last executing test programs: 2.681565364s ago: executing program 1 (id=479): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="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", 0x13f}, {&(0x7f0000000000)="1d8b82c419c1860826174251959e0adba8391aad87cf96ae81a929d20c0301d750", 0x21}], 0x2}}], 0x1, 0x4000000) 2.453337589s ago: executing program 1 (id=482): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000000180)=""/40) 2.365810381s ago: executing program 2 (id=483): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x500, 0x4) 2.087034198s ago: executing program 2 (id=485): r0 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 2.01042234s ago: executing program 3 (id=486): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x22f41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x180000) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) 1.844031544s ago: executing program 3 (id=487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x800) accept4(r0, 0x0, 0x0, 0x0) 1.802126516s ago: executing program 3 (id=488): chdir(&(0x7f0000000080)='./cgroup\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/49, 0x31) getdents(r0, 0xfffffffffffffffd, 0x58) 1.640161549s ago: executing program 3 (id=490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x8253, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f00000000c0)=0x13) 1.577230481s ago: executing program 3 (id=491): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000000)='./file0\x00', 0x1000091, &(0x7f0000000240)=ANY=[], 0x0, 0xd99, &(0x7f0000001e40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1.520518103s ago: executing program 0 (id=492): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) readv(r1, &(0x7f0000001680)=[{&(0x7f0000000380)=""/29, 0x1d}], 0x1) 1.435585385s ago: executing program 1 (id=493): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) r1 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.372141436s ago: executing program 0 (id=494): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short}, 0x14) 1.245660969s ago: executing program 1 (id=495): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) 1.117893812s ago: executing program 3 (id=496): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_getres(0x5, 0x0) 1.003264665s ago: executing program 0 (id=497): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) 940.183887ms ago: executing program 2 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/clockevents/clockevent0/unbind_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='lapic\n', 0x6) 681.477983ms ago: executing program 2 (id=499): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='osdtimeout\x00', &(0x7f0000000080)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='mount_timeout\x00', &(0x7f0000000100)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='caps_max\x00', &(0x7f0000000180)='1\x00', 0x0) 534.258907ms ago: executing program 0 (id=500): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x8, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 351.761851ms ago: executing program 2 (id=501): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 317.423352ms ago: executing program 1 (id=502): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtaction={0xbc, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xa8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x6, 0x0, 0xf4a}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) 297.464582ms ago: executing program 0 (id=503): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004240)={&(0x7f0000000100)={0x20, r1, 0x13a8a16702787d01, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x2008800) 194.598825ms ago: executing program 2 (id=504): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 138.958107ms ago: executing program 1 (id=505): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x6349, &(0x7f00000007c0)="$eJzs3c1vHGcdB/DfvvqlNDU9VCVCyE3KSylN4qSEQIC2Bzhw6QHlihK5bhWRAkoCSiuLOPKFAyf+AhASR4Q4Ig78AT1w5QYXTkSykUA9MWjs50lmN7tZu7Z31p7PR3JmfvPMrp/xd2dfMjP7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ3/vu91daEXH9Z2nBUsSnohPRjlgo6+WIWFheyut3I+LF2GmOFx5E9OYiytvv/PNcxOsR8dGpiK3t9dVy8cU99uM7f/jbb3/wzNt//X3v/H//eHf8evfu/fI/f7p/kC0GAACA5imKomilj/mn0+f7dt2dAgCmIr/+F0lefuLrX/3z7T/PUn/UarVarZ5CXVWMdr9aRMRG9TblewaH4wHgmNmIj+vuAjWSf6N1I+KZujsBzLRW3R3gSGxtr6+2Ur6t6uvB8m57PhdkIP+N1qPrO8ZNJxk+x2Raj6/N6MTzY/qzMKU+zJKcf3s4/+u77f203lHnPy3j8u/vXvrUODn/znD+Q05O/u2R+TdVzr+7r/w78gcAAAAAgBmW//9/qebjv3MH35Q9edrx3+Up9QEAAAAAAAAADtuBxv+r3tGhjv/XuTpuPeP/AQAAwP6Vn9VLvz71eNm472Irl19rRTw7tD7QMOlimcW6+wEAAAAAAAAAAAAATdLdPYf3WiuiFxHPLi4WRVH+VA3X+3XQ2x93Td9+aLK6n+QBAGDXR6eGruVvRcxHxLX0XX+9xcXFophfWCwWi4W5/H62PzdfLFQ+1+ZpuWyuv4c3xN1+Ud7ZfOV2VZM+L09qH76/8nf1i84eOnZIeumvOaa5prABINl9NdryinTCFMVz4958wAD7/wm0FEt1P66YfXU/TAEAAICjVxRF0Upf5306HfNv190pAGAq8uv/8HGBA9XtMe0Rh3P/arVarVarP1FdVYx2v1pExEb1NuV7BsPxA8AxsxEf190FaiT/RutGxIt1dwKYaa26O8CR2NpeX22lfFvV14M0vns+F2Qg/43Wzu3y7UdNJxk+x2Raj6/N6MTzY/rzwpT6MEty/u3h/K/vtvfTeked/7SMy7+/c8lc8+T8O8P5Dzk5+bdH5t9UOf/uvvLvyB8AAAAAAGZY/v//pUYf/3UFAwAAAAAAAADH29b2+mq+7jUf///siPVc/3ky5fxb+81/Ic3L/1jL+beH8v/S0HqdyvzDt8r9f/ecmX9vr6/+7u6/PpOne81/Ls+00iOrlR4RrfSbWt00PcDGjbDZ6/TL39RrtTvddJpT0Xs3bsatWIsLA+u209/jcfvKQHvZ095A+8WB9u4T7ZcG2nvpeweKhdx+Llbjx3Er3tlpL9vmJmz//IT2YkJ7zr/j+b+Rcv7dyk+Z/2Jqbw1NSw8ftJ/Y76vTUb/nzZuf+8WFo9+ciTaj82jbqsrtO1NDf3b+Js/046d31m6fu3fj7t3bK5EmA0svRpocspx/b+dn7vHz/9nd9vy8X91fHz7o7zv/WbEZ3bH5n63Ml9v7ypT7Voecfz/95PzfSe2j9//jmv/Vs//49Pj9/9UaegQAAAAAAAAAAAAAAABPUxTFziWib0bE5XT9T13XZgIA05Vf/4skL1erG13H0mz1pzF1Z8b6o1afvLqqGO2NahERf6neph0RPx91ZwDALPtfRPy97k5QG/k3WP6+v3L6ct2dAabqzgcf/vDGrVtrt+/U3RMAAAAAAAAA4JPK438uV8Z/fjkilobWGxj/9a1YPuj4n90882iA0UMe6HuMzXa/064MN/5S7IzPfW7c+N9n4snxv/OYuJ3qdozRm9Den9A+N6F9fuTSx2mNvNCjIuf/UmW88zL/00PDr5+M8V+fPv7z8Jj3TZDzP1N5PJf5f3FovWr+xW9mLv+Nva64Ge2B/M/fff8n5+988OFrN9+/8d7ae2s/urSycuHS5ctXrlw5/+7NW2sXdv89ml7PgJx/HvvaeaDNkvPPmcu/WXL+n0+1/Jsl5/+FVMu/WXL++f2e/Jsl558/+8i/WXL+r6Ra/s2S8/9yquXfLFvb63Nl/q+mWv7Nkvf/r6Ra/s2S838t1fJvlpz/uVTLv1ly/udTvYf8fT38CZLzz0e47P/NkvNfSbX8myXnfzHV8m+WnP+lVMu/WXL+r6da/s2S8/9qquXfLDn/y6mWf7Pk/L+Wavk3S87/Sqrl3yw5/6+nWv7NkvP/Rqrl3yw5/6upln+z5Py/mWr5N0vO/1upln+z5Py/nWr5N0vO/41Uy79ZHn//vxkzZszkmbqfmQAAAAAAAAAAAACAYdM4nbjubQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s8OHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrB3dzFyneUdwM/sh712vgwJwUkNbBITQrLJru3EH7QpJnw2QCmQ0NAPHNe7Nksd23jtEiiSTQMlEkZFFRXpRVtAqI1UVUQVF7SiNBdVP65Ke0FvKtpKSI2qgAIqEq1otppz3vfdmdnZmVnv7PrsOb+fZD87M+fMeefMO2fn2d3/HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa3fLGuU83sixr/sv/25FlVze/3ja5I7/udVd6hAAAAMBa/V/+/wvXpSsOD7BSyzJ/98p//Nri4uJi9sjo741/fnEx3TCZZeNbsyy/LXrmP97faF0meCKbaIy0XB7ps/nRPreP9bl9vM/tW/rcvrXP7RN9bl+2A5bZVvw8Jr+z3fmXO4pdmt2Qjee37e6y1hONrSMj8Wc5uUa+zuL48Ww+O5nNZTNtyxfLNvLlv3FLc1tvy+K2Rlq2tas5Q37w8WNxDI2wj3e3bWvpPqPvvSGb/OEPPn7sj889f1O32nc3tN1fMc47bm2O85PhmmKsjWxr2idxnCMt49zV5TkZbRtnI1+v+XXnOF8YcJyjS8PcUJ3P+UQ2kn/9rXw/jbX+WC/tp13huh/flmXZxaVhdy6zbFvZSLa97ZqRpednopiRzftoTqWXZmOrmqe3DDBPm3V2d/s87XxNxOf/lrDe2ApjaH2avveJLcue99XO06j5qFd6rXTOwWG/VsoyB+O8+Fb+oJ/sOgd3h8f/8dtXnoNd506XOZged8scvLXfHBzZMpqPOT0JjXydpTm4p2350XxLjbw+d3vvOTh97rEz0wsf/djd848dPTF3Yu7Uvj17Zvbt33/w4MHp4/Mn52aK/y9zb5ff9mwkvQZuDfsuvgZe07Fs61Rd/NLwXocTPV6HOzqWHfbrcKzzwTU25gW5fE4Xr42Hmjt94tJItsJrLH9+7lz76zA97pbX4VjL67Dr95Qur8Ox9A5s5ddh837P3DnYe5axln/dxrBe3wt2tMzBzvcjnXNw2O9HyjIHJ8K8+Nc7V/5esCuM98mp1b4fGV02B9PDDcee5jXp/f7Ewbx0m5c3N2+4akt2fmHu7D2PHz137uyeLJQNcX3LXOmcr9tbHlO2bL6OrHq+Hp5/5ZM3d7l+R9hXE3c3/5tY8blqLnPvPb2fq/y7W/f92Xbt3iyUIdvo/dntu3lzf6Zessf+bC7zyem1vxdPfWnL8Xd8heNv7PtfLLaX7uqJ0fGx4vU7mvbOeNv7ovanaiw/djXybb8wPdjxeDz82+jj8Q09jsc7O5Yd9vF4vPPBxeNxo99PO9am8/mcCPPk5Ezv43FzmZ17Vzsnx3oej28LtRH2/2tDp5D6opa5s9K8TdsaGxsPj2ssbqF9nu5rW3489GbNbT299/Lm6R23Ffc1mh7dko2ap5Mdyw57nqbj1UrztNHvp2+Xp/P5nAjz4oZ9vedpc5ln7137sXNb/LLl2Lml3xwcH93SHPN4moTF8X5xW5yD92THstPZyWw2v3VLPp8a+bam7htsDm4J/zb6WLmzxxy8o2PZYc/B9H1spbnXGFv+4Ieg8/mcCPPiqft6z8HmMm86MNz3rneEa9IyLe9d85+vtfxgfaWfed3csZvW82dezXH+zYHeP5ttLnPy4Gr7zN776a5wzVVd9lPn63el19RstjH7aWcY5/MHV95PzfE0l/n8oQHn0+Esyy58+IH8573h9yt/fv7bX2v7vUu33+lc+PAD37/m+N+uZvwAbH4vFmV78b2u5TdTg/z+HwAAANgUYt8/Emqi/wcAAIDKiH1//KvwRP8PAAAAlRH7/rFQk5r0/zvf9Pz8ixeylMxfDOLtaTc8WCwXM64z4fLk4pLm9Q98Ze5Hf3lhsG2PZFn2kwd/s+vyOx+M4ypMhnE+8+b265eveGGg7T/68NJyrfn1L4b7j49n0GnQLYI7k2XZN677bL6dyfdfyuuzDz6a1/dcfPKJ5jIvHCoux/Wfu75Y/g9C+Pfw8aNt6z8X9sN3Q515e/f9Edf76qXX7jrwvqXtxfUat16bP+ynPlDcb/ycnM89USwf9/NK4/+rzzz91ebyj7+6+/gvjHQf/9Phfr8S6v+8oli+9TloXo7rfSqMP24vrnfPl7/ZdfzPfLpY/sxbiuUeDTVu/45wefdbnp9v3V+PN462Pa7srcVycfsz3/6d/PZ4f/H+O8c/ceRS2/7onB/P/nNxP9Mdy8fr43aiv+jYfvN+Wudn3P7Tv/1o237ut/1n3vPcK5r327n9uzqWG+1Yv/MTm/7wU5/tur04nsN/dqbt8Rx+d3gdh+0/9YEwH8Pt//vMZ9u2Gz367vbjT1z+izsutD2e6G0/LLb/zOtP5PU/J3/0+1ddfc21F1/V3HdZ9q33FvfXb/sn/uh02/i/dOOd+fMRb48Z/c7tryRu/+xHpk6dXjg/P9uyV/PPznlHMZ6tE9u2N8d7XTi2dl4+cvrcB+fOTs5MzmTZZHU/Qu+yfTnU7xfl4mrXv/Ph8Hze/IVvbL/9nz4Tr/+Xh4rrL729+L71mrDc58L1O4rnb7Gxxu0/dcuN+eu78WxxuS3HPgS7dv/XwYEWDI+/831BnO9nXvbBfD80b8u/b8TX9RrH/53Z4n6+HvbrYvhk5ltvXNpe6/LxsxEuvbd4va95/4XDXHxe/yQ83+/8bnH/cVzx8X4nvI/55s72412cH1+/MNJ5//mneFwMx5PsYnF7XCru70sv3Nh1ePFzSLKLN+WXfzfdz02repgrWfjowvTJ+VPnH58+N7dwbnrhox878tjp86fOHck/y/PIh/qtv3R82p4fn2bn9t+bzWzLsux0NrMBB6z1GX/zq8HGf+bhY7MHZm6fnTt+9Pzxcw+fmTt74tjCwrG52YXbjx4/PveRfuvPz96/Z++hfQf2Tp2Yn73/4KFD+w5NzZ863RxGMag+9s/8+tSps0fyVRbuv/fQnvvuu3dm6rHTs3P3H5iZmTrfb/38e9NUc+3fmDo7d/LoufnH5qYW5j82d/+eQ/v37+37aYCPnTm+MDl99vyp6fMLc2eni8cyeS6/uvm9r9/6VNPCvxXvZzs1ig/iy9511/70+axNX/nEindVLNLxAaLPh8+i+YeXnDk4yOXY94+HmtSk/wcAAIA6iH3/llAT/T8AAABURuz7t4aa6P8BAACgMmLfPxFqUpP+X/5f/n+w/H9xu/z/OuX/Xyxn/v/Mh4tc6WbP/8f8vPx/PVzh/P+aty//L/9fvfz/4Pn5zT5++X/5f5YrW/4/9v3bsqyW/T8AAADUQez7t4ea6P8BAACgMmLff1Woif4fAAAAKiP2/VeHmtSk/5f/Hyj/v7df4Kr6+X/n/6/j+f8rkf+PT478f22sOn//vofaLsr/B/L/8v/y//L/8v+s2fiKt1yp/H/s+68JNalJ/w8AAAB1EPv+a0NN9P8AAABQGbHvvy7URP8PAAAAlRH7/h2hJjXp/+X/nf9f/l/+v9L5/7We/79lMPL/m4Pz//cm/9/HZef/J+T/N2P+f3y449/I/P9i5zfLvvn/vsOX/2ddlO38/7Hvf0moSU36fwAAAKiD2Pe/NNRE/w8AAACVEfv+60NN9P8AAABQGbHvvyHUpCb9v/y//H+58v9fuLu55+X/C/L/hfXI/08M5fz/xVfy/+Ui/9+b/H8fzv9fr/z/kMdfr/P/j7+5c335f7opW/4/9v0vCzWpSf8PAAAAdRD7/htDTfT/AAAAUBmx7395qIn+HwAAACoj9v07Q01q0v/L/8v/ryL/v8X5/+X/W23m/P/A5//vmf8vyP+Xi/x/b/L/fcj/y//L/w+W/+/y5lf+n27Klv+Pff9NoSY16f8BAACgDmLff3Ooif4fAAAAKiP2/T8VaqL/BwAAgMqIff+uUJOa9P/y//L/5Tr/v/z/euf/79oi/y//X23y/73J//ch/y//L/9/erY5Cfue/3+51eT/t/a7MyqjbPn/2Pe/ItSkJv0/AAAA1EHs+18ZaqL/BwAAgMqIff+rQk30/wAAAFAZse+fDDWpSf8v/1+t/P+f/vVTr8rk/+X/+2y/ovn/OA3k/2tO/r83+f8+5P/l/+X/Bzv/fxfO/083Zcv/x77/llCTmvT/AAAAUAex77811ET/DwAAAJUR+/7bQk30/wAAAFAZse/fHWpSk/5f/r9a+f9I/l/+v9f2K5r/T+T/603+v4uWF6n8fx/y//L/tc//x3e/8v8MR9ny/7Hvf3WoSU36fwAAAKiD2PffHmqi/wcAAIDKiH3/a0JN9P8AAABQGbHvvyPUpCb9v/y//L/8v/y//H/37cv/b07y/72tNv+/Rf5f/l/+v2b5f+f/Z7iufP6/eOcWL8e+/7WhJjXp/wEAAKAOYt9/Z6iJ/h8AAAAqI/79ZvF3r/p/AAAAqKLY90+FmtSk/5f/l/+vU/6/If8v/y//X3ny/705/38f8v/y/13HPxGP1D3J/8v/s9yVz/+3X459/92hJjXp/wEAAKAOYt9/T6iJ/h8AAAAqI/b906Em+n8AAACojNj3z4Sa5P3/+BUa1cYpY/5/RP5f/t/5/3Py/wX5f/n/1ZD/703+vw/5f/n/qp3/P8vk/7miypb/j33/nlATv/8HAACAyoh9/95QE/0/AAAAVEbs+/eFmuj/AQAAoDJi339vqEn1+v+u+bcy5v8z+X/5f/n/nPx/Qf5f/n815P97k//vQ/5f/r9q+X/n/+cKK1v+P/b994WaVK//BwAAgNqKff/+UBP9PwAAAFRG7PsPhJqE/r/b33UDAAAAm0vs+w+GmtTk9//y/yXK/zfWkP//rb9v23bV8/8jmfx/dsXz/9vk/0OV/y+Xpfx9Pl+rkv/vfFlcNvn/PuT/5f/l/1eT/x9vvSD/Tzdly//Hvv9QqElN+n8AAACog9j3vy7UpG//v3DtOg4LAAAAGKLY9/90qInf/wMAAEBlxL7/Z0JNatL/y/+XKP/v/P855/9fWq/c+X/n/5f/Lyfn/++tUvn/Efl/+f9yjb+G+f828v90s/75//jVYPn/2PffH2pSk/4fAAAA6iD2/T8baqL/BwAAgMqIff/rQ030/wAAAFAZse8/HGpSk/5f/l/+X/5f/n998v+vzzqVMf/fnDzy/9Ui/99bpfL/zv8v/1+y8cv/y/+zXNnO/x/7/jeEmtSk/wcAAIA6iH3/A6Em+n8AAACojNj3vzHURP8PAAAAlRH7/jeFmtSk/5f/l/+X/5f/d/7/7tuX/9+chpn/b7TMbvn/gvy//H8v8v/y//L/dCpb/j/2/W8ONalJ/w8AAAB1EPv+t4Sa6P8BAACgMmLf/9ZQE/0/AAAAVEbs+98WalKT/l/+X/5f/l/+X/6/+/YHzf9n/y7/XyY1Pv//+CALyf/3If8v/y//L//PUJUt/x/7/p8LNalJ/w8AAAB1EPv+B0NN9P8AAABQGbHvf3uoSXv/3+j2990AAADA5hD7/neEmgzy+/9H1mtUG0f+X/6/bvn/Ufl/+X/n/6+0Guf/ByL/34f8v/y//L/8P0NVtvx/7PvfGWri7/8BAACgMmLf//OhJvp/AAAAqIzY978r1ET/DwAAAOW1yg/qi33/L4Sa1KT/l/+X/y9X/n/xQut6zv8v/58NK//fXEn+vxbk/3uT/++jS/5/a/nz/z/ueJou25XOz2/28cv/y/+zXNny/7Hvf3eoSU36fwAAAKiD2Pe/J9RE/w8AAACVEfv+94aa6P8BAACgMmLf/1CoSU36f/n/Wub/00MuX/5//c//L/9f0/y/8//Xhvx/b/L/fTj//5Dy81fL/8v/y/+TK1v+P/b9D4ea1KT/BwAAgDqIff/7Qk30/wAAAFAZse//xVAT/T8AAABURuz7H8nz7/Xr/+X/a5n/L/H5/6uW/x9rmx91yv9PtDyfaV7K/8v/bwD5/942S/5/h/x/1+Ftnvz/Bp//f6Ic41/3/H+YzdtWWF/+nzIqW/7/kXytiez9oSY16f8BAABgE7p+pZ+HrST2/b8UaqL/BwAAgMqIHf8vt13S/wMAAECVxL7/V0JNatL/y//L/8v/O/+/8/933778/+Yk/9/bZsn/O/+//P9mHL/z/8v/s1zZ8v+x7//VUJMVG7/v//cADxMAAAAokdj3fyDUpCa//wcAAIA6iH3/kVAT/T8AAABURuz7Hw01qUn/L//fmf+PZ5CQ/5f/l/+X/5f/34yGl/9/+TVZJv8v/y//L/8v/y//z1qULf8f+/6joSY16f8BAACgDmLf/2uhJvp/AAAAqIzY9x8LNdH/AwAAQGXEvn821KQm/f8VzP+PlzP/7/z/l5v//4n8f56nb84c+X/5/27k/zeG8//3Jv/fRzjM/WQ8y+T/5f/l/+X/Wbuy5f9j3z8XalKT/h8AAAAqLP04OPb9x0NN9P8AAABQGbHvPxFqov8HAACAyoh9/wdDTWrS/5f8/P/XxMvy/+XP/2fy/6s4//9Y2/Ly/wX5f/n/YZD/703+vw/n/5f/l/+X/2eoypb/j33/fKhJTfp/AAAAqIPY938o1ET/DwAA/8/efTTZdV13Hz6AkXpkTzzxyGOPOLQHLvIjeOqZq1zliU1HOgeAztmmcw40nXNSpkTlnHOmMqlIiYqkqqBC91oL3X1vn9uNPt33nL2fZ7JeogDhQmyS+r/wjxugGbn7vzdusf8BAACgGbn7vy9u6WT/z7z/L/p//f9wRv3/hWG4cf79/8Hvr//fo/8/Rv9/Wf+/if5/nP5/A/2//l//r/9nUnPr/3P33xu3dLL/AQAAoAe5+78/brH/AQAAoBm5+38gbrH/AQAAoBm5+38wbulk/+v/9f/r+v+LHfX/w1be/z/4/fX/e/T/3v+fwkp/f2n99zsqCj+y/7/rW+/7Lv2//n+a/v9q/bH+f1Lb/vz6f/0/q+bW/+fu/6G4pZP9DwAAAD3I3f/DcYv9DwAAAM3I3f8jcYv9DwAAAM3I3X9f3NLJ/u+j/1+NP3f7/2u3P0fS//f3/v+g/z/Y/z+i/9f/L9sM3v/f/w8d/b/+//B/vvf/z9C2P7/+X//Pqrn1/7n7fzRu6WT/AwAAQA9y9/9Y3GL/AwAAQDNy9/943GL/AwAAQDNy9/9E3NLJ/u+j/1/l/f+G+/+Lrfb/V7z/f+jXo//X/68zg/7/VD+//l//v/j+/9v1//p//T+3za3/z93/k3FLJ/sfAAAAepC7/6fiFvsfAAAAmpG7/6fjFvsfAAAAmpG7/2filk72v/5f/7+t/j//avP+/8ze/9f/6/8X7sHhwAP8+v9D9P8bbOj/h0H/P+bY/fz6X95yPv8R9P/6f1bNrf/P3f+zccs9w3DlTn+RAAAAwKzk7v+5uKWT3/8HAACAHuTuvx632P8AAADQjNz9N+KWTva//l//39z7//p//b/+v2ve/x93+v7/W77h3u9eZv9/rK7T+/9b7eeX/vmn7/9vfWXo/1m2ufX/ufvvj1s62f8AAADQg9z9Px+32P8AAADQjNz9vxC32P8AAADQjNz9vxi3dLL/9f+t9f9fd+DH7ev/d2sX/f9Y/3+X/v/Q99P/6/+XSP8/zvv/G+