last executing test programs: 37.498193001s ago: executing program 0 (id=1316): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x18}) 37.278018143s ago: executing program 0 (id=1320): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000180)='2', 0x1}, {&(0x7f00000003c0)="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", 0x700}, {&(0x7f00000017c0)="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", 0x8ff}], 0x3) 37.084880824s ago: executing program 0 (id=1324): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f003, 0x5}) 36.946806602s ago: executing program 0 (id=1327): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 36.502509198s ago: executing program 0 (id=1332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x9c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x120}}, 0x0) 35.854644446s ago: executing program 0 (id=1341): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'batadv_slave_0\x00', 0x1}, 0x18) 35.61473431s ago: executing program 32 (id=1341): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'batadv_slave_0\x00', 0x1}, 0x18) 3.512703856s ago: executing program 5 (id=1777): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) ioprio_set$pid(0x3, 0x0, 0x4007) 3.192846485s ago: executing program 5 (id=1782): r0 = syz_open_procfs(0x0, &(0x7f0000003c00)='net/ptype\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000003f00)=""/54, 0x36}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f0000000040)=""/45, 0x2d}], 0x3, 0x1, 0x9) 2.906186672s ago: executing program 5 (id=1787): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) 2.615172698s ago: executing program 5 (id=1792): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000200), 0x1, 0x97ee, &(0x7f0000012f40)="$eJzs3QW8rGWheP994ACHDkGwACkxSQkD6VBESVFCkJYUEAGlQwkVFAEFFFCQ7u4u6e7u7o7/58AB8bjgcn9/74XLWuvj2bNn5t2zn3m+87zu2e9mZsl5F51zYGCcgTd68/SfnbPr7csuNuaC6x678+Dr9tphoYeGXTzyGyfjzj7sdI5hp3MODAwMGnY7g964bPBsxxw7wsDggaH/+2djjDraCGMMDIw27Oyw2xmY+Y2T0fd/c7vXhosHOunQb7f9G/9eb8yhNzL0k6WXe2WtgYGBIW/7+qHjmvbf7qi0JeeYb95/Wr3lNsKwqwf987rXTwe/8W/0fQcGRt974J0fH0O3HeltX/u/2dDvOc7kA4vf/j587/9zLTnHfAsM5z90LY447LKZh67x4degseEf5zssuvoDw6Zw0LCJG/y29fJ+PO7/n1pyjnkXHHjndTyw0Dyb3P/a6/vNwXMPDAyeZ2Bg8LwDA4Pne7896j/T+/rgq6qqqvelOeacYehz9hGG+3lgyJs/19LPhRe8PN3dAwODF3rjeeLg5d58LlhVVVVVVVVVH8zmmHOGueD5/zjv9vx/0pO3Hrfn/1VVVVVVVVX/d1pgjjlnGPpcf7jn/xO92/P/xx88dL83/vZ/9pnf+KpX3987UVVVVVVVVVXv2rwL4PP/Sd/t+f9Fx0x6ac//q6qqqqqqqv7vtMhrr7222dteZ2/YxVO/eT09/z/1vluXed8GXFVVVVVVVVX/7V595KTT/vma7xMPDPd676837PcCg4444/LL37eBfjAa9O+/D9n8/R7T/9+GOg85aNKBgbUWf7+HUu9D/2deq77+R8rfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MW9w/H/t17//9SjVnjzveA/M+UM15/0z698/b3/By+0wCNbvE9Dfz/6sB7/H1ht0MDAMN9xVhsYGFhojkUWm3pgYOCk62eYcoqBt66bZeh1Xx1vxNffIP7N/0xknnH5hjef7I3ToQ+UgfHfuo0jXr/9BV7bZ8RBww3ibY173H77rbrkczMOfzrVO9+PEd76bMxjH3zzv2UZYbiNhrzDF795+2/el+Gdh4196qFjn2b9NdeZZr2NNv7iamsuv8pKq6y01qzTzzTdjLPOOtNM06y82horTfvGx3eas0lf/zjXe5mzMYafs0fmePucDX/f3mnOJn33OXv9Fne5cMg33pyzwf/NOZvr3eds0tWGfaNxZx9pYLnX52bQwMC4c480sOHQM9ONMjAw7jzDtp1o6LZfG2+EgYGd/nlHh342yluPwUGbD91myXkXnfON3dTAwD9P/9k7vJ/9yMNGPvuw0zmGnc75xrcZZ+CfD8XBsx1z7AhD5+JfpmOMUUcbYYyBgdGGnR12OwOzvnEy2slvbvcO77M+3EBff5mV7d/493pjDgwMjD70k4mXP3WboVP/v/A+7f9P////b16zDHrr8Tho2L9h27zhNcd8C/zze70+DUPnbsRhl8081OQ//Nb2/9K/jXfSIQOTvst43+V1cV6PHl9rnDTBlv+p18Wh8U70LuN9l9fxfcfxLnH37g+8cVP/sfEOt69b8PWPs7+Xfd3Au+/rRqQbWOmSTw2/r/vWOw/xX3aXb87RKMNt9E77uon2nGTzobc/+7vv6xYcOvaR/mVfN8LAwLhzvbmvG7rjm3ekgZ2Gnpl+6Jn5Rho4YOiZGV4/M+rAGUPPfGmFtddYcegF8//742DqQf/yB5qwzuYdbp0Nett9HzTc33cOfuN09H3ffA+nd9hvDhp2t/7LfQU9bsd5l/G+y/tP4TwPvWzFI4dM8J96/yka75B3H+87vV/2O453x2dPvf0/PN631tlIb5uu+d/LOpv0X9fZ0Ls44ttWxnv9OWxF2P6Nzyd669Y22PTBt36mGGm42/2vfqaY/93X2TirDfd12+09MOjd5ma+9zI3n/y3fdAWb5+b9/rz1tSTv3H9iO8yN6PMuuxUb87NyP/NuZnvvzs3sw+M+K9zM3hgnoGBgSmG7R/mfS9zM9G7z817fdyMBtu/8flKb1009w4Hnffm3Aw/F//V3Mz7352bSd963Ezx+nWTjTAw8sgDGy6//vrrTvfGxzfPTv/Gx3dfg3O/l7kc5z8zlx8f/E5z+c+H6hh3X7rvf7EG/22f/ubtz/3fncuBt+ZyYLXhF0t9UOv3f+7yd5e/u/zd5e8uf3f5i3uH4/9vvf7/buN8dedhv9wY6dJJJtz2/R7v+9yH+vj/MN9/Of6/7YSTXDrCwFvXvevx2Te2+UAen535jZPR939zu+GPD/JA3/n47N6zzrz1/9Lx2f+n3lyr7+H3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uLe4fj/tG/+HcB90y385LADoSM9tNVSC7/f432f+1Af/x/m+y/H/xdeaquHRhh467p3Pf7/xjaO4/93vjTvjh/k4/9vrtWO/9d/Uf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+4djv/P/ubfARx66O4bv/n3AFePu/1J7/d43+c+rMf/e/9/b+3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uKGHf8fGO7tLb/b4wKD4///t3sH/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf97+WMW/yXzxyz+388fs/j/IH/M4r9U/pjFf+n8MYv/MvljFv9l88cs/j/MH7P4L5c/ZvFfPn/M4v+j/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/8f5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/yf5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zR/zOK/Qf6Yxf9n+WMW/w3zxyz+G+WPWfw3zh+z+P88f8zi/4v8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+v8wfs/j/Kn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/r/OH7P4/yZ/zOL/2/wxi/9O+WMW/53zxyz+v8sfs/j/Pn/M4r9L/pjF/w/5Yxb/XfPHLP675Y9Z/HfPH7P4/zF/zOL/p/wxi/8e+WMW/z3zxyz+e+WPWfz/nD9m8f9L/pjFf+/8MYv/PvljFv9988cs/n/NH7P4/y1/zOK/X/6YxX///DGL/9/zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvH/R/6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9J/AcN5I9Z/Aflj1n8R8gfs/iPmD9m8R+cP2bxHyl/zOI/cv6YxX+U/DGL/5D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+H8kfs/iPnz9m8Z8gf8zi/9H8MYv/hPljFv+J8scs/h/LH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4T5w/ZvGfJH/M4j9p/pjF/9P5Yxb/yd70H/I+jesDmsV/8tY/ZvGfIn/M4j9l/pjFf6r8MYv/Z/LHLP5T549Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/3L+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnyx+z+H8jf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/zfzxyz+38ofs/gvmD9m8f92/pjFf6H8MYv/d/LHLP7fzR+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP7fyx+z+C+ZP2bx/37+mMX/B/ljFv+l8scs/kvnj1n8l8kfs/gvmz9m8f9h/pjFf7n8MYv/8vljFv8f5Y9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/OH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/j/JH7P4r5s/ZvFfL3/M4r9+/pjF/6f5Yxb/DfLHLP4/yx+z+G+YP2bx3yh/zOK/cf6Yxf/n+WMW/1/kj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/2X+mMX/V/ljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f91/pjF/zf5Yxb/3+aPWfx3yh+z+O+cP2bx/13+mMX/9/ljFv9d8scs/n/IH7P475o/ZvHfLX/M4r97/pjF/4/5Yxb/P+WPWfz3yB+z+O+ZP2bx3yt/zOL/5/wxi/9f8scs/nvnj1n898kfs/jvmz9m8f9r/pjF/2/5Yxb//fLHLP77549Z/P/+r/73/q+P6wOaxf+A1j9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6YxP/18v/3JP6DLs4fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/mPTBda/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljEv/XP83/37P4D8ofs/iPkD9m8R8xf8ziPzh/zOI/Uv6YxX/k/DGL/yj5Yxb/IfljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfw/kj9m8R8/f8ziP0H+mMX/o/ljFv8J88cs/hPlj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8P5U/ZvGfOH/M4j9J/pjFf9L8MYv/p/PHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF/zP5Yxb/qfPHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+H8pf8ziP03+mMV/2vyxQefsOtLAwMCH3n+6/DHL+p8+f8ziP0P+mMV/xvwxi/+X88cs/jPlj1n8Z84fs/jPkj9m8Z81f8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP1v+mMX/G/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8f9W/pjFf8H8MYv/t/PHLP4L5Y9Z/L+TP2bx/27+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/17+mMV/yfwxi//388cs/j/IH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/D/PHLP7L5Y9Z/JfPH7P4/yh/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/cf6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvH/Sf6YxX/d/DGL/3r5Yxb/9fPHLP4/zR+z+G+QP2bx/1n+mMV/w/wxi/9G+WMW/43zxyz+P88fs/j/In/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/8v88cs/r/KH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/r/PHLP6/yR+z+P82f8ziv1P+mMV/5/wxi//v8scs/r/PH7P475I/ZvH/Q/6YxX/X/DGL/275Yxb/3fPHLP5/zB+z+P8pf8ziv0f+mMV/z/wxi/9e+WMW/z/nj1n8/5I/ZvHfO3/M4r9P/pjFf9/8MYv/X/PHLP5/yx+z+O+XP2bx3z9/zOL/9/wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/P+RP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5YxL/EQfyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5I9Z/MfPH7P4T5A/ZvH/aP6YxX/C/DGL/0T5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfwnzh+z+E+SP2bxnzR/zOL/6fwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+E+VP2bx/0z+mMV/6vwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/l/OH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/bPljFv9v5I9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjF/1v5Yxb/BfPHLP7fzh+z+C+UP2bx/07+mMX/u/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/e/ljFv8l88cs/t/PH7P4/yB/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP4/zB+z+C+XP2bxXz5/zOL/o/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/H+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf8n+WMW/3Xzxyz+6+WPWfzXzx+z+P80f8ziv0H+mMX/Z/ljFv8N88cs/hvlj1n8N84fs/j/PH/M4v+L/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/r/MH7P4/yp/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP6/zh+z+P8mf8zi/9v8MYv/TvljFv+d88cs/r/LH7P4/z5/zOK/S/6Yxf8P+WMW/13zxyz+u+WPWfx3zx+z+P8xf8zi/6f8MYv/HvljFv8988cs/nvlj1n8/5w/ZvH/S/6YxX/v/DGL/z75Yxb/ffPHLP5/zR+z+P8tf8ziv1/+mMV///wxi//f88cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bx/0f+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPSfwHD+SPWfwHvTf/kf/HxvUBzeI/Qusfs/iPmD9m8R+cP2bxHyl/zOI/cv6YxX+U/DGL/5D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+H8kfs/iPnz9m8Z8gf8zi/9H8MYv/hPljFv+J8scs/h/LH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4T5w/ZvGfJH/M4j9p/pjF/9P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v+Z/DGL/9T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/nD9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/9nyxyz+38gfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOL/zfwxi/+38scs/gvmj1n8v50/ZvFfKH/M4v+d/DGL/3fzxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fyxyz+S+aPWfy/nz9m8f9B/pjFf6n8MYv/0vljFv9l8scs/svmj1n8f5g/ZvFfLn/M4r98/pjF/0f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/j/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/T/LHLP7r5o9Z/NfLH7P4r58/ZvH/af6YxX+D/DGL/8/yxyz+G+aPWfw3yh+z+G+cP2bx/3n+mMX/F/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfx/mT9m8f9V/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8f50/ZvH/Tf6Yxf+3+WMW/53yxyz+O+ePWfx/lz9m8f99/pjFf5f8MYv/H/LHLP675o9Z/HfLH7P4754/ZvH/Y/6Yxf9P+WMW/z3yxyz+e+aPWfz3yh+z+P85f8zi/5f8MYv/3vljFv998scs/vvmj1n8/5o/ZvH/W/6YxX+//DGL//75Yxb/v+ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4v+P/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH5P4jzSQP2bxH5Q/ZvEfIX/M4j9i/pjFf3D+mMV/pPwxi//I+WMW/1Hyxyz+Q/LHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/h/JH/M4j9+/pjFf4L8MYv/R/PHLP4T5o9Z/CfKH7P4fyx/zOL/8fwxi/8n8scs/p/MH7P4fyp/zOI/cf6YxX+S/DGL/6T5Yxb/T+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/2fyxyz+U+ePWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9y/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v5I/ZvH/av6Yxf9r+WMW/6/nj1n8Z8sfs/h/I3/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/8388cs/t/KH7P4L5g/ZvH/dv6YxX+h/DGL/3fyxyz+33X5D36vG1r8F3b5v+cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/e/ljFv8l88cs/t/PH7P4/yB/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP4/zB+z+C+XP2bxXz5/zOL/o/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/H+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf8n+WMW/3Xzxyz+6+WPWfzXzx+z+P80f8ziv0H+mMX/Z/ljFv8N88cs/hvlj1n8N84fs/j/PH/M4v+L/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/r/MH7P4/yp/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP6/zh+z+P8mf8zi/9v8MYv/TvljFv+d88cs/r/LH7P4/z5/zOK/S/6Yxf8P+WMW/13zxyz+u+WPWfx3zx+z+P8xf8zi/6f8MYv/HvljFv8988cs/nvlj1n8/5w/ZvH/S/6YxX/v/DGL/z75Yxb/ffPHLP5/zR+z+P8tf8ziv1/+mMV///wxi//f88cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bx/0f+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPSfxHHsgfs/gPyh+z+I+QP2bxHzF/zOI/OH/M4j9S/pjFf+T8MYv/KPljFv8h+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/D+SP2bxHz9/zOI/Qf6Yxf+j+WMW/wnzxyz+E+WPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfw/lT9m8Z84f8ziP0n+mMV/0vwxi/+n88cs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/M/ljFv+p88cs/p/NH7P4fy5/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fzl/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP6z5Y9Z/L+RP2bxn/2/9h/lf3RcH9As/nO0/jGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/N/PHLP7fyh+z+C+YP2bx/3b+mMV/ofwxi/938scs/t/NH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/t/LH7P4L5k/ZvH/fv6Yxf8H+WMW/6Xyxz6k/oOGsx556fyxD6n/6719/S+TP2bxXzZ/zOL/w/wxi/9y+WMW/+Xzxyz+P8ofs/ivkD826JxBw2bmw+2/Yv6YZf2vlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/x/nj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/5/kj1n8180fs/ivlz9m8V8/f8zi/9P8MYv/BvljFv+f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4v/z/DGL/y/yxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4/zJ/zOL/q/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+P86f8zi/5v8MYv/b/PHLP475Y9Z/HfOH7P4/y5/zOL/+/wxi/8u+WMW/z/kj1n8d80fs/jvlj9m8d89f8zi/8f8MYv/n/LHLP575I9Z/PfMH7P475U/ZvH/c/6Yxf8v+WMW/73zxyz+++SPWfz3zR+z+P81f8zi/7f8MYv/fvljFv/988cs/n/PH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/H/ljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V79F/8P/UuD6gWfyvbv1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+Q+MCpdZ/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf0ziP8pA/pjFf1D+mMV/hPwxi/+I+WMW/8H5Yxb/kfLHLP4j549Z/EfJH7P4D8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+b/7CG/Ms5i/94+WMW/4/kj1n8x88fs/hPkD9m8f9o/pjFf8L8MYv/RPljFv+P5Y9Z/D+eP2bx/0T+mMX/k/ljFv9P5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/p/DGL/2T5Yxb/yfPHLP5T5I9Z/KfMH7P4T5U/ZvH/TP6YxX/q/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+X84fs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/9s+WMW/2/kj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMX/W/ljFv8F88cs/t/OH7P4L5Q/ZvH/Tv6Yxf+7+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf97+WMW/yXzxyz+388fs/j/IH/M4r9U/pjFf+n8MYv/MvljFv9l88cs/j/MH7P4L5c/ZvFfPn/M4v+j/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/8f5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/yf5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zR/zOK/Qf6Yxf9n+WMW/w3zxyz+G+WPWfw3zh+z+P88f8zi/4v8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/826N8jwuK/bdqYxf+X+WMW/1/lj1n8t8sfs/hvnz9m8d/hDf9XXnu/xvUBzeK/Y+sfs/j/On/M4v+b/DGL/2/zxyz+O+WPWfx3zh+z+P8uf8zi//v8MYv/LvljFv8/5I9Z/HfNH7P475Y/ZvHfPX/M4v/H/DGL/5/yxyz+e+SPWfz3zB+z+O+VP2bx//N78h/pf25cH9As/n9p/WMW/73zxyz+++SPWfz3zR+z+P81f8zi/7f8MYv/fvljFv/988cs/n/PH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/H/ljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj8m8R8ykD9m8R+UP2bxHyF/zOI/Yv6YxX9w/pjFf6T8MYv/yPljFv9R8scs/kPyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4fyR/zOI/fv6YxX+C/DGL/0fzxyz+E+aPWfwnyh+z+H8sf8zi//H8MYv/J/LHLP6fzB+z+H8qf8ziP3H+mMV/kvwxi/+k+WMW/0/nj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/9n8scs/lPnj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/cv6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+SP2bx/+q7+u/+Pz+uD2gW/6+1/jGL/9fzxyz+s+WPWfy/kT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/2/lj1n8F8wfs/h/O3/M4r9Q/pjF/zv5Yxb/7+aPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/7+WPWfyXzB+z+H8/f8zi/4P8MYv/UvljFv+l88cs/svkj1n8l80fs/j/MH/M4r9c/pjFf/n8MYv/j/LHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv8f549Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv+f5I9Z/NfNH7P4r5c/ZvFfP3/M4v/T/DGL/wb5Yxb/n+WPWfw3zB+z+G+UP2bx3zh/zOL/8/wxi/8v8scs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+P8yf8zi/6v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/j/On/M4v+b/DGL/2/zxyz+O+WPWfx3zh+z+P8uf8zi//v8MYv/LvljFv8/5I9Z/HfNH7P475Y/ZvHfPX/M4v/H/DGL/5/yxyz+e+SPWfz3zB+z+O+VP2bx/3P+mMX/L/ljFv+988cs/vvkj1n8980fs/j/NX/M4v+3/DGL/375Yxb//fPHLP5/zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/x/5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v/Au/mP9b8wrg9oFv8HW/+Yxf+h/DGL/8P5Yxb/R/LHDP6DBg8MeTR/zOA/dP0/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/JvEfdSB/zOI/KH/M4j9C/pjFf8T8MYv/4Pwxi/9I+WMW/5Hzxyz+o+SPWfyH5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8f9I/pjFf/z8MYv/BPljFv+P5o9Z/CfMH7P4T5Q/ZvH/WP6Yxf/j+WMW/0/kj1n8P5k/ZvH/VP6YxX/i/DGL/yT5Yxb/SfPHLP6fzh+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/1T5Yxb/z+SPWfynzh+z+H82f8zi/7n8MYv/5/PHLP5fkPlP9x63s/h/Ueb/XrP4fyl/zOI/Tf6YxX/agYHN3q8hfZCz+E/X+scs/tPnj1n8Z8gfs/jPmD9m8f9y/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v5I/ZvH/av6Yxf9r+WMW/6/nj1n8Z8sfs/h/I3/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/8388cs/t/KH7P4L5g/ZvH/dv6YxX+h/DGL/3fyxyz+380fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+38sfs/gvmT9m8f9+/pjF/wf5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvH/Yf6YxX+5/DGL//L5Yxb/H+WPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zh+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP4/yR+z+K+bP2bxXy9/zOK/fv6Yxf+n+WMW/w3yxyz+P8sfs/hvmD9m8d8of8ziv3H+mMX/5/ljFv9f5I9Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9l/pjF/1f5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/df6Yxf83+WMW/9/mj1n8d8ofs/jvnD9m8f9d/pjF//f5Yxb/XfLHLP5/yB+z+O+aP2bx3y1/zOK/e/6Yxf+P+WMW/z/lj1n898gfs/jvmT9m8d8rf8zi/+f8MYv/X/LHLP57549Z/PfJH7P475s/ZvH/a/6Yxf9v+WMW//3yxyz+++ePWfz/nj9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljH17/PS5826WjnpI/9uH1/9f1f2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4/yN/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHJP6jDeSPWfwH5Y9Z/EfIH7P4j5g/ZvEfnD9m8R8pf8ziP3L+mMV/FJX/qO95S4v/EJX/e8/iP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL/0fyxyz+4+ePWfwnyB+z+H80f8ziP2H+mMV/ovwxi//H8scs/h/PH7P4fyJ/zOL/yfwxi/+n8scs/hPnj1n8J8kfs/hPmj9m8f90/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/h/Jn/M4j91/pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/L+ePWfxnyh+z+M+cP2bxnyV/zOI/a/6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6YxX+2/DGL/zfyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fzN/zOL/rfwxi/+C+WMW/2/nj1n8F8ofs/h/J3/M4v/d/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+9/DGL/5L5Yxb/7+ePWfx/kD9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/x/mj1n8l8sfs/gvnz9m8f9R/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/+P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