last executing test programs: 13.526284984s ago: executing program 3 (id=1032): eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000053c0)={0x0, 0x0, &(0x7f0000005380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000001020102000825bb0d00"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 12.182044476s ago: executing program 0 (id=1035): truncate(&(0x7f0000000100)='./file1\x00', 0x401) 11.874964943s ago: executing program 0 (id=1037): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 9.898041029s ago: executing program 3 (id=1041): openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x20) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xff76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaadeb89e"], 0x0) 9.8358212s ago: executing program 2 (id=1042): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2010410, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x4, 0x2ae, &(0x7f0000000d00)="$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") truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000080)={[{@nodelalloc}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$eJzs3d9rHFsdAPDvTLL9mZoUfagFa7GVpGh3k8a2wYf6A9GnglqfbWOyCSGbbMhu2iYUTfEPEERUEASffBH8AwTpnyBCQd9FRbnc29770Id7u5fdne2PdDdJ6SYbsp8PnMyZMzP5nrPDzO6ZOcwE0LfOR8SFiHheq9UuRcRwVp5mKTabqb7e0ycPZuopiVrt1vtJRNIsq6829sr/PJltdiwifvi9iJ8kb8atrG8sTpdKxdVsvlBdWilU1jcuLyxNzxfni8uTkxPXpq5PXZ0a70o7hyLixnf+++tf/PG7N/761Xv/uv3/sZ8mWXnEy3Z0W7PpucZn0TIYEat7EawHBrL25FoFbfY1AAAHR+t3/pci4lIMx0Dj1xwAAABwmNS+MRQfJxE1AAAA4NBKG2NgkzSfjQMYijTN55tjeD8XJ9JSuVL9ylx5bXm2OVZ2JHLp3EKpOJ6NFR6JXFKfn2jkX85f2TI/GRGnI+JXw8cb8/mZcmm21xc/AAAAoE+c3NL//2i42f8HAAAADpmRXlcAAAAA2HP6/wAAAHD46f8DAADAofb9mzfrqdZ6//Xs3fW1xfLdy7PFymJ+aW0mP1NeXcnPl8vzjWf2Le30/0rl8srXYnntfqFarFQLlfWN20vlteXq7YXXXoENAAAA7KPTX3z0zyQiNr9+vJHqjvS6UsC+GHyblf+zd/UA9t9ArysA9Mxbff8Dh0qu1xUAei6JiN9vs7zj4J2/7U19AACA7hv9fPv7/+mO1wY2032qIrBHXP+D/uX+P/Qv9/+hf+ViIHTkob8lOyx/9/v/tdpbVQgAAOi6oUZK0nx2z38o0jSfjzjVeC1ALplbKBXHI+IzEfGP4dzR+vxEY8tkxz4DAAAAAAAAAAAAAAAAAAAAAAAAANBUqyVRAwAAAA61iPR/Sfb+r9Hhi0Nbrw8cSZ4NN6YRce93t35zf7paXZ2ol3/worz626z8Si+uYAAAAABbtfrprX48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTT0ycPZlppP+O+962IGGkXfzCONabHIhcRJz5MYvCV7ZKIGOhC/M2HEfHtH7eJn9SrFSNZLdrFP96t+GfatX/7+GlEnOxCfOhnj+rnn2+2O/7SON+Ybj3+jr7YdrAL8Tuf/9IX57+BNsd/vezULmOcffznQsf4DyPODrY//7TiJx3Ofxd2Gf/OjzY2Oi2r/SFitO33T/JarEJ1aaVQWd+4vLA0PV+cLy5PTk5cm7o+dXVqvDC3UCpmf9vG+OUX/vJ8u/af6BB/ZIf2X9xl+z95fP/JZ5vZXLv4Yxfa7/8zHeKn2f7/cpavLx9t5Teb+Ved+9Pfz23X/tkO7d9p/4/tsv2XfvDzf+9yVQBgH1TWNxanS6Xial9n3unTqP8sOhCtkNkpU8s6b62Snx2Uih3ATOuYeNabExMAANB1b/aBd+PO3lUIAAAAAAAAAAAAAAAAAAAA+lB3nhnWeib29k/Xa9lsTt54FjIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC99GgAA///7fdEa") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 8.444148233s ago: executing program 3 (id=1043): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000280)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c646f733178666c6f7070792c756d61736b3d30303030303030303030303030303030303030303031312c73686f72746e616d653d6c6f7765722c726f6469722c696f636861727365743d63703835322c6572726f72733d636f6e74696e75652c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c7375626a5f757365723d239d2c7d2c686173682c7569643d", @ANYRESDEC=0x0, @ANYBLOB="aca6817c04b1ae41334be1b418b9ed82f6d33a05bd58c94db651578be78023181e409ee8a0cbee530fb888e227c6010318c9e392e37e1224b1ea7851cb1f9735db42d27dc6445655761e25d061364139049c05e2d954139cd34366ff6bbb420450ff1ad3a5c3a44559b66e5114920e4708ba9844398b"], 0x83, 0x2ba, &(0x7f0000001500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) 7.903507935s ago: executing program 2 (id=1044): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xfff3, 0x2}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x895) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r4, 0x2000000) fcntl$addseals(r4, 0x409, 0xe) fallocate(r4, 0x1, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x9, 0x1, 0x9}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010028bd0300fcdbdf250a1d0afe05bfa0936b7f"], 0x24}, 0x1, 0x0, 0x0, 0x48c4}, 0x20000050) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x3) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x414801, 0x4b9) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="2c00000040000100fcff0700040000000100000004004880080001800400829c0c000200000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x40007}, 0x8) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) 6.152579956s ago: executing program 3 (id=1047): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) io_setup(0xb, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = epoll_create(0x10000e9) r3 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0xfffffffb, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x5ff}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) lseek(0xffffffffffffffff, 0xa1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800011}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f00000000c0)={0x5, "e6d429976944e59d455f8acd9a81ff3ae195fd3e6b1e3aa57800b89a0db379bb698f19054b35288ec447d48251d4aea5dc9bf74965faa7095fe99b0e0965c4db", {0x54aeb4fb, 0x1}}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) 6.109175957s ago: executing program 0 (id=1048): truncate(&(0x7f0000000100)='./file1\x00', 0x401) 5.97956755s ago: executing program 0 (id=1049): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 5.702636957s ago: executing program 4 (id=1050): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0xb, &(0x7f0000000280)={0x8, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) r3 = epoll_create1(0x80000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x6242}], 0x1, 0x7f) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000018}) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x1000, '\x00', @p_u8=&(0x7f0000000140)}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0xeb}) r7 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b0006020000009b", 0x12, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r8, r7}, &(0x7f00000000c0)=""/83, 0x53, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002780), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)={0x14, r9, 0xf1f, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4080) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x60, "c34c55c4abeb255ec208dba323f8ea0d9f45b71d59b62266b2ee89aa8c1cdcc30ac4a9ce8c9329a74f02b3fd19c51451467ce54864a322a196b5f170d0d391a5bb6c339f0837a20f3ee5ac45bfb5f1703849fbd29c25edc2f401b031b1aa6340"}, &(0x7f0000000280)=0x68) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f00000002c0)={r11, 0x3, 0x418f}, &(0x7f0000000300)=0x8) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) fallocate(r12, 0x11, 0x0, 0x10000000) 5.364179845s ago: executing program 4 (id=1051): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) 5.230637348s ago: executing program 1 (id=1052): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000000c0)=ANY=[@ANYBLOB="757466382c6b6565705f6c6173745f646f74732c74696d655f6f66667365743d3078303030303030303030303030303430302c6b6565705f6c6173745f646f74732c666d61736b3d30303030303030303030303030303030303030303030312c6b6565705f6c6173745f646f74732c696f636861727365743d63703836332c6e616d65636173653d312c616c6c6f775f7574696d653d30303030303030303030303030303030303030303031372c757466382c00807c361af3e7864868e5871fc640fd3f41f433394b95686576bdf07d269eb8720760abf529be2e09198ebf676d7e55c506ed8987311bce71062223e4acc93891d606856aaedcdeb504893cea7865ae2ca6466a3cecf71a64ee0f5753b13e8e1991d0721a8c352acc68d0fa5d487f732215e5c39166eab743792a059cebfd90a426"], 0x1, 0x1533, &(0x7f0000006800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0xa) read$FUSE(r0, 0x0, 0x0) 5.063821772s ago: executing program 3 (id=1053): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x78, 0x74]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==") r0 = open(&(0x7f0000000200)='./file1\x00', 0xc07d, 0x11c) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)=ANY=[]) 4.905849236s ago: executing program 4 (id=1054): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000400)={[{@utf8}, {@keep_last_dots}, {@time_offset={'time_offset', 0x3d, 0x400}}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x1}}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@namecase}, {@allow_utime={'allow_utime', 0x3d, 0xf}}, {@utf8}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 4.516192005s ago: executing program 1 (id=1055): close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000900)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x20040040) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, &(0x7f0000000340)='#\x00\x00', 0x3) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x13, 0xfffffff5, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x26]}}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000580)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x2, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x9b0318}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x10000006, 0x0, 0x4, 0x100, 0x4000000010000009, 0x10200}) 4.307643149s ago: executing program 4 (id=1056): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) modify_ldt$read(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='raw', 0x3) syz_fuse_handle_req(r4, &(0x7f0000000180)="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", 0x2000, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.900131112s ago: executing program 1 (id=1057): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) setgroups(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x10, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23ffd, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000000)=0x200) setgroups(0x0, &(0x7f0000000180)) 2.636021128s ago: executing program 4 (id=1058): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0, &(0x7f00000001c0)={[{@shortname_mixed}, {@shortname_win95}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@utf8}, {@utf8no}, {@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_lower}]}, 0xfd, 0x2a9, &(0x7f0000000500)="$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") lstat(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)) 1.808247088s ago: executing program 0 (id=1059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 1.787379518s ago: executing program 2 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r3, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) 599.009886ms ago: executing program 2 (id=1061): link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 510.333168ms ago: executing program 3 (id=1062): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10452, &(0x7f00000004c0)={[{@rodir}, {@numtail}, {@fat=@nfs_stale_rw}, {@uni_xlateno}, {@fat=@nfs}, {@shortname_winnt}, {@numtail}, {@rodir}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@uni_xlate}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@fat=@check_strict}, {@uni_xlate}]}, 0x3, 0x27c, &(0x7f0000000b40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000000)='./bus\x00', 0x88d80a, 0x0, 0x20, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='./mnt\x00') 509.447098ms ago: executing program 0 (id=1063): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) io_setup(0xb, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = epoll_create(0x10000e9) r3 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0xfffffffb, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x5ff}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) lseek(0xffffffffffffffff, 0xa1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800011}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f00000000c0)={0x5, "e6d429976944e59d455f8acd9a81ff3ae195fd3e6b1e3aa57800b89a0db379bb698f19054b35288ec447d48251d4aea5dc9bf74965faa7095fe99b0e0965c4db", {0x54aeb4fb, 0x1}}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) 487.769308ms ago: executing program 1 (id=1064): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xe042, 0x0) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f0000000400)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 453.507899ms ago: executing program 4 (id=1065): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x9, 0x8000000000000000}) 301.163293ms ago: executing program 1 (id=1066): chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 255.590914ms ago: executing program 2 (id=1067): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1e0001c, &(0x7f0000000240)={[{@rodir}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_lower}, {@numtail}, {@uni_xlate}, {@numtail}, {@uni_xlateno}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xf}}, {@utf8}, {@fat=@debug}, {@utf8}, {@utf8}, {@utf8no}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@rodir}]}, 0x3, 0x27b, &(0x7f00000008c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 96.285157ms ago: executing program 1 (id=1068): close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000900)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x20040040) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, &(0x7f0000000340)='#\x00\x00', 0x3) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x13, 0xfffffff5, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x26]}}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000580)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x2, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x9b0318}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x10000006, 0x0, 0x4, 0x100, 0x4000000010000009, 0x10200}) 0s ago: executing program 2 (id=1069): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x8430}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): eed is unknown, defaulting to 1000 [ 76.686916][ T4419] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.700221][ T4419] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 76.725014][ T4419] lo speed is unknown, defaulting to 1000 [ 76.731910][ T4419] lo speed is unknown, defaulting to 1000 [ 76.739110][ T4419] lo speed is unknown, defaulting to 1000 [ 76.745756][ T4419] lo speed is unknown, defaulting to 1000 [ 76.752452][ T4419] lo speed is unknown, defaulting to 1000 [ 76.889307][ T4430] netlink: 44 bytes leftover after parsing attributes in process `syz.4.23'. [ 77.623829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 78.551923][ T4442] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 78.553822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.563814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.573817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.823834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.833822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.843820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.853820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.863823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.873823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 79.732635][ T4459] hub 8-0:1.0: USB hub found [ 79.756449][ T4459] hub 8-0:1.0: 1 port detected [ 79.849367][ T4278] libceph: connect (1)[c::]:6789 error -101 [ 79.863661][ T4278] libceph: mon0 (1)[c::]:6789 connect error [ 79.913131][ T4452] ceph: No mds server is up or the cluster is laggy [ 80.141855][ T4468] Bluetooth: MGMT ver 1.22 [ 80.602595][ T4472] siw: device registration error -23 [ 81.392716][ T4499] hub 8-0:1.0: USB hub found [ 81.481863][ T4499] hub 8-0:1.0: 1 port detected [ 81.672784][ T7] libceph: connect (1)[c::]:6789 error -101 [ 81.681758][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 81.739899][ T4501] ceph: No mds server is up or the cluster is laggy [ 83.281862][ T4527] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 84.016391][ T4534] retu-mfd 0-0001: could not read Retu revision: -5 [ 84.086755][ T4534] retu-mfd: probe of 0-0001 failed with error -5 [ 84.132211][ T4534] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 84.614114][ T7] libceph: connect (1)[c::]:6789 error -101 [ 84.620159][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 84.687034][ T4547] ceph: No mds server is up or the cluster is laggy [ 84.983475][ T130] libceph: connect (1)[c::]:6789 error -101 [ 84.989704][ T130] libceph: mon0 (1)[c::]:6789 connect error [ 85.329360][ T27] audit: type=1326 audit(1788913549.033:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.1.70" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f619e159 code=0x7ffc0000 [ 85.429425][ T27] audit: type=1326 audit(1788913549.083:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.1.70" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe5f619e159 code=0x7ffc0000 [ 85.429465][ T27] audit: type=1326 audit(1788913549.083:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.1.70" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f619e159 