last executing test programs: 25.02994324s ago: executing program 4 (id=1656): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x13, 0x7, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0x98}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0a85320, &(0x7f00000000c0)={0x1080}) 24.580936867s ago: executing program 4 (id=1658): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0), &(0x7f0000000040)=0xff56) 24.160012969s ago: executing program 4 (id=1662): unshare(0x2a020480) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, &(0x7f00000001c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 23.78200985s ago: executing program 4 (id=1666): r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) shutdown(r0, 0x1) write$binfmt_elf32(r0, 0x0, 0x3c) 22.523511083s ago: executing program 4 (id=1674): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 22.175525846s ago: executing program 4 (id=1676): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000140)={0x18, r1, 0x1, 0x0, &(0x7f0000000100)=[{0x4006, 0xfffffffffffffff8}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100007}) 6.817528648s ago: executing program 32 (id=1676): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000140)={0x18, r1, 0x1, 0x0, &(0x7f0000000100)=[{0x4006, 0xfffffffffffffff8}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100007}) 6.052015222s ago: executing program 1 (id=1718): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0x302000, 0x1000, 0x5, 0x3}, 0x20) syz_clone(0x2048000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.841767094s ago: executing program 1 (id=1719): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x3200092, &(0x7f0000000000)=ANY=[], 0x1, 0x6184, &(0x7f00000065c0)="$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") open(&(0x7f0000000240)='./file0\x00', 0x141042, 0x11) setresuid(0xee00, 0xee01, 0xee01) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1800, 0x0) 4.641459716s ago: executing program 1 (id=1721): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys_mnt\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys_mnt/class/rtc/rtc0/date\x00', 0x0, 0x0) read(r0, &(0x7f0000001000)=""/1000, 0x3e8) 3.552430383s ago: executing program 0 (id=1726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) 3.504048183s ago: executing program 1 (id=1727): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x160, 0x8}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.127696994s ago: executing program 0 (id=1728): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 2.977195453s ago: executing program 0 (id=1729): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.749038942s ago: executing program 2 (id=1731): semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000080)=""/37) io_setup(0x5, &(0x7f0000000e80)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000080)="8c", 0x1}]) 2.564219835s ago: executing program 2 (id=1732): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) inotify_init() 2.045980134s ago: executing program 3 (id=1733): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xba, 0x0, &(0x7f00000002c0)="e3ef7f670000ec6789b424154494000000000016aa00000000040033a42c9550f5810011e0f0546e8f62d070e87f2c73d153bf01de50151803c474719193467201bd7c0b9cad1d390aec6d1531001128afc5bbfca50d43ff8bac63690cc1d093c72be4011c6f04aa6846a184d8f21d2eed601ffcf943ac714f1d5196f27bc7a88206b122adb3a923a73e056f745b132d0f57b0241e37a646fe0cd27f108a4ec2338e16fe123fb9ceab6e7cfc58aa0abe6c395800000000000000", 0x0, 0xa0002000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.685206037s ago: executing program 3 (id=1734): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000180)=ANY=[], 0x3, 0x5d9, &(0x7f00000010c0)="$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") setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file2\x00', &(0x7f0000000240), 0x0, 0x0, 0x1) 1.493177641s ago: executing program 0 (id=1735): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom(r1, &(0x7f0000000dc0)=""/211, 0xd3, 0x40000000, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.446479123s ago: executing program 2 (id=1736): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x5041000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 1.334109159s ago: executing program 1 (id=1737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl(r2, 0x4048aecb, 0x0) 1.101368672s ago: executing program 1 (id=1738): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0}) 954.620965ms ago: executing program 0 (id=1739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, &(0x7f0000000040)}) 949.453893ms ago: executing program 3 (id=1740): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x4044000) 771.705537ms ago: executing program 2 (id=1741): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 579.831041ms ago: executing program 3 (id=1742): r0 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000004}) ppoll(&(0x7f0000000400)=[{r1, 0x40}], 0x1, 0x0, 0x0, 0x0) 552.731968ms ago: executing program 0 (id=1743): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0}, &(0x7f0000001540)=0x3b) 441.451051ms ago: executing program 3 (id=1744): syz_mount_image$hpfs(&(0x7f0000000140), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)=ANY=[@ANYBLOB="6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00ecb1696642cb97380abf69dce83f1c1dd0eb96506352e4c7d6b88109eebe378da654d5d91d6a45e65053658f366b87b26180bdb0a0e2ef4103c4336999ae591f101bac606a7595fc5a131d32d3723526dc1d4b5c1ce2f300a7eb59286590c97f58ae092a495a425b0bec6265"], 0x1, 0x9e16, &(0x7f000001c580)="$eJwsk1MUnge3BlM3tW27ndq2bdv21P1eG6ltu0mbJrVtm6mNlGf9a52Lud0Xs+e5e4DDBzhigPcM8N4BjhzgfQMcNcDRA7x/gA8M8MEBPjTAhwf4yAAfHeBjA3x8gE8M8MkBPjXApwf4zACfHeBzA3x+gC8M8MUBvjTAlwf4ygBfHeBrA3x9gG8M8M0BvjXAtwf4zgDfHeB7A3x/gB8M8MMBfjTAjwf4yQA/HeBnA/x8gF8McMwAvxzgVwP8eoDfDPDbAX43wO8H+MMAfxzgTwP8eYC/DPDXAf42wN8H+McAxw7wzwH+NcC/B/jPAP8d4H8DHBLgOAGOG+B4AY4f4AQBThjgRAFOHODQACcJcNIAJwtw8gCnCHDKAKcKcOoApwlw2gCnC3D6AGcIcMYAZwpw5gBnCXDWAGcLcPYA5whwzgDnCnDuAOcJcN4A5wtw/gAXCHDBABcKcOEAFwlw0QAXC3DxAJcIcMkAlwqQAJcOcJkAlw1wuQCXD3CFAFcMcKUAVw5wlQBXDXC1AFcPcI0A1wxwrQDXDnCdANcNcL0A1w9wgwA3DHCjADcOcJMANw1wswA3D3CLALcMcKsAtw5wmwC3DXC7ALcPcIcAdwxwpwB3DnCXAHcNcLcAdw9wjwD3DHCvAPcOcJ8A9w1wvwD3D/CAAA8M8KAADw7wkAAPDfCwAA8P8IgAjwzwqACPDvCYAI8N8LgAjw/whABPDPCkAE8O0ABPCfDUAE8L8PQAzwjwzADPCvDsAAcBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB9gEOC/CcAM8N8LwAzw/wggAvDPCiAC8O8JIALw3wsgAvD/CKAK8M8KoArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDPCuAO8OcHiAIwK8J8B7AxwZ4H0BjgpwdID3B/hAgA8G+FCADwf4SICPBvhYgI8H+ESATwb4VIBPB/hMgM8G+FyAzwf4QoAvBvhSgC8H+EqArwb4WoCvB/hGgG8G+FaAbwf4ToDvBvhegO8H+EGAHwb4UYAfB/hJgJ8G+FmAnwf4RYBjAvwywK8C/DrAbwL8NsDvAvw+wB8C/DHAnwL8OcBfAvw1wN8C/D3APwIcG+CfAf4V4N8B/hPgvwH+F+CQEMcJcdwQxwtx/BAnCHHCECcKceIQh4Y4SYiThjhZiJOHOEWIU4Y4VYhThzhNiNOGOF2I04c4Q4gzhjhTiDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T4jzhjhfiPOHuECIC4a4UIgLh7hIiIuGuFiIi4e4RIhLhrhUiIS4dIjLhLhsiMuFuHyIK4S4YogrhbhyiKuEuGqIq4W4eohrhLhmiGuFuHaI64S4bojrhbh+iBuEuGGIG4W4cYibhLhpiJuFuHmIW4S4ZYhbhbh1iNuEuG2I24W4fYg7hLhjiDuFuHOIu4S4a4i7hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFeHSIx4R4bIjHhXh8iCeEeGKIJ4V4coiGeEqIp4Z4Woinh3hGiGeGeFaIZ4c4CDEIMQwxCjEOMQkxDTELMQ+xCLEMsQqxDrEJsQ2xC7EPcViI54R4bojnhXh+iBeEeGGIF4V4cYiXhHhpiJeFeHmIV4R4ZYhXhXh1iNeEeG2I14V4fYg3hHhjiDeFeHOIt4R4a4i3hXh7iHeEeGeId4V4d4jDQxwR4j0h3hviyBDvC3FUiKNDvD/EB0J8MMSHQnw4xEdCfDTEx0J8PMQnQnwyxKdCfDrEZ0J8NsTnQnw+xBdCfDHEl0J8OcRXQnw1xNdCfD3EN0J8M8S3Qnw7xHdCfDfE90J8P8QPQvwwxI9C/DjET0L8NMTPQvw8xC9CHBPilyF+FeLXIX4T4rchfhfi9yH+EOKPIf4U4s8h/hLiryH+FuLvIf4R4tgQ/wzxrxD/DvGfEP8N8b8Qh0Q4ToTjRjhehONHOEGEE0Y4UYQTRzg0wkkinDTCySKcPMIpIpwywqkinDrCaSKcNsLpIpw+whkinDHCmSKcOcJZIpw1wtkinD3COSKcM8K5Ipw7wnkinDfC+SKcP8IFIlwwwoUiXDjCRSJcNMLFIlw8wiUiXDLCpSIkwqUjXCbCZSNcLsLlI1whwhUjXCnClSNcJcJVI1wtwtUjXCPCNSNcK8K1I1wnwnUjXC/C9SPcIMINI9wowo0j3CTCTSPcLMLNI9wiwi0j3CrCrSPcJsJtI9wuwu0j3CHCHSPcKcKdI9wlwl0j3C3C3SPcI8I9I9wrwr0j3CfCfSPcL8L9IzwgwgMjPCjCgyM8JMJDIzwswsMjPCLCIyM8KsKjIzwmwmMjPC7C4yM8IcITIzwpwpMjNMJTIjw1wtMiPD3CMyI8M8KzIjw7wkGEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYTDIjwnwnMjPC/C8yO8IMILI7wowosjvCTCSyO8LMLLI7wiwisjvCrCqyO8JsJrI7wuwusjvCHCGyO8KcKbI7wlwlsjvC3C2yO8I8I7I7wrwrsjHB7hiAjvifDeCEdGeF+EoyIcHeH9ET4Q4YMRPhThwxE+EuGjET4W4eMRPhHhkxE+FeHTET4T4bMRPhfh8xG+EOGLEb4U4csRvhLhqxG+FuHrEb4R4ZsRvhXh2xG+E+G7Eb4X4fsRfhDhhxF+FOHHEX4S4acRfhbh5xF+EeGYCL+M8KsIv47wmwi/jfC7CL+P8IcIf4zwpwh/jvCXCH+N8LcIf4/wjwjHRvhnhH9F+HeE/0T4b4T/RTgkxnFiHDfG8WIcP8YJYpwwxolinDjGoTFOEuOkMU4W4+QxThHjlDFOFePUMU4T47QxThfj9DHOEOOMMc4U48wxzhLjrDHOFuPsMc4R45wxzhXj3DHOE+O8Mc4X4/wxLhDjgjEuFOPCMS4S46IxLhbj4jEuEeOSMS4VIzEuHeMyMS4b43IxLh/jCjGuGONKMa4c4yoxrhrjajGuHuMaMa4Z41oxrh3jOjGuG+N6Ma4f4wYxbhjjRjFuHOMmMW4a42Yxbh7jFjFuGeNWMW4d4zYxbhvjdjFuH+MO4w8Z8j+/O8W4c4y7xLhrjLvFuHuMe8S4Z4x7xbh3jPvEuG+M+8W4f4wHxHhgjAfFeHCMh8R4aIyHxXh4jEfEeGSMR8V4dIzHxHhsjMfFeHyMJ8R4YownxXhyjMZ4SoynxnhajKfHeEaMZ8Z4VoxnxziIMYgxjDGKMY4xiTGNMYsxj7GIsYyxirGOsYmxjbGLsY9xWIznxHhujOfFeH6MF8R4YYwXxXhxjJfEeGmMl8V4eYxXxHhljFfFeHWM18R4bYzXxXh9jDfEeGOMN8V4c4y3xHhrjLfFeHuMd8R4Z4x3xXh3jMNjHBHjPTHeG+PIGO+LcVSMo2O8P8YHYnwwxodifDjGR2J8NMbHYnw8xidifDLGp2J8OsZnYnw2xudifD7GF2J8McaXYnw5xldifDXG12J8PcY3YnwzxrdifDvGd2J8N8b3Ynw/xg9i/DDGj2L8OMZPYvw0xs9i/DzGL2IcE+OXMX4V49cxfhPjtzF+F+P3Mf4Q448x/hTjzzH+EuOvMf4W4+8x/hHj2Bj/jPGvGP+O8Z8Y/43xvxiHJDhOguMmOF6C4yc4QYITJjhRghMnODTBSRKcNMHJEpw8wSkSnDLBqRKcOsFpEpw2wekSnD7BGRKcMcGZEpw5wVkSnDXB2RKcPcE5EpwzwbkSnDvBeRKcN8H5Epw/wQUSXDDBhRJcOMFFElw0wcUSXDzBJRJcMsGlEiTBpRNcJsFlE1wuweUTXCHBFRNcKcGVE1wlwVUTXC3B1RNcI8E1E1wrwbUTXCfBdRNcL8H1E9wgwQ0T3CjBjRPcJMFNE9wswc0T3CLBLRPcKsGtE9wmwW0T3C7B7RPcIcEdE9wpwZ0T3CXBXRPcLcHdE9wjwT0T3CvBvRPcJ8F9E9wvwf0TPCDBAxM8KMGDEzwkwUMTPCzBwxM8IsEjEzwqwaMTPCbBYxM8LsHjEzwhwRMTPCnBkxM0wVMSPDXB0xI8PcEzEjwzwbMSPDvBQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9gsMSPCfBcxM8L8HzE7wgwQsTvCjBixO8JMFLE7wswcsTvCLBKxO8KsGrE7wmwWsTvC7B6xO8IcEbE7wpwZsTvCXBWxO8LcHbE7wjwTsTvCvBuxMcnuCIBO9J8N4ERyZ4X4KjEhyd4P0JPpDggwk+lODDCT6S4KMJPpbg4wk+keCTCT6V4NMJPpPgswk+l+DzCb6Q4IsJvpTgywm+kuCrCb6W4OsJvpHgmwm+leDbCb6T4LsJvpfg+wl+kOCHCX6U4McJfpLgpwl+luDnCX6R4JgEv0zwqwS/TvCbBL9N8LsEv0/whwR/TPCnBH9O8JcEf03wtwR/T/CPBMcm+GeCfyX4d4L/JPhvgv8lOCTFcVIcN8XxUhw/xQlSnDDFiVKcOMWhKU6S4qQpTpbi5ClOkeKUKU6V4tQpTpPitClOl+L0Kc6Q4owpzpTizCnOkuKsKc6W4uwpzpHinCnOleLcKc6T4rwpzpfi/CkukOKCKS6U4sIpLpLioikuluLiKS6R4pIpLpUiKS6d4jIpLpvicikun+IKKa6Y4koprpziKimumuJqKa6e4hoprpniWimuneI6Ka6b4noprp/iBilumOJGKW6c4iYpbpriZilunuIWKW6Z4lYpbp3iNilum+J2KW6f4g4p7pjiTinunOIuKe6a4m4p7p7iHinumeJeKe6d4j4p7pvifinun+IBKR6Y4kEpHpziISkemuJhKR6e4hEpHpniUSkeneIxKR6b4nEpHp/iCSmemOJJKZ6coimekuKpKZ6W4ukpnpHimSmeleLZKQ5SDFIMU4xSjFNMUkxTzFLMUyxSLFOsUqxTbFJsU+xS7FMcluI5KZ6b4nkpnp/iBSlemOJFKV6c4iUpXpriZSlenuIVKV6Z4lUpXp3iNSlem+J1KV6f4g0p3pjiTSnenOItKd6a4m0p3p7iHSnemeJdKd6d4vAUR6R4T4r3pjgyxftSHJXi6BTvT/GBFB9M8aEUH07xkRQfTfGxFB9P8YkUn0zxqRSfTvGZlOTZFJ9L8fkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cMUP0rx4xQ/SfHTFD9L8fMUv0hxTIpfpvhVil+n+E2K36b4XYrfp/hDij+m+FOKP6f4S4q/pvhbir+n+EeKY1P8M8W/Uvw7xX9S/DfF/1IckuE4GY6b4XgZjp/hBBlOmOFEGU6c4dAMJ8lw0gwny3DyDKfIcMoMp8pw6gynyXDaDKfLcPoMZ8hwxgxnynDmDGfJcNYMZ8tw9gznyHDODOfKcO4M58lw3gzny3D+DBfIcMEMF8pw4QwXyXDRDBfLcPEMl8hwyQyXypAMl85wmQyXzXC5DJfPcIUMV8xwpQxXznCVDFfNcLUMV89wjQzXzHCtDNfOcJ0M181wvQzXz3CDDDfMcKMMN85wkww3zXCzDDfPcIsMt8xwqwy3znCbDLfNcLsMt89whwx3zHCnDHfOcJcMd81wtwx3z3CPDPfMcK8M985wnwz3zXC/DPfP8IAMD8zwoAwPzvCQDA/N8LAMD8/wiAyPzPCoDI/O8JgMj83wuAyPz/CEDE/M8KQMT87QDE/J8NQMT8vw9AzPyPDMDM/K8OwMBxkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn2GQ7L8JwMz83wvAzPz/CCDC/M8KIML87wkgwvzfCyDC/P8IoMr8zwqgyvzvCaDK/N8LoMr8/whgxvzPCmDG/O8JYMb83wtgxvz/CODO/M8K4M785weIYjMrwnw3szHJnhfRmOynB0hvdn+ECGD2b4UIYPZ/hIho9m+FiGj2f4RIZPZvhUhk9n+EyGz2b4XIbPZ/hChi9m+FKGL2f4SoavZvhahq9n+EaGb2b4VoZvZ/hOhu9m+F6G72f4QYYfZvhRhh9n+EmGn2b4WYafZ/hFhmMy/DLDrzL8OsNvMvw2w+8y/D7DHzL8McOfMvw5w18y/DXD3zL8PcM/Mhyb4Z8Z/pXh3xn+k+G/Gf6X4ZAcx8lx3BzHy3H8HCfIccIcJ8px4hyH5jhJjpPmOFmOk+c4RY5T5jhVjlPnOE2O0+Y4XY7T5zhDjjPmOFOOM+c4S46z5jhbjrPnOEeOc+Y4V45z5zhPjvPmOF+O8+e4QI4L5rhQjgvnuEiOi+a4WI6L57hEjkvmuFSO5Lh0jsvkuGyOy+W4fI4r5LhijivluHKOq+S4ao6r5bh6jmvkuGaOa+W49sRDhvzPxbo5rpfj+jlukOOGOW6U48Y5bpLjpjluluPmOW6R45Y5bpXj1jluk+O2OW6X4/Y57pDjjjnulOPOOe6S46457pbj7jnukeOeOe6V49457pPjvjnul+P+OR6Q44E5HpTjwTkekuOhOR6W4+E5HpHjkTkelePROR6T47E5Hpfj8TmekOOJOZ6U48k5muMpOZ6a42k5np7jGTmemeNZOZ6d4yDHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPsdhOZ6T47k5npfj+TlekOOFOV6U48U5XpLjpTleluPlOV6R45U5XpXj1Tlek+O1OV6X4/U53pDjjTnelOPNOd6S46053pbj7TnekeOdOd71v3+NGTZ2eI4j/tfykCFD/sfIHIcMGTJkVI6jc7w/xwdyfPB/7Q8ZMuThHB/J8dEcH8vx8RyfyPHJHJ/K8ekcn8nx2Ryfy/H5HF/I8cUcX8rx5RxfyfHVHF/L8fUc38jxzRzfyvHtHN/J8d0c38vx/Rw/yPHDHD/K8eMcP8nx0xw/y/HzHL/IcUyOX+b4VY5f5/hNjt/m+F2O3+f4Q44/5vhTjj/n+EuOv+b4W46/5/hHjmNz/DPHv3L8O8d/cvw3x//+56TAcQoct8DxChy/wAkKnLDAiQqcuMChBU5S4KQFTlbg5AVOUeCUBU5V4NQFTlPgtAVOV+D0Bc5Q4IwFzlTgzAXOUuCsBc5W4OwFzlHgnAXOVeDcBc5T4LwFzlfg/AUuUOCCBS5U4MIFLlLgogUuVuDiBS5R4JIFLlUgBS5d4DIFLlvgRjM1Y5cvcIUCVyxwpQJXLnCV/2e1AlcvcI0C1yxwrQLXLnCdAtctcL0C1y9wgwI3/N+9AjcucJMCNy1wswI3L3CLArcscKsCty5wmwK3LXC7ArcvcIcCdyxwpwJ3LnCXAnctcLcCdy9wjwL3LHCvAvcucJ8C9y1wvwL3L/CAAg8s8KACDy7wkAIPLfCwAg8v8IgCjyzwqAKPLvCYAo8t8LgCjy/whAJPLPCkAk8u0AJPKfDUAk8r8PQCzyjwzALPKvDsAgcFBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF9gUOK/CcAs8t8LwCzy/wggIvLPCiAi8u8JICLy3wsgIvL/CKAq8s8KoCry7wmgKvLfC6Aq8v8IYCbyzwpgJvLvCWAm8t8LYCby/wjgLvLPCuAu8ucHiBIwq8p8B7CxxZ4H0FjipwdIH3F/hAgQ8W+FCBDxf4SIGPFvhYgY8X+ESBTxb4VIFPF/hMgc8W+FyBzxf4QoEvFvhSgS8X+EqBrxb4WoGvF/hGgW8W+FaBbxf4ToHvFvhege8X+EGBHxb4UYEfF/hJgZ8W+FmBnxf4RYFjCvyywK8K/LrAbwr8tsDvCvy+wB8K/LHAnwr8ucBfCvy1wN8K/L3APwocW+CfBf5V4N8F/lPgvwX+V+CQEscpcdwSxytx/BInKHHCEicqceISh5Y4SYmTljhZiZOXOEWJU5Y4VYlTlzhNidOWOF2J05c4Q4kzljhTiTOXOEuJs5Y4W4mzlzhHiXOWOFeJc5c4T4nzljhfifOXuECJC5a4UIkLl7hIiYuWuFiJi5e4RIlLlrhUiZS4dInLlLhsicuVuHyJK5S4YokrlbhyiauUuGqJq5W4eolrlLhmiWuVuHaJ65S4bonrlbh+iRuUuGGJG5W4cYmblLhpiZuVuHmJW5S4ZYlblbh1iduUuG2J25W4fYk7lLhjiTuVuHOJu5S4a4m7lbh7iXuUuGeJe5W4d4n7lLhvifuVuH+JB5R4YIkHlXhwiYeUeGiJh5V4eIlHlHhkiUeVeHSJx5R4bInHlXh8iSeUeGKJJ5V4comWeEqJp5Z4Womnl3hGiWeWeFaJZ5c4KDEoMSwxKjEuMSkxLTErMS+xKLEssSqxLrEpsS2xK7EvcViJ55R4bonnlXh+iReUeGGJF5V4cYmXlHhpiZeVeHmJV5R4ZYlXlXh1ideUeG2J15V4fYk3lHhjiTeVeHOJt5R4a4m3lXh7iXeUeGeJd5V4d4nDSxxR4j0l3lviyBLvK3FUiaNLvL/EB0p8sMSHSny4xEdKfLTEx0p8vMQnSnyyxKdKfLrEZ0p8tsTnSny+xBdKfLHEl0p8ucRXSny1xNdKfL3EN0p8s8S3Sny7xHdKfLfE90p8v8QPSvywxI9K/LjET0r8tMTPSvy8xC9KHFPilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8l/lLiryX+VuLvJf5R4tgS/yzxrxL/LvGfEv8t8b8Sh1Q4ToXjVjheheNXOEGFE1Y4UYUTVzi0wkkqnLTCySqcvMIpKpyywqkqnLrCaSqctsLpKpy+whkqnLHCmSqcucJZKpy1wtkqnL3COSqcs8K5Kpy7wnkqnLfC+Sqcv8IFKlywwoUqXLjCRSpctMLFKly8wiUqXLLCpSqkwqUrXKbCZStcrsLlK1yhwhUrXKnClStcpcJVK1ytwtUrXKPCNStcq8K1K1ynwnUrXK/C9SvcoMINK9yowo0r3KTCTSvcrMLNK9yiwi0r3KrCrSvcpsJtK9yuwu0r3KHCHSvcqcKdK9ylwl0r3K3C3Svco8I9K9yrwr0r3KfCfSvcr8L9KzygwgMrPKjCgys8pMJDKzyswsMrPKLCIys8qsKjKzymwmMrPK7C4ys8ocITKzypwpMrtMJTKjy1wtMqPL3CMyo8s8KzKjy7wkGFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYXDKjynwnMrPK/C8yu8oMILK7yowosrvKTCSyu8rMLLK7yiwisrvKrCqyu8psJrK7yuwusrvKHCGyu8qcKbK7ylwlsrvK3C2yu8o8I7K7yrwrsrHF7hiArvqfDeCkdWeF+FoyocXeH9FT5Q4YMVPlThwxU+UuGjFT5W4eMVPlHhkxU+VeHTFT5T4bMVPlfh8xW+UOGLFb5U4csVvlLhqxW+VuHrFb5R4ZsVvlXh2xW+U+G7Fb5X4fsVflDhhxV+VOHHFX5S4acVflbh5xV+UeGYCr+s8KsKv67wmwq/rfC7Cr+v8IcKf6zwpwp/rvCXCn+t8LcKf6/wjwrHVvhnhX9V+HeF/1T4b4X/VTikxnFqHLfG8Wocv8YJapywxolqnLjGoTVOUuOkNU5W4+Q1TlHjlDVOVePUNU5T47Q1Tlfj9DXOUOOMNc5U48w1zlLjrDXOVuPsNc5R45w1zlXj3DXOU+O8Nc5X4/w1LlDjgjUuVOPCNS5S46I1Llbj4jUuUeOSNS5VIzUuXeMyNS5b43I1Ll/jCjWuWONKNa5c4yo1rlrjajWuXuMaNa5Z41o1rl3jOjWuW+N6Na5f4wY1bljjRjVuXOMmNW5a42Y1bl7jFjVuWeNWNW5d4zY1blvjdjVuX+MONe5Y40417lzjLjXuWuNuNe5e4x417lnjXjXuXeM+Ne5b43417l/jATUeWONBNR5c4yE1HlrjYTUeXuMRNR5Z41E1Hl3jMTUeW+NxNR5f4wk1nljjSTWeXKM1nlLjqTWeVuPpNZ5R45k1nlXj2TUOagxqDGuMaoxrTGpMa8xqzGssaixrrGqsa2xqbGvsauxrHFbjOTWeW+N5NZ5f4wU1XljjRTVeXOMlNV5a42U1Xl7jFTVeWeNVNV5d4zU1XlvjdTVeX+MNNd5Y40013lzjLTXeWuNtNd5e4x013lnjXTXeXePwGkfUeE+N99Y4ssb7ahxV4+ga76/xgRofrPGhGh+u8ZEaH63xsRofr/GJGp+s8akan67xmRqfrfG5Gp+v8YUaX6zxpRpfrvGVGl+t8bUaX6/xjRrfrPGtGt+u8Z0a363xvRrfr/GDGj+s8aMaP67xkxo/rfGzGj+v8Ysax9T4ZY1f1fh1jd/U+G2N39X4fY0/1PhjjT/V+HONv9T4a42/1fh7jX/UOLbGP2v8q8a/a/ynxn9r/K/GIQ2O0+C4DY7X4PgNTtDghA1O1ODEDQ5tcJIGJ21wsgYnb3CKBqdscKoGp25wmganbXC6BqdvcIYGZ2xwpgZnbnCWBmdtcLYGZ29wjgbnbHCuBuducJ4G521wvgbnb3CBBhdscKEGF25wkQYXbXCxBhdvcIkGl2xwqQZpcOkGl2lw2QaXa3D5BldocMUGV2pw5QZXaXDVBldrcPUG12hwzQbXanDtBtdpcN0G12tw/QY3aHDDBjdqcOMGN2lw0wY3a3DzBrdocMsGt2pw6wa3aXDbBrdrcPsGd2hwxwZ3anDnBndpcNcGd2tw9wb3aHDPBvdqcO8G92lw3wb3a3D/Bg9o8MAGD2rw4AYPafDQBg9r8PAGj2jwyAaPavDoBo9p8NgGj2vw+AZPaPDEBk9q8OQGbfCUBk9t8LQGT2/wjAbPbPCsBs9ucNBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg3+CwBs9p8NwGz2vw/AYvaPDCBi9q8OIGL2nw0gYva/DyBq9o8MoGr2rw6gavafDaBq9r8PoGb2jwxgZvavDmBm9p8NYGb2vw9gbvaPDOBu9q8O4Ghzc4osF7Gry3wZEN3tfgqAZHN3h/gw80+GCDDzX4cIOPNPhog481+HiDTzT4ZINPNfh0g880+GyDzzX4fIMvNPhigy81+HKDrzT4aoOvNfh6g280+GaDbzX4doPvNPhug+81+H6DHzT4YYMfNfhxg580+GmDnzX4eYNfNDimwS8b/KrBrxv8psFvG/yuwe8b/KHBHxv8qcGfG/ylwV8b/K3B3xv8o8GxDf7Z4F8N/t3gPw3+2+B/DQ5pcZwWx21xvBbHb3GCFidscaIWJ25xaIuTtDhpi5O1OHmLU7Q4ZYtTtTh1i9O0OG2L07U4fYsztDhjizO1OHOLs7Q4a4uztTh7i3O0OGeLc7U4d4vztDhvi/O1OH+LC7S4YIsLtbhwi4u0uGiLi7W4eItLtLhki0u1SItLt7hMi8u2uFyLy7e4QosrtrhSiyu3uEqLq7a4Wourt7hGi2u2uFaLa7e4Tovrtrhei+u3uEGLG7a4UYsbt7hJi5u2uFmLm7e4RYtbtrhVi1u3uE2L27a4XYvbt7hDizu2uFOLO7e4S4u7trhbi7u3uEeLe7a4V4t7t7hPi/u2uF+L+7d4QIsHtnhQiwe3eEiLh7Z4WIuHt3hEi0e2eFSLR7d4TIvHtnhci8e3eEKLJ7Z4Uosnt2iLp7R4aountXh6i2e0eGaLZ7V4douDFoMWwxajFuMWkxbTFrMW8xaLFssWqxbrFpsW2xa7FvsWh7V4Tovntnhei+e3eEGLF7Z4UYsXt3hJi5e2eFmLl7d4RYtXtnhVi1e3eE2L17Z4XYvXt3hDize2eFOLN7d4S4u3tnhbi7e3eEeLd7Z4V4t3tzi8xREt3tPivS2ObPG+Fke1OLrF+1t8oMUHW3yoxYdbfKTFR1t8rMXHW3yixSdbfKrFp1t8psVnW3yuZej/dvNCiy+2+FKLL7f4Souvtvhai6+3+EaLb7b4Votvt/hOi++2+F6L77f4QYsftvhRix+3+EmLn7b4WYuft/hFi2Na/LLFr1r8usVvWvy2xe9a/L7FH1r8scWfWvy5xV9a/LXF31r8vcU/Whzb4p8t/tXi3y3+0+K/Lf7X4pAOx+lw3A7H63D8DifocMIOJ+pw4g6HdjhJh5N2OFmHk3c4RYdTdjhVh1N3OE2H03Y4XYfTdzhDhzN2OFOHM3c4S4ezdjhbh7N3OEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh0t2uFSHdLh0h8t0uGyHy3W4fIcrdLhix9AhQ4a4coerdLhqh6t1uHqHa3S4Zodrdbh2h+t0uG6H63W4focbdLhhhxt1uHGHm3S4aYebdbh5h1t0uGWHW3W4dYfbdLhth9t1uH2HO3S4Y4c7dbhzh7t0uGuHu3W4e4d7dLhnh3t1uHeH+3S4b4f7dbh/hwd0eGCHB3V4cIeHdHhoh4d1eHiHR3R4ZIdHdXh0h8d0eGyHx3V4fIcndHhihyd1eHKHdnhKh6d2eFqHp3d4RodndnhWh2d3OOgw6DDsMOow7jDpMO0w6zDvsOiw7LDqsO6w6bDtsOuw73BYh+d0eG6H53V4focXdHhhhxd1eHGHl3R4aYeXdXh5h1d0eGWHV3V4dYfXdHhth9d1eH2HN3R4Y4c3dXhzh7d0eGuHt3V4e4d3dHhnh3d1eHeHwzsc0eE9Hd7b4cgO7+twVIejO7y/wwc6fLDDhzp8uMNHOny0w8c6fLzDJzp8ssOnOny6w2c6fLbD5zp8vsMXOnyxw5c6fLnDVzp8tcPXOny9wzc6fLPDtzp8u8N3Ony3w/c6fL/DDzr8sMOPOvy4w086/LTDzzr8vMMvOhzT4ZcdftXh1x1+0+G3HX7X4fcd/tDhjx3+1OHPHf7S4a8d/tbh7x3+0eHYDv/s8K8O/+7wnw7/7fC/Dof0OE6P4/Y4Xo/j9zhBjxP2OFGPE/c4tMdJepy0x8l6nLzHKXqcssepepy6x2l6nLbH6XqcvscZepyxx5l6nLnHWXqctcfZepy9xzl6nLPHuXqcu8d5epy3x/l6nL/HBXpcsMeFely4x0V6XLTHxXpcvMclelyyx6V6pMele1ymx2V7XK7H5XtcoccVe1ypx5V7XKXHVXtcrcfVe1yjxzV7XKvHtXtcp8d1e1yvx/V73KDHDXvcqMeNe9ykx0173KzHzXvcoscte9yqx6173KbHbXvcrsfte9yhxx173KnHnXvcpcdde9ytx9173KPHPXvcq8e9e9ynx3173K/H/Xs8oMcDezyox4N7PKTHQ3s8rMfDezyixyN7PKrHo3s8psdjezyux+N7PKHHE3s8qceTe7THU3o8tcfTejy9xzN6PLPHs3o8u8dBj0GPYY9Rj3GPSY9pj1mPeY9Fj2WPVY91j02PbY9dj32Pw3o8p8dzezyvx/N7vKDHC3u8qMeLe7ykx0t7vKzHy3u8oscre7yqx6t7vKbHa3u8rsfre7yhxxt7vKnHm3u8pcdbe7ytx9t7vKPHO3u8q8e7exze44ge7+nx3h5H9nhfj6N6HP1/LNIDE54Hg0DR1G1q23Zvbdu2bfvWSO33sVHbTmrbtm1FOzvz/YUzZ4DDBzhigI8M8NEBPjbAxwf4xACfHOBTA3x6gM8M8NkBPjfA5wf4wgBfHOBLA3x5gK8M8NUBvjbA1wf4xgDfHOBbA3x7gO8M8N0BvjfA9wf4wQA/HOBHA/x4gJ8M8NMBfjbAzwf4xQC/HOBXA/x6gN8M8NsBfjfA7wf4wwB/HOBPA/x5gL8M8NcB/jbA3wf4xwD/HOBfA/x7gP8M8N8B/jfAkQMcNcDRAxwzwLEDHBLgOAGOG+B4AY4f4AQBThjgRAFOHOAkAQ4NcNIAJwtw8gCnCHDKAKcKcOoApwlw2gCnC3D6AGcIcMYAZwpw5gBnCXDWAGcLcPYA5whwzgDnCnDuAOcJcN4A5wtw/gAXCHDBABcKcOEAFwlw0QAXC3DxAJcIcMkAlwqQAJcOcJkAlw1wuQCXD3CFAFcMcKUAVw5wlQBXDXC1AFcPcI0A1wxwrQDXDnCdANcNcL0A1w9wgwA3DHCjADcOcJMANw1wswA3D3CLALcMcKsAtw5wmwC3DXC7ALcPcIcAdwxwpwB3DnCXAHcNcLcAdw9wjwD3DHCvAPcOcJ8A9w1wvwD3D/CAAA8M8KAADw7wkAAPDfCwAA8P8IgAjwzwqACPDvCYAI8N8LgAjw/whABPDPCkAE8O0ABPCfDUAE8L8PQAzwjwzADPCvDsAM8J8NwAhwV4XoDnB3hBgBcGeFGAFwd4SYCXBnhZgJcHeEWAVwZ4VYCDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDPCuAO8O8J4A7w3wvgDvD/CBAB8M8KEAHw5weIAjAnwkwEcDfCzAxwN8IsAnA3wqwKcDfCbAZwN8LsDnA3whwBcDfCnAlwN8JcBXA3wtwNcDfCPANwN8K8C3A3wnwHcDfC/A9wP8IMAPA/wowI8D/CTATwP8LMDPA/wiwC8D/CrArwP8JsBvA/wuwO8D/CHAHwP8KcCfA/wlwF8D/C3A3wP8I8A/A/wrwL8D/CfAfwP8L8CRAY4KcHSAYwIcG+CQEMcJcdwQxwtx/BAnCHHCECcKceIQJwlxaIiThjhZiJOHOEWIU4Y4VYhThzhNiNOGOF2I04c4Q4gzhjhTiDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T4jzhjhfiPOHuECIC4a4UIgLh7hIiIuGuFiIi4e4RIhLhrhUiIS4dIjLhLhsiMuFuHyIK4S4YogrhbhyiKuEuGqIq4W4eohrhLhmiGuFuHaI64S4bojrhbh+iBuEuGGIG4W4cYibhLhpiJuFuHmIW4S4ZYhbhbh1iNuEuG2I24W4fYg7hLhjiDuFuHOIu4S4a4i7hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFeHSIx4R4bIjHhXh8iCeEeGKIJ4V4coiGeEqIp4Z4Woinh3hGiGeGeFaIZ4d4TojnhjgsxPNCPD/EC0K8MMSLQrw4xEtCvDTEy0K8PMQrQrwyxKtCHIQYhBiGGIUYh5iEmIaYhZiHWIRYhliFWIfYhNiG2IXYh3h1iNeEeG2I14V4fYg3hHhjiDeFeHOIt4R4a4i3hXh7iHeEeGeId4V4d4j3hHhviPeFeH+ID4T4YIgPhfhwiMNDHBHiIyE+GuJjIT4e4hMhPhniUyE+HeIzIT4b4nMhPh/iCyG+GOJLIb4c4ishvhriayG+HuIbIb4Z4lshvh3iOyG+G+J7Ib4f4gchfhjiRyF+HOInIX4a4mchfh7iFyF+GeJXIX4d4jchfhvidyF+H+IPIf4Y4k8h/hziLyH+GuJvIf4e4h8h/hniXyH+HeI/If4b4n8hjgxxVIijQxwT4tgQh0Q4ToTjRjhehONHOEGEE0Y4UYQTRzhJhEMjnDTCySKcPMIpIpwywqkinDrCaSKcNsLpIpw+whkinDHCmSKcOcJZIpw1wtkinD3COSKcM8K5Ipw7wnkinDfC+SKcP8IFIlwwwoUiXDjCRSJcNMLFIlw8wiUiXDLCpSIkwqUjXCbCZSNcLsLlI1whwhUjXCnClSNcJcJVI1wtwtUjXCPCNSNcK8K1I1wnwnUjXC/C9SPcIMINI9wowo0j3CTCTSPcLMLNI9wiwi0j3CrCrSPcJsJtI9wuwu0j3CHCHSPcKcKdI9wlwl0j3C3C3SPcI8I9I9wrwr0j3CfCfSPcL8L9IzwgwgMjPCjCgyM8JMJDIzwswsMjPCLCIyM8KsKjIzwmwmMjPC7C4yM8IcITIzwpwpMjNMJTIjw1wtMiPD3CMyI8M8KzIjw7wnMiPDfCYRGeF+H5EV4Q4YURXhThxRFeEuGlEV4W4eURXhHhlRFeFeEgwiDCMMIowjjCJMI0wizCPMIiwjLCKsI6wibCNsIuwj7CqyO8JsJrI7wuwusjvCHCGyO8KcKbI7wlwlsjvC3C2yO8I8I7I7wrwrsjvCfCeyO8L8L7I3wgwgcjfCjChyMcHuGICB+J8NEIH4vw8QifiPDJCJ+K8OkIn4nw2Qifi/D5CF+I8MUIX4rw5QhfifDVCF+L8PUI34jwzQjfivDtCN+J8N0I34vw/Qg/iPDDCD+K8OMIP4nw0wg/i/DzCL+I8MsIv4rw6wi/ifDbCL+L8PsIf4jwxwh/ivDnCH+J8NcIf4vw9wj/iPDPCP+K8O8I/4nw3wj/i3BkhKMiHB3hmAjHRjgkxnFiHDfG8WIcP8YJYpwwxolinDjGSWIcGuOkMU4W4+QxThHjlDFOFePUMU4T47QxThfj9DHOEOOMMc4U48wxzhLjrDHOFuPsMc4R45wxzhXj3DHOE+O8Mc4X4/wxLhDjgjEuFOPCMS4S46IxLhbj4jEuEeOSMS4VIzEuHeMyMS4b43IxLh/jCjGuGONKMa4c4yoxrhrjajGuHuMaMa4Z41oxrh3jOjGuG+N6Ma4f4wYxbhjjRjFuHOMmMW4a42Yxbh7jFjFuGeNWMW4d4zYxbhvjdjFuH+MOMe4Y404x7hzjLjHuGuNuMe4e4x4x7hnjXjHuHeM+Me4b434x7h/jATEeGONBMR4c4yExHhrjYTEeHuMRMR4Z41ExHh3jMTEeG+NxMR4f4wkxnhjjSTGeHKMxnhLjqTGeFuPpMZ4R45kxnhXj2TGeE+O5MQ6L8bwYz4/xghgvjPGiGC+O8ZIYL43xshgvj/GKGK+M8aoYBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MV4d4zUxXhvjdTFeH+MNMd4Y400x3hzjLTHeGuNtMd4e4x0x3hnjXTHeHeM9Md4b430x3h/jAzE+GONDMT4c4/AYR8T4SIyPxvhYjI/H+ESMT8b4VIxPx/hMjM/G+FyMz8f4QowvxvhSjC/H+EqMr8b4Woyvx/hGjG/G+FaMb8f4TozvxvhejO/H+EGMH8b4UYwfx/hJjJ/G+FmMn8f4RYxfxvhVjF/H+E2M38b4XYzfx/hDjD/G+FOMP8f4S4y/xvhbjL/H+EeMf8b4V4x/x/hPjP/G+F+MI2McFePoGMfEODbGIQmOk+C4CY6X4PgJTpDghAlOlODECU6S4NAEJ01wsgQnT3CKBKdMcKoEp05wmgSnTXC6BKdPcIYEZ0xwpgRnTnCWBGdNcLYEZ09wjgTnTHCuBOdOcJ4E501wvgTnT3CBBBdMcKEEF05wkQQXTXCxBBdPcIkEl0xwqQRJcOkEl0lw2QSXS3D5BFdIcMUEV0pw5QRXSXDVBFdLcPUE10hwzQTXSnDtBNdJcN0E10tw/QQ3SHDDBDdKcOMEN0lw0wQ3S3DzBLdIcMsEt0pw6wS3SXDbBLdLcPsEd0hwxwR3SnDnBHdJcNcEd0tw9wT3SHDPBPdKcO8E90lw3wT3S3D/BA9I8MAED0rw4AQPSfDQBA9L8PAEj0jwyASPSvDoBI9J8NgEj0vw+ARPSPDEBE9K8OQETfCUBE9N8LQET0/wjATPTPCsBM9O8JwEz01wWILnJXh+ghckeGGCFyV4cYKXJHhpgpcleHmCVyR4ZYJXJThIMEgwTDBKME4wSTBNMEswT7BIsEywSrBOsEmwTbBLsE/w6gSvSfDaBK9L8PoEb0jwxgRvSvDmBG9J8NYEb0vw9gTvSPDOBO9K8O4E70nw3gTvS/D+BB9I8MEEH0rw4QSHJzgiwUcSfDTBxxJ8PMEnEnwywacSfDrBZxJ8NsHnEnw+wRcSfDHBlxJ8OcFXEnw1wdcSfD3BNxJ8M8G3Enw7wXcSfDfB9xJ8P8EPEvwwwY8S/DjBTxL8NMHPEvw8wS8S