last executing test programs: 5.837622561s ago: executing program 1 (id=285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 5.495354679s ago: executing program 1 (id=288): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) write(r0, &(0x7f0000000080)='4', 0x1) 4.160108761s ago: executing program 3 (id=298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x20008004) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 3.894420847s ago: executing program 3 (id=302): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) 3.660192063s ago: executing program 3 (id=305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x101}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 3.436740718s ago: executing program 3 (id=307): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f00000004c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @empty, 0x82004}, 0x10) recvmmsg(r0, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) 3.3764941s ago: executing program 1 (id=308): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x4, 0x691, &(0x7f00000014c0)="$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") setresuid(0x0, 0xee00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x109000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6880, 0x0) 3.258717143s ago: executing program 0 (id=309): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd06, &(0x7f0000003000)="040000000000000000000000380100000000000000000000000000000000000000000000000000006d") 3.015315858s ago: executing program 1 (id=310): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="2b040000000000000001000010fc8000000000000000000000000000bb0102000005021edd00000000d33fccff395f166e7cea3ea267db43e8c669a6d60da5939f3b6fcb353aca7d2a354012164769d3323adb97ca3583e89821d7da9dded53b37703d7d6871d1b1aeae71479a30bcde"], 0x30) 2.905876631s ago: executing program 0 (id=311): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$set_reqkey_keyring(0xe, 0x0) 2.412391762s ago: executing program 3 (id=315): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000300)=0x1, 0x4) 2.227236977s ago: executing program 3 (id=316): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) write(r0, &(0x7f0000000080)='4', 0x1) 2.189070957s ago: executing program 2 (id=317): syz_mount_image$ext4(&(0x7f0000000800)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f00000007c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x4c2, &(0x7f0000000100)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1, @ANYBLOB="df4800000000fddbdf250c000000180001801400020064756d6d793000000000000000000000dc00038004000100d4000380100001800800010002000000040003"], 0x108}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 2.128554889s ago: executing program 1 (id=318): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000020c0)='./file1\x00', 0x1c002, &(0x7f0000000400)=ANY=[], 0x1, 0x5f12, &(0x7f0000008040)="$eJzs3U9vHGcdB/Df/vH6T2kaVagKEYc0hdJSmv8JlH9NOXCAA0goZxK5bhVwoUoMopVFXPmAuAAvAS69cOgb6WtAvAAi2Zx6oAwa+3mS8XqddUi8s+vn85Gcmd8+O95n8vV4Zj0z+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/64c8udiLi5m/TAycjvhC9iG7EYl2fiXrmen5+PyJOxU5zvBARvfmIevmdf56LuBIRn56I2NpeX64fvnTIfly9sHbn8x//4B9/+PPmqV+8/fOPh9t/+sXLn/zxXsTJn7zxyef3ns66AwAAQCmqqqo66W3+6fT+vtt2pwCAicj7/yrJj6vVarX6qdZ/6k5Xf9SF1k3VaPeaRURsNJepjxmcjgeAGbMRn7XdBVok/6L1I+KZtjsBTLVO2x3gSGxtry93Ur6d5v7gzG57/jvlnvw3Og/u7zhoOs7wNSaT+vnajF48f0B/FifUh2mS8+8O539zt32QnnfU+U/KQfkPdm99Kk7Ovzec/5A9+f8lImY2/+7I/EuV8+8/Tv4bvRne/uUPAAAAAMDxl//+f7Ll87/zT74qh/Ko879nJtQHAAAAAAAAAHjannT8vweM/wcAAABTq36vXvvr+w8//eygz2KrH7/RiXi2fv6JyfQPmELpZpmltvsBAAAAAAAAAAAAACXp717De6MTMRcRzy4tVVVVfzUN14/rSZefdaWvP5Ss7V/yAACw69MTQ/fydyIWIuJG+qy/uaWlpapaWFyqlqrF+Xw8O5hfqBYb72vztH5sfnCIA+L+oKq/2UJjuaZx75fHtQ9/v/q1BlXvEB2bjBYDB4CI2N0bbdkjHTNV9Vy0fZTDbLD9Hz+2fw6j7Z9TAAAA4OhVVVV10sd5n07n/LttdwoAmISFvP8fPi+gVqvVarX6+NVN1Wj3mkVEbDSXqY8ZDMcPADNmIz5ruwu0SP5F60fEqbY7AUy1Ttsd4Ehsba8vd1K+neb+II3vnq8F2ZP/Rmdnubz8qOk4w9eYTOrnazN68fwB/XlhQn2YJjn/7nD+N3fbB+l5R53/pByUf72eJ1voT9ty/r3h/Iccn/y7I/MvVc6//1j59+QPAAAAAABTLP/9/6Tzv3mVAQAAAAAAAGDmbG2vL+f7XvP5/y+PeF6nOef+z2Mj5985dP7u/z1Ocv7d4fyHLsjpNebvv/Uw/39vry9/vPavL+Xp1Oc/1xvUrz3X6fb66Zqfau6duB2rsRIX9j2/v6f94r72uT3tl8a0X97XPqjbF3P7uViOX8dqvP2gfX7MhVELY9qrMe05/57tv0g5/37jq85/KbV3hqa1+x919233zemo17n+9/+8vH/rmrzN6D1Yt6Z6/c620J+d/5NnBvGbuyt3zv3u1tranYuRJnsevRRp8pTl/OfSV87/lZd22/Pv/eb2ev+jwWPnPy02o39g/i815uv1fXXCfWtDzn+QvnL+eQ80evuf5fwP3v5fa6E/AAAAAAAAAAAAAAAA8ChVVe3cIno9Iq6l+3/aujcTAJisvP+vkvy4Wq1Wq9Xq41c3VaO92SxiYe8y9THD70d9MwBgmv03Iv7ZdidojfwLlj/vr55+pe3OABN194MPf3lrdXXlzt22ewIAAAAAAAAA/L/y+J9nGuM/71wHNDRu9J7xX9+KMzM7/md30NsZ6zyt0Ivx6PG/z8ajx//uj3m9uTHtgzHt82PaF8a0j7zRoyHn/2LKOOd/Oq1YSeO/vtJCf9qW8z+bxnrO+X9t6HnN/Ku/zXL+3T35n1977/3zdz/48PXb7916d+XdlV9dvHDtyuWrVy5fvXr+ndurKxd2/22xx0cr55/HvnYdaFly/jlz+Zcl5//VVMu/LDn/l1Mt/7Lk/PPxnvzLkvPP733kX5ac/6upln9Zcv5fT7X8y5Lzfy3V8i9Lzv8bqZZ/WXL+r6da/mXJ+Z9LtfzLkvM/n2r5lyXnn89wyb8sOf98ZYP8y5Lzv5Rq+Zcl53851fIvS87/SqrlX5ac/9VUy78sOf9rqZZ/WXL+30y1/MuS8/9WquVflpz/G6mWf1ly/t9OtfzLkvP/TqrlX5ac/3dTLf+y5Py/l2r5lyXn//1Uy78sOf83Uy3/sjz8/H8zZsyYyTNt/2YCAAAAAAAAAAAAAIZN4nLittcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgfO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrC3t3FyFXeZwA/+2WvDQluIIQQJ9jGgIGF3fUXOMRgkpBS0qaUhLRpSY1jr40Tf9W7TgChshTaEgWpSO0FvWiaRGkUqa1AUaSmEo2QGqm9K1eJuIlaiQtLhcpBSaVUga3OnPd9PTM7O7P+GPvMOb8fwn/vzJmZd86cmd1nrWcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGbrPzbz50NZluX/N/5Yk2WX5n9fle3Kv5zffrFXCAAAAJyrtxt//sNl6YRdy7hQ0zb/9qH/+P7CwsJC9oW3Tr7zlwsL6Yx1WTayMssa50X//stfLDRvEzydjQ8NN3093OPmR3qcP9rj/LEe56/ocf7KHueP9zh/0Q5YZFXx+5jGlW1s/HVNsUuzK7KxxnkbO1zq6aGVw8PxdzkNQ43LLIztzw5mh7KZbGrRZYYa/2XZy+vz27o3i7c13HRba7MsO/WzJ/bGNQyFfbwxa7mxhubH7s27s3Vv/eyJvd+Ze+P9nWbP3bBopVm2aUO+zmey7PSvq7KhbGXaJ3Gdw03rXNthnSMt6xxqXC7/e/s6Ty1znfF+j4d1vtplnWvDaY9em2XZfLbkNu2ezoaz1W23mvb3eHFE5NeRP5TvyUbP6DhZv4zjJL/M69e2Hiftx2Tc/+vDPhldYg3ND8ebT61YtN/P9jjJ73UZjtX8uu/Pb3R8vPlXqy3Har7NE9ctfQx0fOw6HAPpWG46Bjb0OgaGV4w0joHh02ve0HIMTC+6zHA21Litk9d1PwYm5w4fm5x97PFbDh7ec2DmwMyR6antW7ds27pl27bJ/QcPzUwVf57ZLh0gq7PhdAxuCK818Ri8oW3b5kNy4Zvn73kwXpLnQX7fP3N9vqBLh7MljvF8m2c2nfvzIH3fb3oejDY9Dzq+pnZ4Howu43mQb3Nq0/K+Z442/d9pDf16LVzTdAxczO+H+W0+dOPSr4Vrw7qevelMvx+OLDoG4t0aCs+9/JT089747WG/LD4urs7PuGRFdmJ25vitj+6Zmzs+nYVxQVze9Fi1Hy+rm+5Ttuh4GT7j42XX3//q+qs7nL4m7Kvxm7s/Vvk2Wye6P1aNV/fW/bkiK/Zny6mbszDOswu9Pzt9N8v3Z8oSXfZnvs0zt5z7z4IplzS9/o31ev0bGRstXv9G0t4Ya3n9W/zQjDRWlmWnblne699Y+P9Cv/5dUZLXv3xfPXRr92Mg3+bZyTM9Bka7vv5dG+ZQWM+NITGMN+X+dxrnzxeHadNj2fO4GR0dC8fNaLzF1uNmy6LL5NeW3/amqbM7bjZd2/pYtfzcUsHjJt9XfzXV/bjJt3ll+txfO1bFvza9dqzodQyMjazI1zuWDoLi9W5hVTwGbs32ZkezQ9m+dJn8Uc5va2Lz8o6BFeH/C/3acVVJjoF8X72wufsxkG/zoy3n92enTeGUtE3Tz07tv19YKvNfPXr6+tp32/nO/Pk6P/7jT6XTOmWIfJs3tp5pzui+n24Op1zSYT+1P3+WOqb3ZRdmP10V1nloW/ffTeXbXLF9mcfTrizLXpt+rfH7rvD73e+d+PH3W37v2+l3yq9Nv3bf5AM/OZP1AwBw9t5p/Dm/ovhZs+lfrJfz7/8AAADAQIi5fzjMRP4HAACAyoi5fyTMRP4HAACAyoi5fzTMpCb5/5Hbd7z49pNZejfAhSCeH3fD/XcW28WO93z4et3CafnpH/322ItffXJ5tz2cZdmv7vtAx+0fuTOuq3AsrvPDracvctU1y7r9hx88vV3z+yec2lFcf7w/yz0MYlf55cnNjetd99h0Y75yX9aYD8w/+3Rx/cXXcfuTW4rt/ya8acmu/UMtl98U1rMxzHXhPWXu33V6P+QzXu7FtR/618s/e/r24uWGNry7cTdf+OPieuN7RD1/ebF9vN9Lrf9fvvbdF/PtH72u8/qfHO68/pPhel8P85c7i+2b9/lXm9b/p2H98fbi5W791g87rv+l9xXbvxSOi2+E2b7+u//ig293erzi7ey6o7hcvP2p/93auFy8vnj97esff3K6ZX+0X/8rbxXXs/PLPx9p3j6eHm8neviO1uN7KDy+LT3yLMu++2dZy37OPlJc7p/b1h+v79gdndd/c9s6jw1d07j86fuzpuV+ff3vNne8v3E9u/5xTcv9ef6esP/emvxRfr0nHwjHYzj//14trq/9vUxfuqf19SZu/401xfM2Xt9k2/qfb1v//DX5vuu9/nvfKtb/0l0rW9a/6xPheLq3mL3Wf+BvL2u5/De/Uzwex78yceTo7ImD+5r2avPzeOX4qtWXXPqud18WXkvbv959dO6RmePrptZNZdm6AXzLwH6v/1th/k8x5s//LRR+8vPiuHvuk8X3rRt+UXz9fDj94fB4xu+PX//rsZbjtf1xn7+rmOe6/pvCOpbrfV/7r2uWteHJz7984p/+5I32nwvi/Tn23vHG/Xth/ZWN84ZeKc5vf73q5T/f2/q8/unoVGP+IOzXhfDOzBuuLG6v/frje5M89+ni+Rt/kouXz9reT2TNSOv9ONf1/zT8HPPDq1pf/+Lx8YMn297NeU02lC9hPrw+ZPPF+XGruL+fO3Vlx9uL78OTzb//TJa5pNnHZicPHTxy4tHJuZnZucnZxx7fffjoiSNzuxvvXbr7i70uf/r5vbrx/N43s31r1ni2Hy1Gn13s9R97cO++26au3zezf8+J/XMPHps5fmDv7OzemX2z1+/Zv3/mK70uf3DfzunNO7bctnniwMF9O2/fsWPLjomDR47myygW1cP2qS9NHDm+u3GR2Z1bd0xv27Z1auLw0X0zO2+bmpo40evyje9NE/mlvzxxfObQnrmDh2cmZg8+PrNzesf27Zt7vvvj4WP7Z9dNHj9xZPLE7MzxyeK+rJtrnJx/7+t1eeph9mh4vWszFH46/9zN29P74+a+/dSSV1Vs0vrjafZmeC+o+P2t19cx94+FmdQk/wMAAEAdxNwf3vj/9BnyPwAAAFRGzP0rw0zkfwAAAKiMmPuL5D+ePv69Lvn/fPX/n9L/b9D/1//P9P8T/X/9/0z/X/+/B/1//f9BXr/+v/4/vZWt/x9yf7Yqy/z7PwAAAFRUzP2rw0zkfwAAAKiMmPsvCTOR/wEAAKAyYu6/NMykJvnf5//r/+v/d+v/x231/zP9/zL0/zf+t/7/Ivr/+v+Z/v9Zu9j9+UFffwn7/6v0/ymbsvX/Y+5/V5hJTfI/AAAA1EHM/e8OM5H/AQAAoDJi7r8szET+BwAAgMqIuX9NmElN8r/+v/6//r/P/9f/H5j+v8//70D/X/8/0/8/axe7Pz/o6y9h/9/n/1M6Zev/x9z/a2EmNcn/AAAAUAcx978nzET+BwAAgMqIuf/yMBP5HwAAACoj5v4rwkxqkv/r2f9/Pcsy/f9M/1//v22d+v/6//2g/6//343+v/7/IK9f/1//n97K1v+Puf+9YSY1yf8AAABQBzH3XxlmIv8DAABAZcTc/74wE/kfAAAAKiPm/qvCTGqS/+vZ//f5//r/Bf3/1nXq/+v/94P+v/5/N/r/+v+DvH79f/1/eitb/z/m/veHmdQk/wMAAEAdxNx/dZiJ/A8AAACVEXP/B8JM5H8AAACojJj714aZ1CT/6//r/+v/6//r/+v/99Ng9f+HlzxH/7+g/9/q/PX/508vQP9/YNav/6//T29l6//H3P/BMJOa5H8AAACog5j7PxRmIv8DAABAZcTcf02YifwPAAAAlRFz/7owk5rkf/1//X/9f/1//X/9/34arP7/0vT/C/r/rXz+v/6//r/+P92Vrf8fc//6MJOa5H8AAACog5j7N4SZyP8AAABQGTH3XxtmIv8DAABAZcTcvzHMpCb5X/9f/1//X/9f/1//v5+q0f8f0v8P9P9b6f/r/+v/6//TXdn6/zH3XxdmUpP8DwAAAHUQc//1YSbyPwAAAFRGzP03hJnI/wAAAFAZMfdvCjOpSf7X/9f/1/8f4P7/iP5/pv9fetXo//v8/3iy/n8r/X/9f/1//X+6K1v/P+b+G8NMapL/AQAAoA5i7r8pzET+BwAAgMqIuf/mMBP5HwAAACoj5v6JMJOa5H/9f/1//f8B7v/7/P+W9ev/l5P+v/5/N/r/+v+DvH79f/1/eitb/z/m/lvCTGqS/wEAAKAOYu6/NcxE/gcAAIDKiLl/MsxE/gcAAIDKiLl/KsykJvlf/1//X/9f/1//X/+/n/T/W/v/4/r/LfT/9f8Hef36//r/9Fa2/n/M/dNhJjXJ/wAAAFAHMfdvDjOR/wEAAKAyYu7fEmYi/wMAAEBlxNy/NcykJvlf/78i/f9h/X/9f/1//f9y0v/3+f/d6P/r/w/y+vX/9f9pNdzhtLL1/2Pu3xZmUpP8DwAAAHUQc//2MBP5HwAAACoj5v7bwkzkfwAAAKiMmPtvDzOpSf7X/69I/9/n/+v/6//r/5eU/r/+fzf6//r/g7x+/X/9f3orW/8/5v4dYSY1yf8AAABQBzH3fzjMRP4HAACAyoi5/44wE/kfAAAABkqnzyGMYu7/SJhJTfK//n/V+/8LK/X/9f/1/7uvX/+/v/T/9f+70f/X/x/k9ev/6//TW9n6/zH37wwzqUn+BwAAgDqIuf/OMBP5HwAAACoj5v67wkzkfwAAAKiMmPt3hZnUJP/r/1e9/+/z//X/9f97rV//v7/0//X/u9H/H8z+f/ixRf+/RP3//BjS/6eMytb/j7n/7jCTmuR/AAAAqIOY+z8aZiL/AwAAQGXE3P+xMBP5HwAAACoj5v6Ph5nUJP/r/+v/6//r/+v/6//3k/5/3/r/jZdC/f+C/v/Zudj9+UFff5n6/z7/n7IqW/8/5v57wkyWCH6rlnUvAQAAgDKJuf8TYSY1+fd/AAAAqIOY+389zET+BwAAgMqIuf/eMJOa5H/9f/1//X/9f/1//f9+0v/3+f/d6P/r/w/y+vX/9f/prWz9/5j7fyPMpCb5HwAAAOog5v77wkzkfwAAAKiMmPs/GWYi/wMAAMCAWbHkOTH3/2aYSU3yv/7/hen/D6fr1//X