code=0x7ffc0000 [ 85.429495][ T27] audit: type=1326 audit(1788913549.083:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.1.70" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe5f619e159 code=0x7ffc0000 [ 85.429523][ T27] audit: type=1326 audit(1788913549.083:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.1.70" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f619e159 code=0x7ffc0000 [ 85.429553][ T27] audit: type=1326 audit(1788913549.083:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.1.70" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f619e159 code=0x7ffc0000 [ 85.429582][ T27] audit: type=1326 audit(1788913549.083:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.1.70" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fe5f619e159 code=0x7ffc0000 [ 85.429612][ T27] audit: type=1326 audit(1788913549.083:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.1.70" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f619e159 code=0x7ffc0000 [ 85.429641][ T27] audit: type=1326 audit(1788913549.083:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.1.70" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f619e159 code=0x7ffc0000 [ 85.429671][ T27] audit: type=1326 audit(1788913549.083:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.1.70" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5f619e159 code=0x7ffc0000 [ 86.543476][ T22] cfg80211: failed to load regulatory.db [ 87.280441][ T4580] netlink: 256 bytes leftover after parsing attributes in process `syz.1.73'. [ 88.603930][ T4592] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 88.676075][ T4592] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 88.683066][ T4592] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 88.685551][ T4595] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 88.689883][ T4592] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 88.704078][ T4592] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 88.710851][ T4592] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 88.717663][ T4592] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 88.724598][ T4592] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 88.731372][ T4592] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 88.738184][ T4592] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 89.065099][ T4601] Need at least one configuration in g1. [ 89.073031][ T4601] udc dummy_udc.0: failed to start g1: -22 [ 89.088949][ T4601] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 89.102939][ T4601] UDC core: g1: couldn't find an available UDC or it's busy [ 91.025476][ T4619] hub 8-0:1.0: USB hub found [ 91.032282][ T4619] hub 8-0:1.0: 1 port detected [ 91.562778][ T4621] netlink: 'syz.1.83': attribute type 2 has an invalid length. [ 91.992051][ T4350] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.343912][ T4350] usb 2-1: Using ep0 maxpacket: 32 [ 93.381781][ T4350] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 93.473108][ T4350] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 93.572436][ T4350] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 96.112586][ T4350] usb 2-1: string descriptor 0 read error: -71 [ 96.123368][ T4350] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 96.192778][ T4350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.256851][ T4350] usb 2-1: can't set config #155, error -71 [ 96.331259][ T4350] usb 2-1: USB disconnect, device number 2 [ 97.643669][ T4671] netlink: 256 bytes leftover after parsing attributes in process `syz.1.98'. [ 98.165120][ T4678] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 100.864040][ T4700] netlink: 'syz.0.109': attribute type 2 has an invalid length. [ 101.314002][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.523910][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 101.537870][ T14] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 101.727249][ T14] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 101.807499][ T14] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 101.942191][ T14] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 101.992715][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.060075][ T14] usb 1-1: Product: syz [ 102.084185][ T14] usb 1-1: Manufacturer: syz [ 102.111910][ T14] usb 1-1: SerialNumber: syz [ 102.176655][ T14] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 102.221401][ T14] imon 1-1:155.0: unable to initialize intf0, err -19 [ 102.276068][ T14] imon:imon_probe: failed to initialize context! [ 102.299116][ T14] imon 1-1:155.0: unable to register, err -19 [ 105.580328][ T14] usb 1-1: USB disconnect, device number 2 [ 108.150047][ T4782] netlink: 256 bytes leftover after parsing attributes in process `syz.4.138'. [ 111.863937][ T4350] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.123884][ T4350] usb 3-1: Using ep0 maxpacket: 16 [ 112.160915][ T4350] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 112.193208][ T4350] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 112.223547][ T4350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.247923][ T4350] usb 3-1: Product: syz [ 112.252187][ T4350] usb 3-1: Manufacturer: syz [ 112.294422][ T4350] usb 3-1: SerialNumber: syz [ 112.344679][ T4350] r8152-cfgselector 3-1: config 0 descriptor?? [ 112.632697][ T4842] netlink: 256 bytes leftover after parsing attributes in process `syz.4.152'. [ 115.083556][ T4350] r8152-cfgselector 3-1: Unknown version 0x0000 [ 115.107856][ T4350] r8152-cfgselector 3-1: bad CDC descriptors [ 115.862448][ T4350] r8152-cfgselector 3-1: Unknown version 0x0000 [ 118.351089][ T4350] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 119.721427][ T4892] netlink: 256 bytes leftover after parsing attributes in process `syz.2.164'. [ 121.919497][ T4913] netlink: 'syz.0.168': attribute type 2 has an invalid length. [ 124.003769][ C0] sched: RT throttling activated [ 124.473845][ T3600] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.609940][ T4929] loop1: detected capacity change from 0 to 16 [ 124.651654][ T4929] erofs: (device loop1): mounted with root inode @ nid 36. [ 126.192168][ T4941] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 127.446944][ T4955] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 127.457458][ T4955] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 128.701003][ T4964] hub 8-0:1.0: USB hub found [ 128.706034][ T4964] hub 8-0:1.0: 1 port detected [ 129.896748][ T4972] device erspan0 entered promiscuous mode [ 131.492414][ T4983] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 131.630373][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 131.630387][ T27] audit: type=1326 audit(1788913595.333:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.4.192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e8f9e159 code=0x7ffc0000 [ 131.681112][ T27] audit: type=1326 audit(1788913595.333:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.4.192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e8f9e159 code=0x7ffc0000 [ 131.750652][ T27] audit: type=1326 audit(1788913595.383:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.4.192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f15e8f9e159 code=0x7ffc0000 [ 131.814743][ T27] audit: type=1326 audit(1788913595.383:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.4.192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e8f9e159 code=0x7ffc0000 [ 131.853048][ T4994] bridge0: port 3(vlan2) entered blocking state [ 131.861547][ T27] audit: type=1326 audit(1788913595.383:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.4.192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e8f9e159 code=0x7ffc0000 [ 131.905045][ T4994] bridge0: port 3(vlan2) entered disabled state [ 131.936236][ T27] audit: type=1326 audit(1788913595.413:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.4.192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f15e8f9e159 code=0x7ffc0000 [ 131.937243][ T4994] device vlan2 entered promiscuous mode [ 132.017638][ T27] audit: type=1326 audit(1788913595.413:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.4.192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e8f9e159 code=0x7ffc0000 [ 132.046166][ T4994] device dummy0 entered promiscuous mode [ 132.210677][ T27] audit: type=1326 audit(1788913595.413:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.4.192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f15e8f9e159 code=0x7ffc0000 [ 132.235034][ T27] audit: type=1326 audit(1788913595.413:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.4.192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e8f9e159 code=0x7ffc0000 [ 132.259880][ T27] audit: type=1326 audit(1788913595.413:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.4.192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e8f9e159 code=0x7ffc0000 [ 132.610144][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.616537][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.372845][ T5020] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 134.726602][ T5027] loop3: detected capacity change from 0 to 16 [ 134.760685][ T5027] erofs: (device loop3): mounted with root inode @ nid 36. [ 134.981454][ T7] libceph: connect (1)[c::]:6789 error -22 [ 134.996008][ T5032] ceph: No mds server is up or the cluster is laggy [ 135.643680][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 136.594610][ T4938] libceph: connect (1)[c::]:6789 error -22 [ 136.600630][ T4938] libceph: mon0 (1)[c::]:6789 connect error [ 136.670573][ T5034] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 136.743733][ T5034] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 138.172398][ T5053] FAULT_INJECTION: forcing a failure. [ 138.172398][ T5053] name failslab, interval 1, probability 0, space 0, times 0 [ 138.618536][ T5053] CPU: 1 PID: 5053 Comm: syz.2.215 Not tainted syzkaller #0 [ 138.625876][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.635957][ T5053] Call Trace: [ 138.639249][ T5053] [ 138.642200][ T5053] dump_stack_lvl+0x188/0x24e [ 138.646915][ T5053] ? show_regs_print_info+0x12/0x12 [ 138.652142][ T5053] ? load_image+0x410/0x410 [ 138.656685][ T5053] should_fail_ex+0x390/0x4c0 [ 138.661408][ T5053] should_failslab+0x5/0x20 [ 138.665930][ T5053] slab_pre_alloc_hook+0x59/0x300 [ 138.670978][ T5053] ? nsim_fib_event_nb+0xd8/0x1040 [ 138.676119][ T5053] __kmem_cache_alloc_node+0x4f/0x270 [ 138.681523][ T5053] ? nsim_fib_event_nb+0xd8/0x1040 [ 138.686669][ T5053] kmalloc_trace+0x26/0xe0 [ 138.691114][ T5053] nsim_fib_event_nb+0xd8/0x1040 [ 138.696091][ T5053] atomic_notifier_call_chain+0x17a/0x2b0 [ 138.701838][ T5053] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 138.707673][ T5053] call_fib_notifiers+0x2d/0x60 [ 138.712551][ T5053] fib_table_delete+0xc6a/0xfc0 [ 138.717458][ T5053] ? nexthop_get_nhc_lookup+0x400/0x400 [ 138.723037][ T5053] ? __lock_acquire+0x7c40/0x7c40 [ 138.728089][ T5053] ? l3mdev_fib_table+0x18/0x160 [ 138.733039][ T5053] ? l3mdev_fib_table+0x18/0x160 [ 138.737984][ T5053] ? fib_new_table+0x106/0x2d0 [ 138.742756][ T5053] fib_magic+0x2ea/0x3b0 [ 138.747014][ T5053] ? fib_add_ifaddr+0x5c0/0x5c0 [ 138.751890][ T5053] fib_del_ifaddr+0x10b2/0x14c0 [ 138.756756][ T5053] ? fib_del_ifaddr+0x2f2/0x14c0 [ 138.761704][ T5053] fib_inetaddr_event+0xb7/0x1c0 [ 138.766648][ T5053] blocking_notifier_call_chain+0x103/0x1b0 [ 138.772565][ T5053] __inet_del_ifa+0xaac/0x1090 [ 138.777349][ T5053] devinet_ioctl+0x954/0x1bf0 [ 138.782043][ T5053] inet_ioctl+0x2fa/0x460 [ 138.786375][ T5053] ? inet_shutdown+0x370/0x370 [ 138.791146][ T5053] ? slab_free_freelist_hook+0x133/0x1b0 [ 138.796787][ T5053] ? tomoyo_path_number_perm+0x4fb/0x650 [ 138.802428][ T5053] ? __kmem_cache_free+0xb6/0x200 [ 138.807468][ T5053] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 138.812934][ T5053] sock_do_ioctl+0xfb/0x320 [ 138.817442][ T5053] ? sock_show_fdinfo+0xb0/0xb0 [ 138.822299][ T5053] sock_ioctl+0x48a/0x700 [ 138.826628][ T5053] ? sock_poll+0x420/0x420 [ 138.831052][ T5053] ? bpf_lsm_file_ioctl+0x5/0x10 [ 138.835993][ T5053] ? security_file_ioctl+0x7c/0xa0 [ 138.841100][ T5053] ? sock_poll+0x420/0x420 [ 138.845514][ T5053] __se_sys_ioctl+0xfa/0x170 [ 138.850111][ T5053] do_syscall_64+0x4c/0xa0 [ 138.854531][ T5053] ? clear_bhb_loop+0x60/0xb0 [ 138.859208][ T5053] ? clear_bhb_loop+0x60/0xb0 [ 138.863890][ T5053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.869799][ T5053] RIP: 0033:0x7fd38bd9e159 [ 138.874216][ T5053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.893820][ T5053] RSP: 002b:00007fd38cbda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.902233][ T5053] RAX: ffffffffffffffda RBX: 00007fd38c025fa0 RCX: 00007fd38bd9e159 [ 138.910201][ T5053] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000005 [ 138.918165][ T5053] RBP: 00007fd38be3503b R08: 0000000000000000 R09: 0000000000000000 [ 138.926128][ T5053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.934092][ T5053] R13: 00007fd38c026038 R14: 00007fd38c025fa0 R15: 00007ffe104fb4b8 [ 138.942072][ T5053] [ 139.097361][ T5060] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 139.493938][ T4284] Bluetooth: unknown link type 131 [ 141.408833][ T5094] hub 8-0:1.0: USB hub found [ 141.414880][ T5094] hub 8-0:1.0: 1 port detected [ 142.311507][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 142.727323][ T5110] Need at least one configuration in g1. [ 142.733067][ T5110] udc dummy_udc.0: failed to start g1: -22 [ 142.740122][ T5110] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 142.742236][ T5108] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 142.748726][ T5110] UDC core: g1: couldn't find an available UDC or it's busy [ 145.195942][ T5135] device erspan0 entered promiscuous mode [ 145.432455][ T5143] loop0: detected capacity change from 0 to 16 [ 145.445979][ T4283] Bluetooth: unknown link type 131 [ 145.478696][ T5143] erofs: (device loop0): mounted with root inode @ nid 36. [ 145.782312][ T5145] hub 8-0:1.0: USB hub found [ 145.788158][ T5145] hub 8-0:1.0: 1 port detected [ 146.575889][ T5149] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 146.586275][ T5149] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 147.269255][ T5164] Need at least one configuration in g1. [ 147.275149][ T5164] udc dummy_udc.0: failed to start g1: -22 [ 147.281071][ T5164] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 147.289140][ T5164] UDC core: g1: couldn't find an available UDC or it's busy [ 147.524036][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 149.118550][ T5179] hub 8-0:1.0: USB hub found [ 149.123989][ T5179] hub 8-0:1.0: 1 port detected [ 151.132101][ T5190] hub 8-0:1.0: USB hub found [ 151.137997][ T5190] hub 8-0:1.0: 1 port detected [ 151.659093][ T5197] netlink: 256 bytes leftover after parsing attributes in process `syz.3.255'. [ 152.052332][ T27] audit: type=1326 audit(1788913615.753:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.0.258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32979e159 code=0x7ffc0000 [ 152.158424][ T27] audit: type=1326 audit(1788913615.753:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.0.258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc32979e159 code=0x7ffc0000 [ 152.512603][ T27] audit: type=1326 audit(1788913615.753:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.0.258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32979e159 code=0x7ffc0000 [ 152.649513][ T27] audit: type=1326 audit(1788913615.753:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.0.258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc32979e159 code=0x7ffc0000 [ 153.788040][ T5213] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 153.996816][ T27] audit: type=1326 audit(1788913615.753:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.0.258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32979e159 code=0x7ffc0000 [ 154.246218][ T5222] hub 8-0:1.0: USB hub found [ 154.251858][ T5222] hub 8-0:1.0: 1 port detected [ 155.179087][ T4284] Bluetooth: unknown link type 131 [ 156.063950][ T5235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.098724][ T5242] loop1: detected capacity change from 0 to 16 [ 156.117206][ T5242] erofs: (device loop1): mounted with root inode @ nid 36. [ 156.229347][ T5235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.262505][ T5244] hub 8-0:1.0: USB hub found [ 156.267623][ T5244] hub 8-0:1.0: 1 port detected [ 158.138532][ T5252] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 158.209528][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 158.899232][ T5270] hub 8-0:1.0: USB hub found [ 158.904196][ T5270] hub 8-0:1.0: 1 port detected [ 160.103038][ T5278] capability: warning: `syz.4.281' uses 32-bit capabilities (legacy support in use) [ 163.253828][ T5297] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 163.959750][ T5308] hub 8-0:1.0: USB hub found [ 163.965556][ T5308] hub 8-0:1.0: 1 port detected [ 165.113496][ T5315] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 167.553427][ T5335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.974917][ T27] audit: type=1326 audit(1788913631.683:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.0.