8zi/5P8MYv/uvljFv/18scs/uvnj1n8f5o/ZvHfIH/M4v+z/DGL/4b5Yxb/jfLHLP4b549Z/H+eP2bx/0X+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/X+aPWfx/lT9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/1/nj1n8f5M/ZvH/bf6YxX+n/DGL/875Yxb/3+WPWfx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J/8Nv8R3o9xfUCz+J/S+scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/z/yxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+LQv9R38M2Fv+XhP7vJYv/y/ljFv9X8scs/q/mj1n8X8sfk/iPPpA/ZvEflD9m8R8hf8ziP2L+mMV/cP6YxX+k/DGL/8j5Yxb/UfLHLP5D8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+H8kf8ziP37+mMV/gvwxi/9H88cs/hPmj1n8J8ofs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/h/Kn/M4j9x/pjFf5L8MYv/pPljFv9P549Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/Z/LHLP5T549Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/3L+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/kj9m8Z97SP6Uxf9rrX/M4v/1/DGL/2z5Yxb/b+SPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvH/Zv6Yxf9b+WMW/wXzxyz+384fs/gvlD9m8f9O/pjF/7v5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/3v5Yxb/JfPHLP7fzx+z+P8gf8ziv1T+mMV/6fwxi/8y+WMW/2Xzxyz+P8wfs/gvlz9m8V8+f8zi/6P8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/x/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/J/ljFv9188cs/uvlj1n8188fs/j/NH/M4r9B/pjF/2f5Yxb/DfPHLP4b5Y9Z/DfOH7P4/zx/zOL/i/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP6/zB+z+P8qf8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+v84fs/j/Jn/M4v/b/LEPnf/bkN/uv1P+2IfO/x3W/875Yxb/3+WPWfx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP/am/8CQgYEPs/8p+WOW9X9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+P8jf8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB9z+Cf/Tjn8B0Z/qEcBZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5YxL/MQbyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5I9Z/MfPH7P4T5A/ZvH/aP6YxX/C/DGL/0T5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfwnzh+z+E+SP2bxnzR/zOL/6fwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+E+VP2bx/0z+mMV/6vwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/l/OH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/bPljFv9v5I9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjF/1v5Yxb/BfPHLP7fzh+z+C+UP2bx/07+mMX/u/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/e/ljFv8l88cs/t/PH7P4/yB/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP4/zB+z+C+XP2bxXz5/zOL/o/wxi/8K+WMW/xWN/u/hDlv8VzL6v4cs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/+P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8zi/5P8MYv/uvljFv/18scs/uvnj1n8f5o/ZvHfIH/M4v+z/DGL/4b5Yxb/jfLHLP4b549Z/H+eP2bx/0X+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/X+aPWfx/lT9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/1/nj1n8f5M/ZvH/bf6YxX+n/DGL/875Yxb/3+WPWfx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/j/I3/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/LEPt//tb146xq35Yx9u/7ca47b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+2IfUf8rhLh3jvvyxD6n/6719/d+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+T+I85kD9m8R+UP2bxHyF/zOI/Yv6YxX9w/pjFf6T8MYv/yPljFv9R8scs/kPyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4fyR/zOI/fv6YxX+C/DGL/0fzxyz+E+aPWfwnyh+z+H8sf8zi//H8MYv/J/LHLP6fzB+z+H8qf8ziP3H+mMV/kvwxi/+k+WMW/0/nj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/9n8scs/lPnj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/cv6YxX+m/DGL/8z5Yxb/WfLH/sV/2GXjvM9j+v/VO/jPmj9mWf9fyR+z+H81f8zi/7X8MYv/1/PHLP6z5Y9Z/L+RP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/b+WPWfwXzB+z+H87f8ziv1D+mMX/O/ljFv/v5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv/v5Y9Z/JfMH7P4fz9/zOL/g/wxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+P8wf8ziv1z+mMV/+fwxi/+P8scs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/x/nj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/5/kj1n8180fs/ivlz9m8V8/f8zi/9P8MYv/BvljFv+f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4v/z/DGL/y/yxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4/zJ/zOL/q/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+P86f8zi/5v8MYv/b/PHLP475Y9Z/HfOH/uw+g8Zzv93+WMfVv+B4fx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/j/I3/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/7hvff/H95XB/QLP73t/4xi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMR/rIH8MYv/oPwxi/8I+WMW/xHzxyz+g/PHLP4j5Y9Z/EfOH7P4j5I/ZvEfkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6Yxf8j+WMW//Hzxyz+E+SPWfw/mj9m8Z8wf8ziP1H+mMX/Y/ljFv+P549Z/D+RP2bx/2T+mMX/U/ljFv+J88cs/pPkj1n8J80fs/h/On/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8P5M/ZvGfOn/M4v/Z/DGL/+fyxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/5fzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOI/W/6Yxf8bav/lRn+nayz+s6v93zmL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv9v5o9Z/L+VP2bxXzB/zOL/7fwxi/9C+WMW/+/kj1n8v5s/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8v5c/ZvFfMn/M4v/9/DGL/w/yxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/w/wxi/9y+WMW/+Xzxyz+P8ofs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/nD9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfx/kj9m8V83f8ziv17+mMV//fwxi/9P88cs/hvkj1n8f5Y/ZvHfMH/M4r9R/pjFf+P8MYv/z/MfGBgY9d8usfj/In/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/8v88cs/r/KH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/r/PHLP6/yR+z+P82f8ziv1P+mMV/5/wxi//v8scs/r/PH7P475I/ZvH/Q/6YxX/X/DGL/275Yxb/3fPHLP5/zB+z+P8pf8ziv0f+mMV/z/wxi/9e+WMW/z/nj1n8/5I/ZvHfO3/M4r9P/pjFf9/8MYv/X/PHLP5/yx+z+O+XP2bx3z9/zOL/9/wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/P+RP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5YxL/sQfyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5I9Z/MfPH7P4T5A/ZvH/aP7Y/8fO3Yd7Xdd3HP9xT5azT7sudWnDoTHXZiQyGrUQFcXjzSkTzbxHPQLJjdxIgCmw0Uodmy51s2ATC8ecrVricHPdrWhY1myN2FrlFNfCGHOwyJyx68A5BGdvz7XzZd+vm+/H4w/O+f2O71/K83r5+3lxXWXpf5j+oSz9D9c/lKX/z+gfytL/1fqHsvQ/Qv9Qlv5H6h/K0v81+oey9P9Z/UNZ+g/TP5Sl/1H6h7L0/zn9Q1n6D9c/lKX/0fqHsvQ/Rv9Qlv6v1T+Upf8I/UNZ+v+8/qEs/Y/VP5Sl/y/oH8rS/3X6h7L0/0X9Q1n6/5L+oSz9j9M/lKX/6/UPZek/Uv9Qlv5v0D+Upf/x+oey9B+lfyhL/xP0D2XpP1r/UJb+v6x/KEv/MfqHsvR/o/6hLP1/Rf9Qlv5j9Q9l6f8m/UNZ+r9Z/1CW/r+qfyhL/7foH8rSf5z+oSz9T9Q/lKX/eP1DWfqfpH8oS/+T9Q9l6X+K/qEs/SfoH8rS/1T9Q1n6n6Z/KEv/ifqHsvQ/Xf9Qlv5t+oey9D9D/1CW/mfqH8rS/yz9Q1n6n61/KEv/dv1DWfq/Vf9Qlv5v0z+Upf85+oey9H+7/qEs/c/VP5Sl/yT9Q1n6n6d/KEv/8/UPZen/Dv1DWfpfoH8oS/936h/K0v9C/UNZ+l+kfyhL/4v1D2Xpf4n+oSz9L9U/lKX/ZfqHsvS/XP9Qlv6T9Q9l6X+F/qEs/a/UP5Sl/1X6h7L079A/lKX/1fqHsvSfon8oS/+p+oey9J+mfyhL/3fpH8rS/xr9Q1n6T9c/lKX/DP1DWfrP1D+Upf8s/UNZ+l+rfyhL/9n6h7L0n6N/KEv/ufqHsvSfp38oS//r9A9l6T9f/1CW/u/WP5Sl/wL9Q1n6L9Q/lKX/Iv1DWfpfr38oS//36B/K0v8G/UNZ+t+ofyhL/8X6h7L0X6J/KEv/pfqHsvT/Nf1DWfr/uv6hLP2X6R/K0v+9+oey9P8N/UNZ+r9P/1CW/u/XP5Sl/036h7L0v1n/UJb+t+gfytL/N/UPZem/XP9Qlv6/pX8oS//f1j+Upf+t+oey9L9N/1CW/r+jfyhL/w/oH8rS/3b9Q1n636F/KEv/O/UPZen/u/qHsvT/Pf1DWfrfpX8oS/8P6h/K0v9D+oey9F+hfyhL/5X6h7L0/339Q1n6/4H+oSz979Y/lKX/Kv1DWfrfo38oS/8P6x/K0v8j+oey9F+tfyhL/3v1D2Xp/4f6h7L0X6N/KEv/P9I/lKX/ffqHsvT/Y/1DWfrfr38oS/+P6h/K0v9P9A9l6f8x/UNZ+n9c/1CW/p/QP5Sl/5/qH8rS/5P6h7L0f0D/UJb+a/UPZen/oP6hLP3/TP9Qlv7r9A9l6f+Q/qEs/f9c/1CW/n+hfyhL/4f1D2Xp/5f6h7L0/5T+oSz9P61/KEv/z+gfytL/s/qHsvT/nP6hLP3/Sv9Qlv6f1z+Upf8X9A9l6b9e/1CW/l/UP5Sl/1/rH8rSf4P+oSz9H9E/lKX/l/QPZen/Zf1DWfo/qn8oS/+v6B/K0v+r+oey9P8b/UNZ+j+mfyhL/6/pH8rS/2/1D2Xp/3X9Q1n6/53+oSz9N+ofytL/G/qHsvTfpH8oS/+/1z+Upf8/6B/K0v+b+oey9P9H/UNZ+n9L/1CW/t/WP5Sl/3f0D2Xp/7j+oSz9/0n/UJb+T+gfytL/Sf1DWfpv1j+Upf9T+oey9P9n/UNZ+n9X/1CW/v+ifyhL/+/pH8rSf4v+oSz9n9Y/lKX/9/UPZem/Vf9Qlv7/qn8oS/9t+oey9P83/UNZ+j+jfyhL/3/XP5Sl/3b9Q1n679A/lKX/f+gfytL/B/qHsvTfqX8oS/8f6h/K0v9Z/UNZ+v9I/1CW/s/pH8rS/z/1D2Xp/7z+oSz9f6x/KEv/XfqHkvR/ZUv/UJb+/fQPZenfX/9Qlv4D9A9l6T9Q/1CW/oP0D2XpP1j/UJb+Q/QPZek/VP9Qlv4v0z+Upf9B+oey9H+5/qEs/V+hfyhL/4P1D2Xp/1P6h7L0P0T/0EuuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP81cxcuumby9Okdc3zjG9/4Zu83L/a/mQAAgP9tP/nQ/2L/nQAAAAAAAAAAAAAAAAAAAEBeTfzfib3Y/4wAAAAAAAAAAAAAAPD/XVv7SVsH9NvvqQH7PnjNox27v47eecHU1asfLN1fu358ZvCS/fd9sGvXrl0rnxk3oevhkFar1fm/9squx0N7Hne+/pJhKw7f86iM//ydj1866eCz5qy9beA3Vt7S/vSg3c8Oal1+9bTpHW/o32qVUwa1FnQ+OL5fq1VOG9S6tfPBqM4HEwe11nQ+OGH3g5e1PtP54PVXzpp+VecTp1f+PYOXirb2Ja0B+y22td+/Dfbd/5JhT0zt/trLS3a/2sBW1/6Hr/3SYT1+1u0F9t/9+uWknvvv8z8g8IL6tv9nN3V/7eUl/9v7/4c37FwU/eyF99/9+uVk+4f6BJ//99toz8/9PT7/HxW85N77E4duuL1z/23n3Xdk11MD/yef/3/y+uWUnvvvv9/n/87P8RO6P/8PabXKqQf42wGptLUv3drb+3/v+x/46h43/fbd/z1f2fyKzv3f+1xrWddTg/q4/wm9vf/f1OPvFeibtvZVu3q8//dh/60RwUvu3f+WtQfv/vy/+f4rD93nZ33Z/6k99z9y3oxrR85duOi4aTMmT+mY0jFz7Kgxx48eO3bMmJG7PxHs+fUAf1MgiQN7/28d1OOmX6vVsfd+/X23TOjc/7aHln2k66mhfdz/ab2+/x/l/R9Cw/u3Bg9uLZg8b96c4/f82v1w1J5f9/xlwf778N//Rx/b9Zd1/5lhv1br8L33Iy4dO6Rz/9fPLuu6nhrcx/1P7HX/4/f/s0qgbw7w/f+qHjf77f/ELTfO79z/MT941eaup/r63/+n97r/u73/w4Foa2/V+ibauf8Thiw9o9p1afPnf1CfJvY/bPutO6pdlzPsH+rTxP4nLX/zFdWuy5n2D/VpYv8PzrhsebXrcpb9Q32a2P/zP73jiGrX5Wz7h/o0sf/HvvvU6mrXpd3+oT5N7P+Dd7WfUO26vNX+oT5N7P+46344rtp1eZv9Q32a2P/VLz93TbXrco79Q32a2P8Zu04+tNp1ebv9Q32a2H+/pd9bUu26nGv/UJ8m9v/k5OWzql2XSfYP9Wli/2uGjXi22nU5z/6hPk3sf9nTb5xY7bqcb/9Qnyb2/9U7VjxW7bq8w/6hPk3s/xMXv2pFtetygf1DfZrY/4+GP3RQtevyTvuH+jSx/40b1zxQ7bpcaP9Qnyb2v3LNgOHVrstF9g/1aWL/i0+f8mi163Kx/UN9mtj/6DFfvqjadbnE/qE+Tez/8M9966lq1+VS+4f6NLH/cx+eP7fadbnM/qE+Tex//hEf/3G163K5/UN9mtj/WzqOmFrtuky2f6hPE/svtx20sdp1ucL+oT5N7P/CbavGV7suV9o/1KeJ/a875Asfq3ZdrrJ/qE8T+98+e+bYatelw/6hPk3s/zvvXfy+atflavuH+jSx/9uf+3qpdl2m2D/Up4n9bxl14cXVrstU+4f6NLH/VWc980i16zLN/qE+Tex/+brH51W7Lu+yf6hPE/tfv/7MJ6pdl2vsH+rTxP6PGTHy4GrXZbr9Q32a2P+sC5Z9qNp1mWH/UJ8m9n/K/Xe8ttp1mWn/UJ8m9j/0a+M+We26zLJ/qE8T+//0uPd/qtp1udb+oT5N7H/H+KOPrXZdZts/1KeJ/W96YNSd1a7LHPuH+jSx/w88clfF6zLX/qE+Tex/9uue31btusyzf6hPE/t/06TzF1a7LtfZP9Snif0fevfEL1a7LvPtH+rTxP4v+fb3z6l2Xd5t/1CfJvZ/9GFXHFntuiywf6hPE/ufOm3DzdWuy0L7h/o0sf8JKzeNrnZdFtk/1KeJ/R/y5Nx7ql2X6+0f6tPE/rcOOOzsatflPfYP9Wli//fe8PA3q12XG+wf6tPE/m++6aMd1a7LjfYP9Wli/5/dOXh7teuy2P4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/2IHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WQfRuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAUAAD//3II6Vg=") lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {}, [{}], {}, [{0x8, 0x3}], {0x10, 0x2}, {0x20, 0x2}}, 0x34, 0x3) 2.282816378s ago: executing program 2 (id=1797): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) 2.231657121s ago: executing program 4 (id=1798): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8927, &(0x7f0000000280)={'ip6_vti0\x00', @remote}) 2.06940113s ago: executing program 2 (id=1801): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_POLL(r0, &(0x7f0000000180)={0x18, 0x4}, 0x18) 2.028831043s ago: executing program 4 (id=1802): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001200)={@host}) 1.865436742s ago: executing program 2 (id=1804): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x8, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) 1.797855026s ago: executing program 4 (id=1805): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x4, 0x0, 0x2, {}, {}, {0x2}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) 1.679809932s ago: executing program 3 (id=1807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf0}}, 0x0) 1.594536808s ago: executing program 2 (id=1808): r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0405602, &(0x7f00000001c0)=@fd={0x0, 0x1, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x82, ';\'S;'}}) 1.581502018s ago: executing program 4 (id=1809): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.399723079s ago: executing program 3 (id=1811): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCNOTTY(r0, 0x5422) 1.365284291s ago: executing program 2 (id=1812): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000001780)=ANY=[@ANYRES8=r0, @ANYBLOB="eea742f2a047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd7640041f42a603fedc79b6d64c0f6d0805d3cfd10cce0c88ccff0ff447cd9caded4abf65767e9dbbd7b5841a8ce3eae5cb5abfd7d4fb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba300ffffffffffffff2dc083650000000000000000a9cf70009a31f83d4b774b0d99de69f14de9e655b84b640066d979b9cdbde3832451099809bba500000000007cf791c3e2fc9c72f920a64e0000000000000000000000b5ff5bb6b1fa86", @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="e8a091ef1905f9488bb83b5ff5819f176270b4d57bf467b22712a297a2c9724589572090361a31"], 0x0, 0x0, &(0x7f0000001780)) 1.364733141s ago: executing program 4 (id=1813): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.341650652s ago: executing program 1 (id=1814): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000340)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e) 1.233728749s ago: executing program 1 (id=1815): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x81, 0x3, 0x0, 0x402}}, @TCA_CT_ACTION={0x6, 0x3, 0x1b}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_MARK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x280c4}, 0x40) 1.183943332s ago: executing program 3 (id=1816): semctl$SETALL(0x0, 0x0, 0x11, 0x0) semctl$GETPID(0x0, 0x4, 0xb, 0x0) 1.04073702s ago: executing program 4 (id=1817): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000340)={[{@coherency_buffered}, {@heartbeat_none}, {@intr}, {@err_cont}, {@journal_async_commit}, {@localflocks}, {@intr}, {@journal_async_commit}]}, 0x9, 0x444b, &(0x7f00000088c0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) 993.694283ms ago: executing program 1 (id=1818): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x1, 0x4}) 931.023966ms ago: executing program 5 (id=1819): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000000), 0x98) 853.362961ms ago: executing program 3 (id=1820): setitimer(0x2, &(0x7f0000000100)={{0x0, 0xea60}, {0x77359400}}, 0x0) setitimer(0x2, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) 832.273522ms ago: executing program 1 (id=1821): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') pread64(r0, &(0x7f0000000000)=""/186, 0xba, 0x1c) 610.258885ms ago: executing program 3 (id=1822): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f00000001c0)) 553.347278ms ago: executing program 1 (id=1823): r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@mmap={0x2, 0x8, 0x4, 0xfd58a39f5f8a9514, 0x3, {}, {0x1, 0x0, 0x0, 0xc, 0xa, 0x4, "930ee09c"}, 0x4, 0x1, {}, 0xffffffff}) 294.547583ms ago: executing program 3 (id=1824): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x210, 0x5002004a, 0xa, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'macvtap0\x00'}, 0x60, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'bridge0\x00', {}, 'batadv0\x00', {}, 0x0, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c7a6bc1f54b88fa2267673e9bdbd68ed89f86114fe5e4c4969e359fcb117"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) 283.115144ms ago: executing program 1 (id=1825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000010901040000000000000000050000053c0002"], 0x50}, 0x1, 0x0, 0x0, 0x45}, 0x4008000) 7.09223ms ago: executing program 2 (id=1826): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1, 0x0, 0x0, 0xffffffffffffff41}, 0x80) 0s ago: executing program 5 (id=1827): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) kernel console output (not intermixed with test programs): 2564][ T4679] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 74.216486][ T4679] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 74.339545][ T4679] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.134: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 74.501578][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 74.890107][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 74.916496][ T4713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.148'. [ 74.958739][ T4694] loop3: detected capacity change from 0 to 32768 [ 74.959873][ T4715] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 75.150099][ T4694] read_mapping_page failed! [ 75.920432][ T4746] openvswitch: netlink: Tunnel attr 6 has unexpected len 4 expected 0 [ 76.121237][ T4754] binder: 4753:4754 ioctl c018620c 200000000080 returned -22 [ 76.327707][ T4764] ipt_CLUSTERIP: Please specify destination IP [ 76.423275][ T4766] netlink: 'syz.1.174': attribute type 3 has an invalid length. [ 76.439398][ T4766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.174'. [ 76.571181][ T126] cfg80211: failed to load regulatory.db [ 77.099175][ T4314] usb 5-1: USB disconnect, device number 3 [ 77.116722][ T4788] capability: warning: `syz.2.185' uses deprecated v2 capabilities in a way that may be insecure [ 77.393185][ T4797] loop4: detected capacity change from 0 to 8 [ 77.539586][ T4797] SQUASHFS error: lzo decompression failed, data probably corrupt [ 77.558021][ T4797] SQUASHFS error: Failed to read block 0x1c0: -5 [ 77.581801][ T4797] SQUASHFS error: Unable to read metadata cache entry [1be] [ 77.706417][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.896810][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 77.913577][ T14] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 77.932559][ T14] usb 3-1: config 0 has no interface number 0 [ 77.955055][ T14] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 77.975122][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.984637][ T14] usb 3-1: Product: syz [ 77.989380][ T14] usb 3-1: Manufacturer: syz [ 77.994199][ T14] usb 3-1: SerialNumber: syz [ 78.010629][ T14] usb 3-1: config 0 descriptor?? [ 78.019361][ T14] hub 3-1:0.132: bad descriptor, ignoring hub [ 78.029000][ T14] hub: probe of 3-1:0.132 failed with error -5 [ 78.041985][ T14] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input6 [ 78.378561][ T4834] netlink: 84 bytes leftover after parsing attributes in process `syz.3.207'. [ 78.407003][ T4834] netlink: 84 bytes leftover after parsing attributes in process `syz.3.207'. [ 78.536857][ T14] usb 3-1: USB disconnect, device number 2 [ 78.953814][ T4856] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.006725][ T126] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 79.198186][ T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.219693][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 79.266821][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 79.301789][ T126] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.347731][ T126] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 79.376515][ T126] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 79.396531][ T126] usb 4-1: Manufacturer: syz [ 79.415510][ T126] usb 4-1: config 0 descriptor?? [ 79.646815][ T4349] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.661157][ T4314] usb 4-1: USB disconnect, device number 3 [ 79.846616][ T4349] usb 1-1: Using ep0 maxpacket: 16 [ 79.857765][ T4349] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 79.901398][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.917098][ T4349] usb 1-1: Product: syz [ 79.926070][ T4349] usb 1-1: Manufacturer: syz [ 79.931838][ T4349] usb 1-1: SerialNumber: syz [ 79.961849][ T4349] usb 1-1: config 0 descriptor?? [ 79.986026][ T4349] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 79.996201][ T4349] usb 1-1: Detected FT232H [ 80.106510][ T4380] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.326541][ T4380] usb 2-1: Using ep0 maxpacket: 16 [ 80.336275][ T4380] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 80.376507][ T4380] usb 2-1: config 0 has no interface number 0 [ 80.384791][ T4349] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 80.404978][ T4349] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 80.415087][ T4380] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 80.426486][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.444714][ T4380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.455353][ T4380] usb 2-1: Product: syz [ 80.463232][ T4349] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 80.479230][ T4380] usb 2-1: Manufacturer: syz [ 80.496244][ T4349] usb 1-1: USB disconnect, device number 2 [ 80.502282][ T4380] usb 2-1: SerialNumber: syz [ 80.519678][ T4349] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 80.535128][ T4380] usb 2-1: config 0 descriptor?? [ 80.555342][ T4380] hub 2-1:0.132: bad descriptor, ignoring hub [ 80.565285][ T4349] ftdi_sio 1-1:0.0: device disconnected [ 80.571243][ T4380] hub: probe of 2-1:0.132 failed with error -5 [ 80.603132][ T4380] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input7 [ 80.619268][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 80.646504][ T14] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 80.665289][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 80.696414][ T14] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 80.712651][ T14] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 80.746436][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.788506][ T14] usb 3-1: config 0 descriptor?? [ 80.837605][ T4380] usb 2-1: USB disconnect, device number 2 [ 81.057861][ T14] hdpvr 3-1:0.0: firmware version 0x15 dated Š–¸&S¶3;¨“Ãx&X^„œ wÒÎ–Š g/ƒ µn#»† [ 81.274275][ T14] hdpvr 3-1:0.0: device init failed [ 81.278000][ T4928] netlink: 188 bytes leftover after parsing attributes in process `syz.0.253'. [ 81.283192][ T14] hdpvr: probe of 3-1:0.0 failed with error -12 [ 81.348281][ T14] usb 3-1: USB disconnect, device number 3 [ 81.722974][ T4942] loop0: detected capacity change from 0 to 1024 [ 81.753863][ T4942] EXT4-fs: Ignoring removed nobh option [ 81.838050][ T4942] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.261: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 81.885549][ T4942] EXT4-fs (loop0): Remounting filesystem read-only [ 81.894491][ T4942] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.261: couldn't read orphan inode 11 (err -117) [ 81.907613][ T4942] EXT4-fs (loop0): Remounting filesystem read-only [ 81.914220][ T4942] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 82.014314][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 82.147403][ T4957] netlink: 32 bytes leftover after parsing attributes in process `syz.0.266'. [ 82.299988][ T4959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.268'. [ 82.504682][ T4969] netlink: 44 bytes leftover after parsing attributes in process `syz.3.272'. [ 82.545581][ T4969] tc_dump_action: action bad kind [ 83.159187][ T4995] netlink: 'syz.3.285': attribute type 21 has an invalid length. [ 83.206761][ T4995] netlink: 128 bytes leftover after parsing attributes in process `syz.3.285'. [ 83.210054][ T4996] loop2: detected capacity change from 0 to 256 [ 83.248616][ T4995] netlink: 'syz.3.285': attribute type 5 has an invalid length. [ 83.293947][ T4995] netlink: 'syz.3.285': attribute type 6 has an invalid length. [ 83.312348][ T4995] netlink: 3 bytes leftover after parsing attributes in process `syz.3.285'. [ 83.347981][ T4996] FAT-fs (loop2): Directory bread(block 64) failed [ 83.354860][ T4996] FAT-fs (loop2): Directory bread(block 65) failed [ 83.479720][ T4996] FAT-fs (loop2): Directory bread(block 66) failed [ 83.511036][ T4996] FAT-fs (loop2): Directory bread(block 67) failed [ 83.596677][ T4996] FAT-fs (loop2): Directory bread(block 68) failed [ 83.603254][ T4996] FAT-fs (loop2): Directory bread(block 69) failed [ 83.732293][ T4996] FAT-fs (loop2): Directory bread(block 70) failed [ 83.796707][ T4996] FAT-fs (loop2): Directory bread(block 71) failed [ 83.803361][ T4996] FAT-fs (loop2): Directory bread(block 72) failed [ 83.906673][ T4996] FAT-fs (loop2): Directory bread(block 73) failed [ 86.330453][ T5085] xt_CT: No such helper "syz0" [ 86.386043][ T5096] netlink: 'syz.4.331': attribute type 6 has an invalid length. [ 86.431663][ T5096] netlink: 168 bytes leftover after parsing attributes in process `syz.4.331'. [ 86.601593][ T5098] loop2: detected capacity change from 0 to 1024 [ 86.652553][ T5102] loop4: detected capacity change from 0 to 512 [ 86.672229][ T5098] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.759857][ T5105] loop1: detected capacity change from 0 to 512 [ 86.768379][ T5098] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.815344][ T5102] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.881628][ T5102] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.909924][ T5098] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 86.927370][ T5105] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.966331][ T5098] System zones: 0-1, 3-36 [ 87.032842][ T5098] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.034801][ T5102] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 87.088615][ T5102] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 87.131389][ T5102] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.336: Failed to acquire dquot type 0 [ 87.188510][ T5105] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 87.276868][ T5105] Quota error (device loop1): write_blk: dquota write failed [ 87.284834][ T5105] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 87.337174][ T5105] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.333: Failed to acquire dquot type 0 [ 87.397683][ T5105] EXT4-fs (loop1): 1 truncate cleaned up [ 87.411465][ T5105] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 87.437104][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 87.444735][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 87.532238][ T5105] Quota error (device loop1): write_blk: dquota write failed [ 87.641302][ T5105] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 87.726707][ T5105] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.333: Failed to acquire dquot type 0 [ 87.857246][ T4314] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.962784][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 88.056471][ T4314] usb 1-1: Using ep0 maxpacket: 8 [ 88.074034][ T4314] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 88.113275][ T5128] QAT: failed to copy from user cfg_data. [ 88.126737][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.156574][ T4314] usb 1-1: Product: syz [ 88.160795][ T4314] usb 1-1: Manufacturer: syz [ 88.165427][ T4314] usb 1-1: SerialNumber: syz [ 88.229360][ T4314] usb 1-1: config 0 descriptor?? [ 88.238456][ T5130] loop2: detected capacity change from 0 to 16 [ 88.249480][ T4314] gspca_main: sq905-2.14.0 probing 2770:9120 [ 88.298341][ T5130] erofs: (device loop2): mounted with root inode @ nid 36. [ 88.364777][ T5130] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 88.447908][ T5130] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 88.522277][ T5136] netlink: 'syz.3.348': attribute type 12 has an invalid length. [ 88.536549][ T5130] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 88.628611][ T5136] netlink: 120 bytes leftover after parsing attributes in process `syz.3.348'. [ 88.678883][ T4314] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 88.690225][ T4314] sq905: probe of 1-1:0.0 failed with error -71 [ 88.722250][ T4314] usb 1-1: USB disconnect, device number 3 [ 89.077048][ T5147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.240281][ T5154] netlink: 666 bytes leftover after parsing attributes in process `syz.4.357'. [ 89.326579][ T4335] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.540862][ T4335] usb 3-1: Using ep0 maxpacket: 8 [ 89.561755][ T4335] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 89.605475][ T4335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.613785][ T4335] usb 3-1: Product: syz [ 89.623919][ T4335] usb 3-1: Manufacturer: syz [ 89.639132][ T4335] usb 3-1: SerialNumber: syz [ 89.645805][ T4335] usb 3-1: config 0 descriptor?? [ 89.711216][ T4335] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 89.866924][ T5170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.366'. [ 90.117905][ T4335] gspca_vc032x: reg_w err -71 [ 90.122980][ T4335] vc032x: probe of 3-1:0.0 failed with error -71 [ 90.155587][ T4335] usb 3-1: USB disconnect, device number 4 [ 90.620838][ T5192] loop1: detected capacity change from 0 to 1024 [ 90.963384][ T5192] hfsplus: invalid extended attribute record [ 91.291858][ T4359] hfsplus: b-tree write err: -5, ino 4 [ 91.361097][ T5186] loop4: detected capacity change from 0 to 32768 [ 91.536165][ T5186] JBD2: Ignoring recovery information on journal [ 91.627437][ T5186] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 91.872772][ T27] audit: type=1800 audit(1769554726.431:10): pid=5186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.373" name="file0" dev="loop4" ino=17058 res=0 errno=0 [ 91.982687][ T5221] comedi comedi3: board detection failed [ 91.991609][ T5215] netlink: 'syz.0.386': attribute type 3 has an invalid length. [ 92.018044][ T5215] netlink: 3 bytes leftover after parsing attributes in process `syz.0.386'. [ 92.112561][ T4281] ocfs2: Unmounting device (7,4) on (node local) [ 92.294230][ T5229] i2c i2c-0: Invalid block write size 252 [ 92.438057][ T5234] overlayfs: option "workdir=./file0:/" is useless in a non-upper mount, ignore [ 92.516637][ T5232] loop3: detected capacity change from 0 to 64 [ 92.539745][ T5237] xt_hashlimit: max too large, truncated to 1048576 [ 92.577740][ T5234] overlayfs: missing 'lowerdir' [ 92.622595][ T5237] No such timeout policy "syz1" [ 92.874060][ T5247] loop4: detected capacity change from 0 to 64 [ 92.906549][ T5249] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 93.031692][ T5249] team0: Port device macvlan0 added [ 93.079937][ T5251] loop1: detected capacity change from 0 to 128 [ 93.165986][ T4653] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.183318][ T5251] autofs4:pid:5251:autofs_fill_super: called with bogus options [ 93.320616][ T5259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.408'. [ 93.698361][ T5264] loop1: detected capacity change from 0 to 4096 [ 93.735454][ T5264] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 93.854537][ T27] audit: type=1326 audit(1769554728.411:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5273 comm="syz.4.415" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45ba39aeb9 code=0x0 [ 93.967343][ T5278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.002170][ T5280] Invalid ELF header magic: != ELF [ 94.334499][ T5292] loop0: detected capacity change from 0 to 512 [ 94.417796][ T5292] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.450256][ T5292] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.518065][ T5292] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.424: bg 0: block 384: padding at end of block bitmap is not set [ 94.566309][ T5304] loop2: detected capacity change from 0 to 512 [ 94.611944][ T5304] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.653636][ T5292] EXT4-fs (loop0): Remounting filesystem read-only [ 94.704293][ T5292] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 94.710211][ T5304] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 94.736448][ T5292] EXT4-fs (loop0): Remounting filesystem read-only [ 94.766689][ T5292] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.424: attempt to clear invalid blocks 983260 len 1 [ 94.834221][ T5292] EXT4-fs (loop0): Remounting filesystem read-only [ 94.860436][ T5292] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.424: Invalid inode table block 0 in block_group 0 [ 94.931071][ T5292] EXT4-fs (loop0): Remounting filesystem read-only [ 94.952140][ T5292] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 94.988597][ T5292] EXT4-fs (loop0): Remounting filesystem read-only [ 94.995300][ T5292] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 95.042548][ T5292] EXT4-fs (loop0): Remounting filesystem read-only [ 95.063677][ T5292] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.424: Invalid inode table block 0 in block_group 0 [ 95.112002][ T5322] loop3: detected capacity change from 0 to 2048 [ 95.121800][ T5292] EXT4-fs (loop0): Remounting filesystem read-only [ 95.146727][ T5292] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 95.168105][ T5292] EXT4-fs (loop0): Remounting filesystem read-only [ 95.179394][ T5292] EXT4-fs error (device loop0): ext4_truncate:4318: inode #11: comm syz.0.424: mark_inode_dirty error [ 95.186605][ T5322] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.206636][ T5292] EXT4-fs (loop0): Remounting filesystem read-only [ 95.213641][ T5292] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 95.224055][ T5292] EXT4-fs (loop0): Remounting filesystem read-only [ 95.230754][ T5292] EXT4-fs (loop0): 1 truncate cleaned up [ 95.236605][ T5292] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.242972][ T5328] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 95.262461][ T5322] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.350225][ T5322] fscrypt (loop3, inode 14): Error -61 getting encryption context [ 95.365597][ T5292] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.424: Invalid inode table block 0 in block_group 0 [ 95.411403][ T5292] EXT4-fs (loop0): Remounting filesystem read-only [ 95.464026][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 95.508655][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 95.570234][ T5334] netlink: 'syz.4.443': attribute type 79 has an invalid length. [ 95.619494][ T5339] netlink: 48 bytes leftover after parsing attributes in process `syz.3.445'. [ 95.635839][ T5339] tc_dump_action: action bad kind [ 95.786900][ T4287] Bluetooth: hci4: Invalid handle: 0x0f00 > 0x0eff [ 95.804540][ T5347] loop2: detected capacity change from 0 to 64 [ 95.919355][ T5347] syz.2.449: attempt to access beyond end of device [ 95.919355][ T5347] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 95.935939][ T5347] Buffer I/O error on dev loop2, logical block 512, async page read [ 95.944602][ T5347] syz.2.449: attempt to access beyond end of device [ 95.944602][ T5347] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 95.963823][ T5347] Buffer I/O error on dev loop2, logical block 56576, async page read [ 96.013117][ T5351] loop3: detected capacity change from 0 to 4096 [ 96.045703][ T5351] NILFS: invalid option "cp=0x00aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa": too large checkpoint number [ 96.163681][ T5361] loop2: detected capacity change from 0 to 512 [ 96.281607][ T5361] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.424773][ T5361] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 96.508511][ T5361] Quota error (device loop2): write_blk: dquota write failed [ 96.516010][ T5361] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 96.528937][ T5361] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.454: Failed to acquire dquot type 0 [ 96.542823][ T5361] EXT4-fs (loop2): 1 truncate cleaned up [ 96.548726][ T5361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.571380][ T5361] Quota error (device loop2): write_blk: dquota write failed [ 96.578986][ T5371] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 96.606622][ T5361] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 96.642702][ T5361] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.454: Failed to acquire dquot type 0 [ 96.843123][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 96.852713][ T5385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.466'. [ 96.995770][ T5392] loop4: detected capacity change from 0 to 512 [ 97.038291][ T4351] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.087694][ T5392] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.232582][ T5392] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.470: Directory block failed checksum [ 97.238142][ T4351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.279105][ T4351] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 97.295350][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.325781][ T4351] usb 4-1: config 0 descriptor?? [ 97.498431][ T5412] tmpfs: Bad value for 'mpol' [ 97.558449][ T4351] ath6kl: Failed to submit usb control message: -71 [ 97.565654][ T4351] ath6kl: unable to send the bmi data to the device: -71 [ 97.581844][ T4351] ath6kl: Unable to send get target info: -71 [ 97.600221][ T4351] ath6kl: Failed to init ath6kl core: -71 [ 97.823044][ T27] audit: type=1326 audit(1769554732.381:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5421 comm="syz.2.485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d8ef9aeb9 code=0x0 [ 97.844809][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.976469][ T126] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.021266][ T4351] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 