last executing test programs: 1m15.676107891s ago: executing program 0 (id=411): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$eJzs3QeYJHWhcP1ZYMkZRERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQJGcc84555xzzjnn+D3L7iquB/S+331fvPec8zy7M11dVVP9/3VXzUz1dC85z2JzDgyMPjC0KQZG7JY751xo4x3nvGKfnfY8ZYoxx5982ORhC0w67OKkg4Z9HGlgYGCkYesZNm2sR088aaSBUd6d/vfGGmPMQeMMDEw37OLswz7ONPTDRI8Nn++dERpxQwf97eKg7Yf+e7fxhnyJIZ8sffOF5wwMDIz/nuWHLDLNP91QaUvOMe88f7f6m9sQq8HDPn/vv1GH/pvogYGBie4d4PvHe+cd9CHcpCFfc/wdHxx93Q/ha/+Pa8k55p1vBP8hj8WRh02bachjfMTHoLER7+c3rzLr7sOG8N3728DAkF3cPzxW/ke05BzzLDDw/vv5gYfHHPeMd97db4717MDAWM8NDIz1/MDAWC8MDIz14sDAWC992C71/6855px+ziGP9+GXh7EPvy+PT/eLfVZ/ce+BgYHRhs4z1ttDjxdjTzH8mFBVVVX/2c0x5/RzwfF/9A86/m+19Ry3dvyvqqr6n9t8c8w5/ZDj+AjH/7E/6Pj/vRtvXGPo7/5nn2noUm9/uDeiqqqq/kvNMx8e/8f/oOP/eDtcv3/H/6qqqv+5Lbrgu8f/sUc4/k/8Qcf/Nea/87Jh8w3/vuGt96zy3eePDZv+xnumj/ye6a+/Z/rg96znvfOP+p7pr75n+ugDA2M9Omz6m3+fPNazQ5b55/WM9fLfn48z6Sjvmf7Ke6aP+p7prw7bpiHTR3vP9LfeM//of58+9pD/phj2dV/7gKGuqqr6j2nR6eeZa+A9z7MfNnn4E/vxeaHHHLP1XR/W9lZVVVVVVVXVf723nzr97L//zfcnB97zt6t/+xvWYb8XGHTsudde+6Ft6H9Gg/759yFbfNjb9P+3Ic6jHz7FwMBaS3zYm1IfQv9j/la9/q+Uv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe5/z/3/7+/+Be7+0w7BZZ5nszvsW+/uSkw6sNuyzW+6cc6HVPoRt/xD633r+f2C1QQMDw3zHH2K50ByLLj7VwMDAYvfdOdmMA3+7buYh18064cjv/jHnwMBU7/4/eNL3WfOwd1l4980dJv7bOo59d/3zvbPfyING2Ij3NNs59x+06pKvzDDixy+8/+342/tLLPXyflMO/1uWkUaYafT3WXj4+offlhGdh237VEO2feoN1lxn6vU33uSrq625/CorrbLSWtNNN+0M0884w3Rfn2XqlVdbY6Vphv7/PmM29K0rRv53xmzsEcfsqTneO2Yj3rYJTj4Ix+yf39XjH1bx7hrPm+3hy4eP2Sj/5pgN/3ojf/CYTbHasC806cDggeXeHZpBAwOTjjJ4YKMhF6YdbWBg0sHD5p10yLzfnHCkgYEd/35DBw17sdGh8wzaYsg8/2HvWzLLsBHZdPh8I77O+ogb+q/et+SEsXe5c4T3Lfm/1f/R8f+fvGYe9LeBGv4GCMPmGer1Ib/PxD9t7xSjvHuQe7/t/YDXxXk3un+tuepjS/x3vS4Obe/YH7C9H/A6fu+7vVNN+8weQ1f137a9I+zrFhh65b+zrxv44H3dyLT8SldNPuK+bv7338R/eBwPH6PRRpjp/fZ1O85/3uZD1j/wwfu6BVYb9uIBf9/XjTQwMOnIw/d1Q3Z8ow4e2HHIhemGXBht8MChQy5M/+6FMQbOHXLhayusvcaKg959mYFh651myHpnn3DQ0AfQTQetOtou77wzyrBteXmsf9zWYfePKd57PJ9jwmGDOWzZ4esdMuvw9b66zdDrRh223lf+C+sdvixt76RnDb1utGHrfXWE9Q7+gPUOX/afHg9TDfqHJ6rC/uZDfV8jevyO/gHb+wGvw433t3fdp1z24f+G1+Ee9H7bO8oHb+/7vW/I+27v45c/se9/1+uG0/3s3n2G3ldGH3Y/e+u/cP8dvuyI+7GhLwQydLc/+r+zH5vin/ZjW4480giD/Z7e7/vcFWH+YY+Iv61txQNfWW342A8eYb3/6vvc99yWQbAfG3+En+cGbb7vwCAa80fXeGHDt3f+4DEfPPCPP1sMH/Phy37QmI/274z5Jz54zEf8Pvn9xnyqzw69fvAI2//eMV9kt9lvGj7mo46w3n815qN98LHjn8d8YGAwjfmOkw0dtw/an77fmA9fdviYD/k6s044ysDcAwMDUw4b81H/nTGf9L/nfj4mzD/085X+NunZGRf+yvAxH3GM/9WYj/pfHPPN7v3b/XzKd6/7zEgDo446sNHyG2yw3rRD/x9+cbqh//O+6NkVh47zBx1L389o+LIf9LgY5d8xGv/fMhr0r4wmG+X9jP7+0Br5oEWf+z/dF43yXzU6l/dFp847dNw+6Pui9xvz4cvScXDi9yw/4s+hH/D6WXib3h2f+bcd/vPef8LrZw3/efd/5OtnDf+d5Goj7uTr363f/7vL313+7vJ3l7+49zn/P8Xw8//vjH3AJMN+6Bx81cy3zv5hb++H3P/q8//DfP/h/P/st8581ZAfrYZd94HnZ4fO8x95fnamoR8memz4fCOeHxxxQ//V+dl9dt3gqv9H52f/jxr+WP03fi5u/+8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIX9z7n/6cZ/jyAhxZf6PvDToQO3nTaozb9sLf3Q+5/9fn/Yb7/cP5/06Om3XSkgb9d94Hn/4fO4zj/f/+Cmy/zn3z+f/hjtfP/9S/K313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFvc/5/9mHPw/giNnm/tzw5wPcsN1+e3zY2/sh97/1/H/v/++t/b+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3LDz/wMjvE3iwt0vMDj//z+79/FfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/j/IH7P4/zB/zOK/ZP6YxX+p/DGL/4/yxyz+P84fs/gvnT9m8V8mf8ziv2z+mMX/J/ljFv/l8scs/svnj1n8f5o/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/j/LH/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi//P88cs/r/IH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/X+ePWfy3yh+z+P8mf8ziv3X+mMX/t/ljFv9t8scs/tvmj1n8t8sfs/hvnz9m8f9d/pjF//f5Yxb/HfLHLP5/yB+z+P8xf8ziv2P+mMV/p/wxi/+f8scs/jvnj1n8d8kfs/jvmj9m8f9z/pjF/y/5Yxb/3fLHLP5/zR+z+O+eP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6DBvLHLP6D8scs/iPlj1n8R84fs/iPkj9m8R+cP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/h/JH/M4j9J/pjF/6P5Yxb/SfPHLP4fyx+z+E+WP2bx/3j+mMX/E/ljFv/J88cs/p/MH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8P5s/ZvGfMn/M4v+5/DGL/+fzxyz+X8gfs/hPlT9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/+v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Rv6YxX/W/DGL/zfzxyz+s+WPWfy/lT9m8f92/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v5M/ZvGfO3/M4j9P/pjFf978MYv/d/PHLP7z5Y9Z/L+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/7+ePWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/H+SPWfx/mD9m8V8yf8ziv1T+mMX/R/ljFv8f549Z/JfOH7P4L5M/ZvFfNn/M4v+T/DGL/3L5Yxb/5fPHLP4/zR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/X+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/+v88cs/lvlj1n8f5M/ZvHfOn/M4v/b/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P4/y5/zOL/+/wxi/8O+WMW/z/kj1n8/5g/ZvHfMX/M4r9T/pjF/0/5Yxb/nfPHLP675I9Z/HfNH7P4/zl/zOL/l/wxi/9u+WMW/7/mj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vzf25bDP7H4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvF/99P8/zmL/6D8MYv/SPljFv+R88cs/qPkj1n8B+ePWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/h/JH7P4T5I/ZvH/aP6YxX/S/DGL/8fyxyz+k+WPWfw/nj9m8f9E/pjFf/L8MYv/J/PHLP6fyh+z+E+RP2bx/3T+mMX/M/ljFv/P5o9Z/KfMH7P4fy5/zOL/+fwxi/8X8scs/lPlj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/ev6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+RP2bxnzV/zOL/zfwxi/9s+WMW/2/lj1n8v50/ZvGfPX/M4j9H/pjFf878MYv/XPljFv/v5I9Z/OfOH7P4z5M/ZvGfN3/M4v/d/DGL/3z5Yxb/7+WPWfznzx+z+C+QP2bxXzB/zOK/UP6Yxf/7+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf8H+WMW/x/mj1n8l8wfs/gvlT9m8f9R/pjF/8f5Yxb/pfPHLP7L5I9Z/JfNH7P4/yR/zOK/XP6YxX/5/DGL/0/zxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/n+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/ef6Yxf8X+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx/2X+mMX/V/ljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8zi/+v8MYv/VvljFv/f5I9Z/LfOH7P4/zZ/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP6/yx+z+P8+f8ziv0P+mMX/D/ljFv8/5o9Z/HfMH7P475Q/ZvH/U/6YxX/n/DGL/y75Yxb/XfPHLP5/zh+z+P8lf8ziv1v+mMX/r/ljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/5IH8MYv/oPwxi/9I+WMW/5Hzxyz+o+SPWfwH549Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+H8kfs/hPkj9m8f9o/pjFf9L8MYv/x/LHLP6T5Y9Z/D+eP2bx/0T+mMV/8vwxi/8n88cs/p/KH7P4T5E/ZvH/dP6Yxf8z+WMW/8/mj1n8p8wfs/h/Ln/M4v/5/DGL/xfyxyz+U+WPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8f96/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v5E/ZvGfNX/M4v/N/DGL/2z5Yxb/b+WPWfy/nT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/+/kj1n8584fs/jPkz9m8Z83f8zi/938MYv/fPljFv/v5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjF//v5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/wf5Yxb/H+aPWfyXzB+z+C+VP2bx/1H+mMX/x/ljFv+l88cs/svkj1n8l80fs/j/JH/M4r9c/pjFf/n8MYv/T/PHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv+f5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8f95/pjF/xf5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvH/Zf6Yxf9X+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOL/6/wxi/9W+WMW/9/kj1n8t84fs/j/Nn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/r/LH7P4/z5/zOK/Q/6Yxf8P+WMW/z/mj1n8d8wfs/jvlD9m8f9T/pjFf+f8MYv/LvljFv9d88cs/n/OH7P4/yV/zOK/W/6Yxf+v+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/DVf7vjPfvzmnxP0Ll/+9n8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGL/zv5YxL/UQbyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyR/zOI/Sf6Yxf+j+WMW/0nzxyz+H8sfs/hPlj9m8f94/pjF/xP5Yxb/yfPHLP6fzB+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/D+bP2bxnzJ/zOL/ufwxi//n88cs/l/IH7P4T5U/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6Yxf9r+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf/r+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0b+mMV/1vwxi/8388cs/rPlj1n8v5U/ZvH/dv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+TP2bxnzt/zOI/T/6YxX/e/DGL/3fzxyz+8+WPWfy/lz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/+/nj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/x/kj1n8f5g/ZvFfMn/M4r9U/pjF/0f5Yxb/H+ePWfyXzh+z+C+TP2bxXzZ/zOL/k/wxi/9y+WMW/+Xzxyz+P80fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/lj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf/n+WMW/1/kj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/l/ljFv9f5Y9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/r/PHLP5b5Y9Z/H+TP2bx3zp/zOL/2/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P8uf8zi//v8MYv/DvljFv8/5I9Z/P+YP2bx3zF/zOK/U/6Yxf9P+WMW/53zxyz+u+SPWfx3zR+z+P85f8zi/5f8MYv/bvljFv+/5o9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vtJ/Uf7F9db/PeX+v+rLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/wQP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv+P5I9Z/CfJH7P4fzR/zOI/af6Yxf9j+WMW/8nyxyz+H88fs/h/In/M4j95/pjF/5P5Yxb/T+WPWfynyB+z+H86f8zi/5n8MYv/Z/PHLP5T5o9Z/D+XP2bx/3z+mMX/C/ljFv+p8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fz1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMV/tvwxi/+38scs/t/OH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/d/LHLP5z549Z/OfJH7P4z5s/ZvH/bv6YxX++/DGL//fyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/8P88cs/kvmj1n8l8ofs/j/KH/M4v/j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+SP2bxXy5/zOK/fP6Yxf+n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/8/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+P8yf8zi/6v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f91/pjFf6v8MYv/b/LHLP5b549Z/H+bP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/3+WPWfx/nz9m8d8hf8zi/4f8MYv/H/PHLP475o9Z/HfKH7P4/yl/zOK/c/6YxX+X/DGL/675Yxb/P+ePWfz/kj9m8d8tf8zi/9f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP+pA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/kj1n8J8kfs/h/NH/M4j9p/pjF/2P5Yxb/yfLHLP4fzx+z+H8if8ziP3n+mMX/k/ljFv9P5Y9Z/KfIH7P4fzp/zOL/mfwxi/9n88cs/lPmj1n8P5c/ZvH/fP6Yxf8L+WMW/6nyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/PX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/IH7P4z5o/ZvH/Zv6YxX+2/DGL/7fyxyz+384fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi/938scs/nPnj1n858kfs/jPmz9m8f9u/pjFf778MYv/9/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+D/DGL/w/zxyz+S+aPWfyXyh+z+P8of8zi/+P8MYv/0vljFv9l8scs/svmj1n8f5I/ZvFfLn/M4r98/pjF/6f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/z/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/PH/M4v+L/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/3X+mMV/q/wxi/9v8scs/lvnj1n8f5s/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv/f5Y9Z/H+fP2bx3yF/zOL/h/wxi/8f88cs/jvmj1n8d8ofs/j/KX/M4r9z/pjFf5f8MYv/rvljFv8/549Z/P+SP2bx3y1/zOL/1/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/TOI/2kD+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/j+SPWfwnyR+z+H80f8ziP2n+mMX/Y/ljFv/J8scs/h/PH7P4fyJ/zOI/ef6Yxf+T+WMW/0/lj1n8p8gfs/h/On/M4v+Z/DGL/2fzxyz+U+aPWfw/lz9m8f98/pjF/wv5Yxb/qfLHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H89f8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+38gfs/jPmj9m8f9m/pjFf7b8MYv/t/LHLP7fzh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/3fyxyz+c+ePWfznyR+z+M+bP2bx/27+mMV/vvwxi//38scs/vPnj1n8F8gfs/gvmD9m8V8of8zi//38MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/4P8MYv/D/PHLP5L5o9Z/JfKH7P4/yh/zOL/4/wxi//S+WMW/2Xyxyz+y+aPWfx/kj9m8V8uf8ziv3z+mMX/p/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//P8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P88f8zi/4v8MYv/hvljFv+N8scs/hvnj1n8N8kfs/j/Mn/M4v+r/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvH/df6YxX+r/DGL/2/yxyz+W+ePWfx/mz9m8d8mf8ziv23+mMV/u/wxi//2+WMW/9/lj1n8f58/ZvHfIX/M4v+H/DGL/x/zxyz+O+aPWfx3yh+z+P8pf8ziv3P+mMV/l/wxi/+u+WMW/z/nj1n8/5I/ZvHfLX/M4v/X/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4j/6QP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j+h2P+dzd//Oov/RGL/D8riP3H+mMX/I/ljFv9J8scs/h/NH7P4T5o/ZvH/WP6YxX+y/DGL/8fzxyz+n8gfs/hPnj9m8f9k/pjF/1P5Yxb/KfLHLP6fzh+z+H8mf8zi/9n8MYv/lPljFv/P5Y9Z/D+fP2bx/0L+mMV/qvwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/PH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/N/LHLP6z5o9Z/L+ZP2bxny1/zOL/rfwxi/+388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/538MYv/3PljFv958scs/vPmj1n8v5s/ZvGfL3/M4v+9/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yB/zOL/w/wxi/+S+WMW/6Xyxyz+P8ofs/j/OH/M4r90/pjFf5n8MYv/svljFv+f5I9Z/JfLH7P4L58/ZvH/af6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+z/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/PH7P4/yJ/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfx/nT9m8d8qf8zi/5v8MYv/1vljFv/f5o9Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/3f5Yxb/3+ePWfx3yB+z+P8hf8zi/8f8MYv/jvljFv+d8scs/n/KH7P475w/ZvHfJX/M4r9r/pjF/8/5Yxb/v+SPWfx3yx+z+P81f8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8xkD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf8j+WMW/0nyxyz+H80fs/hPmj9m8f9Y/pjFf7L8MYv/x/PHLP6fyB+z+E+eP2bx/2T+mMX/U/ljFv8p8scs/p/OH7P4fyZ/zOL/2fwxi/+U+WMW/8/lj1n8P58/ZvH/Qv6YxX+q/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X88fs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/838scs/rPmj1n8v5k/ZvGfLX/M4v+t/DGL/7fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/nfwxi//c+WMW/3nyxyz+8+aPWfy/mz9m8Z8vf8zi/738MYv//PljFv8F8scs/gvmj1n8F8ofs/h/P3/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/j/IH/M4v/D/DGL/5L5Yxb/pfLHLP4/yh+z+P84f8ziv3T+mMV/mfwxi/+y+WMW/5/kj1n8l8sfs/gvnz9m8f9p/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/7P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P88fs/j/In/M4r9h/pjFf6P8MYv/xvljFv9N8scs/r/MH7P4/yp/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/H+dP2bx3yp/zOL/m/wxi//W+WMW/9/mj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/d/ljFv/f549Z/HfIH7P4/yF/zOL/x/wxi/+O+WMW/53yxyz+f8ofs/jvnD9m8d8lf8ziv2v+mMX/z/ljFv+/5I9Z/HfLH7P4/zV/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH5P4jzmQP2bxH5Q/ZvEfKX/M4j9y/pjFf5T8MYv/4Pwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjF/yP5Yxb/SfLHLP4fzR+z+E+aP2bx/1j+mMV/svwxi//H88cs/p/IH7P4T54/ZvH/ZP6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4v/Z/DGL/5T5Yxb/z+WPWfw/nz9m8f9C/pjFf6r8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fzx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/zfyxyz+s+aPWfy/mT9m8Z8tf8zi/638MYv/t/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v+d/DGL/9z5Yxb/efLHLP7z5o9Z/L+bP2bxny9/zOL/vfwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+H8/f8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+P8gf8zi/8P8MYv/kvljFv+l8scs/j/KH7P4/zh/zOK/dP6YxX+Z/DGL/7L5Yxb/n+SPWfyXyx+z+C+fP2bx/2n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/s/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/zx+z+P8if8ziv2H+mMV/I5n/aP/mfBb/jWX+/24W/03yxyz+v8wfs/j/Kn/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8f50/ZvHfKn/M4v+b/DGL/9b5Yxb/3+aPWfy3yR+z+G+bP2bx3y5/zOK/ff6Yxf93+WMW/9/nj1n8d8gfs/j/IX/M4v/H/DGL/475Yxb/nfLHLP5/yh+z+O+cP2bx3yV/zOK/a/6Yxf/P+WMW/7/kj1n8d8sfs/j/NX/M4r97/pjFf4/8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj1n838kfk/iPNZA/ZvEflD9m8R8pf8ziP3L+mMV/lPwxi//g/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/I/ljFv9J8scs/h/NH7P4T5o/ZvH/WP6YxX+y/DGL/8fzxyz+n8gfs/hPnj9m8f9k/pjF/1P5Yxb/KfLHLP6fzh+z+H8mf8zi/9n8MYv/lPljFv/P5Y9Z/D+fP2bx/0L+mMV/qvwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/PH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/N/LHLP6z5o9Z/L+ZP2bxny1/zOL/rfwxi/+388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/538MYv/3PljFv958scs/vPmj1n8v5s/ZvGfL3/M4v+9/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yB/zOL/w/wxi/+S+WMW/6Xyxyz+P8ofs/j/OH/M4r90/pjFf5n8MYv/svljFv+f5I9Z/JfLH7P4L58/ZvH/af6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+z/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/PH7P4/yJ/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfx/nT9m8d8qf8zi/5v8MYv/1vljFv/f5o9Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/3f5Yxb/3+ePWfx3yB+z+P8hf8zi/8f8MYv/jvljFv+d8scs/n/KH7P475w/ZvHfJX/M4r9r/pjF/8/5Yxb/v+SPWfx3yx+z+P81f8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I89kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf8j+WMW/0ne1//td9555//Npv0nZvH/aI9/zOI/af6Yxf9j+WMW/8nyxyz+H88fs/h/In/M4j95/pjF/5P5Yxb/T+WPWfynyB+z+H86f8zi/5n8MYv/Z/PHLP5T5o9Z/D+XP2bx/3z+mMX/C/ljFv+p8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fz1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMV/tvwxi/+38scs/t/OH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/d/LHLP5z549Z/OfJH7P4z5s/ZvH/bv6YxX++/DGL//fyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/8P88cs/kvmj1n8l8ofs/j/KH/M4v/j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+SP2bxXy5/zOK/fP6Yxf+n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/8/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+P8yf8zi/6v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f91/pjFf6v8MYv/b/LHLP5b549Z/H+bP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/3+WPWfx/nz9m8d8hf8zi/4f8MYv/H/PHLP475o9Z/HfKH7P4/yl/zOK/c/6YxX+X/DGL/675Yxb/P+ePWfz/kj9m8d8tf8zi/9f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8p/SINGHAOL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP7jDOSPWfwH5Y9Z/EfKH7P4j5w/ZvEfJX/M4j84f8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvH/SP6YxX+S/DGL/0fzxyz+k+aPWfw/lj9m8Z8sf8zi//H8MYv/J/LHLP6T549Z/D+ZP2bx/1T+mMV/ivwxi/+n88cs/p/JH7P4fzZ/zOI/Zf6Yxf9z+WMW/8/nj1n8v5A/ZvGfKn/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/9fzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/jfwxi/+s+WMW/2/mj1n8Z8sfs/h/K3/M4v/t/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fyd/zOI/d/6YxX+e/DGL/7z5Yxb/7+aPWfznyx+z+H8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+388fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8gfs/j/MH/M4r9k/pjFf6n8MYv/j/LHLP4/zh+z+C+dP2bxXyZ/zOK/bP6Yxf8n+WMW/+Xyxyz+y+ePWfx/mj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P8sf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/8/zxyz+v8gfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/8v88cs/r/KH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv9f549Z/LfKH7P4/yZ/zOK/df6Yxf+3+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/13+mMX/9/ljFv8d8scs/n/IH7P4/zF/zOK/Y/6YxX+n/DGL/5/yxyz+O+ePWfx3yR+z+O+aP2bx/3P+mMX/L/ljFv/d8scs/n/NH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938sck/uMO5I9Z/Aflj1n8R8ofs/iPnD9m8R8lf8ziPzh/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8f9I/pjFf5L8MYv/R/PHLP6T5o9Z/D+WP2bxnyx/zOL/8fwxi/8n8scs/pPnj1n8P5k/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/h/Nn/M4j9l/pjF/3P5Yxb/z+ePWfy/kD9m8Z8qf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/1/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+N/DGL/6z5Yxb/b+aPWfxnyx+z+H8rf8zi/+38MYv/7PljFv858scs/nPmj1n858ofs/h/J3/M4j93/pjFf578MYv/vPljFv/v5o9Z/OfLH7P4fy9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP7fzx+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yB+z+P8wf8ziv2T+mMV/qfwxi/+P8scs/j/OH7P4L50/ZvFfJn/M4r9s/pjF/yf5Yxb/5fLHLP7L549Z/H+aP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yx/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP6/yB+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/1/nj1n8t8ofs/j/Jn/M4r91/pjF/7f5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvH/Xf6Yxf/3+WMW/x3yxyz+f8gfs/j/MX/M4r9j/pjFf6f8MYv/n/LHLP47549Z/HfJH7P475o/ZvH/c/6Yxf8v+WMW/93yxyz+f80fs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+4w3kj1n8B+WPWfxHyh+z+I+cP2bxHyV/zOI/OH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bx/0j+mMV/kvwxi/9H88cs/v8fe/SUNgoBQAHwVn/mY7Zt27Zt27Zt27Zt27Zt673vrKAzs4UZ1X/U8j+a/6jlf3T/Ucv/GP6jlv8x/Uct/2P5j1r+x/YftfyP4z9q+R/Xf9TyP57/qOV/fP9Ry/8E/qOW/wn9Ry3/E/mPWv4n9h+1/E/iP2r5n9R/1PI/mf+o5X9y/1HL/xT+o5b/Kf1HLf9T+Y9a/qf2H7X8T+M/avmf1n/U8j+d/6jlf3r/Ucv/DP6jlv8Z/Uct/zP5j1r+Z/YftfzP4j9q+Z/Vf9TyP5v/qOV/dv9Ry/8c/qOW/zn9Ry3/c/mPWv7n9h+1/M/jP2r5n9d/1PI/n/+o5X9+/1HL/wL+o5b/Bf1HLf8L+Y9a/hf2H7X8L+I/avlf1H/U8r+Y/6jlf3H/Ucv/Ev6jlv8l/Uct/0v5j1r+l/Yftfwv4z9q+V/Wf9Tyv5z/qOV/ef9Ry/8K/qOW/xX9Ry3/K/mPWv5X9h+1/K/iP2r5X9V/1PK/mv+o5X91/1HL/xr+o5b/Nf1HLf9r+Y9a/tf2H7X8r+M/avlf13/U8r+e/6jlf33/Ucv/Bv6jlv8N/Uct/xv5j1r+N/Yftfxv4j9q+d/Uf9Tyv5n/qOV/c/9Ry/8W/qOW/y39Ry3/W/mPWv639h+1/G/jP2r539Z/1PK/nf+o5X97/1HL/w7+o5b/Hf1HLf87+Y9a/nf2H7X87+I/avnf1X/U8r+b/6jlf3f/Ucv/Hv6jlv89/Uct/3v5j1r+9/Yftfzv4z9q+d/Xf9Tyv5//qOV/f/9Ry/8B/qOW/wP9Ry3/B/mPWv4P9h+1/B/iP2r5P9R/1PJ/mP+o5f9w/1HL/xH+o5b/I/1HLf9H+Y9a/o/2H7X8H+M/avk/1n/U8n+c/6jl/3j/Ucv/Cf6jlv8T/Uct/yf5j1r+T/Yftfyf4j9q+T/Vf9Tyf5r/qOX/dP9Ry/8Z/qOW/zP9Ry3/Z/mPWv7P9h+1/J/jP2r5P9d/1PJ/nv+o5f98/1HL/wX+o5b/C/1HLf8X+Y9a/i/2H7X8X+I/avm/1H/U8n+Z/6jl/3L/Ucv/Ff6jlv8r/Uct/1f5j1r+r/Yftfxf4z9q+b/Wf9Tyf53/qOX/ev9Ry/8N/qOW/xv9Ry3/N/mPWv5v9h+1/N/iP2r5v9V/1PJ/m/+o5f92/1HL/x3+o5b/O/1HLf93+Y9a/u/2H7X83+M/avm/13/U8n+f/6jl/37/Ucv/A/6jlv8H/Uct/w/5j1r+H/Yftfw/4j9q+X/Uf9Ty/5j/qOX/cf9Ry/8T/qOW/yf9Ry3/T/mPWv6f9h+1/D/jP2r5f9Z/1PL/nP+o5f95/1HL/wv+o5b/F/1HLf8v+Y9a/l/2H7X8v+I/avl/1X/U8v+a/6jl/3X/Ucv/G/6jlv83/Uct/2/5j1r+3/Yftfy/4z9q+X/Xf9Ty/57/qOX/ff9Ry/8H/qOW/w/9Ry3/H/mPWv4/9h+1/H/iP2r5/9R/1PL/mf+o5f9z/1HL/xf+/2tgUNH/l/6jlv+v/Ect/1/7j1r+v/Eftfx/6z9q+f/Of9Ty/73/qOX/B/9Ry/+P/qOW/5/8Ry3/P/uPWv5/8R+1/P/qP2r5/81/1PL/u/+o5f8P/1HL/5/+o5b/v/xHLf9/+49a/v/xH5X8jzLIf9TyP5j/qOV/cP9Ry/8Q/qOW/wH/Ucv/kP6jlv+h/Ect/0P7j1r+h/EftfwP6z9q+R/Of9TyP7z/qOV/BP9Ry/+I/qOW/5H8Ry3/I/uP/nf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzL3t3G5lUWfhw/Xds9/dm/m3N4DRkMNt3Ela1dmQw2H+pjwVQdiwETyBZWRqUw9xDcQK0GJQZjmIwEEXWbugkkxowXwwSElUQlTkXjRDTEIaiLmBomMqJxqbnb3qW91zbrVa9rL/b5vGjvc8rvdFvy3TllawYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQEqbt91yw9qOjrZNXnjhhRcDL07170xAaq9Ff6p/JAAAAAAAAAAAAAAAwEhyfDvRqf45AgAAAADA6aal9V3d1VVDTlUPPpjz87be902vXnn9nucfX1l+3//hy4e55ITBBz09PT0vNXfN7D+cVBRF6bNN7z+eXDkuXb+z6/LtfUeh+O2zza3btjcf3PmVrz88d+r0ObW9Z2uLNde1d7QtmVAUobq22Fo6aKgqijCxttheOmgsHUyqLe4vHSztPZhSHCgdXHjtho51pRMnfGo47bS0fraoHlJsMeR3g8H9d3Zt2lV+P8oly1erKfr7r2v+4d6Kj5WN0H/5+qGqsv8x/wSBEY2t/9sXlt+PcskT7v+PttetGu5jI/dfvn6YoH9IZ5jn/yGN9j7v79k/Y4Tn/7nDXHJg/9O/rOwq9X/TL1+o7z9VczLP/6XP13cUqiv7nzDk+b/0HF9Tfv6fVBShdpy/HHBaaWn9XPdo9//K7of2X3NWxaZqcP9HV+2pLvV/+K4H3t9/qvak+h+4fqgZ5f5f9ZkDQ3+swNi0tO7uqbj/j6H/YsEwlxzof/7uY1eV+j9j55F9gz42lv5rK/tfvOXGTyzevO2W+vYb165vW992U2NjQ9PSZU2NFy1f3PtI0Pd2nL8qcHoY3/2/mFqxqSqKtoH9og8ve6nU/8Fz//G3/lOTx9j/xFHv/8+5/8Owzp9QTJxYbF27Zcumhr635cPGvrd9/9kw/Z/49f+I/c8r/3/A8tfdpS/IB/a/eedXP1Lq/95Jqx7oPzVxjP1PGq3/ztc+LxBhnPf/dRWbIf23v/qddaX+//TK8UP9p8b69f/kUfvf5f4P49HSWvEXfv7HSv2v/tfh4f6c4CSEKf78D9LJ0f/Wab/4Ztw6TNU/pJOj/6Wb2yL/sm34P/1DOjn6/9WOqiNx63CG/iGdHP1/rfvBjXHrME3/kE6O/vfPfuSpuHX4f/1DOjn6P75++lVx61Cnf0gnR/+XfWnv6rh1mK5/SCdH/1WvTHsibh1m6B/SydF/fdXZn4pbh9fpH9LJ0f91nQ+/GLcOM/UP6eTo//M7fx35fTrh9fqHdHL0/9Qft+6IW4dZ+od0cvT/wqz2+rh1OFP/kE6O/u+/4YlH4tbhDfqHdHL0//S3Pngsbh2C/iGdHP1/49kja+LWYbb+IZ0c/e9beOwPcetwlv4hnRz9//ujV38gbh3eqH9IJ0f/Yf/y78atw9n6h3Ry9H/Fk3c1xK3DHP1DOjn671xx251x63CO/iGdHP03NS+cHbcO5+of0snR/4w///3uuHWYq39IJ0f/H7vvvZX/7vdJCufpH9LJ0f/NG1Y/GrcO5+sf0snR/8oZPRfErcM8/UM6Ofo/fPS+H8Wtw3z9Qzo5+r/7ziVXxK3Dm/QP6eTo/we3ntcdtw5v1j+kk6P/l2vvuDVuHRboH9LJ0f+Xf1azLG4dFuof0snR/48f+v6uuHV4i/4hnRz9v/i+x86JW4cL9A/p5Oh/98Wzvhi3Dm/VP6STo/93P7Nxfdw6LNI/pJOj/8l7f380bh3q9Q/p5Oh//qqDH4pbhwv1D+nk6H/DojW/i1uHxfqHdHL0/8yBpw/FrcMS/UM6Ofrf8dinm+PWoUH/kE6O/h+/rOM/cevQqH9IJ0f//2z6ycfj1mGp/iGdHP2feejbX4hbhyb9Qzo5+r/6wckz49bhIv1DOjn633jN7O/FrcMy/UM6Ofq/ZO5Dl8atw9v0D+nk6P89f11xc9w6XKx/SCdH/3X33PNc3Dos1z+kk6P/edfefk3cOlyif0gnR//Xz6l/Mm4dLtU/pJOj/zuOtyyIW4cV+od0cvTfddvz++LWYaX+IZ0c/Xd/8uW6uHV4u/4hnRz9751y5b1x6/AO/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBfduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8FAAD//xDC0no=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) 1m14.256123637s ago: executing program 0 (id=422): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) write$P9_RVERSION(r0, 0x0, 0x15) 1m13.519989976s ago: executing program 0 (id=431): unshare(0x6020400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000120, 0x0, 0x0) 1m13.389361758s ago: executing program 0 (id=433): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 1m13.001332112s ago: executing program 0 (id=438): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000140)) 1m11.529335999s ago: executing program 0 (id=444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x24}}, 0x800) 1m11.323566201s ago: executing program 32 (id=444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x24}}, 0x800) 2.273621424s ago: executing program 5 (id=1160): r0 = semget$private(0x0, 0x7, 0x3c0) semop(r0, &(0x7f0000000440)=[{0x0, 0x400, 0x1000}, {}], 0x2) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) 2.011546127s ago: executing program 1 (id=1164): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.74938873s ago: executing program 1 (id=1167): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000000c0)) 1.632609011s ago: executing program 1 (id=1171): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000080)) 1.429184084s ago: executing program 4 (id=1175): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0), 0x1, 0x62f, &(0x7f0000000700)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000001c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@dax_never}, {@bsdgroups}, {@usrjquota, 0x22}, {@nodioread_nolock}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x82078, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1.429046584s ago: executing program 2 (id=1176): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x404, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x1, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xb, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x2000100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x4, 0x800000, 0x0, 0x101, 0x1, 0x10001, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd]}) 1.429002633s ago: executing program 1 (id=1177): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000140)=0x1) 1.359552264s ago: executing program 2 (id=1179): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='nfsd\x00', 0x1000016, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200020, 0x0) 1.304260225s ago: executing program 5 (id=1180): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@noquota}, {@nodiscard}, {@sb={'sb', 0x3d, 0xff}}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@test_dummy_encryption}]}, 0x1, 0x47d, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x100}) 1.213538676s ago: executing program 2 (id=1182): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001a00010000000080fbdbdf250a808000000000000000000006001c004624000006001d"], 0x2c}}, 0x20000050) 1.100068117s ago: executing program 4 (id=1185): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.031904938s ago: executing program 5 (id=1186): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000340), 0x8) shutdown(r0, 0x0) 924.982309ms ago: executing program 2 (id=1188): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000040)) 872.00848ms ago: executing program 4 (id=1189): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x50, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 871.34132ms ago: executing program 3 (id=1190): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030322c71756965742c756d61736b3d30303030303030303030303030303030303030303030332c706172743d3078303030303030303030303030303432302c636f6465706167653d757466382c71756965742c696f636861727365743d6d61636963656c616e642c63726561746f723db6b72a1e2c7569643d", @ANYRESHEX=0x0, @ANYRESDEC=0x0], 0x4, 0x343, &(0x7f0000000600)="$eJzs3U1r1E4cB/DvZJ//Lf3HtlLxWC14Km09KCIo0ptvwIMUa7uF0ljBVrCiuHoW8SAIgkdvnkVvnvUivgE99VAEQS9FpJGZzCSTbZJ9aLvp0u8Hut1k5+E3s5lkphIDIjqyrsx+e3N2U/68+Kh3XQAcAFWgCOA4xqp3V9eX1736YlZBBZVD/ggEOcWuNAur9aSsMp/Koblyq4hBex8dDN/3/e8tU/3qSSyUH6FG8G4OUNGjU31e7XlkXWmkNMdOUOlZNIeF1SViG9u4h6E8wyEiovzp67+jrxKDev7uOMCEnof30/XfsFcQsQnBNvDg/97Hc2iE138n2PaF7B/VIyJa76klnOxDx6wSk8pKPCb8qLvLCI6s2BcgWq0qVSxObWnZq082VAFPcEmzko2q10WYhihp0ZaDX+MJa9MMWW3PNqDaUJJtKKXEP9JxjR+28NLarEVv5z63EZP4JL6IOeHiFRbD+V/RF7JzVP+4sTJN/FMtWukGqWKtjEbfMVXJSfMNvH8btbKW1q9VFGQsSWQponn+7po4n5fTc2E4flLQrZtOb53KNZKYaybc/pOYa7Q5V22p5NUnF257mX9K2TeJSyDxTFwT4/iBd5i15v+OTD2B9JEZG+VCpdRHRmZ7iiplyvcYowbwrY5GJgF//UCH2Z7iJs5jaG3j/sq859Xv5P/GDJUe1IU20gQHoj4c5R7520qDqnxTAqD3/NxzYDu+7yd+VMQ+tL1sQrVijqUpqaaeex02WZ1mG8HmHju8EfSh9dHl9MTRaVPuMWeEDitV2R+FueTVopPsv3XtaxvJB6SwIiwf7AAxVc173onwiyug0tZIqXVR6dWHK/NeN+ci6jfWeBm7vnUx73Co9+S8SwTrP2u9MqXOOvLFzViNtJx1WCVOp6yAhtXrf+2t4MJiU+eJA+aNV5/JWnOdOgOcbqrRganxcXOxro4Th/FfJStJYdWycohZfMUN/v2fiIiIiIiIiIiIiIiIiIiIiIiIiKjfdHo3QvrtBDv6PqTkOzEim0fwP94gIiIiIiIiIiIiIiIiIiIiIiIiIiIiItqb6Pm/6glgheDRNTk//7fQxvN/zXMpiKhr/wIAAP//igxm9A==") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) 825.25942ms ago: executing program 2 (id=1191): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 753.369701ms ago: executing program 4 (id=1192): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x193a5}, @TCA_PIE_ECN={0x8}, @TCA_PIE_TARGET={0x8}]}}]}, 0x48}}, 0x4c840) 715.954321ms ago: executing program 4 (id=1193): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2014000, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x23, 0x34c, &(0x7f0000001740)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 679.410602ms ago: executing program 2 (id=1194): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000140), 0xfe, 0x1103, &(0x7f0000002240)="$eJzs2T+L1EAYBvBnkvUPNpFcHwQtLOS4Y/0CVyhsa6uNyFVedVsp+m38OHqV/XG9Fgv2kbibXZEVwV0V5PeDkDcPeWcy5UwCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg0nyqSQHVdKOWZWkJF13MbtK0o357fd1lZInp7P5o/Pp43mS+tvr5WlShq6hLe3x3ZvttJ22x+3Dg5N7H+avXr98fnZ2er4apqTL5WKvq7g1zl3vdVgAAAD4P/Q7a/7x/AAAAMCv7O0gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA39c2mbseiSlKSrruYXSXptvRd+0vfBwAAAOyupMqzZlu+PAbYeJCPTVnnw/1LGeqjvNvSDwAAAPxUf2NVfP9/vVzf7MfvZ7Lelw/ZnUxyeLh8frvKP58kdZKjHwa/XLx5MV6lr//0WgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvrIDxwIAAAAAwvyt0+jYAAAAAAAAAAAAAAAAAAAAYK8AAAD//+0M1yg=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40087602, 0x0) 608.298213ms ago: executing program 5 (id=1195): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14013, &(0x7f0000000480)={[{@gid}, {@codepage={'codepage', 0x3d, 'cp860'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x4, 0x339, &(0x7f0000000140)="$eJzs3U9P1EwcB/DvtLtL94EHK2BIPBmUxBMBPGi8QAzxNXgwRIQlIayYKCZKTETPxngzMfHIzbPRt6AX4xvQEwfjSS/EgzUzne5Ol5m2C7iF7PeTuHbb+fObttPO7GYpiKhvXVv4unNpV/4TVQA+gKuAByAAKgDOYDx4sLGZW5DfWhKIc4p9aZY3GrasAXQOLZTvKhgy19G/EUVR9C031c+exELlEWYPNnjAgO6danvQ88gObc62cjtuV38xjrDYwx4eYrjMcIiIqHz6/u/pu8SQHr97HjCpx+En9f6fSI1v9sqL41ho3f+9+H0k5P45pTbJ+d7aZrOxEk/h5NH3klmirSzrORG1d3cN8ZnlDxpDLqMWOxWLV19dazamtlUBzzCnGcnG1OsKkoYormhrwAyACcvcNENW27MNqjZUZRtmHfGPZtVonQB/+I5X9uoWPxWISXwUn8WiCPEaK63xXyUScueoIxV2dJU4/ml3iaqVYZwq1cp2+KdVJWd1DXj/tt3Kumu/BvBlLDayFNE5fg+TOF/W3LkwgvTHCnHrZtytU7lGgYpQswYz12wr0W9rrrHOuuqr1WZjavlu03XSHy3rjE68EDfEBH7gHRaM8b8nU0/C3TNTvVyolPrMyGxPRaV0HMcU1YHvdNUzSbmeuvgV8xy3cQXD9x9trS81m4175S8kXeWA2c8dcTzxiahPR7lG/m+kQSAXqgCc5VTdm6wLf6Iosm6qoBeHoKqaevlNu8lb60tCX/MOV4W8cnZsmncnBjAPQK9JrggHqf1JK9dAu8BC2X/Jo63W2E/IJKoedJCkqtQmHwOFekp935qdnFyP/z/YVYhOoPbRx/jNsoOhMsixg4jnf8Z8ZVpddeRLmDH/ifIKN0qcccyARtTrf8VmcK1inePEwWQhZ851/iJwoaNGD0mNTzuLDXWcOI7fSnb/VYZYwBfc4uf/REREREREREREREREREREREREREQnTbe/Rtj/c4L8hXSNu334hzeIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiA7HeP4v4KsnxtRsz//NelKT4sdPiAmO4vm/foHn/4rtLlpJRDZ/AwAA//9eD1xQ") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 608.152642ms ago: executing program 3 (id=1196): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) 563.570283ms ago: executing program 3 (id=1197): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x21000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 512.338784ms ago: executing program 1 (id=1198): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x480, &(0x7f0000000440)={[{@uid}, {@gid}, {@hide}, {@unhide}, {@check_relaxed}, {@nocompress}, {@nocompress}, {@session={'session', 0x3d, 0x35}}, {@nojoliet}, {@gid}]}, 0x0, 0x68f, &(0x7f0000002640)="$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") 440.112435ms ago: executing program 5 (id=1199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}], {0x14}}, 0x78}}, 0x0) 439.974315ms ago: executing program 3 (id=1200): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x207e, 0x0) close_range(r0, r0, 0x0) 194.889518ms ago: executing program 1 (id=1201): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x2, {0x0, 0x0, 0x0, r1, 0x0, 0x6200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) 187.073718ms ago: executing program 3 (id=1202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20040800) 37.410129ms ago: executing program 4 (id=1203): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6df, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 37.23746ms ago: executing program 5 (id=1204): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)={r0, 0x3}) 0s ago: executing program 3 (id=1205): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x800, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) kernel console output (not intermixed with test programs): .705585][ T7] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.728637][ T7] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.782652][ T4999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.270'. [ 92.890014][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 92.905903][ T7] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 92.917130][ T7] usb 2-1: Product: syz [ 92.930257][ T7] usb 2-1: Manufacturer: syz [ 92.958739][ T5008] loop0: detected capacity change from 0 to 16 [ 92.983985][ T7] hub 2-1:4.0: USB hub found [ 93.011160][ T5012] netlink: 2 bytes leftover after parsing attributes in process `syz.3.277'. [ 93.041429][ T5008] erofs: (device loop0): mounted with root inode @ nid 36. [ 93.112170][ T5008] erofs: (device loop0): erofs_read_inode: bogus i_mode (355) @ nid 46 [ 93.210040][ T5014] loop3: detected capacity change from 0 to 1764 [ 93.241737][ T7] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 93.376870][ T5014] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 93.496817][ T5018] loop0: detected capacity change from 0 to 4096 [ 93.567273][ T4520] usb 2-1: USB disconnect, device number 2 [ 93.654997][ T5027] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.713068][ T5018] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 93.805722][ T5010] loop2: detected capacity change from 0 to 32768 [ 93.849652][ T4234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.940630][ T5010] XFS (loop2): Mounting V5 Filesystem [ 94.094411][ T5010] XFS (loop2): Ending clean mount [ 94.119695][ T4234] usb 4-1: Using ep0 maxpacket: 16 [ 94.260124][ T4234] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.278609][ T4234] usb 4-1: config 0 has no interface number 0 [ 94.310853][ T4200] XFS (loop2): Unmounting Filesystem [ 94.378489][ T5063] loop4: detected capacity change from 0 to 64 [ 94.475558][ T4234] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 94.519626][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.538100][ T4234] usb 4-1: Product: syz [ 94.557705][ T4234] usb 4-1: Manufacturer: syz [ 94.566698][ T5061] loop0: detected capacity change from 0 to 4096 [ 94.574002][ T4234] usb 4-1: SerialNumber: syz [ 94.592069][ T4234] usb 4-1: config 0 descriptor?? [ 94.663117][ T5061] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 94.676304][ T4234] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 94.847670][ T5070] loop4: detected capacity change from 0 to 1024 [ 94.976186][ T1278] hfsplus: b-tree write err: -5, ino 25 [ 94.998121][ T1278] hfsplus: b-tree write err: -5, ino 4 [ 95.021872][ T1278] hfsplus: b-tree write err: -5, ino 2 [ 95.309928][ T4234] gspca_spca1528: reg_w err -71 [ 95.321823][ T5067] JBD2: Ignoring recovery information on journal [ 95.349698][ T4234] spca1528: probe of 4-1:0.1 failed with error -71 [ 95.361272][ T4234] usb 4-1: USB disconnect, device number 2 [ 95.381892][ T5067] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 95.399208][ T5067] JBD2: bad block at offset 32 [ 95.413842][ T5082] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 95.439062][ T5067] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 95.566372][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 95.582371][ T5082] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 95.614765][ T5082] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 95.699845][ T5082] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 95.749737][ T5082] ntfs: volume version 3.1. [ 95.811831][ T5082] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 95.900702][ T5082] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 96.065763][ T4200] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 96.272831][ T5112] program syz.1.321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.492290][ T5118] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,. Quota mode: writeback. [ 96.515183][ T5118] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.534865][ T5118] EXT4-fs error (device loop2): ext4_xattr_block_find:1855: inode #15: comm syz.2.317: corrupted xattr block 33 [ 96.549769][ T5118] EXT4-fs (loop2): Remounting filesystem read-only [ 96.588821][ T5128] EXT4-fs error (device loop2): ext4_xattr_block_list:713: inode #15: comm syz.2.317: corrupted xattr block 33 [ 96.689094][ T5128] EXT4-fs (loop2): Remounting filesystem read-only [ 96.870276][ T5133] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.872205][ T5130] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 96.924860][ T5130] Remounting filesystem read-only [ 97.037983][ T5132] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 97.081938][ T5096] XFS (loop0): Mounting V5 Filesystem [ 97.098498][ T5132] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 97.146154][ T5132] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 97.197674][ T5116] set_capacity_and_notify: 7 callbacks suppressed [ 97.197688][ T5116] loop3: detected capacity change from 0 to 32768 [ 97.214125][ T5132] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 97.268171][ T5132] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 97.348968][ T5096] XFS (loop0): Ending clean mount [ 97.385530][ T5096] XFS (loop0): Quotacheck needed: Please wait. [ 97.401011][ T5151] loop2: detected capacity change from 0 to 64 [ 97.409313][ T5132] ntfs: volume version 3.1. [ 97.436920][ T5132] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 97.490106][ T5096] XFS (loop0): Quotacheck: Done. [ 97.523286][ T5132] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 97.538255][ T5153] netlink: 'syz.3.334': attribute type 2 has an invalid length. [ 97.612590][ T5132] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 97.624679][ T5132] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 97.669798][ T5132] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 97.746826][ T4191] XFS (loop0): Unmounting Filesystem [ 97.985297][ T5163] loop2: detected capacity change from 0 to 1024 [ 98.202910][ T1278] hfsplus: b-tree write err: -5, ino 25 [ 98.209251][ T1278] hfsplus: b-tree write err: -5, ino 4 [ 98.277269][ T1278] hfsplus: b-tree write err: -5, ino 2 [ 98.803318][ T5199] syz.3.357 uses obsolete (PF_INET,SOCK_PACKET) [ 99.048400][ T5208] loop2: detected capacity change from 0 to 512 [ 99.160302][ T5208] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.361: missing EA_INODE flag [ 99.265666][ T5208] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.361: error while reading EA inode 12 err=-117 [ 99.363224][ T5208] EXT4-fs (loop2): 1 orphan inode deleted [ 99.369027][ T5208] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.445643][ T5180] loop1: detected capacity change from 0 to 32768 [ 99.533845][ T5180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.349 (5180) [ 99.581303][ T5195] loop4: detected capacity change from 0 to 32768 [ 99.612747][ T5180] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 99.667980][ T5180] BTRFS info (device loop1): setting nodatasum [ 99.687454][ T5180] BTRFS info (device loop1): force zlib compression, level 3 [ 99.731951][ T5227] netlink: 277 bytes leftover after parsing attributes in process `syz.2.367'. [ 99.732079][ T5180] BTRFS info (device loop1): turning on flush-on-commit [ 99.777323][ T5180] BTRFS info (device loop1): max_inline at 4096 [ 99.799663][ T5180] BTRFS info (device loop1): using free space tree [ 99.819772][ T5180] BTRFS info (device loop1): has skinny extents [ 100.159908][ T5180] BTRFS info (device loop1): enabling ssd optimizations [ 100.261379][ T5236] loop2: detected capacity change from 0 to 40427 [ 100.300609][ T5236] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.399691][ T7] kernel write not supported for file /media0 (pid: 7 comm: kworker/0:0) [ 100.551167][ T4448] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (4448) [ 100.619717][ T5236] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.749893][ T5221] loop0: detected capacity change from 0 to 32768 [ 100.837364][ T5221] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 100.915888][ T5221] JBD2: Ignoring recovery information on journal [ 101.078117][ T5221] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 101.135594][ T5273] loop4: detected capacity change from 0 to 64 [ 101.565368][ T5266] loop3: detected capacity change from 0 to 131072 [ 101.671538][ T5266] F2FS-fs (loop3): Test dummy encryption mode enabled [ 101.683220][ T5266] F2FS-fs (loop3): invalid crc value [ 101.708994][ T4200] attempt to access beyond end of device [ 101.708994][ T4200] loop2: rw=2049, want=45104, limit=40427 [ 101.733780][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 101.747215][ T5266] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.806248][ T5266] F2FS-fs (loop3): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 101.815855][ T5266] F2FS-fs (loop3): Failed to read root inode [ 102.439093][ T5298] loop0: detected capacity change from 0 to 4096 [ 102.498091][ T5303] loop3: detected capacity change from 0 to 512 [ 102.543150][ T5303] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.658011][ T5303] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.669905][ T4192] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.736166][ T5298] ntfs3: loop0: ino=1f, "file3" failed to undo rename [ 102.995196][ T5318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 103.030111][ T4192] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.038508][ T5318] netlink: 16 bytes leftover after parsing attributes in process `syz.3.394'. [ 103.043030][ T4192] usb 5-1: config 0 has no interface number 0 [ 103.086618][ T4192] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.103896][ T5322] loop0: detected capacity change from 0 to 64 [ 103.115282][ T4192] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.176733][ T4192] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 103.208360][ T4192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.286099][ T5285] loop1: detected capacity change from 0 to 32768 [ 103.291599][ T4192] usb 5-1: config 0 descriptor?? [ 103.357655][ T5327] loop3: detected capacity change from 0 to 4096 [ 103.382709][ T5285] gfs2: fsid=Ô±rÐÛ»ð_î [ 103.382709][ T5285] ˜b‚ç: Trying to join cluster "lock_nolock", "Ô±rÐÛ»ð_î [ 103.382709][ T5285] ˜b‚ç" [ 103.410827][ T5327] __ntfs_warning: 7 callbacks suppressed [ 103.410842][ T5327] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 103.439321][ T5285] gfs2: fsid=Ô±rÐÛ»ð_î [ 103.439321][ T5285] ˜b‚ç: Now mounting FS (format 0)... [ 103.456540][ T5332] openvswitch: netlink: Actions may not be safe on all matching packets [ 103.526583][ T5327] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 103.587806][ T5285] gfs2: fsid=Ô±rÐÛ»ð_î [ 103.587806][ T5285] ˜b‚ç.s: journal 0 mapped with 5 extents in 0ms [ 103.599012][ T5327] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 103.626849][ T5327] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 103.683382][ T5285] gfs2: fsid=Ô±rÐÛ»ð_î [ 103.683382][ T5285] ˜b‚ç.s: first mount done, others may mount [ 103.703433][ T5327] ntfs: volume version 3.1. [ 103.800055][ T4192] prodikeys 0003:041E:2801.0002: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 103.829077][ T5327] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 103.865788][ T4192] hid_prodikeys: hid-prodikeys: failed to find output report [ 103.865788][ T4192] [ 103.901816][ T5327] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 103.919368][ T5337] loop0: detected capacity change from 0 to 4096 [ 104.001685][ T4439] usb 5-1: USB disconnect, device number 2 [ 104.082397][ T4190] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 104.260518][ T5338] fido_id[5338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 104.372552][ T5344] loop3: detected capacity change from 0 to 4096 [ 104.397885][ T5346] loop2: detected capacity change from 0 to 4096 [ 104.446279][ T5344] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 104.528314][ T5349] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.702133][ T4178] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.712666][ T5353] loop4: detected capacity change from 0 to 2048 [ 104.821912][ T5356] team0: Device vxcan3 is up. Set it down before adding it as a team port [ 104.830284][ T5357] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.916940][ T5353] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 104.977049][ T5353] Remounting filesystem read-only [ 105.005846][ T5362] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 105.079953][ T4178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.119996][ T4178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.176292][ T4178] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 105.195624][ T4178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.231409][ T4178] usb 2-1: config 0 descriptor?? [ 105.651777][ T5373] netlink: 'syz.4.416': attribute type 1 has an invalid length. [ 105.670849][ T5373] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.416'. [ 105.721055][ T5360] loop0: detected capacity change from 0 to 32768 [ 105.842502][ T5360] XFS (loop0): Mounting V5 Filesystem [ 105.930070][ T4178] hid-led: probe of 0003:1D34:000A.0003 failed with error -71 [ 105.987741][ T4178] usb 2-1: USB disconnect, device number 3 [ 106.001861][ T5361] XFS (loop3): Mounting V5 Filesystem [ 106.049903][ T5360] XFS (loop0): Ending clean mount [ 106.151071][ T5361] XFS (loop3): Ending clean mount [ 106.169922][ T5364] XFS (loop2): Mounting V5 Filesystem [ 106.231857][ T4191] XFS (loop0): Unmounting Filesystem [ 106.277208][ T4190] XFS (loop3): Unmounting Filesystem [ 106.432392][ T5364] XFS (loop2): Ending clean mount [ 106.512169][ T5364] XFS (loop2): Quotacheck needed: Please wait. [ 106.648656][ T5364] XFS (loop2): Quotacheck: Done. [ 106.815684][ T4200] XFS (loop2): Unmounting Filesystem [ 106.860765][ T4520] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 107.009884][ T5422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 107.095280][ T5280] kernel write not supported for file task/240/net/softnet_stat (pid: 5280 comm: kworker/0:19) [ 107.139445][ T5429] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.198938][ T5429] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 107.279826][ T4520] usb 2-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 107.293245][ T5429] System zones: 1-12 [ 107.320095][ T5429] EXT4-fs (loop0): 1 truncate cleaned up [ 107.346497][ T5429] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 107.416373][ T5436] EXT4-fs (loop2): orphan cleanup on readonly fs [ 107.431398][ T4520] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 107.450246][ T4520] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 107.464434][ T4520] usb 2-1: Manufacturer: syz [ 107.471341][ T5436] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 107.478397][ T4520] usb 2-1: SerialNumber: syz [ 107.490031][ T5436] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 107.500133][ T5436] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.428: Failed to acquire dquot type 1 [ 107.512258][ T4191] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /88/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 107.533995][ T5436] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 107.534848][ T5436] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.428: Failed to acquire dquot type 1 [ 107.597861][ T5440] FAT-fs (loop4): Directory bread(block 64) failed [ 107.624016][ T5436] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.428: bg 0: block 248: padding at end of block bitmap is not set [ 107.638257][ T5440] FAT-fs (loop4): Directory bread(block 65) failed [ 107.649780][ T4191] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 107.661685][ T5436] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 107.672889][ T5440] FAT-fs (loop4): Directory bread(block 66) failed [ 107.700906][ T5436] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.428: Failed to acquire dquot type 1 [ 107.730830][ T5440] FAT-fs (loop4): Directory bread(block 67) failed [ 107.737739][ T5440] FAT-fs (loop4): Directory bread(block 68) failed [ 107.747735][ T4191] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /88/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 107.785664][ T5436] EXT4-fs (loop2): 1 orphan inode deleted [ 107.794475][ T4520] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 107.800265][ T5440] FAT-fs (loop4): Directory bread(block 69) failed [ 107.813497][ T5440] FAT-fs (loop4): Directory bread(block 70) failed [ 107.823633][ T5440] FAT-fs (loop4): Directory bread(block 71) failed [ 107.830270][ T4520] usb 2-1: USB disconnect, device number 4 [ 107.838446][ T5436] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.854682][ T4191] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 107.879736][ T5440] FAT-fs (loop4): Directory bread(block 72) failed [ 107.886447][ T5440] FAT-fs (loop4): Directory bread(block 73) failed [ 107.915807][ T4191] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /88/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 107.955526][ T4191] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 107.990575][ T4191] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /88/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 108.054728][ T4191] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 108.113572][ T4191] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /88/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 108.145431][ T4191] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 108.409636][ T4520] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.599492][ T5444] set_capacity_and_notify: 5 callbacks suppressed [ 108.633253][ T5444] loop3: detected capacity change from 0 to 32768 [ 108.763932][ T5448] loop4: detected capacity change from 0 to 32768 [ 108.820039][ T4520] usb 2-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 108.944893][ T5448] XFS (loop4): Mounting V5 Filesystem [ 108.989639][ T4520] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 109.019286][ T4520] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 109.051983][ T5450] loop2: detected capacity change from 0 to 32768 [ 109.080908][ T4520] usb 2-1: Manufacturer: syz [ 109.085581][ T4520] usb 2-1: SerialNumber: syz [ 109.208826][ T5448] XFS (loop4): Ending clean mount [ 109.234932][ T5448] XFS (loop4): Quotacheck needed: Please wait. [ 109.291539][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.332636][ T5448] XFS (loop4): Quotacheck: Done. [ 109.463726][ T4520] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 109.510385][ T4520] usb 2-1: USB disconnect, device number 5 [ 109.557734][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.592260][ T4199] XFS (loop4): Unmounting Filesystem [ 109.685883][ T5473] loop3: detected capacity change from 0 to 128 [ 109.742821][ T5475] loop2: detected capacity change from 0 to 128 [ 109.797978][ T5475] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 109.806447][ T5473] EXT4-fs (loop3): Test dummy encryption mode enabled [ 109.852587][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.886595][ T4200] sysv_free_block: flc_count > flc_size [ 109.920179][ T4200] sysv_free_block: flc_count > flc_size [ 109.925814][ T4200] sysv_free_block: flc_count > flc_size [ 109.950110][ T5473] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 109.968565][ T5473] System zones: 1-3, 19-19, 35-36 [ 109.978607][ T4200] sysv_free_block: flc_count > flc_size [ 110.009826][ T4200] sysv_free_block: flc_count > flc_size [ 110.015592][ T4200] sysv_free_block: flc_count > flc_size [ 110.047777][ T5473] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,nolazytime,dax=inode,jqfmt=vfsv0,dioread_lock,usrjquota=.,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 110.066314][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.115857][ T4200] sysv_free_block: flc_count > flc_size [ 110.122891][ T5473] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.136223][ T4200] sysv_free_block: flc_count > flc_size [ 110.142938][ T4200] sysv_free_block: flc_count > flc_size [ 110.148741][ T4200] sysv_free_block: flc_count > flc_size [ 110.155283][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.164116][ T4200] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 110.220044][ T5482] loop1: detected capacity change from 0 to 128 [ 110.359032][ T5473] EXT4-fs (loop3): user quota file already specified [ 110.365720][ T5482] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.365857][ T5482] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.408225][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.697711][ T5502] loop1: detected capacity change from 0 to 64 [ 110.712626][ T5469] chnl_net:caif_netlink_parms(): no params data found [ 111.044878][ T5513] loop4: detected capacity change from 0 to 1024 [ 111.146165][ T5516] loop2: detected capacity change from 0 to 4096 [ 111.182292][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 111.204982][ T5516] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 111.401103][ T5469] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.409131][ T5469] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.417613][ T5469] device bridge_slave_0 entered promiscuous mode [ 111.428117][ T5469] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.436240][ T5469] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.487378][ T5469] device bridge_slave_1 entered promiscuous mode [ 111.585115][ T5469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.656160][ T5469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.699822][ T4520] Bluetooth: hci2: command 0x0409 tx timeout [ 111.828381][ T5469] team0: Port device team_slave_0 added [ 111.906376][ T5469] team0: Port device team_slave_1 added [ 112.072051][ T5564] loop2: detected capacity change from 0 to 1024 [ 112.085937][ T5469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.106409][ T5469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.132399][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.142089][ T5469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.164143][ T5564] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 112.189842][ T5564] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 112.239063][ T5564] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #5: comm syz.2.480: unexpected bad inode w/o EXT4_IGET_BAD [ 112.272417][ T5469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.279487][ T5469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.305874][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.330817][ T5564] EXT4-fs (loop2): no journal found [ 112.336139][ T5564] EXT4-fs (loop2): can't get journal size [ 112.397239][ T5564] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 112.416421][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.446768][ T5469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.527656][ T5469] device hsr_slave_0 entered promiscuous mode [ 112.574947][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 112.574961][ T26] audit: type=1800 audit(1777882277.616:6): pid=5581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.484" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 112.612511][ T5469] device hsr_slave_1 entered promiscuous mode [ 112.655751][ T5469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.715394][ T5469] Cannot create hsr debugfs directory [ 113.061695][ T154] IPVS: stopping master sync thread 4877 ... [ 113.139871][ T5603] netlink: 48 bytes leftover after parsing attributes in process `syz.4.496'. [ 113.453388][ T5606] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.621167][ T5469] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.641461][ T5594] XFS (loop3): Mounting V5 Filesystem [ 113.730087][ T5469] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.779783][ T4520] Bluetooth: hci2: command 0x041b tx timeout [ 113.788447][ T5594] XFS (loop3): Ending clean mount [ 113.816293][ T5469] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.886247][ T5594] XFS (loop3): Quotacheck needed: Please wait. [ 113.915031][ T5469] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.941846][ T4178] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.040826][ T5594] XFS (loop3): Quotacheck: Done. [ 114.219713][ T4178] usb 2-1: Using ep0 maxpacket: 8 [ 114.280226][ T4190] XFS (loop3): Unmounting Filesystem [ 114.287094][ T154] device hsr_slave_0 left promiscuous mode [ 114.289103][ T154] device hsr_slave_1 left promiscuous mode [ 114.290427][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.290505][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.292620][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.292649][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.300795][ T154] device bridge_slave_1 left promiscuous mode [ 114.302251][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.328432][ T154] device bridge_slave_0 left promiscuous mode [ 114.328643][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.381079][ T4178] usb 2-1: unable to get BOS descriptor or descriptor too short [ 114.453579][ T154] device veth1_macvtap left promiscuous mode [ 114.453850][ T154] device veth0_macvtap left promiscuous mode [ 114.453946][ T154] device veth1_vlan left promiscuous mode [ 114.454167][ T154] device veth0_vlan left promiscuous mode [ 114.520941][ T4178] usb 2-1: config 4 interface 0 has no altsetting 0 [ 114.760005][ T4178] usb 2-1: string descriptor 0 read error: -22 [ 114.767533][ T4178] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 114.785260][ T4178] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 114.843750][ T4178] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 114.857842][ T154] team0 (unregistering): Port device team_slave_1 removed [ 114.877421][ T154] team0 (unregistering): Port device team_slave_0 removed [ 114.888043][ T4178] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 114.899220][ T4178] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 114.907422][ T4178] usb 2-1: media controller created [ 114.927734][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.936833][ T4178] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.961885][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.054134][ T154] bond0 (unregistering): Released all slaves [ 115.266922][ T5659] set_capacity_and_notify: 4 callbacks suppressed [ 115.266939][ T5659] loop2: detected capacity change from 0 to 1024 [ 115.352919][ T5469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.389327][ T5469] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.460276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.468243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.508234][ T1278] hfsplus: b-tree write err: -5, ino 25 [ 115.515453][ T1278] hfsplus: b-tree write err: -5, ino 4 [ 115.536682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.559198][ T1278] hfsplus: b-tree write err: -5, ino 2 [ 115.580251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.613052][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.620306][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.658934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.680093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.699164][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.706394][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.761820][ T5667] loop2: detected capacity change from 0 to 4096 [ 115.787974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.804002][ T5667] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 115.834162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.846147][ T5665] loop4: detected capacity change from 0 to 4096 [ 115.857100][ T5667] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 115.881836][ T1326] Bluetooth: hci2: command 0x040f tx timeout [ 115.913139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.940966][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.951823][ T5667] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 115.979679][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.999410][ T5667] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 116.043427][ T4178] zl10353_read_register: readreg error (reg=127, ret==0) [ 116.051582][ T5622] usb 2-1: dvb_usb_au6610: wlen=3, aborting [ 116.060556][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.076345][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.099947][ T5667] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 116.130622][ T5667] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 116.155362][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.199455][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.236668][ T5667] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 116.251139][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.262236][ T4178] usb 2-1: USB disconnect, device number 6 [ 116.333471][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.347338][ T5667] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 116.390239][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.438661][ T5667] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 116.472191][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.511126][ T5667] ntfs: volume version 3.1. [ 117.035289][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.050313][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.123303][ T5469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.143821][ T4434] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 117.170059][ T5709] capability: warning: `syz.1.521' uses deprecated v2 capabilities in a way that may be insecure [ 117.344821][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'. [ 117.477576][ T5719] loop1: detected capacity change from 0 to 4096 [ 117.529928][ T4434] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 253, using maximum allowed: 30 [ 117.561180][ T4434] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 117.595595][ T4434] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 117.638363][ T5719] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 117.682556][ T4434] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.688829][ T5719] NILFS (loop1): mounting unchecked fs [ 117.719212][ T4434] usb 5-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 117.744705][ T4179] udevd[4179]: incorrect nilfs2 checksum on /dev/loop1 [ 117.755540][ T4434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.784526][ T5719] NILFS (loop1): recovery complete [ 117.787769][ T4434] usb 5-1: config 0 descriptor?? [ 117.829866][ T5695] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.868762][ T5736] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.959646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.968029][ T5278] Bluetooth: hci2: command 0x0419 tx timeout [ 117.999362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.064975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.083450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.091936][ T4178] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.121297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.139364][ T5739] loop2: detected capacity change from 0 to 4096 [ 118.171078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.204382][ T5469] device veth0_vlan entered promiscuous mode [ 118.251675][ T5469] device veth1_vlan entered promiscuous mode [ 118.272602][ T5746] loop1: detected capacity change from 0 to 512 [ 118.312759][ T4434] uclogic 0003:2179:0077.0004: unknown main item tag 0x1 [ 118.332607][ T4434] uclogic 0003:2179:0077.0004: item fetching failed at offset 5/40 [ 118.349646][ T4178] usb 4-1: Using ep0 maxpacket: 8 [ 118.382501][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.396133][ T4434] uclogic 0003:2179:0077.0004: parse failed [ 118.408049][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.426159][ T4434] uclogic: probe of 0003:2179:0077.0004 failed with error -22 [ 118.448735][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.509922][ T4178] usb 4-1: unable to get BOS descriptor or descriptor too short [ 118.525705][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.543201][ T4520] usb 5-1: USB disconnect, device number 3 [ 118.582323][ T5469] device veth0_macvtap entered promiscuous mode [ 118.598033][ T5469] device veth1_macvtap entered promiscuous mode [ 118.640311][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.651213][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.661330][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.671759][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.678296][ T4178] usb 4-1: config 4 interface 0 has no altsetting 0 [ 118.732997][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.758885][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.775402][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.788763][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.811977][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.830448][ T5469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.894717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.919934][ T4178] usb 4-1: string descriptor 0 read error: -22 [ 118.926228][ T4178] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 118.936664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.945095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.954885][ T4178] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 118.980850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.025634][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.039023][ T4178] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 119.058332][ T4178] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 119.079213][ T4178] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 119.090970][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.109748][ T4178] usb 4-1: media controller created [ 119.115241][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.144065][ T4178] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.163056][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.179687][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.208454][ T4439] Process accounting resumed [ 119.229191][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.252168][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.267392][ T5755] Process accounting resumed [ 119.273112][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.298094][ T5469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.327943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.363923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.390340][ T5469] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.424024][ T5761] loop4: detected capacity change from 0 to 256 [ 119.432799][ T5469] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.465630][ T5469] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.490694][ T5469] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.588624][ T5761] FAT-fs (loop4): Directory bread(block 64) failed [ 119.588697][ T5761] FAT-fs (loop4): Directory bread(block 65) failed [ 119.588779][ T5761] FAT-fs (loop4): Directory bread(block 66) failed [ 119.588818][ T5761] FAT-fs (loop4): Directory bread(block 67) failed [ 119.588908][ T5761] FAT-fs (loop4): Directory bread(block 68) failed [ 119.588943][ T5761] FAT-fs (loop4): Directory bread(block 69) failed [ 119.589033][ T5761] FAT-fs (loop4): Directory bread(block 70) failed [ 119.589066][ T5761] FAT-fs (loop4): Directory bread(block 71) failed [ 119.589138][ T5761] FAT-fs (loop4): Directory bread(block 72) failed [ 119.589171][ T5761] FAT-fs (loop4): Directory bread(block 73) failed [ 119.718293][ T5769] loop1: detected capacity change from 0 to 1024 [ 119.762880][ T5769] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 119.762913][ T5769] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 119.766692][ T5769] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: inode #5: comm syz.1.540: unexpected bad inode w/o EXT4_IGET_BAD [ 119.767162][ T5769] EXT4-fs (loop1): no journal found [ 119.767179][ T5769] EXT4-fs (loop1): can't get journal size [ 119.780648][ T5769] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 119.807806][ T4584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.807868][ T4584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.826351][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.962071][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.962093][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.969977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.279831][ T4178] zl10353_read_register: readreg error (reg=127, ret==0) [ 120.285091][ T5733] usb 4-1: dvb_usb_au6610: wlen=3, aborting [ 120.370049][ T4178] usb 4-1: USB disconnect, device number 3 [ 120.538737][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.893724][ T5808] loop5: detected capacity change from 0 to 64 [ 120.992717][ T5808] Trying to free block not in datazone [ 121.219687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.289751][ T4434] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 122.368814][ T5815] loop3: detected capacity change from 0 to 40427 [ 122.386555][ T5822] loop1: detected capacity change from 0 to 40427 [ 122.420892][ T5815] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 122.430508][ T5815] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 122.449779][ T5280] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.459178][ T5815] F2FS-fs (loop3): invalid crc value [ 122.472950][ T5822] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 122.487560][ T5822] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 122.527896][ T5815] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 122.549653][ T4434] usb 6-1: Using ep0 maxpacket: 8 [ 122.567912][ T5822] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.709794][ T4434] usb 6-1: unable to get BOS descriptor or descriptor too short [ 122.786057][ T5822] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 122.790965][ T4434] usb 6-1: config 4 interface 0 has no altsetting 0 [ 122.800685][ T5822] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 122.809170][ T5815] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 122.832477][ T5815] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.959928][ T5280] usb 3-1: unable to get BOS descriptor or descriptor too short [ 123.042417][ T4190] attempt to access beyond end of device [ 123.042417][ T4190] loop3: rw=2049, want=45104, limit=40427 [ 123.061601][ T4434] usb 6-1: string descriptor 0 read error: -22 [ 123.068353][ T4434] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 123.105917][ T4434] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 123.152082][ T4434] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 123.240038][ T5280] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 123.241108][ T4434] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 123.278600][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.316363][ T4434] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 123.322997][ T5280] usb 3-1: Product: syz [ 123.327969][ T5280] usb 3-1: Manufacturer: syz [ 123.328154][ T4434] usb 6-1: media controller created [ 123.359628][ T5280] usb 3-1: SerialNumber: syz [ 123.368204][ T5848] usb 6-1: dvb_usb_au6610: wlen=3, aborting [ 123.406226][ T4434] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.492588][ T4434] zl10353_read_register: readreg error (reg=127, ret==0) [ 123.609882][ T4434] usb 6-1: USB disconnect, device number 2 [ 123.711204][ T5899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.579'. [ 123.735552][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 123.848056][ T5902] loop1: detected capacity change from 0 to 764 [ 123.877722][ T5902] Symlink component flag not implemented [ 123.895460][ T5902] Symlink component flag not implemented (116) [ 124.080895][ T5280] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 124.124765][ T5280] usb 3-1: USB disconnect, device number 3 [ 124.149430][ T5911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.157503][ T5911] IPv6: NLM_F_CREATE should be