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32979e159 code=0x7ffc0000 [ 168.037535][ T27] audit: type=1326 audit(1788913631.683:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.0.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc32979e159 code=0x7ffc0000 [ 168.131085][ T27] audit: type=1326 audit(1788913631.683:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.0.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32979e159 code=0x7ffc0000 [ 168.160394][ T27] audit: type=1326 audit(1788913631.683:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.0.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc32979e159 code=0x7ffc0000 [ 168.261001][ T27] audit: type=1326 audit(1788913631.683:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.0.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32979e159 code=0x7ffc0000 [ 168.427144][ T5356] hub 8-0:1.0: USB hub found [ 168.432853][ T5356] hub 8-0:1.0: 1 port detected [ 168.718239][ T27] audit: type=1326 audit(1788913631.683:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.0.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc32979e159 code=0x7ffc0000 [ 169.062381][ T27] audit: type=1326 audit(1788913631.683:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.0.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32979e159 code=0x7ffc0000 [ 169.714260][ T5365] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 172.186276][ T27] audit: type=1326 audit(1788913631.683:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.0.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc32979e159 code=0x7ffc0000 [ 172.188037][ T5379] netlink: 44 bytes leftover after parsing attributes in process `syz.3.309'. [ 172.463348][ T27] audit: type=1326 audit(1788913631.683:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.0.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32979e159 code=0x7ffc0000 [ 172.559340][ T27] audit: type=1326 audit(1788913631.683:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.0.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc32979e159 code=0x7ffc0000 [ 174.173505][ T5397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.480303][ T5404] hub 8-0:1.0: USB hub found [ 174.486193][ T5404] hub 8-0:1.0: 1 port detected [ 176.453850][ T5410] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 177.859014][ T5430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.326'. [ 178.128921][ T5428] siw: device registration error -23 [ 179.301790][ T5443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.667108][ T5454] hub 8-0:1.0: USB hub found [ 179.667860][ T5454] hub 8-0:1.0: 1 port detected [ 182.192222][ T5473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.339'. [ 182.312844][ T5476] netlink: 44 bytes leftover after parsing attributes in process `syz.0.338'. [ 184.012860][ T5505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.062872][ T5505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.120030][ T5507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.352'. [ 185.216019][ T5516] netlink: 44 bytes leftover after parsing attributes in process `syz.2.355'. [ 185.830977][ T5521] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 186.399216][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 186.473944][ T5525] hub 8-0:1.0: USB hub found [ 186.479248][ T5525] hub 8-0:1.0: 1 port detected [ 188.112851][ T5545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.366'. [ 189.043342][ T5553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.108852][ T5553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.234826][ T5561] netlink: 44 bytes leftover after parsing attributes in process `syz.3.369'. [ 190.664652][ T5569] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 191.239961][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 191.245032][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 191.246375][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 191.251949][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 191.779595][ T5583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.378'. [ 192.005167][ T5585] loop4: detected capacity change from 0 to 7 [ 192.023264][ T5585] Dev loop4: unable to read RDB block 7 [ 192.043924][ T5585] loop4: unable to read partition table [ 192.050162][ T5585] loop4: partition table beyond EOD, truncated [ 192.058196][ T5585] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 192.116175][ T5585] fuse: Unknown parameter 'gro ' [ 192.253112][ T5593] hub 8-0:1.0: USB hub found [ 192.258697][ T5593] hub 8-0:1.0: 1 port detected [ 193.144689][ T5599] loop2: detected capacity change from 0 to 1024 [ 193.189226][ T5601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.739812][ T5605] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 194.327574][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.333947][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.393792][ T5609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.450403][ T5599] hfsplus: request for non-existent node 33423360 in B*Tree [ 194.481199][ T5599] hfsplus: request for non-existent node 33423360 in B*Tree [ 194.933603][ T5610] loop4: detected capacity change from 0 to 32768 [ 195.136000][ T5619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.390'. [ 195.416877][ T5300] libceph: connect (1)[c::]:6789 error -22 [ 195.433897][ T5300] libceph: mon0 (1)[c::]:6789 connect error [ 195.596855][ T5621] ceph: No mds server is up or the cluster is laggy [ 195.669337][ T5633] netlink: 44 bytes leftover after parsing attributes in process `syz.4.392'. [ 196.651862][ T5641] hub 8-0:1.0: USB hub found [ 196.657698][ T5641] hub 8-0:1.0: 1 port detected [ 198.733923][ T5655] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 199.672596][ T5660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.702963][ T5660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.744604][ T5676] hub 8-0:1.0: USB hub found [ 200.749555][ T5676] hub 8-0:1.0: 1 port detected [ 201.561704][ T4278] libceph: connect (1)[c::]:6789 error -22 [ 201.570723][ T4278] libceph: mon0 (1)[c::]:6789 connect error [ 201.835802][ T5669] ceph: No mds server is up or the cluster is laggy [ 202.891057][ T4318] libceph: connect (1)[c::]:6789 error -22 [ 202.935923][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 203.689290][ T5697] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 204.275021][ T4278] libceph: connect (1)[c::]:6789 error -22 [ 204.281488][ T4278] libceph: mon0 (1)[c::]:6789 connect error [ 204.556039][ T5706] process 'syz.0.416' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 204.580119][ T5707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.683261][ T5708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.969391][ T4938] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 204.983145][ T5712] hub 8-0:1.0: USB hub found [ 204.996542][ T5712] hub 8-0:1.0: 1 port detected [ 205.953911][ T4938] usb 1-1: Using ep0 maxpacket: 32 [ 205.969852][ T4938] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 205.999811][ T4938] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.040149][ T4938] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 206.043996][ T5718] netlink: 44 bytes leftover after parsing attributes in process `syz.2.419'. [ 206.067705][ T4938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.107579][ T4938] usb 1-1: config 0 descriptor?? [ 206.127221][ T4938] hub 1-1:0.0: bad descriptor, ignoring hub [ 206.149466][ T4938] hub: probe of 1-1:0.0 failed with error -5 [ 206.175201][ T4938] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 207.744155][ T1189] usb 1-1: USB disconnect, device number 4 [ 208.966298][ T5747] loop0: detected capacity change from 0 to 64 [ 209.201400][ T5749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.448953][ T5749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.727249][ T5760] hub 8-0:1.0: USB hub found [ 210.732810][ T5760] hub 8-0:1.0: 1 port detected [ 212.700604][ T5757] loop1: detected capacity change from 0 to 32768 [ 213.172860][ T5757] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.432 (5757) [ 213.473992][ T5757] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.489368][ T5757] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 213.504940][ T5757] BTRFS info (device loop1): setting nodatasum [ 213.537068][ T5757] BTRFS info (device loop1): force zlib compression, level 3 [ 213.616920][ T5757] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 213.665188][ T5757] BTRFS info (device loop1): use lzo compression, level 0 [ 213.673597][ T5757] BTRFS info (device loop1): turning on flush-on-commit [ 213.695858][ T5757] BTRFS info (device loop1): enabling auto defrag [ 213.707934][ T5784] loop2: detected capacity change from 0 to 2048 [ 213.714520][ T5757] BTRFS info (device loop1): max_inline at 4096 [ 213.773863][ T5757] BTRFS info (device loop1): using free space tree [ 213.863925][ T5784] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.943491][ T5791] netlink: 256 bytes leftover after parsing attributes in process `syz.4.439'. [ 214.227178][ T5757] BTRFS error (device loop1): open_ctree failed: -12 [ 214.706845][ T4264] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4264) [ 216.406863][ T5851] blktrace: Concurrent blktraces are not allowed on loop4 [ 216.794159][ T5861] loop0: detected capacity change from 0 to 256 [ 216.803397][ T5861] ======================================================= [ 216.803397][ T5861] WARNING: The mand mount option has been deprecated and [ 216.803397][ T5861] and is ignored by this kernel. Remove the mand [ 216.803397][ T5861] option from the mount to silence this warning. [ 216.803397][ T5861] ======================================================= [ 217.786794][ T5867] loop4: detected capacity change from 0 to 256 [ 220.248677][ T5901] loop4: detected capacity change from 0 to 256 [ 220.248716][ T5897] blktrace: Concurrent blktraces are not allowed on loop4 [ 221.102482][ T5894] loop0: detected capacity change from 0 to 32768 [ 221.180435][ T5894] XFS (loop0): Mounting V5 Filesystem [ 221.393472][ T5911] loop4: detected capacity change from 0 to 32768 [ 221.397989][ T5894] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 221.747958][ T5894] XFS (loop0): Starting recovery (logdev: internal) [ 222.530243][ T5894] XFS (loop0): Ending recovery (logdev: internal) [ 222.631654][ T5949] loop1: detected capacity change from 0 to 512 [ 222.664722][ T5949] EXT4-fs: Ignoring removed orlov option [ 222.686007][ T4278] XFS (loop0): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 222.707917][ T4278] XFS (loop0): Unmount and run xfs_repair [ 222.743342][ T4278] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 222.774962][ T4278] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 222.800084][ T5949] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 222.803802][ T4278] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 222.818753][ T4278] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 222.827684][ T4278] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 222.837321][ T4278] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 222.846282][ T4278] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.855412][ T4278] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.863126][ T5949] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.864290][ T4278] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.884511][ T5894] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 222.985344][ T5949] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 95 vs 96 free clusters [ 222.996844][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 222.996859][ T27] audit: type=1800 audit(1788913686.693:77): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.467" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 223.084596][ T5960] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x43b/0x660, xfs_bnobt block 0x8 [ 223.097288][ T5960] XFS (loop0): Unmount and run xfs_repair [ 223.110543][ T5958] XFS (loop0): Internal error i != 1 at line 497 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x5e3/0x7f0 [ 223.111880][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 223.133404][ T5958] CPU: 1 PID: 5958 Comm: syz.0.467 Not tainted syzkaller #0 [ 223.140720][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.150788][ T5958] Call Trace: [ 223.154071][ T5958] [ 223.157004][ T5958] dump_stack_lvl+0x188/0x24e [ 223.161692][ T5958] ? __xfs_printk+0x90/0x90 [ 223.166199][ T5958] ? show_regs_print_info+0x12/0x12 [ 223.171418][ T5958] xfs_corruption_error+0x11e/0x170 [ 223.176706][ T5958] ? xfs_alloc_fixup_trees+0x5e3/0x7f0 [ 223.182166][ T5958] xfs_alloc_fixup_trees+0x642/0x7f0 [ 223.187446][ T5958] ? xfs_alloc_fixup_trees+0x5e3/0x7f0 [ 223.192901][ T5958] ? slab_pre_alloc_hook+0x59/0x300 [ 223.198103][ T5958] ? xfs_alloc_fix_len+0x280/0x280 [ 223.203217][ T5958] ? xfs_alloc_ag_vextent_lastblock+0x44b/0x780 [ 223.209459][ T5958] xfs_alloc_cur_finish+0xd3/0x500 [ 223.214567][ T5958] ? xfs_allocbt_init_cursor+0x6c/0x110 [ 223.220118][ T5958] xfs_alloc_ag_vextent_near+0xdd1/0x1360 [ 223.225854][ T5958] ? xfs_alloc_ag_vextent_size+0x18c0/0x18c0 [ 223.231846][ T5958] xfs_alloc_ag_vextent+0x94/0x760 [ 223.236963][ T5958] ? xfs_perag_put+0xfa/0x2d0 [ 223.241648][ T5958] xfs_alloc_vextent+0x140a/0x1e80 [ 223.246781][ T5958] xfs_bmap_btalloc+0xff2/0x1eb0 [ 223.251741][ T5958] ? xfs_bmbt_lookup_first+0x40/0x40 [ 223.257080][ T5958] xfs_bmapi_allocate+0x507/0xf00 [ 223.262110][ T5958] ? xfs_iread_extents+0x1e8/0x3b0 [ 223.267226][ T5958] ? xfs_bmapi_write+0x11d0/0x11d0 [ 223.272340][ T5958] ? xfs_iext_lookup_extent+0x41b/0x7f0 [ 223.277885][ T5958] ? xfs_iext_prev+0x346/0x360 [ 223.282649][ T5958] ? xfs_iext_get_extent+0x1b5/0x360 [ 223.287941][ T5958] xfs_bmapi_write+0x7f9/0x11d0 [ 223.292815][ T5958] ? xfs_bmapi_minleft+0x1e0/0x1e0 [ 223.297945][ T5958] ? xfs_trans_alloc_inode+0x191/0x330 [ 223.303442][ T5958] xfs_iomap_write_direct+0x3b6/0x680 [ 223.308817][ T5958] ? xfs_eof_alignment+0x2c0/0x2c0 [ 223.313923][ T5958] ? down_read_nested+0x1aa/0x2e0 [ 223.318950][ T5958] ? xfs_direct_write_iomap_begin+0xbd4/0x1060 [ 223.325100][ T5958] ? xfs_direct_write_iomap_begin+0xbd4/0x1060 [ 223.331250][ T5958] ? xfs_iunlock+0x1d6/0x380 [ 223.335844][ T5958] xfs_direct_write_iomap_begin+0xbfb/0x1060 [ 223.341820][ T5958] ? xfs_file_write_iter+0x4f9/0x610 [ 223.347099][ T5958] ? do_iter_write+0x638/0xb10 [ 223.351876][ T5958] ? xfs_iomap_write_unwritten+0xad0/0xad0 [ 223.357680][ T5958] ? filemap_write_and_wait_range+0x186/0x210 [ 223.363757][ T5958] ? xas_next_entry+0x3e0/0x3e0 [ 223.368618][ T5958] ? xfs_iomap_write_unwritten+0xad0/0xad0 [ 223.374421][ T5958] iomap_iter+0x671/0x1000 [ 223.378858][ T5958] __iomap_dio_rw+0xd90/0x1e90 [ 223.383619][ T5958] ? xfs_trans_log_inode+0x11b/0x190 [ 223.388918][ T5958] ? __mnt_drop_write_file+0xbc/0xf0 [ 223.394220][ T5958] ? iomap_dio_complete_work+0x70/0x70 [ 223.399713][ T5958] ? xfs_file_write_checks+0x921/0xb50 [ 223.405177][ T5958] ? __lock_acquire+0x7c40/0x7c40 [ 223.410213][ T5958] ? xfs_file_buffered_write+0xab0/0xab0 [ 223.415855][ T5958] iomap_dio_rw+0x41/0xa0 [ 223.420186][ T5958] xfs_file_dio_write_aligned+0x144/0x1c0 [ 223.425904][ T5958] ? direct_splice_actor+0xe1/0x130 [ 223.431190][ T5958] ? splice_direct_to_actor+0x4b8/0xbd0 [ 223.436736][ T5958] ? do_splice_direct+0x1ce/0x2f0 [ 223.441771][ T5958] ? xfs_file_dio_write_unaligned+0x700/0x700 [ 223.447839][ T5958] ? end_current_label_crit_section+0x14b/0x170 [ 223.454085][ T5958] xfs_file_write_iter+0x4f9/0x610 [ 223.459204][ T5958] do_iter_write+0x638/0xb10 [ 223.463810][ T5958] ? vfs_iter_write+0xa0/0xa0 [ 223.468502][ T5958] ? vfs_iter_write+0x67/0xa0 [ 223.473184][ T5958] iter_file_splice_write+0x6be/0xcf0 [ 223.478573][ T5958] ? splice_from_pipe+0x180/0x180 [ 223.483605][ T5958] ? splice_shrink_spd+0xc0/0xc0 [ 223.488546][ T5958] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 223.495146][ T5958] ? splice_from_pipe+0x180/0x180 [ 223.500174][ T5958] direct_splice_actor+0xe1/0x130 [ 223.505211][ T5958] splice_direct_to_actor+0x4b8/0xbd0 [ 223.510605][ T5958] ? direct_file_splice_eof+0xa0/0xa0 [ 223.515983][ T5958] ? pipe_to_sendpage+0x320/0x320 [ 223.521010][ T5958] ? common_file_perm+0x171/0x1c0 [ 223.526046][ T5958] ? fsnotify_perm+0x5a/0x550 [ 223.530718][ T5958] ? security_file_permission+0x75/0xa0 [ 223.536267][ T5958] do_splice_direct+0x1ce/0x2f0 [ 223.541125][ T5958] ? splice_direct_to_actor+0xbd0/0xbd0 [ 223.546672][ T5958] ? rcu_read_lock_any_held+0xb0/0x130 [ 223.552131][ T5958] ? do_splice_direct+0x2f0/0x2f0 [ 223.557162][ T5958] ? common_file_perm+0x171/0x1c0 [ 223.562198][ T5958] do_sendfile+0x51b/0xe20 [ 223.566621][ T5958] ? __ia32_sys_get_robust_list+0x100/0x100 [ 223.572511][ T5958] ? do_pwritev+0x3a0/0x3a0 [ 223.577019][ T5958] __se_sys_sendfile64+0x141/0x1a0 [ 223.582124][ T5958] ? lock_chain_count+0x20/0x20 [ 223.586980][ T5958] ? __x64_sys_sendfile64+0xa0/0xa0 [ 223.592183][ T5958] ? lockdep_hardirqs_on+0x94/0x140 [ 223.597386][ T5958] do_syscall_64+0x4c/0xa0 [ 223.601807][ T5958] ? clear_bhb_loop+0x60/0xb0 [ 223.606486][ T5958] ? clear_bhb_loop+0x60/0xb0 [ 223.611166][ T5958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.617060][ T5958] RIP: 0033:0x7fc32979e159 [ 223.621471][ T5958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.641072][ T5958] RSP: 002b:00007fc3279f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 223.649506][ T5958] RAX: ffffffffffffffda RBX: 00007fc329a26090 RCX: 00007fc32979e159 [ 223.657476][ T5958] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 223.665443][ T5958] RBP: 00007fc32983503b R08: 0000000000000000 R09: 0000000000000000 [ 223.673411][ T5958] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 223.681378][ T5958] R13: 00007fc329a26128 R14: 00007fc329a26090 R15: 00007fffc9ef1eb8 [ 223.689359][ T5958] [ 223.715906][ T5958] XFS (loop0): Corruption detected. Unmount and run xfs_repair [ 224.040281][ T5967] loop4: detected capacity change from 0 to 256 [ 224.192670][ T5971] loop3: detected capacity change from 0 to 64 [ 224.337407][ T26] libceph: connect (1)[c::]:6789 error -22 [ 224.363957][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 224.391658][ T5958] syz.0.467 (5958) used greatest stack depth: 20128 bytes left [ 224.493973][ T5973] ceph: No mds server is up or the cluster is laggy [ 225.404635][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.465799][ T4274] XFS (loop0): Unmounting Filesystem [ 225.513804][ T5992] netlink: 984 bytes leftover after parsing attributes in process `syz.3.496'. [ 225.779840][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.498'. [ 225.791177][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.498'. [ 225.895954][ T6008] loop4: detected capacity change from 0 to 256 [ 227.359364][ T6026] loop0: detected capacity change from 0 to 256 [ 227.392055][ T5809] libceph: connect (1)[c::]:6789 error -22 [ 227.401092][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 227.664095][ T5809] libceph: connect (1)[c::]:6789 error -22 [ 228.072260][ T6023] ceph: No mds server is up or the cluster is laggy [ 228.324176][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 228.481632][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 228.483363][ T6043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.624850][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 228.948703][ T6063] netlink: 984 bytes leftover after parsing attributes in process `syz.3.513'. [ 230.126028][ T6069] hub 8-0:1.0: USB hub found [ 230.131371][ T6069] hub 8-0:1.0: 1 port detected [ 231.672830][ T6086] loop1: detected capacity change from 0 to 40427 [ 231.704853][ T6086] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 231.742795][ T6086] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 231.793853][ T6086] F2FS-fs (loop1): invalid crc value [ 231.820170][ T6086] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 231.881495][ T7] libceph: connect (1)[c::]:6789 error -22 [ 231.899175][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 231.916474][ T6092] loop0: detected capacity change from 0 to 4096 [ 231.943442][ T6092] ntfs3: Unknown parameter 'windows_names' [ 231.973037][ T6094] ceph: No mds server is up or the cluster is laggy [ 232.031370][ T6086] F2FS-fs (loop1): Start checkpoint disabled! [ 232.058254][ T6086] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 232.066322][ T6086] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 232.465103][ T6102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.657568][ T6110] loop2: detected capacity change from 0 to 256 [ 232.680672][ T6110] exfat: Deprecated parameter 'utf8' [ 232.733304][ T6110] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d) [ 232.855405][ T6116] hub 8-0:1.0: USB hub found [ 232.860328][ T6116] hub 8-0:1.0: 1 port detected [ 233.794957][ T6121] netlink: 984 bytes leftover after parsing attributes in process `syz.2.529'. [ 235.120746][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.539'. [ 235.180060][ T6153] hub 8-0:1.0: USB hub found [ 235.184998][ T6153] hub 8-0:1.0: 1 port detected [ 235.712982][ T6155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.976912][ T6155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.077432][ T6162] loop0: detected capacity change from 0 to 256 [ 236.105672][ T6162] exfat: Deprecated parameter 'namecase' [ 236.165877][ T6162] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 236.816003][ T6141] loop1: detected capacity change from 0 to 32768 [ 237.012275][ T27] audit: type=1800 audit(1788913700.713:78): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.535" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 237.328415][ T6175] netlink: 984 bytes leftover after parsing attributes in process `syz.1.547'. [ 237.418743][ T6178] loop0: detected capacity change from 0 to 2048 [ 237.489104][ T6178] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 237.571547][ T6178] syz.0.548 (pid 6178) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 237.757499][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 237.873085][ T6168] loop3: detected capacity change from 0 to 32768 [ 238.958741][ T6168] jfs_mkdir: dtInsert returned -EIO [ 239.028985][ T6168] ERROR: (device loop3): jfs_mkdir: [ 239.028985][ T6168] [ 239.106906][ T6168] ERROR: (device loop3): remounting filesystem as read-only [ 239.198195][ T6202] hub 8-0:1.0: USB hub found [ 239.203141][ T6202] hub 8-0:1.0: 1 port detected [ 240.811245][ T6208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.928987][ T6212] loop2: detected capacity change from 0 to 512 [ 240.972535][ T6212] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.994064][ T6212] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 241.016538][ T6212] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 241.102159][ T6212] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 241.139153][ T6212] System zones: 1-12 [ 241.173868][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 241.196398][ T6212] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 241.299550][ T6212] EXT4-fs (loop2): 1 truncate cleaned up [ 241.305769][ T6212] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 241.373811][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 241.400646][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 7 [ 241.432094][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 241.464834][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 241.483912][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.495427][ T26] usb 2-1: config 0 descriptor?? [ 241.505193][ T26] hub 2-1:0.0: bad descriptor, ignoring hub [ 241.518892][ T26] hub: probe of 2-1:0.0 failed with error -5 [ 241.529718][ T6227] netlink: 984 bytes leftover after parsing attributes in process `syz.0.562'. [ 241.559788][ T26] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 241.588587][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 242.531900][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.565'. [ 242.706378][ T6241] loop0: detected capacity change from 0 to 1024 [ 242.822235][ T6241] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 242.847331][ T6241] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 243.503891][ T6241] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 243.632666][ T6241] fscrypt (loop0, inode 18): Unsupported encryption flags (0x08) [ 243.767040][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 244.858439][ T4318] usb 2-1: USB disconnect, device number 3 [ 245.024176][ T6261] blktrace: Concurrent blktraces are not allowed on loop4 [ 245.045583][ T6264] loop3: detected capacity change from 0 to 64 [ 245.115830][ T6267] netlink: 984 bytes leftover after parsing attributes in process `syz.1.576'. [ 247.196713][ T6278] loop0: detected capacity change from 0 to 256 [ 247.258024][ T6284] loop1: detected capacity change from 0 to 512 [ 247.460591][ T6284] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.581: inode #1: comm syz.1.581: iget: illegal inode # [ 247.710784][ T5810] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 248.190043][ T6284] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.581: error while reading EA inode 1 err=-117 [ 248.304263][ T6284] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.581: inode #1: comm syz.1.581: iget: illegal inode # [ 248.352653][ T6284] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.581: error while reading EA inode 1 err=-117 [ 248.363826][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 248.371943][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 7 [ 248.390990][ T6284] EXT4-fs (loop1): 1 orphan inode deleted [ 248.398999][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 248.402384][ T6284] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 248.418846][ T5810] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.418897][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.420517][ T5810] usb 4-1: config 0 descriptor?? [ 248.490492][ T5810] hub 4-1:0.0: bad descriptor, ignoring hub [ 248.510885][ T5810] hub: probe of 4-1:0.0 failed with error -5 [ 248.539608][ T5810] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 248.667757][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 248.777354][ T6303] loop0: detected capacity change from 0 to 2048 [ 248.797152][ T6305] blktrace: Concurrent blktraces are not allowed on loop4 [ 248.900461][ T6309] loop1: detected capacity change from 0 to 16 [ 248.922825][ T6309] erofs: (device loop1): mounted with root inode @ nid 36. [ 248.926026][ T6303] NILFS (loop0): invalid segment: Magic number mismatch [ 248.978555][ T6303] NILFS (loop0): trying rollback from an earlier position [ 249.088985][ T6303] NILFS (loop0): recovery complete [ 249.151547][ T6311] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.240253][ T6312] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 249.250837][ T6312] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 249.297592][ T27] audit: type=1800 audit(1788913713.003:79): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.588" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 249.696004][ T6317] loop4: detected capacity change from 0 to 256 [ 250.836364][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.597'. [ 251.174020][ T5809] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 251.740329][ T4278] usb 4-1: USB disconnect, device number 2 [ 251.933841][ T5809] usb 3-1: Using ep0 maxpacket: 32 [ 251.945936][ T5809] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 251.975982][ T6342] hub 8-0:1.0: USB hub found [ 251.980731][ T6342] hub 8-0:1.0: 1 port detected [ 252.041356][ T5809] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 252.137013][ T5809] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 252.183605][ T6347] Need at least one configuration in g1. [ 252.189974][ T6347] udc dummy_udc.0: failed to start g1: -22 [ 252.195890][ T6347] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 252.206518][ T6347] UDC core: g1: couldn't find an available UDC or it's busy [ 253.074609][ T6349] blktrace: Concurrent blktraces are not allowed on loop4 [ 253.129067][ T6353] loop0: detected capacity change from 0 to 256 [ 253.398764][ T27] audit: type=1800 audit(1788913717.103:80): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.604" name="file1" dev="loop0" ino=1048618 res=0 errno=0 [ 253.687562][ T5809] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 253.749125][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.768693][ T6358] loop4: detected capacity change from 0 to 256 [ 253.798113][ T5809] usb 3-1: can't set config #155, error -71 [ 254.622560][ T5809] usb 3-1: USB disconnect, device number 3 [ 254.817420][ T6367] loop3: detected capacity change from 0 to 256 [ 255.142053][ T6371] loop3: detected capacity change from 0 to 1024 [ 255.450421][ T6353] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 255.462000][ T6353] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 255.487076][ T6353] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 255.496588][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.503481][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.513530][ T6362] loop2: detected capacity change from 0 to 32768 [ 255.530959][ T27] audit: type=1800 audit(1788913719.233:81): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.604" name="file1" dev="loop0" ino=1048618 res=0 errno=0 [ 255.599606][ T6362] XFS: noattr2 mount option is deprecated. [ 255.704981][ T6380] Need at least one configuration in g1. [ 255.710814][ T6380] udc dummy_udc.0: failed to start g1: -22 [ 255.716793][ T6380] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 255.724810][ T6380] UDC core: g1: couldn't find an available UDC or it's busy [ 256.491955][ T6362] XFS (loop2): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 256.638381][ T6391] blktrace: Concurrent blktraces are not allowed on loop4 [ 256.857311][ T6395] loop3: detected capacity change from 0 to 4096 [ 256.892786][ T6395] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 258.073909][ T5809] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 258.295191][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 258.918879][ T5809] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 258.937543][ T5809] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 258.948987][ T5809] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 259.013633][ T5809] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 259.040889][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.052965][ T6413] loop0: detected capacity change from 0 to 256 [ 259.059749][ T5809] usb 5-1: Product: syz [ 259.067298][ T5809] usb 5-1: Manufacturer: syz [ 259.075924][ T5809] usb 5-1: SerialNumber: syz [ 259.125057][ T5809] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 259.220243][ T5809] imon 5-1:155.0: unable to initialize intf0, err -19 [ 259.268084][ T5809] imon:imon_probe: failed to initialize context! [ 259.288868][ T5809] imon 5-1:155.0: unable to register, err -19 [ 259.473010][ T6419] Need at least one configuration in g1. [ 259.478870][ T6419] udc dummy_udc.0: failed to start g1: -22 [ 259.484831][ T6419] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 259.492824][ T6419] UDC core: g1: couldn't find an available UDC or it's busy [ 260.384630][ T6430] loop0: detected capacity change from 0 to 2048 [ 260.394169][ T5809] libceph: connect (1)[c::]:6789 error -22 [ 260.402997][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 260.514988][ T6421] ceph: No mds server is up or the cluster is laggy [ 261.365386][ T6430] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 263.800045][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 263.869769][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.638'. [ 264.124015][ T5809] usb 5-1: USB disconnect, device number 2 [ 264.426630][ T6468] Need at least one configuration in g1. [ 264.432475][ T6468] udc dummy_udc.0: failed to start g1: -22 [ 264.438470][ T6468] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 264.446656][ T6468] UDC core: g1: couldn't find an available UDC or it's busy [ 264.455830][ T4288] Bluetooth: unknown link type 131 [ 265.646611][ T6479] loop4: detected capacity change from 0 to 256 [ 266.510044][ T6458] loop1: detected capacity change from 0 to 40427 [ 266.534056][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 266.572143][ T6458] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 266.723330][ T6458] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 266.892860][ T6458] F2FS-fs (loop1): invalid crc value [ 267.006076][ T6458] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 267.624865][ T6458] F2FS-fs (loop1): Start checkpoint disabled! [ 267.665020][ T6458] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 267.684675][ T6458] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 267.923824][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 