98.034753][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 98.041140][ T4351] usb 4-1: USB disconnect, device number 4 [ 98.166770][ T126] usb 2-1: Using ep0 maxpacket: 8 [ 98.181784][ T126] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 98.215226][ T126] usb 2-1: config 179 has no interface number 0 [ 98.230733][ T126] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 98.256586][ T126] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 98.306938][ T126] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.364440][ T126] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 98.399963][ T126] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 98.410779][ T5437] dlm: Unknown command passed to DLM device : 8 [ 98.410779][ T5437] [ 98.417521][ T5438] netlink: 'syz.2.490': attribute type 10 has an invalid length. [ 98.430501][ T126] usb 2-1: config 179 interface 65 has no altsetting 0 [ 98.446530][ T126] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 98.466614][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.513344][ T5438] team0: Port device macvlan0 added [ 98.559540][ T126] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 98.846738][ T4351] usb 2-1: USB disconnect, device number 3 [ 98.854108][ T4351] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 98.955178][ T5453] kAFS: unparsable volume name [ 99.655421][ T5484] Cannot find del_set index 1 as target [ 100.410461][ T5520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.533'. [ 100.424500][ T5518] Mount JFS Failure: -22 [ 100.446644][ T5518] jfs_mount failed w/return code = -22 [ 100.873757][ T5534] loop2: detected capacity change from 0 to 4096 [ 100.896261][ T5537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.541'. [ 100.899297][ T5534] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 100.922207][ T5537] netlink: 10 bytes leftover after parsing attributes in process `syz.3.541'. [ 101.164642][ T5546] bad cache= option: nonw [ 101.164642][ T5546] [ 101.180457][ T5546] CIFS: VFS: bad cache= option: nonw [ 101.389318][ T5553] netlink: 'syz.3.548': attribute type 5 has an invalid length. [ 101.465112][ T5558] overlayfs: empty lowerdir [ 102.228491][ T5594] loop1: detected capacity change from 0 to 64 [ 102.294489][ T5598] xt_TCPMSS: Only works on TCP SYN packets [ 102.412205][ T5600] ./file0: Can't open blockdev [ 102.504987][ T5605] QAT: failed to copy from user cfg_data. [ 102.646980][ T5611] netlink: 'syz.3.575': attribute type 21 has an invalid length. [ 102.875035][ T5621] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 102.900861][ T5621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'. [ 103.063786][ T5630] loop0: detected capacity change from 0 to 512 [ 103.218609][ T5630] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 103.248277][ T5636] xt_hashlimit: overflow, rate too high: 0 [ 103.286167][ T5630] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 103.301321][ T5630] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.581: Corrupt directory, running e2fsck is recommended [ 103.320400][ T5630] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 103.332341][ T5630] EXT4-fs error (device loop0): ext4_iget_extra_inode:4756: inode #15: comm syz.0.581: corrupted in-inode xattr [ 103.347033][ T5630] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.581: couldn't read orphan inode 15 (err -117) [ 103.367380][ T5630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 103.467179][ T5630] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 103.569345][ T5630] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 103.583638][ T5630] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.581: Corrupt directory, running e2fsck is recommended [ 103.595626][ T5649] sctp: [Deprecated]: syz.1.591 (pid 5649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.595626][ T5649] Use struct sctp_sack_info instead [ 103.692215][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 103.865421][ T27] audit: type=1326 audit(1769554738.421:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5658 comm="syz.3.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f33f9aeb9 code=0x7ffc0000 [ 103.901508][ T27] audit: type=1326 audit(1769554738.431:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5658 comm="syz.3.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7f33f9aeb9 code=0x7ffc0000 [ 103.979307][ T27] audit: type=1326 audit(1769554738.431:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5658 comm="syz.3.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7f33f9ac22 code=0x7ffc0000 [ 104.102500][ T5671] netlink: 'syz.0.601': attribute type 1 has an invalid length. [ 104.102644][ T27] audit: type=1326 audit(1769554738.441:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5658 comm="syz.3.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7f33f9ac22 code=0x7ffc0000 [ 104.132166][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.265467][ T27] audit: type=1326 audit(1769554738.441:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5658 comm="syz.3.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f33f9aeb9 code=0x7ffc0000 [ 104.656759][ T4349] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 104.858286][ T4349] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 104.877284][ T5697] loop0: detected capacity change from 0 to 4096 [ 104.885367][ T4349] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 104.903767][ T5675] loop1: detected capacity change from 0 to 32768 [ 104.911488][ T4349] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 104.944402][ T5675] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.603 (5675) [ 104.951984][ T5701] loop4: detected capacity change from 0 to 2048 [ 104.962736][ T4349] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 104.975378][ T4349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 104.992393][ T4349] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 105.024916][ T4349] usb 3-1: string descriptor 0 read error: -22 [ 105.027647][ T5697] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 105.039939][ T4349] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 105.050667][ T4349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.086014][ T5701] GPT:first_usable_lbas don't match. [ 105.094452][ T5675] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 105.110040][ T4349] usb 3-1: config 0 descriptor?? [ 105.115228][ T5701] GPT:34 != 290 [ 105.119405][ T5683] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.134823][ T5701] GPT: Use GNU Parted to correct GPT errors. [ 105.143825][ T4349] hub 3-1:0.0: bad descriptor, ignoring hub [ 105.154428][ T5675] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 105.166771][ T5701] loop4: p1 p2 p3 [ 105.176895][ T5697] ntfs3: loop0: Failed to load $Extend. [ 105.182541][ T4349] hub: probe of 3-1:0.0 failed with error -5 [ 105.199354][ T5675] BTRFS info (device loop1): force zlib compression, level 3 [ 105.210911][ T4349] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 105.223869][ T5675] BTRFS info (device loop1): force clearing of disk cache [ 105.256195][ T5675] BTRFS info (device loop1): disabling tree log [ 105.277100][ T3637] GPT:first_usable_lbas don't match. [ 105.286042][ T3637] GPT:34 != 290 [ 105.298678][ T5675] BTRFS info (device loop1): enabling disk space caching [ 105.305774][ T5675] BTRFS info (device loop1): disk space caching is enabled [ 105.315525][ T3637] GPT: Use GNU Parted to correct GPT errors. [ 105.328250][ T3637] loop4: p1 p2 p3 [ 105.428338][ T4349] usb 3-1: USB disconnect, device number 5 [ 105.446675][ T4351] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 105.582103][ T5721] netlink: 'syz.0.620': attribute type 1 has an invalid length. [ 105.626565][ T5721] netlink: 228 bytes leftover after parsing attributes in process `syz.0.620'. [ 105.638780][ T4351] usb 5-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 105.656180][ T5675] BTRFS info (device loop1): enabling ssd optimizations [ 105.685761][ T4351] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.728584][ T4351] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.798727][ T4351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.835466][ T4351] usb 5-1: Product: syz [ 105.855918][ T4351] usb 5-1: Manufacturer: syz [ 105.891926][ T4351] usb 5-1: SerialNumber: syz [ 106.182472][ T4351] usb 5-1: 0:2 : does not exist [ 106.193980][ T4351] usb 5-1: unit 9 not found! [ 106.210869][ T4351] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 106.330817][ T4351] usb 5-1: USB disconnect, device number 4 [ 106.349053][ T5748] loop3: detected capacity change from 0 to 128 [ 106.419861][ T4269] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 106.430569][ T5748] autofs4:pid:5748:autofs_fill_super: called with bogus options [ 106.437559][ T27] audit: type=1326 audit(1769554741.001:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b379aeb9 code=0x7ffc0000 [ 106.460801][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.538194][ T27] audit: type=1326 audit(1769554741.031:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f50b379aeb9 code=0x7ffc0000 [ 106.560639][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.700959][ T27] audit: type=1326 audit(1769554741.031:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b379aeb9 code=0x7ffc0000 [ 106.746139][ T27] audit: type=1326 audit(1769554741.031:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b379aeb9 code=0x7ffc0000 [ 107.664505][ T5798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.649'. [ 107.697020][ T5790] loop1: detected capacity change from 0 to 4096 [ 107.742868][ T5790] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 107.923850][ T5790] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 107.995361][ T5790] ntfs3: loop1: ino=1d, "file1" attr_set_size [ 107.996468][ T5806] mmap: syz.0.654 (5806): VmData 175874048 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 108.057477][ T5808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'. [ 108.102258][ T5808] netlink: 31 bytes leftover after parsing attributes in process `syz.4.655'. [ 108.146643][ T5808] netlink: 'syz.4.655': attribute type 3 has an invalid length. [ 108.166952][ T5808] netlink: 'syz.4.655': attribute type 2 has an invalid length. [ 108.196654][ T5808] netlink: 31 bytes leftover after parsing attributes in process `syz.4.655'. [ 108.227744][ T4269] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 108.237224][ T4269] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 108.440812][ T5820] netlink: 'syz.4.662': attribute type 1 has an invalid length. [ 108.453359][ T5822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.482151][ T5824] loop3: detected capacity change from 0 to 256 [ 108.674148][ T5824] FAT-fs (loop3): Directory bread(block 64) failed [ 108.710654][ T5824] FAT-fs (loop3): Directory bread(block 65) failed [ 108.729831][ T5824] FAT-fs (loop3): Directory bread(block 66) failed [ 108.730219][ T5833] loop1: detected capacity change from 0 to 256 [ 108.741567][ T5824] FAT-fs (loop3): Directory bread(block 67) failed [ 108.750142][ T5824] FAT-fs (loop3): Directory bread(block 68) failed [ 108.810161][ T5824] FAT-fs (loop3): Directory bread(block 69) failed [ 108.846570][ T5824] FAT-fs (loop3): Directory bread(block 70) failed [ 108.855166][ T5824] FAT-fs (loop3): Directory bread(block 71) failed [ 108.906581][ T5824] FAT-fs (loop3): Directory bread(block 72) failed [ 108.913256][ T5824] FAT-fs (loop3): Directory bread(block 73) failed [ 109.032219][ T5838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.670'. [ 109.295687][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 109.365563][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 109.423548][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 109.475563][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 109.526488][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 109.550659][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 109.635854][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 109.883423][ T5870] netlink: 'syz.0.686': attribute type 5 has an invalid length. [ 110.703742][ T5874] loop4: detected capacity change from 0 to 32768 [ 110.833331][ T5874] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 110.833331][ T5874] [ 110.909535][ T5874] ERROR: (device loop4): remounting filesystem as read-only [ 110.957733][ T5874] ialloc: diAlloc returned -5! [ 111.912352][ T5931] loop2: detected capacity change from 0 to 32768 [ 111.935884][ T5931] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.717 (5931) [ 111.990363][ T5931] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 112.011595][ T5931] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 112.041642][ T5931] BTRFS info (device loop2): force zlib compression, level 3 [ 112.060654][ T5931] BTRFS info (device loop2): force clearing of disk cache [ 112.076620][ T5931] BTRFS info (device loop2): disabling tree log [ 112.093358][ T5931] BTRFS info (device loop2): enabling disk space caching [ 112.107995][ T5931] BTRFS info (device loop2): disk space caching is enabled [ 112.486205][ T5950] loop0: detected capacity change from 0 to 4096 [ 112.647252][ T5931] BTRFS info (device loop2): enabling ssd optimizations [ 112.685945][ T5950] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 112.744040][ T9] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 112.757348][ T5950] ntfs3: loop0: ntfs_sync_fs r=19 failed, -22. [ 112.771786][ T5950] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 112.837242][ T5950] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 112.844580][ T5950] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 112.893052][ T5950] ntfs3: loop0: ntfs_evict_inode r=19 failed, -22. [ 112.935213][ T5950] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 112.947853][ T4270] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 112.975864][ T5950] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 113.081528][ T5943] loop4: detected capacity change from 0 to 32768 [ 113.124100][ T5943] (syz.4.718,5943,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 113.254469][ T5943] (syz.4.718,5943,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 113.428180][ T5943] JBD2: Ignoring recovery information on journal [ 113.540968][ T5943] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 113.702623][ T5943] ocfs2: Unmounting device (7,4) on (node local) [ 113.756658][ T5762] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.952304][ T5762] usb 1-1: Using ep0 maxpacket: 32 [ 113.971136][ T5762] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.982368][ T6007] loop3: detected capacity change from 0 to 2048 [ 114.020439][ T5762] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 114.065882][ T5762] usb 1-1: config 7 has no interface number 0 [ 114.074426][ T6007] loop3: p1 p3 p4 [ 114.084167][ T5762] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 114.095236][ T6007] loop3: p4 size 589824 extends beyond EOD, truncated [ 114.135143][ T5762] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 114.151700][ T5762] usb 1-1: config 7 interface 187 has no altsetting 0 [ 114.151902][ T6011] netlink: 680 bytes leftover after parsing attributes in process `syz.2.741'. [ 114.163959][ T5762] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 114.179135][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.188531][ T5762] usb 1-1: Product: syz [ 114.192871][ T3637] loop3: p1 p3 p4 [ 114.206752][ T3637] loop3: p4 size 589824 extends beyond EOD, truncated [ 114.213856][ T5762] usb 1-1: Manufacturer: syz [ 114.221527][ T5762] usb 1-1: SerialNumber: syz [ 114.230573][ T6012] FAT-fs (loop3p1): bogus number of reserved sectors [ 114.269857][ T6012] FAT-fs (loop3p1): Can't find a valid FAT filesystem [ 114.458190][ T5762] usb 1-1: Unknown endpoint type found, address 0x07 [ 114.476966][ T5762] usb 1-1: Not enough endpoints found in device, aborting! [ 114.488593][ T4287] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 114.497450][ T4287] Bluetooth: hci1: Injecting HCI hardware error event [ 114.507032][ T4287] Bluetooth: hci1: hardware error 0x00 [ 114.689629][ T4379] udevd[4379]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 114.703283][ T5730] udevd[5730]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 114.736046][ T4653] udevd[4653]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 114.754535][ T4321] usb 1-1: USB disconnect, device number 4 [ 114.914243][ T6030] netlink: 'syz.2.750': attribute type 5 has an invalid length. [ 114.925578][ T6032] loop4: detected capacity change from 0 to 1024 [ 114.972794][ T6032] hfsplus: Filesystem is marked locked, mounting read-only. [ 115.013970][ T6032] hfsplus: filesystem is marked locked, leaving read-only. [ 115.256538][ T4321] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.361437][ T6050] ipt_CLUSTERIP: unknown mode 3 [ 115.405130][ T6052] loop0: detected capacity change from 0 to 1764 [ 115.476623][ T4321] usb 2-1: Using ep0 maxpacket: 16 [ 115.484052][ T4321] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 115.513911][ T4321] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.554310][ T6052] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 115.560612][ T4321] usb 2-1: config 0 has no interface number 0 [ 115.603089][ T4321] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 115.637338][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.657543][ T4321] usb 2-1: Product: syz [ 115.662104][ T4321] usb 2-1: Manufacturer: syz [ 115.671721][ T4321] usb 2-1: SerialNumber: syz [ 115.696062][ T4321] usb 2-1: config 0 descriptor?? [ 115.733568][ T4321] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 115.756635][ T4321] usb 2-1: No valid video chain found. [ 115.977110][ T5761] usb 2-1: USB disconnect, device number 4 [ 116.215535][ T6081] device geneve2 entered promiscuous mode [ 116.646767][ T4287] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 116.700180][ T6101] loop4: detected capacity change from 0 to 4096 [ 116.912777][ T6106] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.984846][ T6101] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 117.070392][ T6101] Remounting filesystem read-only [ 117.363398][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'. [ 117.644947][ T6140] netlink: 'syz.3.804': attribute type 5 has an invalid length. [ 117.711569][ T6140] device ip6erspan0 entered promiscuous mode [ 117.756770][ T6145] device netdevsim0 entered promiscuous mode [ 117.777175][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.806'. [ 118.031223][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.811'. [ 118.442696][ T6135] loop4: detected capacity change from 0 to 32768 [ 118.513619][ T6135] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 118.664614][ T6135] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 118.782250][ T6135] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 118.831303][ T6135] OCFS2: File system is now read-only. [ 118.855543][ T6178] loop3: detected capacity change from 0 to 1024 [ 118.897120][ T6135] (syz.4.803,6135,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 118.904663][ T6135] (syz.4.803,6135,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 118.990819][ T6135] (syz.4.803,6135,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 119.037196][ T6135] (syz.4.803,6135,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 119.045687][ T6135] (syz.4.803,6135,0):ocfs2_read_virt_blocks:989 ERROR: status = -30 [ 119.106456][ T6135] (syz.4.803,6135,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 119.127146][ T6135] (syz.4.803,6135,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 119.135208][ T6184] loop1: detected capacity change from 0 to 256 [ 119.170660][ T6135] (syz.4.803,6135,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 119.202634][ T6184] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 119.236289][ T6135] (syz.4.803,6135,0):ocfs2_mknod:298 ERROR: status = -5 [ 119.273631][ T6135] (syz.4.803,6135,0):ocfs2_mknod:502 ERROR: status = -5 [ 119.299725][ T6135] (syz.4.803,6135,0):ocfs2_create:676 ERROR: status = -5 [ 119.321840][ T6188] netlink: 'syz.3.827': attribute type 10 has an invalid length. [ 119.373539][ T6188] netlink: 40 bytes leftover after parsing attributes in process `syz.3.827'. [ 119.403469][ T6188] device virt_wifi0 entered promiscuous mode [ 119.440130][ T6188] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 119.466985][ T4281] ocfs2: Unmounting device (7,4) on (node local) [ 119.580130][ T6163] loop2: detected capacity change from 0 to 65536 [ 119.710552][ T6163] XFS (loop2): Mounting V5 Filesystem [ 119.826899][ T6163] XFS (loop2): Ending clean mount [ 120.117651][ T4270] XFS (loop2): Unmounting Filesystem [ 120.421102][ T6226] loop3: detected capacity change from 0 to 2048 [ 120.510183][ T6230] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.549912][ T6226] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 120.642508][ T6226] Remounting filesystem read-only [ 120.806883][ T6239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.806998][ T6239] IPv6: NLM_F_CREATE should be set when creating new route [ 120.807049][ T6239] IPv6: NLM_F_CREATE should be set when creating new route [ 121.320694][ T6260] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 121.383827][ T6263] comedi comedi0: c6xdigio: I/O port conflict (0x3,3) [ 121.652520][ T6275] loop3: detected capacity change from 0 to 128 [ 122.054789][ T6289] loop0: detected capacity change from 0 to 16 [ 122.091901][ T6289] erofs: (device loop0): mounted with root inode @ nid 36. [ 122.134357][ T6289] syz.0.873: attempt to access beyond end of device [ 122.134357][ T6289] loop0: rw=0, sector=36, nr_sectors = 1 limit=16 [ 122.252704][ T6293] loop2: detected capacity change from 0 to 1024 [ 122.449985][ T11] hfsplus: b-tree write err: -5, ino 4 [ 122.611963][ T6277] loop1: detected capacity change from 0 to 32768 [ 123.008322][ T27] audit: type=1326 audit(1769554757.571:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8ef9aeb9 code=0x7ffc0000 [ 123.030521][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.074323][ T27] audit: type=1326 audit(1769554757.581:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f8d8ef9aeb9 code=0x7ffc0000 [ 123.154631][ T27] audit: type=1326 audit(1769554757.581:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8ef9aeb9 code=0x7ffc0000 [ 123.420734][ T6307] loop0: detected capacity change from 0 to 32768 [ 123.455200][ T6327] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 123.473569][ T6307] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.882 (6307) [ 123.567342][ T6307] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 123.611024][ T6307] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 123.652546][ T6311] loop4: detected capacity change from 0 to 32768 [ 123.656701][ T6307] BTRFS info (device loop0): force zlib compression, level 3 [ 123.675444][ T6307] BTRFS info (device loop0): force clearing of disk cache [ 123.699576][ T6307] BTRFS info (device loop0): use zlib compression, level 3 [ 123.722573][ T6307] BTRFS info (device loop0): turning on async discard [ 123.772231][ T6307] BTRFS info (device loop0): allowing degraded mounts [ 123.802616][ T6307] BTRFS info (device loop0): enabling disk space caching [ 123.822874][ T6307] BTRFS info (device loop0): disk space caching is enabled [ 123.882684][ T6335] loop2: detected capacity change from 0 to 2048 [ 124.002305][ T6339] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.207057][ T6307] BTRFS info (device loop0): enabling ssd optimizations [ 124.215245][ T6339] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 124.234769][ T6307] BTRFS info (device loop0): rebuilding free space tree [ 124.256929][ T6339] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 124.326600][ T6339] Remounting filesystem read-only [ 124.347003][ T4270] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 124.362168][ T6307] BTRFS info (device loop0): disabling free space tree [ 124.397604][ T6307] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.463489][ T6307] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.753977][ T6363] nvme_fabrics: missing parameter 'transport=%s' [ 124.772518][ T6374] loop2: detected capacity change from 0 to 1024 [ 124.781354][ T6363] nvme_fabrics: missing parameter 'nqn=%s' [ 124.834336][ T4271] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 125.135780][ T9] hfsplus: b-tree write err: -5, ino 4 [ 125.278584][ T6387] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 125.389463][ T6391] loop3: detected capacity change from 0 to 16 [ 125.420780][ T6391] erofs: (device loop3): mounted with root inode @ nid 36. [ 125.531611][ T6391] cifs: Unknown parameter 'cache_strategy' [ 125.751679][ T6408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.919'. [ 126.421857][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 126.813834][ T27] audit: type=1326 audit(1769554761.371:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b379aeb9 code=0x7ffc0000 [ 126.886036][ T27] audit: type=1326 audit(1769554761.401:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f50b379aeb9 code=0x7ffc0000 [ 126.931973][ T6458] netlink: 168 bytes leftover after parsing attributes in process `syz.1.946'. [ 126.957616][ T27] audit: type=1326 audit(1769554761.401:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b379aeb9 code=0x7ffc0000 [ 127.041320][ T27] audit: type=1326 audit(1769554761.401:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b379aeb9 code=0x7ffc0000 [ 127.196763][ T6434] loop4: detected capacity change from 0 to 32768 [ 127.234334][ T6470] device netdevsim0 entered promiscuous mode [ 127.251589][ T6434] (syz.4.934,6434,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.280210][ T6470] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 127.300725][ T6434] (syz.4.934,6434,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.364357][ T6434] JBD2: Ignoring recovery information on journal [ 127.593226][ T6485] overlayfs: unrecognized mount option "\" or missing value [ 127.632668][ T6434] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 127.844516][ T27] audit: type=1326 audit(1769554762.401:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f33f9aeb9 code=0x7ffc0000 [ 127.892844][ T6496] overlayfs: missing 'lowerdir' [ 127.922906][ T27] audit: type=1326 audit(1769554762.441:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f7f33f9aeb9 code=0x7ffc0000 [ 127.927716][ T6491] loop1: detected capacity change from 0 to 4096 [ 128.016796][ T27] audit: type=1326 audit(1769554762.441:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f33f9aeb9 code=0x7ffc0000 [ 128.068520][ T4281] ocfs2: Unmounting device (7,4) on (node local) [ 128.133204][ T6491] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.182538][ T27] audit: type=1326 audit(1769554762.441:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f33f9aeb9 code=0x7ffc0000 [ 128.226854][ T6491] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 128.308872][ T6491] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 128.324032][ T6491] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.961: Failed to acquire dquot type 0 [ 128.588687][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 128.614736][ T6519] netlink: 'syz.2.971': attribute type 3 has an invalid length. [ 128.712272][ T6519] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.971'. [ 128.750002][ T6523] loop0: detected capacity change from 0 to 512 [ 128.811277][ T6525] loop1: detected capacity change from 0 to 1024 [ 128.820988][ T6523] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 128.874352][ T6523] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.972: iget: checksum invalid [ 128.940951][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 129.037866][ T32] hfsplus: b-tree write err: -5, ino 4 [ 129.227717][ T6541] tc_dump_action: action bad kind [ 129.458958][ T6555] netlink: 'syz.2.986': attribute type 12 has an invalid length. [ 129.576080][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.988'. [ 129.626849][ T4380] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.839406][ T4380] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 129.867196][ T4380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.896182][ T4380] usb 5-1: config 0 descriptor?? [ 129.930067][ T4380] cp210x 5-1:0.0: cp210x converter detected [ 130.049791][ T5977] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 130.083009][ T6575] loop2: detected capacity change from 0 to 256 [ 130.118934][ T6575] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x6f4cd389, utbl_chksum : 0xe619d30d) [ 130.185693][ T6549] loop1: detected capacity change from 0 to 40427 [ 130.248413][ T6549] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.259703][ T5977] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 130.288406][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.321619][ T5977] usb 4-1: Product: syz [ 130.336563][ T5977] usb 4-1: Manufacturer: syz [ 130.344235][ T4380] usb 5-1: cp210x converter now attached to ttyUSB0 [ 130.355062][ T5977] usb 4-1: SerialNumber: syz [ 130.376702][ T4380] usb 5-1: USB disconnect, device number 5 [ 130.426656][ T5977] usb 4-1: config 0 descriptor?? [ 130.446184][ T4380] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 130.459414][ T6549] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.485266][ T4380] cp210x 5-1:0.0: device disconnected [ 130.593473][ T6549] F2FS-fs (loop1): switch extent_cache option is not allowed [ 130.652142][ T5977] hso 4-1:0.0: Can't find BULK IN endpoint [ 130.666956][ T5977] usb-storage 4-1:0.0: USB Mass Storage device detected [ 130.855171][ T4380] usb 4-1: USB disconnect, device number 5 [ 131.152758][ T6608] overlayfs: conflicting options: userxattr,metacopy=on [ 131.473628][ T27] audit: type=1326 audit(1769554766.031:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8ef9aeb9 code=0x50000 [ 131.533721][ T27] audit: type=1326 audit(1769554766.071:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8ef9aeb9 code=0x50000 [ 131.583790][ T27] audit: type=1326 audit(1769554766.071:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8ef9aeb9 code=0x50000 [ 131.626115][ T27] audit: type=1326 audit(1769554766.071:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8ef9aeb9 code=0x50000 [ 131.722599][ T27] audit: type=1326 audit(1769554766.071:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8ef9aeb9 code=0x50000 [ 131.758774][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1021'. [ 131.776305][ T6633] loop4: detected capacity change from 0 to 8 [ 131.783538][ T6633] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 131.794818][ T27] audit: type=1326 audit(1769554766.071:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8ef9aeb9 code=0x50000 [ 131.801561][ T4653] udevd[4653]: incorrect cramfs checksum on /dev/loop4 [ 131.955449][ T4653] udevd[4653]: incorrect cramfs checksum on /dev/loop4 [ 132.167887][ T6642] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1027'. [ 132.851886][ T6663] loop1: detected capacity change from 0 to 4096 [ 132.875686][ T6663] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 132.888406][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.894780][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.980636][ T6675] loop4: detected capacity change from 0 to 256 [ 133.053928][ T6675] FAT-fs (loop4): Directory bread(block 64) failed [ 133.081521][ T6677] loop0: detected capacity change from 0 to 2048 [ 133.091200][ T6675] FAT-fs (loop4): Directory bread(block 65) failed [ 133.122558][ T6675] FAT-fs (loop4): Directory bread(block 66) failed [ 133.146046][ T6673] loop2: detected capacity change from 0 to 4096 [ 133.162420][ T6677] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.172983][ T6675] FAT-fs (loop4): Directory bread(block 67) failed [ 133.218408][ T6675] FAT-fs (loop4): Directory bread(block 68) failed [ 133.248608][ T6675] FAT-fs (loop4): Directory bread(block 69) failed [ 133.273289][ T6675] FAT-fs (loop4): Directory bread(block 70) failed [ 133.311504][ T6675] FAT-fs (loop4): Directory bread(block 71) failed [ 133.342069][ T6675] FAT-fs (loop4): Directory bread(block 72) failed [ 133.382240][ T6675] FAT-fs (loop4): Directory bread(block 73) failed [ 133.407948][ T6683] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.540322][ T6675] syz.4.1044: attempt to access beyond end of device [ 133.540322][ T6675] loop4: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 133.617321][ T6675] syz.4.1044: attempt to access beyond end of device [ 133.617321][ T6675] loop4: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 133.699000][ T27] kauditd_printk_skb: 68 callbacks suppressed [ 133.699014][ T27] audit: type=1800 audit(1769554768.261:107): pid=6675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1044" name="freezer.state" dev="loop4" ino=1048606 res=0 errno=0 [ 133.871284][ T6693] loop1: detected capacity change from 0 to 16 [ 133.927821][ T6693] erofs: (device loop1): mounted with root inode @ nid 36. [ 133.985562][ T6693] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 9895604650073 [ 134.014268][ T4287] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -20 in[4096, 0] out[8192] [ 134.028727][ T6693] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -20 in[4096, 0] out[4096] [ 134.067647][ T27] audit: type=1800 audit(1769554768.621:108): pid=6693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1054" name="file3" dev="loop1" ino=9895604650073 res=0 errno=0 [ 134.879157][ T6697] loop0: detected capacity change from 0 to 32768 [ 134.977765][ T6697] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 135.041164][ T4271] ocfs2: Unmounting device (7,0) on (node local) [ 135.361702][ T6721] loop1: detected capacity change from 0 to 32768 [ 135.465420][ T6721] ERROR: (device loop1): diWrite: ixpxd invalid [ 135.465420][ T6721] [ 135.511346][ T6727] loop2: detected capacity change from 0 to 32768 [ 135.564911][ T6721] ERROR: (device loop1): remounting filesystem as read-only [ 135.568876][ T6727] (syz.2.1069,6727,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.582604][ T6721] ERROR: (device loop1): txCommit: [ 135.582604][ T6721] [ 135.627684][ T6721] imap: ffff888056078000: 07ffffff 00000000 00000000 00000000 [ 135.637545][ T6727] (syz.2.1069,6727,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.654456][ T6721] imap: ffff888056078010: 00000004 00000002 00000000 00000000 [ 135.704006][ T6727] JBD2: Ignoring recovery information on journal [ 135.741050][ T6721] ERROR: (device loop1): diFree: inum = 64, iagno = 0, nextiag = 0 [ 135.741050][ T6721] [ 135.813843][ T6727] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 136.077336][ T6763] loop0: detected capacity change from 0 to 2048 [ 136.151167][ T4270] ocfs2: Unmounting device (7,2) on (node local) [ 136.164473][ T6763] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 136.258129][ T6763] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.558728][ T6771] netlink: 'syz.2.1091': attribute type 39 has an invalid length. [ 136.724731][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.764427][ T6751] loop4: detected capacity change from 0 to 32768 [ 136.810990][ T6751] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1081 (6751) [ 136.880122][ T6751] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 136.924496][ T6751] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 136.967915][ T6751] BTRFS info (device loop4): using free space tree [ 137.195777][ T6799] loop0: detected capacity change from 0 to 256 [ 137.261025][ T6767] loop1: detected capacity change from 0 to 40427 [ 137.325537][ T6767] F2FS-fs (loop1): invalid crc value [ 137.463383][ T6751] BTRFS info (device loop4): enabling ssd optimizations [ 137.482122][ T6767] F2FS-fs (loop1): Found nat_bits in checkpoint [ 137.568962][ T6751] BTRFS warning (device loop4: state M): 'nologreplay' is deprecated, use 'rescue=nologreplay' instead [ 137.641265][ T6751] BTRFS info (device loop4: state M): disabling log replay at mount time [ 137.662627][ T6767] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 