/9f/1//X/z+f9P/1/zP9/7PWoz//TtvDv4j+v/6//j+9lK3/H3P/b4WZ1CT/AwAAQB3E3P+pMBP5HwAAACoj5v7fDjOR/wEAAKAyYu6/P8ykJvn/fPf/2y/fTZ36/z7/X/8/0//X/2/aq/r/54/+v/5/pv9/1i52f37Q16//r/9Pb2Xr/8fc/zthJjXJ/wAAAFAHMfc/EGYi/wMAAEBlxNz/6TAT+R8AAAAqI+b+z4SZ1CT/+/x//X/9f/1//X/9/37S/9f/70b/X/9/kNev/6//T29l6//H3P9gmElN8j8AAADUQcz9nw0zkf8BAACgMmLu/90wE/kfAAAAKiPm/t8LM6lJ/tf/1//X/9f/1//X/+8n/f/F/f/8NUz/v6D/r/8/yOvX/9f/p7ey9f9j7v9cmElN8j8AAADUQcz9vx9mIv8DAABAZcTc/wdhJvI/AAAAVEbM/Q+FmdQk/+v/6//r/+v/6//r//eT/r/P/+9G/1//f5DXr/+v/09vZev/x9z/+TCTmuR/AAAAqIOY+/8wzET+BwAAgMqIuX93mIn8DwAAAJURc//DYSY1yf/6//r/+v/6//r/+v/9pP+v/9+N/r/+/yCvX/9f/5/eytb/j7l/T5jJrtabAQAAAAZXzP1fCDOpyb//AwAAQB3E3L83zET+BwAAgMqIuX9fmElN8r/+v/6//r/+v/6//n8/6f/r/3ej/6//P8jr1//X/6e3svX/Y+6fCTOpSf4HAACAOoi5f3+YifwPAAAAlRFz/4EwE/kfAAAAKiPm/kfCTGqS//X/9f/1/2vb/3/1e23r1P/X/+8H/X/9/270//X/B3n9+v/6//RWtv5/zP0Hw0xqkv8BAACgDmLu/2KYSa/8P97PVQEAAADnU8z9Xwoz8e//AAAAUBkx9x8KM6lJ/tf/1//X/69t/9/n/wf6//2l/6//343+v/7/IK9f/1//n97K1v+Puf9wmElN8j8AAADUQcz9R8JM5H8AAACojJj7j4aZyP8AAABQGTH3HwszqUn+1/8/s/7/0BLdQP3/zuvX/9f/1//X/9f/1/9v1v7xSfr/+v+DvH79f/1/eitb/z/m/j8KM6lJ/gcAAIA6iLn/eJiJ/A8AAACVEXP/bJiJ/A8AAACVEXP/XJhJTfK//r/P/9f/1//X/9f/7yf9f/3/bvT/9f8Hef36//r/9Fa2/n/M/SfCTGqS/wEAAKAOYu7/f/buM1evq4rj8BsHk0iIOcAQGEGGwACQkJCYAF/oxaGHDqH3FnoLHUzvvYXeew+EHooESrzWsnF8z7n29Zu7z17P82XJ11jeCAT6C346D4xb7H8AAACYRu7+B8Ut9j8AAABMI3f/g+OWJvtf/6//1//r//X/+v990v/r/5fo//X/W36//l//z7rR+v/c/Q+JW5rsfwAAAOggd/9D4xb7HwAAAKaRu/9hcYv9DwAAANPI3f/wuKXJ/tf/6//1//p//b/+f5/0//r/Jfp//f+W36//1/+zbrT+P3f/I+KWJvsfAAAAOsjd/8i4xf4HAACAaeTuf1TcYv8DAADANHL3n4pbmux//b/+X/+v/9f/6//3Sf+v/1+i/5+v/7/rTv+v/9f/c9Zo/X/u/mvjlib7HwAAADrI3f/ouMX+BwAAgGnk7n9M3GL/AwAAwDRy9z82bmmy//X/+n/9v/5f/6//3yf9v/5/if5/vv7f9//1//p/zjVa/5+7/3FxS5P9DwAAAB3k7n983GL/AwAAwDRy9z8hbrH/AQAAYBq5+58YtzTZ//p//b/+X//frv8/7z8j9P/7pf/X/y/R/+v/t/x+/b/+n3V77//vfd3t97D9f+7+6+KWJvsfAAAAOsjd/6S4xf4HAACAaeTuf3LcYv8DAADANHL3PyVuabL/9f/6/7P9/3+v0P/r/1v0/+f9ffr//dL/6/+X6P/1/1t+v/5f/8+6vff/K73/+b/O3f/UuKXJ/gcAAIAOcvc/LW6x/wEAAGAaufufHrfY/wAAADCN3P3PiFua7H/9v/7f9//1//p//f8+6f/1/0v0//r/Lb9/qf+/5hDv1//TwWj9f+7+Z8YtTfY/AAAAdJC7/1lxi/0PAAAA08jdf33cYv8DAADANHL3PztuabL/9f/6f/2//v//+/8TLfv/236m/98P/b/+f4n+X/8/9vuvuMvSn/f9f/0/60br/3P3PyduabL/AQAAoIPc/c+NW+x/AAAAmEbu/ufFLfY/AAAATCN3//Pjlib7X/+v/9f/6/+P9P3/K+fo/33/f3/0//r/Jfr/+P1TZ/9+/f923q//1/+zbrT+P3f/C+KWJvsfAAAAOsjd/8K4xf4HAACAaeTuf1HcYv8DAADANHL3vzhuabL/9f/6f/2//v9I/f8k3//X/++P/l//v+Sw/f9u8v7f9/+3+X79v/6fdaP1/7n7XxK3NNn/AAAA0EHu/pfGLfY/AAAAbNJN5/1/2G6Tu/9lcYv9DwAAANPI3f/yuKXJ/tf/X9b+/8RO/6//1/8X/b/+f6f/1/+v8P1//f+W36//1/+zbrT+P3f/K+KWJvsfAAAAOsjd/8q4xf4HAACAaeTuf1XcYv8DAADANHL3vzpuabL/9f++/6//1//r//X/+6T/1/8v0f9fuP+/+oC/T/8/1vv1//p/1o3W/+fuvyFuabL/AQAAoIPc/a+JW+x/AAAAmEbu/tfGLfY/AAAATCN3/+vilib7/6D+/5a7nfl9/f/h6P8v/H79v/5f/6//1//r/5fo/33/f8vv1//r/1k3Wv+fu//1cUuT/Q8AAAAd5O5/Q9xi/wMAAMA0cve/MW6x/wEAAGAaufvfFLc02f+X//v/99D/6//1/3H1//p//b/+X/+/TP+v/9/y+/X/+n/Wjdb/5+5/c9zSZP8DAABAB7n73xK32P8AAAAwjdz9b41b7H8AAACYRu7+t8UtTfb/5e//ff9f/3+R/f8J/X/S/8e/rvp//f9F0P/r/3f6/0t23P381t+v/9f/s260/j93/41xS5P9DwAAAB3k7n973GL/AwAAwDRy978jbrH/AQAAYBq5+98ZtzTZ/3fs/6/Z6f/1/77/r/8/Q/+v/z86/b/+f4n+X/+/5ffr//X/rBut/8/d/664pcn+BwAAgA5y9787brH/AQAAYBq5+98Tt9j/AAAAMI3c/e+NW5rsf9//1//r/4fv/288/99v+n/9/5bo//X/S/T/+v8tv3+c/j9+cEr/z3hG6/9z978vbmmy/wEAAKCD3P3vj1vsfwAAAJhG7v7TcYv9DwAAANM4fes9H3Df+lW//a//33r/f7+b4wX6/3n7f9//j6v/1/9fiP5f/7/T/1+y4+7nt/7+cfp/3/9nXKP1/x+4/U9dvftg3NJk/wMAAEAHufs/FLfY/wAAADCN3P0fjlvsfwAAAJhG7v6PxC1N9r/+f+v9v+//6//1//r/sen/9f9L9P/6/y2/X/+v/2fdaP1/7v6Pxi1N9j8AAAB0kLv/Y3GL/Q8AAADTyN3/8bjF/gcAAIBp5O7/RNzSZP/r//X/+n/9/5H7/2v1/zv9/4H0//r/Jfp//f+W36//1/+zbrT+P3f/J+OWJvsfAAAAOsjd/6m4xf4HAACAaeTu/3TcYv8DAADANHL3fyZuuNfdj+9Jl9fJA34evbn+X/+v/9f/+/6//n+f9P/6/yX6f/3/lt+v/9f/s260/j93/2fjFv/7PwAAAEwjd//n4hb7HwAAAKaRu//zcYv9DwAAANPI3f+FuKXJ/tf/6//1//p//b/+f5/0//r/Jfp//f+W36//1/+zbrT+P3f/F+OWJvsfAAAAOsjd/6W4xf4HAACAaeTu/3LcYv8DAADANHL3fyVuabL/9f/6f/2//v+4+v/77PT/+v+j0//r/3f6/0t23P381t+v/9f/s260/j93/1fjlib7HwAAADrI3f+1uMX+BwAAgGnk7r8pbrH/AQAAYBq5+78etzTZ//p//b/+X//v+//6/33S/+v/l+j/9f9bfr/+X//PutH6/9z934hbmux/AAAA6CB3/zfjFvsfAAAAppG7/1txi/0PAAAA08jd/+24pcn+n7n/X/qH6f/P0P/r/3f6f/3/nun/9f9L9P/6/y2/X/+v/2fdaP1/7v7vxC1N9j8AAAB0kLv/u3GL/Q8AAADTyN3/vbjF/gcAAIBp5O7/ftzSZP/P3P8v0f+fof/X/+/0//r/PdP/6/+X6P/1/1t+v/5f/8+6Y+r/T+4O6P9z9/8gbmmy/wEAAKCD3P0/jFvsfwAAAJhG7v4fxS32PwAAAEwjd/+P45Z59v/9Ty/8pv5f/6//1//r//X/+6T/1/8v0f/r/7f8fv2//p91o33/P3f/T+KWefY/AAAAtJe7/6dxi/0PAAAA08jd/7O4xf4HAACAaeTu/3nc0mT/6//1//r/Vv3/lTv9v/7/Tqb/1/8v0f/r/7f8fv2//p91o/X/uft/Ebc02f8AAADQQe7+X8Yt9j8AAABMI3f/r+IW+x8AAACmkbv/13FLk/2v/9f/6/9b9f++/6//v9Pp//X/S/T/+v8tv1//r/9n3Wj9f+7+38QtTfY/AAAAdJC7/7dxi/0PAAAA08jd/7u4xf4HAACAaeTu/33c0mT/6//1//p//b/+X/+/T/p//f8S/b/+f8vv1//r/1k3Wv+fu//muKXJ/gcAAIAOcvf/IW6x/wEAAGAaufv/GLfY/wAAADCN3P23xC1N9r/+X/8/Zf9/lf5f/6//H4X+/1L6/0P+F6n+X/9/RMfdz2/9/fp//T/rRuv/c/f/KW5psv8BAACgg9z9f45b7H8AAACYRu7+v8Qt9j8AAABMI3f/X+OWJvtf/6//v/j+/2T98x62//f9f/2//n8Y+n/f/1/Svf+//oYzP9b/b/P9+n/9P+tG6/9z9/8tbmmy/wEAAKCD3P1/j1vsfwAAAJhG7v5/xC32PwAAAEwjd/+tcUuT/a//1/9P+f1//b/+X/8/DP3/bP3/Vfr/c/j+v/5f/6//Z9lo/X/u/n/GLU32PwAAAHSQu/9fcYv9DwAAANPI3f/vuMX+BwAAgGnk7v9P3NJk/+v/9f/6f/2//l//v0/6/9n6f9//P5f+X/+v/9f/s2y0/j93//8CAAD//+C7SbY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x101, 0x2000003, 0x1758}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) 1.496712525s ago: executing program 2 (id=319): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 1.407115006s ago: executing program 0 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e650962", 0x6, 0x2) 1.194156681s ago: executing program 2 (id=321): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000440)=r0}, 0x20) 1.104766244s ago: executing program 0 (id=322): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x8, "c4d02e39094de6f593870f4b00a606e687157a59420090c93a81650d64bed03b"}) dup3(r1, r0, 0x0) 1.018173016s ago: executing program 2 (id=323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 955.955687ms ago: executing program 0 (id=324): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x3ff, @private2, 0x1ff}]}, &(0x7f0000000b00)=0x10) 789.199111ms ago: executing program 2 (id=325): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) rmdir(&(0x7f0000000180)='./my_configfs/target/usb_gadget\x00') 574.394916ms ago: executing program 2 (id=326): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="2b040000000000000001000010fc8000000000000000000000000000bb0102000005021edd00000000d33fccff395f166e7cea3ea267db43e8c669a6d60da5939f3b6fcb353aca7d2a354012164769d3323adb97ca3583e89821d7da9dded53b37703d7d6871d1b1aeae71479a30bcde"], 0x30) 440.726919ms ago: executing program 1 (id=327): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x3, 0x4) 0s ago: executing program 0 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000', 0x2b) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. [ 73.806134][ T5765] cgroup: Unknown subsys name 'net' [ 73.967260][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.829710][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.445128][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.446051][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.453260][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.468476][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.470971][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.483399][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.483419][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.490917][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.505694][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.505827][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.513315][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.527675][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.536558][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.537128][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.549656][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.551894][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.557785][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.565934][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.599368][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.608729][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.616412][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.623592][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.631898][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.640229][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.022131][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 78.113462][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 78.188084][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 78.283418][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.291100][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.298315][ T5781] bridge_slave_0: entered allmulticast mode [ 78.305808][ T5781] bridge_slave_0: entered promiscuous mode [ 78.318964][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.326455][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.333644][ T5781] bridge_slave_1: entered allmulticast mode [ 78.341157][ T5781] bridge_slave_1: entered promiscuous mode [ 78.366005][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 78.385965][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.393171][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.402593][ T5778] bridge_slave_0: entered allmulticast mode [ 78.409374][ T5778] bridge_slave_0: entered promiscuous mode [ 78.445211][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.452785][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.460157][ T5778] bridge_slave_1: entered allmulticast mode [ 78.466906][ T5778] bridge_slave_1: entered promiscuous mode [ 78.500169][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.542836][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.564290][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.577134][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.627639][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.637514][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.644812][ T5779] bridge_slave_0: entered allmulticast mode [ 78.653464][ T5779] bridge_slave_0: entered promiscuous mode [ 78.664156][ T5781] team0: Port device team_slave_0 added [ 78.698250][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.705573][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.713086][ T5779] bridge_slave_1: entered allmulticast mode [ 78.720104][ T5779] bridge_slave_1: entered promiscuous mode [ 78.727982][ T5781] team0: Port device team_slave_1 added [ 78.739258][ T5778] team0: Port device team_slave_0 added [ 78.747847][ T5778] team0: Port device team_slave_1 added [ 78.803770][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.812857][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.820149][ T5777] bridge_slave_0: entered allmulticast mode [ 78.826955][ T5777] bridge_slave_0: entered promiscuous mode [ 78.855180][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.862196][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.888298][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.901094][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.908212][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.916212][ T5777] bridge_slave_1: entered allmulticast mode [ 78.923888][ T5777] bridge_slave_1: entered promiscuous mode [ 78.932584][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.945302][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.955767][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.965331][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.991574][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.003406][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.010806][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.037127][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.085896][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.092916][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.119456][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.158563][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.181406][ T5779] team0: Port device team_slave_0 added [ 79.207927][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.246479][ T5779] team0: Port device team_slave_1 added [ 79.279231][ T5781] hsr_slave_0: entered promiscuous mode [ 79.286188][ T5781] hsr_slave_1: entered promiscuous mode [ 79.296423][ T5777] team0: Port device team_slave_0 added [ 79.319023][ T5778] hsr_slave_0: entered promiscuous mode [ 79.327917][ T5778] hsr_slave_1: entered promiscuous mode [ 79.334407][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.342560][ T5778] Cannot create hsr debugfs directory [ 79.365715][ T5777] team0: Port device team_slave_1 added [ 79.372308][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.379271][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.408072][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.456428][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.463513][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.490731][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.572706][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.580015][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.606060][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.617372][ T51] Bluetooth: hci3: command tx timeout [ 79.622950][ T5789] Bluetooth: hci0: command tx timeout [ 79.647476][ T5779] hsr_slave_0: entered promiscuous mode [ 79.656869][ T5779] hsr_slave_1: entered promiscuous mode [ 79.663213][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.671830][ T5779] Cannot create hsr debugfs directory [ 79.678018][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.685139][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.711493][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.720664][ T5789] Bluetooth: hci1: command tx timeout [ 79.728284][ T51] Bluetooth: hci2: command tx timeout [ 79.812562][ T5777] hsr_slave_0: entered promiscuous mode [ 79.819770][ T5777] hsr_slave_1: entered promiscuous mode [ 79.825952][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.833877][ T5777] Cannot create hsr debugfs directory [ 80.144963][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.156198][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.170853][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.181343][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.248233][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.258585][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.279894][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.299867][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.368746][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.385085][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.395116][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.406818][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.512540][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.523069][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.544318][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.566377][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.575524][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.643667][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.695756][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.703523][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.735711][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.751945][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.773627][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.780809][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.839027][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.854936][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.871202][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.878312][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.907187][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.914368][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.942438][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.949618][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.968924][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.985014][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.992152][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.050120][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.087212][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.094484][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.149485][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.156654][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.204979][ T5779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.216445][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.535050][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.611886][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.690772][ T51] Bluetooth: hci3: command tx timeout [ 81.701533][ T51] Bluetooth: hci0: command tx timeout [ 81.721105][ T5778] veth0_vlan: entered promiscuous mode [ 81.758630][ T5781] veth0_vlan: entered promiscuous mode [ 81.781337][ T51] Bluetooth: hci2: command tx timeout [ 81.786804][ T51] Bluetooth: hci1: command tx timeout [ 81.798659][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.818595][ T5778] veth1_vlan: entered promiscuous mode [ 81.854719][ T5781] veth1_vlan: entered promiscuous mode [ 81.885033][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.926481][ T5778] veth0_macvtap: entered promiscuous mode [ 81.947010][ T5778] veth1_macvtap: entered promiscuous mode [ 81.981278][ T5779] veth0_vlan: entered promiscuous mode [ 81.993793][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.027597][ T5779] veth1_vlan: entered promiscuous mode [ 82.047106][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.059815][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.068679][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.077796][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.086623][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.113826][ T5781] veth0_macvtap: entered promiscuous mode [ 82.130746][ T5781] veth1_macvtap: entered promiscuous mode [ 82.148353][ T5777] veth0_vlan: entered promiscuous mode [ 82.166885][ T5777] veth1_vlan: entered promiscuous mode [ 82.231001][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.242739][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.254750][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.266818][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.277691][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.288972][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.324362][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.334807][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.349529][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.358257][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.385198][ T5779] veth0_macvtap: entered promiscuous mode [ 82.396134][ T5777] veth0_macvtap: entered promiscuous mode [ 82.428021][ T5777] veth1_macvtap: entered promiscuous mode [ 82.436506][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.452991][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.476273][ T5779] veth1_macvtap: entered promiscuous mode [ 