268.052287][ T6483] loop4: detected capacity change from 0 to 32768 [ 268.130273][ T6483] read_mapping_page failed! [ 268.145019][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 268.152175][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 268.157836][ T6483] ERROR: (device loop4): txCommit: [ 268.157836][ T6483] [ 268.191157][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 268.249188][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 268.288998][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.329324][ T7] usb 4-1: config 0 descriptor?? [ 268.355647][ T5057] read_mapping_page failed! [ 268.362569][ T5057] ERROR: (device loop4): txCommit: [ 268.362569][ T5057] [ 268.375328][ T7] hub 4-1:0.0: USB hub found [ 268.566326][ T6504] Need at least one configuration in g1. [ 268.572157][ T6504] udc dummy_udc.0: failed to start g1: -22 [ 268.578160][ T6504] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 268.586866][ T6504] UDC core: g1: couldn't find an available UDC or it's busy [ 268.764953][ T5057] jfs_write_inode: jfs_commit_inode failed! [ 269.254333][ T7] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 269.294601][ T4317] libceph: connect (1)[c::]:6789 error -101 [ 269.302148][ T4317] libceph: mon0 (1)[c::]:6789 connect error [ 269.341069][ T6499] ceph: No mds server is up or the cluster is laggy [ 269.520514][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 269.543202][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 269.586300][ T6518] netlink: 132 bytes leftover after parsing attributes in process `syz.2.657'. [ 269.696239][ T7] usb 4-1: USB disconnect, device number 3 [ 271.304136][ T6529] loop4: detected capacity change from 0 to 16 [ 271.352185][ T6529] erofs: (device loop4): mounted with root inode @ nid 36. [ 271.607465][ T6535] loop3: detected capacity change from 0 to 4096 [ 271.659427][ T6535] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 271.744749][ T6540] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 271.755112][ T6540] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 273.747655][ T6531] loop2: detected capacity change from 0 to 40427 [ 273.764259][ T6544] loop0: detected capacity change from 0 to 32768 [ 273.780616][ T6531] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 273.836343][ T6554] netlink: 44 bytes leftover after parsing attributes in process `syz.4.670'. [ 274.213887][ T6531] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 274.327980][ T6531] F2FS-fs (loop2): invalid crc value [ 274.548465][ T6531] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 274.748810][ T6531] F2FS-fs (loop2): Start checkpoint disabled! [ 275.720857][ T6531] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 275.770567][ T6531] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 277.269223][ T6571] loop4: detected capacity change from 0 to 4096 [ 277.342869][ T6571] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 277.704677][ T6581] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 277.838547][ T6569] loop1: detected capacity change from 0 to 32768 [ 277.897061][ T6569] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.676 (6569) [ 278.732661][ T6569] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 278.797041][ T6578] loop2: detected capacity change from 0 to 32768 [ 278.808693][ T6569] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 278.818023][ T6569] BTRFS info (device loop1): using free space tree [ 278.890720][ T6578] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 278.973055][ T6611] netlink: 44 bytes leftover after parsing attributes in process `syz.3.682'. [ 279.551079][ T6578] JBD2: Ignoring recovery information on journal [ 280.026076][ T6569] BTRFS info (device loop1): enabling ssd optimizations [ 280.138214][ T6614] loop0: detected capacity change from 0 to 1024 [ 280.281246][ T4277] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.406292][ T6578] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 281.245984][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 281.333863][ T6627] loop0: detected capacity change from 0 to 256 [ 282.008477][ T6638] hub 8-0:1.0: USB hub found [ 282.013906][ T6638] hub 8-0:1.0: 1 port detected [ 282.656369][ T6641] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 284.161187][ T6661] loop0: detected capacity change from 0 to 64 [ 285.045640][ T6664] loop4: detected capacity change from 0 to 1024 [ 285.256046][ T6649] loop2: detected capacity change from 0 to 32768 [ 285.504135][ T6649] XFS (loop2): Mounting V5 Filesystem [ 285.566938][ T6677] netlink: 132 bytes leftover after parsing attributes in process `syz.0.700'. [ 286.358960][ T6649] XFS (loop2): log mount failed [ 286.476122][ T6684] loop0: detected capacity change from 0 to 128 [ 287.824070][ T6705] hub 8-0:1.0: USB hub found [ 287.829004][ T6705] hub 8-0:1.0: 1 port detected [ 288.576059][ T6707] loop4: detected capacity change from 0 to 128 [ 288.660034][ T6707] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 288.720146][ T6707] hpfs: filesystem error: improperly stopped [ 288.774016][ T6707] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 288.781913][ T6707] hpfs: You really don't want any checks? You are crazy... [ 288.867411][ T6707] hpfs: Code page index out of array [ 288.900640][ T6707] hpfs: code page support is disabled [ 289.055896][ T6707] hpfs: hpfs_map_4sectors(): unaligned read [ 289.357260][ T6707] hpfs: hpfs_map_4sectors(): unaligned read [ 289.523901][ T6707] hpfs: filesystem error: unable to find root dir [ 290.670186][ T6732] hub 8-0:1.0: USB hub found [ 290.675390][ T6732] hub 8-0:1.0: 1 port detected [ 290.721913][ T6728] loop2: detected capacity change from 0 to 4096 [ 291.697678][ T6728] ntfs3: loop2: ino=9, attr_set_size [ 292.912254][ T6754] hub 8-0:1.0: USB hub found [ 292.917149][ T6754] hub 8-0:1.0: 1 port detected [ 293.219815][ T6758] loop4: detected capacity change from 0 to 256 [ 293.323359][ T6758] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 293.368166][ T6762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.449681][ T6762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.585405][ T6767] loop1: detected capacity change from 0 to 2048 [ 293.611103][ T6764] loop2: detected capacity change from 0 to 40427 [ 293.637845][ T6767] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18881, location=18881 [ 293.651215][ T6764] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 293.663895][ T6764] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 293.709411][ T6767] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.715005][ T6764] F2FS-fs (loop2): invalid crc value [ 293.795821][ T6764] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 293.988262][ T6764] F2FS-fs (loop2): Start checkpoint disabled! [ 294.063438][ T6777] netlink: 132 bytes leftover after parsing attributes in process `syz.4.729'. [ 294.734296][ T6764] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 294.779726][ T6764] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 295.215513][ T6784] loop0: detected capacity change from 0 to 16 [ 295.232937][ T6784] erofs: (device loop0): mounted with root inode @ nid 36. [ 295.690733][ T6792] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 295.701170][ T6792] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 297.253248][ T6804] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 298.569794][ T6814] loop1: detected capacity change from 0 to 4096 [ 298.602339][ T6809] loop0: detected capacity change from 0 to 32768 [ 298.617097][ T6814] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 299.342194][ T6828] hub 8-0:1.0: USB hub found [ 299.348095][ T6828] hub 8-0:1.0: 1 port detected [ 299.816938][ T6830] netlink: 256 bytes leftover after parsing attributes in process `syz.0.747'. [ 300.030766][ T6801] loop4: detected capacity change from 0 to 32768 [ 300.430045][ T6840] hub 8-0:1.0: USB hub found [ 300.435842][ T6840] hub 8-0:1.0: 1 port detected [ 301.113509][ T6846] loop2: detected capacity change from 0 to 16 [ 302.432658][ T6846] erofs: (device loop2): mounted with root inode @ nid 36. [ 306.417255][ T6887] hub 8-0:1.0: USB hub found [ 306.422178][ T6887] hub 8-0:1.0: 1 port detected [ 307.133163][ T6888] loop3: detected capacity change from 0 to 1024 [ 308.213378][ T6897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.767'. [ 308.278981][ T6900] loop2: detected capacity change from 0 to 512 [ 308.471593][ T6881] loop0: detected capacity change from 0 to 32768 [ 308.633808][ T5806] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 308.739935][ T6881] XFS (loop0): Mounting V5 Filesystem [ 308.767605][ T6890] loop4: detected capacity change from 0 to 40427 [ 308.812941][ T6890] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 308.843903][ T5806] usb 2-1: Using ep0 maxpacket: 32 [ 308.873069][ T5806] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 308.921234][ T6881] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 308.956280][ T6890] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 308.986501][ T5806] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 309.031352][ T6890] F2FS-fs (loop4): Unrecognized mount option "errors=remount-ro" or missing value [ 309.085588][ T5806] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 309.101987][ T6881] XFS (loop0): Starting recovery (logdev: internal) [ 309.215197][ T6881] XFS (loop0): Ending recovery (logdev: internal) [ 309.228667][ T5806] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 309.285541][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.354237][ T5806] usb 2-1: Product: syz [ 309.391421][ T5806] usb 2-1: Manufacturer: syz [ 309.414209][ T4274] XFS (loop0): Unmounting Filesystem [ 309.435622][ T5806] usb 2-1: SerialNumber: syz [ 309.535198][ T5806] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 309.580179][ T5806] imon 2-1:155.0: unable to initialize intf0, err -19 [ 309.628139][ T5806] imon:imon_probe: failed to initialize context! [ 309.685494][ T5806] imon 2-1:155.0: unable to register, err -19 [ 311.115076][ T6924] netlink: 'syz.0.771': attribute type 2 has an invalid length. [ 311.341315][ T6926] loop4: detected capacity change from 0 to 32768 [ 311.617489][ T5806] usb 2-1: USB disconnect, device number 4 [ 311.910751][ T6936] blktrace: Concurrent blktraces are not allowed on loop4 [ 311.914343][ T5300] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 312.103737][ T5300] usb 5-1: Using ep0 maxpacket: 32 [ 312.111648][ T5300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 312.123873][ T5300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 312.301399][ T6941] loop0: detected capacity change from 0 to 4096 [ 312.355636][ T6941] ntfs3: Unknown parameter 'windows_names' [ 312.563369][ T5300] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 312.572517][ T5300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.610260][ T5300] usb 5-1: config 0 descriptor?? [ 312.631730][ T5300] hub 5-1:0.0: USB hub found [ 313.037100][ T5300] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 313.253772][ T5300] usbhid 5-1:0.0: can't add hid device: -71 [ 313.267857][ T5300] usbhid: probe of 5-1:0.0 failed with error -71 [ 313.314698][ T5300] usb 5-1: USB disconnect, device number 3 [ 313.407658][ T6963] loop2: detected capacity change from 0 to 2048 [ 313.480393][ T6963] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 313.539751][ T6963] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 313.557037][ T6963] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 313.570329][ T6963] EXT4-fs (loop2): This should not happen!! Data will be lost [ 313.570329][ T6963] [ 313.580173][ T6963] EXT4-fs (loop2): Total free blocks count 0 [ 313.586435][ T6963] EXT4-fs (loop2): Free/Dirty block details [ 313.624962][ T6963] EXT4-fs (loop2): free_blocks=2415919504 [ 313.638258][ T6963] EXT4-fs (loop2): dirty_blocks=16 [ 313.644281][ T6963] EXT4-fs (loop2): Block reservation details [ 313.650384][ T6963] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 313.706661][ T6970] loop0: detected capacity change from 0 to 2048 [ 313.731747][ T6970] UDF-fs: bad mount option "gid=00000000000000060928" or missing value [ 313.865565][ T76] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 314.111251][ T6979] netlink: 'syz.2.789': attribute type 2 has an invalid length. [ 315.032572][ T6991] blktrace: Concurrent blktraces are not allowed on loop4 [ 315.154131][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.788'. [ 315.553853][ T5300] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 315.713553][ T6971] loop3: detected capacity change from 0 to 40427 [ 315.855091][ T5300] usb 5-1: Using ep0 maxpacket: 32 [ 315.884998][ T6971] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 315.904148][ T5300] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 315.921740][ T5300] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 315.921785][ T6971] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 315.932493][ T5300] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 315.956433][ T5300] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 315.969955][ T6997] loop2: detected capacity change from 0 to 32768 [ 315.980196][ T5300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.988455][ T5300] usb 5-1: Product: syz [ 315.992782][ T5300] usb 5-1: Manufacturer: syz [ 316.008029][ T6971] F2FS-fs (loop3): invalid crc value [ 316.018156][ T5300] usb 5-1: SerialNumber: syz [ 316.025421][ T6997] JBD2: Ignoring recovery information on journal [ 316.092590][ T5300] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 316.119630][ T5300] imon 5-1:155.0: unable to initialize intf0, err -19 [ 316.165966][ T6997] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 316.198369][ T5300] imon:imon_probe: failed to initialize context! [ 316.215022][ T5300] imon 5-1:155.0: unable to register, err -19 [ 316.226484][ T6971] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 316.443234][ T6971] F2FS-fs (loop3): Start checkpoint disabled! [ 316.468952][ T6971] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 316.487597][ T6971] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 316.487932][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 316.547412][ T7007] loop1: detected capacity change from 0 to 256 [ 316.928065][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.934439][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.783134][ T7024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.802'. [ 317.846819][ T7014] loop1: detected capacity change from 0 to 40427 [ 317.863173][ T7014] F2FS-fs (loop1): Corrupted extension count (327717 + 1 > 64) [ 317.863785][ T5811] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 317.891062][ T7014] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 317.915623][ T7014] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 317.945431][ T7014] F2FS-fs (loop1): invalid crc value [ 317.992121][ T7014] F2FS-fs (loop1): Found nat_bits in checkpoint [ 318.092798][ T7] usb 5-1: USB disconnect, device number 4 [ 318.130344][ T5811] usb 4-1: Using ep0 maxpacket: 32 [ 318.142302][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 318.173775][ T5300] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 318.181555][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 318.213476][ T5811] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 318.239437][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.269555][ T5811] usb 4-1: config 0 descriptor?? [ 318.277570][ T7014] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 318.297213][ T7014] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 318.302807][ T5811] hub 4-1:0.0: USB hub found [ 318.454127][ T5300] usb 1-1: Using ep0 maxpacket: 32 [ 318.463263][ T5300] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 318.620229][ T7029] loop4: detected capacity change from 0 to 32768 [ 318.638104][ T5300] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 318.701813][ T5811] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 318.723227][ T5300] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 318.750958][ T7029] ERROR: (device loop4): dbAllocAG: unable to allocate blocks [ 318.750958][ T7029] [ 318.792144][ T7029] jfs_create: dtInsert returned -EIO [ 318.809536][ T7029] ERROR: (device loop4): jfs_create: [ 318.809536][ T7029] [ 318.832513][ T5300] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 318.858861][ T5300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.908032][ T5300] usb 1-1: Product: syz [ 318.967273][ T7035] netlink: 44 bytes leftover after parsing attributes in process `syz.2.806'. [ 319.171137][ T5811] usbhid 4-1:0.0: can't add hid device: -71 [ 319.180357][ T5811] usbhid: probe of 4-1:0.0 failed with error -71 [ 319.190205][ T5300] usb 1-1: Manufacturer: syz [ 319.225140][ T5811] usb 4-1: USB disconnect, device number 4 [ 319.231355][ T5300] usb 1-1: SerialNumber: syz [ 319.269525][ T5300] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 319.294061][ T5300] imon 1-1:155.0: unable to initialize intf0, err -19 [ 319.306739][ T5300] imon:imon_probe: failed to initialize context! [ 319.324143][ T5300] imon 1-1:155.0: unable to register, err -19 [ 319.742465][ T7042] loop3: detected capacity change from 0 to 2048 [ 319.804679][ T7042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 319.929813][ T7043] loop1: detected capacity change from 0 to 4096 [ 319.964883][ T7042] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 320.011018][ T7043] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 320.103099][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 320.105469][ T7043] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 320.140947][ T7051] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 320.473586][ T4606] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 320.480516][ T4277] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 320.487559][ T4277] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 320.505675][ T4277] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 320.517686][ T4606] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 320.529046][ T4277] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 320.804549][ T7063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.814'. [ 321.273812][ T5811] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 321.291908][ T5300] usb 1-1: USB disconnect, device number 5 [ 321.487172][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 321.552043][ T7054] loop4: detected capacity change from 0 to 32768 [ 321.593924][ T7054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.807 (7054) [ 321.700864][ T7054] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 321.734660][ T5811] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 321.764769][ T5811] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 321.783896][ T7054] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 321.827558][ T5811] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 321.830277][ T7059] loop2: detected capacity change from 0 to 32768 [ 321.866626][ T7054] BTRFS info (device loop4): using free space tree [ 321.981573][ T5811] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 322.020546][ T7059] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 322.032045][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.056836][ T5811] usb 2-1: Product: syz [ 322.061108][ T5811] usb 2-1: Manufacturer: syz [ 322.072000][ T5811] usb 2-1: SerialNumber: syz [ 322.091528][ T5811] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 322.101141][ T5811] imon 2-1:155.0: unable to initialize intf0, err -19 [ 322.108316][ T5811] imon:imon_probe: failed to initialize context! [ 322.115104][ T5811] imon 2-1:155.0: unable to register, err -19 [ 322.148773][ T7054] BTRFS info (device loop4): enabling ssd optimizations [ 322.231939][ T7066] loop0: detected capacity change from 0 to 32768 [ 322.290006][ T7059] (syz.2.813,7059,0):ocfs2_double_lock:1188 ERROR: status = -2 [ 322.333189][ T4286] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 322.361435][ T7059] (syz.2.813,7059,0):ocfs2_rename:1297 ERROR: status = -2 [ 322.403762][ T7059] (syz.2.813,7059,1):ocfs2_rename:1687 ERROR: status = -2 [ 322.555818][ T7059] syz.2.813 (7059) used greatest stack depth: 18688 bytes left [ 322.677784][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 324.243364][ T7101] loop3: detected capacity change from 0 to 128 [ 324.343969][ T7103] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 324.368197][ T7101] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 324.414240][ T7101] hpfs: filesystem error: improperly stopped [ 324.433790][ T7101] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 324.441552][ T7101] hpfs: You really don't want any checks? You are crazy... [ 324.489551][ T7101] hpfs: Code page index out of array [ 324.516617][ T7101] hpfs: code page support is disabled [ 324.532494][ T7101] hpfs: hpfs_map_4sectors(): unaligned read [ 324.569310][ T7101] hpfs: hpfs_map_4sectors(): unaligned read [ 324.587855][ T7101] hpfs: filesystem error: unable to find root dir [ 324.743837][ T5818] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 324.921115][ T22] usb 2-1: USB disconnect, device number 5 [ 324.973804][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 324.980615][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 325.016497][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.825'. [ 325.033861][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 325.068650][ T7121] loop1: detected capacity change from 0 to 128 [ 325.141913][ T5818] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 325.211521][ T7121] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 325.223537][ T7121] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 325.367467][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.426351][ T7118] loop3: detected capacity change from 0 to 32768 [ 325.442746][ T5818] usb 3-1: config 0 descriptor?? [ 325.484607][ T5818] hub 3-1:0.0: USB hub found [ 325.486409][ T7112] loop4: detected capacity change from 0 to 32768 [ 325.573277][ T7112] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.824 (7112) [ 325.743792][ T7087] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 325.784139][ T7112] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 325.801143][ T7112] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 325.936980][ T5818] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 325.945271][ T7112] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 325.983746][ T7087] usb 1-1: Using ep0 maxpacket: 32 [ 326.594053][ T7112] BTRFS info (device loop4): use zstd compression, level 3 [ 326.602765][ T7087] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 326.622810][ T7112] BTRFS info (device loop4): using free space tree [ 326.625024][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 326.630938][ T7087] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 326.648858][ T7087] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 326.703402][ T7087] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 326.753208][ T7087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.797091][ T5818] usbhid 3-1:0.0: can't add hid device: -71 [ 326.803333][ T5818] usbhid: probe of 3-1:0.0 failed with error -71 [ 326.832575][ T7087] usb 1-1: Product: syz [ 326.899958][ T7087] usb 1-1: Manufacturer: syz [ 326.915885][ T7087] usb 1-1: SerialNumber: syz [ 326.944541][ T5818] usb 3-1: USB disconnect, device number 4 [ 326.950907][ T7087] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 326.983865][ T7087] imon 1-1:155.0: unable to initialize intf0, err -19 [ 326.993955][ T7087] imon:imon_probe: failed to initialize context! [ 326.998986][ T7112] BTRFS info (device loop4): enabling ssd optimizations [ 327.007730][ T7087] imon 1-1:155.0: unable to register, err -19 [ 327.093414][ T27] audit: type=1800 audit(1788913790.793:82): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.824" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 327.370608][ T7164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.467908][ T7165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.688716][ T4286] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 328.200620][ T7173] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 329.675144][ T7167] loop2: detected capacity change from 0 to 32768 [ 329.756040][ T7167] JBD2: Ignoring recovery information on journal [ 329.829406][ T7180] loop3: detected capacity change from 0 to 128 [ 329.858547][ T7167] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 329.871848][ T7180] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 329.932536][ T7180] hpfs: filesystem error: improperly stopped [ 329.988260][ T7180] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 330.043742][ T7180] hpfs: You really don't want any checks? You are crazy... [ 330.083873][ T7180] hpfs: Code page index out of array [ 330.089205][ T7180] hpfs: code page support is disabled [ 330.143150][ T7180] hpfs: hpfs_map_4sectors(): unaligned read [ 330.166475][ T7180] hpfs: hpfs_map_4sectors(): unaligned read [ 330.183847][ T7180] hpfs: filesystem error: unable to find root dir [ 330.238630][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 330.701999][ T5810] usb 1-1: USB disconnect, device number 6 [ 331.036172][ T7198] hub 8-0:1.0: USB hub found [ 331.041580][ T7198] hub 8-0:1.0: 1 port detected [ 331.316846][ T7185] loop1: detected capacity change from 0 to 32768 [ 331.893209][ T7200] loop0: detected capacity change from 0 to 4096 [ 331.910501][ T7202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.919326][ T7183] loop4: detected capacity change from 0 to 32768 [ 331.938480][ T7203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.950810][ T7200] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 332.382448][ T7210] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 332.653518][ T7191] loop2: detected capacity change from 0 to 32768 [ 334.360373][ T7229] loop1: detected capacity change from 0 to 4096 [ 334.408912][ T7229] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 334.462576][ T7229] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 334.551182][ T7229] ntfs3: loop1: no free space to extend mft [ 334.556142][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.855'. [ 334.740244][ T7236] hub 8-0:1.0: USB hub found [ 334.745661][ T7236] hub 8-0:1.0: 1 port detected [ 334.876782][ T7222] loop3: detected capacity change from 0 to 32768 [ 334.978446][ T7222] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 335.006569][ T4606] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 335.019696][ T4277] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 335.040455][ T4277] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 335.055291][ T7222] JBD2: Ignoring recovery information on journal [ 335.064132][ T7208] loop4: detected capacity change from 0 to 40427 [ 335.074961][ T4277] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 335.087766][ T11] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 335.097088][ T7208] F2FS-fs (loop4): invalid crc value [ 335.116957][ T7208] F2FS-fs (loop4): Found nat_bits in checkpoint [ 335.130844][ T4277] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 335.193794][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 335.238648][ T7222] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 335.403920][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 335.429830][ T22] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 335.472998][ T22] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 335.778722][ T22] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 335.942007][ T22] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 335.957470][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.971300][ T22] usb 3-1: Product: syz [ 335.977307][ T22] usb 3-1: Manufacturer: syz [ 335.985032][ T22] usb 3-1: SerialNumber: syz [ 336.008848][ T22] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 336.016704][ T22] imon 3-1:155.0: unable to initialize intf0, err -19 [ 336.023565][ T22] imon:imon_probe: failed to initialize context! [ 336.030709][ T22] imon 3-1:155.0: unable to register, err -19 [ 336.067673][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 336.395375][ T7254] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 336.698005][ T7256] loop1: detected capacity change from 0 to 2048 [ 337.534469][ T7256] UDF-fs: iocharset as not found [ 337.676696][ T7266] loop0: detected capacity change from 0 to 64 [ 339.509526][ T7277] bridge0: port 3(vlan2) entered blocking state [ 340.362627][ T7277] bridge0: port 3(vlan2) entered disabled state [ 340.377667][ T7281] hub 8-0:1.0: USB hub found [ 340.382598][ T7281] hub 8-0:1.0: 1 port detected [ 340.419969][ T7277] device vlan2 entered promiscuous mode [ 340.849467][ T7284] loop0: detected capacity change from 0 to 16 [ 340.857294][ T7277] device dummy0 entered promiscuous mode [ 340.918307][ T7284] erofs: (device loop0): mounted with root inode @ nid 36. [ 341.014036][ T7272] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 342.412814][ T7297] loop0: detected capacity change from 0 to 512 [ 342.431851][ T7296] loop1: detected capacity change from 0 to 2048 [ 342.609283][ T7298] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 342.650226][ T6631] usb 3-1: USB disconnect, device number 5 [ 343.561008][ T7286] loop3: detected capacity change from 0 to 32768 [ 343.594964][ T7286] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.872 (7286) [ 344.885104][ T7325] hub 8-0:1.0: USB hub found [ 344.924238][ T7325] hub 8-0:1.0: 1 port detected [ 345.888176][ T7331] loop1: detected capacity change from 0 to 4096 [ 345.940144][ T7331] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 346.049176][ T7315] loop2: detected capacity change from 0 to 32768 [ 346.994911][ T4350] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 347.042509][ T7335] loop2: detected capacity change from 0 to 32768 [ 347.196799][ T7340] loop0: detected capacity change from 0 to 1024 [ 347.243925][ T4350] usb 2-1: Using ep0 maxpacket: 32 [ 347.260220][ T4350] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 347.292151][ T7340] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 347.315109][ T4350] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 347.328372][ T7342] loop4: detected capacity change from 0 to 64 [ 347.363928][ T4350] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 347.441716][ T4350] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 347.494766][ T4350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.513828][ T4350] usb 2-1: Product: syz [ 347.518203][ T4350] usb 2-1: Manufacturer: syz [ 347.522901][ T4350] usb 2-1: SerialNumber: syz [ 347.559739][ T4350] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 347.585063][ T4350] imon 2-1:155.0: unable to initialize intf0, err -19 [ 347.602312][ T4350] imon:imon_probe: failed to initialize context! [ 347.617759][ T4350] imon 2-1:155.0: unable to register, err -19 [ 348.710006][ T7348] loop4: detected capacity change from 0 to 1024 [ 351.393719][ T4318] usb 2-1: USB disconnect, device number 6 [ 351.946173][ T7388] loop2: detected capacity change from 0 to 32768 [ 351.974199][ T7388] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.904 (7388) [ 352.059354][ T7388] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 352.127326][ T7388] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 352.141860][ T7390] loop0: detected capacity change from 0 to 4096 [ 352.175376][ T7390] ntfs3: Unknown parameter 'windows_names' [ 352.183984][ T7388] BTRFS info (device loop2): turning off barriers [ 352.190752][ T7388] BTRFS info (device loop2): max_inline at 0 [ 352.213822][ T7388] BTRFS info (device loop2): enabling all of the rescue options [ 352.221608][ T7388] BTRFS info (device loop2): ignoring data csums [ 352.280640][ T7388] BTRFS info (device loop2): ignoring bad roots [ 352.306035][ T7388] BTRFS info (device loop2): disabling log replay at mount time [ 352.345140][ T7388] BTRFS info (device loop2): force zlib compression, level 3 [ 352.397837][ T7388] BTRFS info (device loop2): allowing degraded mounts [ 352.407561][ T7388] BTRFS info (device loop2): enabling ssd optimizations [ 352.444781][ T7388] BTRFS info (device loop2): using spread ssd allocation scheme [ 352.493891][ T7388] BTRFS info (device loop2): using free space tree [ 352.652238][ T7402] loop1: detected capacity change from 0 to 2048 [ 352.707580][ T7392] loop3: detected capacity change from 0 to 32768 [ 352.734439][ T4973] BTRFS warning (device loop2): checksum verify failed on logical 1052672 mirror 1 wanted 0x3226f9dadc896f8f7b9a0be7c609110345c27f6019125c38f3283b3a68e897a5 found 0xb353a08db1be80d389f100a27df3921b46d9fb12a0b3dbd8e1965f3be527cedb level 0 [ 352.766782][ T7402] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18881, location=18881 [ 352.818407][ T7392] JBD2: Ignoring recovery information on journal [ 352.820357][ T7402] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 352.856763][ T7388] BTRFS error (device loop2): failed to read chunk root [ 352.953827][ T7392] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 353.080051][ T7388] BTRFS error (device loop2): open_ctree failed: -22 [ 353.220449][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 353.446563][ T7424] netlink: 44 bytes leftover