last executing test programs: 5m26.627216841s ago: executing program 1 (id=8427): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) 5m24.008636589s ago: executing program 1 (id=8475): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000000c0)={0xe000003, 0x0, 0x0, 0x12, 0x4000007}) 5m23.867108443s ago: executing program 1 (id=8477): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x78, 0x10, 0x503, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1244c}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}, @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa0100fe}, @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x2d616b45}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xe}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}]]}}}]}, 0x78}}, 0x0) 5m23.686025437s ago: executing program 1 (id=8483): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'iso8859-4'}}, {@barrier}, {@part={'part', 0x3d, 0x1fb38dde}}, {@force}, {@umask={'umask', 0x3d, 0x8}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$eJzs3UFvHGcZB/D/bGLHDlK6SZOmICSscgA1IrG9kQkSElAKslCFKnHp1Uo2tZVNGtlb5PYAAXFuv0I5mDMHTihIOXDmKxj1iODum9HMzno3ydZZJ8a7Cb+fNPs+s+/MO8/7aHYys1a0Af5vrX6QmUfzyeqV97bL9d2dVmd3p3W3Hyc5k6SRzCUpyrf/kuTL5EF6S77e7xhqn1J8vnpz/eFnl3trc/VSbV8ctt94DnJp9nKt2uMab/mFxxvMcCHJhbqFidvv++fI7hf8XAIA06xITo16v5mcrW/Wy+eA3l1x7x77pfZg0gkAAADACXhtL3vZzrlJ5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvk/r3/4t6afTjhRT93/+frd9LHb/UHk06AQAAAAAAAAA4Bt/ay162c66/vl9Uf/N/q1q5WL1+LR9nK+1s5mq2s5ZuutnMUpLm0ECz22vd7ubSGHsuj9xz+WTmCwAAAAAAAACvqN9ndfD3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAZFcqrXVMvFftxM43SSuSSz5XYPkof9+GX2aNIJAAAAwAl4bS972c65/vp+UT3zv1E998/l49xLNxvpppN2blXfBfSe+hu7O63O7k7rbrk8Pe5P/nOkNKoR0/vuYfSRF6stLh3ssZqf51e5koW8n81s5NdZSzftLOTdKlpLkWb97UWzn+fofH/82Nr7z8r1zSqT+dzORpXb1dzMR+nkVhrVHKptDj/i78rqFD+qjVmjW3VbzugXdTsdmlVFZg4qsljXvqzG+cMrccTz5MkjLaVx8B3UxeOr+Zl+cLZuy1q/O801n1keOvveOLwSyeLyv++vd+7dWb+9dWV6pvScnjwnWkOVuHzkSuzv7//2xKdwTGbravSuoke7Wr5V7XsuG/llPsqttHMji7mRlVxPKyv5QVaG6nppjM9a42jXt29/tw5mkvysbqdDWdfzQ3UdvtI1q77hdwZVunD8/wqc/kYdlCfrO1N3RTr/xLW5X4nXD6/EH/fL163OvTub62v3xzzed+q2rMBPn68Sp4++yzjK8+XCwfCPnx1l3+sj+5aqvosHfY2n+i4d9D3rkzpb38M9PdJy1Xd5ZF+r6ntzqG/UXQ4AU+/s22dn5/81/4/5L+b/ML8+/97cO2dunPnmbGb+fvqvp/7c+FPjh8Xb+SK/GTz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz2/rk0/vrHU67U2BYPLBXJJxN+7/7tOkc35FgwlfmID/uWvdu/evbX3y6fc27q592P6wfe/60sry9euLK9+/ce32Rqe92HuddJoAwDEa3PRPOhMAAAAAAAAAAAAAAOCrnMR/J570HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFfb6geZeZQiS4tXF8v13Z1Wp1z68WDLuSRFGfwtyZfJg/SWNIeGK77qOMXnqzfXH352eTDWXH/74rD9xvNYLo0ncnrR8ZZfeLzBDBeSXKhbmLj/BgAA//9gDAG4") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 5m23.243137468s ago: executing program 1 (id=8493): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_lower}, {@utf8}, {@fat=@nfs_stale_rw}, {@uni_xlateno}, {@shortname_mixed}, {@rodir}, {@fat=@dmask={'dmask', 0x3d, 0x5e}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlateno}, {@rodir}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@shortname_lower}]}, 0x1, 0x281, &(0x7f0000000440)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) 5m22.483349098s ago: executing program 1 (id=8508): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) 5m22.211562875s ago: executing program 32 (id=8508): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) 5.137641807s ago: executing program 4 (id=14524): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_setup(0x6f0e0f5, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000002e00)={{0x12, 0x1, 0x310, 0x50, 0x64, 0x69, 0x20, 0xd07e, 0xf8b2, 0x9bbc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x4, 0x40, 