82.486390][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.499015][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.510210][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.520763][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.532025][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.565014][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.576884][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.586841][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.597448][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.608855][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.651731][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.660769][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.676343][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.685383][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.702055][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.715985][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.726732][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.738798][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.748716][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.759403][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.770966][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.779084][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.799498][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.828473][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.847448][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.858306][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.869288][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.879881][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.890908][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.903145][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.938821][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.949838][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.964630][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.977744][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.986629][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.995700][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.092344][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.119126][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.127908][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.154845][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.244247][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.271526][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.280673][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.303354][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.452338][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.470802][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.519891][ T5844] syz.0.5[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.626266][ T5844] loop0: detected capacity change from 0 to 512 [ 83.666662][ T5844] ======================================================= [ 83.666662][ T5844] WARNING: The mand mount option has been deprecated and [ 83.666662][ T5844] and is ignored by this kernel. Remove the mand [ 83.666662][ T5844] option from the mount to silence this warning. [ 83.666662][ T5844] ======================================================= [ 83.781616][ T51] Bluetooth: hci0: command tx timeout [ 83.787089][ T51] Bluetooth: hci3: command tx timeout [ 83.799533][ T5844] EXT4-fs (loop0): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 83.860237][ T5789] Bluetooth: hci2: command tx timeout [ 83.865861][ T51] Bluetooth: hci1: command tx timeout [ 84.477771][ T5863] loop2: detected capacity change from 0 to 4096 [ 84.505467][ T5863] EXT4-fs: inline encryption not supported [ 84.518074][ T5863] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.536057][ T5863] EXT4-fs (loop2): Test dummy encryption mode enabled [ 84.548121][ T5863] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 84.558410][ T5863] System zones: 0-5 [ 84.602190][ T5863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.744647][ T5874] loop0: detected capacity change from 0 to 128 [ 84.825793][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.867628][ T28] audit: type=1800 audit(1788887044.657:2): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=1048592 res=0 errno=0 [ 84.896860][ T5874] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 84.926502][ T5874] FAT-fs (loop0): Filesystem has been set read-only [ 84.938692][ T5874] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 84.948417][ T5874] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 52) [ 85.086593][ T5878] ipvlan0: entered promiscuous mode [ 85.094963][ T5878] ipvlan0: left promiscuous mode [ 85.588032][ T5888] netlink: 52 bytes leftover after parsing attributes in process `syz.3.24'. [ 85.655279][ T5857] loop1: detected capacity change from 0 to 40427 [ 85.693443][ T5857] F2FS-fs (loop1): invalid crc value [ 85.721086][ T5857] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.840264][ T5895] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.861477][ T51] Bluetooth: hci3: command tx timeout [ 85.866944][ T51] Bluetooth: hci0: command tx timeout [ 85.940163][ T5857] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.940246][ T5789] Bluetooth: hci2: command tx timeout [ 85.953228][ T51] Bluetooth: hci1: command tx timeout [ 86.255145][ T5781] syz-executor: attempt to access beyond end of device [ 86.255145][ T5781] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.285144][ T5781] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 86.331543][ T5911] MTRR 1 not used [ 86.732015][ T5916] capability: warning: `syz.0.34' uses 32-bit capabilities (legacy support in use) [ 87.163805][ T5908] loop2: detected capacity change from 0 to 32768 [ 87.293704][ T5903] loop3: detected capacity change from 0 to 40427 [ 87.314272][ T5908] JBD2: Ignoring recovery information on journal [ 87.345493][ T5908] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 87.354511][ T5908] JBD2: bad block at offset 32 [ 87.390463][ T5903] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 87.412052][ T5903] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x30e4 [ 87.425002][ T5908] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 87.440841][ T5903] F2FS-fs (loop3): invalid crc value [ 87.474965][ T5903] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.626053][ T5903] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 87.679920][ T5908] (syz.2.29,5908,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=3344, inode=0, rec_len=0, name_len=0 [ 87.769264][ T5903] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 87.801696][ T5933] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 87.938945][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 87.971736][ T5903] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 88.071118][ T5903] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xd7/0x5d0 [ 88.222734][ T5779] syz-executor: attempt to access beyond end of device [ 88.222734][ T5779] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.300322][ T5779] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 88.411312][ T5940] IPv6: NLM_F_CREATE should be specified when creating new route [ 88.419220][ T5940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.426740][ T5940] IPv6: NLM_F_CREATE should be set when creating new route [ 88.434086][ T5940] IPv6: NLM_F_CREATE should be set when creating new route [ 88.441375][ T5940] IPv6: NLM_F_CREATE should be set when creating new route [ 88.539889][ T5940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.580210][ T5940] Zero length message leads to an empty skb [ 88.981002][ T5944] syz.0.45 (5944) used greatest stack depth: 20696 bytes left [ 89.022294][ T5951] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd83 [ 89.242965][ T5954] loop0: detected capacity change from 0 to 512 [ 89.303834][ T5954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.407144][ T5963] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.480649][ T5954] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.502961][ T2179] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.664968][ T5947] loop2: detected capacity change from 0 to 32768 [ 89.701930][ T5947] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.47 (5947) [ 89.737782][ T2179] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 89.760873][ T2179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.822365][ T2179] usb 2-1: config 0 descriptor?? [ 89.851468][ T2179] cp210x 2-1:0.0: cp210x converter detected [ 89.871923][ T5947] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.888215][ T5947] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 89.900291][ T5947] BTRFS info (device loop2): metadata ratio 220 [ 89.906639][ T5947] BTRFS info (device loop2): setting nodatasum [ 89.913701][ T5947] BTRFS info (device loop2): metadata ratio 4 [ 89.920285][ T5947] BTRFS info (device loop2): enabling ssd optimizations [ 89.949696][ T5947] BTRFS info (device loop2): allowing degraded mounts [ 89.961507][ T5947] BTRFS info (device loop2): using free space tree [ 90.139576][ T5947] BTRFS info (device loop2): auto enabling async discard [ 90.269570][ T2179] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 90.348877][ T28] audit: type=1800 audit(1788887050.137:3): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.47" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 90.466450][ T5994] loop3: detected capacity change from 0 to 2048 [ 90.507165][ T2179] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 90.539483][ T2179] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 90.570413][ T2179] usb 2-1: cp210x converter now attached to ttyUSB0 [ 90.586891][ T5994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.657057][ T2179] usb 2-1: USB disconnect, device number 2 [ 90.717541][ T2179] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 90.734336][ T5994] EXT4-fs error (device loop3): ext4_ext_precache:639: inode #2: comm syz.3.58: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 90.767246][ T2179] cp210x 2-1:0.0: device disconnected [ 90.874994][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.937273][ T5777] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 91.773350][ T6021] loop2: detected capacity change from 0 to 2048 [ 91.870985][ T6021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.100856][ T9] cfg80211: failed to load regulatory.db [ 92.145385][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.244881][ T6015] loop0: detected capacity change from 0 to 32768 [ 92.259275][ T6015] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.67 (6015) [ 92.442198][ T6015] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 92.449394][ T6034] loop2: detected capacity change from 0 to 1024 [ 92.463741][ T6015] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 92.470961][ T6034] EXT4-fs: Ignoring removed bh option [ 92.499762][ T6015] BTRFS info (device loop0): using free space tree [ 92.540664][ T6036] loop1: detected capacity change from 0 to 1024 [ 92.601601][ T6034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.660101][ T6036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.706456][ T6015] BTRFS info (device loop0): enabling ssd optimizations [ 92.727834][ T6055] udc dummy_udc.0: soft-connect without a gadget driver [ 92.750126][ T6015] BTRFS info (device loop0): auto enabling async discard [ 92.751531][ T6034] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 92.792108][ T6034] EXT4-fs error (device loop2): ext4_check_all_de:666: inode #12: block 7: comm syz.2.72: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 92.811574][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.887354][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.060067][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.081847][ T5778] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 93.108736][ T6059] loop3: detected capacity change from 0 to 2048 [ 93.237737][ T6059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.347215][ T28] audit: type=1800 audit(1788887053.137:4): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.78" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 94.782727][ T6095] warning: `syz.0.