last executing test programs: 5m57.185972185s ago: executing program 1 (id=1497): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x13d) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 5m57.011574169s ago: executing program 1 (id=1500): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7d33, 0x0, 0x0, 0x0, 0xfffffffc}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x94) 5m56.825128834s ago: executing program 1 (id=1504): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78) 5m56.467410322s ago: executing program 1 (id=1509): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000002480)=ANY=[@ANYBLOB='volume=00000000000000000062,gid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0xc32, &(0x7f0000000e00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 5m55.933657036s ago: executing program 1 (id=1516): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xee, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f00000000c0)=[{r0, 0x10144}], 0x1, 0x0, 0x0, 0x0) 5m55.330943862s ago: executing program 1 (id=1522): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x90, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0) 5m54.887187173s ago: executing program 32 (id=1522): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x90, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0) 4m43.517003734s ago: executing program 4 (id=2240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 4m43.191514513s ago: executing program 4 (id=2244): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d6d616363656c7469632c00f3e521090fecb1392ab9381bba7764e4a5259780c56cdc6baea985714fce230dd0014e127335d3ac643da0101f59d96258099e72a4fe2397beff5867ae91270ae37f8cf9a15594ab329cf5a13eee62a833fe7a6321308163828e2d047b7af4880596883a5a0d50095a2da26e3e00cce5ed0282640e94813e"], 0x41, 0x5ee, &(0x7f0000001740)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 4m42.788748783s ago: executing program 4 (id=2248): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick=0x700, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0xd3c8, {}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x6}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {0x0, 0xfc}, @connect={{0xfe}, {0x0, 0x5}}}], 0x70) 4m42.554484528s ago: executing program 4 (id=2252): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 4m42.295794465s ago: executing program 4 (id=2253): mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x20031, 0xffffffffffffffff, 0xdd8a4000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) 4m41.839615017s ago: executing program 4 (id=2256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) 4m41.349138779s ago: executing program 33 (id=2256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) 4.967432274s ago: executing program 5 (id=5296): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x556, &(0x7f00000003c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4aa, &(0x7f0000000000)={[{@data_journal}, {@grpjquota, 0x22}, {@data_journal}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@usrjquota}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) 4.400801738s ago: executing program 0 (id=5305): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000008400000025"]) 4.191198233s ago: executing program 0 (id=5307): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000024c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x631c, &(0x7f00000027c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 3.878935611s ago: executing program 5 (id=5308): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)=ANY=[]) 3.623473258s ago: executing program 5 (id=5309): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)={0x14, r1, 0x301, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x40004) 3.378927004s ago: executing program 5 (id=5311): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193) lseek(r0, 0x6, 0x3) 2.509734306s ago: executing program 0 (id=5318): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000040), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.509162821s ago: executing program 3 (id=5324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) 1.470128392s ago: executing program 5 (id=5325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000024000180060005"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1.460337992s ago: executing program 6 (id=5326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2f) 1.277625067s ago: executing program 2 (id=5327): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0xf4, r1, 0xe701ac47a3d23ecd, 0x70bd28, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0xf4}, 0x1, 0x0, 0x0, 0xa00}, 0x8800) 1.090787492s ago: executing program 2 (id=5328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0x5, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0xc0d8) 1.051061043s ago: executing program 6 (id=5329): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 1.036247314s ago: executing program 3 (id=5330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}}, 0x4000000) 853.937098ms ago: executing program 2 (id=5331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) 814.993579ms ago: executing program 6 (id=5332): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, 0x0, 0x0) 765.71427ms ago: executing program 3 (id=5333): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') r1 = openat(r0, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000380), 0xff7f) 640.904253ms ago: executing program 2 (id=5334): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x40, &(0x7f0000000380)=ANY=[@ANYRES16=0x0], 0x5, 0x83a, &(0x7f0000001400)="$eJzs3U9oHFeaAPCvFNmxlcSE7OI1xnEqThZscJSW7CiIwCadVkmupNWt7W4Fm2VJzFo2xnIS7A2sfYjjyy67BMKyhz0mOexl97TMZYaBGZiBmTkNzFznFgjMIZl/zBxmCGioqpYsWWrJdhQ5ZH4/YdWreq/qffW6XV+XmqoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCSxlStNpZEM2/Nn04Ha0x12rOb1C9v7/trJpv0G5EU/2LPnjhQLTrw17eq9xe/jsShau5Q7Ckme+L6Q/sffeGvhoeW198koO02vNHCq9euXzq7uLhwZQcD+Qr8x3fXzP7PSNzhyM5krbzbzmfrM1mad9vp5MRE7dlT0910Om9m3TPdXjabNjpZvdfupEcbx9KxyckTaTZ6pj3fmpmqN7N0uFr4/DPjtdpE+sroXFbvdNutZ18Z7TZO5c1m3popVyyqizbPF2/EV/Ne2svqs2l6/uLiwom1Ie1dF2TRaGzNki+WVs8devrRT9/55HcXF8YHbGDFeG18fGxsfHxsIomIWm341oLnJp97vlYbrt0m1rXY0TctX0PbfASHezfUz//RjDxaMR+nI93wpxFT0Yl2zMatN/Dq+r7l/P+3z/7qp5v1+0GV/2+uiuTQgVszB6PM/4erucOD8n/Vd3J7LF/1z639vxrX4npcirOxGIuxEFdWt3twu/pLti/2obtrP7JF/Uxk0Yo8utGOPGajXi5J+0vSmIyJmIhavB6nYjq6kcZ05NGMLLpxJrrRi6x8RzWiE1nUoxft6EQaR6MRxyKN3TEZk3Ei0shiNM5EO+ajFTMxFfVyK+fjYjnuJ26La/+7b3znws8+/bB8tZYbjW02xO9FlI1+u0mjdclc/ueuRcQPv/yBG7bB0nL+BwAAAL6xkvI79uL8f1c8Xpam82b2D1usNVz8em9nIgQAAAC+rPKb/0PFZFdRejyS4vy/trbR/+26P8EBAAAA2yIpr7FLImIknqhKy5dL1e53bAAAAMD2KL//P1xMRiJu7F1e7PwfAAAAvkFe+1a/cPs99j95pZhNkhiaezD53q+j09mVnPzo9NPJ5XpRUb/8QLVef/LayhZ70weT6N9QsNzWxPD1h4r5RxrZoWT55rlfPFhNPy9/HxxeWX1tHC/1/yKRJEkRwM25gQFUfrNU2dffi5UAyrl4P56s2j15rpqeW66p7ig8Mp03s9FGu/nCWNTr+4Z62eneO29e/Jcod//fW7P7kjh/cXFh9J/eWjxXxlLewPjm5f7+rruPYjEYA2JZ6o9APL7+7sbFpnaVF2L0+x2p+q2t3v+hq/uKwtBd9PmvceThss2RkartyNr931P0OTa6wd4/HFUUhbF1ez68/o1VRXGmP3dbFE9VS586+lQ12SCK8Y2iWD0W46uj6A/C+rHY3S+sjMXS0uZRxKMR8eGTN07/4UftJDuxVRQn7iiKwa8IwP1yvrzrT5GFqnRUZaE/9dNokf87nV27Y03eqVa406NcUvbSf5LPhffX38m/POzfUXYv/HFpk+x2tGpztPo8MXxwTV4pdqiZ1TY4or998e0f94/oJ//3vz/6x8M/+f97zut7lpusfJfy2A8eGooyir397Ha9X9PZlSxveXGhyqofFzMfD+y32xxPio8LD/zz5bdj/9Vr15+5ePnshYULC2+Oj5+YqJ2s1Z5Lkv6Lt1R+YliO9JOQewBYcSQOV4l84DN2BjyFp/wAULZITm52Vv1AJI+tXFJQ5MS3YjHOxfHyaoOIeGLjfkeqdX5ffCo5Hkeqtn/fD/q2s9aRVU94Ob7FuWVxPli1Hd+y7ciqx8vc8jf/+RW+HACwI45skYcH5v9bLZLjm593r8qjtTgex6q2x5YjGJzLI+LFnR0NAPjLkHU+T0Z6/5Z0Ovnc62OTk2P13qks7bQbr6adfGomS/NWL+vEcL01k6VznXav3Wg3i8Jr+VTWTbvzc3PtTi+dbnfSuXY3P10++T3tP/q9m83WW7280Z1rZvVuljbarV690Uun8m4jnZt/uZl3T2WdcuXuXNbIp/NGvZe3W2m3Pd9pZKNp2s2yVQ3zqazVy6fzothK5zr5bL1zMyKa87NZOpV1G518rteuNrjcV96abndmy83+ct/9Hm0A+Hq4eu36pbOLiwtX7qjwXxGxZskv7mStlc7W3Ub43XM7vb8AwOr8/9kjt9dt9cf3xBMAAQAAAAAAAAAAAABgR9zd9X93UNi7vRvcM6Dq7/YtLlxZuhGxvipZWlq6iy72RlF4eHCb5VvIb/NA7Ujh5rZsZyg2GuevTyEZXPXGiy9eGrT6yzcOnBrwlqisLNnyf8pweQvn8lLX9z7b/e0PqqqX7ml3hgZWJYPC+HlE3ENfS8kmbe7fMQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvlzAAAA//9EF20D") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, 0x0, 0x0) 640.313033ms ago: executing program 0 (id=5335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 592.910245ms ago: executing program 3 (id=5336): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0xffff0018) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) 580.791005ms ago: executing program 6 (id=5337): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000300)=[{0x3, 0x5, 0x10, 0x4}, {0x3, 0x5, 0x2, 0x1}, {0x3, 0x1, 0x8, 0xa}, {0x1, 0x80000004, 0x1, 0x9}], 0x10, 0x3}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000001000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000019000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) 566.075775ms ago: executing program 5 (id=5338): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000180)="fbecb183a9cffc0ee5d1d434a494db587414a63ef7fed2175c894997b4760cede524e40ae9a937434e1756f7b60d81a7da87fa2614c509b671a7bf8557275e807e7af1c65c1860dcd7b32c", 0x4b}, {&(0x7f00000009c0)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05fff77a1bd375fa61812e0a3df2dc7fea643e6cf5ef23233fe2b752a206d9be7865e37ef0b528cde3720d51a67f20caab530191c4999991e19a77134546a12da2826d6cfce817d90d90030a9d5d42d262c3f4b20c6cba4c7de319afd9781472fc6bcb6520dd249911", 0x80}, {&(0x7f00000006c0)="8b3e97e66c34520fa8e2a370f6233f47fa505952ceaf6714d4030cf71b06d9c227e92f4a323b6ebf087032d4498fdc03e86e62f25a610270568c2c7147975019b3fa481fe21ab4ed149068e364b45ddd86efa6b28b42f1977be3937c8b1edf121d5defd4180ca936d2169e6734570a3e713fb30c4e18c13d66b17b808cad9e8c9af357cb504fbec0bf4cb07af24b4d49049ad0b80472ce7e307a5b4892afbe4edb5ec566ae52aac0ea58afb19188f9161d0a12fba2e42b9cdbeec498cebe3698e1bdd29ebfbe8237fc0e", 0xca}, {&(0x7f0000000880)="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", 0x10c}], 0x4}}], 0x1, 0x20000000) 359.21952ms ago: executing program 6 (id=5339): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 338.255821ms ago: executing program 0 (id=5340): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x4a1e, &(0x7f0000000280)=ANY=[], 0x2, 0x32e, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}}) 274.956922ms ago: executing program 3 (id=5341): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r1, 0x8, 0x12, 0x3}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x4004000) 261.659673ms ago: executing program 2 (id=5342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r1, 0x331}, 0x14}}, 0x0) 129.946156ms ago: executing program 3 (id=5343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000700)={0x14, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7fd}}, 0x14}}, 0x41090) 126.862346ms ago: executing program 0 (id=5344): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 113.719307ms ago: executing program 6 (id=5345): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0xe0a1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 0s ago: executing program 2 (id=5346): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') r1 = openat(r0, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000380), 0xff7f) kernel console output (not intermixed with test programs): pacity change from 0 to 32768 [ 462.350140][T14117] XFS (loop6): Mounting V5 Filesystem [ 462.436764][T14117] XFS (loop6): Ending clean mount [ 462.780051][T10014] XFS (loop6): Unmounting Filesystem [ 463.377105][T14175] loop5: detected capacity change from 0 to 512 [ 463.518044][T14175] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 463.528430][T14175] ext4 filesystem being mounted at /421/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 463.566216][T14175] EXT4-fs: Cannot change journaled quota options when quota turned on [ 463.605814][ T8079] EXT4-fs (loop5): unmounting filesystem. [ 464.223792][T14167] loop3: detected capacity change from 0 to 32768 [ 464.450778][T14209] loop2: detected capacity change from 0 to 64 [ 465.011412][ T5256] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 465.063307][T14225] loop3: detected capacity change from 0 to 64 [ 465.222324][ T5256] usb 7-1: Using ep0 maxpacket: 16 [ 465.234303][ T5256] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 465.273080][ T5256] usb 7-1: config 0 has no interface number 0 [ 465.303854][ T5256] usb 7-1: config 0 interface 31 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.341551][ T5256] usb 7-1: config 0 interface 31 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.380615][ T5256] usb 7-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 465.420605][ T5256] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.466005][ T5256] usb 7-1: config 0 descriptor?? [ 465.812640][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3947'. [ 465.917930][ T5256] wacom 0003:056A:0084.002E: unknown main item tag 0x0 [ 465.952553][ T5256] wacom 0003:056A:0084.002E: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.6-1/input31 [ 466.135610][ T7] usb 7-1: USB disconnect, device number 7 [ 466.237379][T14246] fido_id[14246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 466.317784][T14250] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3952'. [ 466.542263][T14232] loop3: detected capacity change from 0 to 32768 [ 466.677301][T14232] XFS (loop3): Mounting V5 Filesystem [ 466.802817][T14232] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 466.867185][T14255] loop5: detected capacity change from 0 to 32768 [ 466.886553][T14232] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30 [ 466.895809][T14255] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop5 scanned by syz.5.3954 (14255) [ 466.944791][T14232] XFS (loop3): Ending clean mount [ 466.994326][T14255] BTRFS info (device loop5): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 467.015707][T14255] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 467.091308][T14255] BTRFS info (device loop5): using free space tree [ 467.259966][ T4271] XFS (loop3): Unmounting Filesystem [ 467.393046][T14255] BTRFS info (device loop5): enabling ssd optimizations [ 467.747739][ T8079] BTRFS info (device loop5): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 468.499854][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3970'. [ 468.717323][T14300] loop6: detected capacity change from 0 to 32768 [ 468.721783][ T4260] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 468.831805][T14330] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3976'. [ 468.860338][T14300] XFS (loop6): Mounting V5 Filesystem [ 468.887231][T14334] loop2: detected capacity change from 0 to 4096 [ 468.911354][ T4260] usb 4-1: Using ep0 maxpacket: 16 [ 468.930107][ T4260] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 468.966196][T14300] XFS (loop6): Ending clean mount [ 469.044892][ T4260] usb 4-1: config 0 interface 0 has no altsetting 0 [ 469.071451][T14341] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 469.091171][ T4260] usb 4-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 469.140812][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.183214][T14300] XFS (loop6): Quotacheck needed: Please wait. [ 469.215627][ T4260] usb 4-1: config 0 descriptor?? [ 469.226559][T14334] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 469.288569][T14300] XFS (loop6): Quotacheck: Done. [ 469.563030][T10014] XFS (loop6): Unmounting Filesystem [ 469.615552][T14348] syz.2.3982[14348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.615694][T14348] syz.2.3982[14348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.670592][ T4260] holtek_mouse 0003:04D9:A0C2.002F: hidraw0: USB HID v0.81 Device [HID 04d9:a0c2] on usb-dummy_hcd.3-1/input0 [ 469.877444][ T5223] usb 4-1: USB disconnect, device number 28 [ 470.057298][T14351] fido_id[14351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 470.145318][T14342] loop5: detected capacity change from 0 to 32768 [ 470.179609][T14342] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.3978 (14342) [ 470.244423][T14342] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 470.268579][T14342] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 470.314392][T14342] BTRFS info (device loop5): using free space tree [ 470.399850][T14342] BTRFS info (device loop5): enabling ssd optimizations [ 470.428744][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 