z+bW6n/lD/v9fP3/r7nf6/y/f/b33zvv5//N+iof9nnbn1/7n7fylu6WT/AwAAQA9y9/9y3GL/AwAAQDNy9/9K3GL/AwAAQDNy9/9q3NLJ/j+f/n99kK//9/7/vPp/7//r//X/Lei3/9851vfS/2/Qyvv/d/hvjdh2P39a2/78Dfb/3v/n1ObW/+fu/7W4pZP9DwAAAD3I3f/rcYv9DwAAAM3I3f8bcYv9DwAAAM3I3f+bcUsn+9/7//r/ZfT/+TPo//X/Z9//J/3/Mk3f/+99hcy//z8e/f8GrfT/d2jb/fzSP7/+X//Pqrn1/7n7fytu6WT/AwAAQA9y9/923GL/AwAAQDNy9/9O3GL/AwAAQDNy9/9u3NLJ/tf/6/+X0f97/1//7/1//f/x9Pv+//Ho/zfQ/+v/9f/6fyY1t/4/d/8DcUsn+x8AAAB6kLv/9+IW+x8AAACakbv/9+MW+x8AAACakbv/D+KWTva//l//r//X/+v/1//8+v9l0v+P0/9voP/X/+v/9f9Makb9/74fdW34w7ilk/0PAAAAPcjd/0dxi/0PAAAAzcjd/8dxi/0PAAAAzcjd/ydxSyf7X/8/m/5/N+drq//fGYZB/z902v/v7PvzWV+X+n/9/zk4r/4/svQO+v/HH9r7yt2j/9f/j9H/6//1/xw2o/5/949z9/9p3NLJ/gcAAIAe5O7/s7jF/gcAAIBm5O7/87jF/gcAAIBm5O7/i7ilk/2v/59N/7+rrf7f+/+Hvz566v+9/79K/38+vP8/zvv/G+j/9f/6f/0/k5q2/3/61P1/7v6/jJuuXD7FLxIAAACYldz9fxW3dPL7/wAAANCD3P1/HbfY/wAAALBQD6x8S+7+v4lbOtn/+v9p+/8r+75N/6//P/z1of/X/+v/z57+f5z+fwP9v/5f/6//Z1Jze/8/d//fxi2d7H8AAADoQe7+B+MW+x8AAACakbv/7+IW+x8AAACakbv/obilk/2v//f+v/5f/6//X//z6/+XSf8/Tv+/QVP9/6UT/dKHQ/38N+0Mg/7/3Pv/q7f/n/p/luDw/2pbdYL+/+bNm9fPvP/P3f/3cUsn+x8AAAB6kLv/H+IW+x8AAACakbv/H+MW+x8AAABmaOeOflTu/n+KWzrZ//r/Tvv//FJfVv9/Yxj0//p//b/+f5z+f5z+f4Om+v+T23Y/v/TP7/1//T+r5vb+f+7+f45bOtn/AAAA0IPc/f8St9j/AAAA0Izc/f8at9j/AAAA0Izc/f8Wt3Sy//X/nfb/3v/X/+v/z7v/f2rQ/5+LRfT/I//Korn3//fPtv+/qv+fwLb7+cV9/u/4tgN/qP/X/7Nqbv1/7v5/j1s62f8AAADQg9z9/xG32P8AAADQjNz9/xm32P8AAADQjNz9/xU3Xepk/+v/9f/6f/2//n/9z3/O7/9fGYZB/z+BRfT/I+be/0/z/v/hv8pv8/6//n/Jn1//r/9n1dz6/9z9/x23dLL/AQAAoAe5+/8nbrH/AQAAoBm5+/83brH/AQAAoBm5+/8vbulk/+v/9f/6/+n6/wtHfD3o/+PrYVv9//2L6P+9/z8R/f+4efT/R9P/6/+X/Pn1//p/jm9b/X/u/v+PWzrZ/wAAANCD3P3PiFvsfwAAAGhG7v5nxi32PwAAADQjd/+z4pZO9r/+X/9/kv4/P6f+v633/6/Orv+/duA/r5P3//X/E9H/j9P/b6D/1//r/x/Q/zOlub3/n7v/2XFLJ/sfAAAAepC7/zlx6//r1v4HAACAZuTuf27cYv8DAABAM3L3Py9u6WT/6//1/97/1/83//7/nff/B/5FBPr/ZTh9/7/3z0P9v/5f/z9VP3/rU+v/J+z/d4768d7/Z47m1v/n7n84bulk/wMAAEAPcvc/P26x/wEAAKAZuftfELfY/wAAANCM3P2PxC2d7H/9v/5f/6//1//v/Tn0/n8bvP8/7nz6/x39v/6/+vkL8VeB/n8x7//r/5nU3Pr/3P0vjFs62f8AAADQg9z9L4pb7H8AAABoRu7+F8ct9j8AAAAs0qU135a7/yVxSyf7X/+v/9f/6//1/+t/fv3/Mm2l/88vCv2/9/9DP/3/Nx/4o9P28+f9+Q//80v/r/9nenPr/3P3vzRu6WT/AwAAQA9y978sbrH/AQAAoBm5+18et9j/AAAA0Izc/a+IWzrZ//r/ZfT/+ZWp/9f/6//1//r/cd7/H6f/30D/v9X385f++fX/+n9Wza3/z93/yrilk/0PAAAAPcjd/6q4xf4HAACAZuTuf3XcYv8DAABAM3Z3f8ZlHe5//f8y+n/v/+v/9f/6f/3/8ej/x+n/N9D/6//1//p/JjW3/v81uz/q2vDauKWT/Q8AAAA9yN3/urjF/gcAAIBZOvr/VOBouftfH7fY/wAAANCM3P1viFs62f/6f/3/Mvr/mzdvXtf/6/8P/npu9/+P6v8p+v9x+v8N9P/6f/2//p9Jza3/z93/xrilk/0PAAAAPcjd/6a4xf4HAACAZuTuf3PcYv8DAABAM3L3vyVu6WT/6/9n0P9fm0H///ATuz9uvv2/9//1/0f3/9cOfX/9f9/0/+P0/xu02P8f/pvkiG3386e17c+v/9f/s+pg//+N9e3b6v9z9781bulk/wMAAEAPcve/LW6x/wEAAKAZufvfHrfY/wAAANCM3P3viFs62f/6//Pr/2/9d9fL+/87w/rPr//X/5/N+/+Pef+fov8fp//foMX+/wS23c8v/fPr//X/rDrW+/+Xb3/7Wff/ufvfGbccHH6XT/JrBAAAAOYld/+74pZOfv8fAAAAepC7/91xi/0PAAAAzcjd/564pZP9r/+fwfv/Dfb/3v9f//Wh/591/39R/98G/f84/f8G+n/9v/5/ov4/v5r1/707Vv+/73/fnXX/n7v/vXFLJ/sfAAAAepC7/31xi/0PAAAAzcjd//64xf4HAACAZuTufzRu2bf/17XdrdD/6//1//p//f/6n1//v0z6/3HH7f+vDqfr/5P+X/+v/++1//f+P3vm1v/n7v9A3OL3/wEAAGBxLh/x7bn7Pxi32P8AAADQjNz9H4pb7H8AAABoRu7+D8ctT17c1kc6V/p//X+r/f8V/f+RP7/+X//fMv3/OO//b6D/n6Kfv1v/30b/Pwz6f07giL/bzq3/z93/kbjF7/8DAABAM3L3fzRusf8BAACgGbn7Pxa32P8AAADQjNz9j8Utnez/C8NwQ/9/m/7/xP3/bpo5x/7f+/9H//z6f/1/y/T/4/T/G+j/vf+v//f+P5OaW/+fu//xuKWT/Q8AAAA9yN3/8bjF/gcAAIBm5O7/RNxi/wMAAEAzcvd/Mm7pZP9v7f3/+K96r/+/e/Vz6f933fM9V+be/8/2/f/z7v8v7/v8+n/9/zr6//Oh/x+n/99A/6//1//r/5nU3Pr/3P2fils62f8AAADQg9z9n45b7H8AAABoRu7+z8Qt9j8AAAA0I3f/E3FLJ/t/a/1/M+//7wUqHb//r//3/r/+X/8/K/r/cfr/9epPlP5f/6//1/8zqbn1/7n7Pxu3dLL/AQAAoAe5+z8Xt9j/AAAA0Izc/U/GLfY/AAAANCN3/+fjlk72v/5/7u//6//1//p//b/+/yT0/+O22f9/59dv/mm9/7/1/j8/gv5f/6//ZxJz6/9z938hbulk/wMAAEAPcvd/MW6x/wEAAKAZufu/FLfY/wAAANCM3P1fjls62f8b+v+r9R31/6P0/wc/v/5//deH/l//r/8/e/r/cd7/30D/7/1//f8U/f/1Qf9PmFv/n7v/K3FLJ/sfAAAAepC7/6m4xf4HAACAZuTufzpusf8BAACgGbn7vxq3dLL/vf+/pP7/bv2//l//r//X/2+g/x+n/99A/6//1/97/59Jza3/z93/tQAAAP//HTVAaA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x4) 0s ago: executing program 0 (id=506): setuid(0xee00) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0x2, 0x1, 0x0, 0x8}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8000000, 0x2, 0x2, 0xf, 0x2000, 0x96}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. [ 91.278053][ T5764] cgroup: Unknown subsys name 'net' [ 91.391963][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.643045][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.424459][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.433431][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.443074][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.452391][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.456783][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.461910][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.469826][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.476244][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.491332][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.498947][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.499159][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.513041][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.516159][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.532763][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.550962][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.558872][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.560389][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.575350][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.586074][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.586754][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.593967][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.603243][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.625767][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.641254][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.222069][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 96.282091][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 96.299164][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 96.415969][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 96.465612][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.476872][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.487232][ T5777] bridge_slave_0: entered allmulticast mode [ 96.495352][ T5777] bridge_slave_0: entered promiscuous mode [ 96.542444][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.555102][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.566240][ T5777] bridge_slave_1: entered allmulticast mode [ 96.576375][ T5777] bridge_slave_1: entered promiscuous mode [ 96.658746][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.668399][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.680376][ T5779] bridge_slave_0: entered allmulticast mode [ 96.689331][ T5779] bridge_slave_0: entered promiscuous mode [ 96.720298][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.751644][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.761569][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.771403][ T5779] bridge_slave_1: entered allmulticast mode [ 96.781991][ T5779] bridge_slave_1: entered promiscuous mode [ 96.815694][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.836275][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.844844][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.855869][ T5776] bridge_slave_0: entered allmulticast mode [ 96.864048][ T5776] bridge_slave_0: entered promiscuous mode [ 96.904538][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.912507][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.924164][ T5776] bridge_slave_1: entered allmulticast mode [ 96.932558][ T5776] bridge_slave_1: entered promiscuous mode [ 96.941766][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.956488][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.966740][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.977638][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.985938][ T5775] bridge_slave_0: entered allmulticast mode [ 96.996158][ T5775] bridge_slave_0: entered promiscuous mode [ 97.005559][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.013903][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.021707][ T5775] bridge_slave_1: entered allmulticast mode [ 97.030187][ T5775] bridge_slave_1: entered promiscuous mode [ 97.041962][ T5777] team0: Port device team_slave_0 added [ 97.098184][ T5777] team0: Port device team_slave_1 added [ 97.123024][ T5779] team0: Port device team_slave_0 added [ 97.163396][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.181476][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.193402][ T5779] team0: Port device team_slave_1 added [ 97.216076][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.262756][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.288936][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.296351][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.323781][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.339156][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.346605][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.376476][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.419212][ T5776] team0: Port device team_slave_0 added [ 97.439004][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.446364][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.477622][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.492703][ T5776] team0: Port device team_slave_1 added [ 97.505129][ T5775] team0: Port device team_slave_0 added [ 97.516502][ T5775] team0: Port device team_slave_1 added [ 97.524785][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.534378][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.562018][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.591935][ T5789] Bluetooth: hci2: command tx timeout [ 97.647144][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.657766][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.694738][ T5789] Bluetooth: hci0: command tx timeout [ 97.694758][ T5088] Bluetooth: hci1: command tx timeout [ 97.695599][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.721799][ T5088] Bluetooth: hci3: command tx timeout [ 97.723370][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.738085][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.770319][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.785340][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.793433][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.822582][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.849713][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.858963][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.891979][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.913803][ T972] cfg80211: failed to load regulatory.db [ 97.954357][ T5777] hsr_slave_0: entered promiscuous mode [ 97.962467][ T5777] hsr_slave_1: entered promiscuous mode [ 98.039026][ T5776] hsr_slave_0: entered promiscuous mode [ 98.051405][ T5776] hsr_slave_1: entered promiscuous mode [ 98.061913][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.073950][ T5776] Cannot create hsr debugfs directory [ 98.107214][ T5779] hsr_slave_0: entered promiscuous mode [ 98.116769][ T5779] hsr_slave_1: entered promiscuous mode [ 98.125974][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.136138][ T5779] Cannot create hsr debugfs directory [ 98.149870][ T5775] hsr_slave_0: entered promiscuous mode [ 98.158667][ T5775] hsr_slave_1: entered promiscuous mode [ 98.166938][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.178689][ T5775] Cannot create hsr debugfs directory [ 98.791772][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.814850][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.832108][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.850814][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.928086][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.952795][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.967964][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.980085][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.112357][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.179634][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.199299][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.248072][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.368011][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.384605][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.397570][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.423279][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.509916][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.613687][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.646788][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.670988][ T5088] Bluetooth: hci2: command tx timeout [ 99.674058][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.687351][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.709207][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.717262][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.751254][ T5088] Bluetooth: hci0: command tx timeout [ 99.751304][ T5789] Bluetooth: hci3: command tx timeout [ 99.757878][ T5088] Bluetooth: hci1: command tx timeout [ 99.788687][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.808032][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.821072][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.859832][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.869831][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.945174][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.978542][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.015339][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.036674][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.081109][ T4788] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.089394][ T4788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.134753][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.143248][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.160416][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.233663][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.242137][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.280120][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.287932][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.338117][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.516957][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.727040][ T5779] veth0_vlan: entered promiscuous mode [ 100.773923][ T5779] veth1_vlan: entered promiscuous mode [ 100.817688][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.852916][ T5779] veth0_macvtap: entered promiscuous mode [ 100.893377][ T5779] veth1_macvtap: entered promiscuous mode [ 100.994967][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.027376][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.048193][ T5776] veth0_vlan: entered promiscuous mode [ 101.093939][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.108621][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.122002][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.137658][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.163384][ T5776] veth1_vlan: entered promiscuous mode [ 101.180990][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.224182][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.424870][ T5777] veth0_vlan: entered promiscuous mode [ 101.435555][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.456511][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.474472][ T5776] veth0_macvtap: entered promiscuous mode [ 101.509745][ T5776] veth1_macvtap: entered promiscuous mode [ 101.545602][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.559386][ T5777] veth1_vlan: entered promiscuous mode [ 101.560843][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.614676][ T5775] veth0_vlan: entered promiscuous mode [ 101.684454][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.709082][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.723258][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.751749][ T5088] Bluetooth: hci2: command tx timeout [ 101.760141][ T5775] veth1_vlan: entered promiscuous mode [ 101.805707][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.828845][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.831841][ T5088] Bluetooth: hci1: command tx timeout [ 101.841408][ T5789] Bluetooth: hci3: command tx timeout [ 101.844555][ T5088] Bluetooth: hci0: command tx timeout [ 101.855510][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.866609][ T5777] veth0_macvtap: entered promiscuous mode [ 101.886027][ T5777] veth1_macvtap: entered promiscuous mode [ 101.924798][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.940574][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.952071][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.962366][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.026265][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.044289][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.067274][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.081697][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.105756][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.140541][ T5775] veth0_macvtap: entered promiscuous mode [ 102.156318][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.172149][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.172189][ T5852] syz.3.5[5852]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 102.184044][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.206906][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.210188][ T5852] loop3: detected capacity change from 0 to 512 [ 102.221769][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.253825][ T5775] veth1_macvtap: entered promiscuous mode [ 102.268025][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.286686][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.295655][ T5852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.309037][ T5852] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.325036][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.357284][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.412053][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.520291][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.536737][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.548673][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.551123][ T5856] loop3: detected capacity change from 0 to 1024 [ 102.562482][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.582201][ T5856] EXT4-fs: Ignoring removed orlov option [ 102.615044][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.625105][ T5856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.629412][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.656905][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.746924][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.759823][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.781680][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.798717][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.809279][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.821059][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.832691][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.844191][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.861537][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.867500][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.875228][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.889419][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.900368][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.913933][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.045068][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.067569][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.121251][ T3434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.141813][ T3434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.277961][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.321009][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.329977][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.369985][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.455851][ T5863] loop2: detected capacity change from 0 to 164 [ 103.502824][ T3434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.538104][ T5778] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.548350][ T3434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.833522][ T5088] Bluetooth: hci2: command tx timeout [ 103.852900][ T5867] vivid-004: disconnect [ 103.864666][ T5866] vivid-004: reconnect [ 103.912036][ T5088] Bluetooth: hci0: command tx timeout [ 103.913357][ T51] Bluetooth: hci3: command tx timeout [ 103.917682][ T5088] Bluetooth: hci1: command tx timeout [ 103.964583][ T5869] ======================================================= [ 103.964583][ T5869] WARNING: The mand mount option has been deprecated and [ 103.964583][ T5869] and is ignored by this kernel. Remove the mand [ 103.964583][ T5869] option from the mount to silence this warning. [ 103.964583][ T5869] ======================================================= [ 104.166221][ T5873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 104.167324][ T5861] loop3: detected capacity change from 0 to 40427 [ 104.205224][ T5861] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 104.246370][ T5861] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 104.283233][ T5861] F2FS-fs (loop3): invalid crc value [ 104.289129][ T5861] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 104.353778][ T5861] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.471488][ T5880] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.531575][ T5861] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 104.552954][ T5861] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.604125][ T5886] loop0: detected capacity change from 0 to 64 [ 104.875899][ T5779] syz-executor: attempt to access beyond end of device [ 104.875899][ T5779] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 104.935325][ T5779] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 104.982231][ T5779] syz-executor: attempt to access beyond end of device [ 104.982231][ T5779] loop3: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 105.007871][ T5779] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 105.219501][ T5892] loop0: detected capacity change from 0 to 8192 [ 105.302212][ T5892] Dev loop0: RDB in block 1 has bad checksum [ 105.334632][ T5897] loop1: detected capacity change from 0 to 512 [ 105.638274][ T5897] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 105.697009][ T5897] FAT-fs (loop1): Filesystem has been set read-only [ 105.929369][ T5908] warning: `syz.0.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.370262][ T5923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28'. [ 106.616978][ T5935] loop2: detected capacity change from 0 to 512 [ 106.735725][ T5937] loop6: detected capacity change from 0 to 7 [ 106.765218][ T5937] Dev loop6: unable to read RDB block 7 [ 106.783179][ T5937] loop6: unable to read partition table [ 106.810902][ T5937] loop6: partition table beyond EOD, truncated [ 106.883841][ T5944] can0: slcan on ttyS3. [ 106.901212][ T5935] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 106.910177][ T5937] loop_reread_partitions: partition scan of loop6 (í|:îñG53¤ð‰DÇ‚‘òxx=¯íehÞ#·]ǛYµž,±Ò>—‡ÚßqE%|ýÁ ­) failed (rc=-5) [ 106.941377][ T5935] System zones: 0-2, 18-18, 34-35 [ 106.984399][ T5935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.047027][ T5935] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.061515][ T5944] can0 (unregistered): slcan off ttyS3. [ 107.151275][ T5948] loop3: detected capacity change from 0 to 64 [ 107.242174][ T5951] loop0: detected capacity change from 0 to 512 [ 107.264735][ T5948] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 107.307706][ T5951] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.39: inode has both inline data and extents flags [ 107.369511][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 107.381089][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.394432][ T5951] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.39: couldn't read orphan inode 15 (err -117) [ 107.459866][ T5951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.732545][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.755086][ T5964] program syz.1.43 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.955602][ T5968] Zero length message leads to an empty skb [ 108.289205][ T5984] loop3: detected capacity change from 0 to 1024 [ 108.480301][ T5990] netlink: 104 bytes leftover after parsing attributes in process `syz.2.52'. [ 108.741181][ T5984] hfsplus: invalid catalog entry type [ 108.806149][ T5997] hfsplus: invalid catalog entry type [ 109.773506][ T6028] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.61'. [ 109.801323][ T972] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.811140][ T6028] netlink: zone id is out of range [ 109.919543][ T6031] loop0: detected capacity change from 0 to 256 [ 110.015024][ T972] usb 3-1: unable to get BOS descriptor or descriptor too short [ 110.049242][ T972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.089077][ T972] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 110.099032][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 110.108894][ T972] usb 3-1: Product: syz [ 110.120965][ T972] usb 3-1: Manufacturer: syz [ 110.191248][ T972] usb 3-1: Found UVC 1.00 device syz (8086:0ad2) [ 110.613173][ T972] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 110.654934][ T972] videodev: could not get a free minor [ 110.680700][ T972] uvcvideo 3-1:1.1: Failed to register meta-cap device (-23). [ 110.683653][ T6050] loop1: detected capacity change from 0 to 1024 [ 110.886081][ T6050] hfsplus: bad catalog entry type [ 110.993413][ T5825] usb 3-1: USB disconnect, device number 2 [ 111.013071][ T48] hfsplus: b-tree write err: -5, ino 25 [ 111.039940][ T48] hfsplus: b-tree write err: -5, ino 4 [ 111.060120][ T48] hfsplus: b-tree write err: -5, ino 2 [ 111.493999][ T6070] loop1: detected capacity change from 0 to 256 [ 111.583648][ T27] audit: type=1800 audit(1791371283.217:2): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.78" name="file1" dev="loop1" ino=1048622 res=0 errno=0 [ 111.696482][ T6070] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 111.748962][ T6070] FAT-fs (loop1): Filesystem has been set read-only [ 112.015826][ T5825] IPVS: starting estimator thread 0... [ 112.120828][ T6087] IPVS: using max 20 ests per chain, 48000 per kthread [ 112.146141][ T6093] loop1: detected capacity change from 0 to 1024 [ 112.443688][ T6097] loop1: detected capacity change from 0 to 2048 [ 112.486932][ T6097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.521355][ T6097] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.553578][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.602483][ T6097] fs-verity: sha512 using implementation "sha512-avx2" [ 112.687803][ T6095] loop2: detected capacity change from 0 to 32768 [ 112.713845][ T6095] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.90 (6095) [ 112.787936][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.802209][ T6095] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 112.819441][ T6095] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 112.846416][ T6095] BTRFS info (device loop2): using