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.999588][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.056613][ T6099] loop2: detected capacity change from 0 to 2048 [ 95.210256][ T9] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 95.218421][ T9] usb 2-1: config 0 has no interface number 0 [ 95.250559][ T9] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.281042][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 95.304899][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.313562][ T6107] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.97'. [ 95.314256][ T9] usb 2-1: Product: syz [ 95.329675][ T9] usb 2-1: Manufacturer: syz [ 95.345739][ T9] usb 2-1: SerialNumber: syz [ 95.352653][ T6108] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.97'. [ 95.381158][ T9] usb 2-1: config 0 descriptor?? [ 95.423345][ T9] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 95.692562][ T6026] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 95.710268][ T9] usb 2-1: USB disconnect, device number 3 [ 95.738456][ T9] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 96.423493][ T6137] mmap: syz.2.111 (6137) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.492794][ T6136] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 97.663133][ T23] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 97.694662][ T23] wiimote 0005:057E:0306.0001: New device registered [ 97.939670][ T5901] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.168703][ T5901] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 98.186607][ T5901] usb 2-1: config 1 has no interface number 0 [ 98.196922][ T5901] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 98.222962][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.279668][ T5901] usb 2-1: Product: syz [ 98.284696][ T5901] usb 2-1: Manufacturer: syz [ 98.289349][ T5901] usb 2-1: SerialNumber: syz [ 98.549727][ T6165] wiimote 0005:057E:0306.0001: Unhandled report 0 size 6 [ 98.575662][ T5901] usb 2-1: cannot find UAC_HEADER [ 98.581032][ T6164] wiimote 0005:057E:0306.0001: Device removed [ 98.665301][ T6178] loop0: detected capacity change from 0 to 8192 [ 98.716406][ T6178] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 98.740657][ T2179] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 98.752524][ T5901] snd-usb-audio: probe of 2-1:1.3 failed with error -22 [ 98.766852][ T6178] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 98.776490][ T6178] REISERFS (device loop0): using ordered data mode [ 98.785996][ T6178] reiserfs: using flush barriers [ 98.798282][ T6178] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.804760][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.831254][ T6178] REISERFS (device loop0): checking transaction log (loop0) [ 98.849021][ T6178] REISERFS (device loop0): Using r5 hash to sort names [ 98.849963][ T5901] usb 2-1: USB disconnect, device number 4 [ 98.859112][ T6178] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 98.903858][ T2179] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 98.964223][ T2179] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input8 [ 99.024808][ T2179] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 99.368841][ T6195] netlink: 'syz.3.136': attribute type 3 has an invalid length. [ 99.403722][ T6195] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.136'. [ 99.751416][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 99.768855][ T6206] ipvlan2: entered allmulticast mode [ 99.779843][ T6206] syz_tun: entered allmulticast mode [ 99.990583][ T6212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.143'. [ 101.309161][ T6249] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 101.321518][ T6249] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 102.077480][ T6270] netlink: 132 bytes leftover after parsing attributes in process `syz.3.170'. [ 102.267223][ T8] smpboot: CPU 1 is now offline [ 102.585594][ T6279] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 104.173714][ T6305] loop0: detected capacity change from 0 to 256 [ 104.228415][ T6305] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 104.332727][ T6301] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 105.939041][ T6336] loop0: detected capacity change from 0 to 40427 [ 105.989553][ T6336] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 106.029021][ T6336] F2FS-fs (loop0): invalid crc value [ 106.052539][ T6336] F2FS-fs (loop0): Found nat_bits in checkpoint [ 106.242915][ T6336] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 106.294264][ T6343] program syz.2.203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.470142][ T6336] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0 [ 106.558940][ T6346] f2fs_ckpt-7:0: attempt to access beyond end of device [ 106.558940][ T6346] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.584228][ T6348] loop2: detected capacity change from 0 to 128 [ 106.646949][ T6350] F2FS-fs (loop0): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 106.689022][ T6346] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 106.701495][ T6348] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.794229][ T6348] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.983900][ T6348] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 107.010342][ T6357] loop1: detected capacity change from 0 to 512 [ 107.082059][ T6357] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.208: iget: bad extended attribute block 134217728 [ 107.153329][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.172495][ T6357] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.208: couldn't read orphan inode 15 (err -117) [ 107.234357][ T6357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.377830][ T6363] block2mtd: illegal erase size [ 107.554842][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.821575][ T6371] loop1: detected capacity change from 0 to 512 [ 110.644892][ T6406] loop2: detected capacity change from 0 to 32768 [ 110.698499][ T6406] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.231 (6406) [ 110.800339][ T6406] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.897509][ T6406] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 110.972581][ T6406] BTRFS info (device loop2): force clearing of disk cache [ 111.029576][ T6406] BTRFS info (device loop2): setting nodatacow, compression disabled [ 111.079588][ T6406] BTRFS info (device loop2): enabling auto defrag [ 111.109126][ T6406] BTRFS info (device loop2): max_inline at 0 [ 111.125180][ T6412] loop0: detected capacity change from 0 to 32768 [ 111.151976][ T6406] BTRFS info (device loop2): enabling disk space caching [ 111.199569][ T6406] BTRFS info (device loop2): disk space caching is enabled [ 111.321643][ T6412] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 111.441892][ T6406] BTRFS info (device loop2): enabling ssd optimizations [ 111.495350][ T6412] XFS (loop0): Ending clean mount [ 111.505206][ T6406] BTRFS info (device loop2): rebuilding free space tree [ 111.670519][ T6406] BTRFS info (device loop2): disabling free space tree [ 111.720670][ T6406] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.792856][ T6406] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.908572][ T5778] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 112.477582][ T28] audit: type=1326 audit(1788887073.273:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.3.244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc31b9e159 code=0x0 [ 112.809351][ T5777] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.974741][ T6471] loop1: detected capacity change from 0 to 164 [ 113.680482][ T5767] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 113.903076][ T5767] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.933912][ T5767] usb 1-1: config 0 has no interface number 0 [ 113.980283][ T5767] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.044713][ T5767] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.108188][ T5767] usb 1-1: config 0 interface 1 has no altsetting 0 [ 114.149494][ T5767] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 114.219807][ T5767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.268467][ T5767] usb 1-1: config 0 descriptor?? [ 114.765350][ T6503] device-mapper: ioctl: name not supplied when creating device [ 114.947229][ T5767] uclogic 0003:2179:0053.0002: pen parameters not found [ 114.991939][ T5767] uclogic 0003:2179:0053.0002: interface is invalid, ignoring [ 115.059705][ T5767] usb 1-1: USB disconnect, device number 2 [ 115.200741][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 115.689087][ T6519] loop0: detected capacity change from 0 to 164 [ 116.265928][ T6532] block device autoloading is deprecated and will be removed. [ 116.317005][ T6532] syz.2.273: attempt to access beyond end of device [ 116.317005][ T6532] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 116.421071][ T5767] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 116.662025][ T5767] usb 1-1: config 0 has no interfaces? [ 116.667537][ T5767] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 116.729067][ T5767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.791397][ T5767] usb 1-1: config 0 descriptor?? [ 117.026975][ T6528] loop1: detected capacity change from 0 to 32768 [ 117.188674][ T6528] JBD2: Ignoring recovery information on journal [ 117.324459][ T8] usb 1-1: USB disconnect, device number 3 [ 117.367664][ T6528] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 117.688243][ T5781] ocfs2: Unmounting device (7,1) on (node local) [ 118.181161][ T6559] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 118.721961][ T6571] pimreg0: tun_chr_ioctl cmd 2147767506 [ 120.583094][ T6613] loop1: detected capacity change from 0 to 1024 [ 121.803707][ T6634] loop2: detected capacity change from 0 to 512 [ 121.864966][ T6634] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 121.974222][ T6634] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #17: comm syz.2.317: iget: immutable or append flags not allowed on symlinks [ 122.051850][ T6634] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.317: couldn't read orphan inode 17 (err -117) [ 122.104621][ T6634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.307527][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.843399][ T6636] loop1: detected capacity change from 0 to 32768 [ 131.773650][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.780835][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.498892][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.506561][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.700520][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 201.706564][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 201.712682][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 237.532163][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 255.932266][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.938588][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.332418][ T29] INFO: task kworker/u4:10:3500 blocked for more than 143 seconds. [ 278.341902][ T29] Not tainted syzkaller #0 [ 278.346846][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.358503][ T29] task:kworker/u4:10 state:D stack:22568 pid:3500 ppid:2 flags:0x00004000 [ 278.368005][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 278.374234][ T29] Call Trace: [ 278.377514][ T29] [ 278.382952][ T29] __schedule+0x15ae/0x4660 [ 278.387593][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 278.394227][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 278.403041][ T29] ? mark_lock+0x94/0x320 [ 278.407374][ T29] ? asan.module_dtor+0x20/0x20 [ 278.414108][ T29] ? blk_check_plugged+0x250/0x250 [ 278.419247][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 278.427844][ T29] ? wq_worker_sleeping+0x63/0x240 [ 278.433391][ T29] schedule+0xbd/0x170 [ 278.437473][ T29] io_schedule+0x80/0xd0 [ 278.447940][ T29] bit_wait_io+0x11/0xd0 [ 278.452421][ T29] __wait_on_bit+0x9f/0x2c0 [ 278.456931][ T29] ? bit_wait+0xd0/0xd0 [ 278.463660][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 278.469127][ T29] ? bit_wait+0xd0/0xd0 [ 278.473514][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 278.478286][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 278.485919][ T29] ? bit_waitqueue+0x30/0x30 [ 278.491206][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 278.496416][ T29] do_get_write_access+0x5c9/0xe00 [ 278.504439][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 278.510604][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 278.516769][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 278.525831][ T29] ? __might_sleep+0xe0/0xe0 [ 278.531007][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 278.536567][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 278.546030][ T29] ext4_dirty_inode+0xcb/0x110 [ 278.552650][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 278.558467][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 278.566043][ T29] ext4_da_update_reserve_space+0x2d0/0x720 [ 278.572754][ T29] ? ext4_ext_find_goal+0xed/0x1d0 [ 278.577869][ T29] ext4_ext_map_blocks+0x1ba1/0x68c0 [ 278.585710][ T29] ? __might_sleep+0xe0/0xe0 [ 278.590463][ T29] ? ext4_ext_release+0x10/0x10 [ 278.595336][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 278.602921][ T29] ? ext4_es_lookup_extent+0x601/0x9f0 [ 278.608390][ T29] ext4_map_blocks+0x9db/0x1a90 [ 278.613671][ T29] ? ext4_issue_zeroout+0x250/0x250 [ 278.618875][ T29] ? rcu_is_watching+0x15/0xb0 [ 278.626206][ T29] ? ext4_inode_journal_mode+0x376/0x460 [ 278.632100][ T29] ext4_do_writepages+0x1463/0x3990 [ 278.637345][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 278.648973][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 278.655081][ T29] ? __lock_acquire+0x1336/0x7d80 [ 278.664168][ T29] ext4_writepages+0x1dd/0x350 [ 278.668942][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 278.674225][ T29] ? reacquire_held_locks+0x31f/0x5c0 [ 278.682058][ T29] ? writeback_sb_inodes+0x35e/0x1020 [ 278.687438][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 278.692869][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 278.697805][ T29] do_writepages+0x351/0x590 [ 278.705261][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 278.711518][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 278.716911][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 278.724855][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 278.730144][ T29] __writeback_single_inode+0x14e/0xee0 [ 278.735716][ T29] writeback_sb_inodes+0x813/0x1020 [ 278.744328][ T29] ? queue_io+0x530/0x530 [ 278.751174][ T29] __writeback_inodes_wb+0x114/0x240 [ 278.756482][ T29] wb_writeback+0x472/0xbe0 [ 278.763606][ T29] ? queue_io+0x391/0x530 [ 278.767969][ T29] ? percpu_ref_tryget+0x250/0x250 [ 278.775145][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 278.784129][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 278.789179][ T29] wb_workfn+0xad7/0xe60 [ 278.793772][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 278.802037][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 278.808026][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 278.814024][ T29] ? read_lock_is_recursive+0x20/0x20 [ 278.819738][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.824941][ T29] ? process_scheduled_works+0x975/0x1600 [ 278.833265][ T29] ? process_scheduled_works+0x975/0x1600 [ 278.838990][ T29] process_scheduled_works+0xa60/0x1600 [ 278.844807][ T29] ? worker_attach_to_pool+0x370/0x370 [ 278.854291][ T29] ? assign_work+0x3cc/0x5d0 [ 278.858901][ T29] worker_thread+0xa5e/0xfe0 [ 278.864511][ T29] kthread+0x2fa/0x390 [ 278.868586][ T29] ? pr_cont_work+0x550/0x550 [ 278.875834][ T29] ? kthread_blkcg+0xd0/0xd0 [ 278.882288][ T29] ret_from_fork+0x48/0x80 [ 278.886803][ T29] ? kthread_blkcg+0xd0/0xd0 [ 278.893981][ T29] ret_from_fork_asm+0x11/0x20 [ 278.898772][ T29] [ 278.902074][ T29] INFO: task jbd2/sda1-8:5105 blocked for more than 143 seconds. [ 278.912318][ T29] Not tainted syzkaller #0 [ 278.917251][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.926168][ T29] task:jbd2/sda1-8 state:D stack:25736 pid:5105 ppid:2 flags:0x00004000 [ 278.935595][ T29] Call Trace: [ 278.938878][ T29] [ 278.944476][ T29] __schedule+0x15ae/0x4660 [ 278.949001][ T29] ? asan.module_dtor+0x20/0x20 [ 278.955610][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 278.963115][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 278.969009][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 278.976104][ T29] schedule+0xbd/0x170 [ 278.982794][ T29] io_schedule+0x80/0xd0 [ 278.987065][ T29] bit_wait_io+0x11/0xd0 [ 278.991656][ T29] __wait_on_bit+0x9f/0x2c0 [ 278.996186][ T29] ? bit_wait+0xd0/0xd0 [ 279.004795][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 279.010605][ T29] ? bit_wait+0xd0/0xd0 [ 279.014768][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 279.022075][ T29] ? do_raw_write_lock+0x11e/0x260 [ 279.027194][ T29] ? bit_waitqueue+0x30/0x30 [ 279.032094][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 279.037129][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 279.046158][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 279.055860][ T29] ? lock_chain_count+0x20/0x20 [ 279.063278][ T29] ? _raw_spin_unlock+0x40/0x40 [ 279.068166][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 279.074072][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 279.082574][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 279.087608][ T29] ? timer_delete_sync+0x20/0x20 [ 279.092769][ T29] ? do_raw_read_unlock+0x80/0x80 [ 279.097802][ T29] ? prepare_to_wait+0x1aa/0x200 [ 279.105279][ T29] kjournald2+0x40f/0x810 [ 279.111906][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 279.117113][ T29] ? wake_bit_function+0x200/0x200 [ 279.124731][ T29] ? _raw_spin_unlock+0x40/0x40 [ 279.130569][ T29] ? __kthread_parkme+0x71/0x1c0 [ 279.135513][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 279.143073][ T29] kthread+0x2fa/0x390 [ 279.147142][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 279.152574][ T29] ? kthread_blkcg+0xd0/0xd0 [ 279.158003][ T29] ret_from_fork+0x48/0x80 [ 279.165870][ T29] ? kthread_blkcg+0xd0/0xd0 [ 279.170641][ T29] ret_from_fork_asm+0x11/0x20 [ 279.175417][ T29] [ 279.178457][ T29] INFO: task syz-executor:5765 blocked for more than 144 seconds. [ 279.188936][ T29] Not tainted syzkaller #0 [ 279.194165][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.205906][ T29] task:syz-executor state:D stack:22408 pid:5765 ppid:5764 flags:0x00004002 [ 279.215926][ T29] Call Trace: [ 279.219210][ T29] [ 279.226383][ T29] __schedule+0x15ae/0x4660 [ 279.231094][ T29] ? mark_lock+0x94/0x320 [ 279.235429][ T29] ? asan.module_dtor+0x20/0x20 [ 279.242928][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 279.247961][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 279.254178][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 279.263364][ T29] schedule+0xbd/0x170 [ 279.267449][ T29] io_schedule+0x80/0xd0 [ 279.272030][ T29] bit_wait_io+0x11/0xd0 [ 279.276277][ T29] __wait_on_bit+0x9f/0x2c0 [ 279.283654][ T29] ? bit_wait+0xd0/0xd0 [ 279.287822][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 279.298001][ T29] ? bit_wait+0xd0/0xd0 [ 279.304645][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 