after parsing attributes in process `syz.1.909'. [ 353.748183][ T7420] loop2: detected capacity change from 0 to 4096 [ 353.796157][ T7420] EXT4-fs: Ignoring removed nobh option [ 353.902339][ T7397] loop0: detected capacity change from 0 to 32768 [ 354.050075][ T7397] JBD2: Ignoring recovery information on journal [ 354.120078][ T7397] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 354.931235][ T7420] EXT4-fs: Ignoring removed bh option [ 354.945856][ T7420] EXT4-fs (loop2): Test dummy encryption mode enabled [ 354.988020][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 354.988024][ T7420] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 355.274348][ T7445] loop0: detected capacity change from 0 to 16 [ 355.314010][ T7445] erofs: (device loop0): mounted with root inode @ nid 36. [ 355.386421][ T7447] loop4: detected capacity change from 0 to 1024 [ 355.404205][ T6631] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 355.455162][ T7447] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 355.554046][ T7420] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 355.623851][ T6631] usb 2-1: Using ep0 maxpacket: 32 [ 355.706314][ T6631] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 355.833298][ T6631] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 355.928181][ T6631] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 356.020310][ T6631] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 356.070342][ T6631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.124139][ T6631] usb 2-1: Product: syz [ 356.152641][ T6631] usb 2-1: Manufacturer: syz [ 356.193310][ T6631] usb 2-1: SerialNumber: syz [ 356.281537][ T7420] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 356.291031][ T6631] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 356.403622][ T6631] imon 2-1:155.0: unable to initialize intf0, err -19 [ 356.411151][ T6631] imon:imon_probe: failed to initialize context! [ 356.510259][ T6631] imon 2-1:155.0: unable to register, err -19 [ 356.663079][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 357.063837][ T6631] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 357.253716][ T6631] usb 3-1: Using ep0 maxpacket: 32 [ 357.260471][ T6631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 357.367870][ T6631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 357.450255][ T6631] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 357.471684][ T6631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.492729][ T6631] usb 3-1: config 0 descriptor?? [ 357.540981][ T6631] hub 3-1:0.0: USB hub found [ 357.857912][ T7470] UDC core: g1: couldn't find an available UDC or it's busy [ 357.939457][ T6631] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 358.513743][ T6631] usbhid 3-1:0.0: can't add hid device: -71 [ 358.520733][ T6631] usbhid: probe of 3-1:0.0 failed with error -71 [ 358.595118][ T6631] usb 3-1: USB disconnect, device number 6 [ 359.608363][ T7474] loop0: detected capacity change from 0 to 32768 [ 359.627246][ T4278] usb 2-1: USB disconnect, device number 7 [ 359.747860][ T7474] JBD2: Ignoring recovery information on journal [ 360.429332][ T7486] loop1: detected capacity change from 0 to 512 [ 360.573824][ T7474] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 360.629559][ T7486] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 360.689238][ T7486] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 360.715325][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 360.775694][ T7486] EXT4-fs (loop1): orphan cleanup on readonly fs [ 360.833931][ T7486] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #13: comm syz.1.924: iget: bad i_size value: 12154761577498 [ 361.656236][ T7486] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.924: couldn't read orphan inode 13 (err -117) [ 361.695142][ T7486] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 361.721945][ T7486] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.924: dx entry: limit 65535 != root limit 120 [ 361.741992][ T7497] loop3: detected capacity change from 0 to 512 [ 361.752194][ T7486] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.924: Corrupt directory, running e2fsck is recommended [ 361.823171][ T7497] EXT4-fs: Ignoring removed oldalloc option [ 361.912543][ T7497] EXT4-fs error (device loop3): ext4_xattr_inode_iget:397: comm syz.3.928: Parent and EA inode have the same ino 15 [ 361.991589][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 362.071374][ T7504] loop1: detected capacity change from 0 to 128 [ 362.079147][ T7497] EXT4-fs (loop3): Remounting filesystem read-only [ 362.094132][ T7497] EXT4-fs (loop3): 1 orphan inode deleted [ 362.100006][ T7497] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 362.128635][ T7504] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 362.175581][ T7504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 362.217424][ T7497] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.928: deleted inode referenced: 15 [ 362.238549][ T7504] ext2 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.272115][ T7497] EXT4-fs (loop3): Remounting filesystem read-only [ 362.398237][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 362.537809][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 363.688127][ T7517] loop1: detected capacity change from 0 to 64 [ 363.725249][ T7510] loop2: detected capacity change from 0 to 32768 [ 363.761014][ T7510] [ 363.761014][ T7510] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 363.761014][ T7510] [ 363.770607][ T7501] loop4: detected capacity change from 0 to 32768 [ 363.815037][ T4288] Bluetooth: unknown link type 131 [ 363.839831][ T7510] ialloc: diAlloc returned -5! [ 364.031186][ T4272] [ 364.031186][ T4272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 364.031186][ T4272] [ 365.136993][ T4272] [ 365.136993][ T4272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 365.136993][ T4272] [ 365.419707][ T7534] loop0: detected capacity change from 0 to 512 [ 365.495731][ T7534] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 365.507990][ T7534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 365.534938][ T7534] EXT4-fs (loop0): orphan cleanup on readonly fs [ 365.576807][ T7534] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #13: comm syz.0.927: iget: bad i_size value: 12154761577498 [ 365.664922][ T7534] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.927: couldn't read orphan inode 13 (err -117) [ 365.684466][ T7534] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 365.735822][ T7534] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.927: dx entry: limit 65535 != root limit 120 [ 365.772440][ T7539] loop2: detected capacity change from 0 to 4096 [ 365.783717][ T7534] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.927: Corrupt directory, running e2fsck is recommended [ 365.811100][ T7539] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 365.886900][ T7539] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 365.894116][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 365.922227][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 365.986096][ T4869] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 366.011515][ T4272] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 366.030373][ T4272] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 366.074054][ T4272] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 366.087591][ T7544] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 366.094117][ T4850] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 366.102527][ T4272] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 366.870417][ T7560] loop0: detected capacity change from 0 to 64 [ 368.139920][ T7556] loop4: detected capacity change from 0 to 32768 [ 368.190075][ T7556] add_index: next_index = 0. Resetting! [ 368.223858][ T7556] find_entry called with index >= next_index [ 368.229986][ T7556] find_entry called with index >= next_index [ 368.243804][ T130] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 368.443756][ T130] usb 3-1: Using ep0 maxpacket: 32 [ 368.454855][ T130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 368.499187][ T130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 368.528648][ T130] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 368.553752][ T130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.581310][ T130] usb 3-1: config 0 descriptor?? [ 368.605355][ T130] hub 3-1:0.0: USB hub found [ 368.687572][ T7563] loop1: detected capacity change from 0 to 32768 [ 368.809603][ T130] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 369.037833][ T7572] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 369.231585][ T130] usbhid 3-1:0.0: can't add hid device: -71 [ 369.266531][ T130] usbhid: probe of 3-1:0.0 failed with error -71 [ 369.314459][ T130] usb 3-1: USB disconnect, device number 7 [ 369.842073][ T7581] siw: device registration error -23 [ 370.080896][ T7579] loop1: detected capacity change from 0 to 32768 [ 370.111878][ T7579] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.955 (7579) [ 370.123199][ T7579] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 370.123277][ T7579] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 370.123317][ T7579] BTRFS info (device loop1): setting nodatasum [ 370.123336][ T7579] BTRFS info (device loop1): force zlib compression, level 3 [ 370.123360][ T7579] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 370.123410][ T7579] BTRFS info (device loop1): use lzo compression, level 0 [ 370.123441][ T7579] BTRFS info (device loop1): turning on flush-on-commit [ 370.123460][ T7579] BTRFS info (device loop1): enabling auto defrag [ 370.123498][ T7579] BTRFS info (device loop1): max_inline at 4096 [ 370.123519][ T7579] BTRFS info (device loop1): using free space tree [ 370.240103][ T7599] loop0: detected capacity change from 0 to 256 [ 370.241108][ T7599] exfat: Deprecated parameter 'utf8' [ 370.241181][ T7599] exfat: Deprecated parameter 'namecase' [ 370.241223][ T7599] exfat: Deprecated parameter 'utf8' [ 370.282832][ T7599] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 370.453980][ T7579] BTRFS info (device loop1): enabling ssd optimizations [ 370.704176][ T4277] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 371.834284][ T7627] loop4: detected capacity change from 0 to 128 [ 371.875065][ T7627] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 371.918017][ T7627] hpfs: filesystem error: improperly stopped [ 371.939089][ T7627] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 371.986060][ T7627] hpfs: You really don't want any checks? You are crazy... [ 372.014702][ T7627] hpfs: hpfs_map_sector(): read error [ 372.036220][ T7627] hpfs: code page support is disabled [ 372.052536][ T7627] hpfs: hpfs_map_4sectors(): unaligned read [ 372.072633][ T7627] hpfs: hpfs_map_4sectors(): unaligned read [ 372.082624][ T7627] hpfs: filesystem error: unable to find root dir [ 372.126770][ T7615] loop0: detected capacity change from 0 to 32768 [ 372.166226][ T7615] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.962 (7615) [ 372.234216][ T7615] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 372.303893][ T7615] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 372.333140][ T7615] BTRFS info (device loop0): using free space tree [ 372.455702][ T7633] netlink: 44 bytes leftover after parsing attributes in process `syz.4.966'. [ 372.727787][ T7622] loop2: detected capacity change from 0 to 32768 [ 372.800678][ T7622] JBD2: Ignoring recovery information on journal [ 372.868174][ T7615] BTRFS info (device loop0): enabling ssd optimizations [ 373.146943][ T7655] hub 8-0:1.0: USB hub found [ 373.228216][ T7622] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 373.252995][ T4274] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 373.266562][ T7655] hub 8-0:1.0: 1 port detected [ 374.430697][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 374.633950][ T1189] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 374.745035][ T7671] loop3: detected capacity change from 0 to 2048 [ 374.759567][ T7671] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18881, location=18881 [ 374.792909][ T7671] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 374.843964][ T1189] usb 5-1: Using ep0 maxpacket: 32 [ 374.859985][ T1189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 374.906953][ T1189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 374.953928][ T1189] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 374.990802][ T1189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.052038][ T1189] usb 5-1: config 0 descriptor?? [ 375.055749][ T1189] hub 5-1:0.0: USB hub found [ 375.256574][ T1189] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 375.660263][ T1189] usbhid 5-1:0.0: can't add hid device: -71 [ 375.673931][ T1189] usbhid: probe of 5-1:0.0 failed with error -71 [ 375.724427][ T1189] usb 5-1: USB disconnect, device number 5 [ 376.812530][ T7698] netlink: 44 bytes leftover after parsing attributes in process `syz.4.980'. [ 378.365367][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.371802][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.629296][ T7702] loop3: detected capacity change from 0 to 32768 [ 378.694360][ T7702] ERROR: (device loop3): diNewExt: no free extents [ 378.694360][ T7702] [ 378.742809][ T7702] ERROR: (device loop3): remounting filesystem as read-only [ 378.813751][ T7702] ialloc: diAlloc returned -5! [ 378.881915][ T7706] loop4: detected capacity change from 0 to 32768 [ 379.481981][ T7723] loop3: detected capacity change from 0 to 512 [ 379.579746][ T7723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 379.617980][ T7723] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.730594][ T7724] loop4: detected capacity change from 0 to 4096 [ 379.787035][ T7724] NILFS (loop4): invalid segment: Checksum error in segment payload [ 379.884022][ T7724] NILFS (loop4): trying rollback from an earlier position [ 379.946420][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 380.504995][ T7724] NILFS (loop4): recovery complete [ 380.757209][ T7735] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 381.779181][ T7749] loop2: detected capacity change from 0 to 256 [ 381.793786][ T7087] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 381.811051][ T7749] exfat: Deprecated parameter 'utf8' [ 381.850218][ T7749] exfat: Deprecated parameter 'namecase' [ 381.861952][ T7749] exfat: Deprecated parameter 'utf8' [ 381.993726][ T7087] usb 4-1: Using ep0 maxpacket: 32 [ 382.006571][ T7087] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 382.053972][ T7749] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 382.093873][ T7087] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 382.176296][ T7087] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 382.248202][ T7087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.316709][ T7087] usb 4-1: config 0 descriptor?? [ 382.349376][ T7087] hub 4-1:0.0: USB hub found [ 382.525052][ T7087] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 382.943566][ T7087] usbhid 4-1:0.0: can't add hid device: -71 [ 382.953225][ T7087] usbhid: probe of 4-1:0.0 failed with error -71 [ 383.013274][ T7087] usb 4-1: USB disconnect, device number 5 [ 383.038724][ T7753] loop2: detected capacity change from 0 to 32768 [ 383.133614][ T7753] JBD2: Ignoring recovery information on journal [ 383.316593][ T7753] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 383.367532][ T7753] (syz.2.998,7753,1):ocfs2_find_entry:1075 ERROR: status = -117 [ 383.412295][ T7753] (syz.2.998,7753,1):ocfs2_find_entry:1075 ERROR: status = -117 [ 383.459687][ T7753] (syz.2.998,7753,1):ocfs2_symlink:2065 ERROR: status = -117 [ 383.633601][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 383.705789][ T4288] Bluetooth: unknown link type 131 [ 383.979563][ T7755] loop0: detected capacity change from 0 to 32768 [ 384.154757][ T27] audit: type=1800 audit(1788913847.853:83): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.997" name="file1" dev="loop0" ino=0 res=0 errno=0 [ 384.341157][ T7768] loop2: detected capacity change from 0 to 2048 [ 384.471674][ T7768] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 384.683587][ T7768] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 384.769762][ T7768] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 384.800281][ T7780] loop1: detected capacity change from 0 to 64 [ 384.828596][ T7768] EXT4-fs (loop2): This should not happen!! Data will be lost [ 384.828596][ T7768] [ 385.544251][ T7768] EXT4-fs (loop2): Total free blocks count 0 [ 385.550353][ T7768] EXT4-fs (loop2): Free/Dirty block details [ 385.612167][ T7768] EXT4-fs (loop2): free_blocks=2415919504 [ 385.633870][ T7768] EXT4-fs (loop2): dirty_blocks=16 [ 385.639118][ T7768] EXT4-fs (loop2): Block reservation details [ 385.675783][ T7768] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 385.723906][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 386.715721][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 387.174157][ T7797] loop2: detected capacity change from 0 to 4096 [ 387.207550][ T4288] Bluetooth: unknown link type 131 [ 387.371820][ T7805] loop3: detected capacity change from 0 to 16 [ 387.379285][ T7805] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 387.428326][ T4261] udevd[4261]: incorrect cramfs checksum on /dev/loop3 [ 389.485420][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 389.628887][ T7825] siw: device registration error -23 [ 390.072297][ T7832] hub 8-0:1.0: USB hub found [ 390.077326][ T7832] hub 8-0:1.0: 1 port detected [ 390.814282][ T7827] netlink: 'syz.0.1017': attribute type 2 has an invalid length. [ 391.883760][ T4938] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 392.199338][ T7839] loop3: detected capacity change from 0 to 4096 [ 392.246492][ T7839] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 392.397674][ T7839] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 392.457355][ T4283] Bluetooth: unknown link type 131 [ 392.820136][ T7626] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 392.834011][ T4273] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 392.840463][ T4273] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 393.593750][ T4273] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 393.623969][ T5112] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 393.651558][ T4273] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 394.654706][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 395.432967][ T7862] loop4: detected capacity change from 0 to 4096 [ 395.958454][ T7854] loop2: detected capacity change from 0 to 32768 [ 395.985054][ T7854] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1031 (7854) [ 396.023715][ T7866] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 396.076047][ T7852] loop1: detected capacity change from 0 to 40427 [ 396.078321][ T7854] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 396.134540][ T7854] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 396.168934][ T7852] F2FS-fs (loop1): Corrupted extension count (327717 + 1 > 64) [ 396.198284][ T7854] BTRFS info (device loop2): setting nodatasum [ 396.229135][ T7852] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 396.235921][ T7854] BTRFS info (device loop2): force zlib compression, level 3 [ 396.292113][ T7854] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 396.294840][ T7852] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 396.353682][ T7854] BTRFS info (device loop2): use lzo compression, level 0 [ 396.381698][ T7852] F2FS-fs (loop1): invalid crc value [ 396.389289][ T7854] BTRFS info (device loop2): turning on flush-on-commit [ 396.424058][ T7854] BTRFS info (device loop2): enabling auto defrag [ 396.443048][ T7854] BTRFS info (device loop2): max_inline at 0 [ 396.452940][ T7852] F2FS-fs (loop1): Found nat_bits in checkpoint [ 396.467826][ T7854] BTRFS info (device loop2): using free space tree [ 396.885562][ T7854] BTRFS error (device loop2): open_ctree failed: -12 [ 397.004725][ T7899] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1032'. [ 397.725305][ T7903] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1039'. [ 398.429054][ T7907] loop2: detected capacity change from 0 to 512 [ 398.558785][ T7907] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 401.657291][ T7926] netlink: 'syz.2.1044': attribute type 2 has an invalid length. [ 401.918714][ T7931] loop3: detected capacity change from 0 to 256 [ 401.963890][ T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 402.203841][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 402.210888][ T14] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 402.228679][ T7929] loop1: detected capacity change from 0 to 32768 [ 402.298809][ T14] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 402.363856][ T14] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 402.395022][ T7929] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 402.405718][ T14] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 402.423724][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.431910][ T14] usb 3-1: Product: syz [ 402.432930][ T7929] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 402.440998][ T14] usb 3-1: Manufacturer: syz [ 402.469362][ T14] usb 3-1: SerialNumber: syz [ 402.508773][ T14] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 402.522127][ T7929] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 402.544526][ T14] imon 3-1:155.0: unable to initialize intf0, err -19 [ 402.565342][ T7929] BTRFS info (device loop1): use zstd compression, level 3 [ 402.572838][ T7929] BTRFS info (device loop1): using free space tree [ 402.573833][ T14] imon:imon_probe: failed to initialize context! [ 402.633948][ T14] imon 3-1:155.0: unable to register, err -19 [ 402.773537][ T7929] BTRFS info (device loop1): enabling ssd optimizations [ 403.002594][ T4277] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 403.340043][ T7967] loop1: detected capacity change from 0 to 256 [ 403.372590][ T7967] exfat: Deprecated parameter 'utf8' [ 403.393253][ T7967] exfat: Deprecated parameter 'namecase' [ 403.406353][ T7969] loop4: detected capacity change from 0 to 256 [ 403.412391][ T7967] exfat: Deprecated parameter 'utf8' [ 403.429798][ T7969] exfat: Deprecated parameter 'utf8' [ 403.463025][ T7967] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 403.476515][ T7969] exfat: Deprecated parameter 'namecase' [ 403.495478][ T7969] exfat: Deprecated parameter 'utf8' [ 403.539271][ T7969] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 403.572133][ T27] audit: type=1800 audit(1788913867.273:84): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1052" name="file1" dev="loop1" ino=1048637 res=0 errno=0 [ 406.363167][ T3600] usb 3-1: USB disconnect, device number 8 [ 406.456425][ T7987] loop4: detected capacity change from 0 to 256 [ 407.991165][ T8007] loop2: detected capacity change from 0 to 256 [ 408.402020][ T7996] loop3: detected capacity change from 0 to 32768 [ 408.509339][ T7996] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 408.547698][ T7996] JBD2: Ignoring recovery information on journal [ 408.709108][ T7996] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 408.735818][ T8003] loop4: detected capacity change from 0 to 32768 [ 408.835527][ T8003] XFS (loop4): Mounting V5 Filesystem [ 408.926140][ T8003] XFS (loop4): Ending clean mount [ 408.954711][ T7996] [ 408.957077][ T7996] ====================================================== [ 408.964094][ T7996] WARNING: possible circular locking dependency detected [ 408.971124][ T7996] syzkaller #0 Not tainted [ 408.975542][ T7996] ------------------------------------------------------ [ 408.982551][ T7996] syz.3.1062/7996 is trying to acquire lock: [ 408.988528][ T7996] ffff88803216ea20 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_read_virt_blocks+0x266/0x980 [ 408.999671][ T7996] [ 408.999671][ T7996] but task is already holding lock: [ 409.007032][ T7996] ffff888056ae30e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 409.017405][ T7996] [ 409.017405][ T7996] which lock already depends on the new lock. [ 409.017405][ T7996] [ 409.027821][ T7996] [ 409.027821][ T7996] the existing dependency chain (in reverse order) is: [ 409.036838][ T7996] [ 409.036838][ T7996] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 409.045370][ T7996] down_read+0x42/0x2d0 [ 409.050203][ T7996] ocfs2_start_trans+0x3a4/0x6f0 [ 409.055763][ T7996] ocfs2_shutdown_local_alloc+0x1f3/0xac0 [ 409.062025][ T7996] ocfs2_dismount_volume+0x1ff/0x940 [ 409.067948][ T7996] generic_shutdown_super+0x130/0x340 [ 409.073917][ T7996] kill_block_super+0x7c/0xe0 [ 409.079137][ T7996] deactivate_locked_super+0x93/0xf0 [ 409.084965][ T7996] cleanup_mnt+0x471/0x4f0 [ 409.089978][ T7996] task_work_run+0x1d0/0x260 [ 409.095137][ T7996] exit_to_user_mode_loop+0xe6/0x110 [ 409.101020][ T7996] exit_to_user_mode_prepare+0xee/0x180 [ 409.107102][ T7996] syscall_exit_to_user_mode+0x16/0x40 [ 409.113151][ T7996] do_syscall_64+0x58/0xa0 [ 409.118106][ T7996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.124536][ T7996] [ 409.124536][ T7996] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 409.132022][ T7996] ocfs2_start_trans+0x2a5/0x6f0 [ 409.137494][ T7996] ocfs2_mknod+0x1273/0x2580 [ 409.142609][ T7996] ocfs2_mkdir+0x1b6/0x4b0 [ 409.147548][ T7996] vfs_mkdir+0x386/0x570 [ 409.152318][ T7996] do_mkdirat+0x1d8/0x440 [ 409.157178][ T7996] __x64_sys_mkdirat+0x85/0x90 [ 409.162468][ T7996] do_syscall_64+0x4c/0xa0 [ 409.167414][ T7996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.173842][ T7996] [ 409.173842][ T7996] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 409.184368][ T7996] down_write+0x36/0x60 [ 409.189051][ T7996] ocfs2_reserve_local_alloc_bits+0x11e/0x2770 [ 409.195732][ T7996] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 409.202665][ T7996] ocfs2_extend_dir+0x77b/0x4c40 [ 409.208176][ T7996] ocfs2_prepare_dir_for_insert+0x3217/0x5600 [ 409.214779][ T7996] ocfs2_mknod+0xb46/0x2580 [ 409.219809][ T7996] ocfs2_mkdir+0x1b6/0x4b0 [ 409.224752][ T7996] vfs_mkdir+0x386/0x570 [ 409.229523][ T7996] do_mkdirat+0x1d8/0x440 [ 409.234382][ T7996] __x64_sys_mkdirat+0x85/0x90 [ 409.239671][ T7996] do_syscall_64+0x4c/0xa0 [ 409.244622][ T7996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.251044][ T7996] [ 409.251044][ T7996] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 409.259827][ T7996] __lock_acquire+0x2d18/0x7c40 [ 409.265239][ T7996] lock_acquire+0x1bb/0x4a0 [ 409.270273][ T7996] down_read+0x42/0x2d0 [ 409.274954][ T7996] ocfs2_read_virt_blocks+0x266/0x980 [ 409.280851][ T7996] ocfs2_find_entry+0x3a8/0x2080 [ 409.286322][ T7996] ocfs2_rename+0x1e64/0x3930 [ 409.291523][ T7996] vfs_rename+0xd57/0x10f0 [ 409.296466][ T7996] do_renameat2+0x8ac/0xc80 [ 409.301498][ T7996] __x64_sys_rename+0x82/0x90 [ 409.306701][ T7996] do_syscall_64+0x4c/0xa0 [ 409.311650][ T7996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.318078][ T7996] [ 409.318078][ T7996] other info that might help us debug this: [ 409.318078][ T7996] [ 409.328305][ T7996] Chain exists of: [ 409.328305][ T7996] &ocfs2_file_ip_alloc_sem_key --> sb_internal#5 --> &journal->j_trans_barrier [ 409.328305][ T7996] [ 409.343181][ T7996] Possible unsafe locking scenario: [ 409.343181][ T7996] [ 409.350623][ T7996] CPU0 CPU1 [ 409.355985][ T7996] ---- ---- [ 409.361348][ T7996] lock(&journal->j_trans_barrier); [ 409.366636][ T7996] lock(sb_internal#5); [ 409.373406][ T7996] lock(&journal->j_trans_barrier); [ 409.381215][ T7996] lock(&ocfs2_file_ip_alloc_sem_key); [ 409.386760][ T7996] [ 409.386760][ T7996] *** DEADLOCK *** [ 409.386760][ T7996] [ 409.394898][ T7996] 5 locks held by syz.3.1062/7996: [ 409.400006][ T7996] #0: ffff88807d8b4460 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 409.409252][ T7996] #1: ffff88803216ed88 (&type->i_mutex_dir_key#19/1){+.+.}-{3:3}, at: do_renameat2+0x43c/0xc80 [ 409.419722][ T7996] #2: ffff88807d8b4650 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_rename+0x1a42/0x3930 [ 409.429156][ T7996] #3: ffff888056ae30e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 409.439881][ T7996] #4: ffff88807bde8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 409.449627][ T7996] [ 409.449627][ T7996] stack backtrace: [ 409.455509][ T7996] CPU: 0 PID: 7996 Comm: syz.3.1062 Not tainted syzkaller #0 [ 409.462882][ T7996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.472949][ T7996] Call Trace: [ 409.476227][ T7996] [ 409.479158][ T7996] dump_stack_lvl+0x188/0x24e [ 409.483851][ T7996] ? load_image+0x410/0x410 [ 409.488380][ T7996] ? show_regs_print_info+0x12/0x12 [ 409.493592][ T7996] ? print_circular_bug+0x12b/0x1a0 [ 409.498807][ T7996] check_noncircular+0x296/0x330 [ 409.503764][ T7996] ? add_chain_block+0x9b0/0x9b0 [ 409.508713][ T7996] ? _find_first_zero_bit+0xd2/0x100 [ 409.514035][ T7996] ? add_lock_to_list+0x191/0x280 [ 409.519072][ T7996] __lock_acquire+0x2d18/0x7c40 [ 409.523948][ T7996] ? verify_lock_unused+0x140/0x140 [ 409.529165][ T7996] ? mark_lock+0x94/0x320 [ 409.533510][ T7996] lock_acquire+0x1bb/0x4a0 [ 409.538024][ T7996] ? ocfs2_read_virt_blocks+0x266/0x980 [ 409.543583][ T7996] ? __might_sleep+0xd0/0xd0 [ 409.548260][ T7996] ? __lock_acquire+0x1465/0x7c40 [ 409.553292][ T7996] ? read_lock_is_recursive+0x10/0x10 [ 409.558674][ T7996] ? mark_lock+0x94/0x320 [ 409.563018][ T7996] down_read+0x42/0x2d0 [ 409.567188][ T7996] ? ocfs2_read_virt_blocks+0x266/0x980 [ 409.572746][ T7996] ocfs2_read_virt_blocks+0x266/0x980 [ 409.578135][ T7996] ? ocfs2_validate_dx_leaf+0x200/0x200 [ 409.583685][ T7996] ? ocfs2_seek_data_hole_offset+0x990/0x990 [ 409.589687][ T7996] ? verify_lock_unused+0x140/0x140 [ 409.594911][ T7996] ocfs2_find_entry+0x3a8/0x2080 [ 409.599870][ T7996] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 409.605942][ T7996] ? jbd2_write_access_granted+0x69/0x300 [ 409.611667][ T7996] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 409.617296][ T7996] ? mutex_unlock+0x10/0x10 [ 409.621810][ T7996] ? do_raw_spin_lock+0x128/0x2f0 [ 409.626853][ T7996] ? jbd2_journal_dirty_metadata+0x3de/0xd70 [ 409.632825][ T7996] ? ocfs2_journal_dirty+0x41e/0x680 [ 409.638099][ T7996] ? ocfs2_journal_access_di+0x40/0x40 [ 409.643553][ T7996] ? ocfs2_journal_access+0x40/0x40 [ 409.648763][ T7996] ? rcu_is_watching+0x11/0xa0 [ 409.653595][ T7996] ? __mark_inode_dirty+0x7f0/0xe80 [ 409.658857][ T7996] ocfs2_rename+0x1e64/0x3930 [ 409.663564][ T7996] ? ocfs2_mknod+0x2580/0x2580 [ 409.668344][ T7996] ? mark_lock+0x94/0x320 [ 409.672697][ T7996] ? __lock_acquire+0x1465/0x7c40 [ 409.677750][ T7996] ? ocfs2_inode_lock_full_nested+0x149/0x1b10 [ 409.683920][ T7996] ? mark_lock+0x94/0x320 [ 409.688275][ T7996] ? ocfs2_inode_lock_full_nested+0xaaa/0x1b10 [ 409.694794][ T7996] ? mark_lock+0x94/0x320 [ 409.699165][ T7996] ? __lock_acquire+0x1465/0x7c40 [ 409.704205][ T7996] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 409.709942][ T7996] ? __lock_acquire+0x7c40/0x7c40 [ 409.714989][ T7996] ? verify_lock_unused+0x140/0x140 [ 409.720214][ T7996] ? verify_lock_unused+0x140/0x140 [ 409.725436][ T7996] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 409.731350][ T7996] ? __lock_acquire+0x7c40/0x7c40 [ 409.736397][ T7996] ? __rwlock_init+0x140/0x140 [ 409.741169][ T7996] ? vfs_rename+0x752/0x10f0 [ 409.745743][ T7996] ? __lock_acquire+0x7c40/0x7c40 [ 409.750751][ T7996] ? __rwlock_init+0x140/0x140 [ 409.755497][ T7996] ? bpf_lsm_inode_permission+0x5/0x10 [ 409.761009][ T7996] ? take_dentry_name_snapshot+0x90/0xf0 [ 409.766655][ T7996] ? do_raw_spin_unlock+0x11d/0x230 [ 409.771839][ T7996] ? ocfs2_mknod+0x2580/0x2580 [ 409.776587][ T7996] vfs_rename+0xd57/0x10f0 [ 409.781004][ T7996] ? __ia32_sys_link+0x90/0x90 [ 409.785754][ T7996] ? _raw_spin_unlock+0x24/0x40 [ 409.790595][ T7996] ? bpf_lsm_path_rename+0x5/0x10 [ 409.795648][ T7996] ? security_path_rename+0x178/0x200 [ 409.801069][ T7996] do_renameat2+0x8ac/0xc80 [ 409.805579][ T7996] ? fsnotify_move+0x4e0/0x4e0 [ 409.810359][ T7996] ? __check_object_size+0x4f6/0xa70 [ 409.815667][ T7996] ? strncpy_from_user+0x1dc/0x340 [ 409.820966][ T7996] ? getname_flags+0x206/0x500 [ 409.825736][ T7996] __x64_sys_rename+0x82/0x90 [ 409.830399][ T7996] do_syscall_64+0x4c/0xa0 [ 409.834804][ T7996] ? clear_bhb_loop+0x60/0xb0 [ 409.839469][ T7996] ? clear_bhb_loop+0x60/0xb0 [ 409.844133][ T7996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.850017][ T7996] RIP: 0033:0x7f081b39e159 [ 409.854422][ T7996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.874030][ T7996] RSP: 002b:00007f081c2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 409.882432][ T7996] RAX: ffffffffffffffda RBX: 00007f081b625fa0 RCX: 00007f081b39e159 [ 409.890390][ T7996] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000100 [ 409.898345][ T7996] RBP: 00007f081b43503b R08: 0000000000000000 R09: 0000000000000000 [ 409.903743][ T27] audit: type=1800 audit(1788913873.513:85): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1065" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 409.906292][ T7996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.906307][ T7996] R13: 00007f081b626038 R14: 00007f081b625fa0 R15: 00007ffdad046168 [ 409.942819][ T7996] [ 409.954230][ T4286] XFS (loop4): Unmounting Filesystem [ 410.009376][ T4273] ocfs2: Unmounting device (7,3) on (node local)