set when creating new route [ 124.228133][ T5911] Zero length message leads to an empty skb [ 124.711970][ T5898] loop3: detected capacity change from 0 to 32768 [ 124.836711][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 124.836726][ T26] audit: type=1800 audit(1777882289.876:7): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.575" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 124.867606][ T5898] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 124.867606][ T5898] [ 124.981414][ T5946] loop2: detected capacity change from 0 to 256 [ 125.007158][ T5898] ERROR: (device loop3): remounting filesystem as read-only [ 125.033152][ T5948] loop4: detected capacity change from 0 to 128 [ 125.040440][ T5898] ialloc: diAlloc returned -5! [ 125.099651][ T5946] exFAT-fs (loop2): bogus sectors bits per cluster : 141 [ 125.099651][ T5946] [ 125.136775][ T5948] EXT4-fs (loop4): Test dummy encryption mode enabled [ 125.149843][ T5946] exFAT-fs (loop2): failed to read boot sector [ 125.159661][ T5948] EXT4-fs (loop4): inline encryption not supported [ 125.203989][ T5946] exFAT-fs (loop2): failed to recognize exfat type [ 125.214943][ T5948] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none. [ 125.257061][ T5948] ext4 filesystem being mounted at mnt:[4026532807] supports timestamps until 2038-01-19 (0x7fffffff) [ 125.275422][ T5955] loop5: detected capacity change from 0 to 4096 [ 125.420253][ T5955] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 125.461477][ T5946] loop2: detected capacity change from 0 to 256 [ 125.532354][ T5921] loop1: detected capacity change from 0 to 32768 [ 125.558924][ T5946] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 125.578424][ T154] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 125.593000][ T5469] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 125.600495][ T5469] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 125.607496][ T5469] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 125.629072][ T5960] tmpfs: Cannot retroactively limit inodes [ 125.655372][ T154] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 125.695568][ T5469] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 125.710373][ T5921] XFS (loop1): Mounting V5 Filesystem [ 126.020912][ T5921] XFS (loop1): Ending clean mount [ 126.043906][ T5921] XFS (loop1): Quotacheck needed: Please wait. [ 126.061619][ T5979] loop3: detected capacity change from 0 to 4096 [ 126.126109][ T5983] loop2: detected capacity change from 0 to 16 [ 126.267306][ T5983] erofs: (device loop2): mounted with root inode @ nid 36. [ 126.274984][ T5921] XFS (loop1): Quotacheck: Done. [ 126.292058][ T5979] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 126.320584][ T5983] erofs: (device loop2): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 126.336309][ T5979] ntfs3: loop3: Failed to load $Extend. [ 126.443516][ T4189] XFS (loop1): Unmounting Filesystem [ 126.456610][ T5994] loop4: detected capacity change from 0 to 64 [ 126.592025][ T5994] Trying to free block not in datazone [ 126.634621][ T5998] loop2: detected capacity change from 0 to 512 [ 126.695901][ T4190] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22. [ 126.708967][ T4190] ntfs3: loop3: ntfs_evict_inode r=9 failed, -22. [ 126.837981][ T6006] option changes via remount are deprecated (pid=6005 comm=syz.3.616) [ 126.848590][ T6006] cgroup: option or name mismatch, new: 0x0 "func", old: 0x0 "" [ 126.871986][ T5998] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.970313][ T5998] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 126.998416][ T5998] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.615: Corrupt directory, running e2fsck is recommended [ 127.065615][ T5998] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 127.089002][ T6015] loop3: detected capacity change from 0 to 1024 [ 127.102951][ T5998] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.615: corrupted in-inode xattr [ 127.169934][ T5998] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.615: couldn't read orphan inode 15 (err -117) [ 127.231395][ T5998] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000003,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001001,grpid,,,errors=continue. Quota mode: writeback. [ 127.277572][ T6015] hfsplus: failed to load root directory [ 127.292062][ T6020] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 127.719040][ T6037] loop3: detected capacity change from 0 to 128 [ 127.800805][ T6037] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.830098][ T6037] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.007394][ T6045] loop2: detected capacity change from 0 to 16 [ 128.060715][ T6045] erofs: (device loop2): mounted with root inode @ nid 36. [ 128.246749][ T6053] loop3: detected capacity change from 0 to 64 [ 128.451097][ T6054] loop4: detected capacity change from 0 to 2048 [ 128.575090][ T6063] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.632820][ T6022] loop5: detected capacity change from 0 to 32768 [ 128.822402][ T6022] XFS (loop5): Mounting V5 Filesystem [ 128.906686][ T6028] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 128.959688][ T6028] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 128.983385][ T6022] XFS (loop5): Ending clean mount [ 129.002436][ T6022] XFS (loop5): Quotacheck needed: Please wait. [ 129.018086][ T6028] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 129.027244][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 129.094065][ T6022] XFS (loop5): Quotacheck: Done. [ 129.106966][ T4234] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 129.130064][ T4234] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 129.276568][ T5469] XFS (loop5): Unmounting Filesystem [ 129.289881][ T4234] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 159ms [ 129.328116][ T4234] gfs2: fsid=syz:syz.0: jid=0: Done [ 129.351430][ T6028] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 129.912466][ T6062] XFS (loop3): Mounting V5 Filesystem [ 130.047389][ T6067] F2FS-fs (loop2): invalid crc value [ 130.157499][ T6062] XFS (loop3): Ending clean mount [ 130.194390][ T6067] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 127) [ 130.341247][ T4190] XFS (loop3): Unmounting Filesystem [ 130.488510][ T6067] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 130.540943][ T6067] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 130.551759][ T6120] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x65521afd, utbl_chksum : 0xe619d30d) [ 130.685923][ T26] audit: type=1800 audit(1777882295.726:8): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.649" name="file1" dev="loop1" ino=1048627 res=0 errno=0 [ 130.885771][ T6134] netlink: 'syz.1.656': attribute type 1 has an invalid length. [ 130.893570][ T4200] attempt to access beyond end of device [ 130.893570][ T4200] loop2: rw=2049, want=45104, limit=40427 [ 130.951388][ T6135] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.012420][ T6130] NILFS (loop5): nilfs_ioctl_move_inode_block: invalid virtual block address (node): ino=2048, cno=5, offset=63330, blocknr=0, vblocknr=34359803903 [ 131.120259][ T6130] NILFS (loop5): error -2 preparing GC: cannot read source blocks [ 131.363630][ T6149] set_capacity_and_notify: 5 callbacks suppressed [ 131.363647][ T6149] loop4: detected capacity change from 0 to 1024 [ 131.542957][ T6147] loop3: detected capacity change from 0 to 8192 [ 131.560199][ T6149] hfsplus: small file entry [ 131.627174][ T6147] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.182530][ T6175] loop1: detected capacity change from 0 to 4096 [ 132.245885][ T6187] loop3: detected capacity change from 0 to 128 [ 132.319743][ T6190] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.337970][ T6187] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.349280][ T6187] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.387934][ T6193] loop2: detected capacity change from 0 to 128 [ 132.422362][ T6193] EXT4-fs (loop2): Test dummy encryption mode enabled [ 132.445431][ T6175] NILFS (loop1): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 132.532176][ T6193] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0002] [ 132.541756][ T6193] System zones: 1-3, 19-19, 35-36 [ 132.552511][ T6193] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,nolazytime,nodioread_nolock,jqfmt=vfsv0,dioread_lock,usrjquota=.,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 132.634485][ T6204] mkiss: ax0: crc mode is auto. [ 132.640892][ T6193] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.746359][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.752748][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.768032][ T6203] loop5: detected capacity change from 0 to 128 [ 133.069891][ T6218] loop1: detected capacity change from 0 to 512 [ 133.088166][ T6214] loop4: detected capacity change from 0 to 1024 [ 133.122772][ T6218] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 133.283352][ T26] audit: type=1800 audit(1777882298.326:9): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.692" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 133.430572][ T154] hfsplus: b-tree write err: -5, ino 25 [ 133.436615][ T154] hfsplus: b-tree write err: -5, ino 4 [ 133.487317][ T154] hfsplus: b-tree write err: -5, ino 2 [ 133.515374][ T5280] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 133.540742][ T154] hfsplus: b-tree write err: -5, ino 20 [ 133.698694][ T6237] loop3: detected capacity change from 0 to 8192 [ 133.761357][ T6237] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 133.780117][ T6237] REISERFS (device loop3): using ordered data mode [ 133.787497][ T6237] reiserfs: using flush barriers [ 133.805743][ T6237] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.915731][ T5280] usb 6-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 133.933691][ T5280] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 133.943630][ T6237] REISERFS (device loop3): checking transaction log (loop3) [ 133.980932][ T5280] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 133.982124][ T6237] REISERFS (device loop3): Using tea hash to sort names [ 134.021977][ T5280] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 134.041772][ T6237] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 134.059959][ T5280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.362632][ T6240] loop2: detected capacity change from 0 to 32768 [ 134.401031][ T5280] usb 6-1: string descriptor 0 read error: -71 [ 134.457783][ T6241] F2FS-fs (loop1): invalid crc value [ 134.527880][ T6241] F2FS-fs (loop1): Found nat_bits in checkpoint [ 134.588316][ T5280] usb 6-1: USB disconnect, device number 3 [ 134.808810][ T6241] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 134.998506][ T4448] udevd[4448]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.085155][ T4189] attempt to access beyond end of device [ 135.085155][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 135.330866][ T6290] autofs4:pid:6290:autofs_fill_super: called with bogus options [ 135.798995][ T6311] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 135.843929][ T6311] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 135.883584][ T6311] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 136.085935][ T6323] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 136.123427][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.736'. [ 136.203361][ T6327] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 136.263884][ T4179] udevd[4179]: incorrect cramfs checksum on /dev/loop2 [ 136.291776][ T6327] cramfs: Error -3 while decompressing! [ 136.297829][ T6327] cramfs: ffffffff96408078(42)->ffff88802ad5b000(4096) [ 136.340406][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.742'. [ 136.373849][ T4179] udevd[4179]: incorrect cramfs checksum on /dev/loop2 [ 136.733369][ T6353] set_capacity_and_notify: 6 callbacks suppressed [ 136.733386][ T6353] loop4: detected capacity change from 0 to 16 [ 136.750547][ T4234] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 136.752847][ T6357] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 136.800910][ T6353] erofs: (device loop4): mounted with root inode @ nid 36. [ 136.910656][ T6353] overlayfs: upper fs is r/o, try multi-lower layers mount [ 137.001239][ T6367] netlink: 88 bytes leftover after parsing attributes in process `syz.1.755'. [ 137.126086][ T6362] loop2: detected capacity change from 0 to 8192 [ 137.228018][ T4234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.248624][ T4234] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 137.265528][ T6362] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 137.302282][ T6384] loop5: detected capacity change from 0 to 64 [ 137.312462][ T6362] REISERFS (device loop2): using ordered data mode [ 137.312479][ T6362] reiserfs: using flush barriers [ 137.316949][ T6362] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.317297][ T6362] REISERFS (device loop2): checking transaction log (loop2) [ 137.391144][ T4234] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 137.391178][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.418608][ T6362] REISERFS (device loop2): Using tea hash to sort names [ 137.462609][ T4234] usb 4-1: config 0 descriptor?? [ 137.513472][ T4234] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 137.513893][ T4234] dvb-usb: bulk message failed: -22 (3/0) [ 137.541605][ T4234] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 137.563867][ T5469] hfs: node 4:3 still has 2 user(s)! [ 137.571168][ T4234] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 137.571238][ T4234] usb 4-1: media controller created [ 137.572450][ T4234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.576771][ T4234] dvb-usb: bulk message failed: -22 (6/0) [ 137.576992][ T4234] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 137.595235][ T6362] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 137.619648][ T4234] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 137.656581][ T4234] dvb-usb: schedule remote query interval to 150 msecs. [ 137.656611][ T4234] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 137.814092][ T4520] dvb-usb: bulk message failed: -22 (1/0) [ 137.814229][ T4520] dvb-usb: error while querying for an remote control event. [ 137.817809][ T4192] usb 4-1: USB disconnect, device number 4 [ 137.922025][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.766'. [ 137.922340][ T4192] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 138.294390][ T6413] loop5: detected capacity change from 0 to 1024 [ 138.431541][ T6413] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.589137][ T6429] netlink: 44 bytes leftover after parsing attributes in process `syz.4.776'. [ 138.843426][ T6440] mkiss: ax0: crc mode is auto. [ 139.064395][ T6447] netlink: 108 bytes leftover after parsing attributes in process `syz.4.783'. [ 139.076076][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 139.126159][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.784'. [ 139.148040][ T6451] netlink: 'syz.3.784': attribute type 18 has an invalid length. [ 139.247240][ T6450] loop1: detected capacity change from 0 to 4096 [ 139.292975][ T6450] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 139.321197][ T6460] tipc: Invalid UDP bearer configuration [ 139.321239][ T6460] tipc: Enabling of bearer rejected, failed to enable media [ 139.485991][ T6417] loop2: detected capacity change from 0 to 40427 [ 139.592543][ T6417] F2FS-fs (loop2): Corrupted extension count (327717 + 1 > 64) [ 139.636539][ T6417] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 139.681863][ T6417] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 139.703677][ T6468] loop4: detected capacity change from 0 to 4096 [ 139.727601][ T6417] F2FS-fs (loop2): invalid crc value [ 139.770615][ T6417] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.879196][ T6468] ntfs: volume version 3.1. [ 139.915808][ T6468] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Directory index record with vcn 0x0 is corrupt. Corrupt inode 0x5. Run chkdsk. [ 139.995077][ T6468] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 140.046285][ T6417] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 140.069738][ T6468] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 140.094914][ T6417] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 140.158816][ T6468] ntfs: (device loop4): ntfs_readdir(): Directory index record with vcn 0x0 is corrupt. Corrupt inode 0x5. Run chkdsk. [ 140.220564][ T6491] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 140.227839][ T6491] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 140.308251][ T6491] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 140.358711][ T6491] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 140.389100][ T6491] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 140.400376][ T6491] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 140.436029][ T6491] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 140.511176][ T6491] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 140.522542][ T6491] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 140.563146][ T6491] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 140.609654][ T6491] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 140.649659][ T6491] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 140.834145][ T6476] loop1: detected capacity change from 0 to 32768 [ 140.891126][ T26] audit: type=1800 audit(1777882305.936:10): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.791" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 140.985995][ T6514] rdma_op ffff88802335f1f0 conn xmit_rdma 0000000000000000 [ 141.394975][ T26] audit: type=1326 audit(1777882306.436:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.807" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6a4f8dd9 code=0x7ffc0000 [ 141.399603][ T6533] device macsec0 entered promiscuous mode [ 141.499619][ T26] audit: type=1326 audit(1777882306.476:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.807" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f9d6a4b522c code=0x7ffc0000 [ 141.627454][ T6541] program syz.1.811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.628584][ T6529] loop5: detected capacity change from 0 to 8192 [ 141.649418][ T26] audit: type=1326 audit(1777882306.476:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.807" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9d6a4b528e code=0x7ffc0000 [ 141.711090][ T26] audit: type=1326 audit(1777882306.476:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.807" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d6a4f8a6b code=0x7ffc0000 [ 141.748226][ T26] audit: type=1326 audit(1777882306.476:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.807" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9d6a4f8dd9 code=0x7ffc0000 [ 141.869896][ T6529] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 141.890317][ T6529] REISERFS (device loop5): using ordered data mode [ 141.896890][ T6529] reiserfs: using flush barriers [ 142.032607][ T6529] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.110080][ T6529] REISERFS (device loop5): checking transaction log (loop5) [ 142.149049][ T6529] REISERFS (device loop5): Using tea hash to sort names [ 142.193762][ T6529] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 142.265300][ T6511] loop4: detected capacity change from 0 to 32768 [ 142.406043][ T6566] loop1: detected capacity change from 0 to 2048 [ 142.510029][ T6566] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.589738][ T6567] loop3: detected capacity change from 0 to 8192 [ 142.723221][ T6567] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 142.811664][ T6567] REISERFS (device loop3): using ordered data mode [ 142.818247][ T6567] reiserfs: using flush barriers [ 142.934472][ T6567] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 143.076171][ T6567] REISERFS (device loop3): checking transaction log (loop3) [ 143.130878][ T6567] REISERFS (device loop3): Using tea hash to sort names [ 143.185484][ T6567] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 143.264851][ T6595] loop5: detected capacity change from 0 to 8 [ 143.354515][ T6600] rdma_op ffff888077dd69f0 conn xmit_rdma 0000000000000000 [ 143.388141][ T6560] loop2: detected capacity change from 0 to 32768 [ 143.463592][ T6560] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by syz.2.816 (6560) [ 143.504450][ T6595] SQUASHFS error: Unable to read directory block [2c0:35] [ 143.564699][ T6560] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 143.590350][ T6560] BTRFS info (device loop2): turning on async discard [ 143.612416][ T6560] BTRFS info (device loop2): using free space tree [ 143.672151][ T6560] BTRFS info (device loop2): has skinny extents [ 143.768693][ T6613] loop1: detected capacity change from 0 to 4096 [ 143.822540][ T6613] ntfs: volume version 3.1. [ 143.877014][ T6560] BTRFS info (device loop2): enabling ssd optimizations [ 144.092197][ T4448] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by udevd (4448) [ 144.517968][ T6607] loop3: detected capacity change from 0 to 32768 [ 144.599731][ T6607] (syz.3.829,6607,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 144.638213][ T6607] (syz.3.829,6607,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 144.758804][ T6607] JBD2: Ignoring recovery information on journal [ 144.916828][ T6673] loop4: detected capacity change from 0 to 256 [ 144.954626][ T6607] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 145.082217][ T6638] loop5: detected capacity change from 0 to 32768 [ 145.092614][ T6673] FAT-fs (loop4): Directory bread(block 64) failed [ 145.114367][ T6673] FAT-fs (loop4): Directory bread(block 65) failed [ 145.144142][ T6673] FAT-fs (loop4): Directory bread(block 66) failed [ 145.181915][ T6673] FAT-fs (loop4): Directory bread(block 67) failed [ 145.188639][ T6673] FAT-fs (loop4): Directory bread(block 68) failed [ 145.231584][ T6673] FAT-fs (loop4): Directory bread(block 69) failed [ 145.268877][ T6673] FAT-fs (loop4): Directory bread(block 70) failed [ 145.386527][ T6673] FAT-fs (loop4): Directory bread(block 71) failed [ 145.398964][ T6607] (syz.3.829,6607,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 145.419888][ T6607] (syz.3.829,6607,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 145.432716][ T6673] FAT-fs (loop4): Directory bread(block 72) failed [ 145.439311][ T6673] FAT-fs (loop4): Directory bread(block 73) failed [ 145.450631][ T6638] XFS (loop5): Mounting V5 Filesystem [ 145.522178][ T6607] (syz.3.829,6607,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 145.551040][ T6607] (syz.3.829,6607,0):ocfs2_quota_read:201 ERROR: status = -5 [ 145.558822][ T6607] __quota_error: 19 callbacks suppressed [ 145.558842][ T6607] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 4 [ 145.574667][ T6607] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 145.584173][ T6607] (syz.3.829,6607,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 145.594985][ T6607] (syz.3.829,6607,0):ocfs2_mknod:314 ERROR: status = -5 [ 145.602324][ T6607] (syz.3.829,6607,0):ocfs2_mknod:502 ERROR: status = -5 [ 145.630023][ T6607] (syz.3.829,6607,0):ocfs2_create:676 ERROR: status = -5 [ 145.706737][ T6638] XFS (loop5): Ending clean mount [ 145.794595][ T6706] binder: BINDER_SET_CONTEXT_MGR already set [ 145.830611][ T6706] binder: 6704:6706 ioctl 40046207 0 returned -16 [ 145.852456][ T4190] ocfs2: Unmounting device (7,3) on (node local) [ 146.048541][ T5469] XFS (loop5): Unmounting Filesystem [ 146.272157][ T6716] loop4: detected capacity change from 0 to 2048 [ 146.369665][ T6720] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.739581][ T6682] F2FS-fs (loop2): Found nat_bits in checkpoint [ 146.952222][ T6682] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 146.983545][ T6682] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 147.194887][ T6710] F2FS-fs (loop1): invalid crc value [ 147.239172][ T6710] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 127) [ 147.430115][ T6710] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 147.459458][ T6748] set_capacity_and_notify: 2 callbacks suppressed [ 147.459475][ T6748] loop4: detected capacity change from 0 to 4096 [ 147.505512][ T6710] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 147.538783][ T6750] loop5: detected capacity change from 0 to 4096 [ 147.605351][ T4189] attempt to access beyond end of device [ 147.605351][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 147.638585][ T6728] loop3: detected capacity change from 0 to 32768 [ 147.705143][ T6752] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.808870][ T6750] ntfs3: loop5: failed to convert "0080" to cp860 [ 147.845522][ T6728] XFS (loop3): Mounting V5 Filesystem [ 147.872168][ T6750] ntfs3: loop5: failed to convert name for inode 1e. [ 148.167790][ T6728] XFS (loop3): Ending clean mount [ 148.213808][ T6728] XFS (loop3): Quotacheck needed: Please wait. [ 148.389739][ T4192] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.476070][ T6728] XFS (loop3): Quotacheck: Done. [ 148.597088][ T6785] loop2: detected capacity change from 0 to 512 [ 148.623104][ T4190] XFS (loop3): Unmounting Filesystem [ 148.753736][ T6785] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.770089][ T4192] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 148.784885][ T4192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.804854][ T4192] usb 5-1: config 0 descriptor?? [ 148.862158][ T4192] cp210x 5-1:0.0: cp210x converter detected [ 148.884642][ T6785] EXT4-fs (loop2): 1 truncate cleaned up [ 148.892768][ T6785] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 149.296095][ T26] audit: type=1326 audit(1777882314.336:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.1.885" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d64e63dd9 code=0x0 [ 149.338603][ T6802] netlink: 'syz.3.879': attribute type 4 has an invalid length. [ 149.455222][ T6807] loop2: detected capacity change from 0 to 256 [ 149.498435][ T6809] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.529679][ T4192] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 149.539216][ T4192] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 149.558862][ T4192] usb 5-1: cp210x converter now attached to ttyUSB0 [ 149.636284][ T4192] usb 5-1: USB disconnect, device number 4 [ 149.708795][ T4192] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 149.747046][ T4192] cp210x 5-1:0.0: device disconnected [ 149.771340][ T6787] loop5: detected capacity change from 0 to 32768 [ 149.867592][ T6815] loop2: detected capacity change from 0 to 128 [ 149.968303][ T6815] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 150.026815][ T6815] hpfs: filesystem error: improperly stopped [ 150.079592][ T6815] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 150.087407][ T6815] hpfs: You really don't want any checks? You are crazy... [ 150.135563][ T6815] hpfs: hpfs_map_sector(): read error [ 150.164313][ T6815] hpfs: code page support is disabled [ 150.219115][ T6815] hpfs: hpfs_map_4sectors(): unaligned read [ 150.230550][ T6815] hpfs: hpfs_map_4sectors(): unaligned read [ 150.254842][ T6815] hpfs: filesystem error: unable to find root dir [ 150.653642][ T6834] loop1: detected capacity change from 0 to 128 [ 150.729127][ T6834] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 150.777918][ T6817] loop3: detected capacity change from 0 to 32768 [ 150.862608][ T4189] sysv_free_block: trying to free block not in datazone [ 150.904467][ T6817] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.891 (6817) [ 150.963425][ T4189] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 150.986347][ T6851] loop4: detected capacity change from 0 to 512 [ 151.003784][ T6817] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 151.040672][ T6817] BTRFS info (device loop3): using free space tree [ 151.047502][ T6817] BTRFS info (device loop3): has skinny extents [ 151.140988][ T6851] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 151.243019][ T6817] BTRFS info (device loop3): enabling ssd optimizations [ 151.245608][ T6851] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.909: corrupted in-inode xattr [ 151.278635][ T6851] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.909: couldn't read orphan inode 15 (err -117) [ 151.292464][ T6851] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,nogrpid,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000008,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 151.318834][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.327347][ T6849] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 151.339389][ T6849] REISERFS (device loop5): using ordered data mode [ 151.347825][ T6849] reiserfs: using flush barriers [ 151.355023][ T6849] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.466354][ T6879] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.495578][ T6859] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 151.534940][ T6849] REISERFS (device loop5): checking transaction log (loop5) [ 151.601998][ T6849] REISERFS (device loop5): Using tea hash to sort names [ 151.620182][ T6849] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 151.877917][ T6886] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 152.009624][ T4178] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 152.088521][ T6888] FAT-fs (loop4): Directory bread(block 64) failed [ 152.105705][ T6888] FAT-fs (loop4): Directory bread(block 65) failed [ 152.126062][ T6888] FAT-fs (loop4): Directory bread(block 66) failed [ 152.146347][ T6888] FAT-fs (loop4): Directory bread(block 67) failed [ 152.166734][ T6888] FAT-fs (loop4): Directory bread(block 68) failed [ 152.215204][ T6888] FAT-fs (loop4): Directory bread(block 69) failed [ 152.222037][ T6888] FAT-fs (loop4): Directory bread(block 70) failed [ 152.237823][ T6888] FAT-fs (loop4): Directory bread(block 71) failed [ 152.244893][ T6888] FAT-fs (loop4): Directory bread(block 72) failed [ 152.257574][ T6888] FAT-fs (loop4): Directory bread(block 73) failed [ 152.415691][ T4178] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 152.434374][ T4178] usb 2-1: config 0 has no interface number 0 [ 152.559115][ T6890] set_capacity_and_notify: 4 callbacks suppressed [ 152.559132][ T6890] loop3: detected capacity change from 0 to 4096 [ 152.629955][ T4178] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 152.641622][ T6890] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 152.656266][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.695268][ T4178] usb 2-1: Product: syz [ 152.715506][ T4178] usb 2-1: Manufacturer: syz [ 152.738876][ T4178] usb 2-1: SerialNumber: syz [ 152.790509][ T4178] usb 2-1: config 0 descriptor?? [ 152.935342][ T6902] loop4: detected capacity change from 0 to 1024 [ 153.017910][ T6902] EXT4-fs (loop4): Ignoring removed bh option [ 153.080681][ T6902] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,data_err=abort,usrquota,bh,,errors=continue. Quota mode: writeback. [ 153.115886][ T6902] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.159666][ T4178] uvcvideo 2-1:0.64: Found Unit with invalid ID 0 [ 153.199772][ T4178] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 153.206297][ T4178] usb 2-1: No valid video chain found. [ 153.233797][ T4178] usb 2-1: USB disconnect, device number 7 [ 153.429858][ T6894] loop2: detected capacity change from 0 to 32768 [ 153.928740][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.938'. [ 154.331932][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 154.367275][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'. [ 154.387140][ T6954] device macsec1 entered promiscuous mode [ 154.397783][ T6957] netlink: 'syz.1.948': attribute type 5 has an invalid length. [ 154.503332][ T6961] loop5: detected capacity change from 0 to 1024 [ 154.575902][ T6968] program syz.2.953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.626686][ T6961] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.736457][ T6973] loop2: detected capacity change from 0 to 256 [ 154.795934][ T6973] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 154.808304][ T4178] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 154.816001][ T4433] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 154.876011][ T26] audit: type=1804 audit(1777882319.916:20): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.955" name="/newroot/176/file0/file1" dev="loop2" ino=1048660 res=1 errno=0 [ 154.898020][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.984368][ T6979] netlink: 'syz.4.958': attribute type 2 has an invalid length. [ 154.993179][ T6979] netlink: 'syz.4.958': attribute type 8 has an invalid length. [ 155.009663][ T6979] netlink: 132 bytes leftover after parsing attributes in process `syz.4.958'. [ 155.064615][ T6977] loop5: detected capacity change from 0 to 4096 [ 155.070081][ T4178] usb 2-1: Using ep0 maxpacket: 32 [ 155.113082][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.959'. [ 155.122837][ T6977] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 155.157541][ T6977] binder: Bad value for 'stats' [ 155.193225][ T4433] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 155.203857][ T4178] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 155.220722][ T4178] usb 2-1: config 2 has no interface number 0 [ 155.247476][ T4433] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 155.274559][ T4178] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 155.289723][ T4433] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 48, changing to 9 [ 155.309574][ T4178] usb 2-1: config 2 interface 88 has no altsetting 0 [ 155.319687][ T4433] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 8240, setting to 1024 [ 155.340217][ T4433] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 155.486288][ T4178] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 155.514981][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.533122][ T4433] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 155.556667][ T4178] usb 2-1: Product: syz [ 155.561753][ T4433] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.579666][ T4178] usb 2-1: Manufacturer: syz [ 155.584334][ T4178] usb 2-1: SerialNumber: syz [ 155.601383][ T4433] usb 4-1: Product: syz [ 155.606145][ T4433] usb 4-1: Manufacturer: syz [ 155.619082][ T4433] usb 4-1: SerialNumber: syz [ 155.636950][ T6965] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 155.646318][ T4433] usb 4-1: config 0 descriptor?? [ 155.695878][ T4433] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 155.718407][ T4433] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 155.755604][ T4433] garmin_gps: probe of ttyUSB0 failed with error -8 [ 155.883209][ T6965] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 155.922230][ T4238] usb 4-1: USB disconnect, device number 5 [ 155.929487][ T4238] garmin_gps 4-1:0.0: device disconnected [ 156.157617][ T6996] loop2: detected capacity change from 0 to 32768 [ 156.185888][ T7006] xt_policy: neither incoming nor outgoing policy selected [ 156.253354][ T6996] (syz.2.966,6996,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 156.295563][ T6996] (syz.2.966,6996,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 156.355335][ T6996] JBD2: Ignoring recovery information on journal [ 156.360761][ T4178] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 156.412435][ T4178] asix: probe of 2-1:2.88 failed with error -71 [ 156.457027][ T6996] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 156.535538][ T7000] loop5: detected capacity change from 0 to 40427 [ 156.539409][ T4178] usb 2-1: USB disconnect, device number 8 [ 156.565384][ T7014] loop3: detected capacity change from 0 to 128 [ 156.594682][ T7000] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 156.602794][ T4517] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 156.610485][ T7000] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 156.617278][ T6996] (syz.2.966,6996,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 156.637523][ T7000] F2FS-fs (loop5): invalid crc_offset: 33558524 [ 156.644511][ T6996] (syz.2.966,6996,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 156.662464][ T6996] (syz.2.966,6996,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 