0x8, "", [{{0x9, 0x4, 0xcf, 0xf, 0x0, 0x8, 0x3, 0x50, 0x1}}]}}]}}, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0}) 3.125614699s ago: executing program 4 (id=14560): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x20, r1, 0x1, 0xfffffffc, 0x25dfdbff, {{0x8}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) 2.962005884s ago: executing program 4 (id=14565): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000580)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000800)={0x13, 0x10, 0xfa00, {&(0x7f0000000600), r1, 0x2}}, 0x18) 2.73754202s ago: executing program 4 (id=14569): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 2.644260302s ago: executing program 3 (id=14570): r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x18e}, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1004000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2.31617818s ago: executing program 3 (id=14574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 2.175102444s ago: executing program 4 (id=14576): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009780)='./file0\x00', 0x41, &(0x7f0000000000)={[{@norecovery}]}, 0x1, 0x97f7, &(0x7f0000013c80)="$eJzs3QeYJHWhcP1Z2CUnARVRFBUVFSVKEFGCgEiQqKCAIFlykKQkEUmiIKAISEbJOeecc84555zD9yy7q7geuN73ve+H13PO8+zMdHV1TfX/11W1M9XTveQ8i805MDDGwLAmHxi5m++Yc6FNdp7z8n132fvkyceaYLLhk4ffYJLhFycZNPzzKAMDA6MMX87waWM/csKJowwMfmf63xt7zLEGjTswMN3wi7MP/zzTsE8TPTpivrdHauQVHfS3i4N2GPbvncYf+i2GfrH0TRecPTAwMMG7bj/0JtP80x2VtuQc887zd6u/uQ21GjL863f/G23Yv4nuHxiY6J4Bfny8e95BH8BdGvo9J9j5gTHW/QC+9/+6lpxj3vlG8h+6LY46fNpMQ7fxkbdBYyM/zm9aZdY9hw/hO4+3gYGhu7h/2Fb+V7TkHPMsMPDe+/mBh8Ya7/S339lvjv3MwMDYzw4MjP3cwMDYzw8MjP3CwMDYL37QLvV/1xxzTj/n0O19xOXh7CMeyxPQ42Lf1V/YZ2BgYPRh84z91rDjxTiTjzgmVFVV1b93c8w5/Vxw/B/j/Y7/W28zxy0d/6uqqv73Nt8cc04/9Dg+0vF/nPc7/n/3hhvWGPa7/9lnGnartz7YO1FVVVX/reaZD4//E7zf8X/8na47oON/VVXV/94WXfCd4/84Ix3/J36/4/8a899x6fD5Rvy/4c13LfKd548Nn/76u6aP+q7pr71r+pB3Lefd84/2rumvvGv6GAMDYz8yfPobf5889jNDb/PPyxn7pb8/H2eSwe+a/vK7po/2rumvDF+nodNHf9f0N981/xh/nz7O0A+TD/++r77PUFdVVf3btOj088w18K7n2Q+fPOKJ/fi80KOP3ubOD2p9q6qqqqqqquq/31tPnnbW3//m+5MD7/rb1b/9Devw3wsMOuaca675wFb036NB//z7kC0/6HX6v22o8xiHTT4wsNYSH/Sq1AfQ/5q/Va//J+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uLe4/z/3/7+f+CeL+00fNZZJr3j3sX+fstJBlYb/tXNd8y50GofwLp/AP2nnv8fWG3QwMBw3wmGWi40x6KLTzkwMLDYvXdMOuPA366beeh1s0446jt/zDkwMOU7H4dM8h5LHv4uC++8ucPEf1vGMe8sf7639x910Egr8a5mO/u+g1dd8uUZRv78hfe+H397f4mlXtp/ihF/yzLKSDON8R43HrH8EfdlZOfh6z7l0HWfeoM115l6/U02/cpqay6/ykqrrLTWdNNNO8P0M84w3ddmmXrl1dZYaZphH99jzIa9dcWo/8qYjTPymD05x7vHbOT79qGTDsYx++d39fiHRbyzxHNne+iyEWM2+F8csxHfb9T3H7PJVxv+jSYZGDKw3DtDM2hgYJLBQwY2Hnph2tEHBiYZMnzeSYbO+40JRxkY2Pnvd3TQ8BcbHTbPoC2HzvNv9r4lswwfkc1GzDfy66yPvKL/1fuWHD/ObneM9L4l/6/6Pzr+/5PXzIP+NlAj3gBh+DzDvD7g95n4p/WdfPA7B7n3Wt/3eV2cd6LH15qrPrrE/9Tr4tD6jvM+6/s+r+P3nus75bRP7zVsUf9j6zvSvm6BYVf+K/u6gfff141Kt1/pyslG3tfN/96r+A/b8YgxGn2kmd5rX7fz/OduMXT5A++/r1tgteEvHvD3fd0oAwOTjDpiXzd0xzfakIGdh16YbuiF0YcMHDL0wvTvXBhz4JyhF766wtprrDjonZcZGL7caYYud/YJBw3bgG48eNXRd3v77cHD1+Wlsf9xXYc/PiZ/9/F8jgmHD+bw245Y7tBZRyz3lW2HXTfa8OW+/N9Y7ojb0vpOcuaw60YfvtxXRlrukPdZ7ojb/tP2MOWgf3iiKuxvPtD3NaLtd4z3Wd/3eR1ufLy94z7Fsg/9D7wO96D3Wt/B77++7/W+Ie+5vo9d9vh+/1OvG06Ps3v2HfZYGWP44+zN/8bjd8RtR96PDXshkGG7/TH+lf3Y5P+0H9tq1FFGGux39V7/z10R5h++RfxtaSse9PJqI8Z+yEjL/a/+n/uu+zII9mMTjPTz3KAt9hsYRGP+yBrPb/TWru8/5kMG/vFnixFjPuK27zfmo/8rY/6J9x/zkf+f/F5jPuVnh10/ZKT1f/eYL7LH7DeOGPPRRlrufzXmo7//seOfx3xgYAiN+c6TDhu399ufvteYj7jtiDEf+n1mnXDwwNwDAwNTDB/z0f6VMZ/kf+ZxPhbMP+zrlf426ZkZF55qxJiPPMb/1ZiP9t8c883v+dvjfIp3rvvMKAOjjTaw8fIbbLDetMM+jrg43bCPvC96ZsVh4/x+x9L3Mhpx2/fbLgb/K0YT/EtGg/4ro0kHv5fR3zetUQ9e9Nn/033R4P+u0Tm8Lzpl3mHj9n7/L3qvMR9xWzoOTvyu24/8c+j7vH4W3qd3xmf+7Ub8vPfv8PpZI37e/V/5+lkjfie52sg7+fpX6/f/7vJ3l7+7/N3lL+49zv9PPvzzF98e58CPDP+hc8iVM98y+we9vh9w/9Hn/4f7/sP5/9lvmfnKoT9aDb/ufc/PDpvn3/L87EzDPk306Ij5Rj4/OPKK/lfnZ/fdfYMr/386P/t/1Iht9V/4ubj9v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/ce5z/n2bE8wAeXHyh7w0/ETpks2mP3OyDXt8PuP/o8//Dff/h/P9mR0672SgDf7vufc//D5vnP//8/9D7et+CWyzz73z+/2/bauf/6/3L313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFvcf5/9lHPA/g8Nnm/tzw5wOMev32++/1Qa/vB9x/6vn/3v/fW/t/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7jh5/8HRvpL4YV7XGBw/v9/d+/hv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfy/nz9m8f9B/pjFf8n8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/4/zxyz+y+WPWfyXzx+z+P8kf8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bx/2n+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+WPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/8/zxyz+v8gfs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/1/mj1n8t84fs/j/Kn/M4r9N/pjF/9f5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4v+b/DGL/075Yxb/3+aPWfx/lz9m8d85f8ziv0v+mMX/9/ljFv9d88cs/rvlj1n8d88fs/j/IX/M4v/H/DGL/x75Yxb/P+WPWfz3zB+z+O+VP2bx3zt/zOL/5/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/1/yxyz+f80fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzv/djT7iC4v/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMX/7fwxif+ggfwxi/+g/DGL/yj5Yxb/UfPHLP6D88cs/kPyxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvH/UP6YxX/C/DGL/0T5Yxb/ifPHLP4fzh+z+H8kf8zi/9H8MYv/JPljFv+P5Y9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8P5U/ZvGfPH/M4v/p/DGL/2fyxyz+n80fs/hPkT9m8f9c/pjF//P5Yxb/L+SPWfynzB+z+H8xf8zi/6X8MYv/l/PHLP5T5Y9Z/L+SP2bx/2r+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/1r+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/nj9m8Z81f8zi/438MYv/bPljFv9v5o9Z/L+VP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/b+ePWfznzh+z+M+TP2bxnzd/zOL/nfwxi/98+WMW/+/mj1n8588fs/gvkD9m8V8wf8ziv1D+mMX/e/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/+/ljFv8f5I9Z/JfMH7P4L5U/ZvH/Yf6Yxf9H+WMW/6Xzxyz+y+SPWfyXzR+z+P84f8ziv1z+mMV/+fwxi/9P8scs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/5/mj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QPybwf3jEVfn/cwL/oQ3aMH/M4r9R/pjFf+P8MYv/JvljFv9N88cs/j/PH7P4/yJ/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/H+ZP2bx3zp/zOL/q/wxi/82+WMW/1/nj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9v8scs/jvlj1n8f5s/ZvH/Xf6YxX/n/DGL/y75Yxb/3+ePWfx3zR+z+O+WP2bx3z1/zOL/h/wxi/8f88cs/nvkj1n8/5Q/ZvHfM3/M4r9X/pjFf+/8MYv/n/PHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/n/JH7P4/zV/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfG+4/6K233+k/1v+k/DHL9n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjE/50v8//nLP6D8scs/qPkj1n8R80fs/gPzh+z+A/JH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMX/Q/ljFv8J88cs/hPlj1n8J84fs/h/OH/M4v+R/DGL/0fzxyz+k+SPWfw/lj9m8Z80f8zi//H8MYv/J/LHLP6T5Y9Z/D+ZP2bx/1T+mMV/8vwxi/+n88cs/p/JH7P4fzZ/zOI/Rf6Yxf9z+WMW/8/nj1n8v5A/ZvGfMn/M4v/F/DGL/5fyxyz+X84fs/hPlT9m8f9K/pjF/6v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/2v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/zfyxyz+s+WPWfy/mT9m8f9W/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/d/LHLP7z5Y9Z/L+bP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/7+WPWfwXzh+z+C+SP2bxXzR/bNDNgwYM/ovlj1m2/8Xzxyz+S+SPWfy/nz9m8f9B/pjFf8n8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/4/zxyz+y+WPWfyXzx+z+P8kf8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bx/2n+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+WPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/8/zxyz+v8gfs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/1/mj1n8t84fs/j/Kn/M4r9N/pjF/9f5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