/DLBrxL8OsFvEvw2we8S/D7BHxL8McGfEvw5wV8S/DXB3xL8PcE/Evwzwb8S/DvBfxL8N8H/EhyZ4KgERyc4JsGxCQ5JcZwUx01xvBTHT3GCFCdMcaIUJ05xkhSHpjhpipOlOHmKU6Q4ZYpTpTh1itOkOG2K06U4fYozpDhjijOlOHOKs6Q4a4qzpTh7inOkOGeKc6U4d4rzpDhvivOlOH+KC6S4YIoLpbhwioukuGiKi6W4eIpLpLhkikulSIpLp7hMisumuFyKy6e4QoorprhSiiunuEqKq6a4Woqrp7hGimumuFaKa6e4TorrprheiuunuEGKG6a4UYobp7hJipumuFmKm6e4RYpbprhVilunuE2K26a4XYrbp7hDijumuFOKO6e4S4q7prhbirunuEeKe6a4V4p7p7hPivumuF+K+6d4QIoHpnhQigeneEiKh6Z4WIqHp3hEikemeFSKR6d4TIrHpnhciseneEKKJ6Z4Uoonp2iKp6R4aoqnpXh6imekeGaKZ6V4dornpHhuisNSPC/F81O8IMULU7woxYtTvCTFS1O8LMXLU7wixStTvCrFQYpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ileneE2K16Z4XYrXp3hDijemeFOKN6d4S4q3pnhbireneEeKd6Z4V4p3p3hPivemeF+K96f4QIoPpvhQig+nODzFESk+kuKjKT6W4uMpPpHikyk+leLTKT6T4rMpPpfi8ym+kOKLKb6U4sspvpLiqym+luLrKb6R4pspvpXi2ym+k+K7Kb6X4vspfpDihyl+lOLHKX6S4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4r8p/pfiyBRHpTg6xTEpjk1xSIbjZDhuhuNlOH6GE2Q4YYYTZThxhpNkODTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznCHDGTOcKcOZM5wlw1kznC3D2TOcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTN8P8NFM1wsw8UzXCLDJTNcKkMyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNTJcM8O1Mlw7w3UyXDfD9TJcP8MNMtwww40y3DjDTTLcNMPNMtw8wy0y3DLDrTLcOsNtMtw2w+0y3D7DHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8OMNDMjw0w8MyPDzDIzI8MsOjMjw6w2MyPDbD4zI8PsMTMjwxw5MyPDlDMzwlw1MzPC3D0zM8I8MzMzwrw7MzPCfDczMcluF5GZ6f4QUZXpjhRRlenOElGV6a4WUZXp7hFRlemeFVGQ4yDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DO8OsNrMrw2w+syvD7DGzK8McObMrw5w1syvDXD2zK8PcM7Mrwzw7syvDvDezK8N8P7Mrw/wwcyfDDDhzJ8OMPhGY7I8JEMH83wsQwfz/CJDJ/M8KkMn87wmQyfzfC5DJ/P8IUMX8zwpQxfzvCVDF/N8LUMX8/wjQzfzPCtDN/O8J0M383wvf8d/iDDDzP8KMOPM/wkw08z/CzDzzP8IsMvM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98z/CPDPzP8K8O/M/wnw38z/C/DkRmOynB0hmMyHJvhkBzHyXHcHMfLcfwcJ8hxwhwnynHiHCfJcWiOk+Y4WY6T5zhFjlPmOFWOU+c4TY7T5jhdjtPnOEOOM+Y4U44z5zhLjrPmOFuOs+c4R45z5jhXjnPnOE+O8+Y4X47z57hAjgvmuFCOC+e4SI6L5rhYjovnuESOS+a4VI7kuHSOy+S4bI7L5bh8jivkuGKOK+W4co6r5LhqjqvluHqOa+S4Zo5r5bh2juvkuG6O6+W4fo4b5LhhjhvluHGOm+S4aY6b5bh5jlvkuGWOW+W4dY7b5LhtjtvluH2OO+S4Y4475bhzjrvkuGuOu+W4e4575LhnjnvluHeO++S4b4775bh/jgfkeGCOB+V4cI6H5HhojofleHiOR+R4ZI5H5Xh0jsfkeGyOx+V4fI4n5HhijifleHKO5nhKjqfmeFqOp+d4Ro5n5nhWjmfneE6O5+Y4LMfzcjw/xwtyvDDHi3K8OMdLcrw0x8tyvDzHK3K8MserchzkGOQY5hjlGOeY5JjmmOWY51jkWOZY5Vjn2OTY5tjl2Od4dY7X5HhtjtfleH2ON+R4Y4435XhzjrfkeGuOt+V4e4535HhnjnfleHeO9+R4b4735Xh/jg/k+GCOD+X4cI7DcxyR4yM5PprjYzk+nuMTOT6Z41M5Pp3jMzk+m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e4xc5fpnjVzl+neM3OX6b43c5fp/jDzn+mONPOf6c4y85/prjbzn+nuMfOf6Z4185/p3jPzn+m+N/OY7McVSOo3Mck+PYHIcUOE6B4xY4XoHjFzhBgRMWOFGBExc4SYFDC5y0wMkKnLzAKQqcssCpCpy6wGkKnLbA6QqcvsAZCpyxwJkKnLnAWQqctcDZCpy9wDkKnLPAuQqcu8B5Cpy3wPkKnL/ABQpcsMCFCly4wEUKXLTAxQpcvMAlClyywKUKpMClC1ymwGULXK7A5QtcocAVC1ypwJULXKXAVQtcrcDVC1yjwDULXKvAtQtcp8B1C1yvwPUL3KDADQvcqMCNC9ykwE0L3KzAzQvcosAtC9yqwK0L3KbAbQvcrsDtC9yhwB0L3KnAnQvcpcBdC9ytwN0L3KPAPQvcq8C9C9ynwH0L3K/A/Qs8oMADCzyowIMLPKTAQws8rMDDCzyiwCMLPKrAows8psBjCzyuwOMLPKHAEws8qcCTC7TAUwo8tcDTCjy9wDMKPLPAswo8u8BzCjy3wGEFnlfg+QVeUOCFBV5U4MUFXlLgpQVeVuDlBV5R4JUFXlXgoMCgwLDAqMC4wKTAtMCswLzAosCywKrAusCmwLbArsC+wKsLvKbAawu8rsDrC7yhwBsLvKnAmwu8pcBbC7ytwNsLvKPAOwu8q8C7C7ynwHsLvK/A+wt8oMAHC3yowIcLHF7giAIfKfDRAh8r8PECnyjwyQKfKvDpAp8p8NkCnyvw+QJfKPDFAl8q8OUCXynw1QJfK/D1At8o8M0C3yrw7QLfKfDdAt8r8P0CPyjwwwI/KvDjAj8p8NMCPyvw8wK/KPDLAr8q8OsCvynw2wK/K/D7An8o8McCfyrw5wJ/KfDXAn8r8PcC//h/n6H4V4F/F/hPgf8W+F+BIwscVeDoAscUOLbAISWOU+K4JY5X4vglTlDihCVOVOLEJU5S4tASJy1xshInL3GKEqcscaoSpy5xmhKnLXG6EqcvcYYSZyxxphJnLnGWEmctcbYSZy9xjhLnLHGuEucucZ4S5y1xvhLnL3GBEhcscaESFy5xkRIXLXGxEhcvcYkSlyxxqRIpcekSlylx2RKXK3H5ElcoccUSVypx5RJXKXHVElcrcfUS1yhxzRLXKnHtEtcpcd0S1ytx/RI3KHHDEjcqceMSNylx0xI3K3HzErcoccsStypx6xK3KXHbErcrcfsSdyhxxxJ3KnHnEncpcdcSdytx9xL3KHHPEvcqce8S9ylx3xL3K3H/Eg8o8cASDyrx4BIPKfHQEg8r8fASjyjxyBKPKvHoEo8p8dgSjyvx+BJPKPHEEk8q8eQSLfGUEk8t8bQSTy/xjBLPLPGsEs8u8ZwSzy1xWInnlXh+iReUeGGJF5V4cYmXlHhpiZeVeHmJV5R4ZYlXlTgoMSgxLDEqMS4xKTEtMSsxL7EosSyxKrEusSmxLbErsS/x6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEu8q8e4S7ynx3hLvK/H+Eh8o8cESHyrx4RKHlziixEdKfLTEx0p8vMQnSnyyxKdKfLrEZ0p8tsTnSny+xBdKfLHEl0p8ucRXSny1xNdKfL3EN0p8s8S3Sny7xHdKfLfE90p8v8QPSvywxI9K/LjET0r8tMTPSvy8xC9K/LLEr0r8usRvSvy2xO9K/L7EH0r8scSfSvy5xF9K/LXE30r8vcQ/SvyzxL9K/LvEf0r8t8T/ShxZ4qgSR5c4psSxJQ6pcJwKx61wvArHr3CCCiescKIKJ65wkgqHVjhphZNVOHmFU1Q4ZYVTVTh1hdNUOG2F01U4fYUzVDhjhTNVOHOFs1Q4a4WzVTh7hXNUOGeFc1U4d4XzVDhvhfNVOH+FC1S4YIULVbhwhYtUuGiFi1W4eIVLVLhkhUtVSIVLV7hMhctWuFyFy1e4QoUrVrhShStXuEqFq1a4WoWrV7hGhWtWuFaFa1e4ToXrVrhehetXuEGFG1a4UYUbV7hJhZtWuFmFm1e4RYVbVrhVhVtXuE2F21a4XYXbV7hDhTtWuFOFO1e4S4W7VrhbhbtXuEeFe1a4V4V7V7hPhftWuF+F+1d4QIUHVnhQhQdXeEiFh1Z4WIWHV3hEhUdWeFSFR1d4TIXHVnhchcdXeEKFJ1Z4UoUnV2iFp1R4aoWnVXh6hWdUeGaFZ1V4doXnVHhuhcMqPK/C8yu8oMILK7yowosrvKTCSyu8rMLLK7yiwisrvKrCQYVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV9hVdXeE2F11Z4XYXXV3hDhTdWeFOFN1d4S4W3VnhbhbdXeEeFd1Z4V4V3V3hPhfdWeF+F91f4QIUPVvhQhQ9XOLzCERU+UuGjFT5W4eMVPlHhkxU+VeHTFT5T4bMVPlfh8xW+UOGLFb5U4csVvlLhqxW+VuHrFb5R4ZsVvlXh2xW+U+G7Fb5X4fsVflDhhxV+VOHHFX5S4acVflbh5xV+UeGXFX5V4dcVflPhtxV+V+H3Ff5Q4Y8V/lThzxX+UuGvFf5W4e8V/lHhnxX+VeHfFf5T4b8V/lfhyApHVTi6wjEVjq1wSI3j1DhujePVOH6NE9Q4YY0T1ThxjZPUOLTGSWucrMbJa5yixilrnKrGqWucpsZpa5yuxulrnKHGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysxsVrXKLGJWtcqkZqXLrGZWpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1q3LXG3WrcvcY9atyzxr1q3LvGfWrct8b9aty/xgNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLbG42o8vsYTajyxxpNqPLlGazylxlNrPK3G02s8o8YzazyrxrNrPKfGc2scVuN5NZ5f4wU1XljjRTVeXOMlNV5a42U1Xl7jFTVeWeNVNQ5qDGoMa4xqjGtMakxrzGrMayxqLGusaqxrbGpsa+xq7Gu8usZrary2xutqvL7GG2q8scabary5xltqvLXG22q8vcY7aryzxrtqvLvGe2q8t8b7ary/xgdqfLDGh2p8uMbhNY6o8ZEaH63xsRofr/GJGp+s8akan67xmRqfrfG5Gp+v8YUaX6zxpRpfrvGVGl+t8bUaX6/xjRrfrPGtGt+u8Z0a363xvRrfr/GDGj+s8aMaP67xkxo/rfGzGj+v8Ysav6zxqxq/rvGbGr+t8bsav6/xhxp/rPGnGn+u8Zcaf63xtxp/r/GPGv+s8a8a/67xnxr/rfG/GkfWOKrG0TWOqXFsjUMaHKfBcRscr8HxG5ygwQkbnKjBiRucpMGhDU7a4GQNTt7gFA1O2eBUDU7d4DQNTtvgdA1O3+AMDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDS7Z4FIN0uDSDS7T4LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ2e1ODJDdrgKQ2e2uBpDZ7e4BkNntngWQ2e3eA5DZ7b4LAGz2vw/AYvaPDCBi9q8OIGL2nw0gYva/DyBq9o8MoGr2pw0GDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12Df4NUNXtPgtQ1e1+D1Dd7Q4I0N3tTgzQ3e0uCtDd7W4O0N3tHgnQ3e1eDdDd7T4L0N3tfg/Q0+0OCDDT7U4MMNDm9wRIOPNPhog481+HiDTzT4ZINPNfh0g880+GyDzzX4fIMvNPhigy81+HKDrzT4aoOvNfh6g280+GaDbzX4doPvNPhug+81+H6DHzT4YYMfNfhxg580+GmDnzX4eYNfNPhlg181+HWD3zT4bYPfNfh9gz80+GODPzX4c4O/NPhrg781+HuDfzT4Z4N/Nfh3g/80+G+D/zU4ssFRDY5ucEyDYxsc0uI4LY7b4ngtjt/iBC1O2OJELU7c4iQtDm1x0hYna3HyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2hxyRaXapEWl25xmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s8aQWT27RFk9p8dQWT2vx9BbPaPHMFs9q8ewWz2nx3BaHtXhei+e3eEGLF7Z4UYsXt3hJi5e2eFmLl7d4RYtXtnhVi4MWgxbDFqMW4xaTFtMWsxbzFosWyxarFusWmxbbFrsW+xavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9s8a4W727xnhbvbfG+Fu9v8YEWH2zxoRYfbnF4iyNafKTFR1t8rMXHW3yixSdbfKrFp1t8psVnW3yuxedbfKHFF1t8qcWXW3ylxVdbfK3F11t8o8U3W3yrxbdbfKfFd1t8r8X3W/ygxQ9b/KjFj1v8pMVPW/ysxc9b/KLFL1v8qsWvW/ymxW9b/K7F71v8ocUfW/ypxZ9b/KXFX1v8rcXfW/yjxT9b/KvFv1v8p8V/W/yvxZEtjmpxdItjWhzb4pAOx+lw3A7H63D8DifocMIOJ+pw4g4n6XBoh5N2OFmHk3c4RYdTdjhVh1N3OE2H03Y4XYfTdzhDhzN2OFOHM3c4S4ezdjhbh7N3OEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh0t2uFSHdLh0h8t0uGyHy3W4fIcrdLhihyt1uHKHq3S4aoerdbh6h2t0uGaHa3W4dofrdLhuh+t1uH6HG3S4YYcbdbhxh5t0uGmHm3W4eYdbdLhlh1t1uHWH23S4bYfbdbh9hzt0uGOHO3W4c4e7dLhrh7t1uHuHe3S4Z4d7dbh3h/t0uG+H+3W4f4cHdHhghwd1eHCHh3R4aIeHdXh4h0d0eGSHR3V4dIfHdHhsh8d1eHyHJ3R4YocndXhyh3Z4Soendnhah6d3eEaHZ3Z4Vodnd3hOh+d2OKzD8zo8v8MLOryww4s6vLjDSzq8tMPLOry8wys6vLLDqzocdBh0GHYYdRh3mHSYdph1mHdYdFh2WHVYd9h02HbYddh3eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3h/d0eG+H93V4f4cPdPhghw91+HCHwzsc0eEjHT7a4WMdPt7hEx0+2eFTHT7d4TMdPtvhcx0+3+ELHb7Y4UsdvtzhKx2+2uFrHb7e4RsdvtnhWx2+3eE7Hb7b4Xsdvt/hBx1+2OFHHX7c4ScdftrhZx1+3uEXHX7Z4Vcdft3hNx1+2+F3HX7f4Q8d/tjhTx3+3OEvHf7a4W8d/t7hHx3+2eFfw4b4d4f/dPhvh/91OLLDUR2O7nBMh2M7HNLjOD2O2+N4PY7f4wQ9TtjjRD1O3OMkPQ7tcdIeJ+tx8h6n6HHKHqfqceoep+lx2h6n63H6HmfoccYeZ+px5h5n6XHWHmfrcfYe5+hxzh7n6nHuHufpcd4e5+tx/h4X6HHBHhfqceEeF+lx0R4X63HxHpfocckel+qRHpfucZkel+1xuR6X73GFHlfscaUeV+5xlR5X7XG1HlfvcY0e1+xxrR7X7nGdHtftcb0e1+9xgx437HGjHjfucZMeN+1xsx4373GLHrfscaset+5xmx637XG7HrfvcYced+xxpx537nGXHnftcbced+9xjx737HGvHvfucZ8e9+1xvx737/GAHg/s8aAeD+7xkB4P7fGwHg/v8Ygej+zxqB6P7vGYHo/t8bgej+/xhB5P7PGkHk/u0R5P6fHUHk/r8fQez+jxzB7P6vHsHs/p8dweh/V4Xo/n93hBjxf2eFGPF/d4SY+X9nhZj5f3eEWPV/Z4VY+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvser+7xmh6v7fG6Hq/v8YYeb+zxph5v7vGWHm/t8bYeb+/xjh7v7PGuHu/u8Z4e7+3xvh7v7/GBHh/s8aEeH+5xeI8j+v8juRyb+D4YLZgyTWrbdre2bdu2vbVS28b/Z6NWVNu2bevOM/d8g7Mz+2Jx5ABHDXD0AMcMcOwAHxngowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLAX45wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D/CPAf45wL8G+PcA/xngvwP8b4BDAhwnwHEDHC/A8QOcIMAJAxwa4EQBDgtweIATBzhJgJMGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WICLB7hEgAS4ZIBLBbh0gMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyAJwR4YoAGeFKAJwd4SoCnBnhagKcHeEaAZwZ4VoBnB3hOgCMCPDfA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7AhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4Z4B3BXh3gPcEeG+A9wV4f4APBPhggA8F+HCAIwMcFeDoAMcEODbARwJ8NMDHAnw8wCcCfDLApwJ8OsBnAnw2wOcCfD7AFwJ8McCXAnw5wFcCfDXA1wJ8PcA3AnwzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAvwL8O8B/Avw3wP+C8RwS4jghjhvieCGOH+IEIU4Y4tAQJwpxWIjDQ5w4xElCnDTEyUKcPMQpQpwyxKlCnDrEaUKcNsTpQpw+xBlCnDHEmUKcOcRZQpw1xNlCnD3EOUKcM8S5Qpw7xHlCnDfE+UKcP8QFQlwwxIVCXDjERUJcNMTFQlw8xCVCJMQlQ1wqxKVDXCbEZUNcLsTlQ1whxBVDXCnElUNcJcRVQ1wtxNVDXCPENUNcK8S1Q1wnxHVDXC/E9UPcIMQNQ9woxI1D3CTETUPcLMTNQ9wixC1D3CrErUPcJsRtQ9wuxO1D3CHEHUPcKcSdQ9wlxF1D3C3E3UPcI8Q9Q9wrxL1D3CfEfUPcL8T9QzwgxANDPCjEg0M8JMRDQzwsxMNDPCLEI0M8KsSjQzwmxGNDPC7E40M8IcQTQzTEk0I8OcRTQjw1xNNCPD3EM0I8M8SzQjw7xHNCHBHiuSGeF+L5IV4Q4oUhXhTixSFeEuKlIV4W4uUhXhHilSFeFeLVIV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsQ7Q7wrxLtDvCfEe0O8L8T7Q3wgxAdDfCjEh0McGeKoEEeHOCbEsSE+EuKjIT4W4uMhPhHikyE+FeLTIT4T4rMhPhfi8yG+EOKLIb4U4sshvhLiqyG+FuLrIb4R4pshvhXi2yG+E+K7Ib4X4vshfhDihyF+FOLHIX4S4qchfhbi5yF+EeKXIX4V4tchfhPityF+F+L3If4Q4o8h/hTizyH+EuKvIf4W4u8h/hHinyH+FeLfIf4T4r8h/hfikAjHiXDcCMeLcPwIJ4hwwgiHRjhRhMMiHB7hxBFOEuGkEU4W4eQRThHhlBFOFeHUEU4T4bQRThfh9BHOEOGMEc4U4cwRzhLhrBHOFuHsEc4R4ZwRzhXh3BHOE+G8Ec4X4fwRLhDhghEuFOHCES4S4aIRLhbh4hEuESERLhnhUhEuHeEyES4b4XIRLh/hChGuGOFKEa4c4SoRrhrhahGuHuEaEa4Z4VoRrh3hOhGuG+F6Ea4f4QYRbhjhRhFuHOEmEW4a4WYRbh7hFhFuGeFWEW4d4TYRbhvhdhFuH+EOEe4Y4U4R7hzhLhHuGuFuEe4e4R4R7hnhXhHuHeE+Ee4b4X4R7h/hAREeGOFBER4c4SERHhrhYREeHuERER4Z4VERHh3hMREeG+FxER4f4QkRnhihEZ4U4ckRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+GICM+N8LwIz4/wgggvjPCiCC+O8JIIL43wsggvj/CKCK+M8KoIr47wmgivjfC6CK+P8IYIb4zwpghvjvCWCG+N8LYIb4/wjggHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYR3hnhXRHeHeE9Ed4b4X0R3h/hAxE+GOFDET4c4cgIR0U4OsIxEY6N8JEIH43wsQgfj/CJCJ+M8KkIn47wmQifjfC5CJ+P8IUIX4zwpQhfjvCVCF+N8LUIX4/wjQjfjPCtCN+O8J0I343wvQjfj/CDCD+M8KMIP47wkwg/jfCzCD+P8IsIv4zwqwi/jvCbCL+N8LsIv4/whwh/jPCnCH+O8JcIf43wtwh/j/CPCP+M8K8I/47wnwj/jfC/CIfEOE6M48Y4XozjxzhBjBPGODTGiWIcFuPwGCeOcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF45xkRgXjXGxGBePcYkYiXHJGJeKcekYl4lx2RiXi3H5GFeIccUYV4px5RhXiXHVGFeLcfUY14hxzRjXinHtGNeJcd0Y14tx/Rg3iHHDGDeKceMYNxl3yJD/cdssxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjNMaTYjw5xlNiPDXG02I8PcYzYjwzxrNiPDvGc2IcEeO5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2N8KMaHYxwZ46gYR8c4JsaxMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQBMdJcNwEx0tw/AQnSHDCBIcmOFGCwxIcnuDECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6RIAkumeBSCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemKAJnpTgySOGe0qCpyZ4WoKnJ3hGgmcmeFaCZyd4ToIjEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxIcJBgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgneGeCdyV4d4L3JHhvgvcleH+CDyT4YIIPJfhwgiMTHJXg6ATHJDg2wUcSfDTBxxJ8PMEnEnwywacSfDrBZxJ8NsHnEnw+wRcSfDHBlxJ8OcFXEnw1wdcSfD3BNxJ8M8G3Enw7wXcSfDfB9xJ8P8EPEvwwwY8S/DjBTxL8NMHPEvw8wS8S/DLBrxL8OsFvEvw2we8S/D7BHxL8McGfEvw5wV8S/DXB3xL8PcE/Evwzwb8S/DvBfxL8N8H/EhyS4jgpjpvieCmOn+IEKU6Y4tAUJ0pxWIrDU5w4xUlSnDTFyVKcPMUpUpwyxalSnDrFaVKcNsXpUpw+xRlSnDHFmVKcOcVZUpw1xdlSnD3FOVKcM8W5Upw7xXlSnDfF+VKcP8UFUlwwxYVSXDjFRVJcNMXFUlw8xSVSJMUlU1wqxaVTXCbFZVNcLsXlU1whxRVTXCnFlVNcJcVVU1wtxdVTXCPFNVNcK8W1U1wnxXVTXC/F9VPcIMUNU9woxY1T3CTFTVPcLMXNU9wixS1T3CrFrVPcJsVtU9wuxe1T3CHFHVPcKcWdU9wlxV1T3C3F3VPcI8U9U9wrxb1T3CfFfVPcL8X9UzwgxQNTPCjFg1M8JMVDUzwsxcNTPCLFI1M8KsWjUzwmxWNTPC7F41M8IcUTUzTFk1I8OcVTUjw1xdNSPD3FM1I8M8WzUjw7xXNSHJHiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsU7U7wrxbtTvCfFe1O8L8X7U3wgxQdTfCjFh1McmeKoFEenOCbFsSk+kuKjKT6W4uMpPpHikyk+leLTKT6T4rMpPpfi8ym+kOKLKb6U4sspvpLiqym+luLrKb6R4pspvpXi2ym+k+K7Kb6X4vspfpDihyl+lOLHKX6S4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4r8p/pfikAzHyXDcDMfLcPwMJ8hwwgyHZjhRhsMyHJ7hxBlOkuGkGU6W4eQZTpHhlBlOleHUGU6T4bQZTpfh9BnOkOGMGc6U4cwZzpLhrBnOluHsGc6R4ZwZzpXh3BnOk+G8Gc6X4fwZLpDhghkulOHCGS6S4aIZLpbh4hkukSEZLpnhUhkuneEyGS6b4XIZLp/hChmumOFKGa6c4SoZrprhahmunuEaGa6Z4VoZrp3hOhmum+F6Ga6f4QYZbpjhRhlunOEmGW6a4WYZbp7hFhlumeFWGW6d4TYZbpvhdhlun+EOGe6Y4U4Z7pzhLhnumuFuGe6e4R4Z7pnhXhnuneE+2f8CA/fLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMzfCkDE/O8JQMT83wtAxPz/CMDM/M8KwMz87wnAxHZHhuhudleH6GF2R4YYYXZXhxhpdkeGmGl2V4eYZXZHhlhldleHWG12R4bYbXZXh9hjdkeGOGN2V4c4a3ZHhrhrdleHuGd2Q4yDDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8M4M78rw7gzvyfDeDO/L8P4MH8jwwQwfyvDhDEdmOCrD0RmOyXBsho9k+GiGj2X4eIZPZPhkhk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G72X4foYfZPhhhh9l+HGGn2T4aYafZfh5hl9k+GWGX2X4dYbfZPhtht9l+H2GP2T4Y4Y/Zfhzhr9k+GuGv2X4e4Z/ZPhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx6E5TpTjsByH5zhxjpPkOGmOk+U4eY5T5DhljlPlOHWO0+Q4bY7T5Th9jjPkOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkSI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOa+a4Vo5r57hOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5miOJ+V4co6n5HhqjqfleHqOZ+R4Zo5n5Xh2jufkOCLHc3M8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjx0GOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY535nhXjnfneE+O9+Z4X4735/hAjg/m+FCOD+c4MsdROY7OcUyOY3N8JMdHc3wsx8dzfCLHJ3N8Ksenc3wmx2dzfC7H53N8IccXc3wpx5dzfCXHV3N8LcfXc3wjxzdzfCvHt3N8J8d3c3wvx/dz/CDHD3P8KMePc/wkx09z/CzHz3P8Iscvc/wqx69z/CbHb3P8Lsfvc/whxx9z/CnHn3P8Jcdfc/wtx99z/CPHP3P8K8e/c/wnx39z/C/HIQWOU+C4BY5X4PgFTlDghAUOLXCiAocVOLzAiQucpMBJC5yswMkLnKLAKQucqsCpC5ymwGkLnK7A6QucocAZC5ypwJkLnKXAWQucrcDZC5yjwDkLnKvAuQucp8B5C5yvwPkLXKDABQtcqMCFC1ykwEULXKzAxQtcokAKXLLApQpcusBlCly2wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tsDjCjy+wBMKPLFACzypwJMLPKXAUws8rcDTCzyjwDMLPKvAsws8p8ARBZ5b4HkFnl/gBQVeWOBFBV5c4CUFXlrgZQVeXuAVBV5Z4FUFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQUOCgwKDAuMCowLTApMC8wKzAssCiwLhg4ZMsS6wKbAtsCuwL7AOwu8q8C7C7ynwHsLvK/A+wt8oMAHC3yowIcLHFngqAJHFzimwLEFPlLgowU+VuDjBT5R4JMFPlXg0wU+U+CzBT5X4PMFvlDgiwW+VODLBb5S4KsFvlbg6wW+UeCbBb5V4NsFvlPguwW+V+D7BX5Q4IcFflTgxwV+UuCnBX5W4OcFflHglwV+VeDXBX5T4LcFflfg9wX+UOCPBf5U4M8F/lLgrwX+VuDvBf5R4J8F/lXg3wX+U+C/Bf5X4JASxylx3BLHK3H8EicoccISh5Y4UYnDShxe4sQlTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbi7CXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlTiwiUuUuKiJS5W4uIlLlEiJS5Z4lIlLl3iMiUuW+JyJS5f4golrljiSiWuXOIqJa5a4molrl7iGiWuWeJaJa5d4jolrlvieiWuX+IGJW5Y4kYlblziJiVuWuJmJW5e4hYlblniViVuXeI2JW5b4nYlbl/iDiXuWOJOJe5c4i4l7lribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5d4jElHlvicSUeX+IJJZ5YoiWeVOLJJZ5S4qklnlbi6SWeUeKZJZ5V4tklnlPiiBLPLfG8Es8v8YISLyzxohIvLvGSEi8t8bISLy/xihKvLPGqEq8u8ZoSry3xuhKvL/GGEm8s8aYSby7xlhJvLfG2Em8v8Y4SByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2Jd5Z4l0l3l3iPSXeW+J9Jd5f4gMlPljiQyU+XOLIEkeVOLrEMSWOLfGREh8t8bESHy/xiRKfLPGpEp8u8ZkSny3xuRKfL/GFEl8s8aUSXy7xlRJfLfG1El8fNuT/V+JbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+J/JQ6pcJwKx61wvArHr3CCCiescGiFE1U4rMLhFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVUuGSFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFVrhSRWeXOEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVjqjw3ArPq/D8Ci+o8MIKL6rw4govqfDSCi+r8PIKr6jwygqvqvDqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+ocFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+GdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVPlThwxWOrHBUhaMrHFPh2AofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKn6vw+QpfqPDFCl+q8OUKX6nw1Qpfq/D1Ct+o8M0K36rw7QrfqfDdCt+r8P0KP6jwwwo/qvDjCj+p8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8K/6twSI3j1DhujePVOH6NE9Q4YY1Da5yoxmE1Dq9x4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqJEal6xxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zRGk+q8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqXFEjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R42DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsa76zxrhrvrvGeGu+t8b4a76/xgRofrPGhGh+ucWSNo2ocXeOYGsfW+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1vhcjc/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNf9f4T43/1vhfjUMaHKfBcRscr8HxG5ygwQkbHNrgRA0Oa3B4gxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDNLhkg0s1uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigzZ4UoMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6DIxo8t8HzGjy/wQsavLDBixq8uMFLGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsaHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3hng3c1eHeD9zR4b4P3NXh/gw80+GCDDzX4cIMjGxzV4OgGxzQ4tsFHGny0wccafLzBJxp8ssGnGny6wWcafLbB5xp8vsEXGnyxwZcafLnBVxp8tcHXGny9wTcafLPBtxp8u8F3Gny3wfcafL/BDxr8sMGPGvy4wU8a/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/Gvy7wX8a/LfB/xoc0uI4LY7b4ngtjt/iBC1O2OLQFidqcViLw1ucuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWqTFJVtcqsWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1u0xZNaPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWhzR4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7FO1u8q8W7W7ynxXtbvK/F+1t8oMUHW3yoxYdbHNniqBZHtzimxbEtPtLioy0+1uLjLT7R4pMtPtX+vy/PtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi//970+H43Q4bofjdTh+hxN0OGGHQzucqMNhHQ7vcOIOJ+lw0g4n63DyDqfocMoOp+pw6g6n6XDaDqfrcPoOZ+hwxg5n6nDmDmfpcNYOZ+tw9g7n6HDODufqcO4O5+lw3g7n63D+DhfocMEOF+pw4Q4X6XDRDhfrcPEOl+iQDpfscKkOl+5wmQ6X7XC5DpfvcIUOV+xwpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s0A5P6vDkDk/p8NQOT+vw9A7P6PDMDs/q8OwOz+lwRIfndnheh+d3eEGHF3Z4UYcXd3hJh5d2eFmHl3d4RYdXdnhVh1d3eE2H13Z4XYfXd3hDhzd2eFOHN3d4S4e3dnhbh7d3eEeHgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Du/s8K4O7+7wng7v7fC+Du/v8IEOH+zwoQ4f7nBkh6M6HN3hmA7HdvhIh492+FiHj3f4RIdPdvhUh093+EyHz3b4XIfPd/hChy92+FKHL3f4Soevdvhah693+EaHb3b4Vodvd/hOh+92+F6H73f4QYcfdvhRhx93+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHv3f4R4d/dvhXh393+E+H/3b4X4dDehynx3F7HK/H8XucoMcJexza40Q9DutxeI8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj/S4ZI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo/2eFKPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOjyN6PLfH83o8v8cLerywx4t6vLjHS3q8tMfLery8xyt6vLLHq3q8usdrery2x+t6vL7HG3q8scebery5x1t6vLXH23q8vcc7ehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1+HCPI3sc1ePoHsf0OPb/WLTnNr4LQIHiW7Vq2bZdJ9u2bds+2bZte7+vjWwbyzZWre0+97n3vIfz32eATw7wqQE+PcBnBvjsAJ8b4PMDfGGALw7wpQG+PMBXBvjqAF8b4OsDfGOAbw7wrQG+PcB3BvjuAN8b4PsD/GCAHw7wowF+PMBPBjhygJ8O8LMBfj7ALwb45QC/GuDXA/xmgN8O8LsBfj/AHwb44wB/GuDPA/xlgL8O8LcB/j7APwb45wD/GuCoAf49wH8G+O8ARw/wvwGOGeDYAQ4JcGiA4wQ4boDjBTgswPEDnCDACQMcHuBEAU4c4CQBThrgZAFOHuAUAU4Z4FQBTh3gNAFOG+B0AU4f4AwBzhjgTAHOHOAsAc4a4GwBzh7gHAHOGeBcAc4d4DwBzhvgfAHOH+ACAS4Y4EIBLhzgIgEuGuBiAS4e4BIBEuCSAS4V4NIBLhPgsgEuF+DyAa4Q4IoBrhTgygGuEuCqAa4W4OoBrhHgmgGuFeDaAa4T4LoBrhfg+gFuEOCGAW4U4MYBbhLgpgFuFuDmAW4R4JYBbhXg1gFuE+C2AW4X4PYB7hDgjgHuFODOAe4S4K4B7hbg7gHuEeCeAe4V4N4B7hPgvgHuF+D+AR4Q4IEBHhTgwQEeEuChAR4W4OEBHhHgkQEeFeDRAR4T4LEBHhfg8QGeEOCJARrgSQGeHOApAZ4a4GkBnh7gGQGeGeBZAZ4d4DkBnhvgeQGeH+AFAV4Y4EUBXhzgJQFeGuBlAV4e4BUBXhngVQFeHeA1AV4b4HUBXh/gDQHeGOBNAd4c4C0B3hrgbQHeHuAdAd4Z4F0B3h3gPQHeG+B9Ad4f4AMBPhjgQwE+HOAjAT4a4GMBPh7gEwGOCHAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/gkwE+FeDTAT4T4LMBPhfg8wG+EOCLAb4U4MsBvhLgqwG+FuDrAb4R4JsBvhXg2wG+E+C7Ab4X4PsBfhDghwF+FODHAX4S4MgAPw3wswA/D/CLAL8M8KsAvw7wmwC/DfC7AL8P8IcAfwzwpwB/DvCXAH8N8LcAfw/wjwD/DPCvAEcF+HeA/wT4b4CjA/wvwDEBjg1wSIhDQxwnxHFDHC/EYSGOH+IEIU4Y4vAQJwpx4hAnCXHSECcLcfIQpwhxyhCnCnHqEKcJcdoQpwtx+hBnCHHGEGcKceYQZwlx1hBnC3H2EOcIcc4Q5wpx7hDnCXHeEOcLcf4QFwhxwRAXCnHhEBcJcdEQFwtx8RCXCJEQlwxxqRCXDnGZEJcNcbkQlw9xhRBXDHGlEFcOcZUQVw1xtRBXD3GNENcMca0Q1w5xnRDXDXG9ENcPcYMQNwxxoxA3DnGTEDcNcbMQNw9xixC3DHGrELcOcZsQtw1xuxC3D3GHEHcMcacQdw5xlxB3DXG3EHcPcY8Q9wxxrxD3DnGfEPcNcb8Q9w/xgBAPDPGgEA8O8ZAQDw3xsBAPD/GIEI8M8agQjw7xmBCPDfG4EI8P8YQQTwzREE8K8eQQTwnx1BBPC/H0EM8I8cwQzwrx7BDPCfHcEM8L8fwQLwjxwhAvCvHiEC8J8dIQLwvx8hCvCPHKEK8K8eoQrwnx2hCvC/H6EG8I8cYQbwrx5hBvCfHWEG8L8fYQ7wjxzhDvCvHuEO8J8d4Q7wvx/hAfCPHBEB8K8eEQHwnx0RAfC/HxEJ8IcUSIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EJ8M8akQnw7xmRCfDfG5EJ8P8YUQXwzxpRBfDvGVEF8N8bUQXw/xjRDfDPGtEN8O8Z0Q3w3xvRDfD/GDED8M8aMQPw7xkxBHhvhpiJ+F+HmIX4T4ZYhfhfh1iN+E+G2I34X4fYg/hPhjiD+F+HOIv4T4a4i/hfh7iH+E+GeIf4U4KsS/Q/wnxH9DHB3ifyGOCXFsiEMiHBrhOBGOG+F4EQ6LcPwIJ4hwwgiHRzhRhBNHOEmEk0Y4WYSTRzhFhFNGOFWEU0c4TYTTRjhdhNNHOEOEM0Y4U4QzRzhLhLNGOFuEs0c4R4RzRjhXhHNHOE+E80Y4X4TzR7hAhAtGuFCEC0e4SISLRrhYhItHuESERLhkhEtFuHSEy0S4bITLRbh8hCtEuGKEK0W4coSrRLhqhKtFuHqEa0S4ZoRrRbh2hOsM+3+zEeH6EW4Q4YYRbhThxhFuEuGmEW4W4eYRbhHhlhFuFeHWEW4T4bYRbhfh9hHuEOGOEe4U4c4R7hLhrhHuFuHuEe4R4Z4R7hXh3hHuE+G+Ee4X4f4RHhDhgREeFOHBER4S4aERHhbh4REeEeGRER4V4dERHhPhsREeF+HxEZ4Q4YkRGuFJEZ4c4SkRnhrhaRGeHuEZEZ4Z4VkRnh3hORGeG+F5EZ4f4QURXhjhRRFeHOElEV4a4WURXh7hFRFeGeFVEV4d4TURXhvhdRFeH+ENEd4Y4U0R3hzhLRHeGuFtEd4e4R0R3hnhXRHeHeE9Ed4b4X0R3h/hAxE+GOFDET4c4SMRPhrhYxE+HuETEY6IcBBhEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH+GTET4V4dMRPhPhsxE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhyAg/jfCzCD+P8IsIv4zwqwi/jvCbCL+N8LsIv4/whwh/jPCnCH+O8JcIf43wtwh/j/CPCP+M8K8IR0X4d4T/RPhvhKMj/C/CMRGOjXBIjENjHCfGcWMcL8ZhMY4fM2rs/+XwGCeKceIYJ4lx0hgni3HyGKeIccoYp4px6hiniXHaGKeLcfoYZ4hxxhhninHmGGeJcdYYZ4tx9hjniHHOGOeKce4Y54lx3hjni3H+GBeIccEYF4px4RgXiXHRGBeLcfEYl4iRGJeMcakYl45xmRiXjXG5GJePcYUYV4xxpRhXjnGVGFeNcbUYV49xjRjXjHGtGNeOcZ0Y141xvRjXj3GDGDeMcaMYN45xkxg3jXGzGDePcYsYt4xxqxi3jnGbGLeNcbsYt49xhxh3jHGnGHeOcZcYd41xtxh3j3GPGPeMca8Y945xnxj3jXG/GPeP8YAYD4zxoBgPjvGQGA+N8bAYD4/xiBiPjPGoGI+O8ZgYj43xuBiPj/GEGE+M0RhPivHkGE+J8dQYT4vx9BjPiPHMGM+K8ewYz4nx3BjPi/H8GC+I8cIYL4rx4hgvifHSGC+L8fIYr4jxyhivivHqGK+J8doYr4vx+hhviPHGGG+K8eYYb4nx1hhvi/H2GO+I8c4Y74rx7hjvifHeGO+L8f4YH4jxwRgfivHhGB+J8dEYH4vx8RifiHFEjIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xifjPGpGJ+O8ZkYn43xuRifj/GFGF+M8aUYX47xlRhfjfG1GF+P8Y0Y34zxrRjfjvGdGN+N8b0Y34/xgxg/jPGjGD+O8ZMYR8b4aYyfxfh5jF/E+GWMX8X4dYzfxPhtjN/F+H2MP8T4Y4w/xfhzjL/E+GuMv8X4e4x/xPhnjH/FOCrGv2P8J8Z/Yxwd438xjolxbIxDEhya4DgJjpvgeAkOS3D8BCdIcMIEhyc4UYITJzhJgpMmOFmCkyc4RYJTJjhVglMnOE2C0yY4XYLTJzhDgjMmOFOCMyc4S4KzJjhbgrMnOEeCcyY4V4JzJzhPgvMmOF+C8ye4QIILJrhQggsnuEiCiya4WIKLJ7hEgiS4ZIJLJbh0gsskuGyCyyW4fIIrJLhigisluHKCqyS4aoKrJbh6gmskuGaCayW4doLrJLhugusluH6CGyS4YYIbJbhxgpskuGmCmyW4eYJbJLhlglsluHWC2yS4bYLbJbh9gjskuGOCOyW4c4K7JLhrgrsluHuCeyS4Z4J7Jbh3gvskuG+C+yW4f4IHJHhgggcleHCChyR4aIKHJXh4gkckeGSCRyV4dILHJHhsgscleHyCJyR4YoImeFKCJyd4SoKnJnhagqcneEaCZyZ4VoJnJ3hOgucmeF6C5yd4QYIXJnhRghcneEmClyZ4WYKXJ3hFglcmeFWCVyd4TYLXJnhdgtcneEOCNyZ4U4I3J3hLgrcmeFuCtyd4R4J3JnhXgncneE+C9yZ4X4L3J/hAgg8m+FCCDyf4SIKPJvhYgo8n+ESCIxIcJBgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgn+GSCTyX4dILPJPhsgs8l+HyCLyT4YoIvJfhygq8k+GqCryX4eoJvJPhmgm8l+HaC7yT4boLvJfh+gh8k+GGCHyX4cYKfJDgywU8T/CzBzxP8IsEvE/wqwa8T/CbBbxP8LsHvE/whwR8T/CnBnxP8JcFfE/wtwd8T/CPBPxP8K8FRCf6d4D8J/pvg6AT/S3BMgmMTHJLi0BTHSXHcFMdLcViK46c4QYoTpjg8xYlSnDjFSVKcNMXJUpw8xSlSnDLFqVKcOsVpUpw2xelSnD7FGVKcMcWZUpw5xVlSnDXF2VKcPcU5UpwzxblSnDvFeVKcN8X5Upw/xQVSXDDFhVJcOMVFUlw0xcVSXDzFJVIkxSVTXCrFpVNcJsVlU1wuxeVTXCHFFVNcKcWVU1wlxVVTXC3F1VNcI8U1U1wrxbVTXCfFdVNcL8X1U9wgxQ1T3CjFjVPcJMVNU9wsxc1T3CLFLVPcKsWtU9wmxW1T3C7F7VPcIcUdU9wpxZ1T3CXFXVPcLcXdU9wjxT1T3CvFvVPcJ8V9U9wvxf1TPCDFA1M8KMWDUzwkxUNTPCzFw1M8IsUjUzwqxaNTPCbFY1M8LsXjUzwhxRNTNMWTUjw5xVNSPDXF01I8PcUzUjwzxbNSPDvFc1I8N8XzUjw/xQtSvDDFi1K8OMVLUrw0xctSvDzFK1K8MsWrUrw6xWtSvDbF61K8PsUbUrwxxZtSvDnFW1K8NcXbUrw9xTtSvDPFu1K8O8V7Urw3xftSvD/FB1J8MMWHUnw4xUdSfDTFx1J8PMUnUhyR4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsUnU3wqxadTfCbFZ1N8LsXnU3whxRdTfCnFl1N8JcVXU3wtxddTfCPFN1N8K8W3U3wnxXdTfC/F91P8IMUPU/woxY9T/CTFkSl+muJnKX6e4hcpfpniVyl+neI3KX6b4ncpfp/iDyn+mOJPKf6c4i8p/pribyn+nuIfKf6Z4l8pjkrx7xT/SfHfFEen+F+KY1Icm+KQDIdmOE6G42Y4XobDMhw/wwkynDDD4RlOlOHEGU6S4aQZTpbh5BlOkeGUGU6V4dQZTpPhtBlOl+H0Gc6Q4YwZzpThzBnOkuGsGc6W4ewZzpHhnBnOleHcGc6T4bwZzpfh/BkukOGCGS6U4cIZLpLhohkuluHiGS6RIRkumeFSGS6d4TIZLpvhchkun+EKGa6Y4UoZrpzhKhmumuFqGa6e4RoZrpnhWhmuneE6Ga6b4XoZrp/hBhlumOFGGW6c4SYZbprhZhlunuEWGW6Z4VYZbp3hNhlum+F2GW6f4Q4Z7pjhThnunOEuGe6a4W4Z7p7hHhnumeFeGe6d4T4Z7pvhfhnun+EBGR6Y4UEZHpzhIRkemuFhGR6e4REZHpnhURkeneExGR6b4XEZHp/hCRmemKEZnpThyRmekuGpGZ6W4ekZnpHhmRmeleHZGZ6T4bkZnpfh+RlekOGFGV6U4cUZXpLhpRleluHlGV6R4ZUZXpXh1Rlek+G1GV6X4fUZ3pDhjRnelOHNGd6S4a0Z3pbh7RnekeGdGd6V4d0Z3pPhvRnel+H9GT6Q4YMZPpThwxk+kuGjGT6W4eMZPpHhiAwHGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZPpnhUxk+neEzGT6b4XMZPp/hCxm+mOFLGb6c4SsZvprhaxm+nuEbGb6Z4VsZvp3hOxm+m+F7Gb6f4QcZfpjhRxl+nOEnGY7M8NMMP8vw8wy/yPDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8jwzwz/ynBUhn9n+E+G/2Y4OsP/MhyT4dgMh+Q4NMdxchw3x/FyHJbj+DlOkOOEOQ7PcaIcJ85xkhwnzXGyHCfPcYocp8xxqhynznGaHKfNcbocp89xhhxnzHGmHGfOcZYcZ81xthxnz3GOHOfMca4c585xnhznzXG+HOfPcYEcF8xxoRwXznGRHBfNcbEcF89xiRzJcckcl8px6RyXyXHZHJfLcfkcV8hxxRxXynHlHFfJcdUcV8tx9RzXyHHNHNfKce0c18lx3RzXy3H9HDfIccMcN8px4xw3yXHTHDfLcfMct8hxyxy3ynHrHLfJcdsct8tx+xx3yHHHHHfKceccd8lx1xx3y3H3HPfIcc8c98px7xz3yXHfHPfLcf8cD8jxwBwPyvHgHA/J8dAcD8vx8ByPyPHIHI/K8egcj8nx2ByPy/H4HE/I8cQczfGkHE/O8ZQcT83xtBxPz/GMHM/M8awcz87xnBzPzfG8HM/P8YIcL8zxohwvzvGSHC/N8bIcL8/xihyvzPGqHK/O8Zocr83xuhyvz/GGHG/M8aYcb87xlhxvzfG2HG/P8Y4c78zxrhzvzvGeHO/N8b4c78/xgRwfzPGhHB/O8ZEcH83xsRwfz/GJHEfkOMgxyDHMMcoxzjHJMc0xyzHPscixzLHKsc6xybHNscuxHz5kyP8+8VSOT+f4TI7P5vhcjs/n+EKOL+b4Uo4v5/hKjq/m+FqOr+f4Ro5v5vhWjm/n+E6O7+b4Xo7v5/hBjh/m+FGOH+f4SY4jc/w0x89y/DzHL3L8Msevcvw6x29y/DbH73L8Pscfcvwxx59y/DnHX3L8Ncffcvw9xz9y/DPHv3IclePfOf6T4785js7xvxzH5Dg2xyEFDi1wnALHLXC8AocVOH6BExQ4YYHDC5yowIkLnKTASQucrMDJC5yiwCkLnKrAqQucpsBpC5yuwOkLnKHAGQucqcCZC5ylwFkLnK3A2Quco8A5C5yrwLkLnKfAeQucr8D5C1ygwAULXKjAhQtcpMBFC1yswMULXKJAClyywKUKXLrAZQpctsDlCly+wBUKXLHAlQpcucBVCly1wNUKXL3ANQpcs8C1Cly7wHUKXLfA9Qpcv8ANCtywwI0K3LjATQrctMDNCty8wC0K3LLArQrcusBtCty2wO0K3L7AHQrcscCdCty5wF0K3LXA3QrcvcA9CtyzwL0K3LvAfQrct8D9Cty/wAMKPLDAgwo8uMBDCjy0wMMKPLzAIwo8ssCjCjy6wGMKPLbA4wo8vsATCjyxQAs8qcCTCzylwFMLPK3A0ws8o8AzCzyrwLMLPKfAcws8r8DzC7ygwAsLvKjAiwu8pMBLC7yswMsLvKLAKwu8qsCrC7ymwGsLvK7A6wu8ocAbC7ypwJsLvKXAWwu8rcDbC7yjwDsLvKvAuwu8p8B7C7yvwPsLfKDABwt8qMCHC3ykwEcLfKzAxwt8osARBQ4KDAoMC4wKjAtMCkwLzArMCywKLAusCqwLbApsC+wK7At8ssCnCny6wGcKfLbA5wp8vsAXCnyxwJcKfLnAVwp8tcDXCny9wDcKfLPAtwp8u8B3Cny3wPcKfL/ADwr8sMCPCvy4wE8KHFngpwV+VuDnBX5R4JcFflXg1wV+U+C3BX5X4PcF/lDgjwX+VODPBf5S4K8F/lbg7wX+UeCfBf5V4KgC/y7wnwL/LXB0gf8VOKbAsQUOKXFoieOUOG6J45U4rMTxS5ygxAlLHF7iRCVOXOIkJU5a4mQlTl7iFCVOWeJUJU5d4jQlTlvidCVOX+IMJc5Y4kwlzlziLCXOWuJsJc5e4hwlzlniXCXOXeI8Jc5b4nwlzl/iAiUuWOJCJS5c4iIlLlriYiUuXuISJVLikiUuVeLSJS5T4rIlLlfi8iWuUOKKJa5U4solrlLiqiWuVuLqJa5R4polrlXi2iWuU+K6Ja5X4volblDihiVuVOLGJW5S4qYlblbi5iVuUeKWJW5V4tYlblPitiVuV+L2Je5Q4o4l7lTiziXuUuKuJe5W4u4l7lHiniXuVeLeJe5T4r4l7lfi/iUeUOKBJR5U4sElHlLioSUeVuLhJR5R4pElHlXi0SUeU+KxJR5X4vElnlDiiSVa4kklnlziKSWeWuJpJZ5e4hklnlniWSWeXeI5JZ5b4nklnl/iBSVeWOJFJV5c4iUlXlriZSVeXuIVJV5Z4lUlXl3iNSVeW+J1JV5f4g0l3ljiTSXeXOItJd5a4m0l3l7iHSXeWeJdJd5d4j0l3lvifSXeX+IDJT5Y4kMlPlziIyU+WuJjJT5e4hMljihxUGJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2Jf4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuLIEj8t8bMSPy/xixK/LPGrEr8u8ZsSvy3xuxK/L/GHEn8s8acSfy7xlxJ/LfG3En8v8Y8S/yzxrxJHlfh3if+U+G+Jo0v8r8QxJY4tcUiFQyscp8JxKxyvwmEVjl/hBBVOWOHwCieqcOIKJ6lw0gonq3DyCqeocMoKp6pw6gqnqXDaCqercPoKZ6hwxgpnqnDmCmepcNYKZ6tw9grnqHDOCueqcO4K56lw3grnq3D+CheocMEKF6pw4QoXqXDRChercPEKl6iQCpescKkKl65wmQqXrXC5CpevcIUKV6xwpQpXrnCVCletcLUKV69wjQrXrHCtCteucJ0K161wvQrXr3CDCjescKMKN65wkwo3rXCzCjevcIsKt6xwqwq3rnCbCretcLsKt69whwp3rHCnCneucJcKd61wtwp3r3CPCvescK8K965wnwr3rXC/Cvev8IAKD6zwoAoPrvCQCg+t8LAKD6/wiAqPrPCoipEjhgzxmAqPrfC4Co+v8IQKT6zQCk+q8OQKT6nw1ApPq/D0Cs+o8MwKz6rw7ArPqfDcCs+r8PwKL6jwwgovqvDiCi+p8NIKL6vw8gqvqPDKCq+q8OoKr6nw2gqvq/D6Cm+o8MYKb6rw5gpvqfDWCm+r8PYK76jwzgrvqvDuCu+p8N4K76vw/gofqPDBCh+q8OEKH6nw0Qofq/DxCp+ocESFgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7Cp+s8KkKn67wmQqfrfC5Cp+v8IUKX6zwpQpfrvCVCl+t8LUKX6/wjQrfrPCtCt+u8J0K363wvQrfr/CDCj+s8KMKP67wkwpHVvhphZ9V+HmFX1T4ZYVfVfh1hd9U+G2F31X4fYU/VPhjhT9V+HOFv1T4a4W/Vfh7hX9U+GeFf1U4qsK/K/ynwn8rHF3hfxWOqXBshUNqHFrjODWOW+N4NQ6rcfwaJ6hxwhqH1zhRjRPXOEmNk9Y4WY2T1zhFjVPWOFWNU9c4TY3T1jhdjdPXOEONM9Y4U40z1zhLjbPWOFuNs9c4R41z1jhXjXPXOE+N89Y4X43z17hAjQvWuFCNC9e4SI2L1rhYjYvXuESN1LhkjUvVuHSNy9S4bI3L1bh8jSvUuGKNK9W4co2r1LhqjavVuHqNa9S4Zo1r1bh2jevUuG6N69W4fo0b1LhhjRvVuHGNm9S4aY2b1bh5jVvUuGWNW9W4dY3b1LhtjdvVuH2NO9S4Y4071bhzjbvUuGuNu9W4e4171LhnjXvVuHeN+9S4b4371bh/jQfUeGCNB9V4cI2H1HhojYfVeHiNR9R4ZI1H1Xh0jcfUeGyNx9V4fI0n1HhijdZ4Uo0n13hKjafWeFqNp9d4Ro1n1nhWjWfXeE6N59Z4Xo3n13hBjRfWeFGNF9d4SY2X1nhZjZfXeEWNV9Z4VY1X13hNjdfWeF2N19d4Q4031nhTjTfXeEuNt9Z4W42313hHjXfWeFeNd9d4T4331nhfjffX+ECND9b4UI0P1/hIjY/W+FiNj9f4RI0jahzUGNQY1hjVGNeY1JjWmNWY11jUWNZY1VjX2NTY1tjV2Nf4ZI1P1fh0jc/U+GyNz9X4fI0v1PhijS/V+HKNr9T4ao2v1fh6jW/U+GaNb9X4do3v1Phuje/V+H6NH9T4YY0f1fhxjZ/UOLLGT2v8rMbPa/yixi9r/KrGr2v8psZva/yuxu9r/KHGH2v8qcafa/ylxl9r/K3G32v8o8Y/a/yrxlE1/l3jPzX+W+PoGv+rcUyNY2sc0uDQBsdpcNwGx2twWIPjNzhBgxM2OLzBiRqcuMFJGpy0wckanLzBKRqcssGpGpy6wWkanLbB6RqcvsEZGpyxwZkanLnBWRqctcHZGpy9wTkanLPBuRqcu8F5Gpy3wfkanL/BBRpcsMGFGly4wUUaXLTBxRpcvMElGqTBJRtcqsGlG1ymwWUbXK7B5RtcocEVG1ypwZUbXKXBVRtcrcHVG1yjwTUbXKvBtRtcp8F1G1yvwfUb3KDBDRvcqMGNG9ykwU0b3KzBzRvcosEtG9yqwa0b3KbBbRvcrsHtG9yhwR0b3KnBnRvcpcFdG9ytwd0b3KPBPRvcq8G9G9ynwX0b3K/B/Rs8oMEDGzyowYMbPKTBQxs8rMHDGzyiwSMbPKrBoxs8psFjGzyuweMbPKHBExu0wZMaPLnBUxo8tcHTGjy9wTMaPLPBsxo8u8FzGjy3wfMaPL/BCxq8sMGLGry4wUsavLTByxq8vMErGryywasavLrBaxq8tsHrGry+wRsavLHBmxq8ucFbGry1wdsavL3BOxq8s8G7Gry7wXsavLfB+xq8v8EHGnywwYcafLjBRxp8tMHHGny8wScaHNHgoMGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wScbfKrBpxt8psFnG3yuwecbfKHBFxt8qcGXG3ylwVcbfK3B1xt8o8E3G3yrwbcbfKfBdxt8r8H3G/ygwQ8b/KjBjxv8pMGRDX7a4GcNft7gFw1+2eBXDX7d4DcNftvgdw1+3+APDf7Y4E8N/tzgLw3+2uBvDf7e4B8N/tngXw2OavDvBv9p8N8GRzf4X4NjGhzb4JAWh7Y4Tovjtjhei8NaHL/FCVqcsMXhLU7U4sQtTtLipC1O1uLkLU7R4pQtTtXi1C1O0+K0LU7X4vQtztDijC3O1OLMLc7S4qwtztbi7C3O0eKcLc7V4twtztPivC3O1+L8LS7Q4oItLtTiwi0u0uKiLS7W4uItLtEiLS7Z4lKjh7p0i8u0uGyLy7W4fIsrtLhiiyu1uHKLq7S4aourtbh6i2u0uGaLa7W4dovrtLhui+u1uH6LG7S4YYsbtbhxi5u0uGmLm7W4eYtbtLhli1u1uHWL27S4bYvbtbh9izu0uGOLO7W4c4u7tLhri7u1uHuLe7S4Z4t7tbh3i/u0uG+L+7W4f4sHtHhgiwe1eHCLh7R4aIuHtXh4i0e0eGSLR7V4dIvHtHhsi8e1eHyLJ7R4You2eFKLJ7d4Sountnhai6e3eEaLZ7Z4Votnt3hOi+e2eF6L57d4QYsXtnhRixe3eEmLl7Z4WYuXt3hFi1e2eFWLV7d4TYvXtnhdi9e3eEOLN7Z4U4s3t3hLi7e2eFuLt7d4R4t3tnhXi3e3eE+L97Z4X4v3t/hAiw+2+FCLD7f4SIuPtvhYi4+3+ESLI1octBi0GLYYtRi3mLSYtpi1mLdYtFi2WLVYt9i02LbYtdi3+GSLT7X4dIvPtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftDiyxU9b/KzFz1v8osUvW/yqxa9b/KbFb1v8rsXvW/yhxR9b/KnFn1v8pcVfW/ytxd9b/KPFP1v8q8VRLf7d4j8t/tvi6Bb/a3FMi2NbHNLh0A7H6XDcDsfrcFiH43c4QYcTdji8w4k6nLjDSTqctMPJOpy8wyk6nLLDqTqcusNpOpy2w+k6nL7DGTqcscOZOpy5w1k6nLXD2TqcvcM5Opyzw7k6nLvDeTqct8P5Opy/wwU6XLDDhTpcuMNFOly0w8U6XLzDJTqkwyU7XKrDpTtcpsNlO1yuw+U7XKHDFTtcqcOVO1ylw1U7XK3D1Ttco8M1O1yrw7U7XKfDdTtcr8P1O9ygww073KjDjTvcpMNNO9ysw8073KLDLTvcqsOtO9ymw2073K7D7TvcocMdO9ypw5073KXDXTvcrcPdO9yjwz073KvDvTvcp8N9O9yvw/07PKDDAzs8qMODOzykw0M7PKzDwzs8osMjOzyqw6M7PKbDYzs8rsPjOzyhwxM7tMOTOjy5w1M6PLXD0zo8vcMzOjyzw7M6PLvDczo8t8PzOjy/wws6vLDDizq8uMNLOry0w8s6vLzDKzq8ssOrOry6w2s6vLbD6zq8vsMbOryxw5s6vLnDWzq8tcPbOry9wzs6vLPDuzq8u8N7Ory3w/s6vL/DBzp8sMOHOny4w0c6fLTDxzp8vMMnOhzR4aDDoMOww6jDuMOkw7TDrMO8w6LDssOqw7rDpsO2w67DvsMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDkR1+2uFnHX7e4RcdftnhVx1+3eE3HX7b4Xcdft/hDx3+2OFPHf7c4S8d/trhbx3+3uEfHf7Z4V8djurw7w7/6fDfDkd3+F+HYzoc2+GQHof2OE6P4/Y4Xo/Dehy/xwl6nLDH4T1O1OPEPU7S46Q9Ttbj5D1O0eOUPU7V49Q9TtPjtD1O1+P0Pc7Q44w9ztTjzD3O0uOsPc7W4+w9ztHjnD3O1ePcPc7T47w9ztfj/D0u0OOCPS7U48I9LtLjoj0u1uPiPS7RIz0u2eNSPS7d4zI9Ltvjcj0u3+MKPa7Y40o9rtzjKj2u2uNqPa7e4xo9rtnjWj2u3eM6Pa7b43o9rt/jBj1u2ONGPW7c4yY9btrjZj1u3uMWPW7Z41Y9bt3jNj1u2+N2PW7f4w497tjjTj3u3OMuPe7a42497t7jHj3u2eNePe7d4z497tvjfj3u3+MBPR7Y40E9HtzjIT0e2uNhPR7e4xE9HtnjUT0e3eMxPR7b43E9Ht/jCT2e2KM9ntTjyT2e0uOpPZ7W4+k9ntHjmT2e1ePZPZ7T47k9ntfj+T1e0OOFPV7U48U9XtLjpT1e1uPlPV7R45U9XtXj1T1e0+O1PV7X4/U93tDjjT3e1OPNPd7S46093tbj7T3e0eOdPd7V49093tPjvT3e1+P9PT7Q44M9PtTjwz0+0uOjPT7W4+M9PtHjiB4HPf5PAAAA///mBtvh") syz_mount_image$msdos(&(0x7f0000002900), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 426.429417ms ago: executing program 2 (id=1745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd28, 0x25dfdffe, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0xfffffffc}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 81.833815ms ago: executing program 3 (id=1746): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x4008031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) eventfd2(0x8, 0x0) 0s ago: executing program 2 (id=1747): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x1}) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x2, 0xa}) kernel console output (not intermixed with test programs): x520 [ 196.034050][ T5623] ? trace_irq_disable+0x3b/0x140 [ 196.034115][ T5623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.034176][ T5623] ? clear_bhb_loop+0x70/0xc0 [ 196.034248][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.034309][ T5623] RIP: 0033:0x7f16db19f397 [ 196.034364][ T5623] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 196.034408][ T5623] RSP: 002b:00007fffff05b258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 196.034462][ T5623] RAX: 0000000000000000 RBX: 00007f16db23448b RCX: 00007f16db19f397 [ 196.034477][ T5623] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffff05b310 [ 196.034489][ T5623] RBP: 00007fffff05b310 R08: 00007fffff05c310 R09: 00000000ffffffff [ 196.034504][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffff05c3a0 [ 196.034519][ T5623] R13: 00007f16db23448b R14: 000000000002fcb3 R15: 00007fffff05c3e0 [ 196.034552][ T5623] [ 196.067176][ T5623] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 196.470330][ T989] usb 4-1: Service connection timeout for: 256 [ 196.470364][ T989] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 196.472607][ T989] ath9k_htc: Failed to initialize the device [ 196.476843][ T992] usb 4-1: ath9k_htc: USB layer deinitialized [ 196.676639][ T8526] PKCS8: Unsupported PKCS#8 version [ 196.900344][ T5750] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 197.050399][ T5750] usb 2-1: Using ep0 maxpacket: 8 [ 197.051133][ T5750] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 197.059037][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.059065][ T5750] usb 2-1: Product: syz [ 197.059080][ T5750] usb 2-1: Manufacturer: syz [ 197.059096][ T5750] usb 2-1: SerialNumber: syz [ 197.108041][ T5750] usb 2-1: config 0 descriptor?? [ 197.127927][ T5750] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 197.127986][ T5750] pctv452e: pctv452e_power_ctrl: 1 [ 197.127986][ T5750] [ 197.128035][ T5750] usb 2-1: selecting invalid altsetting 3 [ 197.128052][ T5750] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 197.128052][ T5750] [ 197.128069][ T5750] dvb-usb: bulk message failed: -22 (5/0) [ 197.180324][ T5750] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.181061][ T5750] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 197.181120][ T5750] usb 2-1: media controller created [ 197.181949][ T5750] dvb-usb: bulk message failed: -22 (8/0) [ 197.181970][ T5750] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 197.182072][ T5750] dvb-usb: MAC address reading failed. [ 197.247556][ T5750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.353350][ T5750] DVB: Unable to find symbol stb0899_attach() [ 197.353368][ T5750] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 197.434241][ T8524] dvb-usb: bulk message failed: -22 (7/0) [ 197.434269][ T8524] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 197.466524][ T5750] rc_core: IR keymap rc-tt-1500 not found [ 197.466546][ T5750] Registered IR keymap rc-empty [ 197.524679][ T5750] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 197.529043][ T5750] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input15 [ 197.560093][ T5750] dvb-usb: schedule remote query interval to 100 msecs. [ 197.560118][ T5750] pctv452e: pctv452e_power_ctrl: 0 [ 197.560118][ T5750] [ 197.560131][ T5750] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 197.590806][ T5750] usb 2-1: USB disconnect, device number 8 [ 197.686336][ T5750] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 197.960353][ T989] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 198.007509][ T8565] binder: 8564:8565 ioctl c0306201 200000000740 returned -22 [ 198.110306][ T989] usb 3-1: Using ep0 maxpacket: 8 [ 198.111034][ T989] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 198.112033][ T989] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.112080][ T989] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 198.112108][ T989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 198.112134][ T989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 198.112159][ T989] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 198.115183][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 198.115221][ T989] usb 3-1: Product: syz [ 198.115236][ T989] usb 3-1: Manufacturer: syz [ 198.115253][ T989] usb 3-1: SerialNumber: syz [ 198.120164][ T989] usb 3-1: config 0 descriptor?? [ 198.353679][ T8575] loop0: detected capacity change from 0 to 164 [ 198.402490][ T8577] program syz.4.998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.467161][ T989] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 198.467193][ T989] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 198.623531][ T33] kauditd_printk_skb: 11 callbacks suppressed [ 198.623551][ T33] audit: type=1326 audit(1789197523.394:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.1000" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878c19e159 code=0x7ffc0000 [ 198.623861][ T33] audit: type=1326 audit(1789197523.394:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.1000" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878c19e159 code=0x7ffc0000 [ 198.688071][ T989] radio-si470x 3-1:0.0: software version 254, hardware version 105 [ 198.688099][ T989] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 198.735135][ T33] audit: type=1326 audit(1789197523.504:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.1000" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f878c19e159 code=0x7ffc0000 [ 198.735640][ T33] audit: type=1326 audit(1789197523.504:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.1000" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878c19e159 code=0x7ffc0000 [ 198.735947][ T33] audit: type=1326 audit(1789197523.504:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.1000" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878c19e159 code=0x7ffc0000 [ 198.914330][ T989] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 198.914387][ T989] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 198.914789][ T989] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 198.915137][ T989] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 198.955277][ T989] usb 3-1: USB disconnect, device number 10 [ 199.194396][ T8572] loop3: detected capacity change from 0 to 32768 [ 199.217422][ T8591] syz_tun: entered promiscuous mode [ 199.242453][ T8591] syz_tun: left promiscuous mode [ 199.256417][ T8572] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.404668][ T8572] XFS (loop3): Ending clean mount [ 199.465126][ T8608] loop0: detected capacity change from 0 to 256 [ 199.694029][ T5619] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.222227][ T8625] loop1: detected capacity change from 0 to 4096 [ 200.259476][ T8625] ntfs3(loop1): ino=3, Correct links count -> 2. [ 200.774770][ T8644] loop2: detected capacity change from 0 to 1024 [ 200.798688][ T8644] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 200.859063][ T8620] loop0: detected capacity change from 0 to 32768 [ 200.875128][ T8620] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1014 (8620) [ 200.903231][ T8620] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 200.903268][ T8620] BTRFS info (device loop0): using sha256 checksum algorithm [ 201.046964][ T8644] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.1025: lblock 2 mapped to illegal pblock 2 (length 1) [ 201.047010][ T8644] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 201.050264][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 201.050288][ C1] EXT4-fs (loop2): initial error at time 1789197525: ext4_map_blocks:790: inode 3: block 2 [ 201.050326][ C1] EXT4-fs (loop2): last error at time 1789197525: ext4_map_blocks:790: inode 3: block 2 [ 201.056790][ T8644] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 201.056939][ T8644] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.1025: lblock 0 mapped to illegal pblock 48 (length 1) [ 201.057026][ T8644] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 201.070641][ T8644] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 201.070721][ T8644] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.1025: Failed to acquire dquot type 0 [ 201.070785][ T8644] loop2: lost filesystem error report for type 5 error -117 [ 201.194645][ T8620] BTRFS info (device loop0): rebuilding free space tree [ 201.199031][ T8644] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 201.199060][ T8644] loop2: lost filesystem error report for type 5 error -117 [ 201.244985][ T8663] loop4: detected capacity change from 0 to 2048 [ 201.250118][ T8644] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.1025: mark_inode_dirty error [ 201.250152][ T8644] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 201.278727][ T8644] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 201.278922][ T8644] EXT4-fs (loop2): 1 orphan inode deleted [ 201.316007][ T1263] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 201.316050][ T1263] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 201.336207][ T1263] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 201.336256][ T1263] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:9: Failed to release dquot type 0 [ 201.336281][ T1263] loop2: lost filesystem error report for type 5 error -117 [ 201.364351][ T8644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.431295][ T8668] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.579169][ T8639] loop3: detected capacity change from 0 to 32768 [ 201.589775][ T8639] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1023 (8639) [ 201.624611][ T8639] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.624648][ T8639] BTRFS info (device loop3): using crc32c checksum algorithm [ 201.699094][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.737321][ T5623] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 201.737358][ T5623] loop2: lost filesystem error report for type 5 error -117 [ 201.756217][ T5623] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 201.756246][ T5623] loop2: lost filesystem error report for type 5 error -117 [ 201.759219][ T5623] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 201.759251][ T5623] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 201.759559][ T5623] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 201.759588][ T5623] loop2: lost filesystem error report for type 5 error -117 [ 201.884975][ T8639] BTRFS info (device loop3): enabling ssd optimizations [ 201.885008][ T8639] BTRFS info (device loop3): turning on flush-on-commit [ 201.885028][ T8639] BTRFS info (device loop3): enabling free space tree [ 201.885049][ T8639] BTRFS info (device loop3): force zlib compression, level 3 [ 201.885071][ T8639] BTRFS info (device loop3): max_inline set to 4096 [ 201.944138][ T8620] BTRFS info (device loop0): disabling free space tree [ 201.944220][ T8620] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 201.944244][ T8620] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 201.992995][ T8668] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 201.993043][ T8668] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 202.060112][ T8620] BTRFS info (device loop0): checking UUID tree [ 202.070394][ T8620] BTRFS info (device loop0): setting nodatasum [ 202.070419][ T8620] BTRFS info (device loop0): setting nodatacow [ 202.070437][ T8620] BTRFS info (device loop0): enabling ssd optimizations [ 202.070454][ T8620] BTRFS info (device loop0): using spread ssd allocation scheme [ 202.070472][ T8620] BTRFS info (device loop0): turning off barriers [ 202.070488][ T8620] BTRFS info (device loop0): turning on flush-on-commit [ 202.070505][ T8620] BTRFS info (device loop0): force clearing of disk cache [ 202.077560][ T8668] Remounting filesystem read-only [ 202.144321][ T5621] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 202.304179][ T5619] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.408030][ T8692] loop1: detected capacity change from 0 to 512 [ 202.508392][ T8692] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 202.524400][ T5620] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 202.532589][ T8692] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 202.532840][ T8692] EXT4-fs (loop1): orphan cleanup on readonly fs [ 202.612946][ T8692] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.1032: Allocating blocks 41-42 which overlap fs metadata [ 202.612986][ T8692] loop1: lost filesystem error report for type 5 error -117 [ 202.620282][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 202.620310][ C0] EXT4-fs (loop1): initial error at time 1789197527: ext4_mb_mark_diskspace_used:4223 [ 202.620337][ C0] EXT4-fs (loop1): last error at time 1789197527: ext4_mb_mark_diskspace_used:4223 [ 202.716971][ T8692] EXT4-fs (loop1): Remounting filesystem read-only [ 202.717140][ T8692] Quota error (device loop1): write_blk: dquota write failed [ 202.717232][ T8692] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 202.717375][ T8692] EXT4-fs (loop1): 1 truncate cleaned up [ 202.766030][ T8692] EXT4-fs (loop1): pa ffff8880341c50e8: logic 1, phys. 41, len 23 [ 202.795922][ T8692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.108701][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.216374][ T8707] loop4: detected capacity change from 0 to 512 [ 203.262951][ T8707] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 203.431298][ T8707] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 203.431760][ T8707] EXT4-fs (loop4): orphan cleanup on readonly fs [ 203.434437][ T8707] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 203.434475][ T8707] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 203.437387][ T8707] EXT4-fs (loop4): 1 orphan inode deleted [ 203.530666][ T5750] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 203.544968][ T8707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.687813][ T5750] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 203.709648][ T5750] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.709687][ T5750] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 203.709728][ T5750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.739157][ T8713] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1041'. [ 203.774342][ T5750] usb 2-1: config 0 descriptor?? [ 203.776724][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.846838][ T8718] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1042'. [ 204.018711][ T8709] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1039'. [ 204.020833][ T989] usb 2-1: USB disconnect, device number 9 [ 204.853260][ T8734] loop4: detected capacity change from 0 to 32768 [ 204.858171][ T8734] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1049 (8734) [ 204.886852][ T8734] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 204.886889][ T8734] BTRFS info (device loop4): using sha256 checksum algorithm [ 204.950060][ T8755] fuse: Bad value for 'group_id' [ 204.950092][ T8755] fuse: Bad value for 'group_id' [ 205.001894][ T8768] loop0: detected capacity change from 0 to 64 [ 205.042907][ T33] audit: type=1800 audit(1789197529.814:52): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1061" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 205.085265][ T8734] BTRFS info (device loop4): checking UUID tree [ 205.087410][ T8734] BTRFS info (device loop4): enabling ssd optimizations [ 205.087438][ T8734] BTRFS info (device loop4): using spread ssd allocation scheme [ 205.087456][ T8734] BTRFS info (device loop4): turning on async discard [ 205.087473][ T8734] BTRFS info (device loop4): enabling free space tree [ 205.308017][ T8777] loop1: detected capacity change from 0 to 2048 [ 205.439262][ T8781] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.566439][ T5621] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.816906][ T8787] loop2: detected capacity change from 0 to 4096 [ 205.940887][ T8795] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.998700][ T8787] NILFS (loop2): error -22 preparing GC: cannot read source blocks [ 206.059202][ T8797] loop1: detected capacity change from 0 to 512 [ 206.272092][ T8797] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 206.272125][ T8797] FAT-fs (loop1): Filesystem has been set read-only [ 206.433336][ T8803] loop0: detected capacity change from 0 to 64 [ 206.483983][ T5632] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 206.641636][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 206.641682][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 206.641706][ T5632] Bluetooth: hci2: command 0x0401 tx timeout [ 206.819038][ T8796] loop4: detected capacity change from 0 to 32768 [ 206.832824][ T8796] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1065 (8796) [ 206.865519][ T8796] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 206.865556][ T8796] BTRFS info (device loop4): using crc32c checksum algorithm [ 206.978513][ T8796] BTRFS info (device loop4): enabling ssd optimizations [ 206.978545][ T8796] BTRFS info (device loop4): turning on flush-on-commit [ 206.978563][ T8796] BTRFS info (device loop4): enabling free space tree [ 206.978580][ T8796] BTRFS info (device loop4): enabling auto defrag [ 206.978599][ T8796] BTRFS info (device loop4): use lzo compression, level 1 [ 206.978619][ T8796] BTRFS info (device loop4): max_inline set to 4096 [ 207.086803][ T33] audit: type=1800 audit(1789197531.854:53): pid=8796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1065" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 207.263139][ T5621] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.336559][ T8819] loop3: detected capacity change from 0 to 32768 [ 207.394863][ T8819] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 207.504973][ T8819] XFS (loop3): Ending clean mount [ 207.601046][ T8819] XFS (loop3): Quotacheck needed: Please wait. [ 207.928725][ T8819] XFS (loop3): Quotacheck: Done. [ 208.081869][ T5619] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 208.082660][ T8850] xt_hashlimit: size too large, truncated to 1048576 [ 208.215684][ T8811] loop1: detected capacity change from 0 to 32768 [ 208.304947][ T8811] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 208.434625][ T8811] XFS (loop1): Ending clean mount [ 208.526258][ T8811] XFS (loop1): syz.1.1079 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 208.651848][ T8867] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1089'. [ 208.695972][ T5622] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 209.100491][ T8878] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 209.137412][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 209.161753][ T8876] loop4: detected capacity change from 0 to 2048 [ 209.269826][ T8876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.342018][ T33] audit: type=1800 audit(1789197534.114:54): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1094" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 209.550136][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.562763][ T8890] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 209.644389][ T8890] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1100'. [ 209.973249][ T8901] set_capacity_and_notify: 2 callbacks suppressed [ 209.973272][ T8901] loop2: detected capacity change from 0 to 128 [ 210.016489][ T8901] FAT-fs (loop2): Directory bread(block 1048) failed [ 210.016528][ T8901] FAT-fs (loop2): Directory bread(block 1049) failed [ 210.016554][ T8901] FAT-fs (loop2): Directory bread(block 1050) failed [ 210.016579][ T8901] FAT-fs (loop2): Directory bread(block 1051) failed [ 210.016604][ T8901] FAT-fs (loop2): Directory bread(block 1052) failed [ 210.016628][ T8901] FAT-fs (loop2): Directory bread(block 1053) failed [ 210.016652][ T8901] FAT-fs (loop2): Directory bread(block 1054) failed [ 210.016676][ T8901] FAT-fs (loop2): Directory bread(block 1055) failed [ 210.182065][ T8901] syz.2.1105: attempt to access beyond end of device [ 210.182065][ T8901] loop2: rw=8390659, sector=1096, nr_sectors = 8 limit=128 [ 210.335378][ T8906] loop0: detected capacity change from 0 to 512 [ 210.359709][ T8906] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.425986][ T8906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.426098][ T8906] ext4 filesystem being mounted at /239/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.506942][ T8906] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz.0.1108: invalid size [ 210.665131][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.970479][ T5734] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 211.055973][ T8917] loop4: detected capacity change from 0 to 32768 [ 211.058965][ T8917] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1113 (8917) [ 211.086085][ T8927] loop2: detected capacity change from 0 to 1024 [ 211.106665][ T8917] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 211.106701][ T8917] BTRFS info (device loop4): using crc32c checksum algorithm [ 211.108512][ T8927] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 211.129535][ T8927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 211.161058][ T5734] usb 2-1: New USB device found, idVendor=05ac, idProduct=027f, bcdDevice= 0.00 [ 211.162100][ T5734] usb 2-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 211.162135][ T5734] usb 2-1: config 0 interface 0 altsetting 216 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 211.162163][ T5734] usb 2-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.162190][ T5734] usb 2-1: config 0 interface 0 has no altsetting 0 [ 211.162223][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.247777][ T5734] usb 2-1: config 0 descriptor?? [ 211.258220][ T8921] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.267989][ T8943] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 211.305702][ T8917] BTRFS info (device loop4): enabling ssd optimizations [ 211.305733][ T8917] BTRFS info (device loop4): turning on async discard [ 211.305751][ T8917] BTRFS info (device loop4): enabling free space tree [ 211.683352][ T8953] scsi_nl_rcv_msg: discarding partial message [ 211.683415][ T8953] scsi_nl_rcv_msg: discarding partial skb [ 211.733299][ T5734] apple 0003:05AC:027F.0012: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 211.755518][ T5734] input: HID 05ac:027f as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:027F.0012/input/input16 [ 211.804640][ T5621] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 211.835578][ T8943] EXT4-fs warning (device loop2): ext4_multi_mount_protect:327: MMP startup interrupted, failing mount [ 211.835578][ T8943] [ 211.954633][ T5734] apple 0003:05AC:027F.0012: input,hidraw0: USB HID v80.00 Joystick [HID 05ac:027f] on usb-dummy_hcd.1-1/input0 [ 211.998653][ T5734] usb 2-1: USB disconnect, device number 10 [ 212.063060][ T5623] EXT4-fs error (device loop2): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /210/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=16777218, rec_len=196620, size=1024 fake=1 [ 212.153941][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.261217][ T8958] fido_id[8958]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 212.278516][ T8945] loop3: detected capacity change from 0 to 32768 [ 212.322345][ T8945] (syz.3.1119,8945,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 212.364196][ T8945] (syz.3.1119,8945,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 212.473330][ T8945] JBD2: Ignoring recovery information on journal [ 212.662430][ T8945] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 213.094483][ T8979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1131'. [ 213.094538][ T8979] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 213.190678][ T27] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 213.341287][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 213.342103][ T27] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 213.345119][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.345153][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.345194][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.349552][ T27] usb 5-1: config 0 descriptor?? [ 213.626870][ T8986] loop2: detected capacity change from 0 to 32768 [ 213.707448][ T8986] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 213.864213][ T27] kone 0003:1E7D:2CED.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 213.907363][ T5619] ocfs2: Unmounting device (7,3) on (node local) [ 214.062618][ T5726] usb 5-1: USB disconnect, device number 12 [ 214.095796][ T5623] ocfs2: Unmounting device (7,2) on (node local) [ 214.201344][ T8999] fido_id[8999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 214.289661][ T33] audit: type=1326 audit(1789197539.054:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.2.1141" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 214.289720][ T33] audit: type=1326 audit(1789197539.054:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.2.1141" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 214.349029][ T33] audit: type=1326 audit(1789197539.114:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.2.1141" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 214.349293][ T33] audit: type=1326 audit(1789197539.114:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.2.1141" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 214.362289][ T33] audit: type=1326 audit(1789197539.134:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.2.1141" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 214.362453][ T33] audit: type=1326 audit(1789197539.134:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.2.1141" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 214.376281][ T33] audit: type=1326 audit(1789197539.144:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.2.1141" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 214.391495][ T33] audit: type=1326 audit(1789197539.134:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.2.1141" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 214.398778][ T33] audit: type=1326 audit(1789197539.154:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.2.1141" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 214.425610][ T33] audit: type=1326 audit(1789197539.154:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.2.1141" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 215.071101][ T9017] loop2: detected capacity change from 0 to 2048 [ 215.101888][ T8996] loop0: detected capacity change from 0 to 32768 [ 215.130580][ T8996] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1139 (8996) [ 215.207403][ T9021] loop4: detected capacity change from 0 to 256 [ 215.212081][ T9022] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.231767][ T8996] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 215.231804][ T8996] BTRFS info (device loop0): using sha256 checksum algorithm [ 215.310353][ T9021] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 215.415821][ T8996] BTRFS info (device loop0): enabling ssd optimizations [ 215.415853][ T8996] BTRFS info (device loop0): turning on async discard [ 215.415871][ T8996] BTRFS info (device loop0): enabling free space tree [ 215.473023][ T9038] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 215.504267][ T9038] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 215.551281][ T9039] BTRFS info (device loop0): device stats zeroed by syz.0.1139 (9039) [ 215.772708][ T5620] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 216.145395][ T9052] loop2: detected capacity change from 0 to 256 [ 216.277910][ T9013] loop3: detected capacity change from 0 to 32768 [ 216.301364][ T9013] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1138 (9013) [ 216.320030][ T9013] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 216.320069][ T9013] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 216.612862][ T9013] BTRFS info (device loop3): enabling ssd optimizations [ 216.612893][ T9013] BTRFS info (device loop3): turning on async discard [ 216.612911][ T9013] BTRFS info (device loop3): enabling free space tree [ 216.931278][ T9083] program syz.4.1163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.257640][ T5619] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 217.329420][ T9092] loop2: detected capacity change from 0 to 4096 [ 217.380587][ T9092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.756982][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.794701][ T9078] loop1: detected capacity change from 0 to 32768 [ 217.962952][ T9078] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 218.377667][ T9115] raw_sendmsg: syz.3.1175 forgot to set AF_INET. Fix it! [ 218.403952][ T5622] ocfs2: Unmounting device (7,1) on (node local) [ 218.616175][ T9087] loop0: detected capacity change from 0 to 32768 [ 218.674625][ T9087] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.701735][ T9125] loop2: detected capacity change from 0 to 4096 [ 218.809625][ T9136] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.899033][ T9087] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 219.001199][ T9087] XFS (loop0): Starting recovery (logdev: internal) [ 219.109075][ T9087] XFS (loop0): Ending recovery (logdev: internal) [ 219.385942][ T9148] overlayfs: upper fs does not support tmpfile. [ 219.414158][ T5620] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 219.727993][ T9161] netlink: 'syz.3.1192': attribute type 13 has an invalid length. [ 219.800895][ T992] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 219.880658][ T5750] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 219.951523][ T992] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 219.955842][ T992] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.955878][ T992] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.955901][ T992] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.955956][ T992] usb 3-1: config 0 interface 0 has no altsetting 0 [ 219.955990][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.958144][ T9163] loop1: detected capacity change from 0 to 1024 [ 220.031720][ T5750] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 220.035300][ T5750] usb 5-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.035362][ T5750] usb 5-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 220.035390][ T5750] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.035423][ T5750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.131923][ T5750] usb 5-1: config 0 descriptor?? [ 220.142667][ T992] usb 3-1: config 0 descriptor?? [ 220.196260][ T9165] loop0: detected capacity change from 0 to 4096 [ 220.221152][ T9165] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 220.374836][ T9169] loop3: detected capacity change from 0 to 512 [ 220.388545][ T9165] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 220.388870][ T9169] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 220.388888][ T9169] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 220.388974][ T9169] System zones: 0-1, 15-15, 18-18, 34-34 [ 220.389230][ T9169] EXT4-fs (loop3): orphan cleanup on readonly fs [ 220.431206][ T9169] __quota_error: 9 callbacks suppressed [ 220.431229][ T9169] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1792). [ 220.431356][ T9169] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 220.431387][ T9169] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 220.474218][ T9169] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.1196: bad orphan inode 16 [ 220.474253][ T9169] loop3: lost filesystem error report for type 5 error -117 [ 220.476311][ T9169] ext4_test_bit(bit=15, block=18) = 1 [ 220.476332][ T9169] is_bad_inode(inode)=0 [ 220.476341][ T9169] NEXT_ORPHAN(inode)=0 [ 220.476350][ T9169] max_ino=32 [ 220.476358][ T9169] i_nlink=2 [ 220.528275][ T9169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.569365][ T9169] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1196: bg 0: block 15: invalid block bitmap [ 220.617967][ T992] hid-multitouch 0003:0EEF:72C4.0015: unbalanced collection at end of report description [ 220.634416][ T5750] aquacomputer_d5next 0003:0C70:F011.0014: hidraw0: USB HID v80.00 Joystick [HID 0c70:f011] on usb-dummy_hcd.4-1/input0 [ 220.642680][ T992] hid-multitouch 0003:0EEF:72C4.0015: probe with driver hid-multitouch failed with error -22 [ 220.753475][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.843734][ T992] usb 3-1: USB disconnect, device number 11 [ 221.002573][ T9177] loop3: detected capacity change from 0 to 164 [ 221.004194][ T5750] usb 5-1: USB disconnect, device number 13 [ 221.686069][ T9195] netlink: 'syz.2.1207': attribute type 12 has an invalid length. [ 221.824101][ T9182] loop0: detected capacity change from 0 to 32768 [ 222.150731][ T5751] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 222.225542][ T9209] loop1: detected capacity change from 0 to 512 [ 222.288627][ T9209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.322446][ T5751] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 222.325548][ T5751] usb 4-1: config index 0 descriptor too short (expected 69, got 51) [ 222.325612][ T5751] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.325641][ T5751] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.384537][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.384571][ T5751] usb 4-1: Product: syz [ 222.384587][ T5751] usb 4-1: Manufacturer: syz [ 222.384603][ T5751] usb 4-1: SerialNumber: syz [ 222.432752][ T5734] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 222.437547][ T5751] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 222.547860][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.624166][ T9204] loop4: detected capacity change from 0 to 32768 [ 222.624922][ T5734] usb 1-1: unable to get BOS descriptor or descriptor too short [ 222.624971][ T5734] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=9a.12 [ 222.628956][ T5734] usb 1-1: config 7 has an invalid interface number: 9 but max is 0 [ 222.628983][ T5734] usb 1-1: config 7 has no interface number 0 [ 222.629015][ T5734] usb 1-1: config 7 interface 9 has no altsetting 0 [ 222.629377][ T9204] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1211 (9204) [ 222.696159][ T5751] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -90 [ 222.710102][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.710132][ T5734] usb 1-1: Product: syz [ 222.710148][ T5734] usb 1-1: Manufacturer: syz [ 222.710164][ T5734] usb 1-1: SerialNumber: syz [ 222.722837][ T9204] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 222.722933][ T9204] BTRFS info (device loop4): using blake2b checksum algorithm [ 222.920737][ T9228] loop1: detected capacity change from 0 to 256 [ 222.997762][ T9204] BTRFS info (device loop4): enabling ssd optimizations [ 222.997790][ T9204] BTRFS info (device loop4): turning on async discard [ 222.997807][ T9204] BTRFS info (device loop4): enabling free space tree [ 222.997826][ T9204] BTRFS info (device loop4): use zstd compression, level 3 [ 223.048240][ T5734] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 223.048293][ T5734] dvb-usb: bulk message failed: -22 (2/0) [ 223.048311][ T5734] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.077567][ T5734] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 223.077627][ T5734] usb 1-1: media controller created [ 223.106264][ T5751] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 223.130361][ T5734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.136770][ T5751] usb 4-1: USB disconnect, device number 8 [ 223.208621][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 223.208703][ T5734] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 223.229460][ T5734] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 223.268198][ T5734] dvb-usb: schedule remote query interval to 50 msecs. [ 223.268228][ T5734] dvb-usb: bulk message failed: -22 (2/0) [ 223.268244][ T5734] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 223.304628][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.306415][ T5734] usb 1-1: USB disconnect, device number 11 [ 223.385661][ T5734] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 223.456683][ T5621] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 224.007599][ T9245] loop3: detected capacity change from 0 to 64 [ 224.151275][ T9233] loop2: detected capacity change from 0 to 32768 [ 224.255299][ T9233] JBD2: Ignoring recovery information on journal [ 224.370699][ T9233] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 224.392783][ T203] (kworker/u8:6,203,1):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 224.611374][ T9233] (syz.2.1217,9233,1):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 224.611420][ T9233] (syz.2.1217,9233,1):ocfs2_prepare_dir_for_insert:4453 ERROR: status = -2 [ 224.611445][ T9233] (syz.2.1217,9233,1):__ocfs2_prepare_orphan_dir:2187 ERROR: status = -2 [ 224.611467][ T9233] (syz.2.1217,9233,1):ocfs2_prepare_orphan_dir:2231 ERROR: status = -2 [ 224.611492][ T9233] (syz.2.1217,9233,1):ocfs2_prepare_orphan_dir:2247 ERROR: status = -2 [ 224.611514][ T9233] (syz.2.1217,9233,1):ocfs2_unlink:972 ERROR: status = -2 [ 224.881166][ T5623] ocfs2: Unmounting device (7,2) on (node local) [ 224.992117][ T9257] loop4: detected capacity change from 0 to 512 [ 225.070967][ T9257] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1226: bg 0: block 5: invalid block bitmap [ 225.071007][ T9257] loop4: lost filesystem error report for type 5 error -117 [ 225.080376][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 