137.685629][ T6751] BTRFS error (device loop4: state M): nologreplay must be used with ro mount option [ 137.711908][ T6767] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 137.870044][ T4281] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 138.146306][ T6832] loop0: detected capacity change from 0 to 512 [ 138.243099][ T6832] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.285158][ T6832] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 138.349374][ T6832] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 138.417553][ T6832] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 138.502824][ T6832] System zones: 0-2, 18-18, 34-34 [ 138.557965][ T6832] EXT4-fs (loop0): 1 truncate cleaned up [ 138.592381][ T6832] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 138.867562][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 139.002249][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.061584][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.068809][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.212573][ T27] audit: type=1326 audit(1769554773.771:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ba39aeb9 code=0x7ffc0000 [ 139.292104][ T27] audit: type=1326 audit(1769554773.811:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f45ba39aeb9 code=0x7ffc0000 [ 139.403354][ T27] audit: type=1326 audit(1769554773.811:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ba39aeb9 code=0x7ffc0000 [ 139.554645][ T27] audit: type=1326 audit(1769554773.811:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ba39aeb9 code=0x7ffc0000 [ 139.758536][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1133'. [ 140.256080][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1145'. [ 140.307845][ T6908] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1145'. [ 140.353466][ T6908] device vlan0 entered promiscuous mode [ 140.550623][ T6917] netlink: 'syz.4.1149': attribute type 13 has an invalid length. [ 140.585129][ T6918] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 141.300943][ T6954] syz.4.1168 uses obsolete (PF_INET,SOCK_PACKET) [ 141.542768][ T6967] loop0: detected capacity change from 0 to 8 [ 141.906567][ T6979] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 141.914431][ T6979] netlink: 'syz.0.1178': attribute type 3 has an invalid length. [ 141.954896][ T6979] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1178'. [ 142.016128][ T6979] NCSI netlink: No device for ifindex 52229 [ 142.059665][ T6981] loop2: detected capacity change from 0 to 4096 [ 142.101571][ T6981] ntfs3: loop2: MFT: r=b, expect seq=b instead of 1ff! [ 142.154948][ T6981] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 142.202573][ T6981] ntfs3: loop2: Failed to load $Extend. [ 142.687678][ T7013] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.273716][ T7033] [U] [ 143.277000][ T7033] [U] [ 143.279729][ T7033] [U] [ 143.282528][ T7033] [U] [ 143.321174][ T7003] loop2: detected capacity change from 0 to 32768 [ 143.325400][ T7033] [U] [ 143.330356][ T7033] [U] [ 143.333057][ T7033] [U] [ 143.335763][ T7033] [U] [ 143.353836][ T7033] [U] [ 143.356590][ T7033] [U] [ 143.359296][ T7033] [U] [ 143.398049][ T7043] loop4: detected capacity change from 0 to 512 [ 143.422854][ T7043] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 143.434257][ T7032] [U] [ 143.463219][ T7003] XFS (loop2): Mounting V5 Filesystem [ 143.525233][ T7043] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816e11d, mo2=0002] [ 143.552987][ T92] block nbd0: Attempted send on invalid socket [ 143.559669][ T92] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.571661][ T92] block nbd0: Attempted send on invalid socket [ 143.578951][ T92] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.588520][ T7056] Mount JFS Failure: -5 [ 143.592794][ T7056] jfs_mount failed w/return code = -5 [ 143.626562][ T7043] System zones: 1-12 [ 143.631538][ T7043] EXT4-fs (loop4): orphan cleanup on readonly fs [ 143.663409][ T7058] netlink: 'syz.0.1216': attribute type 1 has an invalid length. [ 143.671949][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1216'. [ 143.682176][ T7043] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1211: bg 0: block 361: padding at end of block bitmap is not set [ 143.707874][ T7003] XFS (loop2): Ending clean mount [ 143.738910][ T7043] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 143.792047][ T7043] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.1211: attempt to clear invalid blocks 33619980 len 1 [ 143.864216][ T7043] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1211: invalid indirect mapped block 1811939328 (level 0) [ 143.904912][ T4270] XFS (loop2): Unmounting Filesystem [ 143.910857][ T7043] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1211: invalid indirect mapped block 2 (level 2) [ 143.912405][ T7063] loop0: detected capacity change from 0 to 512 [ 143.987604][ T7043] EXT4-fs (loop4): 1 truncate cleaned up [ 143.993397][ T7043] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.025238][ T7063] EXT4-fs: Ignoring removed bh option [ 144.063647][ T7043] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 144.074972][ T7063] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.096538][ T7063] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 144.157432][ T7063] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 144.211840][ T7063] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 144.253089][ T7063] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 144.278372][ T7063] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1218: bg 0: block 353: padding at end of block bitmap is not set [ 144.315824][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 144.491005][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 145.885372][ T7126] loop1: detected capacity change from 0 to 16 [ 145.918962][ T7126] erofs: (device loop1): erofs_init_device: empty device tag @ pos 0 [ 145.972471][ T7101] loop0: detected capacity change from 0 to 32768 [ 146.014993][ T7126] erofs: (device loop1): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 146.063839][ T7101] jfs_rename: dtInsert returned -EIO [ 146.092532][ T7126] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 146.166108][ T7126] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 146.297487][ T7138] loop4: detected capacity change from 0 to 512 [ 146.342912][ T7138] EXT4-fs: Ignoring removed i_version option [ 146.358317][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 146.380340][ T7138] EXT4-fs: Ignoring removed bh option [ 146.423410][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 146.463984][ T7138] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 146.476535][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 146.496934][ T7138] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.513335][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 146.561861][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 146.598892][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 146.608393][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 146.618979][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 146.628303][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 146.645490][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 146.770700][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 146.842828][ T7154] loop2: detected capacity change from 0 to 512 [ 146.879446][ T7156] loop1: detected capacity change from 0 to 256 [ 146.981223][ T7156] FAT-fs (loop1): Directory bread(block 64) failed [ 147.033765][ T7156] FAT-fs (loop1): Directory bread(block 65) failed [ 147.072277][ T7156] FAT-fs (loop1): Directory bread(block 66) failed [ 147.086486][ T7156] FAT-fs (loop1): Directory bread(block 67) failed [ 147.093674][ T7156] FAT-fs (loop1): Directory bread(block 68) failed [ 147.186744][ T7156] FAT-fs (loop1): Directory bread(block 69) failed [ 147.193415][ T7156] FAT-fs (loop1): Directory bread(block 70) failed [ 147.266136][ T7156] FAT-fs (loop1): Directory bread(block 71) failed [ 147.296969][ T7156] FAT-fs (loop1): Directory bread(block 72) failed [ 147.325293][ T7156] FAT-fs (loop1): Directory bread(block 73) failed [ 147.360021][ T7174] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 147.416693][ T7174] CIFS mount error: No usable UNC path provided in device string! [ 147.416693][ T7174] [ 147.467002][ T7174] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 147.930831][ T4321] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.128245][ T4321] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 148.153742][ T7204] binder: 7203:7204 ioctl c018620b 0 returned -14 [ 148.168498][ T4321] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 148.188018][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.196062][ T4321] usb 2-1: Product: syz [ 148.231874][ T4321] usb 2-1: Manufacturer: syz [ 148.245188][ T4321] usb 2-1: SerialNumber: syz [ 148.290850][ T4321] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 148.415956][ T4321] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 148.632994][ T7182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.655305][ T7182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.697028][ T4348] usb 2-1: USB disconnect, device number 5 [ 149.058536][ T7240] loop3: detected capacity change from 0 to 1024 [ 149.290605][ T4359] hfsplus: b-tree write err: -5, ino 4 [ 149.528939][ T4321] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 149.548184][ T4321] ath9k_htc: Failed to initialize the device [ 149.577002][ T4348] usb 2-1: ath9k_htc: USB layer deinitialized [ 149.629177][ T27] audit: type=1326 audit(1769554784.191:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f859aeb9 code=0x7ffc0000 [ 149.696450][ T27] audit: type=1326 audit(1769554784.191:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f859aeb9 code=0x7ffc0000 [ 149.746503][ T4257] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 149.758855][ T27] audit: type=1326 audit(1769554784.221:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa9f859aeb9 code=0x7ffc0000 [ 149.811955][ T27] audit: type=1326 audit(1769554784.221:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f859aeb9 code=0x7ffc0000 [ 149.871136][ T27] audit: type=1326 audit(1769554784.221:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f859aeb9 code=0x7ffc0000 [ 149.893396][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.939230][ T4257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 149.966216][ T4257] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 150.041922][ T4257] usb 5-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 150.069610][ T4257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.089830][ T4257] usb 5-1: Product: syz [ 150.105600][ T4257] usb 5-1: Manufacturer: syz [ 150.115727][ T4257] usb 5-1: SerialNumber: syz [ 150.139593][ T4257] usb 5-1: config 0 descriptor?? [ 150.249213][ T7287] loop0: detected capacity change from 0 to 128 [ 150.289666][ T7287] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 150.306592][ T4380] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 150.328067][ T7287] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.414495][ T7287] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 150.445387][ T7287] UDF-fs: error (device loop0): udf_count_free_bitmap: udf_count_free failed [ 150.519307][ T4380] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 150.546439][ T4380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.580977][ T4380] usb 3-1: config 0 descriptor?? [ 150.621309][ T4349] usb 5-1: USB disconnect, device number 6 [ 150.630090][ T4380] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 150.742901][ T4271] UDF-fs: error (device loop0): udf_read_inode: (ino 104) failed !bh [ 150.760414][ T4271] UDF-fs: error (device loop0): udf_read_inode: (ino 104) failed !bh [ 150.934213][ T7302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.032104][ T4380] gp8psk: usb in 128 operation failed. [ 151.046577][ T4380] gp8psk: usb in 137 operation failed. [ 151.052094][ T4380] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 151.063729][ T4380] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 151.075266][ T4380] usb 3-1: USB disconnect, device number 6 [ 151.356285][ T4359] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.452018][ T4359] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.514693][ T4359] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.648648][ T4359] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.557673][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.568719][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.577130][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.591743][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.600684][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.607945][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.865317][ T7367] netlink: 'syz.1.1362': attribute type 33 has an invalid length. [ 152.906710][ T7367] __nla_validate_parse: 45 callbacks suppressed [ 152.906727][ T7367] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1362'. [ 153.429523][ T7391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1369'. [ 153.446021][ T7393] netlink: 'syz.2.1370': attribute type 11 has an invalid length. [ 153.452142][ T7395] loop3: detected capacity change from 0 to 512 [ 153.458813][ T7391] IPv6: Can't replace route, no match found [ 153.486280][ T7395] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 153.534786][ T7395] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816e11d, mo2=0002] [ 153.549730][ T7395] System zones: 1-12 [ 153.561560][ T7395] EXT4-fs (loop3): orphan cleanup on readonly fs [ 153.579274][ T7395] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1371: bg 0: block 361: padding at end of block bitmap is not set [ 153.601820][ T7395] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 153.660999][ T7395] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1371: attempt to clear invalid blocks 33619980 len 1 [ 153.681300][ T7395] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1371: invalid indirect mapped block 1811939328 (level 0) [ 153.699934][ T7395] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1371: invalid indirect mapped block 2 (level 2) [ 153.720963][ T7395] EXT4-fs (loop3): 1 truncate cleaned up [ 153.727074][ T7395] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 153.752907][ T7395] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 153.905571][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 153.924334][ T7401] device wlan0 entered promiscuous mode [ 153.971798][ T7401] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 154.168093][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 154.207464][ T7410] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1379'. [ 154.284367][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 154.647207][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 154.744725][ T7354] chnl_net:caif_netlink_parms(): no params data found [ 154.922141][ T7438] loop1: detected capacity change from 0 to 1024 [ 155.159339][ T51] hfsplus: b-tree write err: -5, ino 4 [ 155.204590][ T7449] netlink: 'syz.4.1395': attribute type 21 has an invalid length. [ 155.272383][ T7449] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1395'. [ 155.348122][ T7459] loop3: detected capacity change from 0 to 512 [ 155.394306][ T7459] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.455724][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.502937][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.526016][ T7354] device bridge_slave_0 entered promiscuous mode [ 155.741086][ T7466] loop4: detected capacity change from 0 to 256 [ 155.773375][ T7466] exfat: Deprecated parameter 'namecase' [ 155.837263][ T7466] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 155.973425][ T7354] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.992104][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.037555][ T7354] device bridge_slave_1 entered promiscuous mode [ 156.159229][ T7447] loop2: detected capacity change from 0 to 32768 [ 156.265019][ T7447] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 156.265019][ T7447] [ 156.313089][ T7447] ialloc: diAlloc returned -5! [ 156.407220][ T7354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.448361][ T7354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.556548][ T4257] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.596961][ T7490] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma? [ 156.613295][ T4359] device hsr_slave_0 left promiscuous mode [ 156.646137][ T4359] device hsr_slave_1 left promiscuous mode [ 156.669801][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.696528][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.726756][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 156.727813][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.746686][ T4257] usb 5-1: Using ep0 maxpacket: 16 [ 156.758573][ T4257] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 156.791747][ T4257] usb 5-1: config 0 has no interface number 0 [ 156.800718][ T4257] usb 5-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 156.822494][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.837275][ T4257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.858027][ T4257] usb 5-1: Product: syz [ 156.862270][ T4257] usb 5-1: Manufacturer: syz [ 156.876422][ T4257] usb 5-1: SerialNumber: syz [ 156.900444][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.920519][ T4257] usb 5-1: config 0 descriptor?? [ 156.937937][ T4257] usb-storage 5-1:0.102: USB Mass Storage device detected [ 156.959289][ T4359] device bridge_slave_0 left promiscuous mode [ 156.965616][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.988307][ T7500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1413'. [ 157.006190][ T4257] usb-storage 5-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 157.024508][ T4257] usb-storage 5-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 