470.428759][ T26] audit: type=1800 audit(1785757507.935:244): pid=14342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3978" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 470.535335][T14380] loop2: detected capacity change from 0 to 512 [ 470.546613][T14382] loop3: detected capacity change from 0 to 512 [ 470.566010][T14380] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 470.593768][ T8079] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 470.631615][T14380] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 470.650793][T14382] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 470.782445][T14380] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.3989: bad orphan inode 15 [ 470.799101][T14382] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.3992: bg 0: block 4: invalid block bitmap [ 470.823560][ T4352] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 9 /dev/loop5 scanned by udevd (4352) [ 470.848477][T14380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 470.864861][T14382] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 470.874335][T14382] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3992: invalid indirect mapped block 1 (level 1) [ 470.913641][T14382] EXT4-fs (loop3): 1 truncate cleaned up [ 470.919740][T14382] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 470.949118][T14380] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz.2.3989: bad inode number: 16 [ 471.073681][T14391] EXT4-fs error (device loop2): __ext4_new_inode:1081: comm syz.2.3989: reserved inode found cleared - inode=17 [ 471.194848][T14393] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3994'. [ 471.241349][T14393] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3994'. [ 471.250368][T14393] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3994'. [ 471.294569][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 471.342224][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 471.659632][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3998'. [ 471.877559][T14412] loop5: detected capacity change from 0 to 64 [ 472.565372][T14398] loop6: detected capacity change from 0 to 40427 [ 472.625990][T14398] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 472.676698][T14398] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 472.719020][T14398] F2FS-fs (loop6): invalid crc value [ 472.774321][T14398] F2FS-fs (loop6): Found nat_bits in checkpoint [ 472.997527][T14398] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 473.016238][T14398] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 473.037024][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4019'. [ 473.759040][T14462] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 473.837868][T14462] bridge_slave_0: default FDB implementation only supports local addresses [ 474.009866][T14451] loop5: detected capacity change from 0 to 131072 [ 474.026580][T14451] F2FS-fs (loop5): Invalid log sectors per block(1) log sectorsize(9) [ 474.035165][T14451] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 474.126146][T14451] F2FS-fs (loop5): invalid journal entries nats 0 sits 24 [ 474.134275][T14451] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-22) [ 474.324235][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4028'. [ 474.364467][T14473] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 474.388837][T14475] netlink: 'syz.5.4030': attribute type 1 has an invalid length. [ 475.117942][T14494] netlink: 'syz.6.4038': attribute type 3 has an invalid length. [ 476.089987][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4051'. [ 476.285097][T14526] loop2: detected capacity change from 0 to 512 [ 476.353348][T14526] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.4053: inode has both inline data and extents flags [ 476.411344][T14526] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.4053: couldn't read orphan inode 15 (err -117) [ 476.432524][T14526] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 476.560687][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 476.687961][T14536] netem: change failed [ 476.694729][T14534] loop3: detected capacity change from 0 to 2048 [ 476.797158][T14519] loop6: detected capacity change from 0 to 32768 [ 476.841217][T14519] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.4050 (14519) [ 476.932422][T14519] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 476.984947][T14519] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 477.024914][T14519] BTRFS info (device loop6): force zlib compression, level 3 [ 477.071066][T14519] BTRFS info (device loop6): force clearing of disk cache [ 477.078285][T14519] BTRFS info (device loop6): setting nodatasum [ 477.137650][T14519] BTRFS info (device loop6): allowing degraded mounts [ 477.183358][T14519] BTRFS info (device loop6): enabling disk space caching [ 477.190482][T14519] BTRFS info (device loop6): disk space caching is enabled [ 477.325980][T14558] loop2: detected capacity change from 0 to 2048 [ 477.389790][T14548] loop3: detected capacity change from 0 to 4096 [ 477.401224][T14558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 477.615878][T14548] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 477.630570][T14519] BTRFS info (device loop6): rebuilding free space tree [ 477.657969][T14519] BTRFS info (device loop6): disabling free space tree [ 477.667095][T14519] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 477.677516][T14519] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 477.777399][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 477.969598][T14586] loop2: detected capacity change from 0 to 512 [ 478.084872][T14586] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 478.161746][T14586] ext4 filesystem being mounted at /885/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.354567][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 478.484098][T10014] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 478.798454][T14601] ip_tables: iptables: counters copy to user failed while replacing table [ 479.227018][T14584] loop3: detected capacity change from 0 to 40427 [ 479.269209][T14584] F2FS-fs (loop3): invalid crc value [ 479.319434][T14584] F2FS-fs (loop3): Found nat_bits in checkpoint [ 479.502275][T14584] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 479.539901][T14584] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 479.673346][T14629] loop6: detected capacity change from 0 to 512 [ 479.746795][T14629] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 479.916705][T14629] EXT4-fs (loop6): 1 truncate cleaned up [ 479.941406][T14629] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 480.081948][T14629] EXT4-fs warning (device loop6): ext4_group_extend:1899: can't read last block, resize aborted [ 480.271664][T10014] EXT4-fs (loop6): unmounting filesystem. [ 480.303298][T14646] loop2: detected capacity change from 0 to 4096 [ 480.325913][T14646] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 480.607913][T14655] loop3: detected capacity change from 0 to 2048 [ 480.681713][ T4285] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 480.730348][T14658] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 480.762956][ T4285] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 480.769857][ T4285] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 480.791489][T14655] NILFS (loop3): nilfs_ioctl_move_inode_block: invalid virtual block address (data): ino=6, cno=3, offset=234, blocknr=0, vblocknr=61626 [ 480.816336][T14660] batadv0: Device is already in use. [ 480.871927][T14662] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4105'. [ 480.881489][T14655] NILFS (loop3): error -2 preparing GC: cannot read source blocks [ 480.987713][T14666] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 481.032223][T14666] hpfs: filesystem error: improperly stopped [ 481.038313][T14666] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 481.119442][T14666] hpfs: You really don't want any checks? You are crazy... [ 481.146570][T14666] hpfs: hpfs_map_sector(): read error [ 481.177755][T14666] hpfs: code page support is disabled [ 481.204533][T14666] hpfs: hpfs_map_4sectors(): unaligned read [ 481.210590][T14666] hpfs: hpfs_map_4sectors(): unaligned read [ 481.271115][T14666] hpfs: filesystem error: unable to find root dir [ 481.916917][T14693] set_capacity_and_notify: 1 callbacks suppressed [ 481.916967][T14693] loop3: detected capacity change from 0 to 1024 [ 481.959446][T14693] EXT4-fs: Ignoring removed bh option [ 482.113042][T14693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 482.130822][T14693] ext4 filesystem being mounted at /776/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.271926][ T26] audit: type=1800 audit(1785757519.785:245): pid=14693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4119" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 482.436688][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 482.704413][T14684] loop6: detected capacity change from 0 to 40427 [ 482.755493][T14684] F2FS-fs (loop6): invalid crc value [ 482.779657][T14684] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 482.949941][T14722] loop2: detected capacity change from 0 to 64 [ 482.968642][T14723] loop3: detected capacity change from 0 to 512 [ 483.085449][T14684] F2FS-fs (loop6): recover fsync data on readonly fs [ 483.124263][T14684] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 483.566747][T14706] loop5: detected capacity change from 0 to 40427 [ 483.618203][T14706] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 483.639652][T14706] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 483.689968][T14706] F2FS-fs (loop5): invalid crc value [ 483.730335][T14706] F2FS-fs (loop5): Found nat_bits in checkpoint [ 483.775061][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4140'. [ 483.917641][T14706] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 483.931096][T14706] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 484.325295][T14752] netlink: 'syz.0.4144': attribute type 1 has an invalid length. [ 485.157546][T14770] delete_channel: no stack [ 485.611379][ T27] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 485.681585][T14795] loop3: detected capacity change from 0 to 128 [ 485.759083][T14795] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 485.790788][T14795] ext4 filesystem being mounted at /786/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.829183][T14802] loop5: detected capacity change from 0 to 512 [ 485.835903][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 485.848873][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 485.862552][ T27] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 485.872019][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.932586][ T27] usb 3-1: config 0 descriptor?? [ 485.938330][T14781] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 485.982825][T14802] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.4167: iget: bad i_size value: 38620345925642 [ 486.021749][T14802] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.4167: couldn't read orphan inode 15 (err -117) [ 486.054509][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 486.060480][T14802] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 486.260719][ T8079] EXT4-fs (loop5): unmounting filesystem. [ 486.274024][T14813] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4172'. [ 486.378684][ T27] konepure 0003:1E7D:2DB4.0030: unknown global tag 0xe [ 486.397105][ T27] konepure 0003:1E7D:2DB4.0030: item 0 2 1 14 parsing failed [ 486.412047][ T27] konepure 0003:1E7D:2DB4.0030: parse failed [ 486.428861][ T27] konepure: probe of 0003:1E7D:2DB4.0030 failed with error -22 [ 486.446334][T14816] netlink: 'syz.5.4173': attribute type 8 has an invalid length. [ 486.541588][ T4921] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 486.580173][ T4318] usb 3-1: USB disconnect, device number 22 [ 486.731079][ T4921] usb 4-1: Using ep0 maxpacket: 8 [ 486.738023][ T4921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.756019][ T4921] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 486.767278][ T4921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.798363][ T4921] usb 4-1: config 0 descriptor?? [ 486.814453][ T4921] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 486.834149][T14824] loop6: detected capacity change from 0 to 4096 [ 486.877811][T14824] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 486.906984][T14824] fs-verity (loop6, inode 16): Unknown hash algorithm number: 32 [ 486.947108][T10014] EXT4-fs (loop6): unmounting filesystem. [ 486.959150][T14830] loop5: detected capacity change from 0 to 2048 [ 487.047224][T14833] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 487.198741][T14833] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 487.250413][T14833] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 487.311246][T14833] Remounting filesystem read-only [ 487.317097][T14830] NILFS (loop5): mounting fs with errors [ 487.382332][T14841] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4185'. [ 487.437769][ T4921] gspca_vc032x: reg_r err -71 [ 487.452013][ T4921] vc032x: probe of 4-1:0.0 failed with error -71 [ 487.502789][ T4921] usb 4-1: USB disconnect, device number 29 [ 487.516501][T14833] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 487.557361][T14833] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 487.597412][T14833] Remounting filesystem read-only [ 487.617662][ T8079] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 488.632493][T14873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4201'. [ 488.668973][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4201'. [ 488.718891][T14849] loop5: detected capacity change from 0 to 32768 [ 488.768920][T14849] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.4187 (14849) [ 488.866804][T14849] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 488.919540][T14849] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 488.952610][T14849] BTRFS info (device loop5): force zlib compression, level 3 [ 488.980431][T14849] BTRFS info (device loop5): force clearing of disk cache [ 489.020929][T14849] BTRFS info (device loop5): setting nodatasum [ 489.031228][T14849] BTRFS info (device loop5): allowing degraded mounts [ 489.038078][T14849] BTRFS info (device loop5): enabling disk space caching [ 489.072369][T14849] BTRFS info (device loop5): disk space caching is enabled [ 489.136653][T14883] vivid-003: ================= START STATUS ================= [ 489.218579][T14883] vivid-003: Radio HW Seek Mode: Bounded [ 489.258725][T14883] vivid-003: Radio Programmable HW Seek: false [ 489.276582][T14883] vivid-003: RDS Rx I/O Mode: Block I/O [ 489.292919][T14883] vivid-003: Generate RBDS Instead of RDS: false [ 489.331087][T14883] vivid-003: RDS Reception: true [ 489.338577][T14883] vivid-003: RDS Program Type: 0 inactive [ 489.352467][T14883] vivid-003: RDS PS Name: inactive [ 489.357800][T14883] vivid-003: RDS Radio Text: inactive [ 489.387000][T14849] BTRFS info (device loop5): rebuilding free space tree [ 489.419332][T14883] vivid-003: RDS Traffic Announcement: false inactive [ 489.428997][T14883] vivid-003: RDS Traffic Program: false inactive [ 489.439334][T14883] vivid-003: RDS Music: false inactive [ 489.439715][T14849] BTRFS info (device loop5): disabling free space tree [ 489.445318][T14883] vivid-003: ================== END STATUS ================== [ 489.471287][T14849] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 489.505801][T14849] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 490.031200][ T4315] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 490.231137][ T4315] usb 3-1: Using ep0 maxpacket: 32 [ 490.245119][ T4315] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 490.264551][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.279497][ T4315] usb 3-1: Product: syz [ 490.289509][ T4315] usb 3-1: Manufacturer: syz [ 490.299540][ T4315] usb 3-1: SerialNumber: syz [ 490.325020][ T4315] usb 3-1: config 0 descriptor?? [ 490.329927][ T8079] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 490.361376][ T7781] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 490.377628][ T4315] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 490.395579][ T4315] dvb-usb: bulk message failed: -22 (2/0) [ 490.417690][ T4315] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 490.437993][ T4315] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 490.457099][ T4315] usb 3-1: media controller created [ 490.497361][ T4315] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 490.551366][ T7781] usb 4-1: Using ep0 maxpacket: 32 [ 490.578280][ T7781] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 490.588064][T14918] dvb-usb: bulk message failed: -22 (4/0) [ 490.602618][ T4315] usb 3-1: selecting invalid altsetting 7 [ 490.608546][ T4315] cxusb: set interface failed [ 490.613885][T14918] cxusb: i2c read failed [ 490.618234][ T7781] usb 4-1: config 0 has no interface number 0 [ 490.633561][ T7781] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 490.645892][ T4315] dvb-usb: bulk message failed: -22 (1/0) [ 490.656525][ T7781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.686511][ T7781] usb 4-1: Product: syz [ 490.701127][ T7781] usb 4-1: Manufacturer: syz [ 490.705812][ T7781] usb 4-1: SerialNumber: syz [ 490.732854][ T7781] usb 4-1: config 0 descriptor?? [ 490.761370][ T7781] smsc95xx v2.0.0 [ 490.881317][ T4315] DVB: Unable to find symbol lgdt330x_attach() [ 490.897410][ T4315] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 491.171059][ T4315] rc_core: IR keymap rc-dvico-portable not found [ 491.177696][ T4315] Registered IR keymap rc-empty [ 491.211865][ T4315] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 491.251350][ T4315] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input32 [ 491.310303][ T4315] dvb-usb: schedule remote query interval to 100 msecs. [ 491.354376][ T4315] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 491.365088][ T7781] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 491.406095][ T4315] usb 3-1: USB disconnect, device number 23 [ 491.416133][ T7781] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 491.451198][ T7781] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 491.496414][ T4315] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 491.506944][ T7781] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 491.535034][ T7781] usb 4-1: USB disconnect, device number 30 [ 491.657787][T14966] loop6: detected capacity change from 0 to 16 [ 491.705387][T14966] erofs: (device loop6): mounted with root inode @ nid 36. [ 491.740498][T14968] loop2: detected capacity change from 0 to 512 [ 491.768794][T14968] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 491.833806][T14968] EXT4-fs (loop2): 1 truncate cleaned up [ 491.841266][T14968] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 491.989161][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 492.118012][T14978] loop6: detected capacity change from 0 to 512 [ 492.158802][T14978] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 492.211263][T14978] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 492.278068][T14978] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.4239: Invalid block bitmap block 0 in block_group 0 [ 492.423850][T14978] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 492.424406][T14978] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.4239: attempt to clear invalid blocks 983261 len 1 [ 492.424793][T14978] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz.6.4239: Invalid inode table block 0 in block_group 0 [ 492.429286][T14978] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 492.429621][T14978] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 492.429926][T14978] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz.6.4239: Invalid inode table block 0 in block_group 0 [ 492.430267][T14978] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 492.430676][T14978] EXT4-fs error (device loop6): ext4_truncate:4325: inode #11: comm syz.6.4239: mark_inode_dirty error [ 492.431114][T14978] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 492.432119][T14978] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz.6.4239: Invalid inode table block 0 in block_group 0 [ 492.432521][T14978] EXT4-fs (loop6): 1 truncate cleaned up [ 492.432552][T14978] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 492.575770][T10014] EXT4-fs (loop6): unmounting filesystem. [ 492.969931][T15001] loop2: detected capacity change from 0 to 2048 [ 493.108871][T15001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 493.272129][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 493.332219][T15016] loop3: detected capacity change from 0 to 256 [ 493.352254][T15013] genirq: Flags mismatch irq 4. 00000000 (comedi_parport) vs. 00000000 (ttyS0) [ 493.367074][T15006] loop5: detected capacity change from 0 to 8192 [ 493.426920][T15006] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 493.471441][T15006] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 493.535276][T15016] FAT-fs (loop3): Directory bread(block 64) failed [ 493.592011][T15016] FAT-fs (loop3): Directory bread(block 65) failed [ 493.599099][T15006] REISERFS (device loop5): using ordered data mode [ 493.606509][T15016] FAT-fs (loop3): Directory bread(block 66) failed [ 493.613217][T15006] reiserfs: using flush barriers [ 493.633683][T15016] FAT-fs (loop3): Directory bread(block 67) failed [ 493.640424][T15006] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 493.671554][T15016] FAT-fs (loop3): Directory bread(block 68) failed [ 493.688505][T15016] FAT-fs (loop3): Directory bread(block 69) failed [ 493.701962][T15006] REISERFS (device loop5): checking transaction log (loop5) [ 493.721517][T15016] FAT-fs (loop3): Directory bread(block 70) failed [ 493.728937][T15016] FAT-fs (loop3): Directory bread(block 71) failed [ 493.781760][T15016] FAT-fs (loop3): Directory bread(block 72) failed [ 493.811640][T15016] FAT-fs (loop3): Directory bread(block 73) failed [ 493.922496][T15032] loop2: detected capacity change from 0 to 64 [ 494.059549][T15006] REISERFS (device loop5): Using tea hash to sort names [ 494.101508][T15006] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 494.404752][T15038] loop3: detected capacity change from 0 to 2048 [ 494.427876][T15042] loop2: detected capacity change from 0 to 512 [ 494.486313][T15045] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 494.516754][T15042] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.4268: iget: bad i_size value: 38620345925642 [ 494.568449][T15045] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 494.628955][T15045] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 494.645624][T15042] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.4268: couldn't read orphan inode 15 (err -117) [ 494.669135][T15045] Remounting filesystem read-only [ 494.681535][T15038] NILFS (loop3): mounting fs with errors [ 494.726607][T15042] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 495.229596][T15045] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 495.243831][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 495.297418][T15045] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 495.341140][T15045] Remounting filesystem read-only [ 495.352957][ T4271] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 495.781091][ T4320] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 495.993280][ T4320] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 496.021129][ T4320] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 496.059642][ T4320] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 496.110149][ T4320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.133043][T15060] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 496.311921][T15090] loop2: detected capacity change from 0 to 128 [ 496.508801][ T4381] usb 6-1: USB disconnect, device number 16 [ 496.947534][T15086] loop6: detected capacity change from 0 to 32768 [ 497.000844][T15086] [ 497.000844][T15086] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 497.000844][T15086] [ 497.063790][T15086] find_entry called with index = 0 [ 497.069485][T15086] read_mapping_page failed! [ 497.125392][T15086] ERROR: (device loop6): txCommit: [ 497.125392][T15086] [ 497.127317][T15102] [ 497.127317][T15102] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 497.127317][T15102] [ 497.201034][T15086] ERROR: (device loop6): remounting filesystem as read-only [ 497.209304][T15086] [ 497.209304][T15086] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 497.209304][T15086] [ 497.233477][T15102] [ 497.233477][T15102] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 497.233477][T15102] [ 497.264529][ T7] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 497.408333][T10014] [ 497.408333][T10014] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 497.408333][T10014] [ 497.439812][T10014] [ 497.439812][T10014] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 497.439812][T10014] [ 497.463010][ T7] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 497.487046][ T7] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 497.530256][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 497.550830][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 497.614246][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 497.648471][ T7] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 497.688230][ T7] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 497.717844][ T7] usb 3-1: Product: syz [ 497.722278][ T7] usb 3-1: Manufacturer: syz [ 497.747316][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 497.752826][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 497.797139][ T7] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 497.827608][ T7] cdc_wdm 3-1:1.0: Unknown control protocol [ 497.955678][ T7] usb 3-1: USB disconnect, device number 24 [ 497.995125][T15114] loop6: detected capacity change from 0 to 4096 [ 498.056491][T15116] loop3: detected capacity change from 0 to 128 [ 498.073474][T15117] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 498.090774][T15116] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 498.132281][T15119] futex_wake_op: syz.5.4303 tries to shift op by -1; fix this program [ 498.170201][T15116] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 498.671321][ T4493] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 498.871292][ T4493] usb 6-1: Using ep0 maxpacket: 8 [ 498.878238][ T4493] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 498.914421][ T4493] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 498.938132][ T4493] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.968297][ T4493] usb 6-1: Product: syz [ 498.978288][ T4493] usb 6-1: Manufacturer: syz [ 499.005824][ T4493] usb 6-1: SerialNumber: syz [ 499.032882][ T4493] usb 6-1: config 0 descriptor?? [ 499.045913][ T4493] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 499.079293][ T4493] usb 6-1: setting power ON [ 499.107548][ T4493] dvb-usb: bulk message failed: -22 (2/0) [ 499.134922][ T4493] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 499.167868][ T4493] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 499.195898][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4315'. [ 499.205026][ T4493] usb 6-1: media controller created [ 499.247875][T15124] dvb-usb: bulk message failed: -22 (3/0) [ 499.259759][ T4493] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.276685][T15124] cxusb: i2c wr: len=79 is too big! [ 499.276685][T15124] [ 499.295631][T15151] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4318'. [ 499.316835][ T4493] usb 6-1: selecting invalid altsetting 6 [ 499.324870][ T4493] usb 6-1: digital interface selection failed (-22) [ 499.337336][ T4493] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 499.388211][ T4493] usb 6-1: setting power OFF [ 499.406903][ T4493] dvb-usb: bulk message failed: -22 (2/0) [ 499.418888][ T4493] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 499.464326][ T4493] (NULL device *): no alternate interface [ 499.519374][ T4493] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 499.568776][ T4493] usb 6-1: USB disconnect, device number 17 [ 500.167423][T15178] loop3: detected capacity change from 0 to 128 [ 500.412386][T15187] futex_wake_op: syz.5.4336 tries to shift op by -1; fix this program [ 500.723733][T15191] loop2: detected capacity change from 0 to 8192 [ 501.188635][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.195162][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.525743][T15218] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4350'. [ 501.771659][T15225] netdevsim netdevsim5: Firmware load for '../file0/../file0/../file0' refused, path contains '..' component [ 502.008025][T15235] netlink: 'syz.6.4356': attribute type 1 has an invalid length. [ 502.037074][T15236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4358'. [ 502.262961][T15243] loop2: detected capacity change from 0 to 128 [ 502.291746][T15243] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 502.317333][T15243] hpfs: filesystem error: improperly stopped [ 502.335393][T15243] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 502.352733][T15243] hpfs: You really don't want any checks? You are crazy... [ 502.369153][T15243] hpfs: hpfs_map_sector(): read error [ 502.381501][T15243] hpfs: code page support is disabled [ 502.401790][T15243] hpfs: hpfs_map_4sectors(): unaligned read [ 502.420373][T15243] hpfs: hpfs_map_4sectors(): unaligned read [ 502.439557][T15243] hpfs: filesystem error: unable to find root dir [ 502.507128][T15243] hpfs: hpfs_map_4sectors(): unaligned read [ 502.526792][T15243] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 502.818938][T15246] loop3: detected capacity change from 0 to 8192 [ 502.866544][T15246] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 503.027915][T15242] loop6: detected capacity change from 0 to 32768 [ 503.103488][T15242] (syz.6.4361,15242,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 503.151530][T15242] (syz.6.4361,15242,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 503.276669][T15242] JBD2: Ignoring recovery information on journal [ 503.412343][T15242] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 503.631817][T15269] loop3: detected capacity change from 0 to 1024 [ 503.661402][ T4284] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 503.944284][T10014] ocfs2: Unmounting device (7,6) on (node local) [ 504.039184][T15257] loop5: detected capacity change from 0 to 32768 [ 504.714859][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 504.741216][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 504.771239][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 504.778746][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 504.827714][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 504.851088][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 504.879062][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 504.911782][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 504.919277][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 504.953810][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 504.981239][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.001207][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.008698][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.024095][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4392'. [ 505.041237][T15310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4392'. [ 505.053657][T15306] loop6: detected capacity change from 0 to 4096 [ 