225.080406][ C1] EXT4-fs (loop4): initial error at time 1789197549: ext4_validate_block_bitmap:436 [ 225.080432][ C1] EXT4-fs (loop4): last error at time 1789197549: ext4_validate_block_bitmap:436 [ 225.149885][ T9257] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 225.149918][ T9257] loop4: lost filesystem error report for type 5 error -117 [ 225.192821][ T9257] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1226: invalid indirect mapped block 3 (level 2) [ 225.192873][ T9257] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 225.198575][ T9257] EXT4-fs (loop4): 1 orphan inode deleted [ 225.198602][ T9257] EXT4-fs (loop4): 1 truncate cleaned up [ 225.248273][ T9257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.338823][ T9257] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 225.376656][ T33] audit: type=1326 audit(1789197550.144:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.3.1227" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0559e159 code=0x7ffc0000 [ 225.376713][ T33] audit: type=1326 audit(1789197550.144:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.3.1227" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0559e159 code=0x7ffc0000 [ 225.384858][ T9246] loop0: detected capacity change from 0 to 32768 [ 225.410734][ T33] audit: type=1326 audit(1789197550.164:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.3.1227" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0559e159 code=0x7ffc0000 [ 225.410890][ T33] audit: type=1326 audit(1789197550.174:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.3.1227" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0559e159 code=0x7ffc0000 [ 225.435378][ T33] audit: type=1326 audit(1789197550.204:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.3.1227" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6d0559e159 code=0x7ffc0000 [ 225.435518][ T33] audit: type=1326 audit(1789197550.204:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.3.1227" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0559e159 code=0x7ffc0000 [ 225.469841][ T33] audit: type=1326 audit(1789197550.234:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.3.1227" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0559e159 code=0x7ffc0000 [ 225.492932][ T33] audit: type=1326 audit(1789197550.264:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.3.1227" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0559e159 code=0x7ffc0000 [ 225.493163][ T33] audit: type=1326 audit(1789197550.264:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.3.1227" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0559e159 code=0x7ffc0000 [ 225.505320][ T33] audit: type=1326 audit(1789197550.274:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.3.1227" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f6d0559e159 code=0x7ffc0000 [ 225.505496][ T33] audit: type=1326 audit(1789197550.274:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.3.1227" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0559e159 code=0x7ffc0000 [ 225.505612][ T33] audit: type=1326 audit(1789197550.274:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.3.1227" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0559e159 code=0x7ffc0000 [ 225.530640][ T33] audit: type=1326 audit(1789197550.294:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.3.1227" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6d0559e159 code=0x7ffc0000 [ 225.549511][ T33] audit: type=1326 audit(1789197550.314:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.3.1227" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6d0559e159 code=0x7ffc0000 [ 225.808131][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.085131][ T9270] gretap0: entered promiscuous mode [ 226.402786][ T9276] block nbd0: server does not support multiple connections per device. [ 226.403470][ T9276] block nbd0: shutting down sockets [ 226.521203][ T9279] loop2: detected capacity change from 0 to 1024 [ 226.733832][ T9285] sd 0:0:1:0: PR command failed: 1026 [ 226.733897][ T9285] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 226.733941][ T9285] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 226.901864][ T9289] tipc: Resetting bearer [ 226.947198][ T9287] loop2: detected capacity change from 0 to 512 [ 227.033832][ T9287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.033942][ T9287] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.087005][ T9287] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.1238: corrupted inode contents [ 227.106504][ T9287] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #2: comm syz.2.1238: mark_inode_dirty error [ 227.108042][ T9287] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.1238: corrupted inode contents [ 227.162501][ T9287] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.1238: corrupted inode contents [ 227.170179][ T9287] EXT4-fs error (device loop2): ext4_setattr:6073: inode #2: comm syz.2.1238: mark_inode_dirty error [ 227.366868][ T9277] loop1: detected capacity change from 0 to 32768 [ 227.384591][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.410342][ T5726] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 227.492137][ T9277] JBD2: Ignoring recovery information on journal [ 227.566053][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 227.582368][ T5726] usb 1-1: Using ep0 maxpacket: 16 [ 227.603486][ T5726] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 227.605186][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 227.632378][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.632410][ T5726] usb 1-1: Product: syz [ 227.632426][ T5726] usb 1-1: Manufacturer: syz [ 227.632443][ T5726] usb 1-1: SerialNumber: syz [ 227.671298][ T5726] usb 1-1: config 0 descriptor?? [ 227.679666][ T5726] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 227.679711][ T5726] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 227.697882][ T9277] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 227.971004][ T5734] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 228.144640][ T5734] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 228.146186][ T5734] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 228.146215][ T5734] usb 3-1: config 0 has no interface number 0 [ 228.146257][ T5734] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.146284][ T5734] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 224, changing to 11 [ 228.146313][ T5734] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 32776, setting to 1024 [ 228.146360][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.223960][ T5734] usb 3-1: config 0 descriptor?? [ 228.251456][ T5734] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input18 [ 228.342573][ T5622] ocfs2: Unmounting device (7,1) on (node local) [ 228.364059][ T5726] em28xx 1-1:0.0: chip ID is em2765 [ 228.449345][ T5734] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 228.464076][ C0] usbtouchscreen 3-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 228.490871][ T5734] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 228.562215][ T992] usb 3-1: USB disconnect, device number 12 [ 228.772343][ T5726] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 228.772379][ T5726] em28xx 1-1:0.0: board has no eeprom [ 228.883671][ T5726] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 228.883720][ T5726] em28xx 1-1:0.0: dvb set to bulk mode. [ 228.917027][ T5726] usb 1-1: USB disconnect, device number 12 [ 228.939036][ T5726] em28xx 1-1:0.0: Disconnecting em28xx [ 228.952956][ T5734] em28xx 1-1:0.0: Binding DVB extension [ 229.028558][ T5734] em28xx 1-1:0.0: Registering input extension [ 229.043014][ T5726] em28xx 1-1:0.0: Closing input extension [ 229.265631][ T9338] loop1: detected capacity change from 0 to 1024 [ 229.266545][ T9338] EXT4-fs: Ignoring removed nobh option [ 229.268534][ T9338] EXT4-fs: Ignoring removed bh option [ 229.291326][ T9338] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 229.296783][ T5726] em28xx: Freeing device [ 229.327856][ T9338] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 229.328003][ T9338] System zones: 0-1, 3-12 [ 229.363247][ T9338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.580413][ T9338] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 229.768866][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.188641][ T9360] bond0: entered promiscuous mode [ 230.188667][ T9360] bond_slave_0: entered promiscuous mode [ 230.188908][ T9360] bond_slave_1: entered promiscuous mode [ 230.268287][ T9360] batadv_slave_0: entered promiscuous mode [ 230.269779][ T9360] batadv_slave_0: left promiscuous mode [ 230.300353][ T9360] bond0: left promiscuous mode [ 230.300380][ T9360] bond_slave_0: left promiscuous mode [ 230.300614][ T9360] bond_slave_1: left promiscuous mode [ 230.406549][ T9365] loop3: detected capacity change from 0 to 8 [ 230.469374][ T9365] SQUASHFS error: zlib decompression failed, data probably corrupt [ 230.469418][ T9365] SQUASHFS error: Failed to read block 0x9b: -5 [ 230.469436][ T9365] SQUASHFS error: Unable to read metadata cache entry [99] [ 230.469451][ T9365] SQUASHFS error: Unable to read inode 0x127 [ 230.738950][ T9372] loop3: detected capacity change from 0 to 128 [ 231.227837][ T9390] loop4: detected capacity change from 0 to 64 [ 231.294122][ T9389] loop0: detected capacity change from 0 to 4096 [ 231.323436][ T9392] loop1: detected capacity change from 0 to 2048 [ 231.344519][ T9392] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.388351][ T9389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.634001][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.201551][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 232.350850][ T9422] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1288'. [ 232.352633][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 232.355268][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 232.360572][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.360686][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.360825][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.420931][ T9] usb 5-1: config 0 descriptor?? [ 232.436588][ T9] hub 5-1:0.0: USB hub found [ 232.667654][ T9] hub 5-1:0.0: 1 port detected [ 232.778230][ T9430] loop3: detected capacity change from 0 to 256 [ 232.784974][ T9408] loop0: detected capacity change from 0 to 32768 [ 232.792825][ T9430] exfat: Deprecated parameter 'utf8' [ 232.802553][ T9430] exfat: Deprecated parameter 'namecase' [ 232.945325][ T9430] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 232.946530][ T9408] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 233.219188][ T33] audit: type=1800 audit(1789197557.984:88): pid=9408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1283" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 233.409097][ T9] usb 5-1: USB disconnect, device number 14 [ 233.448779][ T1100] usb 5-1: Failed to suspend device, error -19 [ 233.782486][ T5620] ocfs2: Unmounting device (7,0) on (node local) [ 233.849819][ T9461] loop4: detected capacity change from 0 to 64 [ 233.898239][ T9463] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 233.965837][ T9463] rtrs_client L2106: : Failed to resolve address, err: -ENODEV [ 233.966703][ T9463] rtrs_client L2651: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 235.347773][ T9500] program syz.2.1311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.267806][ T9516] loop0: detected capacity change from 0 to 512 [ 236.304266][ T9516] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 236.308267][ T9516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 236.312617][ T9516] EXT4-fs (loop0): orphan cleanup on readonly fs [ 236.312671][ T9516] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.1319: bad orphan inode 3 [ 236.312734][ T9516] loop0: lost filesystem error report for type 5 error -117 [ 236.325042][ T9516] EXT4-fs (loop0): Remounting filesystem read-only [ 236.337578][ T9516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 236.349834][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 236.416989][ T9516] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.1319: dx entry: limit 0 != root limit 125 [ 236.417048][ T9516] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1319: Corrupt directory, running e2fsck is recommended [ 236.631686][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 236.634456][ T9520] vlan3: entered allmulticast mode [ 236.634480][ T9520] macsec0: entered allmulticast mode [ 236.634496][ T9520] veth1_macvtap: entered allmulticast mode [ 236.721217][ T9520] batman_adv: batadv0: Adding interface: vlan3 [ 236.721239][ T9520] batman_adv: batadv0: The MTU of interface vlan3 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.721270][ T9520] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 236.870378][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 236.873440][ T5633] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 237.059445][ T9509] loop1: detected capacity change from 0 to 32768 [ 237.070339][ T9509] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1315 (9509) [ 237.125010][ T9509] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.125048][ T9509] BTRFS info (device loop1): using sha256 checksum algorithm [ 237.182613][ T9531] loop4: detected capacity change from 0 to 1024 [ 237.183892][ T9531] EXT4-fs: Ignoring removed orlov option [ 237.347869][ T9531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.407087][ T9509] BTRFS info (device loop1): enabling ssd optimizations [ 237.475136][ T9509] BTRFS info (device loop1): disabling tree log [ 237.475162][ T9509] BTRFS info (device loop1): turning on async discard [ 237.475181][ T9509] BTRFS info (device loop1): enabling free space tree [ 237.702168][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.849554][ T5622] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.954784][ T9555] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1326'. [ 238.951962][ T9579] loop1: detected capacity change from 0 to 1024 [ 238.958487][ T9579] EXT4-fs: Ignoring removed i_version option [ 239.032767][ T9579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.215837][ T33] audit: type=1326 audit(1789197563.984:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.2.1342" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 239.215886][ T33] audit: type=1326 audit(1789197563.984:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.2.1342" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 239.222157][ T33] audit: type=1326 audit(1789197563.994:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.2.1342" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 239.222231][ T33] audit: type=1326 audit(1789197563.994:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.2.1342" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 239.223443][ T33] audit: type=1326 audit(1789197563.994:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.2.1342" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 239.223581][ T33] audit: type=1326 audit(1789197563.994:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.2.1342" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 239.223962][ T33] audit: type=1326 audit(1789197563.994:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.2.1342" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 239.225421][ T33] audit: type=1326 audit(1789197563.994:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.2.1342" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 239.245113][ T33] audit: type=1326 audit(1789197563.994:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.2.1342" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 239.245285][ T33] audit: type=1326 audit(1789197563.994:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.2.1342" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16db19e159 code=0x7ffc0000 [ 239.693218][ T9589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.938483][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.258789][ T9596] PID 9596 killed due to inadequate hugepage pool [ 241.186089][ T9639] loop1: detected capacity change from 0 to 512 [ 241.202939][ T9640] loop4: detected capacity change from 0 to 512 [ 241.203935][ T9639] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 241.222149][ T9640] EXT4-fs: Ignoring removed bh option [ 241.313415][ T9640] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 241.315805][ T9639] EXT4-fs (loop1): 1 truncate cleaned up [ 241.323305][ T9640] EXT4-fs (loop4): 1 truncate cleaned up [ 241.342774][ T9640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.357084][ T9639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.463875][ T9639] EXT4-fs error (device loop1): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.1.1365: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 241.568562][ T9639] EXT4-fs (loop1): Remounting filesystem read-only [ 241.629131][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.733479][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.183899][ T9636] loop2: detected capacity change from 0 to 32768 [ 242.224014][ T9636] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 242.224022][ T9658] loop3: detected capacity change from 0 to 1024 [ 242.258617][ T9661] mmap: syz.4.1373 (9661) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 242.294140][ T9658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 242.294235][ T9658] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.477560][ T9636] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 242.481069][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 242.585663][ T9636] XFS (loop2): Starting recovery (logdev: internal) [ 242.701909][ T9636] XFS (loop2): Ending recovery (logdev: internal) [ 242.828942][ T9636] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x2f6/0x4f0, xfs_bnobt block 0x8 [ 242.828995][ T9636] XFS (loop2): Unmount and run xfs_repair [ 243.007587][ T5623] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 243.008266][ T5623] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 243.174943][ T9689] loop4: detected capacity change from 0 to 256 [ 243.176104][ T9689] exfat: Deprecated parameter 'utf8' [ 243.176127][ T9689] exfat: Deprecated parameter 'utf8' [ 243.176201][ T9689] exfat: Deprecated parameter 'utf8' [ 243.268804][ T9689] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 243.622556][ T9695] ima: policy update failed [ 243.827419][ T9701] program syz.4.1387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.970302][ T992] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 244.121127][ T992] usb 1-1: Using ep0 maxpacket: 16 [ 244.123374][ T992] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 244.131198][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.131227][ T992] usb 1-1: Product: syz [ 244.131243][ T992] usb 1-1: Manufacturer: syz [ 244.131258][ T992] usb 1-1: SerialNumber: syz [ 244.396451][ T992] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 244.415364][ T992] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 244.425006][ T992] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 244.425163][ T992] usb 1-1: media controller created [ 244.517178][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.677841][ T992] zl10353_read_register: readreg error (reg=127, ret==-71) [ 244.856829][ T992] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 244.906273][ T992] usb 1-1: USB disconnect, device number 13 [ 245.009694][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 245.009721][ T9727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1398'. [ 245.191991][ T9729] loop3: detected capacity change from 0 to 8 [ 245.276476][ T33] kauditd_printk_skb: 12 callbacks suppressed [ 245.276498][ T33] audit: type=1400 audit(1789197570.044:111): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=9730 comm="syz.4.1401" name="p" offset=79 [ 245.689567][ T9746] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5621] was attempted by ""[9746] [ 245.742950][ T9747] loop0: detected capacity change from 0 to 512 [ 245.776675][ T9747] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 245.834178][ T9747] EXT4-fs (loop0): 1 truncate cleaned up [ 245.843217][ T9747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.941705][ T9747] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 217 vs 220 free clusters [ 246.348648][ T9756] loop1: detected capacity change from 0 to 512 [ 246.381951][ T9756] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 246.382084][ T9756] System zones: 1-12 [ 246.423698][ T9756] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.1410: missing EA_INODE flag [ 246.423736][ T9756] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.430269][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 246.430346][ C0] EXT4-fs (loop1): initial error at time 1789197571: ext4_xattr_inode_iget:437: inode 12 [ 246.430452][ C0] EXT4-fs (loop1): last error at time 1789197571: ext4_xattr_inode_iget:437: inode 12 [ 246.508389][ T9756] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1410: error while reading EA inode 12 err=-117 [ 246.508431][ T9756] loop1: lost filesystem error report for type 5 error -117 [ 246.511027][ T9756] EXT4-fs (loop1): 1 orphan inode deleted [ 246.537546][ T9756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.622082][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.645540][ T9756] fscrypt (loop1, inode 15): Reserved bits set in encryption policy [ 246.775052][ T9760] loop0: detected capacity change from 0 to 8 [ 246.793256][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.832050][ T9760] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 246.832115][ T9760] unable to read xattr id index table [ 248.164227][ T9794] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1426'. [ 248.164255][ T9794] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1426'. [ 248.402109][ T9792] loop0: detected capacity change from 0 to 4096 [ 248.476711][ T9782] loop2: detected capacity change from 0 to 32768 [ 248.543947][ T9792] ntfs3(loop0): Failed to load $Extend (-22). [ 248.549001][ T9792] ntfs3(loop0): Failed to initialize $Extend. [ 248.753380][ T9805] loop3: detected capacity change from 0 to 256 [ 248.774287][ T9792] ntfs3(loop0): ino=5, "/" mi_enum_attr [ 248.774329][ T9792] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 248.874773][ T9805] exfat: Deprecated parameter 'utf8' [ 248.874800][ T9805] exfat: Deprecated parameter 'utf8' [ 248.874877][ T9805] exfat: Deprecated parameter 'utf8' [ 248.970416][ T9792] ntfs3(loop0): ino=5, "/" mi_enum_attr [ 248.970579][ T9792] ntfs3(loop0): ino=5, "/" mi_enum_attr [ 248.970608][ T9792] ntfs3(loop0): ino=5, "/" mi_enum_attr [ 248.970632][ T9792] ntfs3(loop0): ino=5, "/" mi_enum_attr [ 248.970654][ T9792] ntfs3(loop0): ino=5, "/" attr_set_size_ex [ 249.053801][ T9805] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 249.956009][ T9829] loop1: detected capacity change from 0 to 16 [ 250.010844][ T9826] bridge0: port 2(bridge_slave_1) entered listening state [ 250.027174][ T9829] erofs (device loop1): mounted with root inode @ nid 36. [ 250.045133][ T9826] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.075966][ T989] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 250.224510][ T5633] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 250.240000][ T989] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 250.255666][ T989] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 