156.680622][ T7014] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.704003][ T7000] F2FS-fs (loop5): Found nat_bits in checkpoint [ 156.714423][ T6996] (syz.2.966,6996,0):ocfs2_quota_read:201 ERROR: status = -5 [ 156.748901][ T7014] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.750164][ T6996] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 4 [ 156.795570][ T6996] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 156.805664][ T6996] (syz.2.966,6996,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 156.813698][ T6996] (syz.2.966,6996,1):ocfs2_mknod:314 ERROR: status = -5 [ 156.821435][ T6996] (syz.2.966,6996,1):ocfs2_mknod:502 ERROR: status = -5 [ 156.828438][ T6996] (syz.2.966,6996,1):ocfs2_create:676 ERROR: status = -5 [ 156.890636][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 156.913903][ T4200] ocfs2: Unmounting device (7,2) on (node local) [ 156.948439][ T7000] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 156.980841][ T7000] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 157.011126][ T4517] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.019422][ T4517] usb 5-1: config 0 has no interface number 0 [ 157.062094][ T26] audit: type=1800 audit(1777882322.106:21): pid=7000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.968" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 157.220193][ T4517] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 157.244857][ T4517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.267375][ T4517] usb 5-1: Product: syz [ 157.280098][ T4517] usb 5-1: Manufacturer: syz [ 157.287211][ T4517] usb 5-1: SerialNumber: syz [ 157.311571][ T4517] usb 5-1: config 0 descriptor?? [ 157.368690][ T4517] usb_set_interface error [ 157.383176][ T4517] snd-usb-us122l: probe of 5-1:0.1 failed with error -22 [ 157.419710][ T4433] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 157.639255][ T4235] usb 5-1: USB disconnect, device number 5 [ 157.730953][ T7026] loop3: detected capacity change from 0 to 32768 [ 157.764398][ T7026] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.977 (7026) [ 157.779818][ T4433] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 157.796018][ T4433] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.822162][ T4433] usb 2-1: config 0 descriptor?? [ 157.857958][ T7026] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 157.879474][ T4433] cp210x 2-1:0.0: cp210x converter detected [ 157.892803][ T7026] BTRFS info (device loop3): using free space tree [ 157.917459][ T7042] loop5: detected capacity change from 0 to 8 [ 157.924075][ T7026] BTRFS info (device loop3): has skinny extents [ 158.019071][ T7042] SQUASHFS error: Failed to read block 0x29b: -5 [ 158.037852][ T7042] SQUASHFS error: Unable to read metadata cache entry [299] [ 158.240024][ T7026] BTRFS info (device loop3): enabling ssd optimizations [ 158.278644][ T7066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.985'. [ 158.310851][ T4433] usb 2-1: cp210x converter now attached to ttyUSB0 [ 158.439855][ T7040] loop2: detected capacity change from 0 to 32768 [ 158.567945][ T7073] loop5: detected capacity change from 0 to 128 [ 158.571421][ T4179] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop3 scanned by udevd (4179) [ 158.733579][ T6660] usb 2-1: USB disconnect, device number 9 [ 158.746854][ T6660] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 158.760564][ T6660] cp210x 2-1:0.0: device disconnected [ 158.794068][ T7040] XFS (loop2): Mounting V5 Filesystem [ 158.860572][ T7073] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 158.909736][ T7073] FAT-fs (loop5): Filesystem has been set read-only [ 159.119613][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.995'. [ 159.153085][ T7040] XFS (loop2): Ending clean mount [ 159.233347][ T7040] XFS (loop2): Quotacheck needed: Please wait. [ 159.410609][ T7040] XFS (loop2): Quotacheck: Done. [ 159.483843][ T4200] XFS (loop2): Unmounting Filesystem [ 159.760745][ T7114] MPI: mpi too large (185152 bits) [ 159.831699][ T7118] netlink: 'syz.3.1008': attribute type 2 has an invalid length. [ 159.976960][ T7124] loop1: detected capacity change from 0 to 24 [ 160.054781][ T7124] romfs: read error for inode 0x8000 [ 160.096833][ T7128] loop3: detected capacity change from 0 to 512 [ 160.211883][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1012'. [ 160.230331][ T7128] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.427987][ T7138] loop4: detected capacity change from 0 to 256 [ 160.527859][ T7142] lo speed is unknown, defaulting to 1000 [ 160.540624][ T7138] exfat: Deprecated parameter 'namecase' [ 160.580639][ T7138] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 160.599189][ T7142] lo speed is unknown, defaulting to 1000 [ 160.657275][ T7142] lo speed is unknown, defaulting to 1000 [ 160.731633][ T7142] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 160.807961][ T7142] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 160.954416][ T7127] loop2: detected capacity change from 0 to 32768 [ 160.990342][ T7142] lo speed is unknown, defaulting to 1000 [ 160.998152][ T7142] lo speed is unknown, defaulting to 1000 [ 161.033671][ T7142] lo speed is unknown, defaulting to 1000 [ 161.071663][ T7142] lo speed is unknown, defaulting to 1000 [ 161.101244][ T7127] blkno = 8ed2c, nblocks = 1 [ 161.106381][ T7127] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 161.106381][ T7127] [ 161.112982][ T7142] lo speed is unknown, defaulting to 1000 [ 161.193199][ T7127] ERROR: (device loop2): remounting filesystem as read-only [ 161.219961][ T7127] ialloc: diAlloc returned -17! [ 161.280693][ T7159] loop4: detected capacity change from 0 to 4096 [ 161.411671][ T7164] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.495415][ T7166] loop5: detected capacity change from 0 to 256 [ 161.600226][ T7166] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.663583][ T7145] jfs_lookup: iget failed on inum 4 [ 161.674902][ T7145] jfs_lookup: iget failed on inum 4 [ 162.019638][ T7180] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.1036: iget: bad i_size value: 38620345925642 [ 162.033060][ T7180] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1036: couldn't read orphan inode 15 (err -117) [ 162.046278][ T7180] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,init_itable,data_err=ignore,nojournal_checksum,data_err=ignore,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 162.587107][ T7202] hfsplus: catalog searching failed [ 162.681962][ T9] hfsplus: b-tree write err: -5, ino 25 [ 162.687761][ T9] hfsplus: b-tree write err: -5, ino 4 [ 162.714215][ T9] hfsplus: b-tree write err: -5, ino 2 [ 163.068251][ T7192] set_capacity_and_notify: 3 callbacks suppressed [ 163.068269][ T7192] loop5: detected capacity change from 0 to 32768 [ 163.196596][ T7192] XFS (loop5): Mounting V5 Filesystem [ 163.234397][ T7196] loop3: detected capacity change from 0 to 40427 [ 163.316368][ T7196] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 163.330217][ T7196] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x724 [ 163.356027][ T7196] F2FS-fs (loop3): invalid crc value [ 163.363161][ T7192] XFS (loop5): Ending clean mount [ 163.433312][ T7196] F2FS-fs (loop3): Found nat_bits in checkpoint [ 163.512198][ T5469] XFS (loop5): Unmounting Filesystem [ 163.557490][ T7196] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 163.670632][ T7196] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 163.752029][ T7240] loop1: detected capacity change from 0 to 2048 [ 163.800267][ T7240] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 163.844684][ T7240] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.053404][ T7245] loop2: detected capacity change from 0 to 4096 [ 164.148778][ T7245] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 164.200128][ T7245] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 164.256588][ T7245] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 164.314122][ T7245] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 164.379604][ T7245] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 164.428803][ T7245] ntfs: volume version 3.1. [ 164.446672][ T7255] loop3: detected capacity change from 0 to 256 [ 164.454919][ T7256] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 164.454919][ T7256] The task syz.5.1058 (7256) triggered the difference, watch for misbehavior. [ 164.481829][ T7245] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 164.507550][ T7245] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 164.528315][ T7245] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 164.545322][ T7245] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 164.559012][ T7245] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 164.581722][ T7255] exfat: Deprecated parameter 'namecase' [ 164.597089][ T7255] exfat: Deprecated parameter 'utf8' [ 164.636616][ T7255] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 164.697305][ T7255] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 164.787258][ T7258] openvswitch: netlink: Actions may not be safe on all matching packets [ 165.003237][ T7264] loop2: detected capacity change from 0 to 512 [ 165.157998][ T7264] EXT4-fs error (device loop2): ext4_quota_enable:6444: comm syz.2.1068: inode #196608: comm syz.2.1068: iget: illegal inode # [ 165.188985][ T7253] loop1: detected capacity change from 0 to 40427 [ 165.224265][ T7253] F2FS-fs (loop1): invalid crc value [ 165.245778][ T7264] EXT4-fs error (device loop2): ext4_quota_enable:6447: comm syz.2.1068: Bad quota inode: 196608, type: 2 [ 165.290317][ T7253] F2FS-fs (loop1): Found nat_bits in checkpoint [ 165.318821][ T7264] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=196608). Please run e2fsck to fix. [ 165.407524][ T7275] loop3: detected capacity change from 0 to 164 [ 165.467695][ T7264] EXT4-fs (loop2): mount failed [ 165.487310][ T7253] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 165.542207][ T7232] loop4: detected capacity change from 0 to 32768 [ 165.675443][ T7232] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 165.700002][ T4189] attempt to access beyond end of device [ 165.700002][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 165.733365][ T7232] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 165.830261][ T7232] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 165.979663][ T4235] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 166.007408][ T4235] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 166.163886][ T7296] loop2: detected capacity change from 0 to 512 [ 166.171755][ T4235] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 164ms [ 166.193806][ T4235] gfs2: fsid=syz:syz.0: jid=0: Done [ 166.210656][ T7232] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 166.256782][ T7296] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 166.314955][ T7296] System zones: 1-12 [ 166.360940][ T7296] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1080: Directory hole found for htree index block 0 [ 166.454452][ T7296] EXT4-fs (loop2): Remounting filesystem read-only [ 166.471670][ T7296] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 166.480213][ T4201] Bluetooth: hci2: link tx timeout [ 166.485868][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.498311][ T7296] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1080: Directory hole found for htree index block 0 [ 166.538941][ T4201] Bluetooth: hci2: link tx timeout [ 166.544278][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.552325][ T4201] Bluetooth: hci2: link tx timeout [ 166.557488][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.565968][ T4201] Bluetooth: hci2: link tx timeout [ 166.571396][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.579251][ T4201] Bluetooth: hci2: link tx timeout [ 166.584553][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.592457][ T4201] Bluetooth: hci2: link tx timeout [ 166.598425][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.603747][ T7296] EXT4-fs (loop2): Remounting filesystem read-only [ 166.606541][ T4201] Bluetooth: hci2: link tx timeout [ 166.617825][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.629798][ T4201] Bluetooth: hci2: link tx timeout [ 166.634978][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.646216][ T4201] Bluetooth: hci2: link tx timeout [ 166.651620][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.659365][ T4201] Bluetooth: hci2: link tx timeout [ 166.664728][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.672554][ T7296] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 166.680847][ T7296] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 166.699900][ T4201] Bluetooth: hci2: link tx timeout [ 166.705651][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.713488][ T4201] Bluetooth: hci2: link tx timeout [ 166.718664][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.726424][ T4201] Bluetooth: hci2: link tx timeout [ 166.731672][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.745061][ T4201] Bluetooth: hci2: link tx timeout [ 166.750494][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.758196][ T4201] Bluetooth: hci2: link tx timeout [ 166.764218][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.811398][ T4201] Bluetooth: hci2: link tx timeout [ 166.816589][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.824518][ T4201] Bluetooth: hci2: link tx timeout [ 166.829755][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.840105][ T4201] Bluetooth: hci2: link tx timeout [ 166.845287][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.853081][ T4201] Bluetooth: hci2: link tx timeout [ 166.858237][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.868591][ T7296] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #2: comm syz.2.1080: Directory hole found for htree leaf block 0 [ 166.887520][ T7296] EXT4-fs (loop2): Remounting filesystem read-only [ 166.959741][ T7301] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 167.055331][ T7301] EXT4-fs (loop2): Remounting filesystem read-only [ 167.124417][ T7310] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 167.136459][ T7308] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 167.166563][ T7310] hpfs: filesystem error: improperly stopped [ 167.179092][ T7310] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 167.205027][ T7310] hpfs: You really don't want any checks? You are crazy... [ 167.243435][ T7310] hpfs: hpfs_map_sector(): read error [ 167.253335][ T7310] hpfs: code page support is disabled [ 167.259179][ T7310] hpfs: hpfs_map_4sectors(): unaligned read [ 167.283021][ T7310] hpfs: hpfs_map_4sectors(): unaligned read [ 167.297351][ T7310] hpfs: filesystem error: unable to find root dir [ 167.513677][ T4517] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 167.829675][ T4517] usb 3-1: Using ep0 maxpacket: 8 [ 167.970984][ T4517] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 168.159829][ T4517] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 168.175778][ T4517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.205330][ T7332] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 168.213245][ T4517] usb 3-1: Product: syz [ 168.239616][ T4517] usb 3-1: Manufacturer: syz [ 168.256647][ T4517] usb 3-1: SerialNumber: syz [ 168.275446][ T4517] usb 3-1: config 0 descriptor?? [ 168.349959][ T4517] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 168.358076][ T4517] usb 3-1: setting power ON [ 168.380049][ T4517] dvb-usb: bulk message failed: -22 (2/0) [ 168.398206][ T4517] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.403447][ T4199] sysv_free_block: flc_count > flc_size [ 168.423013][ T4199] sysv_free_block: flc_count > flc_size [ 168.435535][ T4199] sysv_free_block: flc_count > flc_size [ 168.436864][ T7323] set_capacity_and_notify: 5 callbacks suppressed [ 168.436907][ T7323] loop3: detected capacity change from 0 to 32768 [ 168.450213][ T4517] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 168.476042][ T4199] sysv_free_block: flc_count > flc_size [ 168.482289][ T4517] usb 3-1: media controller created [ 168.495588][ T7323] gfs2: fsid=Ô±rÐÛ»ð_î [ 168.495588][ T7323] ˜b‚ç: Trying to join cluster "lock_nolock", "Ô±rÐÛ»ð_î [ 168.495588][ T7323] ˜b‚ç" [ 168.514585][ T4199] sysv_free_block: flc_count > flc_size [ 168.545016][ T7323] gfs2: fsid=Ô±rÐÛ»ð_î [ 168.545016][ T7323] ˜b‚ç: Now mounting FS (format 0)... [ 168.571765][ T7314] dvb-usb: bulk message failed: -22 (3/0) [ 168.579406][ T4517] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.583969][ T7314] cxusb: i2c wr: len=79 is too big! [ 168.583969][ T7314] [ 168.602150][ T4199] sysv_free_block: flc_count > flc_size [ 168.620847][ T4521] Bluetooth: hci2: command 0x0406 tx timeout [ 168.622056][ T4199] sysv_free_block: flc_count > flc_size [ 168.651963][ T4199] sysv_free_block: flc_count > flc_size [ 168.667653][ T7323] gfs2: fsid=Ô±rÐÛ»ð_î [ 168.667653][ T7323] ˜b‚ç.s: journal 0 mapped with 5 extents in 0ms [ 168.704823][ T4517] usb 3-1: selecting invalid altsetting 6 [ 168.718168][ T4199] sysv_free_block: flc_count > flc_size [ 168.730829][ T4517] usb 3-1: digital interface selection failed (-22) [ 168.752012][ T7323] gfs2: fsid=Ô±rÐÛ»ð_î [ 168.752012][ T7323] ˜b‚ç.s: first mount done, others may mount [ 168.761557][ T4199] sysv_free_block: flc_count > flc_size [ 168.772080][ T4199] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 168.780467][ T4517] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 168.860307][ T4517] usb 3-1: setting power OFF [ 168.867625][ T4517] dvb-usb: bulk message failed: -22 (2/0) [ 168.888322][ T4517] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 168.945114][ T4517] (NULL device *): no alternate interface [ 169.049310][ T4517] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 169.186882][ T4517] usb 3-1: USB disconnect, device number 4 [ 170.004680][ T7341] loop1: detected capacity change from 0 to 40427 [ 170.075356][ T7341] F2FS-fs (loop1): invalid crc value [ 170.090974][ T7364] loop4: detected capacity change from 0 to 2048 [ 170.103334][ T7341] F2FS-fs (loop1): Found nat_bits in checkpoint [ 170.125486][ T7347] loop3: detected capacity change from 0 to 32768 [ 170.138988][ T7351] loop5: detected capacity change from 0 to 32768 [ 170.226292][ T7364] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.247212][ T7351] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1102 (7351) [ 170.309775][ T7351] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 170.356510][ T7351] BTRFS info (device loop5): force zlib compression, level 3 [ 170.380402][ T7341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 170.420055][ T7351] BTRFS info (device loop5): force clearing of disk cache [ 170.492276][ T7351] BTRFS info (device loop5): setting nodatasum [ 170.498527][ T7351] BTRFS info (device loop5): use zlib compression, level 3 [ 170.593679][ T4189] attempt to access beyond end of device [ 170.593679][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 170.599988][ T7351] BTRFS info (device loop5): allowing degraded mounts [ 170.662399][ T7351] BTRFS info (device loop5): enabling disk space caching [ 170.700563][ T7351] BTRFS info (device loop5): disk space caching is enabled [ 170.707852][ T7351] BTRFS info (device loop5): has skinny extents [ 170.955090][ T7360] loop2: detected capacity change from 0 to 32768 [ 171.229433][ T7351] BTRFS info (device loop5): enabling ssd optimizations [ 171.240780][ T7351] BTRFS info (device loop5): clearing free space tree [ 171.253779][ T7360] XFS (loop2): Mounting V5 Filesystem [ 171.259336][ T7351] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 171.280626][ T7351] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 171.424995][ T7360] XFS (loop2): Ending clean mount [ 171.444713][ T7360] XFS (loop2): Quotacheck needed: Please wait. [ 171.615079][ T7360] XFS (loop2): Quotacheck: Done. [ 171.782512][ T7351] BTRFS info (device loop5): balance: start -f -svrange=0..18446744073709551612,limit=6,limit=6..0,stripes=0..511 [ 171.797111][ T4200] XFS (loop2): Unmounting Filesystem [ 171.802848][ T7413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1116'. [ 171.900387][ T7351] BTRFS info (device loop5): balance: ended with status: 0 [ 172.006808][ T7394] loop3: detected capacity change from 0 to 32768 [ 172.096768][ T7416] loop1: detected capacity change from 0 to 4096 [ 172.124252][ T7416] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 172.157839][ T7398] loop4: detected capacity change from 0 to 32768 [ 172.247508][ T7394] XFS (loop3): Mounting V5 Filesystem [ 172.700167][ T7398] XFS (loop4): Mounting V5 Filesystem [ 172.726046][ T7394] XFS (loop3): Ending clean mount [ 172.733652][ T7394] XFS (loop3): Quotacheck needed: Please wait. [ 172.794141][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 172.861138][ T7398] XFS (loop4): Ending clean mount [ 172.917840][ T7394] XFS (loop3): Quotacheck: Done. [ 172.990576][ T5280] XFS (loop4): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 173.025602][ T5280] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 173.056887][ T4190] XFS (loop3): Unmounting Filesystem [ 173.065648][ T5280] XFS (loop4): Unmount and run xfs_repair [ 173.094947][ T5280] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 173.102721][ T5280] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 173.158889][ T5280] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 173.186248][ T5280] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 173.195533][ T5280] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 173.210485][ T5280] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 173.225137][ T5280] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 173.235857][ T5280] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 173.249605][ T5280] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 173.266351][ T7398] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74 [ 173.306907][ T7398] XFS (loop4): Failed to initialize disk quotas. [ 173.385508][ T7427] loop5: detected capacity change from 0 to 32768 [ 173.428782][ T4199] XFS (loop4): Unmounting Filesystem [ 173.534909][ T7439] (syz.1.1120,7439,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 173.590551][ T7439] (syz.1.1120,7439,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 173.639699][ T7427] JBD2: Ignoring recovery information on journal [ 173.723488][ T7439] JBD2: Ignoring recovery information on journal [ 173.926021][ T7427] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 174.002574][ T7439] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 174.077008][ T7441] set_capacity_and_notify: 1 callbacks suppressed [ 174.077025][ T7441] loop2: detected capacity change from 0 to 32768 [ 174.134311][ T5469] ocfs2: Unmounting device (7,5) on (node local) [ 174.203062][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 174.540734][ T7450] loop4: detected capacity change from 0 to 8192 [ 174.795594][ T7445] loop3: detected capacity change from 0 to 32768 [ 174.918193][ T7445] [ 174.918193][ T7445] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.918193][ T7445] [ 175.056689][ T7445] [ 175.056689][ T7445] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.056689][ T7445] [ 175.139958][ T7445] [ 175.139958][ T7445] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.139958][ T7445] [ 175.183354][ T7445] [ 175.183354][ T7445] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.183354][ T7445] [ 175.281692][ T277] [ 175.281692][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.281692][ T277] [ 175.311492][ T7463] loop4: detected capacity change from 0 to 512 [ 175.325097][ T4190] [ 175.325097][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.325097][ T4190] [ 175.342688][ T4190] [ 175.342688][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.342688][ T4190] [ 175.395995][ T7453] loop1: detected capacity change from 0 to 32768 [ 175.428192][ T7463] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.475683][ T7454] loop2: detected capacity change from 0 to 32768 [ 175.486795][ T7463] EXT4-fs warning (device loop4): __ext4_ioctl:882: Setting inode version is not supported with metadata_csum enabled. [ 175.538728][ T7453] (syz.1.1125,7453,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: directory entry overrun - offset=132, inode=71, rec_len=32540, name_len=13 [ 175.602714][ T7454] XFS (loop2): Mounting V5 Filesystem [ 175.631400][ T7453] (syz.1.1125,7453,0):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 175.640572][ T7453] (syz.1.1125,7453,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 4, possibly corrupt fs? [ 175.640609][ T7453] (syz.1.1125,7453,0):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 175.662064][ T7453] (syz.1.1125,7453,0):ocfs2_initialize_super:2281 ERROR: status = -22 [ 175.671011][ T7453] (syz.1.1125,7453,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 175.748299][ T7454] XFS (loop2): Ending clean mount [ 175.842815][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 175.842831][ T26] audit: type=1800 audit(1777882340.886:22): pid=7454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1126" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 175.938647][ T7486] loop3: detected capacity change from 0 to 128 [ 176.056465][ T4200] XFS (loop2): Unmounting Filesystem [ 176.221086][ T7490] loop1: detected capacity change from 0 to 256 [ 176.265468][ T7456] loop5: detected capacity change from 0 to 32768 [ 176.405522][ T7490] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 176.534142][ T7456] [ 176.534142][ T7456] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.534142][ T7456] [ 176.642091][ T7456] [ 176.642091][ T7456] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.642091][ T7456] [ 176.789199][ T7456] [ 176.789199][ T7456] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.789199][ T7456] [ 176.812130][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 176.816578][ T7485] loop4: detected capacity change from 0 to 131072 [ 176.856433][ T277] [ 176.856433][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.856433][ T277] [ 176.932652][ T7485] F2FS-fs (loop4): Current segment's next free block offset is inconsistent with bitmap, logtype:0, segno:3, type:0, next_blkoff:1, blkofs:16 [ 176.948158][ T7485] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 177.000933][ T5469] [ 177.000933][ T5469] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.000933][ T5469] [ 177.050797][ T5469] [ 177.050797][ T5469] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.050797][ T5469] [ 177.766528][ T7521] binder: 7520:7521 ioctl c018620c 200000000280 returned -22 [ 178.012178][ T7531] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.1155: iget: bad i_size value: 38620345925642 [ 178.029823][ T7537] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1156'. [ 178.153463][ T7531] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1155: couldn't read orphan inode 15 (err -117) [ 178.235010][ T7531] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 178.535593][ T7555] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 178.597307][ T4448] udevd[4448]: incorrect nilfs2 checksum on /dev/loop4 [ 178.615318][ T7560] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.720217][ T7555] syz.4.1163 (7555) used greatest stack depth: 20400 bytes left [ 178.819854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.164141][ T7584] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.186550][ T7597] set_capacity_and_notify: 4 callbacks suppressed [ 179.186567][ T7597] loop5: detected capacity change from 0 to 512 [ 179.222251][ T7584] EXT4-fs (loop4): can't change dax mount option while remounting [ 179.248751][ T7597] EXT4-fs (loop5): inline encryption not supported [ 179.308079][ T7597] EXT4-fs (loop5): Test dummy encryption mode enabled [ 179.342930][ T7597] EXT4-fs error (device loop5): __ext4_iget:4919: inode #11: block 1: comm syz.5.1180: invalid block [ 179.364846][ T7597] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1180: couldn't read orphan inode 11 (err -117) [ 179.377388][ T7597] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,journal_dev=0x0000000000000005,max_dir_size_kb=0x0000000000000004,noquota,nodiscard,sb=0x00000000000000ff,inlinecrypt,debug_want_extra_isize=0x0000000000000004,test_dummy_encryption,,errors=continue. Quota mode: none. [ 179.637599][ T7617] loop3: detected capacity change from 0 to 64 [ 179.708329][ T7617] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 179.747483][ T7617] hfs: filesystem is marked locked, mounting read-only. [ 179.809193][ T7626] loop4: detected capacity change from 0 to 256 [ 179.838882][ T7630] loop5: detected capacity change from 0 to 64 [ 179.983835][ T7628] loop2: detected capacity change from 0 to 8192 [ 179.994563][ T7636] loop1: detected capacity change from 0 to 764 [ 179.997375][ T7626] FAT-fs (loop4): Directory bread(block 64) failed [ 180.013306][ T7626] FAT-fs (loop4): Directory bread(block 65) failed [ 180.029645][ T7626] FAT-fs (loop4): Directory bread(block 66) failed [ 180.043037][ T7626] FAT-fs (loop4): Directory bread(block 67) failed [ 180.064552][ T7626] FAT-fs (loop4): Directory bread(block 68) failed [ 180.087405][ T7628] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 180.107126][ T7626] FAT-fs (loop4): Directory bread(block 69) failed [ 180.117289][ T7628] REISERFS (device loop2): using ordered data mode [ 180.128511][ T7626] FAT-fs (loop4): Directory bread(block 70) failed [ 180.135656][ T7628] reiserfs: using flush barriers [ 180.142828][ T7626] FAT-fs (loop4): Directory bread(block 71) failed [ 180.149741][ T7628] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 180.166635][ T7626] FAT-fs (loop4): Directory bread(block 72) failed [ 180.174247][ T7626] FAT-fs (loop4): Directory bread(block 73) failed [ 180.202834][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1199'. [ 180.245581][ T7628] REISERFS (device loop2): checking transaction log (loop2) [ 180.311006][ T7628] REISERFS (device loop2): Using r5 hash to sort names [ 180.318313][ T7628] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 180.470570][ T7628] [ 180.473047][ T7628] ====================================================== [ 180.480136][ T7628] WARNING: possible circular locking dependency detected [ 180.487195][ T7628] syzkaller #0 Not tainted [ 180.491660][ T7628] ------------------------------------------------------ [ 180.498708][ T7628] syz.2.1194/7628 is trying to acquire lock: [ 180.504709][ T7628] ffff88805dad0460 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 180.514099][ T7628] [ 180.514099][ T7628] but task is already holding lock: [ 180.521485][ T7628] ffff88806078f090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x75/0xd0 [ 180.530621][ T7628] [ 180.530621][ T7628] which lock already depends on the new lock. [ 180.530621][ T7628] [ 180.541049][ T7628] [ 180.541049][ T7628] the existing dependency chain (in reverse order) is: [ 180.550098][ T7628] [ 180.550098][ T7628] -> #2 (&sbi->lock){+.+.}-{3:3}: [ 180.557359][ T7628] __mutex_lock_common+0x1e3/0x2400 [ 180.563131][ T7628] mutex_lock_nested+0x17/0x20 [ 180.568463][ T7628] reiserfs_write_lock+0x75/0xd0 [ 180.573962][ T7628] reiserfs_lookup+0x18a/0x480 [ 180.579292][ T7628] __lookup_slow+0x29d/0x410 [ 180.584449][ T7628] lookup_one_len+0x19d/0x2d0 [ 180.589691][ T7628] reiserfs_lookup_privroot+0x85/0x1e0 [ 180.595715][ T7628] reiserfs_fill_super+0x1fa6/0x2440 [ 180.601566][ T7628] mount_bdev+0x287/0x3c0 [ 180.606546][ T7628] legacy_get_tree+0xe6/0x180 [ 180.611790][ T7628] vfs_get_tree+0x88/0x270 [ 180.616766][ T7628] do_new_mount+0x24a/0xa40 [ 180.621825][ T7628] __se_sys_mount+0x2e3/0x3d0 [ 180.627063][ T7628] do_syscall_64+0x4c/0xa0 [ 180.632039][ T7628] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.638504][ T7628] [ 180.638504][ T7628] -> #1 (&type->i_mutex_dir_key#28){+.+.}-{3:3}: [ 180.647154][ T7628] down_write+0x38/0x60 [ 180.651877][ T7628] vfs_setxattr+0x140/0x2e0 [ 180.656940][ T7628] setxattr+0x36c/0x390 [ 180.661667][ T7628] path_setxattr+0x147/0x290 [ 180.666822][ T7628] __x64_sys_lsetxattr+0xb4/0xd0 [ 180.672320][ T7628] do_syscall_64+0x4c/0xa0 [ 180.677308][ T7628] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.683776][ T7628] [ 180.683776][ T7628] -> #0 (sb_writers#31){.+.+}-{0:0}: [ 180.691310][ T7628] __lock_acquire+0x2c42/0x7d10 [ 180.696742][ T7628] lock_acquire+0x19e/0x400 [ 180.701813][ T7628] sb_start_write+0x4f/0x1c0 [ 180.706966][ T7628] mnt_want_write_file+0x5c/0x200 [ 180.712553][ T7628] reiserfs_ioctl+0x10a/0x330 [ 180.717793][ T7628] __se_sys_ioctl+0xfa/0x170 [ 180.722954][ T7628] do_syscall_64+0x4c/0xa0 [ 180.727945][ T7628] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.734416][ T7628] [ 180.734416][ T7628] other info that might help us debug this: [ 180.734416][ T7628] [ 180.744680][ T7628] Chain exists of: [ 180.744680][ T7628] sb_writers#31 --> &type->i_mutex_dir_key#28 --> &sbi->lock [ 180.744680][ T7628] [ 180.758047][ T7628] Possible unsafe locking scenario: [ 180.758047][ T7628] [ 180.765548][ T7628] CPU0 CPU1 [ 180.770950][ T7628] ---- ---- [ 180.776541][ T7628] lock(&sbi->lock); [ 180.780578][ T7628] lock(&type->i_mutex_dir_key#28); [ 180.788429][ T7628] lock(&sbi->lock); [ 180.794971][ T7628] lock(sb_writers#31); [ 180.799262][ T7628] [ 180.799262][ T7628] *** DEADLOCK *** [ 180.799262][ T7628] [ 180.807441][ T7628] 1 lock held by syz.2.1194/7628: [ 180.812496][ T7628] #0: ffff88806078f090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x75/0xd0 [ 180.821955][ T7628] [ 180.821955][ T7628] stack backtrace: [ 180.827891][ T7628] CPU: 0 PID: 7628 Comm: syz.2.1194 Not tainted syzkaller #0 [ 180.835304][ T7628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 180.845414][ T7628] Call Trace: [ 180.848728][ T7628] [ 180.851699][ T7628] dump_stack_lvl+0x188/0x250 [ 180.856567][ T7628] ? load_image+0x400/0x400 [ 180.861110][ T7628] ? show_regs_print_info+0x20/0x20 [ 180.866353][ T7628] ? print_circular_bug+0x12b/0x1a0 [ 180.871595][ T7628] check_noncircular+0x296/0x330 [ 180.876573][ T7628] ? look_up_lock_class+0x71/0x110 [ 180.881726][ T7628] ? add_chain_block+0x940/0x940 [ 180.886707][ T7628] ? lockdep_lock+0xf1/0x1f0 [ 180.891359][ T7628] ? mark_lock+0x94/0x320 [ 180.895726][ T7628] __lock_acquire+0x2c42/0x7d10 [ 180.900639][ T7628] ? verify_lock_unused+0x140/0x140 [ 180.905898][ T7628] ? __mutex_trylock_common+0x155/0x260 [ 180.911493][ T7628] ? rcu_lock_release+0x20/0x20 [ 180.916387][ T7628] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 180.921894][ T7628] lock_acquire+0x19e/0x400 [ 180.926456][ T7628] ? mnt_want_write_file+0x5c/0x200 [ 180.931706][ T7628] ? __might_sleep+0xf0/0xf0 [ 180.936335][ T7628] ? read_lock_is_recursive+0x10/0x10 [ 180.941763][ T7628] sb_start_write+0x4f/0x1c0 [ 180.946393][ T7628] ? mnt_want_write_file+0x5c/0x200 [ 180.951635][ T7628] mnt_want_write_file+0x5c/0x200 [ 180.956700][ T7628] reiserfs_ioctl+0x10a/0x330 [ 180.961416][ T7628] ? reiserfs_unpack+0x580/0x580 [ 180.966399][ T7628] __se_sys_ioctl+0xfa/0x170 [ 180.971031][ T7628] do_syscall_64+0x4c/0xa0 [ 180.975490][ T7628] ? clear_bhb_loop+0x30/0x80 [ 180.980218][ T7628] ? clear_bhb_loop+0x30/0x80 [ 180.985060][ T7628] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.991007][ T7628] RIP: 0033:0x7f0a42822dd9 [ 180.995557][ T7628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.015198][ T7628] RSP: 002b:00007f0a40a7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.023676][ T7628] RAX: ffffffffffffffda RBX: 00007f0a42a9bfa0 RCX: 00007f0a42822dd9 [ 181.031712][ T7628] RDX: 0000000000000000 RSI: 0000000040087602 RDI: 0000000000000004 [ 181.039723][ T7628] RBP: 00007f0a428b8d69 R08: 0000000000000000 R09: 0000000000000000 [ 181.047733][ T7628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.055747][ T7628] R13: 00007f0a42a9c038 R14: 00007f0a42a9bfa0 R15: 00007ffd92e868d8 [ 181.063777][ T7628] [ 181.094476][ T7648] loop4: detected capacity change from 0 to 1024 [ 181.699632][ T7080] Bluetooth: hci2: command 0x0405 tx timeout [ 186.029657][ T7080] Bluetooth: hci0: command 0x0406 tx timeout [ 186.035851][ T7080] Bluetooth: hci1: command 0x0406 tx timeout [ 186.042045][ T7080] Bluetooth: hci3: command 0x0406 tx timeout [ 186.048286][ T7080] Bluetooth: hci4: command 0x0406 tx timeout