505.060660][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.070814][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.101756][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.109273][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.147770][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.168063][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.198552][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.221075][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.228605][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.247705][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.266887][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.281489][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.299289][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.316387][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.331051][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.348856][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.359008][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.379336][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.397321][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.412811][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.430576][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.450845][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.471437][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.478900][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.499958][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.523717][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.544352][T15319] loop3: detected capacity change from 0 to 256 [ 505.547283][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.578905][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.599175][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.608101][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.625869][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.649405][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.688941][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.701577][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.720115][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.740379][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.750532][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.770807][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.780952][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.788828][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.817014][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.835052][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.852802][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.862920][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.879947][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.898157][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.921490][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.929064][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.937141][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.958550][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.966300][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.974458][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.991573][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 505.999574][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.019850][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.027626][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.045023][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.053211][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.071260][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.078738][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.101109][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.114224][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.127681][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.135907][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.149285][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.158476][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.170819][T15332] mkiss: ax0: crc mode is auto. [ 506.170843][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.191138][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.201505][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.210144][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.226278][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.234265][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.242316][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.249957][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.258172][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.266053][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.274114][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.281965][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.289746][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.297839][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.306776][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.314633][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.323183][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.330795][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.340058][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.348180][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.355933][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.364049][ T4493] hid-generic 0000:0000:0004.0031: unknown main item tag 0x0 [ 506.376083][ T4493] hid-generic 0000:0000:0004.0031: hidraw0: HID v0.03 Device [syz0] on syz1 [ 506.503770][T15306] ntfs3: loop6: failed to convert "0080" to cp775 [ 506.538797][T15306] ntfs3: loop6: failed to convert name for inode 1e. [ 506.884461][T15344] netlink: 'syz.6.4407': attribute type 3 has an invalid length. [ 507.148165][T15342] fido_id[15342]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 507.486349][T15335] loop2: detected capacity change from 0 to 32768 [ 507.986951][T15372] hugetlbfs: Bad value for 'size' [ 508.310942][T15354] loop5: detected capacity change from 0 to 32768 [ 509.005136][T15368] loop2: detected capacity change from 0 to 40427 [ 509.038099][T15368] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 509.073586][T15368] F2FS-fs (loop2): invalid crc value [ 509.109482][T15368] F2FS-fs (loop2): Found nat_bits in checkpoint [ 509.223159][T15368] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 509.288725][T15368] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 509.404013][T15368] syz.2.4419: attempt to access beyond end of device [ 509.404013][T15368] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 509.489816][T15385] loop5: detected capacity change from 0 to 32768 [ 509.603897][T15385] JBD2: Ignoring recovery information on journal [ 509.682720][T15385] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 509.704138][T15385] JBD2: bad block at offset 32 [ 509.732314][T15385] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 509.829106][T15385] (syz.5.4427,15385,0):ocfs2_get_block:150 get_block on system inode 0xffff888056a88878 (65) [ 509.949560][T15385] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 510.019542][T15385] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 510.050072][T15385] OCFS2: File system is now read-only. [ 510.080455][T15385] (syz.5.4427,15385,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 510.110829][T15385] (syz.5.4427,15385,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 510.138450][T15406] netem: change failed [ 510.141380][T15385] (syz.5.4427,15385,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 510.150447][T15385] (syz.5.4427,15385,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 510.166142][T15385] (syz.5.4427,15385,0):ocfs2_get_block:162 ERROR: get_blocks() failed, inode: 0xffff888056a88878, block: 0 [ 510.184235][T15385] (syz.5.4427,15385,0):ocfs2_get_block:150 get_block on system inode 0xffff888056a88878 (65) [ 510.199402][T15385] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 510.229755][T15385] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 510.246878][T15385] (syz.5.4427,15385,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 510.255898][T15385] (syz.5.4427,15385,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 510.272584][T15385] (syz.5.4427,15385,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 510.280710][T15385] (syz.5.4427,15385,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 510.296857][T15385] (syz.5.4427,15385,0):ocfs2_get_block:162 ERROR: get_blocks() failed, inode: 0xffff888056a88878, block: 0 [ 510.840354][ T8079] ocfs2: Unmounting device (7,5) on (node local) [ 511.274744][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4443'. [ 511.491137][ T7] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 511.549389][T15434] loop3: detected capacity change from 0 to 128 [ 511.683683][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 511.712107][ T7] usb 3-1: not running at top speed; connect to a high speed hub [ 511.723721][ T7] usb 3-1: config 1 has an invalid interface number: 5 but max is 2 [ 511.741125][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.784045][ T7] usb 3-1: config 1 has no interface number 2 [ 511.790245][ T7] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 511.843150][ T7] usb 3-1: config 1 interface 1 has no altsetting 0 [ 511.871374][ T7] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 511.888342][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.897032][ T7] usb 3-1: Product: syz [ 511.901829][ T7] usb 3-1: Manufacturer: syz [ 511.906477][ T7] usb 3-1: SerialNumber: syz [ 512.117102][T15444] MPI: mpi too large (113288 bits) [ 512.341611][ T7] usb 3-1: selecting invalid altsetting 0 [ 512.449842][T15438] loop6: detected capacity change from 0 to 32768 [ 512.526699][T15456] loop5: detected capacity change from 0 to 256 [ 512.568968][T15456] exfat: Deprecated parameter 'namecase' [ 512.598834][ T7] usb 3-1: USB disconnect, device number 25 [ 512.623367][T15456] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 512.872403][ T4725] udevd[4725]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.968745][T15464] loop5: detected capacity change from 0 to 128 [ 513.043303][T15464] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 513.076965][T15464] hpfs: filesystem error: improperly stopped [ 513.110639][T15464] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 513.151057][T15464] hpfs: You really don't want any checks? You are crazy... [ 513.158756][T15464] hpfs: hpfs_map_sector(): read error [ 513.196749][T15464] hpfs: code page support is disabled [ 513.222425][T15464] hpfs: hpfs_map_4sectors(): unaligned read [ 513.228554][T15464] hpfs: hpfs_map_4sectors(): unaligned read [ 513.271166][T15464] hpfs: filesystem error: unable to find root dir [ 513.671056][ T26] audit: type=1326 audit(1785757551.175:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.0.4472" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31799e019 code=0x7ff00000 [ 513.695219][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.841381][ T26] audit: type=1326 audit(1785757551.175:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.0.4472" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31799e019 code=0x7ff00000 [ 513.933290][ T26] audit: type=1326 audit(1785757551.175:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.0.4472" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31799e019 code=0x7ff00000 [ 514.010671][ T26] audit: type=1326 audit(1785757551.175:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.0.4472" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31799e019 code=0x7ff00000 [ 514.123410][ T26] audit: type=1326 audit(1785757551.175:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.0.4472" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31799e019 code=0x7ff00000 [ 514.180342][ T26] audit: type=1326 audit(1785757551.175:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.0.4472" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31799e019 code=0x7ff00000 [ 514.301425][ T26] audit: type=1326 audit(1785757551.175:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.0.4472" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31799e019 code=0x7ff00000 [ 514.406867][ T26] audit: type=1326 audit(1785757551.175:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.0.4472" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31799e019 code=0x7ff00000 [ 514.511105][ T26] audit: type=1326 audit(1785757551.175:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.0.4472" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31799e019 code=0x7ff00000 [ 514.597408][ T26] audit: type=1326 audit(1785757551.175:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.0.4472" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31799e019 code=0x7ff00000 [ 515.212532][T15539] loop3: detected capacity change from 0 to 256 [ 515.275857][T15539] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 515.304724][T15539] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 516.324219][ T4315] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 516.347625][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4518'. [ 516.545343][ T4315] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.590221][ T4315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 516.620762][ T4315] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 516.656278][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.689904][ T4315] usb 3-1: config 0 descriptor?? [ 517.134949][ T4315] uclogic 0003:28BD:0071.0032: interface is invalid, ignoring [ 517.317573][T15586] loop5: detected capacity change from 0 to 32768 [ 517.348244][ T4315] usb 3-1: USB disconnect, device number 26 [ 517.374310][T15586] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop5 scanned by syz.5.4519 (15586) [ 517.459267][T15586] BTRFS info (device loop5): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 517.482556][T15586] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 517.513691][T15586] BTRFS info (device loop5): using free space tree [ 517.720759][T15586] BTRFS info (device loop5): enabling ssd optimizations [ 517.977458][ T8079] BTRFS info (device loop5): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 518.906759][T15657] mkiss: ax0: crc mode is auto. [ 519.302398][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4550'. [ 519.567578][T15649] loop3: detected capacity change from 0 to 32768 [ 519.618177][T15674] loop6: detected capacity change from 0 to 4096 [ 519.686690][T15674] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 519.724711][T15649] XFS (loop3): Mounting V5 Filesystem [ 519.802611][T15649] XFS (loop3): Ending clean mount [ 520.040588][ T4271] XFS (loop3): Unmounting Filesystem [ 520.425795][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4562'. [ 520.959341][T15714] loop6: detected capacity change from 0 to 24 [ 521.257655][T15720] loop5: detected capacity change from 0 to 512 [ 521.363201][T15720] FAT-fs (loop5): error, corrupted file size (i_pos 51, 9216) [ 521.421476][ T4282] Bluetooth: hci3: command 0x2016 tx timeout [ 522.329327][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 522.329342][ T26] audit: type=1326 audit(1785757559.835:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.6.4587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e819e019 code=0x7ffc0000 [ 522.377808][ T26] audit: type=1326 audit(1785757559.855:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.6.4587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e819e019 code=0x7ffc0000 [ 522.405042][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4588'. [ 522.471409][ T26] audit: type=1326 audit(1785757559.865:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.6.4587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe2e819e019 code=0x7ffc0000 [ 522.512096][ T26] audit: type=1326 audit(1785757559.865:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.6.4587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e819e019 code=0x7ffc0000 [ 522.570605][T15764] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4590'. [ 522.600197][ T26] audit: type=1326 audit(1785757559.865:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.6.4587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e819e019 code=0x7ffc0000 [ 522.685523][ T26] audit: type=1326 audit(1785757559.865:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.6.4587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe2e819e019 code=0x7ffc0000 [ 522.781485][ T26] audit: type=1326 audit(1785757559.865:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.6.4587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e819e019 code=0x7ffc0000 [ 522.881212][ T26] audit: type=1326 audit(1785757559.865:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.6.4587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e819e019 code=0x7ffc0000 [ 