4v+b/DGL/075Yxb/3+aPWfx/lz9m8d85f8ziv0v+mMX/9/ljFv9d88cs/rvlj1n8d88fs/j/IX/M4v/H/DGL/x75Yxb/P+WPWfz3zB+z+O+VP2bx3zt/zOL/5/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/1/yxyz+f80fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH5P4jzqQP2bxH5Q/ZvEfJX/M4j9q/pjFf3D+mMV/SP6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/h/KH7P4T5g/ZvGfKH/M4j9x/pjF/8P5Yxb/j+SPWfw/mj9m8Z8kf8zi/7H8MYv/pPljFv+P549Z/D+RP2bxnyx/zOL/yfwxi/+n8scs/pPnj1n8P50/ZvH/TP6Yxf+z+WMW/ynyxyz+n8sfs/h/Pn/M4v+F/DGL/5T5Yxb/L+aPWfy/lD9m8f9y/pjFf6r8MYv/V/LHLP5fzR+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fyx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/9fzxyz+s+aPWfy/kT9m8Z8tf8zi/838MYv/t/LHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v/t/DGL/9z5Yxb/efLHLP7z5o9Z/L+TP2bxny9/zOL/3fwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+H8vf8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H8/f8zi/4P8MYv/kvljFv+l8scs/j/MH7P4/yh/zOK/dP6YxX+Z/DGL/7L5Yxb/H+ePWfyXyx+z+C+fP2bx/0n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/0/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/LH/ZP93Ner6+WP/yf7v3v43yB+z+P8sf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfx/nj9m8f9F/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/j/Mn/M4r91/pjF/1f5Yxb/bfLHLP6/zh+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/3+SPWfx3yh+z+P82f8zi/7v8MYv/zvljFv9d8scs/r/PH7P475o/ZvHfLX/M4r97/pjF/w/5Yxb/P+aPWfz3yB+z+P8pf8ziv2f+mMV/r/wxi//e+WMW/z/nj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfz/kj9m8f9r/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6YxH/wQP6YxX9Q/pjFf5T8MYv/qPljFv/B+WMW/yH5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/h/KH/M4j9h/pjFf6L8MYv/xPljFv8P549Z/D+SP2bx/2j+mMV/kvwxi//H8scs/pPmj1n8P54/ZvH/RP6YxX+y/DGL/yfzxyz+n8ofs/hPnj9m8f90/pjF/zP5Yxb/z+aPWfynyB+z+H8uf8zi//n8MYv/F/LHLP5T5o9Z/L+YP2bx/1L+mMX/y/ljFv+p8scs/l/JH7P4fzV/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fy1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP5fzx+z+M+aP2bx/0b+mMV/tvwxi/8388cs/t/KH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/t/PHLP5z549Z/OfJH7P4z5s/ZvH/Tv6YxX++/DGL/3fzxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL/vfwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL//fwxi/8P8scs/kvmj1n8l8ofs/j/MH/M4v+j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+cP2bxXy5/zOK/fP6Yxf8n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/0+t/oPf/2qL/+pW//8ii/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+WPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/8/zxyz+v8gfs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/1/mj1n8t84fs/j/Kn/M4r9N/pjF/9f5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4v+b/DGL/075Yxb/3+aPWfx/lz9m8d85f8ziv0v+mMX/9/ljFv9d88cs/rvlj1n8d88fs/j/IX/M4v/H/DGL/x75Yxb/P+WPWfz3zB+z+O+VP2bx3zt/zOL/5/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/1/yxyz+f80fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/th/tP+of5s6+Pr8sf9o/79PHXxD/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz//kdrwnY8W/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dPybxHzKQP2bxH5Q/ZvEfJX/M4j9q/pjFf3D+mMV/SP6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/h/KH7P4T5g/ZvGfKH/M4j9x/pjF/8P5Yxb/j+SPWfw/mj9m8Z8kf8zi/7H8MYv/pPljFv+P549Z/D+RP2bxnyx/zOL/yfwxi/+n8scs/pPnj1n8P50/ZvH/TP6Yxf+z+WMW/ynyxyz+n8sfs/h/Pn/M4v+F/DGL/5T5Yxb/L+aPWfy/lD9m8f9y/pjFf6r8MYv/V/LHLP5fzR+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fyx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/9fzxyz+s+aPWfy/kT9m8Z8tf8zi/838MYv/twYGBkb/oNbp3ziL/+xt/5jFf478MYv/nPljFv+58scs/t/OH7P4z50/ZvGfJ3/M4j9v/pjF/zv5Yxb/+fLHLP7fzR+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL//fyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fzxyz+P8gfs/gvmT9m8V8qf8zi/8P8MYv/j/LHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v+z/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvH/ef6Yxf8X+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOL/y/wxi//W+WMW/1/lj1n8t8kfs/j/On/M4r9t/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8f5M/ZvHfKX/M4v/b/DGL/+/yxyz+O+ePWfx3yR+z+P8+f8ziv2v+mMV/t/wxi//u+WMW/z/kj1n8/5g/ZvHfI3/M4v+n/DGL/575Yxb/vfLHLP57549Z/P+cP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvH/S/6Yxf+v+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yflj/8H+Q97tf0r+2H+w/z9s/6fmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljEv/RBvLHLP6D8scs/qPkj1n8R80fs/gPzh+z+A/JH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMX/Q/ljFv8J88cs/hPlj1n8J84fs/h/OH/M4v+R/DGL/0fzxyz+k+SPWfw/lj9m8Z80f8zi//H8MYv/J/LHLP6T5Y9Z/D+ZP2bx/1T+mMV/8vwxi/+n88cs/p/JH7P4fzZ/zOI/Rf6Yxf9z+WMW/8/nj1n8v5A/ZvGfMn/M4v/F/DGL/5fyxyz+X84fs/hPlT9m8f9K/pjF/6v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/2v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/zfyxyz+s+WPWfy/mT9m8f9W/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/d/LHLP7z5Y9Z/L+bP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/7+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/7+ePWfx/kD9m8V8yf8ziv1T+mMX/h/ljFv8f5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/j/DGL/3L5Yxb/5fPHLP4/yR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+aP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/2f5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4v/z/DGL/y/yxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6Yxf+X+WMW/63zxyz+v8ofs/hvkz9m8f91/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/j/Jn/M4r9T/pjF/7f5Yxb/3+WPWfx3zh+z+O+SP2bx/33+mMV/1/wxi/9u+WMW/93zxyz+f8gfs/j/MX/M4r9H/pjF/0/5Yxb/PfPHLP575Y9Z/PfOH7P4/zl/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4v+X/DGL/1/zxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf9Onf9o/9JcFv+7dP7/Whb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388ck/qMP5I9Z/Aflj1n8R8kfs/iPmj9m8R+cP2bxH5I/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+H8scs/hPmj1n8J8ofs/hPnD9m8f9w/pjF/yP5Yxb/j+aPWfwnyR+z+H8sf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOL/qfwxi//k+WMW/0/nj1n8P5M/ZvH/bP6YxX+K/DGL/+fyxyz+n88fs/h/IX/M4j9l/pjF/4v5Yxb/L+WPWfy/nD9m8Z8qf8zi/5X8MYv/V/PHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/1/LHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+H8zf8zi/638MYv/7PljFv858scs/nPmj1n858ofs/h/O3/M4j93/pjFf578MYv/vPljFv/v5I9Z/OfLH7P4fzd/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP7fyx+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP7fzx+z+P8gf8ziv2T+mMV/qfwxi/8P88cs/j/KH7P4L50/ZvFfJn/M4r9s/pjF/8f5Yxb/5fLHLP7L549Z/H+SP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/zR/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/z/LHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjF/+f5Yxb/X+SPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/y/zxyz+W+ePWfx/lT9m8d8mf8zi/+v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f9N/pjFf6f8MYv/b/PHLP6/yx+z+O+cP2bx3yV/zOL/+/wxi/+u+WMW/93yxyz+u+ePWfz/kD9m8f9j/pjFf4/8MYv/n/LHLP575o9Z/PfKH7P4750/ZvH/c/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/y/5Yxb/v+aPWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj0n8xxjIH7P4D8ofs/iPkj9m8R81f8ziPzh/zOI/JH/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/w/lj1n8J8wfs/hPlD9m8Z84f8zi/+H8MYv/R/LHLP4fzR+z+E+SP2bx/1j+mMV/0vwxi//H88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4v/Z/DGL/xT5Yxb/z+WPWfw/nz9m8f9C/pjFf8r8MYv/F/PHLP5fyh+z+H85f8ziP1X+mMX/K/ljFv+v5o9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv+v5Y9