free space tree [ 113.019998][ T6118] loop1: detected capacity change from 0 to 512 [ 113.023071][ T6095] BTRFS info (device loop2): enabling ssd optimizations [ 113.062809][ T6118] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 113.109659][ T6095] BTRFS info (device loop2): auto enabling async discard [ 113.168929][ T6118] EXT4-fs (loop1): orphan cleanup on readonly fs [ 113.222732][ T6118] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.92: bad orphan inode 15 [ 113.314774][ T6118] ext4_test_bit(bit=14, block=18) = 1 [ 113.320361][ T6118] is_bad_inode(inode)=0 [ 113.343069][ T6118] NEXT_ORPHAN(inode)=1023 [ 113.347745][ T6118] max_ino=32 [ 113.370616][ T6118] i_nlink=0 [ 113.377191][ T6095] capability: warning: `syz.2.90' uses deprecated v2 capabilities in a way that may be insecure [ 113.400770][ T6118] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2974: inode #15: comm syz.1.92: corrupted xattr block 19: e_value size too large [ 113.438355][ T6118] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 113.463459][ T6118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 113.498156][ T6129] loop3: detected capacity change from 0 to 2048 [ 113.538467][ T6129] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 113.559710][ T6129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.757434][ T5776] BTRFS info (device loop2): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 113.862968][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.358190][ T6144] loop3: detected capacity change from 0 to 256 [ 114.403138][ T6144] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 114.449213][ T6144] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 114.490661][ T6144] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 114.511402][ T6144] UDF-fs: Scanning with blocksize 512 failed [ 114.527971][ T6148] loop2: detected capacity change from 0 to 164 [ 114.557142][ T6144] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 114.596782][ T6148] Unable to read rock-ridge attributes [ 114.654447][ T6148] Unable to read rock-ridge attributes [ 114.691900][ T6144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.800317][ T6150] loop0: detected capacity change from 0 to 764 [ 114.896320][ T6150] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 115.145724][ T6152] syz.2.106 (6152) used greatest stack depth: 20728 bytes left [ 115.508410][ T6139] loop1: detected capacity change from 0 to 32768 [ 115.517688][ T6165] loop2: detected capacity change from 0 to 16 [ 115.627265][ T6165] erofs: (device loop2): mounted with root inode @ nid 36. [ 115.709042][ T6139] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 115.990015][ T27] audit: type=1800 audit(1791371287.627:3): pid=6139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.99" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 116.016520][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.056057][ T6139] (syz.1.99,6139,1):ocfs2_double_lock:1192 ERROR: status = -2 [ 116.294829][ T6176] ªªªªªª: renamed from vlan0 (while UP) [ 116.388485][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 116.611637][ T6180] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 117.020421][ T6194] input: syz1 as /devices/virtual/input/input5 [ 117.200672][ T972] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.253695][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.128'. [ 117.403015][ T972] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.429038][ T972] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.453686][ T972] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 117.480655][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.491107][ T5859] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.686153][ T5859] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 117.710102][ T5859] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 117.722151][ T28] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.732264][ T5859] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 117.760110][ T5859] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice= 1.00 [ 117.771135][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.779891][ T5859] usb 2-1: Product: syz [ 117.787925][ T5859] usb 2-1: Manufacturer: syz [ 117.793965][ T5859] usb 2-1: SerialNumber: syz [ 117.819042][ T6205] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 117.839954][ T6205] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 117.850839][ T6205] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 117.895974][ T5859] scsi host1: microtekX6 [ 117.924373][ T28] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 117.952509][ T28] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 117.963872][ T972] wacom 0003:056A:033B.0001: unknown main item tag 0x0 [ 117.967309][ T28] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 117.990875][ T28] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 118.002667][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.014248][ T972] wacom 0003:056A:033B.0001: unknown main item tag 0x0 [ 118.026110][ T6213] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 118.031279][ T972] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 118.039440][ T28] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 118.058414][ T6223] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 118.058414][ T6223] The task syz.3.134 (6223) triggered the difference, watch for misbehavior. [ 118.118606][ T972] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 118.142765][ T28] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 118.149003][ T972] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0001/input/input6 [ 118.374914][ T28] usb 2-1: USB disconnect, device number 2 [ 118.375853][ T972] usb 3-1: USB disconnect, device number 3 [ 118.542056][ T6224] fido_id[6224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 118.606418][ T5780] usb 1-1: USB disconnect, device number 2 [ 118.717129][ T5780] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 118.773644][ T5780] cyberjack 1-1:1.0: device disconnected [ 118.942927][ T6228] loop3: detected capacity change from 0 to 2048 [ 118.978062][ T6228] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 119.021833][ T6228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.722894][ T6248] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 119.772941][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 119.803294][ T6248] bond1 (unregistering): Released all slaves [ 120.273021][ T6272] netlink: 40 bytes leftover after parsing attributes in process `syz.2.154'. [ 120.316127][ T6279] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 120.468533][ T6283] loop2: detected capacity change from 0 to 128 [ 120.905014][ T6295] loop3: detected capacity change from 0 to 512 [ 121.018711][ T6295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 121.035024][ T6295] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.112531][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 121.552185][ T6318] Bluetooth: MGMT ver 1.22 [ 121.626232][ T6324] loop0: detected capacity change from 0 to 512 [ 122.198646][ T6336] loop2: detected capacity change from 0 to 24 [ 122.240164][ T6336] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 122.286980][ T6336] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 122.336518][ T6340] loop0: detected capacity change from 0 to 512 [ 122.420988][ T6340] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 122.444848][ T6340] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.522127][ T6340] EXT4-fs (loop0): 1 truncate cleaned up [ 122.530938][ T6340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.602885][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'. [ 122.688437][ T6340] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #2: block 13: comm syz.0.184: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 122.724606][ T6328] loop3: detected capacity change from 0 to 40427 [ 122.764519][ T6328] F2FS-fs (loop3): invalid crc value [ 122.819647][ T6328] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.876788][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.002135][ T6328] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 123.153078][ T27] audit: type=1800 audit(1791371294.787:4): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.178" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 123.252838][ T5779] syz-executor: attempt to access beyond end of device [ 123.252838][ T5779] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.283478][ T5779] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 123.894057][ T6349] loop2: detected capacity change from 0 to 32768 [ 123.981203][ T6349] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 124.165833][ T6386] loop1: detected capacity change from 0 to 4096 [ 124.237885][ T6349] XFS (loop2): Ending clean mount [ 124.317130][ T6388] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.432444][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 124.470398][ T27] audit: type=1800 audit(1791371296.107:5): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.200" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 124.542459][ T27] audit: type=1800 audit(1791371296.187:6): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.200" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 124.650685][ T28] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 124.696672][ T5776] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 124.722429][ T6394] loop0: detected capacity change from 0 to 1024 [ 124.870107][ T28] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 124.898876][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.910263][ T6396] loop3: detected capacity change from 0 to 7 [ 124.934043][ T28] usb 4-1: config 0 descriptor?? [ 124.946660][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.956729][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 124.971892][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.982136][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 124.993519][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.002881][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 125.012357][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.016544][ T28] cp210x 4-1:0.0: cp210x converter detected [ 125.021866][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 125.027003][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.049587][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 125.060571][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.070372][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 125.095117][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.105550][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 125.114352][ T6396] ldm_validate_partition_table(): Disk read failed. [ 125.148635][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.159538][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 125.170344][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.185468][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 125.199197][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.209739][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 125.235384][ T6396] Dev loop3: unable to read RDB block 0 [ 125.252575][ T6396] loop3: unable to read partition table [ 125.265999][ T6396] loop3: partition table beyond EOD, truncated [ 125.280698][ T6396] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 125.458394][ T28] usb 4-1: cp210x converter now attached to ttyUSB0 [ 125.561934][ T6401] loop2: detected capacity change from 0 to 2048 [ 125.577847][ T6401] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 125.603340][ T6401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.644677][ T6405] rnbd_client L127: Can't parse path ip:127.0.0.1\ß?:…b”EzñîÜ[‡þ¶ÖßùÍÛµ¬°>,: -22 [ 125.735028][ T5825] usb 4-1: USB disconnect, device number 2 [ 125.769371][ T5825] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 125.845857][ T5825] cp210x 4-1:0.0: device disconnected [ 126.044735][ T6414] loop1: detected capacity change from 0 to 512 [ 126.063598][ T6414] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.122077][ T6414] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.212: invalid indirect mapped block 83886080 (level 1) [ 126.189530][ T6414] EXT4-fs (loop1): Remounting filesystem read-only [ 126.207104][ T6414] EXT4-fs (loop1): 1 orphan inode deleted [ 126.215943][ T6414] EXT4-fs (loop1): 1 truncate cleaned up [ 126.229272][ T6414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.399998][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.840341][ T6430] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 127.190716][ T5844] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.403631][ T5844] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 127.429458][ T5844] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 127.453289][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.013470][ T5844] lg-g15 0003:046D:C222.0002: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 128.150999][ T5844] lg-g15 0003:046D:C222.0002: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 128.251434][ T5844] usb 2-1: USB disconnect, device number 3 [ 128.307588][ T6452] fido_id[6452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 128.937242][ T6463] loop3: detected capacity change from 0 to 512 [ 130.224636][ T6471] loop1: detected capacity change from 0 to 40427 [ 130.259152][ T6471] F2FS-fs (loop1): invalid crc value [ 130.275824][ T6471] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.455571][ T6471] F2FS-fs (loop1): Start checkpoint disabled! [ 130.509922][ T6471] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 130.890437][ T3434] kworker/u4:8: attempt to access beyond end of device [ 130.890437][ T3434] loop1: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 130.914569][ T3434] kworker/u4:8: attempt to access beyond end of device [ 130.914569][ T3434] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 130.932909][ T3434] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 130.948797][ T3434] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 131.100648][ T972] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.132916][ T6505] geneve1: entered promiscuous mode [ 131.184614][ T6505] geneve1: left promiscuous mode [ 131.302747][ T972] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.315615][ T972] usb 4-1: config 0 has no interface number 0 [ 131.334480][ T972] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 131.350777][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.359487][ T972] usb 4-1: Product: syz [ 131.370583][ T972] usb 4-1: Manufacturer: syz [ 131.375861][ T972] usb 4-1: SerialNumber: syz [ 131.401445][ T972] usb 4-1: config 0 descriptor?? [ 131.637884][ T972] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 131.684026][ T972] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.751137][ T972] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 131.780991][ T972] usb 4-1: media controller created [ 131.882245][ T972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.001532][ T972] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 132.140879][ T972] usb 4-1: USB disconnect, device number 3 [ 132.839628][ T6541] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.604517][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 133.759431][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.767241][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.076484][ T6588] loop1: detected capacity change from 0 to 256 [ 134.197615][ T6592] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 134.355912][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 134.558860][ T6602] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 134.576739][ T6604] netlink: 104 bytes leftover after parsing attributes in process `syz.0.284'. [ 134.657936][ T6607] loop3: detected capacity change from 0 to 512 [ 134.705858][ T6607] EXT4-fs (loop3): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 134.786164][ T6610] loop1: detected capacity change from 0 to 512 [ 134.845307][ T6610] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.875398][ T6616] loop2: detected capacity change from 0 to 1024 [ 134.958638][ T6610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.968722][ T6616] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 135.015107][ T6610] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.041711][ T6616] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 135.077338][ T6616] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.288: Failed to acquire dquot type 0 [ 135.129164][ T6616] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 135.228191][ T6616] EXT4-fs (loop2): 1 truncate cleaned up [ 135.247654][ T6616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.307908][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.338591][ T6629] FAULT_INJECTION: forcing a failure. [ 135.338591][ T6629] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 135.368446][ T6629] CPU: 1 PID: 6629 Comm: syz.0.291 Not tainted syzkaller #0 [ 135.375834][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.386112][ T6629] Call Trace: [ 135.389889][ T6629] [ 135.393148][ T6629] dump_stack_lvl+0x18c/0x250 [ 135.397998][ T6629] ? show_regs_print_info+0x20/0x20 [ 135.403548][ T6629] ? load_image+0x420/0x420 [ 135.408213][ T6629] ? __might_fault+0xaa/0x120 [ 135.413010][ T6629] ? __lock_acquire+0x7eb0/0x7eb0 [ 135.418533][ T6629] should_fail_ex+0x394/0x4c0 [ 135.423391][ T6629] _copy_from_user+0x2f/0xe0 [ 135.428058][ T6629] kstrtouint_from_user+0xde/0x170 [ 135.433432][ T6629] ? kstrtol_from_user+0x190/0x190 [ 135.438767][ T6629] ? get_pid_task+0x20/0x1e0 [ 135.443810][ T6629] proc_fail_nth_write+0x8f/0x250 [ 135.449009][ T6629] ? proc_fail_nth_read+0x260/0x260 [ 135.454373][ T6629] ? iov_iter_iovec_advance+0x1ef/0x290 [ 135.460097][ T6629] do_iter_write+0x4e5/0xc50 [ 135.464787][ T6629] ? proc_fail_nth_read+0x260/0x260 [ 135.470146][ T6629] ? vfs_iter_write+0xa0/0xa0 [ 135.475066][ T6629] ? rcu_read_lock_any_held+0xb4/0x140 [ 135.480869][ T6629] ? rcu_read_lock_bh_held+0x100/0x100 [ 135.486425][ T6629] do_writev+0x27f/0x480 [ 135.490759][ T6629] ? do_readv+0x460/0x460 [ 135.495171][ T6629] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 135.501320][ T6629] ? lock_chain_count+0x20/0x20 [ 135.506349][ T6629] ? lockdep_hardirqs_on+0x98/0x150 [ 135.511703][ T6629] do_syscall_64+0x55/0xb0 [ 135.516285][ T6629] ? clear_bhb_loop+0x40/0x90 [ 135.517755][ T6616] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 135.521079][ T6629] ? clear_bhb_loop+0x40/0x90 [ 135.521137][ T6629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.521169][ T6629] RIP: 0033:0x7f8ac019e199 [ 135.521190][ T6629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.521207][ T6629] RSP: 002b:00007f8ac104f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 135.521231][ T6629] RAX: ffffffffffffffda RBX: 00007f8ac0425fa0 RCX: 00007f8ac019e199 [ 135.521246][ T6629] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000003 [ 135.546584][ T6616] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 135.568074][ T6629] RBP: 00007f8ac02358e0 R08: 0000000000000000 R09: 0000000000000000 [ 135.568098][ T6629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.568111][ T6629] R13: 00007f8ac0426038 R14: 00007f8ac0425fa0 R15: 00007fffe21c1f78 [ 135.568154][ T6629] [ 135.568272][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.610614][ T6616] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.288: Failed to acquire dquot type 0 [ 135.611584][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.656426][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.662989][ C1] hrtimer: interrupt took 94802980 ns [ 135.757809][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.896281][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.768641][ T6659] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 136.790240][ T6659] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.586414][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'. [ 138.337813][ T6718] loop2: detected capacity change from 0 to 256 [ 138.371633][ T6718] exfat: Deprecated parameter 'utf8' [ 138.415120][ T6718] exfat: Deprecated parameter 'utf8' [ 138.431281][ T6718] exfat: Deprecated parameter 'namecase' [ 138.488501][ T6721] loop0: detected capacity change from 0 to 2048 [ 138.570353][ T6721] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 138.597638][ T6718] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 138.619899][ T6721] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 138.643855][ T6721] UDF-fs: Scanning with blocksize 512 failed [ 138.688712][ T6725] loop1: detected capacity change from 0 to 128 [ 138.712182][ T6721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.893137][ T6727] syz.1.319: attempt to access beyond end of device [ 138.893137][ T6727] loop1: rw=2049, sector=145, nr_sectors = 240 limit=128 [ 139.372782][ T3434] kworker/u4:8: attempt to access beyond end of device [ 139.372782][ T3434] loop1: rw=1, sector=385, nr_sectors = 656 limit=128 [ 139.610725][ T972] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.699428][ T6749] loop2: detected capacity change from 0 to 256 [ 139.741536][ T6749] exfat: Deprecated parameter 'utf8' [ 139.782041][ T6749] exfat: Deprecated parameter 'utf8' [ 139.838516][ T972] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.883516][ T6749] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 139.896432][ T972] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.946275][ T972] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.992530][ T972] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 140.019039][ T972] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 140.060713][ T972] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 140.120653][ T972] usb 4-1: config 1 interface 1 has no altsetting 0 [ 140.144787][ T972] usb 4-1: string descriptor 0 read error: -22 [ 140.158310][ T972] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 140.181706][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.191616][ T6762] loop2: detected capacity change from 0 to 512 [ 140.196797][ T6759] loop0: detected capacity change from 0 to 2048 [ 140.220100][ T6762] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 140.304690][ T6767] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.321693][ T6762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.345197][ T6762] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.449924][ T27] audit: type=1800 audit(1791371312.087:7): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.330" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 140.479656][ T27] audit: type=1800 audit(1791371312.117:8): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.330" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 140.742208][ T6767] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 140.769124][ T6767] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 140.800305][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.804682][ T6767] Remounting filesystem read-only [ 140.819340][ T12] NILFS (loop0): discard dirty page: offset=0, ino=15 [ 140.829308][ T12] NILFS (loop0): discard dirty block: blocknr=22, size=1024 [ 140.839553][ T12] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.852436][ T12] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.865925][ T12] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.881689][ T5777] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 140.907458][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 140.920042][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.936387][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.952632][ T5777] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 140.967751][ T5777] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 140.985119][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 141.013645][ T5777] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 141.028218][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 141.051066][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 141.090925][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 141.141125][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 141.185970][ T5777] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 141.208366][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 141.251035][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 141.251413][ T972] usb 4-1: USB disconnect, device number 4 [ 141.320746][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 141.340888][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 141.360974][ T5777] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 141.387302][ T5777] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 141.413023][ T5777] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 141.442987][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 141.477722][ T5777] NILFS (loop0): discard dirty page: offset=229376, ino=3 [ 141.501914][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.337'. [ 141.507668][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 141.523098][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 141.533940][ T5777] NILFS (loop0): discard dirty block: blocknr=50, size=1024 [ 141.544919][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 141.736192][ T6783] loop0: detected capacity change from 0 to 4096 [ 141.829741][ T6786] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.910845][ T5789] Bluetooth: hci0: command tx timeout [ 142.149484][ T5777] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 142.166850][ T5777] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 142.184165][ T6796] loop3: detected capacity change from 0 to 128 [ 142.209410][ T5777] Remounting filesystem read-only [ 142.215565][ T5777] NILFS (loop0): error -5 truncating bmap (ino=12) [ 142.220056][ T6796] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 142.260650][ T5777] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 142.282062][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 142.299191][ T5777] NILFS (loop0): discard dirty block: blocknr=14, size=4096 [ 142.314878][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 142.330702][ T5777] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 142.348428][ T5777] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 142.369391][ T5777] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 142.389899][ T6800] loop2: detected capacity change from 0 to 4096 [ 142.404339][ T5777] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 142.405672][ T6796] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 142.427697][ T5777] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 142.537495][ T6803] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.680676][ T27] audit: type=1800 audit(36397040.309:9): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.345" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 143.737801][ T6826] team0: entered promiscuous mode [ 143.767524][ T6826] team_slave_0: entered promiscuous mode [ 143.808843][ T6826] team_slave_1: entered promiscuous mode [ 143.839951][ T6826] macvlan2: entered promiscuous mode [ 143.878311][ T6826] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.920525][ C1] sched: RT throttling activated [ 144.037719][ T972] IPVS: starting estimator thread 0... [ 144.170730][ T6831] IPVS: using max 17 ests per chain, 40800 per kthread [ 144.373068][ T6813] loop0: detected capacity change from 0 to 131072 [ 144.390803][ T6813] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(3584) blocks(12321792) [ 144.400000][ T6813] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 144.449583][ T6813] F2FS-fs (loop0): Found nat_bits in checkpoint [ 144.531721][ T6813] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 144.538934][ T6813] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 145.333331][ T6864] trusted_key: encrypted_key: keyword 'uew' not recognized [ 145.752341][ T6874] capability: warning: `syz.1.378' uses 32-bit capabilities (legacy support in use) [ 146.120799][ T5844] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 146.196625][ T6866] loop3: detected capacity change from 0 to 32768 [ 146.222974][ T6866] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 146.250763][ T6880] Illegal XDP return value 4294967274 on prog (id 28) dev N/A, expect packet loss! [ 146.342008][ T5844] usb 3-1: too many configurations: 181, using maximum allowed: 8 [ 146.362766][ T5844] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 146.374533][ T6866] XFS (loop3): Ending clean mount [ 146.383966][ T5844] usb 3-1: can't read configurations, error -71 [ 146.695101][ T5779] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 146.808124][ T6905] tmpfs: Bad value for 'gid' [ 146.882506][ T6907] loop0: detected capacity change from 0 to 512 [ 146.921632][ T6907] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.969894][ T6907] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 146.979142][ T6907] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.390: corrupted in-inode xattr: e_value size too large [ 146.999290][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 147.009035][ T6907] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.390: couldn't read orphan inode 15 (err -117) [ 147.061188][ T6907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.161856][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.210393][ T23] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 147.234284][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.254530][ T23] usb 2-1: config 0 descriptor?? [ 147.277684][ T23] cp210x 2-1:0.0: cp210x converter detected [ 147.692383][ T23] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 147.698512][ T6924] netlink: 76 bytes leftover after parsing attributes in process `syz.2.397'. [ 147.717216][ T6924] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 147.726365][ T23] usb 2-1: cp210x converter now attached to ttyUSB0 [ 147.955429][ T23] usb 2-1: USB disconnect, device number 4 [ 147.985054][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 148.012603][ T23] cp210x 2-1:0.0: device disconnected [ 148.123551][ T6930] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 148.281010][ T6934] i2c i2c-0: delete_device: Can't parse I2C address [ 148.510693][ T28] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 148.588107][ T6943] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.405'. [ 148.722051][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 148.736712][ T28] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 148.750664][ T28] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.776947][ T28] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.798653][ T28] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.826683][ T28] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.856228][ T28] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.877432][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.104711][ T6953] loop0: detected capacity change from 0 to 512 [ 149.132527][ T6953] EXT4-fs: Ignoring removed nobh option [ 149.191158][ T28] usb 3-1: GET_CAPABILITIES returned 0 [ 149.210670][ T28] usbtmc 3-1:16.0: can't read capabilities [ 149.227113][ T6953] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #3: comm syz.0.409: corrupted inode contents [ 149.319905][ T6953] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #3: comm syz.0.409: mark_inode_dirty error [ 149.369197][ T6953] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #3: comm syz.0.409: corrupted inode contents [ 149.398284][ T6953] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #3: comm syz.0.409: mark_inode_dirty error [ 149.430321][ T6961] bridge_slave_0: left allmulticast mode [ 149.457596][ T6961] bridge_slave_0: left promiscuous mode [ 149.469587][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.479396][ T6953] Quota error (device loop0): write_blk: dquota write failed [ 149.519074][ T6961] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 149.524122][ T6953] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 149.544052][ T972] usb 3-1: USB disconnect, device number 6 [ 149.582947][ T6953] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.409: Failed to acquire dquot type 0 [ 149.626064][ T6953] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.409: corrupted inode contents [ 149.660417][ T6953] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #16: comm syz.0.409: mark_inode_dirty error [ 149.692158][ T6953] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.409: corrupted inode contents [ 149.735401][ T6953] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #16: comm syz.0.409: mark_inode_dirty error [ 149.756383][ T6953] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.409: corrupted inode contents [ 149.788274][ T6953] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 149.805549][ T6953] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.409: corrupted inode contents [ 149.819663][ T6953] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.409: mark_inode_dirty error [ 149.834276][ T6953] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 149.857145][ T6953] EXT4-fs (loop0): 1 truncate cleaned up [ 149.868163][ T6953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.023406][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.158237][ T6976] loop3: detected capacity change from 0 to 8 [ 150.284699][ T6978] program syz.2.420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.688183][ T6990] loop3: detected capacity change from 0 to 256 [ 150.785382][ T6990] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 151.367179][ T6982] loop2: detected capacity change from 0 to 40427 [ 151.395239][ T6982] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 151.431315][ T6982] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 151.463958][ T6982] F2FS-fs (loop2): invalid crc value [ 151.673667][ T27] audit: type=1400 audit(36397049.319:10): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7011 comm="syz.1.435" [ 151.765017][ T6982] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 151.774950][ T6982] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 151.988479][ T5776] syz-executor: attempt to access beyond end of device [ 151.988479][ T5776] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.012890][ T5776] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 152.581990][ T7035] program syz.1.447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.865062][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.450'. [ 152.930633][ T28] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 153.090136][ T7051] loop1: detected capacity change from 0 to 256 [ 153.116682][ T7051] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 153.162718][ T28] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.171084][ T7051] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 153.180638][ T28] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 153.210716][ T7051] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 153.219268][ T7051] UDF-fs: Scanning with blocksize 512 failed [ 153.242153][ T28] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.290773][ T28] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 153.304649][ T7051] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 153.326147][ T28] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 153.347803][ T28] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.363549][ T28] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.374389][ T7051] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.388364][ T28] usb 1-1: Product: syz [ 153.396643][ T28] usb 1-1: Manufacturer: syz [ 153.462369][ T28] cdc_wdm 1-1:1.0: skipping garbage [ 153.477241][ T28] cdc_wdm 1-1:1.0: skipping garbage [ 153.510174][ T28] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 153.524358][ T28] cdc_wdm 1-1:1.0: Unknown control protocol [ 153.768702][ T7061] loop1: detected capacity change from 0 to 1024 [ 153.819557][ T7061] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 153.832877][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 153.843224][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 153.852558][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 153.859726][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 153.870857][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 153.878263][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 153.890688][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 153.898289][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 153.905351][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 153.913068][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 153.921398][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 153.930071][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 153.938677][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 153.946746][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 153.955550][ T5844] usb 1-1: USB disconnect, device number 3 [ 153.962816][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 153.962857][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 153.962874][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 153.993226][ T7061] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #11: comm syz.1.458: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 154.096272][ T7061] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.458: couldn't read orphan inode 11 (err -117) [ 154.123875][ T7061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.169939][ T7066] loop2: detected capacity change from 0 to 512 [ 154.240277][ T7066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 154.268069][ T7061] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.458: lblock 2 mapped to illegal pblock 2 (length 1) [ 154.356905][ T7061] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 154.389341][ T7056] loop3: detected capacity change from 0 to 32768 [ 154.396573][ T7066] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 154.422520][ T7061] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.458: lblock 0 mapped to illegal pblock 48 (length 1) [ 154.461267][ T7066] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 154.483273][ T7061] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 154.503121][ T7066] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.459: Failed to acquire dquot type 0 [ 154.519075][ T7061] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.458: Failed to acquire dquot type 0 [ 154.686726][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 154.724070][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.798513][ T5775] EXT4-fs error (device loop1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 154.863738][ T5775] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 154.925267][ T5775] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 155.790742][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 156.001697][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 156.023960][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 156.044075][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.062173][ T23] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 156.074750][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.103861][ T23] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 156.147185][ T23] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 156.915165][ T23] usb 1-1: USB disconnect, device number 4 [ 156.953111][ T23] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 156.986637][ T23] kobil_sct 1-1:1.0: device disconnected [ 157.041025][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.855353][ T7145] loop3: detected capacity change from 0 to 4096 [ 158.040598][ T27] audit: type=1326 audit(36397055.679:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.0.494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac019e199 code=0x7ffc0000 [ 158.075479][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.180591][ T27] audit: type=1326 audit(36397055.729:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.0.494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac019e199 code=0x7ffc0000 [ 158.211077][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.255608][ T27] audit: type=1326 audit(36397055.729:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.0.494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac019e199 code=0x7ffc0000 [ 158.336710][ T27] audit: type=1326 audit(36397055.729:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.0.494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac019e199 code=0x7ffc0000 [ 158.373131][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.474897][ T27] audit: type=1326 audit(36397055.739:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.0.494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8ac019e199 code=0x7ffc0000 [ 158.511916][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.557120][ T27] audit: type=1326 audit(36397055.739:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.0.494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac019e199 code=0x7ffc0000 [ 158.589247][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.665113][ T27] audit: type=1326 