522.969479][T15772] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 522.977012][T15772] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 523.020241][T15772] vhci_hcd vhci_hcd.0: Device attached [ 523.211405][ T5223] vhci_hcd: vhci_device speed not set [ 523.238835][T15787] loop6: detected capacity change from 0 to 2048 [ 523.255234][ T4315] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 523.271466][ T4320] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 523.292055][ T5223] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 523.331314][T15788] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 523.461303][ T4320] usb 3-1: Using ep0 maxpacket: 32 [ 523.466644][ T4315] usb 6-1: config 0 has no interfaces? [ 523.474412][ T4320] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 523.481832][ T4315] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 523.491237][ T4320] usb 3-1: config 0 has no interface number 0 [ 523.501338][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 523.514170][ T4320] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 523.525015][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.533439][ T4320] usb 3-1: Product: syz [ 523.537722][ T4320] usb 3-1: Manufacturer: syz [ 523.543043][ T4320] usb 3-1: SerialNumber: syz [ 523.551367][ T4315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.559769][ T4320] usb 3-1: config 0 descriptor?? [ 523.568535][ T4320] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 523.578151][ T4320] usb 3-1: selecting invalid altsetting 1 [ 523.584492][ T4320] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 523.595562][ T4320] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 523.606550][ T4320] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 523.630416][ T4315] usb 6-1: config 0 descriptor?? [ 523.635666][ T4320] usb 3-1: media controller created [ 523.694425][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.887549][T15773] usbip_core: unknown command [ 523.893845][ T4315] usb 6-1: USB disconnect, device number 18 [ 523.900057][T15773] vhci_hcd: unknown pdu 0 [ 523.911452][T15773] usbip_core: unknown command [ 523.944303][ T11] vhci_hcd: stop threads [ 523.952521][ T11] vhci_hcd: release socket [ 523.958656][ T11] vhci_hcd: disconnect device [ 523.995838][T15800] loop6: detected capacity change from 0 to 4096 [ 524.052563][T15800] NILFS (loop6): invalid segment: Checksum error in segment payload [ 524.069236][T15800] NILFS (loop6): trying rollback from an earlier position [ 524.098350][T15800] NILFS (loop6): recovery complete [ 524.108023][T15802] loop3: detected capacity change from 0 to 128 [ 524.141792][T15803] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 524.144949][T15802] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 524.221472][T15802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.505471][T15807] loop3: detected capacity change from 0 to 512 [ 524.573594][T15807] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 524.591385][T15807] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.4609: No space for directory leaf checksum. Please run e2fsck -D. [ 524.608692][T15807] EXT4-fs error (device loop3): ext4_readdir:223: inode #2: comm syz.3.4609: path /886/file2: directory fails checksum at offset 0 [ 524.679893][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 524.781432][ T4320] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 524.792881][ T4320] zl10353_read_register: readreg error (reg=127, ret==-110) [ 524.817044][ T4320] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 524.935089][ T4320] usb 3-1: USB disconnect, device number 27 [ 525.075095][T15825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4615'. [ 525.094548][T15825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4615'. [ 525.125757][T15825] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 525.333354][T15831] loop3: detected capacity change from 0 to 64 [ 525.649572][T15839] device gretap0 entered promiscuous mode [ 525.659091][T15839] device macsec2 entered promiscuous mode [ 525.686583][T15839] device gretap0 left promiscuous mode [ 525.929183][T15845] loop6: detected capacity change from 0 to 16 [ 525.962873][T15845] erofs: (device loop6): mounted with root inode @ nid 36. [ 526.018989][T15845] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 526.094359][T15845] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 526.146926][T15845] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 526.832289][T15875] loop6: detected capacity change from 0 to 256 [ 527.387956][T15862] loop5: detected capacity change from 0 to 32768 [ 527.500564][T15862] XFS (loop5): Mounting V5 Filesystem [ 527.670531][T15862] XFS (loop5): Ending clean mount [ 527.709877][T15903] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 527.747284][T15903] CUSE: unknown device info ">2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0KVÆ,†¹${\d+" [ 527.816120][T15903] CUSE: unknown device info "Ýÿÿÿ" [ 527.830594][T15903] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu GìÂÏǪ|ÜQüUËœDv…F‰Ý,*pá(o9Ð{uáöº[§èµ¨‘²égIÁPÌÍYV" [ 527.842433][ T8079] XFS (loop5): Unmounting Filesystem [ 527.869418][T15903] CUSE: DEVNAME unspecified [ 528.115449][T15888] loop2: detected capacity change from 0 to 32768 [ 528.466582][ T5223] vhci_hcd: vhci_device speed not set [ 529.323400][T15942] loop2: detected capacity change from 0 to 1024 [ 529.330852][T15942] EXT4-fs: Ignoring removed nobh option [ 529.376468][T15943] loop5: detected capacity change from 0 to 4096 [ 529.384463][T15942] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 529.406101][T15943] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 529.428263][T15946] netlink: 'syz.6.4668': attribute type 3 has an invalid length. [ 529.445863][T15942] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 529.445863][T15942] [ 529.467442][T15946] netlink: 'syz.6.4668': attribute type 1 has an invalid length. [ 529.489917][T15946] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.4668'. [ 529.530451][T15943] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 529.624173][T15943] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 529.691415][T15943] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 529.780222][T15943] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 529.811354][T15943] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 529.872934][T15943] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 529.901511][T15943] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 529.943876][T15943] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 529.979971][T15943] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 530.091391][T15943] ntfs: volume version 3.1. [ 530.403907][T15947] loop3: detected capacity change from 0 to 32768 [ 530.463040][T15967] device macsec2 entered promiscuous mode [ 530.981528][T15974] loop6: detected capacity change from 0 to 8192 [ 531.008368][T15982] loop5: detected capacity change from 0 to 1024 [ 531.021988][T15974] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 531.041675][T15974] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 531.053551][T15974] REISERFS (device loop6): using ordered data mode [ 531.060352][T15974] reiserfs: using flush barriers [ 531.070478][T15982] hfsplus: invalid length 62193 has been corrected to 255 [ 531.101861][T15974] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 531.201535][T15974] REISERFS (device loop6): checking transaction log (loop6) [ 531.254231][T15990] netlink: 'syz.5.4688': attribute type 1 has an invalid length. [ 531.317886][T15974] REISERFS (device loop6): Using r5 hash to sort names [ 531.361053][T15974] REISERFS (device loop6): using 3.5.x disk format [ 531.367988][T15974] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 531.462467][T15992] netlink: 'syz.2.4690': attribute type 1 has an invalid length. [ 531.874236][T15977] loop3: detected capacity change from 0 to 32768 [ 531.958513][T15977] JBD2: Ignoring recovery information on journal [ 532.104177][T15977] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 532.150518][T15977] ocfs2: Unmounting device (7,3) on (node local) [ 532.488618][T16017] loop2: detected capacity change from 0 to 164 [ 533.176913][T16037] loop3: detected capacity change from 0 to 1024 [ 533.238748][T16037] EXT4-fs: Ignoring removed nobh option [ 533.251365][T16037] EXT4-fs: Ignoring removed bh option [ 533.276536][T16037] EXT4-fs: Ignoring removed nobh option [ 533.326483][T16037] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 533.519440][T16023] loop2: detected capacity change from 0 to 40427 [ 533.544753][T16023] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 533.598034][T16023] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 533.643016][T16023] F2FS-fs (loop2): invalid crc value [ 533.704598][T16023] F2FS-fs (loop2): Found nat_bits in checkpoint [ 533.709855][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 533.903260][T16023] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 534.178947][ T4285] syz-executor: attempt to access beyond end of device [ 534.178947][ T4285] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 534.307113][T16046] loop6: detected capacity change from 0 to 40427 [ 534.323667][T16046] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 534.354027][T16046] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 534.463854][T16046] F2FS-fs (loop6): Found nat_bits in checkpoint [ 534.663055][T16046] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 534.670178][T16046] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 535.095858][T16080] loop3: detected capacity change from 0 to 1024 [ 535.563993][T16092] loop2: detected capacity change from 0 to 4096 [ 535.711682][T16092] ntfs3: loop2: failed to convert "0080" to cp864 [ 536.366401][T16112] program syz.6.4742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.830889][T16102] loop5: detected capacity change from 0 to 32768 [ 537.015914][T16126] loop3: detected capacity change from 0 to 2048 [ 537.041113][ T5256] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 537.143199][T16126] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 537.211868][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 537.231381][ T5256] usb 3-1: Using ep0 maxpacket: 16 [ 537.238642][ T5256] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 537.249971][ T5256] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 537.261886][ T5256] usb 3-1: config 0 interface 0 has no altsetting 0 [ 537.269539][ T5256] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 537.301826][ T5256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.350636][ T5256] usb 3-1: config 0 descriptor?? [ 537.574607][ T5256] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 [ 537.787154][ T7] usb 3-1: USB disconnect, device number 28 [ 537.791956][ T3623] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 538.079711][T16145] loop3: detected capacity change from 0 to 4096 [ 538.151635][T16151] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 538.280618][T16145] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 538.287071][T16154] loop5: detected capacity change from 0 to 8 [ 538.394507][T16145] Remounting filesystem read-only [ 538.509619][T16139] loop6: detected capacity change from 0 to 32768 [ 538.566587][T16139] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 scanned by syz.6.4755 (16139) [ 538.608293][ T4271] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 538.666541][T16139] BTRFS info (device loop6): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 538.690893][T16139] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 538.766847][T16139] BTRFS info (device loop6): enabling ssd optimizations [ 538.813209][T16139] BTRFS info (device loop6): not using ssd optimizations [ 538.833232][T16139] BTRFS info (device loop6): turning off barriers [ 538.839744][T16139] BTRFS info (device loop6): using free space tree [ 539.075558][T16189] loop5: detected capacity change from 0 to 1024 [ 539.387888][T10014] BTRFS info (device loop6): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 539.943308][T16183] loop3: detected capacity change from 0 to 32768 [ 539.964576][T16183] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4765 (16183) [ 540.067516][T16183] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 540.107608][T16183] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 540.142026][T16183] BTRFS info (device loop3): using free space tree [ 540.162490][ T4352] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop6 scanned by udevd (4352) [ 540.336463][T16183] BTRFS info (device loop3): enabling ssd optimizations [ 540.393594][T16206] loop6: detected capacity change from 0 to 4096 [ 540.415885][T16206] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 540.565814][T16206] ntfs3: loop6: ntfs_evict_inode r=3 failed, -22. [ 540.605409][T16206] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 540.637666][T16206] ntfs3: loop6: ntfs_set_state r=3 failed, -22. [ 540.889704][ T4271] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 541.090150][T16238] loop2: detected capacity change from 0 to 4096 [ 541.362701][T16245] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 542.440498][T16272] loop6: detected capacity change from 0 to 4096 [ 542.555367][T16281] loop2: detected capacity change from 0 to 1024 [ 542.573705][T16272] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 542.622990][T16272] ntfs3: loop6: Failed to load $Extend. [ 543.200277][T16302] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4813'. [ 543.360232][T16306] loop6: detected capacity change from 0 to 512 [ 543.408476][T16306] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 543.421992][ T5256] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 543.461104][T16306] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 543.478149][T16311] loop5: detected capacity change from 0 to 512 [ 543.505284][T16306] System zones: 0-1, 15-15, 18-18, 34-34 [ 543.567227][T16306] EXT4-fs (loop6): orphan cleanup on readonly fs [ 543.586902][T16311] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 543.616506][T16306] __quota_error: 9 callbacks suppressed [ 543.616523][T16306] Quota error (device loop6): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1792). [ 543.651530][ T5256] usb 3-1: Using ep0 maxpacket: 32 [ 543.670718][ T5256] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 543.714731][T16311] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.4818: inode has both inline data and extents flags [ 543.747271][ T5256] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 543.774470][T16306] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 543.802619][T16311] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.4818: couldn't read orphan inode 15 (err -117) [ 543.841067][T16306] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 543.843414][ T5256] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 543.861563][T16311] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 543.861889][T16306] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.4816: bad orphan inode 16 [ 543.876113][ T5256] usb 3-1: Product: syz [ 543.904419][ T5256] usb 3-1: Manufacturer: syz [ 543.909261][ T5256] usb 3-1: SerialNumber: syz [ 543.929940][ T5256] usb 3-1: config 0 descriptor?? [ 543.941452][T16296] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 543.971832][T16306] ext4_test_bit(bit=15, block=18) = 1 [ 543.977295][T16306] is_bad_inode(inode)=0 [ 543.992584][T16306] NEXT_ORPHAN(inode)=0 [ 543.996746][T16306] max_ino=32 [ 543.999987][T16306] i_nlink=2 [ 544.006067][ T5256] hub 3-1:0.0: bad descriptor, ignoring hub [ 544.021509][ T5256] hub: probe of 3-1:0.0 failed with error -5 [ 544.027937][T16306] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 544.107005][T16306] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 544.210711][ T8079] EXT4-fs (loop5): unmounting filesystem. [ 544.225681][T10014] EXT4-fs (loop6): unmounting filesystem. [ 544.355795][ T5221] usb 3-1: USB disconnect, device number 29 [ 544.434961][T16321] loop6: detected capacity change from 0 to 2048 [ 544.463140][T16321] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=2362, location=2362 [ 