279.310270][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 279.315302][ T29] ? bit_waitqueue+0x30/0x30 [ 279.322563][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 279.327770][ T29] do_get_write_access+0x5c9/0xe00 [ 279.335313][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 279.343845][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 279.350164][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 279.356325][ T29] ? __might_sleep+0xe0/0xe0 [ 279.364983][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 279.371234][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 279.376732][ T29] ext4_dirty_inode+0xcb/0x110 [ 279.384228][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 279.390218][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 279.395274][ T29] file_update_time+0x187/0x1a0 [ 279.402685][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 279.407724][ T29] ? do_wp_page+0x4ce/0x34d0 [ 279.412569][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 279.418815][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 279.424147][ T29] do_page_mkwrite+0x153/0x3f0 [ 279.428914][ T29] do_wp_page+0xd4d/0x34d0 [ 279.436545][ T29] ? folio_put+0xd0/0xd0 [ 279.442665][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 279.447702][ T29] ? __rwlock_init+0x150/0x150 [ 279.455838][ T29] handle_mm_fault+0x1306/0x4a50 [ 279.460951][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 279.466667][ T29] ? numa_migrate_prep+0x350/0x350 [ 279.475526][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 279.481015][ T29] do_user_addr_fault+0x736/0x12d0 [ 279.486136][ T29] exc_page_fault+0x64/0x100 [ 279.493403][ T29] ? clear_bhb_loop+0x40/0x90 [ 279.498084][ T29] asm_exc_page_fault+0x26/0x30 [ 279.503193][ T29] RIP: 0033:0x7fad3e67c6e2 [ 279.507610][ T29] RSP: 002b:00007ffe5f6cce10 EFLAGS: 00010202 [ 279.516217][ T29] RAX: 00007fad3c5a0000 RBX: 0000555591484fc0 RCX: 0000000000000005 [ 279.524518][ T29] RDX: 00000000000020da RSI: 000055559147c888 RDI: 0000000000000020 [ 279.535634][ T29] RBP: 00007ffe5f6cd310 R08: 000055559147c948 R09: 0000000000000091 [ 279.543962][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe5f6cd150 [ 279.556818][ T29] R13: 00007ffe5f6ccf40 R14: 585858582e7a7973 R15: 00007ffe5f6cce90 [ 279.565037][ T29] [ 279.572079][ T29] INFO: task syz.3.316:6630 blocked for more than 144 seconds. [ 279.579846][ T29] Not tainted syzkaller #0 [ 279.584779][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.599807][ T29] task:syz.3.316 state:D stack:23720 pid:6630 ppid:5779 flags:0x00004004 [ 279.609018][ T29] Call Trace: [ 279.614944][ T29] [ 279.617881][ T29] __schedule+0x15ae/0x4660 [ 279.623242][ T29] ? mark_lock+0x94/0x320 [ 279.627584][ T29] ? asan.module_dtor+0x20/0x20 [ 279.634406][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 279.639618][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 279.645514][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 279.653191][ T29] schedule+0xbd/0x170 [ 279.657270][ T29] io_schedule+0x80/0xd0 [ 279.664858][ T29] bit_wait_io+0x11/0xd0 [ 279.673194][ T29] __wait_on_bit+0x9f/0x2c0 [ 279.677723][ T29] ? bit_wait+0xd0/0xd0 [ 279.682141][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 279.687607][ T29] ? bit_wait+0xd0/0xd0 [ 279.696001][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 279.700937][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 279.705967][ T29] ? bit_waitqueue+0x30/0x30 [ 279.713136][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 279.718347][ T29] do_get_write_access+0x5c9/0xe00 [ 279.723916][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 279.732380][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 279.738548][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 279.744978][ T29] ? __might_sleep+0xe0/0xe0 [ 279.752355][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 279.757916][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 279.763714][ T29] ext4_dirty_inode+0xcb/0x110 [ 279.768483][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 279.779880][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 279.784926][ T29] file_update_time+0x187/0x1a0 [ 279.791946][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 279.796979][ T29] ? filemap_fault+0x103c/0x1540 [ 279.802184][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 279.807908][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 279.816809][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 279.822041][ T29] ? __pte_offset_map+0x20d/0x280 [ 279.827069][ T29] do_page_mkwrite+0x153/0x3f0 [ 279.834481][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 279.839592][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 279.844537][ T29] ? numa_migrate_prep+0x350/0x350 [ 279.854013][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 279.859323][ T29] do_user_addr_fault+0x736/0x12d0 [ 279.864713][ T29] exc_page_fault+0x64/0x100 [ 279.869304][ T29] asm_exc_page_fault+0x26/0x30 [ 279.878218][ T29] RIP: 0033:0x7fcc31a72f32 [ 279.885020][ T29] RSP: 002b:00007ffee95619b0 EFLAGS: 00010202 [ 279.893616][ T29] RAX: 000000000000c008 RBX: 00007fcc32955720 RCX: 0000000000000000 [ 279.901836][ T29] RDX: 0000001b2e218000 RSI: 0000000000000008 RDI: 00007fcc32955720 [ 279.912316][ T29] RBP: 0000000000000622 R08: 00007fcc31e10000 R09: 00007fcc31e26038 [ 279.920501][ T29] R10: 0000000000000001 R11: 0000000000000003 R12: ffffffff81d8841e [ 279.928474][ T29] R13: 00007fcc31e26038 R14: 00000000000001cf R15: ffffffffffff4000 [ 279.939700][ T29] ? zswap_store+0x33e/0x1e70 [ 279.944398][ T29] [ 279.948634][ T29] INFO: task syz.2.326:6655 blocked for more than 144 seconds. [ 279.957029][ T29] Not tainted syzkaller #0 [ 279.963877][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.973176][ T29] task:syz.2.326 state:D stack:27048 pid:6655 ppid:5777 flags:0x00004004 [ 279.985748][ T29] Call Trace: [ 279.989034][ T29] [ 279.995046][ T29] __schedule+0x15ae/0x4660 [ 280.001983][ T29] ? mark_lock+0x94/0x320 [ 280.006319][ T29] ? asan.module_dtor+0x20/0x20 [ 280.014368][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 280.021467][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 280.027367][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 280.033595][ T29] schedule+0xbd/0x170 [ 280.037670][ T29] io_schedule+0x80/0xd0 [ 280.043872][ T29] bit_wait_io+0x11/0xd0 [ 280.048118][ T29] __wait_on_bit+0x9f/0x2c0 [ 280.053533][ T29] ? bit_wait+0xd0/0xd0 [ 280.057699][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 280.065117][ T29] ? bit_wait+0xd0/0xd0 [ 280.069280][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 280.074892][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 280.083369][ T29] ? bit_waitqueue+0x30/0x30 [ 280.087968][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 280.095295][ T29] do_get_write_access+0x5c9/0xe00 [ 280.104476][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 280.111697][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 280.117864][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 280.126024][ T29] ? __might_sleep+0xe0/0xe0 [ 280.131474][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 280.137032][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 280.144579][ T29] ext4_dirty_inode+0xcb/0x110 [ 280.150103][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 280.155916][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 280.163046][ T29] file_update_time+0x187/0x1a0 [ 280.167904][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 280.174450][ T29] ? filemap_fault+0x103c/0x1540 [ 280.182756][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 280.188486][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 280.195564][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 280.202545][ T29] ? __pte_offset_map+0x20d/0x280 [ 280.207575][ T29] do_page_mkwrite+0x153/0x3f0 [ 280.215342][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 280.222215][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 280.227171][ T29] ? numa_migrate_prep+0x350/0x350 [ 280.233094][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 280.238381][ T29] do_user_addr_fault+0x736/0x12d0 [ 280.245524][ T29] exc_page_fault+0x64/0x100 [ 280.251150][ T29] ? clear_bhb_loop+0x40/0x90 [ 280.255836][ T29] asm_exc_page_fault+0x26/0x30 [ 280.262657][ T29] RIP: 0033:0x7f3d1e672f32 [ 280.267095][ T29] RSP: 002b:00007ffcc76a28e0 EFLAGS: 00010202 [ 280.274182][ T29] RAX: 0000000000002008 RBX: 00007f3d1f555720 RCX: 0000000000000000 [ 280.285547][ T29] RDX: 0000001b2e122000 RSI: 0000000000000008 RDI: 00007f3d1f555720 [ 280.294374][ T29] RBP: 00000000000000ba R08: 00007f3d1ea10000 R09: 00007f3d1ea26128 [ 280.304231][ T29] R10: 0000000000000003 R11: 0000000000000003 R12: ffffffff8194d6da [ 280.312962][ T29] R13: 00007f3d1ea26128 R14: 0000000000000083 R15: ffffffffffffe000 [ 280.325105][ T29] ? is_bpf_text_address+0x14a/0x2a0 [ 280.335934][ T29] [ 280.338961][ T29] INFO: task syz.1.327:6658 blocked for more than 145 seconds. [ 280.348468][ T29] Not tainted syzkaller #0 [ 280.354156][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.364801][ T29] task:syz.1.327 state:D stack:27560 pid:6658 ppid:5781 flags:0x00004004 [ 280.374882][ T29] Call Trace: [ 280.378165][ T29] [ 280.383179][ T29] __schedule+0x15ae/0x4660 [ 280.388465][ T29] ? mark_lock+0x94/0x320 [ 280.394363][ T29] ? asan.module_dtor+0x20/0x20 [ 280.399225][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 280.406245][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 280.413290][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 280.418500][ T29] schedule+0xbd/0x170 [ 280.424537][ T29] io_schedule+0x80/0xd0 [ 280.428783][ T29] bit_wait_io+0x11/0xd0 [ 280.435993][ T29] __wait_on_bit+0x9f/0x2c0 [ 280.442439][ T29] ? bit_wait+0xd0/0xd0 [ 280.446602][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 280.452912][ T29] ? bit_wait+0xd0/0xd0 [ 280.457074][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 280.463840][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 280.468870][ T29] ? bit_waitqueue+0x30/0x30 [ 280.473725][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 280.478927][ T29] do_get_write_access+0x5c9/0xe00 [ 