audit(36397055.739:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.0.494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac019e199 code=0x7ffc0000 [ 158.710152][ T27] audit: type=1326 audit(36397055.749:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.0.494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac019e199 code=0x7ffc0000 [ 158.793252][ T27] audit: type=1326 audit(36397055.749:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.0.494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac019e199 code=0x7ffc0000 [ 159.183978][ T7175] netlink: 64 bytes leftover after parsing attributes in process `syz.2.504'. [ 195.192874][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.199408][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.759686][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 217.760173][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 217.766444][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 253.590726][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 256.635555][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.648848][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.150738][ T29] INFO: task jbd2/sda1-8:5105 blocked for more than 143 seconds. [ 316.159311][ T29] Not tainted syzkaller #0 [ 316.164637][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.174674][ T29] task:jbd2/sda1-8 state:D stack:25736 pid:5105 ppid:2 flags:0x00004000 [ 316.184980][ T29] Call Trace: [ 316.189476][ T29] [ 316.193888][ T29] __schedule+0x15ae/0x4660 [ 316.199380][ T29] ? asan.module_dtor+0x20/0x20 [ 316.205190][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 316.212055][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 316.218507][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 316.224594][ T29] schedule+0xbd/0x170 [ 316.229720][ T29] io_schedule+0x80/0xd0 [ 316.236880][ T29] bit_wait_io+0x11/0xd0 [ 316.244901][ T29] __wait_on_bit+0x9f/0x2c0 [ 316.250209][ T29] ? bit_wait+0xd0/0xd0 [ 316.259392][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 316.265713][ T29] ? bit_wait+0xd0/0xd0 [ 316.276284][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 316.282021][ T29] ? do_raw_write_lock+0x11e/0x260 [ 316.288005][ T29] ? bit_waitqueue+0x30/0x30 [ 316.293205][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 316.298659][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 316.309214][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 316.316885][ T29] ? lock_chain_count+0x20/0x20 [ 316.323115][ T29] ? _raw_spin_unlock+0x40/0x40 [ 316.328464][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 316.336052][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 316.347730][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 316.353374][ T29] ? timer_delete_sync+0x20/0x20 [ 316.359191][ T29] ? do_raw_read_unlock+0x80/0x80 [ 316.364832][ T29] ? prepare_to_wait+0x1aa/0x200 [ 316.370756][ T29] kjournald2+0x40f/0x810 [ 316.375476][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 316.381635][ T29] ? wake_bit_function+0x200/0x200 [ 316.387732][ T29] ? _raw_spin_unlock+0x40/0x40 [ 316.394327][ T29] ? __kthread_parkme+0x71/0x1c0 [ 316.399636][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 316.405143][ T29] kthread+0x2fa/0x390 [ 316.409375][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 316.415086][ T29] ? kthread_blkcg+0xd0/0xd0 [ 316.420122][ T29] ret_from_fork+0x48/0x80 [ 316.424653][ T29] ? kthread_blkcg+0xd0/0xd0 [ 316.429476][ T29] ret_from_fork_asm+0x11/0x20 [ 316.435038][ T29] [ 316.438523][ T29] INFO: task syz-executor:5764 blocked for more than 143 seconds. [ 316.447529][ T29] Not tainted syzkaller #0 [ 316.454011][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.469969][ T29] task:syz-executor state:D stack:21072 pid:5764 ppid:5763 flags:0x00004002 [ 316.486564][ T29] Call Trace: [ 316.490348][ T29] [ 316.493653][ T29] __schedule+0x15ae/0x4660 [ 316.498771][ T29] ? mark_lock+0x94/0x320 [ 316.509246][ T29] ? asan.module_dtor+0x20/0x20 [ 316.515458][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 316.527040][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 316.534493][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 316.544907][ T29] schedule+0xbd/0x170 [ 316.549693][ T29] io_schedule+0x80/0xd0 [ 316.555004][ T29] bit_wait_io+0x11/0xd0 [ 316.559351][ T29] __wait_on_bit+0x9f/0x2c0 [ 316.564506][ T29] ? bit_wait+0xd0/0xd0 [ 316.568994][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 316.575017][ T29] ? bit_wait+0xd0/0xd0 [ 316.579592][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 316.586183][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 316.592718][ T29] ? bit_waitqueue+0x30/0x30 [ 316.598025][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 316.603913][ T29] do_get_write_access+0x5c9/0xe00 [ 316.610172][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 316.616807][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 316.623598][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 316.630152][ T29] ? __might_sleep+0xe0/0xe0 [ 316.635484][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 316.641795][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 316.647656][ T29] ext4_dirty_inode+0xcb/0x110 [ 316.652780][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 316.660294][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 316.666672][ T29] file_update_time+0x187/0x1a0 [ 316.672224][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 316.677507][ T29] ? do_wp_page+0x4ce/0x34d0 [ 316.682331][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 316.689320][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 316.694834][ T29] do_page_mkwrite+0x153/0x3f0 [ 316.700033][ T29] do_wp_page+0xd4d/0x34d0 [ 316.704738][ T29] ? folio_put+0xd0/0xd0 [ 316.709224][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 316.714481][ T29] ? __rwlock_init+0x150/0x150 [ 316.719397][ T29] handle_mm_fault+0x1306/0x4a50 [ 316.724695][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 316.729729][ T29] ? numa_migrate_prep+0x350/0x350 [ 316.736007][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 316.741800][ T29] do_user_addr_fault+0x736/0x12d0 [ 316.747368][ T29] exc_page_fault+0x64/0x100 [ 316.752269][ T29] ? clear_bhb_loop+0x40/0x90 [ 316.757110][ T29] asm_exc_page_fault+0x26/0x30 [ 316.762693][ T29] RIP: 0033:0x7f999047c722 [ 316.769051][ T29] RSP: 002b:00007fff30b67560 EFLAGS: 00010202 [ 316.776087][ T29] RAX: 00007f998e298000 RBX: 00005555885d9b00 RCX: 0000000000000001 [ 316.784464][ T29] RDX: 000000000000140b RSI: 00005555885cfd60 RDI: 0000000000000002 [ 316.792970][ T29] RBP: 00007fff30b67a60 R08: 00005555885cfd98 R09: 0000000000000091 [ 316.801062][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff30b678a0 [ 316.809295][ T29] R13: 00007fff30b67690 R14: 585858582e7a7973 R15: 00007fff30b675e0 [ 316.817509][ T29] [ 316.820636][ T29] INFO: task syz.3.496:7157 blocked for more than 144 seconds. [ 316.828682][ T29] Not tainted syzkaller #0 [ 316.834106][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.843541][ T29] task:syz.3.496 state:D stack:27048 pid:7157 ppid:5779 flags:0x00004004 [ 316.854364][ T29] Call Trace: [ 316.858459][ T29] [ 316.862010][ T29] __schedule+0x15ae/0x4660 [ 316.866973][ T29] ? mark_lock+0x94/0x320 [ 316.872303][ T29] ? asan.module_dtor+0x20/0x20 [ 316.878961][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 316.884900][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 316.891749][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 316.897461][ T29] schedule+0xbd/0x170 [ 316.902152][ T29] io_schedule+0x80/0xd0 [ 316.906634][ T29] bit_wait_io+0x11/0xd0 [ 316.911469][ T29] __wait_on_bit+0x9f/0x2c0 [ 316.916485][ T29] ? bit_wait+0xd0/0xd0 [ 316.921300][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 316.927340][ T29] ? bit_wait+0xd0/0xd0 [ 316.931653][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 316.936841][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 316.942229][ T29] ? bit_waitqueue+0x30/0x30 [ 316.947430][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 316.953739][ T29] do_get_write_access+0x5c9/0xe00 [ 316.959153][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 316.967067][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 316.973648][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 316.980583][ T29] ? __might_sleep+0xe0/0xe0 [ 316.985376][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 316.991399][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 316.997650][ T29] ext4_dirty_inode+0xcb/0x110 [ 317.002944][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 317.009002][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 317.014139][ T29] file_update_time+0x187/0x1a0 [ 317.019024][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 317.024112][ T29] ? filemap_fault+0x103c/0x1540 [ 317.029104][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 317.035615][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 317.041964][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 317.047318][ T29] ? __pte_offset_map+0x20d/0x280 [ 317.052945][ T29] do_page_mkwrite+0x153/0x3f0 [ 317.057971][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 317.063248][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 317.068694][ T29] ? numa_migrate_prep+0x350/0x350 [ 317.074320][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 317.079925][ T29] do_user_addr_fault+0x736/0x12d0 [ 317.085757][ T29] exc_page_fault+0x64/0x100 [ 317.090935][ T29] asm_exc_page_fault+0x26/0x30 [ 317.096613][ T29] RIP: 0033:0x7f1181e727e9 [ 317.102140][ T29] RSP: 002b:00007ffe0b569840 EFLAGS: 00010202 [ 317.109736][ T29] RAX: 0000001b2e023000 RBX: ffffffff8a7fa839 RCX: 0000001b2e022ff8 [ 317.118887][ T29] RDX: 0000001b2da2421c RSI: 0000000000000008 RDI: 00007f1182d55720 [ 317.127500][ T29] RBP: 00000000000001ee R08: 00007f1182210000 R09: 00007f1182212000 [ 317.136743][ T29] R10: 000000008a7fa83d R11: 0000000000000001 R12: 00007f1182226038 [ 317.145727][ T29] R13: 0000000000000c8a R14: ffffffff8a7fa310 R15: 00007f1182d55720 [ 317.154436][ T29] ? mas_next_slot+0x30/0x980 [ 317.159717][ T29] ? mas_next_slot+0x559/0x980 [ 317.165083][ T29] [ 317.168817][ T29] INFO: task syz.2.504:7174 blocked for more than 144 seconds. [ 317.177858][ T29] Not tainted syzkaller #0 [ 317.183097][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.192760][ T29] task:syz.2.504 state:D stack:27048 pid:7174 ppid:5776 flags:0x00004004 [ 317.202294][ T29] Call Trace: [ 317.205683][ T29] [ 317.209009][ T29] __schedule+0x15ae/0x4660 [ 317.214052][ T29] ? mark_lock+0x94/0x320 [ 317.218544][ T29] ? asan.module_dtor+0x20/0x20 [ 317.223799][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 317.229165][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 317.235489][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 317.240864][ T29] schedule+0xbd/0x170 [ 317.245213][ T29] io_schedule+0x80/0xd0 [ 317.249598][ T29] bit_wait_io+0x11/0xd0 [ 317.254124][ T29] __wait_on_bit+0x9f/0x2c0 [ 317.259199][ T29] ? bit_wait+0xd0/0xd0 [ 317.264203][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 317.270937][ T29] ? bit_wait+0xd0/0xd0 [ 317.275381][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 317.280862][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 317.286345][ T29] ? bit_waitqueue+0x30/0x30 [ 317.291327][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 317.297902][ T29] do_get_write_access+0x5c9/0xe00 [ 317.304438][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 317.311196][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 317.317678][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 317.324606][ T29] ? __might_sleep+0xe0/0xe0 [ 317.329543][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 317.336562][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 317.342444][ T29] ext4_dirty_inode+0xcb/0x110 [ 317.347540][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 317.353571][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 317.358832][ T29] file_update_time+0x187/0x1a0 [ 317.365071][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 317.371490][ T29] ? filemap_fault+0x103c/0x1540 [ 317.376674][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 317.383273][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 317.389755][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 317.395328][ T29] ? __pte_offset_map+0x20d/0x280 [ 317.400853][ T29] do_page_mkwrite+0x153/0x3f0 [ 317.405692][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 317.410806][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 317.415843][ T29] ? numa_migrate_prep+0x350/0x350 [ 317.421342][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 317.427078][ T29] do_user_addr_fault+0x736/0x12d0 [ 317.432528][ T29] exc_page_fault+0x64/0x100 [ 317.437240][ T29] ? clear_bhb_loop+0x40/0x90 [ 317.442314][ T29] asm_exc_page_fault+0x26/0x30 [ 317.447647][ T29] RIP: 0033:0x7f4e026727e9 [ 317.452632][ T29] RSP: 002b:00007fff60b1e0d0 EFLAGS: 00010202 [ 317.458880][ T29] RAX: 0000001b2df1f000 RBX: ffffffff88850e0a RCX: 0000001b2df1eff8 [ 317.468213][ T29] RDX: 0000001b2d92421c RSI: 0000000000000008 RDI: 00007f4e03555720 [ 317.477489][ T29] RBP: 000000000000011b R08: 00007f4e02a10000 R09: 00007f4e02a12000 [ 317.486301][ T29] R10: 0000000088850e0e R11: 0000000000000003 R12: 00007f4e02a26038 [ 317.495188][ T29] R13: 000000000000046d R14: ffffffff88850b8a R15: 00007f4e03555720 [ 317.503627][ T29] ? netdev_pick_tx+0x2a/0xc20 [ 317.508781][ T29] ? netdev_pick_tx+0x2aa/0xc20 [ 317.514203][ T29] [ 317.517258][ T29] INFO: task syz.1.505:7176 blocked for more than 144 seconds. [ 317.525039][ T29] Not tainted syzkaller #0 [ 317.530143][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.539017][ T29] task:syz.1.505 state:D stack:27496 pid:7176 ppid:5775 