544.502273][T16321] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 544.537650][T16321] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 544.590772][T16321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.138143][T16339] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 545.240468][T16317] loop3: detected capacity change from 0 to 40427 [ 545.273525][T16317] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 545.280812][T16317] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 545.330129][T16317] F2FS-fs (loop3): invalid crc value [ 545.359994][T16317] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 545.404063][T16342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4832'. [ 545.423630][T16342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4832'. [ 545.618262][T16317] F2FS-fs (loop3): Start checkpoint disabled! [ 545.643728][T16349] loop6: detected capacity change from 0 to 64 [ 545.736488][T16317] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 545.761144][T16317] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 545.967185][T16357] input: syz0 as /devices/virtual/input/input35 [ 546.009637][T16317] F2FS-fs (loop3): Unrecognized mount option "noload" or missing value [ 546.649653][T16372] netlink: 252 bytes leftover after parsing attributes in process `syz.6.4847'. [ 546.680194][T16372] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4847'. [ 546.884382][T16378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4850'. [ 547.624318][T16382] loop2: detected capacity change from 0 to 32768 [ 548.069084][T16386] loop3: detected capacity change from 0 to 40427 [ 548.101238][T16386] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 548.117846][T16386] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 548.157133][T16386] F2FS-fs (loop3): invalid crc value [ 548.167295][T16410] loop6: detected capacity change from 0 to 2048 [ 548.175859][T16386] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 548.241203][T16410] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 548.475814][T16386] F2FS-fs (loop3): Start checkpoint disabled! [ 548.611577][T16386] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 548.618707][T16386] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 548.769948][ T47] kworker/u4:3: attempt to access beyond end of device [ 548.769948][ T47] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 549.333569][T16412] loop2: detected capacity change from 0 to 32768 [ 549.467021][T16412] XFS (loop2): Mounting V5 Filesystem [ 549.521622][T16419] loop5: detected capacity change from 0 to 32768 [ 549.540051][T16419] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.4869 (16419) [ 549.588995][T16419] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 549.635602][T16419] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 549.653444][T16412] XFS (loop2): Ending clean mount [ 549.702183][T16419] BTRFS info (device loop5): using free space tree [ 549.932033][ T4285] XFS (loop2): Unmounting Filesystem [ 549.976300][T16462] loop6: detected capacity change from 0 to 128 [ 550.119675][T16419] BTRFS info (device loop5): enabling ssd optimizations [ 550.516275][T16419] BTRFS info (device loop5): balance: start -susage=7,drange=7..7,vrange=1056968006..2199023255806,limit=9..1,stripes=3..3324 [ 550.647049][T16419] BTRFS info (device loop5): balance: ended with status: 0 [ 550.741723][T16473] loop3: detected capacity change from 0 to 256 [ 550.820114][T16473] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 550.841489][T16473] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 550.898426][T16473] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 550.978238][ T8079] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 551.096016][ T4282] Bluetooth: hci1: hardware error 0x07 [ 551.544116][T16491] netem: change failed [ 552.078965][ T5221] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 552.271077][ T5221] usb 7-1: Using ep0 maxpacket: 16 [ 552.278157][ T5221] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.331504][ T5221] usb 7-1: config 0 has no interfaces? [ 552.337079][ T5221] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 552.386733][ T5221] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.421977][ T5221] usb 7-1: config 0 descriptor?? [ 552.632104][ T5221] usb 7-1: USB disconnect, device number 8 [ 552.724095][T16531] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4908'. [ 552.984202][ T5256] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 553.181632][ T5256] usb 4-1: Using ep0 maxpacket: 16 [ 553.189660][ T5256] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.221165][ T5256] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 553.265016][ T5256] usb 4-1: config 0 interface 0 has no altsetting 0 [ 553.291385][ T5256] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 553.331227][ T5256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.349885][ T5256] usb 4-1: config 0 descriptor?? [ 553.587078][T16537] loop2: detected capacity change from 0 to 32768 [ 553.646475][T16537] JBD2: Ignoring recovery information on journal [ 553.749658][T16537] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 553.787344][ T5256] koneplus 0003:1E7D:2E22.0033: unknown main item tag 0x0 [ 553.801097][ T5256] koneplus 0003:1E7D:2E22.0033: unknown main item tag 0x0 [ 553.818662][ T5256] koneplus 0003:1E7D:2E22.0033: unknown main item tag 0x0 [ 553.841372][ T5256] koneplus 0003:1E7D:2E22.0033: unknown main item tag 0x0 [ 553.881076][ T5256] koneplus 0003:1E7D:2E22.0033: unknown main item tag 0x0 [ 553.888311][ T5256] koneplus 0003:1E7D:2E22.0033: unknown main item tag 0x0 [ 553.931383][ T5256] koneplus 0003:1E7D:2E22.0033: unbalanced collection at end of report description [ 553.971601][ T5256] koneplus 0003:1E7D:2E22.0033: parse failed [ 553.981123][ T4282] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 553.994771][ T5256] koneplus: probe of 0003:1E7D:2E22.0033 failed with error -22 [ 554.005462][ T5256] usb 4-1: USB disconnect, device number 31 [ 554.086522][ T4285] ocfs2: Unmounting device (7,2) on (node local) [ 554.128641][T16549] loop5: detected capacity change from 0 to 32768 [ 554.247037][T16549] XFS (loop5): Mounting V5 Filesystem [ 554.337297][T16549] XFS (loop5): Ending clean mount [ 554.395472][ T26] audit: type=1800 audit(1785757591.905:321): pid=16549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4916" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 554.543583][ T8079] XFS (loop5): Unmounting Filesystem [ 554.871158][ T4315] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 555.075021][ T4315] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 555.093492][ T4315] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 555.114755][ T4315] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 555.126570][ T4315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.156312][T16579] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 555.219611][T16598] loop9: detected capacity change from 0 to 524287935 [ 555.483201][ T5256] usb 7-1: USB disconnect, device number 9 [ 555.608351][T16607] loop5: detected capacity change from 0 to 2048 [ 555.646245][T16607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 555.678566][T16607] netlink: 'syz.5.4940': attribute type 1 has an invalid length. [ 555.693057][T16607] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4940'. [ 556.101641][T16618] team0: Device ipvlan0 failed to register rx_handler [ 556.270775][T16621] loop5: detected capacity change from 0 to 4096 [ 556.358032][T16621] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 556.369312][T16626] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 556.425273][T16621] NILFS (loop5): mounting fs with errors [ 556.448332][T16628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4950'. [ 556.562135][T16630] loop6: detected capacity change from 0 to 1024 [ 556.796089][T16635] loop2: detected capacity change from 0 to 2048 [ 556.855266][T16635] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 556.890632][T16639] loop3: detected capacity change from 0 to 1024 [ 556.954669][T16640] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 557.047020][T16642] batman_adv: batadv0: Adding interface: ip6gretap1 [ 557.081133][T16642] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.178807][T16642] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 557.520048][T16652] loop5: detected capacity change from 0 to 4096 [ 557.574108][T16660] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 557.718415][T16662] loop6: detected capacity change from 0 to 16 [ 557.747803][T16662] erofs: (device loop6): mounted with root inode @ nid 36. [ 557.787230][T16662] syz.6.4965: attempt to access beyond end of device [ 557.787230][T16662] loop6: rw=524288, sector=7864328, nr_sectors = 8 limit=16 [ 557.858766][T16662] syz.6.4965: attempt to access beyond end of device [ 557.858766][T16662] loop6: rw=0, sector=7864328, nr_sectors = 8 limit=16 [ 557.873860][T16666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4967'. [ 557.901404][T16666] block nbd0: Unsupported socket: should be TCP or UNIX. [ 557.921442][ T26] audit: type=1800 audit(1785757595.435:322): pid=16662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4965" name="file3" dev="loop6" ino=89 res=0 errno=0 [ 558.337881][T16678] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 558.470379][T16678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 558.874208][T16698] netlink: 'syz.6.4983': attribute type 1 has an invalid length. [ 559.131089][ T4493] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 559.332843][ T4493] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 559.344167][ T4493] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 559.356586][ T4493] usb 6-1: config 0 interface 0 has no altsetting 0 [ 559.365626][ T4493] usb 6-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 559.377669][ T4493] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.388058][ T4493] usb 6-1: config 0 descriptor?? [ 559.394198][T16700] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 559.824021][ T4493] kye 0003:0458:501A.0034: unknown main item tag 0x3 [ 559.830866][ T4493] kye 0003:0458:501A.0034: item 0 0 0 8 parsing failed [ 559.869573][ T4493] kye 0003:0458:501A.0034: parse failed [ 559.876959][ T4493] kye: probe of 0003:0458:501A.0034 failed with error -22 [ 559.940270][T16707] set_capacity_and_notify: 1 callbacks suppressed [ 559.940287][T16707] loop6: detected capacity change from 0 to 32768 [ 559.970662][T16707] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.4987 (16707) [ 560.029837][T16709] loop3: detected capacity change from 0 to 32768 [ 560.034355][ T4493] usb 6-1: USB disconnect, device number 19 [ 560.036748][ T4260] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 560.057621][T16707] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 560.117152][T16707] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 560.146430][T16707] BTRFS info (device loop6): using free space tree [ 560.281078][ T4260] usb 3-1: Using ep0 maxpacket: 8 [ 560.288588][ T4260] usb 3-1: config 0 interface 0 altsetting 240 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 560.321166][T16707] BTRFS info (device loop6): enabling ssd optimizations [ 560.358696][T16737] device bridge0 entered promiscuous mode [ 560.366268][ T4260] usb 3-1: config 0 interface 0 altsetting 240 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.429023][ T4260] usb 3-1: config 0 interface 0 has no altsetting 0 [ 560.443404][ T4260] usb 3-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 560.482328][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.515558][T10014] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 560.529947][ T4260] usb 3-1: config 0 descriptor?? [ 560.986828][ T4260] hid (null): unknown global tag 0xe [ 561.023260][ T4260] logitech-hidpp-device 0003:046D:C081.0035: unknown main item tag 0x3 [ 561.056119][ T4260] logitech-hidpp-device 0003:046D:C081.0035: unknown global tag 0xe [ 561.097885][ T4260] logitech-hidpp-device 0003:046D:C081.0035: item 0 2 1 14 parsing failed [ 561.138865][ T4260] logitech-hidpp-device 0003:046D:C081.0035: hidpp_probe:parse failed [ 561.173720][ T4260] logitech-hidpp-device: probe of 0003:046D:C081.0035 failed with error -22 [ 561.261122][ T4260] usb 3-1: USB disconnect, device number 30 [ 562.202271][T16761] loop5: detected capacity change from 0 to 32768 [ 562.230906][T16759] loop6: detected capacity change from 0 to 32768 [ 562.279631][T16761] JBD2: Ignoring recovery information on journal [ 562.369282][T16761] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 562.391989][T16759] XFS (loop6): Mounting V5 Filesystem [ 562.482614][T16759] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 562.513315][T16759] XFS (loop6): Starting recovery (logdev: internal) [ 562.579821][T16759] XFS (loop6): Ending recovery (logdev: internal) [ 562.624780][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.631259][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.720289][ T8079] ocfs2: Unmounting device (7,5) on (node local) [ 562.727266][T10014] XFS (loop6): Unmounting Filesystem [ 563.137176][T16790] loop5: detected capacity change from 0 to 4096 [ 563.175839][T16790] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 563.205693][T16792] loop3: detected capacity change from 0 to 1764 [ 563.289289][T16790] ntfs: volume version 3.1. [ 563.859536][T16806] loop6: detected capacity change from 0 to 256 [ 563.921345][T16806] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 564.145463][ T5256] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 564.154929][T16810] loop5: detected capacity change from 0 to 8192 [ 564.198799][T16816] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5025'. [ 564.341031][ T5256] usb 4-1: Using ep0 maxpacket: 16 [ 564.348391][ T5256] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 564.373197][ T5256] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 564.387813][ T5256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.432379][ T5256] usb 4-1: config 0 descriptor?? [ 564.442013][ T4320] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 564.683208][ T4320] usb 3-1: config 0 interface 0 has no altsetting 0 [ 564.699556][ T4320] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 564.729919][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.747250][ T4320] usb 3-1: config 0 descriptor?? [ 564.851896][ T5256] hid-led 0003:0FC5:B080.0036: unknown main item tag 0xd [ 564.870470][ T5256] hid-led 0003:0FC5:B080.0036: unknown main item tag 0x0 [ 564.882377][ T5256] hid-led 0003:0FC5:B080.0036: unknown main item tag 0x0 [ 564.889709][ T5256] hid-led 0003:0FC5:B080.0036: unknown main item tag 0x0 [ 564.931119][ T5256] hid-led 0003:0FC5:B080.0036: unknown main item tag 0x0 [ 564.938452][ T5256] hid-led 0003:0FC5:B080.0036: unknown main item tag 0x0 [ 564.953569][ T5256] hid-led 0003:0FC5:B080.0036: unknown main item tag 0x0 [ 565.048873][ T5256] hid-led: probe of 0003:0FC5:B080.0036 failed with error -71 [ 565.084912][ T5256] usb 4-1: USB disconnect, device number 32 [ 565.193192][ T4320] holtek 0003:1241:5015.0037: unknown main item tag 0x0 [ 565.221721][ T4320] holtek 0003:1241:5015.0037: unknown main item tag 0x6 [ 565.228783][ T4320] holtek 0003:1241:5015.0037: unknown main item tag 0x1 [ 565.242333][ T4320] holtek 0003:1241:5015.0037: unexpected long global item [ 565.250263][ T4320] holtek 0003:1241:5015.0037: parse failed [ 565.262617][ T4320] holtek: probe of 0003:1241:5015.0037 failed with error -22 [ 565.408000][ T4260] usb 3-1: USB disconnect, device number 31 [ 565.560513][T16830] loop5: detected capacity change from 0 to 32768 [ 566.108477][T16852] tipc: Started in network mode [ 566.118765][T16852] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 566.129114][T16852] tipc: Enabled bearer , priority 10 [ 566.336584][T16859] loop6: detected capacity change from 0 to 1024 [ 566.409034][T16859] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 566.423861][T16859] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.591616][T10014] EXT4-fs (loop6): unmounting filesystem. [ 566.742446][T16874] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 567.242257][ T4260] tipc: Node number set to 9480874 [ 567.316286][ T26] audit: type=1326 audit(1785757604.825:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16889 comm="syz.6.5057" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2e819e019 code=0x0 [ 567.769579][T16882] loop3: detected capacity change from 0 to 32768 [ 567.893880][T16882] XFS (loop3): Mounting V5 Filesystem [ 567.979291][T16882] XFS (loop3): Ending clean mount [ 567.989587][T16910] loop5: detected capacity change from 0 to 2048 [ 568.022651][T16882] XFS (loop3): Quotacheck needed: Please wait. [ 568.066391][T16910] loop5: p3 p4 < > [ 568.079716][T16910] loop5: p3 start 4284289 is beyond EOD, truncated [ 568.208146][T16882] XFS (loop3): Quotacheck: Done. [ 568.394052][T16924] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5069'. [ 568.414052][ T4271] XFS (loop3): Unmounting Filesystem [ 568.425292][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5069'. [ 568.498268][T16925] loop6: detected capacity change from 0 to 2048 [ 568.521622][T16925] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 568.567567][T16925] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.728555][T10014] EXT4-fs (loop6): unmounting filesystem. [ 568.888274][T16944] loop6: detected capacity change from 0 to 128 [ 568.939969][T16944] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 568.979095][T16944] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 569.085099][T16948] loop2: detected capacity change from 0 to 64 [ 569.128198][T16948] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 569.273426][T16952] loop6: detected capacity change from 0 to 128 [ 569.322233][T16952] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 569.386322][T16952] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 569.467126][T16952] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 569.742524][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5084'. [ 569.769053][T16960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5084'. [ 569.778222][T16960] netlink: 'syz.2.5084': attribute type 7 has an invalid length. [ 569.844157][T16959] loop5: detected capacity change from 0 to 4096 [ 569.883192][T16959] EXT4-fs: inline encryption not supported [ 569.917270][T16959] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 569.948721][T16959] EXT4-fs (loop5): Test dummy encryption mode enabled [ 570.007316][T16959] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 570.057563][T16959] System zones: 0-5 [ 570.087580][T16959] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 570.269619][ T8079] EXT4-fs (loop5): unmounting filesystem. [ 570.517686][T16982] loop3: detected capacity change from 0 to 512 [ 570.575888][T16985] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5094'. [ 570.584166][T16982] EXT4-fs: Ignoring removed nobh option [ 570.629711][T16982] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 570.661841][T16982] EXT4-fs (loop3): 1 truncate cleaned up [ 570.667565][T16982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 570.796106][T16992] binder: binder_mmap: 16991 0-1000 bad vm_flags failed -1 [ 570.834047][T16982] EXT4-fs (loop3): resizing filesystem from 256 to 2 blocks [ 570.881125][T16982] EXT4-fs warning (device loop3): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 570.959886][T16996] loop5: detected capacity change from 0 to 764 [ 571.011957][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 571.018952][T16996] rock: directory entry would overflow storage [ 571.046308][T16996] rock: sig=0x4654, size=5, remaining=4 [ 571.431895][ T26] audit: type=1326 audit(1785757608.945:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.3.5107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73ab9e019 code=0x7ffc0000 [ 571.528782][ T26] audit: type=1326 audit(1785757608.965:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.3.5107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73ab9e019 code=0x7ffc0000 [ 571.574452][ T26] audit: type=1326 audit(1785757608.965:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.3.5107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7ff73ab9e019 code=0x7ffc0000 [ 571.682394][ T26] audit: type=1326 audit(1785757608.975:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.3.5107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73ab9e019 code=0x7ffc0000 [ 571.766152][ T26] audit: type=1326 audit(1785757608.975:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.3.5107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73ab9e019 code=0x7ffc0000 [ 571.976176][T17030] loop3: detected capacity change from 0 to 512 [ 572.006225][T17030] EXT4-fs (loop3): Test dummy encryption mode enabled [ 572.018754][T17030] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 572.038247][T17030] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.5114: bad orphan inode 131083 [ 572.056513][T17030] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 572.475783][T17030] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 572.685871][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 572.998041][T17059] loop2: detected capacity change from 0 to 256 [ 573.325165][T17070] loop2: detected capacity change from 0 to 128 [ 573.518415][T17074] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 573.568127][T17074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 573.615243][T17074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 573.836588][T17086] loop2: detected capacity change from 0 to 256 [ 573.893679][T17086] exfat: Deprecated parameter 'utf8' [ 573.971638][T17086] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x58d80169, utbl_chksum : 0xe619d30d) [ 574.218406][T17097] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5145'. [ 574.404892][T17102] block nbd2: shutting down sockets [ 574.716582][T17119] loop6: detected capacity change from 0 to 512 [ 574.734182][T17119] EXT4-fs (loop6): orphan cleanup on readonly fs [ 574.735534][T17119] EXT4-fs (loop6): 1 orphan inode deleted [ 574.735565][T17119] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 574.756288][T17116] loop3: detected capacity change from 0 to 4096 [ 574.812841][T17119] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 574.819716][T17119] ext4 filesystem being remounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.838983][T17116] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 574.941443][T17116] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz.3.5155: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 574.960741][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.052421][T17116] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.5155: directory missing '..' [ 575.103905][T10014] EXT4-fs (loop6): unmounting filesystem. [ 575.119565][T17115] loop5: detected capacity change from 0 to 8192 [ 575.295550][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 575.718638][T17142] loop6: detected capacity change from 0 to 256 [ 575.857282][T17144] loop2: detected capacity change from 0 to 2048 [ 575.939139][T17144] NILFS (loop2): invalid segment: Magic number mismatch [ 575.976897][T17144] NILFS (loop2): trying rollback from an earlier position [ 576.101636][T17144] NILFS (loop2): recovery complete [ 576.125169][T17155] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 576.213990][T17144] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 576.326625][T17157] loop3: detected capacity change from 0 to 2048 [ 576.444098][T17157] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 576.555604][T17157] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 576.608109][T17157] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 576.660070][T17157] EXT4-fs (loop3): can't enable nombcache during remount [ 576.799335][T17176] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 576.807182][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 576.823423][T17178] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 576.824004][T17176] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 577.027125][T17183] loop5: detected capacity change from 0 to 512 [ 577.087942][T17183] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 577.131408][T17183] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 577.183751][T17183] EXT4-fs (loop5): orphan cleanup on readonly fs [ 577.215952][T17183] Quota error (device loop5): v2_read_file_info: Block with free entry 5 out of range (1, 5). [ 577.226575][T17183] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 577.242146][T17183] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 577.250445][T17183] EXT4-fs error (device loop5): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 577.271426][T17183] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.5181: corrupted inode contents [ 577.338380][T17183] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #12: comm syz.5.5181: mark_inode_dirty error [ 577.436472][T17183] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.5181: corrupted inode contents [ 577.476481][T17183] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #12: comm syz.5.5181: mark_inode_dirty error [ 577.537666][T17198] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5188'. [ 577.561264][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5188'. [ 577.570286][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5188'. [ 577.579933][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.597264][T17183] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.5181: corrupted inode contents [ 577.633243][T17183] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 577.657497][T17183] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.5181: corrupted inode contents [ 577.698098][T17183] EXT4-fs error (device loop5): ext4_truncate:4325: inode #12: comm syz.5.5181: mark_inode_dirty error [ 577.755963][T17183] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 577.811051][T17183] EXT4-fs (loop5): 1 truncate cleaned up [ 577.816795][T17183] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 577.889238][T17208] loop2: detected capacity change from 0 to 256 [ 577.963741][T17208] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 578.191776][ T8079] EXT4-fs (loop5): unmounting filesystem. [ 578.342085][T17219] loop5: detected capacity change from 0 to 256 [ 578.418298][T17219] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 578.478328][T17219] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008) [ 578.517516][T17219] exFAT-fs (loop5): error, failed to bmap (inode : ffff888056a86960 iblock : 8, err : -5) [ 578.551154][T17219] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008) [ 578.674845][T17228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5203'. [ 578.721838][T17230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5204'. [ 579.251570][T17245] sg_write: data in/out 49388/4287 bytes for SCSI command 0x0-- guessing data in; [ 579.251570][T17245] program syz.6.5211 not setting count and/or reply_len properly [ 579.558563][T17261] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5217'. [ 579.709672][T17265] program syz.0.5220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 579.976697][T17280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 579.986771][T17280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 579.999490][T17280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 580.304295][ T26] audit: type=1326 audit(1785757617.815:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.3.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73ab9e019 code=0x7ffc0000 [ 580.384080][ T26] audit: type=1326 audit(1785757617.835:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.3.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73ab9e019 code=0x7ffc0000 [ 580.491032][ T26] audit: type=1326 audit(1785757617.835:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.3.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73ab9e019 code=0x7ffc0000 [ 580.515154][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.531335][ T7] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 580.600072][ T26] audit: type=1326 audit(1785757617.835:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.3.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73ab9e019 code=0x7ffc0000 [ 580.675656][ T26] audit: type=1326 audit(1785757617.835:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.3.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7ff73ab9e019 code=0x7ffc0000 [ 580.733286][ T7] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 580.752804][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.785495][ T26] audit: type=1326 audit(1785757617.835:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.3.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73ab9e019 code=0x7ffc0000 [ 580.809701][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.822583][ T7] usb 3-1: config 0 descriptor?? [ 580.852329][ T7] cp210x 3-1:0.0: cp210x converter detected [ 580.885959][T17306] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5238'. [ 580.921190][ T26] audit: type=1326 audit(1785757617.835:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.3.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73ab9e019 code=0x7ffc0000 [ 580.945341][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.036588][ T26] audit: type=1326 audit(1785757617.845:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.3.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73ab9e019 code=0x7ffc0000 [ 581.060763][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.131066][ T26] audit: type=1326 audit(1785757617.845:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.3.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73ab9e019 code=0x7ffc0000 [ 581.438610][ T7] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 581.452886][ T7] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 581.471360][ T7] usb 3-1: cp210x converter now attached to ttyUSB0 [ 581.491369][ T7] usb 3-1: USB disconnect, device number 32 [ 581.512240][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 581.520550][ T7] cp210x 3-1:0.0: device disconnected [ 581.650184][T17301] loop3: detected capacity change from 0 to 32768 [ 581.689182][T17301] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.5235 (17301) [ 581.748668][T17301] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 581.793753][T17301] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 581.807782][T17301] BTRFS info (device loop3): using free space tree [ 581.894411][T17301] BTRFS info (device loop3): enabling ssd optimizations [ 582.059581][T17348] loop6: detected capacity change from 0 to 512 [ 582.067915][ T4271] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 582.132965][ T4921] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 582.201660][T17355] loop2: detected capacity change from 0 to 64 [ 582.217462][T17355] MINIX-fs: mounting file system with errors, running fsck is recommended [ 582.228863][T17348] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 582.326415][T17355] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 582.356633][ T4921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.367591][T17348] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 582.374525][ T4921] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 582.389487][ T4921] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 582.431066][ T4921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.679154][T10014] EXT4-fs (loop6): unmounting filesystem. [ 582.716618][ T4921] ttusb-dec: probe of 6-1:1.0 failed with error -2 [ 582.848164][T17364] loop6: detected capacity change from 0 to 128 [ 582.895687][ T4921] usb 6-1: USB disconnect, device number 20 [ 582.943317][T17364] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 582.963934][T17364] FAT-fs (loop6): Filesystem has been set read-only [ 582.988180][T17367] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 583.556955][T17388] loop2: detected capacity change from 0 to 512 [ 583.593923][T17388] EXT4-fs (loop2): Test dummy encryption mode enabled [ 583.630253][T17388] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 583.717557][T17388] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.5263: bad orphan inode 16 [ 583.749909][T17395] loop5: detected capacity