157.024508][ T4257] Please send a copy of this message to and [ 157.049921][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.176631][ T7507] qrtr: Invalid version 0 [ 157.189724][ T4257] usb 5-1: USB disconnect, device number 7 [ 157.238054][ T4359] device veth1_macvtap left promiscuous mode [ 157.252991][ T4359] device veth0_macvtap left promiscuous mode [ 157.281083][ T4359] device veth1_vlan left promiscuous mode [ 157.305974][ T4359] device veth0_vlan left promiscuous mode [ 157.397906][ T7509] loop2: detected capacity change from 0 to 8192 [ 157.484331][ T7509] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 157.503152][ T7509] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 157.534858][ T7509] REISERFS (device loop2): using ordered data mode [ 157.559613][ T7509] reiserfs: using flush barriers [ 157.575593][ T7509] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.629672][ T4359] bond2 (unregistering): Released all slaves [ 157.673287][ T7509] REISERFS (device loop2): checking transaction log (loop2) [ 157.688893][ T4359] bond1 (unregistering): Released all slaves [ 157.713223][ T7509] REISERFS (device loop2): Using r5 hash to sort names [ 157.803518][ T7509] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 157.895064][ C1] sd 0:0:1:0: [sda] tag#10145 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 157.905732][ C1] sd 0:0:1:0: [sda] tag#10145 CDB: Read(6) 08 00 00 00 03 44 [ 158.382543][ T4359] team0 (unregistering): Port device macvlan0 removed [ 158.814998][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 158.947886][ T4359] team0 (unregistering): Port device team_slave_1 removed [ 159.011278][ T4359] team0 (unregistering): Port device team_slave_0 removed [ 159.069799][ T4359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.133735][ T4359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.495737][ T4359] bond0 (unregistering): Released all slaves [ 159.591246][ T7354] team0: Port device team_slave_0 added [ 159.635960][ T7354] team0: Port device team_slave_1 added [ 159.783382][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.821652][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.927147][ T7354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.000596][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.029054][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.113581][ T7568] loop3: detected capacity change from 0 to 4096 [ 160.121131][ T7574] netlink: 1033 bytes leftover after parsing attributes in process `syz.4.1449'. [ 160.133717][ T7354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.174668][ T7568] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 160.268207][ T7354] device hsr_slave_0 entered promiscuous mode [ 160.272175][ T7568] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 160.306878][ T7354] device hsr_slave_1 entered promiscuous mode [ 160.340735][ T7354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.380080][ T7354] Cannot create hsr debugfs directory [ 160.697667][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 160.713672][ T7579] loop4: detected capacity change from 0 to 8192 [ 160.804056][ T7579] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 160.886672][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 160.906930][ T7579] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 160.916285][ T7579] REISERFS (device loop4): using ordered data mode [ 161.006537][ T7579] reiserfs: using flush barriers [ 161.029643][ T7579] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.041907][ T7354] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 161.123076][ T7354] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.156925][ T7579] REISERFS (device loop4): checking transaction log (loop4) [ 161.169216][ T7354] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 161.223327][ T7579] REISERFS (device loop4): Using r5 hash to sort names [ 161.229313][ T7354] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.236690][ T7579] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 161.264369][ T7602] netlink: 'syz.1.1460': attribute type 21 has an invalid length. [ 161.276582][ T7602] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1460'. [ 161.715927][ T7354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.818095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.838745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.872752][ T7354] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.908591][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.937386][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.977793][ T4359] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.984957][ T4359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.078395][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.156985][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.171123][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.197505][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.204718][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.233471][ T7644] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 162.251564][ T7639] loop1: detected capacity change from 0 to 4096 [ 162.262127][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.309345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.317711][ T7639] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 162.357230][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.377830][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.453075][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.482324][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.485187][ T7639] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 162.547363][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.562839][ T7639] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 162.585906][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.608563][ T7639] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 162.617282][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.644340][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.673828][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.709780][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.865699][ T4298] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 162.877113][ T4269] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 163.229880][ T7675] loop3: detected capacity change from 0 to 256 [ 163.292219][ T7675] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.368229][ T7675] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 163.417517][ T7675] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 163.844383][ T7695] loop1: detected capacity change from 0 to 512 [ 163.884334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.892575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.934438][ T7354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.941466][ T7699] loop2: detected capacity change from 0 to 256 [ 163.952987][ T7695] EXT4-fs (loop1): Test dummy encryption mode enabled [ 163.991624][ T7695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 164.074022][ T7699] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 164.116766][ T7695] System zones: 1-12 [ 164.137053][ T7695] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.1495: Directory hole found for htree index block 0 [ 164.175653][ T7695] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 164.184389][ T7695] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.1495: Directory hole found for htree index block 0 [ 164.202579][ T7695] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 164.214934][ T7695] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 164.337961][ T7695] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 164.491290][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 165.175375][ T7747] loop1: detected capacity change from 0 to 64 [ 165.261425][ T7754] netlink: 'syz.2.1514': attribute type 2 has an invalid length. [ 165.479427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.534248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.629217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.647412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.669542][ T7354] device veth0_vlan entered promiscuous mode [ 165.736653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.759596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.794929][ T7354] device veth1_vlan entered promiscuous mode [ 165.891771][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.917012][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.927630][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.943184][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.990270][ T7354] device veth0_macvtap entered promiscuous mode [ 166.038955][ T7354] device veth1_macvtap entered promiscuous mode [ 166.126077][ T7354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.152174][ T7354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.190395][ T7354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.226327][ T7354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.246722][ T7354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.295417][ T7354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.323561][ T7354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.344468][ T7354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.363401][ T7797] loop1: detected capacity change from 0 to 1024 [ 166.398573][ T7354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.420817][ T7354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.501824][ T7354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.541344][ T7354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.596038][ T7354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.616404][ T7354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.645758][ T7354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.663018][ T7354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.717251][ T7354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.743301][ T7354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.844260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.865635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.892156][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'. [ 166.904157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.932305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.956165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.014060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.057970][ T7354] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.094565][ T7354] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.124689][ T7354] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.222602][ T7354] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.296089][ T7801] loop3: detected capacity change from 0 to 32768 [ 167.390084][ T7827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1542'. [ 167.486098][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.520072][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.638287][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.697590][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.714572][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.789737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.220759][ T7847] loop5: detected capacity change from 0 to 4096 [ 168.284036][ T7847] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 168.416693][ T4348] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 168.616484][ T4348] usb 2-1: Using ep0 maxpacket: 16 [ 168.636708][ T4348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 168.675190][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1557'. [ 168.685477][ T27] audit: type=1326 audit(1769554803.231:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.5.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84699aeb9 code=0x7ffc0000 [ 168.721381][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1557'. [ 168.734190][ T27] audit: type=1326 audit(1769554803.251:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.5.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fd84699aeb9 code=0x7ffc0000 [ 168.762979][ T4348] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 168.778183][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1557'. [ 168.794097][ T4348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.812872][ T4348] usb 2-1: Product: syz [ 168.855666][ T4348] usb 2-1: Manufacturer: syz [ 168.865818][ T4348] usb 2-1: SerialNumber: syz [ 168.875943][ T27] audit: type=1326 audit(1769554803.251:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.5.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84699aeb9 code=0x7ffc0000 [ 168.921861][ T4348] usb 2-1: config 0 descriptor?? [ 168.974452][ T4348] hub 2-1:0.0: bad descriptor, ignoring hub [ 168.985432][ T7877] netlink: 'syz.3.1561': attribute type 21 has an invalid length. [ 168.996447][ T4348] hub: probe of 2-1:0.0 failed with error -5 [ 169.002634][ T27] audit: type=1326 audit(1769554803.251:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.5.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84699aeb9 code=0x7ffc0000 [ 169.030112][ T7877] netlink: 'syz.3.1561': attribute type 1 has an invalid length. [ 169.053024][ T4348] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 169.117583][ T27] audit: type=1326 audit(1769554803.361:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ba39aeb9 code=0x7ffc0000 [ 169.173941][ T27] audit: type=1326 audit(1769554803.371:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f45ba39aeb9 code=0x7ffc0000 [ 169.303729][ T27] audit: type=1326 audit(1769554803.371:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ba39aeb9 code=0x7ffc0000 [ 169.335365][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 169.409803][ T27] audit: type=1326 audit(1769554803.371:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ba39aeb9 code=0x7ffc0000 [ 169.575909][ T7898] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1570'. [ 170.173782][ T7920] netlink: 'syz.3.1578': attribute type 1 has an invalid length. [ 170.208304][ T7890] loop5: detected capacity change from 0 to 32768 [ 170.316416][ T7890] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 170.326551][ T4380] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.436950][ T27] audit: type=1400 audit(1769554804.991:126): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=7926 comm="syz.3.1580" [ 170.453608][ T7890] OCFS2: ERROR (device loop5): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 170.526663][ T7890] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 170.573057][ T7890] OCFS2: File system is now read-only. [ 170.586669][ T4380] usb 3-1: Using ep0 maxpacket: 16 [ 170.594996][ T7890] (syz.5.1565,7890,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 170.605649][ T4380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.646527][ T4380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.706853][ T4380] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.744387][ T4380] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 170.815026][ T4380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.839838][ T4380] usb 3-1: config 0 descriptor?? [ 170.876544][ T4380] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 170.923882][ T7354] ocfs2: Unmounting device (7,5) on (node local) [ 171.012131][ T4379] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 171.153378][ T7954] netlink: 'syz.1.1590': attribute type 11 has an invalid length. [ 171.236557][ T7954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1590'. [ 171.575201][ T7969] netlink: 'syz.5.1596': attribute type 7 has an invalid length. [ 171.597176][ T7969] netlink: 'syz.5.1596': attribute type 8 has an invalid length. [ 171.996544][ T5762] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 172.073175][ T7989] loop5: detected capacity change from 0 to 2048 [ 172.118131][ T7989] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 172.170618][ T7993] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.196603][ T5762] usb 4-1: Using ep0 maxpacket: 8 [ 172.205967][ T5762] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 172.236017][ T7995] comedi comedi0: pcl724: I/O port conflict (0x9,4) [ 172.259147][ T5762] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 172.281477][ T5762] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 172.301957][ T5762] usb 4-1: Product: syz [ 172.306243][ T5762] usb 4-1: Manufacturer: syz [ 172.330742][ T5762] usb 4-1: SerialNumber: syz [ 172.425474][ T7989] syz.5.1605 (7989) used greatest stack depth: 19472 bytes left [ 172.580490][ T5762] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 172.599223][ T5762] usb 4-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 172.622190][ T5762] usb 4-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 172.642672][ T5762] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 172.792077][ T5762] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 172.802991][ T4380] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 172.821739][ T5762] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 172.864883][ T5762] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 172.887808][ T5762] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 172.933415][ T5762] usb 4-1: USB disconnect, device number 6 [ 172.981767][ T5762] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 173.008116][ T4380] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.033309][ T4380] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.052780][ T5762] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 173.078660][ T4380] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 173.093184][ T5762] visor 4-1:1.0: device disconnected [ 173.112453][ T4380] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.153366][ T4380] usb 6-1: config 0 descriptor?? [ 173.282752][ T8029] loop1: detected capacity change from 0 to 256 [ 173.324486][ T5757] usb 3-1: USB disconnect, device