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bx/2b+mMX/W/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8f92/pjFf+78MYv/PPljFv9588cs/t/JH7P4z5c/ZvH/bv6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/L+XP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/L+fP2bx/0H+mMV/yfwxi/9S+WMW/x/mj1n8f5Q/ZvFfOn/M4r9M/pjFf9n8MYv/j/PHLP7L5Y9Z/JfPH7P4/yR/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/af6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv+f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/z/PHLP6/yB+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/X+aPWfy3zh+z+P8qf8ziv03+mMX/1/ljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8zi/5v8MYv/TvljFv/f5o9Z/H+XP2bx3zl/zOK/S/6Yxf/3+WMW/13zxyz+u+WPWfx3zx+z+P8hf8zi/8f8MYv/HvljFv8/5Y9Z/PfMH7P475U/ZvHfO3/M4v/n/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/X/LHLP5/zR+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fk/iPOZA/ZvEflD9m8R8lf8ziP2r+mMV/cP6YxX9I/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+H8ofs/hPmD9m8Z8of8ziP3H+mMX/w/ljFv+P5I9Z/D+aP2bxnyR/zOL/sfwxi/+k+WMW/4/nj1n8P5E/ZvGfLH/M4v/J/DGL/6fyxyz+k+ePWfw/nT9m8f9M/pjF/7P5Yxb/KfLHLP6fyx+z+H8+f8zi/4X8MYv/lPljFv8v5o9Z/L+UP2bx/3L+mMV/qvwxi/9X8scs/l/NH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/LH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/1/PHLP6z5o9Z/L+RP2bxny1/zOL/zfwxi/+38scs/rPnj1n858gfs/jPmT9m8Z8rf8zi/+38MYv/3PljFv958scs/vPmj1n8v5M/ZvGfL3/M4v/d/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fy9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4fz9/zOL/g/wxi/+S+WMW/6Xyxyz+P8wfs/j/KH/M4r90/pjFf5n8MYv/svljFv8f549Z/JfLH7P4L58/ZvH/Sf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v/T/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/LH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv+f549Z/H+RP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP6/zB+z+G+dP2bx/1X+mMV/m/wxi/+v88cs/tvmj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMX/N/ljFv+d8scs/r/NH7P4/y5/zOK/c/6YxX+X/DGL/+/zxyz+u+aPWfx3yx+z+O+eP2bx/0P+mMX/j/ljFv898scs/n/KH7P475k/ZvHfK3/M4r93/pjF/8/5Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv+/5I9Z/P+aP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT8m8R9rIH/M4j8of8ziP0r+mMV/1Pwxi//g/DGL/5D8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfw/lD9m8Z8wf8ziP1H+mMV/4vwxi/+H88cs/h/JH7P4fzR/zOI/Sf6Yxf9j+WMW/0nzxyz+H88fs/h/In/M4j9Z/pjF/5P5Yxb/T+WPWfwnzx+z+H86f8zi/5n8MYv/Z/PHLP5T5I9Z/D+XP2bx/3z+mMX/C/ljFv8p88cs/l/MH7P4fyl/zOL/5fwxi/9U+WMW/6/kj1n8v5o/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8v5Y/ZvGfMX/M4j9T/pjFf+Z/wX/M/5fr9W+axX+Wtn/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+H8zf8zi/638MYv/7PljFv858scs/nPmj1n858ofs/h/O3/M4j93/pjFf578MYv/vPljFv/v5I9Z/OfLH7P4fzd/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP7fyx+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP7fzx+z+P8gf8ziv2T+mMV/qfwxi/8P88cs/j/KH7P4L50/ZvFfJn/M4r9s/pjF/8f5Yxb/5fLHLP7L549Z/H+SP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/zR/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/z/LHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjF/+f5Yxb/X+SPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/y/zxyz+W+ePWfx/lT9m8d8mf8zi/+v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f9N/pjFf6f8MYv/b/PHLP6/yx+z+O+cP2bx3yV/zOL/+/wxi/+u+WMW/93yxyz+u+ePWfz/kD9m8f9j/pjFf4/8MYv/n/LHLP575o9Z/PfKH7P4750/ZvH/c/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/y/5Yxb/v+aPWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj0n8xx7IH7P4D8ofs/iPkj9m8R81f8ziPzh/zOI/JH/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/w/lj1n8J8wfs/hPlD9m8Z84f8zi/+H8MYv/R/LHLP4fzR+z+E+SP2bx/1j+mMV/0vwxi//H88