250.255697][ T989] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 250.255721][ T989] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.308508][ T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 250.308541][ T989] usb 4-1: Product: syz [ 250.308559][ T989] usb 4-1: Manufacturer: syz [ 250.308574][ T989] usb 4-1: SerialNumber: syz [ 250.476672][ T9829] erofs (device loop1): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 250.476843][ T9829] erofs (device loop1): read error -117 @ 1 of nid 89 [ 250.498558][ T33] audit: type=1800 audit(1789197575.244:112): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1440" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 250.736411][ T989] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 250.843440][ T5734] usb 4-1: USB disconnect, device number 9 [ 250.894568][ T5734] usblp0: removed [ 250.984590][ T9845] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1445'. [ 251.338020][ T33] audit: type=1400 audit(1789197576.104:113): apparmor="STATUS" operation="profile_load" info="failed to create" error=-2 profile="unconfined" name="//o" pid=9852 comm="syz.1.1450" [ 251.763243][ T9863] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1456'. [ 251.849010][ T9869] loop3: detected capacity change from 0 to 256 [ 251.936177][ T9869] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 251.952427][ T9866] loop1: detected capacity change from 0 to 4096 [ 251.984522][ T9866] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 252.035464][ T9866] EXT4-fs (loop1): Test dummy encryption mode enabled [ 252.035492][ T9866] EXT4-fs (loop1): bad geometry: block count 262656 exceeds size of device (512 blocks) [ 252.380962][ T5726] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 252.533327][ T5726] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 252.534448][ T5726] usb 3-1: config index 0 descriptor too short (expected 45, got 28) [ 252.534476][ T5726] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 252.534521][ T5726] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 252.587105][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.587146][ T5726] usb 3-1: Product: syz [ 252.587162][ T5726] usb 3-1: Manufacturer: syz [ 252.587178][ T5726] usb 3-1: SerialNumber: syz [ 252.638852][ T5726] rtl8150 3-1:1.0: couldn't find required endpoints [ 252.639106][ T5726] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 252.671953][ T9888] program syz.1.1465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.762262][ T9892] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1468'. [ 252.762336][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 252.795062][ T9889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1467'. [ 252.963621][ T9] usb 3-1: USB disconnect, device number 13 [ 253.160068][ T9901] i2c i2c-0: delete_device: Can't find device in list [ 254.052836][ T9925] loop1: detected capacity change from 0 to 1024 [ 254.115763][ T9927] loop3: detected capacity change from 0 to 128 [ 254.131051][ T9927] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 254.173938][ T9927] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 254.204284][ T9925] fuse: Bad value for 'fd' [ 254.523235][ T1263] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 254.673301][ T9934] netlink: 'syz.4.1488': attribute type 12 has an invalid length. [ 254.673326][ T9934] netlink: 'syz.4.1488': attribute type 29 has an invalid length. [ 254.673341][ T9934] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1488'. [ 254.673374][ T9934] netlink: 'syz.4.1488': attribute type 1 has an invalid length. [ 254.673388][ T9934] netlink: 'syz.4.1488': attribute type 2 has an invalid length. [ 255.477364][ T9920] loop2: detected capacity change from 0 to 65536 [ 255.532337][ T9920] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 255.651583][ T9920] XFS (loop2): Ending clean mount [ 255.753963][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.754036][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.779179][ T9920] XFS (loop2): Quotacheck needed: Please wait. [ 255.915255][ T9968] nbd0: detected capacity change from 0 to 127 [ 255.920505][ T5633] block nbd0: Receive control failed (result -32) [ 255.944241][ T1179] block nbd0: Dead connection, failed to find a fallback [ 255.945106][ T1179] block nbd0: shutting down sockets [ 255.945229][ T1179] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 255.945334][ T1179] Buffer I/O error on dev nbd0, logical block 0, async page read [ 255.948048][ T1179] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 255.948078][ T1179] Buffer I/O error on dev nbd0, logical block 1, async page read [ 255.948227][ T1179] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 255.948255][ T1179] Buffer I/O error on dev nbd0, logical block 2, async page read [ 255.948413][ T1179] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 255.949183][ T1179] Buffer I/O error on dev nbd0, logical block 3, async page read [ 255.998296][ T1711] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 255.998401][ T1711] Buffer I/O error on dev nbd0, logical block 0, async page read [ 255.998454][ T1711] Buffer I/O error on dev nbd0, logical block 1, async page read [ 255.998497][ T1711] Buffer I/O error on dev nbd0, logical block 2, async page read [ 255.998550][ T1711] Buffer I/O error on dev nbd0, logical block 3, async page read [ 255.999100][ T1711] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 255.999160][ T1711] Buffer I/O error on dev nbd0, logical block 0, async page read [ 255.999201][ T1711] Buffer I/O error on dev nbd0, logical block 1, async page read [ 256.006617][ T1711] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 256.079805][ T1711] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 256.084375][ T1711] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 256.085819][ T1711] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.132965][ T5640] ldm_validate_partition_table(): Disk read failed. [ 256.155826][ T9966] macvlan0: entered promiscuous mode [ 256.156685][ T9966] netlink: 'syz.0.1499': attribute type 1 has an invalid length. [ 256.156721][ T9966] netlink: 'syz.0.1499': attribute type 2 has an invalid length. [ 256.172627][ T5640] Dev nbd0: unable to read RDB block 0 [ 256.193219][ T5640] nbd0: unable to read partition table [ 256.272412][ T9920] XFS (loop2): Quotacheck: Done. [ 256.292668][ T5640] ldm_validate_partition_table(): Disk read failed. [ 256.296621][ T5640] Dev nbd0: unable to read RDB block 0 [ 256.302505][ T5640] nbd0: unable to read partition table [ 256.453411][ T9920] XFS (loop2): EXPERIMENTAL online shrink feature enabled. Use at your own risk! [ 256.722824][ T5623] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 257.539458][T10002] loop4: detected capacity change from 0 to 128 [ 257.570132][T10002] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 258.297136][T10013] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1518'. [ 258.344597][T10012] kvm [10011]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 258.566499][T10016] xt_hashlimit: size too large, truncated to 1048576 [ 259.280387][ T5734] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 259.474144][ T5734] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 259.478256][ T5734] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 259.478287][ T5734] usb 3-1: config 1 has no interface number 0 [ 259.493619][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.493648][ T5734] usb 3-1: Product: syz [ 259.493665][ T5734] usb 3-1: Manufacturer: syz [ 259.493681][ T5734] usb 3-1: SerialNumber: syz [ 259.545203][ T5734] usb 3-1: 3:1 : does not exist [ 259.545229][ T5734] usb 3-1: 3:2 : does not exist [ 259.597600][T10017] loop1: detected capacity change from 0 to 40427 [ 259.625172][T10017] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 259.647852][T10017] F2FS-fs (loop1): invalid crc value [ 259.774423][ T5734] usb 3-1: USB disconnect, device number 14 [ 260.162169][T10037] loop3: detected capacity change from 0 to 2048 [ 260.181406][T10017] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 260.238101][T10037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-00ff07000000 r/w without journal. Quota mode: none. [ 260.238204][T10037] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.292486][T10042] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 260.331603][T10017] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 260.365118][T10037] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 260.365155][T10037] EXT4-fs (loop3): This should not happen!! Data will be lost [ 260.365155][T10037] [ 260.365172][T10037] EXT4-fs (loop3): Total free blocks count 0 [ 260.365187][T10037] EXT4-fs (loop3): Free/Dirty block details [ 260.365226][T10037] EXT4-fs (loop3): free_blocks=0 [ 260.365260][T10037] EXT4-fs (loop3): dirty_blocks=112 [ 260.365276][T10037] EXT4-fs (loop3): Block reservation details [ 260.365289][T10037] EXT4-fs (loop3): i_reserved_data_blocks=7 [ 260.480316][T10017] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 260.669555][ T1263] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 260.755767][ T5619] EXT4-fs warning (device loop3): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 260.793716][T10055] loop2: detected capacity change from 0 to 128 [ 260.809388][T10055] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 260.809440][T10055] hpfs: filesystem error: improperly stopped [ 260.809458][T10055] hpfs: You really don't want any checks? You are crazy... [ 260.809797][T10055] hpfs: hpfs_map_sector(): read error [ 260.809821][T10055] hpfs: code page support is disabled [ 260.810133][T10055] hpfs: hpfs_map_4sectors(): unaligned read [ 260.852546][T10055] hpfs: hpfs_map_4sectors(): unaligned read [ 260.852564][T10055] hpfs: filesystem error: unable to find root dir [ 261.909038][T10059] loop0: detected capacity change from 0 to 32768 [ 262.002597][T10059] JBD2: Ignoring recovery information on journal [ 262.038762][T10079] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1546'. [ 262.150874][T10059] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 262.284599][T10085] block nbd2: shutting down sockets [ 262.299397][T10080] loop3: detected capacity change from 0 to 4096 [ 262.408613][T10090] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.524042][T10092] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 256 already freed [ 262.548461][T10092] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 262.713137][ T5620] ocfs2: Unmounting device (7,0) on (node local) [ 262.882505][T10101] xt_socket: unknown flags 0x4 [ 263.301578][T10107] program syz.1.1556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.039688][T10127] loop0: detected capacity change from 0 to 16 [ 264.069973][T10127] erofs (device loop0): mounted with root inode @ nid 36. [ 264.157986][T10127] erofs (device loop0): invalid fast symlink size 39 @ nid 83 [ 264.501140][ T5726] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 264.663050][ T5726] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 264.663099][ T5726] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 264.723306][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.723340][ T5726] usb 3-1: Product: syz [ 264.723356][ T5726] usb 3-1: Manufacturer: syz [ 264.723372][ T5726] usb 3-1: SerialNumber: syz [ 265.013775][ T5726] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 265.013852][ T5726] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 265.013876][ T5726] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 265.072243][ T5726] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 265.099828][ T5726] usb 3-1: USB disconnect, device number 15 [ 265.132308][ T5921] udevd[5921]: setting mode of /dev/bus/usb/003/015 to 020664 failed: No such file or directory [ 265.132446][ T5921] udevd[5921]: setting owner of /dev/bus/usb/003/015 to uid=0, gid=0 failed: No such file or directory [ 265.335485][T10133] loop1: detected capacity change from 0 to 32768 [ 265.357672][T10133] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1567 (10133) [ 265.388706][T10133] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 265.388742][T10133] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 265.679735][T10148] input: syz0 as /devices/virtual/input/input20 [ 265.738186][T10133] BTRFS info (device loop1): enabling ssd optimizations [ 265.738218][T10133] BTRFS info (device loop1): turning on async discard [ 265.738236][T10133] BTRFS info (device loop1): enabling free space tree [ 266.535073][T10173] loop4: detected capacity change from 0 to 16 [ 266.550166][T10173] erofs (device loop4): mounted with root inode @ nid 36. [ 266.581408][ T5633] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 266.605701][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 266.605853][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 266.608227][ T33] audit: type=1800 audit(1789197591.374:114): pid=10173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1578" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 266.855422][T10177] netlink: 'syz.3.1580': attribute type 1 has an invalid length. [ 266.902142][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 266.924019][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 266.924947][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 266.925080][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 266.925802][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 266.925914][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 266.929637][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 266.929754][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 266.932324][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 266.977193][T10179] netlink: 'syz.0.1581': attribute type 32 has an invalid length. [ 266.977221][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 267.030011][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.037074][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.054763][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.096754][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.096910][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.112312][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.112457][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.147179][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.147315][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.151905][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.152024][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.157647][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.157937][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.221366][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.221494][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.226899][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.227022][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.235731][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.236043][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.265759][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.266084][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.315187][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.315335][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.327710][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.328065][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.358903][T10179] bond1: option coupled_control: invalid value (6) [ 267.389470][T10179] bond1 (unregistering): Released all slaves [ 267.400502][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.400624][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.404494][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.404604][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.405158][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.405268][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.405858][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.405966][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.406499][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.408994][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.435896][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.436232][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 267.531055][T10173] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 267.531163][T10173] erofs (device loop4): read error -117 @ 1 of nid 89 [ 268.020073][ T5622] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 268.157194][T10190] loop3: detected capacity change from 0 to 4096 [ 268.882702][T10207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1591'. [ 268.988271][T10207] bond0: entered promiscuous mode [ 268.988297][T10207] bond_slave_0: entered promiscuous mode [ 268.988517][T10207] bond_slave_1: entered promiscuous mode [ 268.989208][T10207] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 269.083859][T10211] loop1: detected capacity change from 0 to 512 [ 269.097722][T10211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.118801][T10211] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 269.170380][T10211] EXT4-fs (loop1): 1 truncate cleaned up [ 269.193047][T10211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.316612][T10207] bond0: left promiscuous mode [ 269.316641][T10207] bond_slave_0: left promiscuous mode [ 269.316881][T10207] bond_slave_1: left promiscuous mode [ 269.317122][T10207] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 269.508618][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.785004][T10223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1597'. [ 269.859582][ T33] audit: type=1326 audit(1789197594.624:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.3.1598" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d0559e159 code=0x0 [ 270.200673][ T5726] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 270.351581][ T5726] usb 5-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 270.352136][ T5726] usb 5-1: config 0 has no interfaces? [ 270.352199][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.358694][ T5726] usb 5-1: config 0 descriptor?? [ 270.586279][ T9] usb 5-1: USB disconnect, device number 15 [ 270.819402][T10238] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 270.927812][T10240] loop3: detected capacity change from 0 to 512 [ 271.635743][T10260] loop3: detected capacity change from 0 to 128 [ 271.673158][T10260] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 271.776551][T10260] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 271.776581][T10260] FAT-fs (loop3): Filesystem has been set read-only [ 271.931202][T10258] loop2: detected capacity change from 0 to 8192 [ 272.123171][ T33] audit: type=1400 audit(1789197596.894:116): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=10267 comm="syz.3.1613" name="p" offset=79 [ 272.151427][ T32] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 272.305479][ T32] usb 5-1: not running at top speed; connect to a high speed hub [ 272.305520][ T32] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 272.307836][ T32] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.307902][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.368368][ T32] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 272.430022][T10275] loop3: detected capacity change from 0 to 128 [ 272.486945][T10277] loop0: detected capacity change from 0 to 128 [ 272.490127][T10275] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 272.517017][T10275] ext4 filesystem being mounted at /321/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 272.554755][T10277] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 272.597883][T10277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.641197][ T33] audit: type=1800 audit(1789197597.404:117): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1617" name="bus" dev="loop0" ino=125 res=0 errno=0 [ 272.790947][ T5619] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 272.812554][ T32] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 272.813675][ T32] uvcvideo 5-1:1.1: No frame descriptor found for the default format. [ 272.813696][ T32] uvcvideo 5-1:1.1: Failed to initialize the device (-22). [ 272.816311][ T32] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -22 [ 273.039534][ T32] usb 5-1: USB disconnect, device number 16 [ 273.168271][T10289] bond0: no command found in slaves file - use +ifname or -ifname [ 273.205427][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'. [ 273.205464][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 273.369629][T10291] gretap0: entered promiscuous mode [ 273.369810][T10291] macvlan2: entered allmulticast mode [ 273.369827][T10291] gretap0: entered allmulticast mode [ 273.674651][T10295] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 273.912965][T10309] loop0: detected capacity change from 0 to 256 [ 273.983338][T10309] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 273.983369][T10309] FAT-fs (loop0): Filesystem has been set read-only [ 274.187131][T10313] loop2: detected capacity change from 0 to 512 [ 274.188195][T10313] EXT4-fs: Ignoring removed nobh option [ 274.262394][T10313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.262500][T10313] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.313761][T10305] loop4: detected capacity change from 0 to 32768 [ 274.347663][T10305] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 274.365919][T10305] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 274.391725][T10313] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.1633: corrupted inode contents [ 274.417512][T10313] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #2: comm syz.2.1633: mark_inode_dirty error [ 274.438652][T10313] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.1633: corrupted inode contents [ 274.449438][T10313] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.1633: mark_inode_dirty error [ 274.486669][T10305] XFS (loop4): Ending clean mount [ 274.495730][T10305] XFS (loop4): Quotacheck needed: Please wait. [ 274.530498][T10313] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.1633: corrupted inode contents [ 274.723999][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.767632][ T5633] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 274.808700][T10305] XFS (loop4): Quotacheck: Done. [ 275.213435][ T5621] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 276.085397][T10367] openvswitch: netlink: IP tunnel dst address not specified [ 276.085436][T10367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.512654][T10376] loop3: detected capacity change from 0 to 256 [ 276.530335][ T992] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 276.685438][ T992] usb 2-1: Using ep0 maxpacket: 16 [ 276.696769][ T992] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 276.716876][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.716905][ T992] usb 2-1: Product: syz [ 276.716920][ T992] usb 2-1: Manufacturer: syz [ 276.716936][ T992] usb 2-1: SerialNumber: syz [ 276.758527][T10369] loop2: detected capacity change from 0 to 32768 [ 276.798490][T10369] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 276.845023][T10388] loop3: detected capacity change from 0 to 64 [ 276.939106][T10369] XFS (loop2): Ending clean mount [ 277.017709][ T992] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 277.033863][ T5623] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 277.075105][ T992] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 277.075490][ T992] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 277.075540][ T992] usb 2-1: media controller created [ 277.147011][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.384795][ T992] zl10353_read_register: readreg error (reg=127, ret==-110) [ 277.454069][ T992] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 277.473475][ T992] usb 2-1: USB disconnect, device number 11 [ 278.306285][T10413] openvswitch: netlink: EtherType 2 is less than min 600 [ 278.614851][T10418] loop1: detected capacity change from 0 to 64 [ 279.013588][T10401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.949130][T10401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.123010][T10401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.281265][T10401] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.570663][ T64] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.650330][ T1263] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.660751][ T64] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.826221][T10442] loop3: detected capacity change from 0 to 2048 [ 280.864852][T10442] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c029, mo2=0003] [ 280.880874][T10442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.925706][ T1281] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.929681][T10442] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1681: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 280.990502][T10442] EXT4-fs (loop3): Remounting filesystem read-only [ 281.190337][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.423471][T10447] loop1: detected capacity change from 0 to 32768 [ 281.474528][T10447] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 281.524317][T10447] XFS (loop1): Ending clean mount [ 281.560500][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 281.713555][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 281.719121][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.776050][ T9] usb 1-1: config 0 descriptor?? [ 281.791412][ T9] cp210x 1-1:0.0: cp210x converter detected [ 281.880425][ T5622] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 282.212024][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 282.425360][ T9] usb 1-1: USB disconnect, device number 14 [ 282.467840][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 282.470103][ T9] cp210x 1-1:0.0: device disconnected [ 282.844740][T10479] loop3: detected capacity change from 0 to 512 [ 282.859079][T10479] EXT4-fs: Ignoring removed nobh option [ 282.912024][T10479] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 282.931426][T10479] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 282.931460][T10479] loop3: lost filesystem error report for type 5 error -12 [ 282.942871][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 282.942900][ C0] EXT4-fs (loop3): initial error at time 1789197607: ext4_process_orphan:346 [ 282.942928][ C0] EXT4-fs (loop3): last error at time 1789197607: ext4_process_orphan:346 [ 283.012844][T10479] EXT4-fs (loop3): Remounting filesystem read-only [ 283.013320][T10479] EXT4-fs (loop3): 1 truncate cleaned up [ 283.015287][T10479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.061220][T10479] EXT4-fs warning (device loop3): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 283.097200][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.320968][T10488] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1695'. [ 283.400325][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 283.522812][T10490] loop2: detected capacity change from 0 to 8 [ 283.550274][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 283.551124][ T9] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 283.552421][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 283.552444][ T9] usb 1-1: config 0 has no interface number 0 [ 283.552480][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.552502][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.552535][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.558170][ T9] usb 1-1: config 0 descriptor?? [ 283.986409][ T9] hid (null): unknown global tag 0xc [ 283.986438][ T9] hid (null): unknown global tag 0xe [ 283.986471][ T9] hid (null): report_id 3323596431 is invalid [ 283.986485][ T9] hid (null): unknown global tag 0xe [ 283.986521][ T9] hid (null): unknown global tag 0xe [ 283.986546][ T9] hid (null): unknown global tag 0xe [ 283.986596][ T9] hid (null): unknown global tag 0xd [ 283.986681][ T9] hid (null): unknown global tag 0x63 [ 283.986976][ T9] hid (null): unknown global tag 0xc [ 284.047267][ T9] hid (null): unknown global tag 0xe4 [ 284.047295][ T9] hid (null): usage index exceeded [ 284.264531][ T5734] usb 1-1: USB disconnect, device number 15 [ 284.590386][ T989] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 284.742006][ T989] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 284.743383][ T989] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 284.743419][ T989] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 284.743450][ T989] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 284.748325][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.748357][ T989] usb 3-1: Product: syz [ 284.748375][ T989] usb 3-1: Manufacturer: syz [ 284.748414][ T989] usb 3-1: SerialNumber: syz [ 284.822843][ T989] usb 3-1: config 0 descriptor?? [ 284.823773][T10508] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 284.824010][T10508] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 284.827241][ T989] usb 3-1: ucan: probing device on interface #0 [ 285.010939][T10507] loop3: detected capacity change from 0 to 40427 [ 285.033520][T10507] F2FS-fs (loop3): invalid crc value [ 285.194310][T10507] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 285.213863][T10507] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 285.439169][ T5619] syz-executor: attempt to access beyond end of device [ 285.439169][ T5619] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 285.508426][ T989] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 285.509815][ T5619] CPU: 1 UID: 0 PID: 5619 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 285.509854][ T5619] Tainted: [L]=SOFTLOCKUP [ 285.509863][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.509888][ T5619] Call Trace: [ 285.509898][ T5619] [ 285.509907][ T5619] dump_stack_lvl+0xe8/0x150 [ 285.509946][ T5619] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 285.509978][ T5619] f2fs_write_end_bio+0x1211/0x16e0 [ 285.510011][ T5619] ? blkg_put+0x22/0x240 [ 285.510050][ T5619] __submit_merged_bio+0x258/0x6a0 [ 285.510074][ T5619] ? rcu_is_watching+0x16/0xb0 [ 285.510108][ T5619] __submit_merged_write_cond+0x3c9/0x4e0 [ 285.510142][ T5619] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 285.510191][ T5619] f2fs_write_data_pages+0x2a1d/0x36f0 [ 285.510266][ T5619] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 285.510293][ T5619] ? clockevents_program_event+0x491/0x630 [ 285.510593][ T5619] ? __pfx___schedule+0x10/0x10 [ 285.510676][ T5619] ? irqentry_exit+0x218/0x910 [ 285.510796][ T5619] ? do_raw_spin_lock+0x12b/0x2f0 [ 285.510898][ T5619] ? preempt_schedule_common+0x7f/0xd0 [ 285.510973][ T5619] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 285.511047][ T5619] do_writepages+0x338/0x560 [ 285.511149][ T5619] ? do_raw_spin_unlock+0xf5/0x200 [ 285.511238][ T5619] filemap_fdatawrite+0x1e9/0x2f0 [ 285.511313][ T5619] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 285.511509][ T5619] ? do_raw_spin_unlock+0xf5/0x200 [ 285.511603][ T5619] f2fs_sync_dirty_inodes+0x30e/0x830 [ 285.511753][ T5619] f2fs_write_checkpoint+0xa38/0x2710 [ 285.511834][ T5619] ? __lock_acquire+0x747/0x2de0 [ 285.512001][ T5619] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 285.512223][ T5619] kill_f2fs_super+0x2dd/0x700 [ 285.512319][ T5619] ? __pfx_kill_f2fs_super+0x10/0x10 [ 285.512425][ T5619] ? call_rcu+0x64d/0x8b0 [ 285.512498][ T5619] ? lockdep_hardirqs_on+0x7b/0x110 [ 285.512594][ T5619] deactivate_locked_super+0xbc/0x110 [ 285.512665][ T5619] cleanup_mnt+0x3d3/0x460 [ 285.512757][ T5619] task_work_run+0x1d9/0x260 [ 285.512830][ T5619] ? __pfx_task_work_run+0x10/0x10 [ 285.512924][ T5619] exit_to_user_mode_loop+0x204/0x770 [ 285.512994][ T5619] ? rcu_is_watching+0x16/0xb0 [ 285.513077][ T5619] do_syscall_64+0x328/0x520 [ 285.513139][ T5619] ? trace_irq_disable+0x3b/0x140 [ 285.513202][ T5619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.513263][ T5619] ? clear_bhb_loop+0x70/0xc0 [ 285.513348][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.513409][ T5619] RIP: 0033:0x7f6d0559f397 [ 285.513463][ T5619] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 285.513513][ T5619] RSP: 002b:00007ffd17a11488 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 285.513576][ T5619] RAX: 0000000000000000 RBX: 00007f6d0563448b RCX: 00007f6d0559f397 [ 285.513618][ T5619] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd17a11540 [ 285.513651][ T5619] RBP: 00007ffd17a11540 R08: 00007ffd17a12540 R09: 00000000ffffffff [ 285.513691][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd17a125d0 [ 285.513739][ T5619] R13: 00007f6d0563448b R14: 0000000000045a91 R15: 00007ffd17a12610 [ 285.513826][ T5619] [ 285.554005][ T5619] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 285.899309][ T989] usb 3-1: USB disconnect, device number 16 [ 286.373790][T10521] loop1: detected capacity change from 0 to 32768 [ 286.377007][T10521] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1708 (10521) [ 286.401638][T10521] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 286.401676][T10521] BTRFS info (device loop1): using crc32c checksum algorithm [ 286.514197][T10521] BTRFS info (device loop1): enabling ssd optimizations [ 286.514224][T10521] BTRFS info (device loop1): turning on async discard [ 286.514239][T10521] BTRFS info (device loop1): enabling free space tree [ 286.573967][T10521] BTRFS critical (device loop1 state E): emergency shutdown [ 286.609843][ T5622] BTRFS info (device loop1 state E): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 294.930580][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.933684][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.938045][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.958081][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.971528][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.810645][ T5751] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 295.830745][ T5734] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 295.961281][ T5751] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 295.961329][ T5751] usb 1-1: too many configurations: 53, using maximum allowed: 8 [ 295.981237][ T5734] usb 4-1: Using ep0 maxpacket: 32 [ 295.983796][ T5734] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 295.991566][ T5734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.991751][ T5734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.991925][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.995730][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.995794][ T5751] usb 1-1: Product: syz [ 295.995844][ T5751] usb 1-1: Manufacturer: syz [ 295.995885][ T5751] usb 1-1: SerialNumber: syz [ 296.091631][T10564] loop2: detected capacity change from 0 to 32768 [ 296.107260][ T5734] usb 4-1: config 0 descriptor?? [ 296.126802][T10564] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 296.129484][ T5734] hub 4-1:0.0: USB hub found [ 296.152709][T10564] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 296.275932][T10564] XFS (loop2): Ending clean mount [ 296.307542][T10564] XFS (loop2): Quotacheck needed: Please wait. [ 296.353972][ T5734] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 296.456830][ T5751] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 296.456919][ T5751] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 296.456942][ T5751] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 296.506124][ T5751] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 296.536698][T10564] XFS (loop2): Quotacheck: Done. [ 296.576463][ T5751] usb 1-1: USB disconnect, device number 16 [ 296.601102][T10571] loop1: detected capacity change from 0 to 32768 [ 296.684556][ T5623] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 296.738158][T10539] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.738341][T10539] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.738761][T10539] bridge_slave_0: entered allmulticast mode [ 296.761347][T10539] bridge_slave_0: entered promiscuous mode [ 296.784153][T10539] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.784272][T10539] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.784427][T10539] bridge_slave_1: entered allmulticast mode [ 296.786547][T10539] bridge_slave_1: entered promiscuous mode [ 296.815208][ T5734] hid-generic 0003:046D:C31C.0018: item fetching failed at offset 0/1 [ 296.831526][ T5734] hid-generic 0003:046D:C31C.0018: probe with driver hid-generic failed with error -22 [ 296.937007][T10539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.957462][T10539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.043451][ T5633] Bluetooth: hci5: command tx timeout [ 297.107495][T10539] team0: Port device team_slave_0 added [ 297.116538][T10539] team0: Port device team_slave_1 added [ 297.140915][ T992] usb 4-1: USB disconnect, device number 10 [ 297.527942][ T992] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 297.529152][T10539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.529169][T10539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.529198][T10539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.580057][T10539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.580102][T10539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.585057][T10539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.691427][ T992] usb 3-1: Using ep0 maxpacket: 32 [ 297.693139][ T992] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 297.694168][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.730298][ T992] usb 3-1: config 0 descriptor?? [ 297.823105][T10539] hsr_slave_0: entered promiscuous mode [ 297.828538][T10539] hsr_slave_1: entered promiscuous mode [ 297.829300][T10539] debugfs: 'hsr0' already exists in 'hsr' [ 297.829320][T10539] Cannot create hsr debugfs directory [ 297.951846][ T992] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 297.970434][ T992] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 297.971436][ T992] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 297.971489][ T992] usb 3-1: media controller created [ 298.011292][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.161927][ T992] az6027: usb out operation failed. (-71) [ 298.162330][ T992] az6027: usb out operation failed. (-71) [ 298.162345][ T992] stb0899_attach: Driver disabled by Kconfig [ 298.162356][ T992] az6027: no front-end attached [ 298.162356][ T992] [ 298.162726][ T992] az6027: usb out operation failed. (-71) [ 298.162741][ T992] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 298.166551][ T992] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 298.188577][ T992] dvb-usb: schedule remote query interval to 400 msecs. [ 298.188602][ T992] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 298.249079][ T992] usb 3-1: USB disconnect, device number 17 [ 298.462054][ T992] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 298.541335][ T989] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 298.690374][ T989] usb 2-1: Using ep0 maxpacket: 32 [ 298.693635][ T989] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 298.694768][ T989] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.694798][ T989] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.726829][ T989] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 298.726856][ T989] usb 2-1: Product: syz [ 298.726871][ T989] usb 2-1: Manufacturer: syz [ 298.780492][ T989] hub 2-1:4.0: USB hub found [ 298.989617][ T989] hub 2-1:4.0: 2 ports detected [ 298.995119][T10539] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 299.073961][T10539] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.074909][T10539] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 299.110319][ T5633] Bluetooth: hci5: command tx timeout [ 299.140987][T10539] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.145766][T10539] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 299.170100][T10539] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.180019][T10539] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.200085][T10539] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.548514][T10539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.601976][T10539] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.627279][ T989] usb 2-1: USB disconnect, device number 12 [ 299.629982][ T1263] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.630090][ T1263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.709800][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.709911][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.761930][T10611] loop0: detected capacity change from 0 to 32768 [ 299.793667][T10626] program syz.3.1733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.829641][T10611] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 299.886756][T10539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.062366][T10631] loop3: detected capacity change from 0 to 1024 [ 300.275483][ T5620] ocfs2: Unmounting device (7,0) on (node local) [ 300.871108][ T5751] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 301.023517][ T5751] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 301.025437][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.043960][ T5751] usb 2-1: config 0 descriptor?? [ 301.191174][ T5633] Bluetooth: hci5: command tx timeout [ 301.242001][T10539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.242934][T10664] loop3: detected capacity change from 0 to 128 [ 301.252596][T10664] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 301.252818][T10664] hpfs: filesystem error: improperly stopped [ 301.252862][T10664] hpfs: You really don't want any checks? You are crazy... [ 301.254143][T10664] hpfs: hpfs_map_sector(): read error [ 301.254176][T10664] hpfs: code page support is disabled [ 301.312219][T10664] hpfs: hpfs_map_4sectors(): unaligned read [ 301.312342][T10664] hpfs: hpfs_map_4sectors(): unaligned read [ 301.312355][T10664] hpfs: filesystem error: unable to find root dir [ 301.342564][ T5751] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 301.772409][T10539] veth0_vlan: entered promiscuous mode [ 301.798148][T10539] veth1_vlan: entered promiscuous mode [ 301.834651][ T5751] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 301.834680][ T5751] [drm] Initialized udl on minor 1 [ 301.875904][T10539] veth0_macvtap: entered promiscuous mode [ 301.896253][T10539] veth1_macvtap: entered promiscuous mode [ 301.934287][ T5751] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 301.993327][ C1] ------------[ cut here ]------------ [ 301.993347][ C1] Looking for class "&ht->mutex" with key xfrm_policy_init.__key.84, but found a different class "key" with the same key [ 301.993398][ C1] WARNING: kernel/locking/lockdep.c:958 at look_up_lock_class+0x8c/0x110, CPU#1: kworker/1:6/5751 [ 302.022660][ C1] Modules linked in: [ 302.026607][ C1] CPU: 1 UID: 0 PID: 5751 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.037583][ C1] Tainted: [L]=SOFTLOCKUP [ 302.041947][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.052072][ C1] Workqueue: usb_hub_wq hub_event [ 302.057261][ C1] RIP: 0010:look_up_lock_class+0x9a/0x110 [ 302.063031][ C1] Code: 00 00 49 3b 46 18 0f 84 82 00 00 00 49 81 3e d0 44 58 94 74 79 48 8d 3d 44 f2 94 04 49 8b 16 49 8b 76 18 48 8b 8b b8 00 00 00 <67> 48 0f b9 3a eb 5d 90 89 f3 e8 67 0a f4 f8 e8 32 5c be f5 48 c7 [ 302.082679][ C1] RSP: 0018:ffffc90000a38070 EFLAGS: 00010002 [ 302.088796][ C1] RAX: ffffffff8c6bb940 RBX: ffffffff94478508 RCX: ffffffff8c6bb940 [ 302.096805][ C1] RDX: ffffffff9af23440 RSI: ffffffff8c6bb900 RDI: ffffffff907ddb20 [ 302.104817][ C1] RBP: 00000000ffffffff R08: 0000000000000100 R09: 0000000000000004 [ 302.112810][ C1] R10: 0000000000000003 R11: 0000000000000300 R12: 0000000000000246 [ 302.120808][ C1] R13: ffff8880307a8000 R14: ffffffff9af232c8 R15: ffffffff9af23440 [ 302.128812][ C1] FS: 0000000000000000(0000) GS:ffff888124db7000(0000) knlGS:0000000000000000 [ 302.137771][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.144390][ C1] CR2: 0000001b3401aff8 CR3: 0000000074540000 CR4: 00000000003526f0 [ 302.152404][ C1] Call Trace: [ 302.155717][ C1] [ 302.158597][ C1] match_held_lock+0x9a/0x120 [ 302.163323][ C1] lock_is_held_type+0x89/0x150 [ 302.168213][ C1] xfrm_policy_inexact_lookup_rcu+0x60/0x750 [ 302.174233][ C1] xfrm_policy_lookup_bytype+0xb35/0x1840 [ 302.179984][ C1] ? xfrm_policy_lookup_bytype+0x147/0x1840 [ 302.185953][ C1] ? __pfx_xfrm_policy_lookup_bytype+0x10/0x10 [ 302.192152][ C1] xfrm_lookup_with_ifid+0x416/0x1db0 [ 302.197580][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 302.203449][ C1] xfrmi_xmit+0x72d/0x1b80 [ 302.207914][ C1] ? __pfx_xfrmi_xmit+0x10/0x10 [ 302.212839][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 302.218013][ C1] __dev_queue_xmit+0x14c0/0x3820 [ 302.223094][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 302.228263][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 302.233682][ C1] ? neigh_connected_output+0x1e7/0x470 [ 302.239283][ C1] ? read_seqbegin+0xac/0x180 [ 302.243996][ C1] ? neigh_connected_output+0x1e7/0x470 [ 302.249595][ C1] ? ip6_output+0x11e/0x540 [ 302.254148][ C1] ip6_output+0x337/0x540 [ 302.258520][ C1] ? __pfx_ip6_output+0x10/0x10 [ 302.263509][ C1] ndisc_send_skb+0xcb2/0x1650 [ 302.268324][ C1] ? ret_from_fork+0x514/0xb70 [ 302.273132][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 302.278127][ C1] ? ndisc_send_skb+0x203/0x1650 [ 302.283113][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 302.288347][ C1] ? ndisc_alloc_skb+0x1a6/0x480 [ 302.293337][ C1] ? ipv6_get_lladdr+0x378/0x3f0 [ 302.298300][ C1] ? ipv6_get_lladdr+0x2b/0x3f0 [ 302.303202][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 302.305443][T10539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.315385][ C1] ? lock_acquire+0x115/0x350 [ 302.320123][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 302.325664][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 302.331090][ C1] call_timer_fn+0x18d/0x5f0 [ 302.335728][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 302.341219][ C1] ? call_timer_fn+0xd5/0x5f0 [ 302.345934][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 302.351093][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 302.356352][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 302.361847][ C1] __run_timer_base+0x652/0x8b0 [ 302.366783][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 302.372182][ C1] ? lapic_next_event+0x11/0x20 [ 302.377065][ C1] ? clockevents_program_event+0x491/0x630 [ 302.382940][ C1] run_timer_softirq+0xb7/0x170 [ 302.387834][ C1] handle_softirqs+0x223/0x840 [ 302.392641][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 302.397458][ C1] __irq_exit_rcu+0xcb/0x220 [ 302.402112][ C1] irq_exit_rcu+0x9/0x30 [ 302.406398][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 302.412070][ C1] [ 302.415037][ C1] [ 302.417987][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.424000][ C1] RIP: 0010:finish_task_switch+0x413/0xc60 [ 302.429838][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 57 48 55 0a e8 d2 1b 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 302.449483][ C1] RSP: 0018:ffffc900043ad940 EFLAGS: 00000206 [ 302.455589][ C1] RAX: 000000000004ba5f RBX: ffff8880b873cb20 RCX: 8000000000000001 [ 302.463606][ C1] RDX: 0000000000000006 RSI: ffffffff8e47d8da RDI: ffffffff8c6dc080 [ 302.471623][ C1] RBP: ffffc900043ad990 R08: ffffffff907a9cbf R09: 1ffffffff20f5397 [ 302.479631][ C1] R10: dffffc0000000000 R11: fffffbfff20f5398 R12: ffff8880307a8000 [ 302.481461][T10539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.494856][ C1] R13: ffff8880b873cae8 R14: dffffc0000000000 R15: 1ffff110170e7964 [ 302.502886][ C1] __schedule+0x17e5/0x5940 [ 302.507453][ C1] ? lapic_next_event+0x11/0x20 [ 302.512372][ C1] ? irqentry_exit+0x218/0x910 [ 302.517178][ C1] ? __pfx___schedule+0x10/0x10 [ 302.522170][ C1] ? irqentry_exit+0x218/0x910 [ 302.526992][ C1] ? __mutex_trylock_common+0x15f/0x270 [ 302.532583][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 302.538029][ C1] preempt_schedule_common+0x7f/0xd0 [ 302.543353][ C1] preempt_schedule_thunk+0x16/0x40 [ 302.548588][ C1] __mutex_lock+0x31b/0x15a0 [ 302.553210][ C1] ? lock_acquire+0x115/0x350 [ 302.557922][ C1] ? update_display_info+0x455/0x9630 [ 302.563352][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 302.568413][ C1] ? unwind_next_frame+0x8f/0x2550 [ 302.573569][ C1] ? rcu_is_watching+0x16/0xb0 [ 302.578370][ C1] ? kfree+0x4d/0x650 [ 302.582391][ C1] update_display_info+0x455/0x9630 [ 302.587642][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 302.593831][ C1] ? arch_stack_walk+0x11b/0x150 [ 302.598810][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 302.603803][ C1] ? kasan_save_stack+0x4d/0x60 [ 302.608728][ C1] ? kasan_save_stack+0x3e/0x60 [ 302.613620][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 302.619015][ C1] ? call_rcu+0xee/0x8b0 [ 302.623283][ C1] ? __schedule+0x17e5/0x5940 [ 302.627991][ C1] ? preempt_schedule_irq+0x4b/0x90 [ 302.633221][ C1] ? irqentry_exit+0x14f/0x910 [ 302.638013][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.644219][ C1] ? mod_delayed_work_on+0x16a/0x190 [ 302.649537][ C1] ? drm_helper_probe_single_connector_modes+0x86e/0x1880 [ 302.656667][ C1] ? drm_fbdev_client_hotplug+0x16c/0x230 [ 302.662406][ C1] ? drm_client_register+0x16e/0x200 [ 302.667731][ C1] ? drm_fbdev_client_setup+0x1a0/0x450 [ 302.673298][ C1] ? drm_client_setup+0x107/0x220 [ 302.678348][ C1] ? udl_usb_probe+0x137/0x150 [ 302.683396][ C1] ? __device_attach_driver+0x270/0x410 [ 302.688953][ C1] ? bus_for_each_drv+0x258/0x2f0 [ 302.693999][ C1] ? __device_attach+0x2c4/0x450 [ 302.698946][ C1] ? device_initial_probe+0xa1/0xd0 [ 302.704157][ C1] ? bus_probe_device+0x12a/0x220 [ 302.709202][ C1] ? device_add+0x7d7/0xb80 [ 302.713739][ C1] ? usb_set_configuration+0x1ad8/0x2180 [ 302.719386][ C1] ? usb_generic_driver_probe+0x8d/0x150 [ 302.725035][ C1] ? usb_probe_device+0x1c3/0x3b0 [ 302.730076][ C1] ? really_probe+0x254/0xae0 [ 302.734771][ C1] ? __driver_probe_device+0x1e8/0x360 [ 302.740252][ C1] ? driver_probe_device+0x4f/0x240 [ 302.745509][ C1] ? __device_attach_driver+0x270/0x410 [ 302.751072][ C1] ? bus_for_each_drv+0x258/0x2f0 [ 302.756137][ C1] ? __device_attach+0x2c4/0x450 [ 302.761089][ C1] ? hub_event+0x28e8/0x4d30 [ 302.765703][ C1] ? worker_thread+0xa47/0xfb0 [ 302.770487][ C1] ? kthread+0x38b/0x480 [ 302.774826][ C1] ? ret_from_fork+0x514/0xb70 [ 302.779601][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 302.784569][ C1] ? __pfx_update_display_info+0x10/0x10 [ 302.790231][ C1] ? call_rcu+0x64d/0x8b0 [ 302.794580][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 302.799814][ C1] ? rcu_is_watching+0x16/0xb0 [ 302.804603][ C1] ? trace_sched_exit_tp+0x3a/0x130 [ 302.809836][ C1] ? __schedule+0x17f3/0x5940 [ 302.814578][ C1] drm_edid_connector_update+0x9b/0x13d0 [ 302.820237][ C1] ? __pfx___schedule+0x10/0x10 [ 302.825111][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 302.831201][ C1] ? irqentry_exit+0x218/0x910 [ 302.835989][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 302.841243][ C1] ? irqentry_exit+0x218/0x910 [ 302.846038][ C1] ? trace_irq_disable+0x3b/0x140 [ 302.851087][ C1] ? __pfx_drm_edid_connector_update+0x10/0x10 [ 302.857281][ C1] ? __drm_dev_dbg+0xf1/0x200 [ 302.861990][ C1] drm_connector_update_edid_property+0xde/0x140 [ 302.868342][ C1] ? __pfx_drm_connector_update_edid_property+0x10/0x10 [ 302.875303][ C1] ? mod_delayed_work_on+0x161/0x190 [ 302.880631][ C1] drm_helper_probe_single_connector_modes+0x126b/0x1880 [ 302.887699][ C1] ? __pfx_drm_helper_probe_single_connector_modes+0x10/0x10 [ 302.895188][ C1] ? __kmalloc_noprof+0x387/0x710 [ 302.900244][ C1] ? __kmalloc_noprof+0x1a6/0x710 [ 302.905321][ C1] ? drm_client_modeset_probe+0x37d/0x60c0 [ 302.911261][ C1] ? drm_client_modeset_probe+0x37d/0x60c0 [ 302.917203][ C1] drm_client_modeset_probe+0x4e8/0x60c0 [ 302.922871][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 302.928111][ C1] ? rcu_is_watching+0x16/0xb0 [ 302.932905][ C1] ? lapic_next_event+0x11/0x20 [ 302.937787][ C1] ? __pfx_drm_client_modeset_probe+0x10/0x10 [ 302.943889][ C1] ? irqentry_exit+0x218/0x910 [ 302.948685][ C1] ? __pfx___schedule+0x10/0x10 [ 302.953569][ C1] ? irqentry_exit+0x218/0x910 [ 302.958365][ C1] ? __mutex_trylock_common+0x15f/0x270 [ 302.963954][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 302.969362][ C1] __drm_fb_helper_initial_config_and_unlock+0x10e/0x1b50 [ 302.976500][ C1] ? __mutex_lock+0x31b/0x15a0 [ 302.981297][ C1] ? trace_contention_end+0x3d/0x140 [ 302.986622][ C1] ? __mutex_lock+0x305/0x15a0 [ 302.991419][ C1] ? drm_fb_helper_initial_config+0x29/0x40 [ 302.997359][ C1] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 303.005017][ C1] ? kfree+0x1c5/0x650 [ 303.009114][ C1] drm_fbdev_client_hotplug+0x16c/0x230 [ 303.014709][ C1] drm_client_register+0x16e/0x200 [ 303.019844][ C1] drm_fbdev_client_setup+0x1a0/0x450 [ 303.025239][ C1] ? drm_client_setup+0xb0/0x220 [ 303.030210][ C1] drm_client_setup+0x107/0x220 [ 303.035087][ C1] udl_usb_probe+0x137/0x150 [ 303.039704][ C1] usb_probe_interface+0x788/0xe50 [ 303.044837][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 303.050499][ C1] ? sysfs_do_create_link_sd+0xe0/0x110 [ 303.056076][ C1] ? driver_sysfs_add+0x1fe/0x210 [ 303.061119][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 303.066770][ C1] really_probe+0x254/0xae0 [ 303.071304][ C1] __driver_probe_device+0x1e8/0x360 [ 303.076605][ C1] driver_probe_device+0x4f/0x240 [ 303.081658][ C1] __device_attach_driver+0x270/0x410 [ 303.087069][ C1] bus_for_each_drv+0x258/0x2f0 [ 303.091960][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 303.097875][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 303.103280][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 303.109123][ C1] __device_attach+0x2c4/0x450 [ 303.113908][ C1] ? __pfx___device_attach+0x10/0x10 [ 303.119224][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 303.124397][ C1] ? _raw_spin_unlock+0x28/0x50 [ 303.129304][ C1] device_initial_probe+0xa1/0xd0 [ 303.134357][ C1] bus_probe_device+0x12a/0x220 [ 303.139231][ C1] device_add+0x7d7/0xb80 [ 303.143603][ C1] usb_set_configuration+0x1ad8/0x2180 [ 303.149102][ C1] usb_generic_driver_probe+0x8d/0x150 [ 303.154589][ C1] usb_probe_device+0x1c3/0x3b0 [ 303.159467][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 303.164860][ C1] really_probe+0x254/0xae0 [ 303.169392][ C1] __driver_probe_device+0x1e8/0x360 [ 303.174705][ C1] driver_probe_device+0x4f/0x240 [ 303.179753][ C1] __device_attach_driver+0x270/0x410 [ 303.185170][ C1] bus_for_each_drv+0x258/0x2f0 [ 303.190063][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 303.195981][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 303.201388][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 303.207223][ C1] __device_attach+0x2c4/0x450 [ 303.212004][ C1] ? __pfx___device_attach+0x10/0x10 [ 303.217303][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 303.222438][ C1] ? _raw_spin_unlock+0x28/0x50 [ 303.227310][ C1] device_initial_probe+0xa1/0xd0 [ 303.232349][ C1] bus_probe_device+0x12a/0x220 [ 303.237223][ C1] device_add+0x7d7/0xb80 [ 303.241598][ C1] usb_new_device+0x9aa/0x1690 [ 303.246388][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 303.251610][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 303.256839][ C1] hub_event+0x28e8/0x4d30 [ 303.261309][ C1] ? __pfx_hub_event+0x10/0x10 [ 303.266112][ C1] ? rcu_is_watching+0x16/0xb0 [ 303.270895][ C1] ? process_scheduled_works+0x97a/0x1630 [ 303.276646][ C1] process_scheduled_works+0xc3d/0x1630 [ 303.282254][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 303.288269][ C1] ? assign_work+0x3cf/0x5d0 [ 303.292899][ C1] worker_thread+0xa47/0xfb0 [ 303.297534][ C1] ? __kthread_parkme+0x71/0x1f0 [ 303.302506][ C1] kthread+0x38b/0x480 [ 303.306628][ C1] ? __pfx_worker_thread+0x10/0x10 [ 303.311765][ C1] ? __pfx_kthread+0x10/0x10 [ 303.316375][ C1] ret_from_fork+0x514/0xb70 [ 303.320982][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 303.326110][ C1] ? __switch_to+0xc89/0x1420 [ 303.330827][ C1] ? __pfx_kthread+0x10/0x10 [ 303.335435][ C1] ret_from_fork_asm+0x1a/0x30 [ 303.340235][ C1] [ 303.343278][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 303.350584][ C1] CPU: 1 UID: 0 PID: 5751 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.361563][ C1] Tainted: [L]=SOFTLOCKUP [ 303.365906][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.376010][ C1] Workqueue: usb_hub_wq hub_event [ 303.381100][ C1] Call Trace: [ 303.384393][ C1] [ 303.387252][ C1] vpanic+0x56d/0xa70 [ 303.391270][ C1] ? __pfx__printk+0x10/0x10 [ 303.395885][ C1] ? __pfx_vpanic+0x10/0x10 [ 303.400510][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 303.405822][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 303.411072][ C1] panic+0xc5/0xd0 [ 303.414833][ C1] ? __pfx_panic+0x10/0x10 [ 303.419280][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 303.424258][ C1] __warn+0x315/0x4c0 [ 303.428265][ C1] ? look_up_lock_class+0x8c/0x110 [ 303.433400][ C1] ? look_up_lock_class+0x8c/0x110 [ 303.438537][ C1] __report_bug+0x276/0x570 [ 303.443087][ C1] ? look_up_lock_class+0x8c/0x110 [ 303.448228][ C1] ? __pfx___report_bug+0x10/0x10 [ 303.453289][ C1] report_bug_entry+0x19b/0x290 [ 303.458176][ C1] ? look_up_lock_class+0x9a/0x110 [ 303.463307][ C1] ? look_up_lock_class+0x9f/0x110 [ 303.468442][ C1] handle_bug+0xce/0x200 [ 303.472718][ C1] exc_invalid_op+0x1a/0x50 [ 303.477245][ C1] asm_exc_invalid_op+0x1a/0x20 [ 303.482113][ C1] RIP: 0010:look_up_lock_class+0x9a/0x110 [ 303.487858][ C1] Code: 00 00 49 3b 46 18 0f 84 82 00 00 00 49 81 3e d0 44 58 94 74 79 48 8d 3d 44 f2 94 04 49 8b 16 49 8b 76 18 48 8b 8b b8 00 00 00 <67> 48 0f b9 3a eb 5d 90 89 f3 e8 67 0a f4 f8 e8 32 5c be f5 48 c7 [ 303.507485][ C1] RSP: 0018:ffffc90000a38070 EFLAGS: 00010002 [ 303.513579][ C1] RAX: ffffffff8c6bb940 RBX: ffffffff94478508 RCX: ffffffff8c6bb940 [ 303.521573][ C1] RDX: ffffffff9af23440 RSI: ffffffff8c6bb900 RDI: ffffffff907ddb20 [ 303.529561][ C1] RBP: 00000000ffffffff R08: 0000000000000100 R09: 0000000000000004 [ 303.537551][ C1] R10: 0000000000000003 R11: 0000000000000300 R12: 0000000000000246 [ 303.545540][ C1] R13: ffff8880307a8000 R14: ffffffff9af232c8 R15: ffffffff9af23440 [ 303.553540][ C1] match_held_lock+0x9a/0x120 [ 303.558245][ C1] lock_is_held_type+0x89/0x150 [ 303.563121][ C1] xfrm_policy_inexact_lookup_rcu+0x60/0x750 [ 303.569136][ C1] xfrm_policy_lookup_bytype+0xb35/0x1840 [ 303.574881][ C1] ? xfrm_policy_lookup_bytype+0x147/0x1840 [ 303.580824][ C1] ? __pfx_xfrm_policy_lookup_bytype+0x10/0x10 [ 303.587006][ C1] xfrm_lookup_with_ifid+0x416/0x1db0 [ 303.592427][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 303.598331][ C1] xfrmi_xmit+0x72d/0x1b80 [ 303.602799][ C1] ? __pfx_xfrmi_xmit+0x10/0x10 [ 303.607699][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 303.612852][ C1] __dev_queue_xmit+0x14c0/0x3820 [ 303.617918][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 303.623063][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 303.628467][ C1] ? neigh_connected_output+0x1e7/0x470 [ 303.634036][ C1] ? read_seqbegin+0xac/0x180 [ 303.638747][ C1] ? neigh_connected_output+0x1e7/0x470 [ 303.644330][ C1] ? ip6_output+0x11e/0x540 [ 303.648851][ C1] ip6_output+0x337/0x540 [ 303.653201][ C1] ? __pfx_ip6_output+0x10/0x10 [ 303.658085][ C1] ndisc_send_skb+0xcb2/0x1650 [ 303.662962][ C1] ? ret_from_fork+0x514/0xb70 [ 303.667741][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 303.672732][ C1] ? ndisc_send_skb+0x203/0x1650 [ 303.677696][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 303.682923][ C1] ? ndisc_alloc_skb+0x1a6/0x480 [ 303.687925][ C1] ? ipv6_get_lladdr+0x378/0x3f0 [ 303.692892][ C1] ? ipv6_get_lladdr+0x2b/0x3f0 [ 303.697764][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 303.702726][ C1] ? lock_acquire+0x115/0x350 [ 303.707449][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 303.712926][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 303.718328][ C1] call_timer_fn+0x18d/0x5f0 [ 303.722947][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 303.728418][ C1] ? call_timer_fn+0xd5/0x5f0 [ 303.733114][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 303.738256][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 303.743480][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 303.748968][ C1] __run_timer_base+0x652/0x8b0 [ 303.753854][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 303.759253][ C1] ? lapic_next_event+0x11/0x20 [ 303.764133][ C1] ? clockevents_program_event+0x491/0x630 [ 303.769971][ C1] run_timer_softirq+0xb7/0x170 [ 303.774851][ C1] handle_softirqs+0x223/0x840 [ 303.779640][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 303.784434][ C1] __irq_exit_rcu+0xcb/0x220 [ 303.789051][ C1] irq_exit_rcu+0x9/0x30 [ 303.793316][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 303.798967][ C1] [ 303.801918][ C1] [ 303.804862][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 303.810861][ C1] RIP: 0010:finish_task_switch+0x413/0xc60 [ 303.816693][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 57 48 55 0a e8 d2 1b 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 303.836336][ C1] RSP: 0018:ffffc900043ad940 EFLAGS: 00000206 [ 303.842446][ C1] RAX: 000000000004ba5f RBX: ffff8880b873cb20 RCX: 8000000000000001 [ 303.850439][ C1] RDX: 0000000000000006 RSI: ffffffff8e47d8da RDI: ffffffff8c6dc080 [ 303.858432][ C1] RBP: ffffc900043ad990 R08: ffffffff907a9cbf R09: 1ffffffff20f5397 [ 303.866419][ C1] R10: dffffc0000000000 R11: fffffbfff20f5398 R12: ffff8880307a8000 [ 303.874420][ C1] R13: ffff8880b873cae8 R14: dffffc0000000000 R15: 1ffff110170e7964 [ 303.882424][ C1] __schedule+0x17e5/0x5940 [ 303.886975][ C1] ? lapic_next_event+0x11/0x20 [ 303.891852][ C1] ? irqentry_exit+0x218/0x910 [ 303.896637][ C1] ? __pfx___schedule+0x10/0x10 [ 303.901508][ C1] ? irqentry_exit+0x218/0x910 [ 303.906305][ C1] ? __mutex_trylock_common+0x15f/0x270 [ 303.911877][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 303.917270][ C1] preempt_schedule_common+0x7f/0xd0 [ 303.922570][ C1] preempt_schedule_thunk+0x16/0x40 [ 303.927787][ C1] __mutex_lock+0x31b/0x15a0 [ 303.932429][ C1] ? lock_acquire+0x115/0x350 [ 303.937126][ C1] ? update_display_info+0x455/0x9630 [ 303.942528][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 303.947570][ C1] ? unwind_next_frame+0x8f/0x2550 [ 303.952711][ C1] ? rcu_is_watching+0x16/0xb0 [ 303.957495][ C1] ? kfree+0x4d/0x650 [ 303.961505][ C1] update_display_info+0x455/0x9630 [ 303.966745][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 303.972923][ C1] ? arch_stack_walk+0x11b/0x150 [ 303.977884][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 303.982869][ C1] ? kasan_save_stack+0x4d/0x60 [ 303.987742][ C1] ? kasan_save_stack+0x3e/0x60 [ 303.992615][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 303.998002][ C1] ? call_rcu+0xee/0x8b0 [ 304.002272][ C1] ? __schedule+0x17e5/0x5940 [ 304.006999][ C1] ? preempt_schedule_irq+0x4b/0x90 [ 304.012239][ C1] ? irqentry_exit+0x14f/0x910 [ 304.017027][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 304.023218][ C1] ? mod_delayed_work_on+0x16a/0x190 [ 304.028539][ C1] ? drm_helper_probe_single_connector_modes+0x86e/0x1880 [ 304.035771][ C1] ? drm_fbdev_client_hotplug+0x16c/0x230 [ 304.041532][ C1] ? drm_client_register+0x16e/0x200 [ 304.046849][ C1] ? drm_fbdev_client_setup+0x1a0/0x450 [ 304.052464][ C1] ? drm_client_setup+0x107/0x220 [ 304.057521][ C1] ? udl_usb_probe+0x137/0x150 [ 304.062318][ C1] ? __device_attach_driver+0x270/0x410 [ 304.067889][ C1] ? bus_for_each_drv+0x258/0x2f0 [ 304.072943][ C1] ? __device_attach+0x2c4/0x450 [ 304.077906][ C1] ? device_initial_probe+0xa1/0xd0 [ 304.083120][ C1] ? bus_probe_device+0x12a/0x220 [ 304.088167][ C1] ? device_add+0x7d7/0xb80 [ 304.092697][ C1] ? usb_set_configuration+0x1ad8/0x2180 [ 304.098347][ C1] ? usb_generic_driver_probe+0x8d/0x150 [ 304.103998][ C1] ? usb_probe_device+0x1c3/0x3b0 [ 304.109190][ C1] ? really_probe+0x254/0xae0 [ 304.113900][ C1] ? __driver_probe_device+0x1e8/0x360 [ 304.119383][ C1] ? driver_probe_device+0x4f/0x240 [ 304.124608][ C1] ? __device_attach_driver+0x270/0x410 [ 304.130185][ C1] ? bus_for_each_drv+0x258/0x2f0 [ 304.135266][ C1] ? __device_attach+0x2c4/0x450 [ 304.140239][ C1] ? hub_event+0x28e8/0x4d30 [ 304.144892][ C1] ? worker_thread+0xa47/0xfb0 [ 304.149689][ C1] ? kthread+0x38b/0x480 [ 304.153956][ C1] ? ret_from_fork+0x514/0xb70 [ 304.158746][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 304.163901][ C1] ? __pfx_update_display_info+0x10/0x10 [ 304.169576][ C1] ? call_rcu+0x64d/0x8b0 [ 304.173947][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 304.179177][ C1] ? rcu_is_watching+0x16/0xb0 [ 304.183966][ C1] ? trace_sched_exit_tp+0x3a/0x130 [ 304.189202][ C1] ? __schedule+0x17f3/0x5940 [ 304.193920][ C1] drm_edid_connector_update+0x9b/0x13d0 [ 304.199621][ C1] ? __pfx___schedule+0x10/0x10 [ 304.204525][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 304.210624][ C1] ? irqentry_exit+0x218/0x910 [ 304.215411][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 304.220628][ C1] ? irqentry_exit+0x218/0x910 [ 304.225409][ C1] ? trace_irq_disable+0x3b/0x140 [ 304.230479][ C1] ? __pfx_drm_edid_connector_update+0x10/0x10 [ 304.236665][ C1] ? __drm_dev_dbg+0xf1/0x200 [ 304.241382][ C1] drm_connector_update_edid_property+0xde/0x140 [ 304.247793][ C1] ? __pfx_drm_connector_update_edid_property+0x10/0x10 [ 304.254789][ C1] ? mod_delayed_work_on+0x161/0x190 [ 304.260122][ C1] drm_helper_probe_single_connector_modes+0x126b/0x1880 [ 304.267193][ C1] ? __pfx_drm_helper_probe_single_connector_modes+0x10/0x10 [ 304.274612][ C1] ? __kmalloc_noprof+0x387/0x710 [ 304.279674][ C1] ? __kmalloc_noprof+0x1a6/0x710 [ 304.284724][ C1] ? drm_client_modeset_probe+0x37d/0x60c0 [ 304.290560][ C1] ? drm_client_modeset_probe+0x37d/0x60c0 [ 304.296401][ C1] drm_client_modeset_probe+0x4e8/0x60c0 [ 304.302077][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 304.307319][ C1] ? rcu_is_watching+0x16/0xb0 [ 304.312145][ C1] ? lapic_next_event+0x11/0x20 [ 304.317029][ C1] ? __pfx_drm_client_modeset_probe+0x10/0x10 [ 304.323132][ C1] ? irqentry_exit+0x218/0x910 [ 304.327927][ C1] ? __pfx___schedule+0x10/0x10 [ 304.332812][ C1] ? irqentry_exit+0x218/0x910 [ 304.337611][ C1] ? __mutex_trylock_common+0x15f/0x270 [ 304.343187][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 304.348588][ C1] __drm_fb_helper_initial_config_and_unlock+0x10e/0x1b50 [ 304.355724][ C1] ? __mutex_lock+0x31b/0x15a0 [ 304.360534][ C1] ? trace_contention_end+0x3d/0x140 [ 304.365922][ C1] ? __mutex_lock+0x305/0x15a0 [ 304.370752][ C1] ? drm_fb_helper_initial_config+0x29/0x40 [ 304.376682][ C1] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 304.384276][ C1] ? kfree+0x1c5/0x650 [ 304.388396][ C1] drm_fbdev_client_hotplug+0x16c/0x230 [ 304.393996][ C1] drm_client_register+0x16e/0x200 [ 304.399157][ C1] drm_fbdev_client_setup+0x1a0/0x450 [ 304.404563][ C1] ? drm_client_setup+0xb0/0x220 [ 304.409539][ C1] drm_client_setup+0x107/0x220 [ 304.414445][ C1] udl_usb_probe+0x137/0x150 [ 304.419078][ C1] usb_probe_interface+0x788/0xe50 [ 304.424329][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 304.429992][ C1] ? sysfs_do_create_link_sd+0xe0/0x110 [ 304.435568][ C1] ? driver_sysfs_add+0x1fe/0x210 [ 304.440617][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 304.446273][ C1] really_probe+0x254/0xae0 [ 304.450797][ C1] __driver_probe_device+0x1e8/0x360 [ 304.456100][ C1] driver_probe_device+0x4f/0x240 [ 304.461143][ C1] __device_attach_driver+0x270/0x410 [ 304.466532][ C1] bus_for_each_drv+0x258/0x2f0 [ 304.471421][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 304.477334][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 304.482736][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 304.488578][ C1] __device_attach+0x2c4/0x450 [ 304.493361][ C1] ? __pfx___device_attach+0x10/0x10 [ 304.498661][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 304.503805][ C1] ? _raw_spin_unlock+0x28/0x50 [ 304.508686][ C1] device_initial_probe+0xa1/0xd0 [ 304.513734][ C1] bus_probe_device+0x12a/0x220 [ 304.518611][ C1] device_add+0x7d7/0xb80 [ 304.522972][ C1] usb_set_configuration+0x1ad8/0x2180 [ 304.528468][ C1] usb_generic_driver_probe+0x8d/0x150 [ 304.533955][ C1] usb_probe_device+0x1c3/0x3b0 [ 304.538848][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 304.544242][ C1] really_probe+0x254/0xae0 [ 304.548763][ C1] __driver_probe_device+0x1e8/0x360 [ 304.554096][ C1] driver_probe_device+0x4f/0x240 [ 304.559141][ C1] __device_attach_driver+0x270/0x410 [ 304.564530][ C1] bus_for_each_drv+0x258/0x2f0 [ 304.569410][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 304.575321][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 304.580745][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 304.586701][ C1] __device_attach+0x2c4/0x450 [ 304.591492][ C1] ? __pfx___device_attach+0x10/0x10 [ 304.596881][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 304.602022][ C1] ? _raw_spin_unlock+0x28/0x50 [ 304.606913][ C1] device_initial_probe+0xa1/0xd0 [ 304.611974][ C1] bus_probe_device+0x12a/0x220 [ 304.616855][ C1] device_add+0x7d7/0xb80 [ 304.621214][ C1] usb_new_device+0x9aa/0x1690 [ 304.626111][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 304.631343][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 304.636581][ C1] hub_event+0x28e8/0x4d30 [ 304.641055][ C1] ? __pfx_hub_event+0x10/0x10 [ 304.645852][ C1] ? rcu_is_watching+0x16/0xb0 [ 304.650672][ C1] ? process_scheduled_works+0x97a/0x1630 [ 304.656462][ C1] process_scheduled_works+0xc3d/0x1630 [ 304.662082][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 304.668099][ C1] ? assign_work+0x3cf/0x5d0 [ 304.672746][ C1] worker_thread+0xa47/0xfb0 [ 304.677403][ C1] ? __kthread_parkme+0x71/0x1f0 [ 304.682387][ C1] kthread+0x38b/0x480 [ 304.686486][ C1] ? __pfx_worker_thread+0x10/0x10 [ 304.691625][ C1] ? __pfx_kthread+0x10/0x10 [ 304.696242][ C1] ret_from_fork+0x514/0xb70 [ 304.700853][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 304.705983][ C1] ? __switch_to+0xc89/0x1420 [ 304.710696][ C1] ? __pfx_kthread+0x10/0x10 [ 304.715325][ C1] ret_from_fork_asm+0x1a/0x30 [ 304.720123][ C1] [ 304.723773][ C1] Kernel Offset: disabled [ 304.728119][ C1] Rebooting in 86400 seconds..