change from 0 to 64 [ 583.765906][T17388] ext4_test_bit(bit=15, block=4) = 0 [ 583.773705][T17388] EXT4-fs (loop2): 1 orphan inode deleted [ 583.779694][T17388] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 583.934876][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 584.011038][ T7] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 584.108319][T17400] loop5: detected capacity change from 0 to 128 [ 584.134000][T17400] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 584.204212][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 584.219283][ T7] usb 7-1: config 0 has an invalid interface number: 49 but max is 0 [ 584.261955][ T7] usb 7-1: config 0 has no interface number 0 [ 584.290435][ T7] usb 7-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 584.331048][ T7] usb 7-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid maxpacket 19192, setting to 1024 [ 584.366966][ T7] usb 7-1: config 0 interface 49 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 584.394138][T17404] loop5: detected capacity change from 0 to 512 [ 584.420525][ T7] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 584.446814][T17404] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 584.454226][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.464164][ T7] usb 7-1: Product: syz [ 584.468371][ T7] usb 7-1: Manufacturer: syz [ 584.482035][T17404] ext4 filesystem being mounted at /664/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.484919][ T7] usb 7-1: SerialNumber: syz [ 584.534015][ T7] usb 7-1: config 0 descriptor?? [ 584.549363][T17396] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 584.560582][ T8079] EXT4-fs (loop5): unmounting filesystem. [ 584.561498][T17396] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 584.824943][ T7] usb 7-1: USB disconnect, device number 10 [ 585.574458][T17441] loop6: detected capacity change from 0 to 1024 [ 585.583768][T17441] EXT4-fs: Ignoring removed orlov option [ 585.590198][T17441] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 585.655464][T17441] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 585.690703][T17445] binder: 17444:17445 ioctl c0306201 200000000100 returned -14 [ 585.901870][T10014] EXT4-fs (loop6): unmounting filesystem. [ 585.964768][T17447] CUSE: zero length info key specified [ 585.974506][T17434] loop2: detected capacity change from 0 to 40427 [ 586.021582][T17434] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 586.034756][T17434] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 586.068351][T17434] F2FS-fs (loop2): invalid crc value [ 586.114002][T17434] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 586.138772][T17455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5293'. [ 586.324187][T17434] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 586.344125][T17434] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 586.369289][T17460] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 586.512351][T17466] EXT4-fs: Ignoring removed bh option [ 586.559096][T17466] EXT4-fs: inline encryption not supported [ 586.632573][T17466] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 586.695196][T17466] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 586.831415][T17466] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5296: bg 0: block 248: padding at end of block bitmap is not set [ 586.885643][T17466] __quota_error: 5 callbacks suppressed [ 586.885663][T17466] Quota error (device loop5): write_blk: dquota write failed [ 586.911180][T17466] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 586.931167][T17466] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.5296: Failed to acquire dquot type 1 [ 586.946311][T17480] program syz.0.5305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 587.035262][T17466] EXT4-fs (loop5): 1 truncate cleaned up [ 587.045197][T17466] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 587.153509][T17466] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 587.211386][T17466] EXT4-fs: Cannot change journaled quota options when quota turned on [ 587.337703][ T8079] EXT4-fs (loop5): unmounting filesystem. [ 587.748409][T17472] set_capacity_and_notify: 1 callbacks suppressed [ 587.748426][T17472] loop3: detected capacity change from 0 to 32768 [ 587.849857][T17472] XFS (loop3): Mounting V5 Filesystem [ 587.933567][T17482] loop6: detected capacity change from 0 to 32768 [ 588.073400][T17482] JBD2: Ignoring recovery information on journal [ 588.094393][T17472] XFS (loop3): Ending clean mount [ 588.237068][T17482] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 588.309270][ T26] audit: type=1800 audit(1785757625.815:343): pid=17482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5306" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 588.394679][ T4271] XFS (loop3): Unmounting Filesystem [ 588.502962][T10014] ocfs2: Unmounting device (7,6) on (node local) [ 588.796951][T17515] loop2: detected capacity change from 0 to 512 [ 588.874816][T17515] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 588.966316][T17515] EXT4-fs (loop2): 1 truncate cleaned up [ 589.025668][T17515] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 589.217257][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 589.317182][T17505] loop5: detected capacity change from 0 to 32768 [ 589.471897][T17505] XFS (loop5): Mounting V5 Filesystem [ 589.587360][T17505] XFS (loop5): Ending clean mount [ 589.789433][ T8079] XFS (loop5): Unmounting Filesystem [ 589.897747][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5324'. [ 589.960246][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5324'. [ 590.002124][T17546] netlink: 'syz.3.5324': attribute type 12 has an invalid length. [ 590.037628][T17546] netlink: 'syz.3.5324': attribute type 11 has an invalid length. [ 590.563667][T17558] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5325'. [ 590.780349][T17564] loop2: detected capacity change from 0 to 764 [ 590.827212][T17564] rock: directory entry would overflow storage [ 590.861462][T17564] rock: sig=0x4654, size=5, remaining=4 [ 591.224799][T17583] [ 591.227211][T17583] ====================================================== [ 591.234259][T17583] WARNING: possible circular locking dependency detected [ 591.241526][T17583] syzkaller #0 Not tainted [ 591.246012][T17583] ------------------------------------------------------ [ 591.253076][T17583] syz.3.5343/17583 is trying to acquire lock: [ 591.259178][T17583] ffff8880290af6b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_dumpreset_obj+0x6e/0x90 [ 591.269691][T17583] [ 591.269691][T17583] but task is already holding lock: [ 591.277095][T17583] ffff88807cbc0698 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0x11e/0x6f0 [ 591.287551][T17583] [ 591.287551][T17583] which lock already depends on the new lock. [ 591.287551][T17583] [ 591.297993][T17583] [ 591.297993][T17583] the existing dependency chain (in reverse order) is: [ 591.307026][T17583] [ 591.307026][T17583] -> #2 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 591.315311][T17583] __mutex_lock+0x12d/0xae0 [ 591.320439][T17583] __netlink_dump_start+0x11e/0x6f0 [ 591.326188][T17583] ip_set_dump+0x152/0x1e0 [ 591.331226][T17583] nfnetlink_rcv_msg+0xcab/0x1290 [ 591.336836][T17583] netlink_rcv_skb+0x1ef/0x440 [ 591.342168][T17583] nfnetlink_rcv+0x2b0/0x2470 [ 591.347392][T17583] netlink_unicast+0x7ad/0x920 [ 591.352703][T17583] netlink_sendmsg+0x8ad/0xbd0 [ 591.358013][T17583] ____sys_sendmsg+0x5ed/0x9a0 [ 591.363395][T17583] ___sys_sendmsg+0x2a2/0x360 [ 591.368648][T17583] __se_sys_sendmsg+0x1c3/0x2b0 [ 591.374048][T17583] do_syscall_64+0x4c/0xa0 [ 591.379117][T17583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.385592][T17583] [ 591.385592][T17583] -> #1 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 591.393439][T17583] __mutex_lock+0x12d/0xae0 [ 591.398486][T17583] ip_set_nfnl_get_byindex+0x63/0x230 [ 591.404411][T17583] set_target_v1_checkentry+0x88/0x4f0 [ 591.410468][T17583] xt_check_target+0x49d/0xbf0 [ 591.415777][T17583] nft_target_init+0x678/0x9c0 [ 591.421117][T17583] nf_tables_newrule+0x170a/0x2810 [ 591.426769][T17583] nfnetlink_rcv+0x1119/0x2470 [ 591.432078][T17583] netlink_unicast+0x7ad/0x920 [ 591.437388][T17583] netlink_sendmsg+0x8ad/0xbd0 [ 591.442694][T17583] ____sys_sendmsg+0x5ed/0x9a0 [ 591.448004][T17583] ___sys_sendmsg+0x2a2/0x360 [ 591.453225][T17583] __se_sys_sendmsg+0x1c3/0x2b0 [ 591.458625][T17583] do_syscall_64+0x4c/0xa0 [ 591.463591][T17583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.470036][T17583] [ 591.470036][T17583] -> #0 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 591.478307][T17583] __lock_acquire+0x2d18/0x7c40 [ 591.483733][T17583] lock_acquire+0x1bb/0x4a0 [ 591.488781][T17583] __mutex_lock+0x12d/0xae0 [ 591.493838][T17583] nf_tables_dumpreset_obj+0x6e/0x90 [ 591.499670][T17583] netlink_dump+0x683/0xcd0 [ 591.504721][T17583] __netlink_dump_start+0x52c/0x6f0 [ 591.510487][T17583] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 591.516666][T17583] nf_tables_getobj_reset+0x1cb/0x610 [ 591.522602][T17583] nfnetlink_rcv_msg+0x898/0x1290 [ 591.528175][T17583] netlink_rcv_skb+0x1ef/0x440 [ 591.533487][T17583] nfnetlink_rcv+0x2b0/0x2470 [ 591.538712][T17583] netlink_unicast+0x7ad/0x920 [ 591.544024][T17583] netlink_sendmsg+0x8ad/0xbd0 [ 591.549355][T17583] ____sys_sendmsg+0x5ed/0x9a0 [ 591.554668][T17583] ___sys_sendmsg+0x2a2/0x360 [ 591.559896][T17583] __se_sys_sendmsg+0x1c3/0x2b0 [ 591.565291][T17583] do_syscall_64+0x4c/0xa0 [ 591.570258][T17583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.576732][T17583] [ 591.576732][T17583] other info that might help us debug this: [ 591.576732][T17583] [ 591.586974][T17583] Chain exists of: [ 591.586974][T17583] &nft_net->commit_mutex --> nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER [ 591.586974][T17583] [ 591.601436][T17583] Possible unsafe locking scenario: [ 591.601436][T17583] [ 591.608896][T17583] CPU0 CPU1 [ 591.614271][T17583] ---- ---- [ 591.619683][T17583] lock(nlk_cb_mutex-NETFILTER); [ 591.624733][T17583] lock(nfnl_subsys_ipset); [ 591.631889][T17583] lock(nlk_cb_mutex-NETFILTER); [ 591.639567][T17583] lock(&nft_net->commit_mutex); [ 591.644610][T17583] [ 591.644610][T17583] *** DEADLOCK *** [ 591.644610][T17583] [ 591.652770][T17583] 1 lock held by syz.3.5343/17583: [ 591.657913][T17583] #0: ffff88807cbc0698 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0x11e/0x6f0 [ 591.668653][T17583] [ 591.668653][T17583] stack backtrace: [ 591.674553][T17583] CPU: 0 PID: 17583 Comm: syz.3.5343 Not tainted syzkaller #0 [ 591.682027][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 591.692187][T17583] Call Trace: [ 591.695562][T17583] [ 591.698580][T17583] dump_stack_lvl+0x188/0x24e [ 591.703345][T17583] ? load_image+0x410/0x410 [ 591.707905][T17583] ? show_regs_print_info+0x12/0x12 [ 591.713141][T17583] ? print_circular_bug+0x12b/0x1a0 [ 591.718368][T17583] check_noncircular+0x296/0x330 [ 591.723358][T17583] ? add_chain_block+0x9b0/0x9b0 [ 591.728500][T17583] ? lockdep_lock+0xf1/0x1f0 [ 591.733120][T17583] ? _find_first_zero_bit+0xd2/0x100 [ 591.738543][T17583] __lock_acquire+0x2d18/0x7c40 [ 591.743431][T17583] ? __lock_acquire+0x7c40/0x7c40 [ 591.748488][T17583] ? mark_lock+0x94/0x320 [ 591.752844][T17583] ? verify_lock_unused+0x140/0x140 [ 591.758067][T17583] ? __lock_acquire+0x138a/0x7c40 [ 591.763116][T17583] ? stack_trace_save+0xa6/0xf0 [ 591.768047][T17583] ? stack_trace_snprint+0xe0/0xe0 [ 591.773191][T17583] lock_acquire+0x1bb/0x4a0 [ 591.777726][T17583] ? nf_tables_dumpreset_obj+0x6e/0x90 [ 591.783213][T17583] ? nfnetlink_rcv+0x2b0/0x2470 [ 591.788108][T17583] ? netlink_unicast+0x7ad/0x920 [ 591.793074][T17583] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.799212][T17583] ? __might_sleep+0xd0/0xd0 [ 591.803891][T17583] ? read_lock_is_recursive+0x10/0x10 [ 591.809318][T17583] __mutex_lock+0x12d/0xae0 [ 591.813864][T17583] ? nf_tables_dumpreset_obj+0x6e/0x90 [ 591.819534][T17583] ? nft_pernet+0x23/0x230 [ 591.823976][T17583] ? nf_tables_dumpreset_obj+0x6e/0x90 [ 591.829471][T17583] ? __lock_acquire+0x7c40/0x7c40 [ 591.834520][T17583] ? mutex_lock_nested+0x10/0x10 [ 591.839488][T17583] ? nft_pernet+0x23/0x230 [ 591.843927][T17583] ? nft_pernet+0x23/0x230 [ 591.848360][T17583] nf_tables_dumpreset_obj+0x6e/0x90 [ 591.853696][T17583] netlink_dump+0x683/0xcd0 [ 591.858259][T17583] ? netlink_lookup+0x200/0x200 [ 591.863141][T17583] ? __netlink_lookup+0x69e/0x730 [ 591.868218][T17583] ? netlink_lookup+0x30/0x200 [ 591.873007][T17583] ? netlink_lookup+0x30/0x200 [ 591.877800][T17583] ? nf_tables_dumpreset_obj_start+0x110/0x170 [ 591.883982][T17583] __netlink_dump_start+0x52c/0x6f0 [ 591.889211][T17583] ? nft_netlink_dump_start_rcu+0xbb/0x1a0 [ 591.895104][T17583] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 591.900790][T17583] nf_tables_getobj_reset+0x1cb/0x610 [ 591.906204][T17583] ? nf_tables_delobj+0xfc0/0xfc0 [ 591.911272][T17583] ? nf_tables_getobj_single+0x600/0x600 [ 591.916943][T17583] ? nf_tables_dumpreset_obj_start+0x170/0x170 [ 591.923130][T17583] ? nf_tables_dump_obj+0xd00/0xd00 [ 591.928371][T17583] ? __nla_parse+0x3c/0x50 [ 591.932910][T17583] ? nf_tables_delobj+0xfc0/0xfc0 [ 591.937970][T17583] nfnetlink_rcv_msg+0x898/0x1290 [ 591.943050][T17583] ? nfnetlink_rcv_msg+0x224/0x1290 [ 591.948286][T17583] ? nfnetlink_unbind+0x160/0x160 [ 591.953348][T17583] ? kasan_save_free_info+0x27/0x40 [ 591.958638][T17583] netlink_rcv_skb+0x1ef/0x440 [ 591.963437][T17583] ? nfnetlink_unbind+0x160/0x160 [ 591.968490][T17583] ? netlink_ack+0x1160/0x1160 [ 591.973283][T17583] ? bpf_lsm_capable+0x5/0x10 [ 591.978058][T17583] ? security_capable+0x85/0xb0 [ 591.982971][T17583] nfnetlink_rcv+0x2b0/0x2470 [ 591.987682][T17583] ? __local_bh_enable_ip+0x136/0x1c0 [ 591.993129][T17583] ? _local_bh_enable+0xa0/0xa0 [ 591.998018][T17583] ? __dev_queue_xmit+0x281/0x3810 [ 592.003266][T17583] ? __dev_queue_xmit+0x281/0x3810 [ 592.008410][T17583] ? __dev_queue_xmit+0x1d84/0x3810 [ 592.013641][T17583] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 592.019242][T17583] ? ref_tracker_free+0x682/0x830 [ 592.024317][T17583] ? refcount_inc+0x70/0x70 [ 592.028847][T17583] ? memcpy+0x3c/0x60 [ 592.032854][T17583] ? __copy_skb_header+0x3ba/0x4f0 [ 592.037994][T17583] ? __skb_clone+0x446/0x6c0 [ 592.042622][T17583] ? netlink_deliver_tap+0x2e/0x1b0 [ 592.047851][T17583] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 592.053373][T17583] ? __lock_acquire+0x7c40/0x7c40 [ 592.058438][T17583] ? netlink_deliver_tap+0x2e/0x1b0 [ 592.063664][T17583] netlink_unicast+0x7ad/0x920 [ 592.068461][T17583] netlink_sendmsg+0x8ad/0xbd0 [ 592.073869][T17583] ? netlink_getsockopt+0x550/0x550 [ 592.079098][T17583] ? apparmor_socket_sendmsg+0x8a/0x330 [ 592.084784][T17583] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 592.090177][T17583] ? security_socket_sendmsg+0x7c/0xa0 [ 592.095722][T17583] ? netlink_getsockopt+0x550/0x550 [ 592.100958][T17583] ____sys_sendmsg+0x5ed/0x9a0 [ 592.105780][T17583] ? __sys_sendmsg_sock+0x30/0x30 [ 592.111026][T17583] ? __import_iovec+0x306/0x510 [ 592.115931][T17583] ? import_iovec+0x6f/0xa0 [ 592.120490][T17583] ___sys_sendmsg+0x2a2/0x360 [ 592.125246][T17583] ? __sys_sendmsg+0x2a0/0x2a0 [ 592.130063][T17583] __se_sys_sendmsg+0x1c3/0x2b0 [ 592.134973][T17583] ? __x64_sys_sendmsg+0x80/0x80 [ 592.139982][T17583] ? lockdep_hardirqs_on+0x94/0x140 [ 592.145223][T17583] do_syscall_64+0x4c/0xa0 [ 592.149679][T17583] ? clear_bhb_loop+0x60/0xb0 [ 592.154398][T17583] ? clear_bhb_loop+0x60/0xb0 [ 592.159149][T17583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.165080][T17583] RIP: 0033:0x7ff73ab9e019 [ 592.169587][T17583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.189254][T17583] RSP: 002b:00007ff73baea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.197746][T17583] RAX: ffffffffffffffda RBX: 00007ff73ae25fa0 RCX: 00007ff73ab9e019 [ 592.205745][T17583] RDX: 0000000000041090 RSI: 0000200000000180 RDI: 0000000000000003 [ 592.213741][T17583] RBP: 00007ff73ac3500c R08: 0000000000000000 R09: 0000000000000000 [ 592.221737][T17583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.229908][T17583] R13: 00007ff73ae26038 R14: 00007ff73ae25fa0 R15: 00007ffe81811b98 [ 592.237908][T17583]