]