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4v/Z/DGL/xT5Yxb/z+WPWfw/nz9m8f9C/pjFf8r8MYv/F/PHLP5fyh+z+H85f8ziP1X+mMX/K/ljFv+v5o9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv+v5Y9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bx/2b+mMX/W/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8f92/pjFf+78MYv/PPljFv9588cs/t/JH7P4z5c/ZvH/bv6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/L+XP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/L+fP2bx/0H+mMV/yfwxi/9S+WMW/x/mj1n8f5Q/ZvFfOn/M4r9M/pjFf9n8MYv/j/PHLP7L5Y9Z/JfPH7P4/yR/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/af6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv+f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/z/PHLP6/yB+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/X+aPWfy3zh+z+P8qf8ziv03+mMX/1/ljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8zi/5v8MYv/TvljFv/f5o9Z/H+XP2bx3zl/zOK/S/6Yxf/3+WMW/13zxyz+u+WPWfx3zx+z+P8hf8zi/8f8MYv/HvljFv8/5Y9Z/PfMH7P475U/ZvHfO3/M4v/n/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/X/LHLP5/zR+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fk/iPM5A/ZvEflD9m8R8lf8ziP2r+mMV/cP6YxX9I/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+H8ofs/hPmD9m8Z8of8ziP3H+mMX/w/ljFv+P5I9Z/D+aP2bxnyR/zOL/sfwxi/+k+WMW/4/nj1n8P5E/ZvGfLH/M4v/J/DGL/6fyxyz+k2v9dzx+9XXe+1qL/6e1/u+fxf8z+WMW/8/mj1n8p8gfs/h/Ln/M4v/5/DGL/xfyxyz+U+aPWfy/mD9m8f9S/pjF/8v5Yxb/qfLHLP5fyR+z+H81f8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H8tf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+X88fs/jPmj9m8f9G/pjFf7b8MYv/N/PHLP7fyh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/7fzxyz+c+ePWfznyR+z+M+bP2bx/07+mMV/vvwxi/9388cs/vPnj1n8F8gfs/gvmD9m8V8of8zi/738MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi//38MYv/D/LHLP5L5o9Z/JfKH7P4/zB/zOL/o/wxi//S+WMW/2Xyxyz+y+aPWfx/nD9m8V8uf8ziv3z+mMX/J/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/9P88cs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P8sf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfx/nj9m8f9F/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/j/Mn/M4r91/pjF/1f5Yxb/bfLHLP6/zh+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/3+SPWfx3yh+z+P82f8zi/7v8MYv/zvljFv9d8scs/r/PH7P475o/ZvHfLX/M4r97/pjF/w/5Yxb/P+aPWfz3yB+z+P8pf8ziv2f+mMV/r/wxi//e+WMW/z/nj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfz/kj9m8f9r/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv7YP/jP9p/rf0r+mGX7PzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+T+I87kD9m8R+UP2bxHyV/zOI/av6YxX9w/pjFf0j+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4fyh+z+E+YP2bxnyh/zOI/cf6Yxf/D+WMW/4/kj1n8P5o/ZvGfJH/M4v+x/DGL/6T5Yxb/j+ePWfw/kT9m8Z8sf8zi/8n8MYv/p/LHLP6T549Z/D+dP2bx/0z+mMX/s/ljFv8p8scs/p/LH7P4fz5/zOL/hfwxi/+U+WMW/y/mj1n8v5Q/ZvH/cv6YxX+q/DGL/1fyxyz+X80fs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X8sfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi//X88cs/rPmj1n8v5E/ZvGfLX/M4v/N/DGL/7fyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/7fwxi//c+WMW/3nyxyz+8+aPWfy/kz9m8Z8vf8zi/938MYv//PljFv8F8scs/gvmj1n8F8ofs/h/L3/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/h/P3/M4v+D/DGL/5L5Yxb/pfLHLP4/zB+z+P8of8ziv3T+mMV/mfwxi/+y+WMW/x/nj1n8l8sfs/gvnz9m8f9J/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/9P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P8sfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/5/nj1n8f5E/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/r/MH7P4b50/ZvH/Vf6YxX+b/DGL/6/zxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6Yxf83+WMW/53yxyz+v80fs/j/Ln/M4r9z/pjFf5f8MYv/7/PHLP675o9Z/HfLH7P4754/ZvH/Q/6Yxf+P+WMW/z3yxyz+f8ofs/jvmT9m8d8rf8ziv3f+mMX/z/ljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