number 7 [ 173.377367][ T4380] usb 6-1: USB disconnect, device number 2 [ 173.417969][ T8029] FAT-fs (loop1): Directory bread(block 64) failed [ 173.426795][ T8034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1621'. [ 173.448459][ T4534] udevd[4534]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.453496][ T8029] FAT-fs (loop1): Directory bread(block 65) failed [ 173.572165][ T8029] FAT-fs (loop1): Directory bread(block 66) failed [ 173.604044][ T8029] FAT-fs (loop1): Directory bread(block 67) failed [ 173.640663][ T8029] FAT-fs (loop1): Directory bread(block 68) failed [ 173.661694][ T8029] FAT-fs (loop1): Directory bread(block 69) failed [ 173.674056][ T8029] FAT-fs (loop1): Directory bread(block 70) failed [ 173.703252][ T8029] FAT-fs (loop1): Directory bread(block 71) failed [ 173.717591][ T8029] FAT-fs (loop1): Directory bread(block 72) failed [ 173.734459][ T8029] FAT-fs (loop1): Directory bread(block 73) failed [ 173.750648][ T22] usb 2-1: USB disconnect, device number 6 [ 174.898519][ T8089] ufs: You didn't specify the type of your ufs filesystem [ 174.898519][ T8089] [ 174.898519][ T8089] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 174.898519][ T8089] [ 174.898519][ T8089] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 175.137845][ T8089] ufs: ufstype=old is supported read-only [ 175.147514][ T52] block nbd2: Attempted send on invalid socket [ 175.153727][ T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.256518][ T8102] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1652'. [ 175.475447][ T8104] loop1: detected capacity change from 0 to 4096 [ 175.624037][ T8104] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 175.637292][ T8104] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 176.029695][ T8094] loop5: detected capacity change from 0 to 32768 [ 176.113813][ T8094] JBD2: Ignoring recovery information on journal [ 176.146534][ T5757] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 176.205909][ T8094] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 176.314263][ T8139] CIFS mount error: No usable UNC path provided in device string! [ 176.314263][ T8139] [ 176.369231][ T8139] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 176.371968][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 176.431646][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 176.472079][ T5757] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 176.499811][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.528407][ T5757] usb 3-1: Product: syz [ 176.567078][ T5757] usb 3-1: Manufacturer: syz [ 176.571738][ T5757] usb 3-1: SerialNumber: syz [ 176.598039][ T5757] usb 3-1: config 0 descriptor?? [ 176.628320][ T7354] ocfs2: Unmounting device (7,5) on (node local) [ 176.811595][ T5757] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 177.032905][ T5757] usb 3-1: USB disconnect, device number 8 [ 177.735789][ T8182] loop5: detected capacity change from 0 to 4096 [ 177.743605][ T8169] loop1: detected capacity change from 0 to 32768 [ 177.787498][ T8168] loop4: detected capacity change from 0 to 32768 [ 177.827843][ T8195] loop2: detected capacity change from 0 to 16 [ 177.841135][ T8169] XFS (loop1): Mounting V5 Filesystem [ 177.854221][ T8195] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 177.871730][ T8168] XFS (loop4): Mounting V5 Filesystem [ 177.873513][ T8182] ntfs: volume version 3.1. [ 177.964280][ T5730] udevd[5730]: incorrect cramfs checksum on /dev/loop2 [ 177.988996][ T5730] udevd[5730]: incorrect cramfs checksum on /dev/loop2 [ 178.011410][ T8169] XFS (loop1): Ending clean mount [ 178.015128][ T5730] udevd[5730]: incorrect cramfs checksum on /dev/loop2 [ 178.042626][ T8168] XFS (loop4): Ending clean mount [ 178.075024][ T8169] XFS (loop1): Quotacheck needed: Please wait. [ 178.115187][ T8182] ntfs: (device loop5): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 178.171031][ T8169] XFS (loop1): Quotacheck: Done. [ 178.316241][ T8212] netlink: 'syz.3.1691': attribute type 12 has an invalid length. [ 178.371506][ T4281] XFS (loop4): Unmounting Filesystem [ 178.379710][ T8212] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 178.442992][ T4269] XFS (loop1): Unmounting Filesystem [ 179.304236][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1692'. [ 179.332787][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1692'. [ 179.342296][ T8231] netlink: 'syz.4.1692': attribute type 6 has an invalid length. [ 179.520826][ T8214] loop3: detected capacity change from 0 to 32768 [ 179.585519][ T8214] find_entry called with index >= next_index [ 179.603930][ T8214] find_entry called with index >= next_index [ 179.612359][ T8214] find_entry called with index >= next_index [ 179.921957][ T8256] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1713'. [ 180.019732][ T8262] syz.2.1716 uses old SIOCAX25GETINFO [ 180.171621][ T8266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1718'. [ 180.423305][ T8274] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.540347][ T8283] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 180.752731][ T8293] netlink: 'syz.1.1729': attribute type 2 has an invalid length. [ 180.836171][ T8289] loop5: detected capacity change from 0 to 4096 [ 180.921890][ T8289] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 181.046619][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 181.052737][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 181.171045][ T8310] tmpfs: Bad value for 'mpol' [ 181.270405][ T7354] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 181.801101][ T8338] loop2: detected capacity change from 0 to 256 [ 181.901066][ T8338] FAT-fs (loop2): Directory bread(block 64) failed [ 181.929658][ T8338] FAT-fs (loop2): Directory bread(block 65) failed [ 181.962880][ T8338] FAT-fs (loop2): Directory bread(block 66) failed [ 181.995390][ T8338] FAT-fs (loop2): Directory bread(block 67) failed [ 182.040051][ T8338] FAT-fs (loop2): Directory bread(block 68) failed [ 182.057051][ T8338] FAT-fs (loop2): Directory bread(block 69) failed [ 182.063874][ T8338] FAT-fs (loop2): Directory bread(block 70) failed [ 182.071572][ T8338] FAT-fs (loop2): Directory bread(block 71) failed [ 182.080576][ T8338] FAT-fs (loop2): Directory bread(block 72) failed [ 182.087909][ T8338] FAT-fs (loop2): Directory bread(block 73) failed [ 182.131722][ T4380] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 182.316570][ T4257] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 182.335389][ T4380] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.345246][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'. [ 182.351732][ T4380] usb 5-1: config 7 has an invalid interface number: 29 but max is 0 [ 182.375835][ T4380] usb 5-1: config 7 has no interface number 0 [ 182.383351][ T4380] usb 5-1: config 7 interface 29 altsetting 1 endpoint 0x1 has invalid maxpacket 112, setting to 8 [ 182.414785][ T4380] usb 5-1: config 7 interface 29 has no altsetting 0 [ 182.435713][ T4380] usb 5-1: string descriptor 0 read error: -22 [ 182.448615][ T4380] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=a2.36 [ 182.484631][ T4380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.502894][ T8362] comedi comedi3: dmm32at: I/O port conflict (0xffffffff80004e26,16) [ 182.520295][ T4257] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 182.522442][ T8360] loop2: detected capacity change from 0 to 4096 [ 182.536519][ T4257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.546604][ T4380] i2c-tiny-usb 5-1:7.29: version a2.36 found at bus 005 address 008 [ 182.553083][ T4257] usb 4-1: Product: syz [ 182.582947][ T4257] usb 4-1: Manufacturer: syz [ 182.599940][ T4257] usb 4-1: SerialNumber: syz [ 182.624113][ T4257] usb 4-1: config 0 descriptor?? [ 182.661676][ T4257] gspca_main: sq930x-2.14.0 probing 2770:930c [ 182.687064][ T8360] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 182.693387][ T8360] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 182.914666][ T4380] (null): failure reading functionality [ 182.930079][ T4380] i2c i2c-1: failure reading functionality [ 182.976875][ T4380] i2c i2c-1: connected i2c-tiny-usb device [ 183.001890][ T4380] usb 5-1: USB disconnect, device number 8 [ 183.075389][ T4257] gspca_sq930x: ucbus_write failed -71 [ 183.223678][ T8382] vivid-000: ================= START STATUS ================= [ 183.262768][ T8382] vivid-000: Generate PTS: true [ 183.316806][ T4257] gspca_sq930x: Sensor ov9630 not yet treated [ 183.317256][ T8382] vivid-000: Generate SCR: true [ 183.324239][ T4257] sq930x: probe of 4-1:0.0 failed with error -22 [ 183.355962][ T4257] usb 4-1: USB disconnect, device number 7 [ 183.365794][ T8382] tpg source WxH: 320x180 (R'G'B) [ 183.407535][ T8382] tpg field: 1 [ 183.410992][ T8382] tpg crop: 320x180@0x0 [ 183.427761][ T8382] tpg compose: 320x180@0x0 [ 183.444643][ T8382] tpg colorspace: 3 [ 183.452014][ T8382] tpg transfer function: 5/0 [ 183.460816][ T8382] tpg quantization: 2/0 [ 183.465039][ T8382] tpg RGB range: 0/2 [ 183.471170][ T8382] vivid-000: ================== END STATUS ================== [ 183.504169][ T27] audit: type=1326 audit(1769554818.061:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8389 comm="syz.2.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8ef9aeb9 code=0x7ffc0000 [ 183.526433][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.594975][ T27] audit: type=1326 audit(1769554818.071:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8389 comm="syz.2.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f8d8ef9aeb9 code=0x7ffc0000 [ 183.671454][ T27] audit: type=1326 audit(1769554818.071:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8389 comm="syz.2.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8ef9aeb9 code=0x7ffc0000 [ 183.725897][ T8398] capability: warning: `syz.5.1777' uses 32-bit capabilities (legacy support in use) [ 183.732295][ T8396] loop2: detected capacity change from 0 to 2048 [ 183.764019][ T27] audit: type=1326 audit(1769554818.071:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8389 comm="syz.2.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8ef9aeb9 code=0x7ffc0000 [ 183.793091][ T8394] loop4: detected capacity change from 0 to 4096 [ 183.835298][ T8396] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.982046][ T8394] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 184.008085][ T8394] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 184.174249][ T8406] loop3: detected capacity change from 0 to 4096 [ 184.243299][ T8406] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 184.532085][ T8423] netlink: 'syz.1.1790': attribute type 10 has an invalid length. [ 184.607206][ T8423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1790'. [ 184.660872][ T8423] device dummy0 entered promiscuous mode [ 184.697662][ T8423] bridge0: port 3(dummy0) entered blocking state [ 184.726957][ T8423] bridge0: port 3(dummy0) entered disabled state [ 185.326627][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1800'. [ 185.718294][ T8429] loop5: detected capacity change from 0 to 32768 [ 185.955140][ T8429] XFS (loop5): Mounting V5 Filesystem [ 186.053359][ T8429] XFS (loop5): Ending clean mount [ 186.146293][ T8491] loop2: detected capacity change from 0 to 8192 [ 186.273209][ T7354] XFS (loop5): Unmounting Filesystem [ 186.280243][ T8491] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 186.305095][ T8491] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 186.315506][ T8491] REISERFS (device loop2): using ordered data mode [ 186.322260][ T8491] reiserfs: using flush barriers [ 186.328902][ T8491] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 186.346540][ T8491] REISERFS (device loop2): checking transaction log (loop2) [ 186.362135][ T8491] REISERFS (device loop2): Using r5 hash to sort names [ 186.376148][ T8491] reiserfs: enabling write barrier flush mode [ 186.440738][ T8491] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 186.525660][ T8491] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 186.566428][ T8491] REISERFS (device loop2): Remounting filesystem read-only [ 186.606780][ T8491] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 186.673033][ T8491] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 186.729288][ T8491] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 186.776588][ T8491] REISERFS error (device loop2): zam-7001 reiserfs_find_entry: io error [ 186.805441][ T8491] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 186.873789][ T8491] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 186.906674][ T8491] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 186.985158][ T8491] REISERFS warning (device loop2): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 186.998112][ T8521] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1825'. [ 187.153243][ T4270] ------------[ cut here ]------------ [ 187.159007][ T4270] kernel BUG at fs/reiserfs/journal.c:1916! [ 187.206683][ T4270] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 187.212807][ T4270] CPU: 0 PID: 4270 Comm: syz-executor Not tainted syzkaller #0 [ 187.220378][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.230533][ T4270] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 187.236372][ T4270] Code: b8 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 28 3a b8 ff e9 f9 fc ff ff e8 3e 4f 67 ff <0f> 0b e8 37 4f 67 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 187.256166][ T4270] RSP: 0018:ffffc900045e7b00 EFLAGS: 00010293 [ 187.262251][ T4270] RAX: ffffffff821b2332 RBX: 1ffff920008bcf64 RCX: ffff88807c161dc0 [ 187.270240][ T4270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.278224][ T4270] RBP: ffffc900045e7bf8 R08: ffffc900045e7b77 R09: ffffc900045e7b40 [ 187.286388][ T4270] R10: dffffc0000000000 R11: fffff520008bcf6f R12: ffffc9000d9af000 [ 187.294373][ T4270] R13: dffffc0000000000 R14: ffff8880783ea678 R15: 0000000000000000 [ 187.302365][ T4270] FS: 0000555585bcc500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 187.311399][ T4270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.318028][ T4270] CR2: 00007fff98bc8188 CR3: 000000005c575000 CR4: 00000000003506f0 [ 187.326024][ T4270] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 187.334025][ T4270] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 187.342012][ T4270] Call Trace: [ 187.345324][ T4270] [ 187.348263][ T4270] ? journal_release+0x30/0x30 [ 187.348762][ T8500] loop4: detected capacity change from 0 to 32768 [ 187.353035][ T4270] journal_release+0x1b/0x30 [ 187.364314][ T4270] reiserfs_put_super+0x267/0x510 [ 187.369478][ T4270] ? hook_inode_free_security+0xa0/0xa0 [ 187.375055][ T4270] ? evict_inodes+0x642/0x6a0 [ 187.379761][ T4270] ? reiserfs_dirty_inode+0x260/0x260 [ 187.385178][ T4270] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 187.390851][ T4270] ? reiserfs_dirty_inode+0x260/0x260 [ 187.396255][ T4270] generic_shutdown_super+0x130/0x340 [ 187.401658][ T4270] kill_block_super+0x7c/0xe0 [ 187.406358][ T4270] deactivate_locked_super+0x93/0xf0 [ 187.411678][ T4270] cleanup_mnt+0x42c/0x4b0 [ 187.416131][ T4270] ? lockdep_hardirqs_on+0x94/0x140 [ 187.421357][ T4270] task_work_run+0x1d0/0x260 [ 187.425973][ T4270] ? task_work_cancel+0x220/0x220 [ 187.431015][ T4270] ? exit_to_user_mode_loop+0x3b/0x110 [ 187.436491][ T4270] exit_to_user_mode_loop+0xe6/0x110 [ 187.441788][ T4270] exit_to_user_mode_prepare+0xee/0x180 [ 187.447336][ T4270] syscall_exit_to_user_mode+0x16/0x40 [ 187.452809][ T4270] do_syscall_64+0x58/0xa0 [ 187.457244][ T4270] ? clear_bhb_loop+0x60/0xb0 [ 187.461925][ T4270] ? clear_bhb_loop+0x60/0xb0 [ 187.466604][ T4270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.472515][ T4270] RIP: 0033:0x7f8d8ef9c117 [ 187.476950][ T4270] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 187.496558][ T4270] RSP: 002b:00007ffcf6ab9c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 187.504973][ T4270] RAX: 0000000000000000 RBX: 00007f8d8f00471f RCX: 00007f8d8ef9c117 [ 187.513032][ T4270] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf6ab9d00 [ 187.521000][ T4270] RBP: 00007ffcf6ab9d00 R08: 00007ffcf6abad00 R09: 00000000ffffffff [ 187.528969][ T4270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf6abad90 [ 187.536946][ T4270] R13: 00007f8d8f00471f R14: 000000000002da91 R15: 00007ffcf6abadd0 [ 187.545009][ T4270] [ 187.548033][ T4270] Modules linked in: [ 187.568203][ T4270] ---[ end trace 0000000000000000 ]--- [ 187.574669][ T4270] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 187.583390][ T4270] Code: b8 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 28 3a b8 ff e9 f9 fc ff ff e8 3e 4f 67 ff <0f> 0b e8 37 4f 67 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 187.645291][ T4270] RSP: 0018:ffffc900045e7b00 EFLAGS: 00010293 [ 187.658225][ T4270] RAX: ffffffff821b2332 RBX: 1ffff920008bcf64 RCX: ffff88807c161dc0 [ 187.676633][ T4270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.688594][ T4270] RBP: ffffc900045e7bf8 R08: ffffc900045e7b77 R09: ffffc900045e7b40 [ 187.699121][ T4270] R10: dffffc0000000000 R11: fffff520008bcf6f R12: ffffc9000d9af000 [ 187.717849][ T4270] R13: dffffc0000000000 R14: ffff8880783ea678 R15: 0000000000000000 [ 187.734664][ T4270] FS: 0000555585bcc500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 187.754043][ T8500] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 187.757857][ T4270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.828896][ T4270] CR2: 00007f486b9ff6c8 CR3: 000000005c575000 CR4: 00000000003506f0 [ 187.841187][ T8500] (syz.4.1817,8500,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 187.870286][ T4270] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 187.893034][ T4270] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 187.896481][ T8500] (syz.4.1817,8500,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 187.910956][ T8500] (syz.4.1817,8500,1):ocfs2_mknod:298 ERROR: status = -2 [ 187.911526][ T4270] Kernel panic - not syncing: Fatal exception [ 187.918377][ T4270] Kernel Offset: disabled [ 187.928748][ T4270] Rebooting in 86400 seconds..