280.488184][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 280.495586][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 280.504291][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 280.510614][ T29] ? __might_sleep+0xe0/0xe0 [ 280.515210][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 280.521044][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 280.526514][ T29] ext4_dirty_inode+0xcb/0x110 [ 280.533849][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 280.542164][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 280.547210][ T29] file_update_time+0x187/0x1a0 [ 280.554677][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 280.559892][ T29] ? filemap_fault+0x103c/0x1540 [ 280.564837][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 280.573638][ T29] ? pte_alloc_one+0x3b6/0x540 [ 280.578419][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 280.584927][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 280.594266][ T29] do_page_mkwrite+0x153/0x3f0 [ 280.599045][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 280.604330][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 280.609282][ T29] ? numa_migrate_prep+0x350/0x350 [ 280.616992][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 280.622539][ T29] do_user_addr_fault+0x736/0x12d0 [ 280.627662][ T29] exc_page_fault+0x64/0x100 [ 280.634808][ T29] ? clear_bhb_loop+0x40/0x90 [ 280.639650][ T29] asm_exc_page_fault+0x26/0x30 [ 280.644503][ T29] RIP: 0033:0x7f06ac26baa3 [ 280.648915][ T29] RSP: 002b:00007ffc0416c180 EFLAGS: 00010246 [ 280.655836][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2da64000 [ 280.669779][ T29] RDX: 0000001b2da24000 RSI: 0000000000600000 RDI: 00007f06ac5e0708 [ 280.677783][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.688472][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 280.698162][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc0416c410 [ 280.708867][ T29] [ 280.712347][ T29] INFO: task syz.0.328:6659 blocked for more than 145 seconds. [ 280.722392][ T29] Not tainted syzkaller #0 [ 280.727451][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.736383][ T29] task:syz.0.328 state:D stack:27560 pid:6659 ppid:5778 flags:0x00004004 [ 280.748097][ T29] Call Trace: [ 280.751535][ T29] [ 280.754470][ T29] __schedule+0x15ae/0x4660 [ 280.758989][ T29] ? mark_lock+0x94/0x320 [ 280.763689][ T29] ? asan.module_dtor+0x20/0x20 [ 280.768545][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 280.778220][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 280.784392][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 280.792081][ T29] schedule+0xbd/0x170 [ 280.797665][ T29] io_schedule+0x80/0xd0 [ 280.802164][ T29] bit_wait_io+0x11/0xd0 [ 280.806419][ T29] __wait_on_bit+0x9f/0x2c0 [ 280.814453][ T29] ? bit_wait+0xd0/0xd0 [ 280.818632][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 280.824397][ T29] ? bit_wait+0xd0/0xd0 [ 280.828557][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 280.835896][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 280.841095][ T29] ? bit_waitqueue+0x30/0x30 [ 280.845688][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 280.853430][ T29] do_get_write_access+0x5c9/0xe00 [ 280.858556][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 280.864753][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 280.873433][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 280.879804][ T29] ? __might_sleep+0xe0/0xe0 [ 280.884424][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 280.895415][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 280.902552][ T29] ext4_dirty_inode+0xcb/0x110 [ 280.907344][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 280.915787][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 280.921060][ T29] file_update_time+0x187/0x1a0 [ 280.925917][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 280.933720][ T29] ? filemap_fault+0x103c/0x1540 [ 280.938669][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 280.944659][ T29] ? pte_alloc_one+0x3b6/0x540 [ 280.951904][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 280.958151][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 280.963446][ T29] do_page_mkwrite+0x153/0x3f0 [ 280.968229][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 280.975763][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 280.980867][ T29] ? numa_migrate_prep+0x350/0x350 [ 280.986015][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 280.993838][ T29] do_user_addr_fault+0x736/0x12d0 [ 281.003213][ T29] exc_page_fault+0x64/0x100 [ 281.007820][ T29] ? clear_bhb_loop+0x40/0x90 [ 281.015046][ T29] asm_exc_page_fault+0x26/0x30 [ 281.020056][ T29] RIP: 0033:0x7f6e06c6baa3 [ 281.024470][ T29] RSP: 002b:00007ffe953c3820 EFLAGS: 00010246 [ 281.030824][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d964000 [ 281.038798][ T29] RDX: 0000001b2d924000 RSI: 0000000000600000 RDI: 00007f6e06fe0708 [ 281.050408][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.058407][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 281.068889][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe953c3ab0 [ 281.077043][ T29] [ 281.082589][ T29] [ 281.082589][ T29] Showing all locks held in the system: [ 281.090536][ T29] 1 lock held by khungtaskd/29: [ 281.095381][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 281.109288][ T29] 6 locks held by kworker/u4:10/3500: [ 281.116969][ T29] #0: ffff88801b649538 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 281.132052][ T29] #1: ffffc9000c997d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 281.144682][ T29] #2: ffff88814e77c0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 281.157750][ T29] #3: ffff88814e77ec58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 281.168548][ T29] #4: ffff888030df0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 281.180739][ T29] #5: ffff88807720a088 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 281.191252][ T29] 2 locks held by getty/5539: [ 281.195923][ T29] #0: ffff888030e420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 281.209128][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 281.224722][ T29] 3 locks held by syz-executor/5765: [ 281.230662][ T29] #0: ffff888076bb4420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 281.240802][ T29] #1: ffff88814e77c510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 281.252999][ T29] #2: ffff888030df0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 281.262939][ T29] 3 locks held by syz.3.316/6630: [ 281.267961][ T29] #0: ffff88802ee001a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 281.280662][ T29] #1: ffff88814e77c510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 281.292113][ T29] #2: ffff888030df0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 281.303128][ T29] 3 locks held by syz.2.326/6655: [ 281.311010][ T29] #0: ffff88802c65c420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 281.322266][ T29] #1: ffff88814e77c510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 281.335629][ T29] #2: ffff888030df0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 281.347264][ T29] 3 locks held by syz.1.327/6658: [ 281.353643][ T29] #0: ffff88802c65a7a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 281.363770][ T29] #1: ffff88814e77c510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 281.380633][ T29] #2: ffff888030df0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 281.391869][ T29] 3 locks held by syz.0.328/6659: [ 281.396898][ T29] #0: ffff88802c659e20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 281.408292][ T29] #1: ffff88814e77c510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 281.422165][ T29] #2: ffff888030df0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 281.433151][ T29] [ 281.435474][ T29] ============================================= [ 281.435474][ T29] [ 281.447473][ T29] NMI backtrace for cpu 0 [ 281.451801][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 281.458986][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.469028][ T29] Call Trace: [ 281.472299][ T29] [ 281.475230][ T29] dump_stack_lvl+0x18c/0x250 [ 281.479903][ T29] ? __wake_up_klogd+0xd9/0x100 [ 281.484750][ T29] ? show_regs_print_info+0x20/0x20 [ 281.489943][ T29] ? load_image+0x420/0x420 [ 281.494445][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 281.499380][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 281.505528][ T29] ? load_image+0x420/0x420 [ 281.510020][ T29] ? wq_watchdog_touch+0xef/0x170 [ 281.515038][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 281.521104][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 281.527078][ T29] watchdog+0xf59/0xfa0 [ 281.531258][ T29] ? watchdog+0x1e1/0xfa0 [ 281.535599][ T29] kthread+0x2fa/0x390 [ 281.539663][ T29] ? hungtask_pm_notify+0x50/0x50 [ 281.544689][ T29] ? kthread_blkcg+0xd0/0xd0 [ 281.549275][ T29] ret_from_fork+0x48/0x80 [ 281.553695][ T29] ? kthread_blkcg+0xd0/0xd0 [ 281.558286][ T29] ret_from_fork_asm+0x11/0x20 [ 281.563056][ T29] [ 281.576524][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 281.583384][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 281.590570][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.600616][ T29] Call Trace: [ 281.603889][ T29] [ 281.606815][ T29] dump_stack_lvl+0x18c/0x250 [ 281.611492][ T29] ? show_regs_print_info+0x20/0x20 [ 281.616684][ T29] ? load_image+0x420/0x420 [ 281.621186][ T29] panic+0x2ca/0x720 [ 281.625080][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 281.629579][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 281.635121][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 281.640491][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 281.646643][ T29] watchdog+0xf98/0xfa0 [ 281.650791][ T29] ? watchdog+0x1e1/0xfa0 [ 281.655116][ T29] kthread+0x2fa/0x390 [ 281.659177][ T29] ? hungtask_pm_notify+0x50/0x50 [ 281.664198][ T29] ? kthread_blkcg+0xd0/0xd0 [ 281.668798][ T29] ret_from_fork+0x48/0x80 [ 281.673207][ T29] ? kthread_blkcg+0xd0/0xd0 [ 281.677790][ T29] ret_from_fork_asm+0x11/0x20 [ 281.682554][ T29] [ 281.685614][ T29] Kernel Offset: disabled [ 281.689930][ T29] Rebooting in 86400 seconds..