flags:0x00004004 [ 317.549221][ T29] Call Trace: [ 317.553023][ T29] [ 317.556272][ T29] __schedule+0x15ae/0x4660 [ 317.561138][ T29] ? mark_lock+0x94/0x320 [ 317.567209][ T29] ? asan.module_dtor+0x20/0x20 [ 317.573232][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 317.580103][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 317.587991][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 317.593985][ T29] schedule+0xbd/0x170 [ 317.599191][ T29] io_schedule+0x80/0xd0 [ 317.603663][ T29] bit_wait_io+0x11/0xd0 [ 317.608408][ T29] __wait_on_bit+0x9f/0x2c0 [ 317.614307][ T29] ? bit_wait+0xd0/0xd0 [ 317.619222][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 317.626437][ T29] ? bit_wait+0xd0/0xd0 [ 317.631743][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 317.637274][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 317.642517][ T29] ? bit_waitqueue+0x30/0x30 [ 317.647387][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 317.653168][ T29] do_get_write_access+0x5c9/0xe00 [ 317.659588][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 317.666345][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 317.679264][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 317.686211][ T29] ? __might_sleep+0xe0/0xe0 [ 317.691686][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 317.698293][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 317.704949][ T29] ext4_dirty_inode+0xcb/0x110 [ 317.710139][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 317.716860][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 317.722691][ T29] file_update_time+0x187/0x1a0 [ 317.727891][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 317.733301][ T29] ? filemap_fault+0x103c/0x1540 [ 317.738766][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 317.745156][ T29] ? pte_alloc_one+0x3b6/0x540 [ 317.751328][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 317.758017][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 317.763193][ T29] do_page_mkwrite+0x153/0x3f0 [ 317.768371][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 317.774369][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 317.779762][ T29] ? numa_migrate_prep+0x350/0x350 [ 317.785406][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 317.792702][ T29] do_user_addr_fault+0x736/0x12d0 [ 317.799306][ T29] exc_page_fault+0x64/0x100 [ 317.804624][ T29] ? clear_bhb_loop+0x40/0x90 [ 317.809900][ T29] asm_exc_page_fault+0x26/0x30 [ 317.815254][ T29] RIP: 0033:0x7f563ce6bae3 [ 317.820379][ T29] RSP: 002b:00007ffcea157400 EFLAGS: 00010246 [ 317.828078][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d864000 [ 317.837016][ T29] RDX: 0000001b2d824000 RSI: 0000000000400000 RDI: 00007f563d1e2708 [ 317.846907][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.856405][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 317.867737][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcea157690 [ 317.878478][ T29] [ 317.882071][ T29] INFO: task syz.0.506:7178 blocked for more than 145 seconds. [ 317.890604][ T29] Not tainted syzkaller #0 [ 317.896488][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.907047][ T29] task:syz.0.506 state:D stack:27560 pid:7178 ppid:5777 flags:0x00004004 [ 317.917962][ T29] Call Trace: [ 317.921591][ T29] [ 317.924939][ T29] __schedule+0x15ae/0x4660 [ 317.930718][ T29] ? mark_lock+0x94/0x320 [ 317.935823][ T29] ? asan.module_dtor+0x20/0x20 [ 317.941634][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 317.947368][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 317.954218][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 317.959630][ T29] schedule+0xbd/0x170 [ 317.964273][ T29] io_schedule+0x80/0xd0 [ 317.969078][ T29] bit_wait_io+0x11/0xd0 [ 317.973630][ T29] __wait_on_bit+0x9f/0x2c0 [ 317.978454][ T29] ? bit_wait+0xd0/0xd0 [ 317.983542][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 317.990947][ T29] ? bit_wait+0xd0/0xd0 [ 317.997904][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 318.004594][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 318.011672][ T29] ? bit_waitqueue+0x30/0x30 [ 318.016664][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 318.023158][ T29] do_get_write_access+0x5c9/0xe00 [ 318.028618][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 318.035308][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 318.042117][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 318.048726][ T29] ? __might_sleep+0xe0/0xe0 [ 318.053474][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 318.061424][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 318.068107][ T29] ext4_dirty_inode+0xcb/0x110 [ 318.077003][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.077324][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.093424][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 318.101414][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 318.107162][ T29] file_update_time+0x187/0x1a0 [ 318.113031][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 318.119516][ T29] ? filemap_fault+0x103c/0x1540 [ 318.126385][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 318.133305][ T29] ? pte_alloc_one+0x3b6/0x540 [ 318.139619][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 318.148021][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 318.154643][ T29] do_page_mkwrite+0x153/0x3f0 [ 318.160514][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 318.166064][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 318.171978][ T29] ? numa_migrate_prep+0x350/0x350 [ 318.177255][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 318.183182][ T29] do_user_addr_fault+0x736/0x12d0 [ 318.188671][ T29] exc_page_fault+0x64/0x100 [ 318.193753][ T29] ? clear_bhb_loop+0x40/0x90 [ 318.198687][ T29] asm_exc_page_fault+0x26/0x30 [ 318.203653][ T29] RIP: 0033:0x7f8ac006bae3 [ 318.208128][ T29] RSP: 002b:00007fffe21c20e0 EFLAGS: 00010246 [ 318.214927][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d764000 [ 318.223647][ T29] RDX: 0000001b2d724000 RSI: 0000000000600000 RDI: 00007f8ac03e2708 [ 318.232219][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.240333][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 318.248912][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffe21c2370 [ 318.257026][ T29] [ 318.260116][ T29] [ 318.260116][ T29] Showing all locks held in the system: [ 318.269069][ T29] 1 lock held by khungtaskd/29: [ 318.274118][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 318.284985][ T29] 6 locks held by kworker/u4:11/4788: [ 318.290894][ T29] #0: ffff88801d661938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 318.303659][ T29] #1: ffffc9000f427d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 318.319093][ T29] #2: ffff88814dd640e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 318.331741][ T29] #3: ffff88814dd66c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 318.345446][ T29] #4: ffff88814dda8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 318.357679][ T29] #5: ffff888078ba8288 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 318.370463][ T29] 2 locks held by getty/5531: [ 318.376700][ T29] #0: ffff8880319b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 318.387641][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 318.399410][ T29] 3 locks held by syz-executor/5764: [ 318.405075][ T29] #0: ffff88802ed3c420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 318.416072][ T29] #1: ffff88814dd64510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 318.427086][ T29] #2: ffff88814dda8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 318.437657][ T29] 3 locks held by syz.3.496/7157: [ 318.443366][ T29] #0: ffff8880237eb120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 318.456956][ T29] #1: ffff88814dd64510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 318.468954][ T29] #2: ffff88814dda8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 318.480557][ T29] 3 locks held by syz.2.504/7174: [ 318.485967][ T29] #0: ffff888078d2f3a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 318.497432][ T29] #1: ffff88814dd64510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 318.509040][ T29] #2: ffff88814dda8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 318.519353][ T29] 3 locks held by syz.1.505/7176: [ 318.524892][ T29] #0: ffff8880237eea20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 318.536102][ T29] #1: ffff88814dd64510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 318.547491][ T29] #2: ffff88814dda8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 318.559187][ T29] 3 locks held by syz.0.506/7178: [ 318.566366][ T29] #0: ffff8880237ee0a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 318.581134][ T29] #1: ffff88814dd64510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 318.595756][ T29] #2: ffff88814dda8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 318.608985][ T29] [ 318.613792][ T29] ============================================= [ 318.613792][ T29] [ 318.626278][ T29] NMI backtrace for cpu 1 [ 318.632120][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 318.640482][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 318.652576][ T29] Call Trace: [ 318.655946][ T29] [ 318.659562][ T29] dump_stack_lvl+0x18c/0x250 [ 318.664757][ T29] ? __wake_up_klogd+0xd9/0x100 [ 318.670951][ T29] ? show_regs_print_info+0x20/0x20 [ 318.678916][ T29] ? load_image+0x420/0x420 [ 318.684628][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 318.692760][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 318.700444][ T29] ? load_image+0x420/0x420 [ 318.705492][ T29] ? wq_watchdog_touch+0xef/0x170 [ 318.711421][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 318.719025][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 318.725188][ T29] watchdog+0xf59/0xfa0 [ 318.729588][ T29] ? watchdog+0x1e1/0xfa0 [ 318.735131][ T29] kthread+0x2fa/0x390 [ 318.739869][ T29] ? hungtask_pm_notify+0x50/0x50 [ 318.745476][ T29] ? kthread_blkcg+0xd0/0xd0 [ 318.751489][ T29] ret_from_fork+0x48/0x80 [ 318.756522][ T29] ? kthread_blkcg+0xd0/0xd0 [ 318.761693][ T29] ret_from_fork_asm+0x11/0x20 [ 318.766813][ T29] [ 318.770640][ T29] Sending NMI from CPU 1 to CPUs 0: [ 318.777757][ C0] NMI backtrace for cpu 0 [ 318.777773][ C0] CPU: 0 PID: 3466 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 318.777790][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 318.777799][ C0] Workqueue: bat_events batadv_nc_worker [ 318.777834][ C0] RIP: 0010:__lock_acquire+0x112f/0x7eb0 [ 318.777857][ C0] Code: 00 84 c0 0f 85 7e 0d 00 00 41 01 de 83 3d a8 e7 23 0d 00 4c 8b 7c 24 18 0f 85 bd 02 00 00 48 83 7c 24 68 00 0f 84 f8 01 00 00 <48> 8b 84 24 98 00 00 00 48 8d 58 f8 48 89 d8 48 c1 e8 03 42 0f b6 [ 318.777870][ C0] RSP: 0018:ffffc9000cbe77c0 EFLAGS: 00000002 [ 318.777883][ C0] RAX: 0000000000000000 RBX: 00000000b5044d2d RCX: 000000006507215c [ 318.777893][ C0] RDX: 000000000b8cbc3b RSI: 00000000fb2efb2d RDI: ffffffff911f0500 [ 318.777904][ C0] RBP: ffffc9000cbe7a08 R08: dffffc0000000000 R09: 1ffffffff223e0a0 [ 318.777915][ C0] R10: dffffc0000000000 R11: fffffbfff223e0a1 R12: 000000005bc86ee0 [ 318.777926][ C0] R13: ffff88802e37bc00 R14: 00000000e3239095 R15: ffff88802e37c758 [ 318.777936][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 318.777949][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.777960][ C0] CR2: 000055b0a4636660 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 318.777975][ C0] Call Trace: [ 318.777985][ C0] [ 318.778002][ C0] ? __mod_timer+0x9b0/0xd60 [ 318.778019][ C0] ? verify_lock_unused+0x140/0x140 [ 318.778039][ C0] ? verify_lock_unused+0x140/0x140 [ 318.778061][ C0] lock_acquire+0x19e/0x420 [ 318.778077][ C0] ? batadv_nc_worker+0xd2/0x600 [ 318.778100][ C0] ? batadv_nc_worker+0xd2/0x600 [ 318.778127][ C0] ? read_lock_is_recursive+0x20/0x20 [ 318.778144][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 318.778174][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 318.778192][ C0] ? batadv_nc_worker+0xd2/0x600 [ 318.778212][ C0] batadv_nc_worker+0xef/0x600 [ 318.778233][ C0] ? batadv_nc_worker+0xd2/0x600 [ 318.778253][ C0] ? process_scheduled_works+0x975/0x1600 [ 318.778275][ C0] process_scheduled_works+0xa60/0x1600 [ 318.778303][ C0] ? worker_attach_to_pool+0x370/0x370 [ 318.778323][ C0] ? assign_work+0x3cc/0x5d0 [ 318.778342][ C0] worker_thread+0xa5e/0xfe0 [ 318.778370][ C0] kthread+0x2fa/0x390 [ 318.778384][ C0] ? pr_cont_work+0x550/0x550 [ 318.778402][ C0] ? kthread_blkcg+0xd0/0xd0 [ 318.778417][ C0] ret_from_fork+0x48/0x80 [ 318.778435][ C0] ? kthread_blkcg+0xd0/0xd0 [ 318.778450][ C0] ret_from_fork_asm+0x11/0x20 [ 318.778475][ C0] [ 318.787235][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 318.787251][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 318.787270][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 318.787280][ T29] Call Trace: [ 318.787290][ T29] [ 318.787299][ T29] dump_stack_lvl+0x18c/0x250 [ 318.787338][ T29] ? show_regs_print_info+0x20/0x20 [ 318.787365][ T29] ? load_image+0x420/0x420 [ 318.787408][ T29] panic+0x2ca/0x720 [ 318.787434][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 318.787455][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 318.787478][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 318.787506][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 318.787530][ T29] watchdog+0xf98/0xfa0 [ 318.787555][ T29] ? watchdog+0x1e1/0xfa0 [ 318.787583][ T29] kthread+0x2fa/0x390 [ 318.787602][ T29] ? hungtask_pm_notify+0x50/0x50 [ 318.787626][ T29] ? kthread_blkcg+0xd0/0xd0 [ 318.787644][ T29] ret_from_fork+0x48/0x80 [ 318.787666][ T29] ? kthread_blkcg+0xd0/0xd0 [ 318.787684][ T29] ret_from_fork_asm+0x11/0x20 [ 318.787719][ T29] [ 318.793806][ T29] Kernel Offset: disabled [ 319.213433][ T29] Rebooting in 86400 seconds..