/7/kj1n8/5o/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5PTjUkf8ji/1TbP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f0ziP95A/pjFf1D+mMV/lPwxi/+o+WMW/8H5Yxb/IfljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+H8of8ziP2H+mMV/ovwxi//E+WMW/w/nj1n8P5I/ZvH/aP6YxX+S/DGL/8fyxyz+k+aPWfw/nj9m8f9E/pjFf7L8MYv/J/PHLP6fyh+z+E+eP2bx/3T+mMX/M/ljFv/P5o9Z/KfIH7P4fy5/zOL/+fwxi/8X8scs/lPmj1n8v5g/ZvH/Uv6Yxf/L+WMW/6nyxyz+X8kfs/h/NX/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/LX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/l/PH7P4z5o/ZvH/Rv6YxX+2/DGL/zfzxyz+38ofs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi/+388cs/nPnj1n858kfs/jPmz9m8f9O/pjFf778MYv/d/PHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v+9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v/9/DGL/w/yxyz+S+aPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8f5w/ZvFfLn/M4r98/pjF/yf5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/T/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/LH/M4r9h/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8f54/ZvH/Rf6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4/zJ/zOK/df6Yxf9X+WMW/23yxyz+v84fs/hvmz9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/9/kj1n8d8ofs/j/Nn/M4v+7/DGL/875Yxb/XfLHLP6/zx+z+O+aP2bx3y1/zOK/e/6Yxf8P+WMW/z/mj1n898gfs/j/KX/M4r9n/pjFf6/8MYv/3vljFv8/549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8/5I/ZvH/a/6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMR//IH8MYv/oPwxi/8o+WMW/1Hzxyz+g/PHLP5D8scs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E/w/7FHzwqAIAgQRE9z1tq2bdu2bdu2bdu2bdu2bQa7wQT9BdPvRZWX/1HL/8H8j1r+D+5/1PJ/CP+jlv9D+h+1/B/K/6jl/9D+Ry3/h/E/avk/rP9Ry//h/I9a/g/vf9TyfwT/o5b/I/oftfwfyf+o5f/I/kct/0fxP2r5P6r/Ucv/0fyPWv6P7n/U8n8M/6OW/2P6H7X8H8v/qOX/2P5HLf/H8T9q+T+u/1HL//H8j1r+j+9/1PJ/Av+jlv8T+h+1/J/I/6jl/8T+Ry3/J/E/avk/qf9Ry//J/I9a/k/uf9Tyfwr/o5b/U/oftfyfyv+o5f/U/kct/6fxP2r5P63/Ucv/6fyPWv5P73/U8n8G/6OW/zP6H7X8n8n/qOX/zP5HLf9n8T9q+T+r/1HL/9n8j1r+z+5/1PJ/Dv+jlv9z+h+1/J/L/6jl/9z+Ry3/5/E/avk/r/9Ry//5/I9a/s/vf9TyfwH/o5b/C/oftfxfyP+o5f/C/kct/xfxP2r5v6j/Ucv/xfyPWv4v7n/U8n8J/6OW/0v6H7X8X8r/qOX/0v5HLf+X8T9q+b+s/1HL/+X8j1r+L+9/1PJ/Bf+jlv8r+h+1/F/J/6jl/8r+Ry3/V/E/avm/qv9Ry//V/I9a/q/uf9Tyfw3/o5b/a/oftfxfy/+o5f/a/kct/9fxP2r5v67/Ucv/9fyPWv6v73/U8n8D/6OW/xv6H7X838j/qOX/xv5HLf838T9q+b+p/1HL/838j1r+b+5/1PJ/C/+jlv9b+h+1/N/K/6jl/9b+Ry3/t/E/avm/rf9Ry//t/I9a/m/vf9Tyfwf/o5b/O/oftfzfyf+o5f/O/kct/3fxP2r5v6v/Ucv/3fyPWv7v7n/U8n8P/6OW/3v6H7X838v/qOX/3v5HLf/38T9q+b+v/1HL//38j1r+7+9/1PL/AP+jlv8H+h+1/D/I/6jl/8H+Ry3/D/E/avl/qP9Ry//D/I9a/h/uf9Ty/wj/o5b/R/oftfw/yv+o5f/R/kct/4/xP2r5f6z/Ucv/4/yPWv4f73/U8v8E/6OW/yf6H7X8P8n/qOX/yf5HLf9P8T9q+X+q/1HL/9P8j1r+n+5/1PL/DP+jlv9n+h+1/D/L/6jl/9n+Ry3/z/E/avl/rv9Ry//z/I9a/p/vf9Ty/wL/o5b/F/oftfy/yP+o5f/F/kct/y/xP2r5f6n/Ucv/y/yPWv5f7n/U8v8K/6OW/1f6H7X8v8r/qOX/1f5HLf+v8T9q+X+t/1HL/+v8j1r+X+9/1PL/Bv+jlv83+h+1/L/J/6jl/83+Ry3/b/E/avl/q/9Ry//b/I9a/t/uf9Ty/w7/o5b/d/oftfy/y/+o5f/d/kct/+/xP2r5f6//Ucv/+/yPWv7f73/U8v8B/6NB8v+A33Lg/w/6Hw2S/3/Pgf8/5H/U8v9h/6OW/4/4H7X8f9T/qOX/Y/5HLf8f9z9q+f+E/1HL/yf9j1r+P+V/1PL/af+jlv/P+B+1/H/W/6jl/3P+Ry3/n/c/avn/gv9Ry/8X/Y9a/r/kf9Ty/2X/o5b/r/gftfx/1f+o5f9r/kct/1/3P2r5/4b/Ucv/N/2PWv6/5X/U8v9t/6OW/+/4H7X8f9f/qOX/e/5HLf/f9z9q+f+B/1HL/w/9j1r+f+R/1PL/Y/+jlv+f+B+1/P/U/6jl/2f+Ry3/P/c/avn/hf9Ry/8v/Y9a/n/lf9Ty/2v/o5b/3/gftfz/1v+o5f93/kct/7/3P2r5/4P/Ucv/H/2PWv7/5H/U8v9n/6OW/7/4H5X8//8f/I9a/v/R/6jl/5/8j1r+/9n/qOX/X/yPWv4P8D9q+f9X/6OW/3/zP2r5/3f/o5b///A/avn/T/+jlv//8j9q+f9v/6OW///xP2r5/1//o5b///M/GuT+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/snf/MV7XBRzHP8f94EcSEGFvTBSFgowTOE4ShX5cP0/bVciatulgciKJEj9moNXVLNdsTRI3MyuggtStNfwD2zTl3CoXlbXIrLkwrVi2a5KJq8Wufe++3+Puy92Ne5/vN3/wePxx9/18z9fnC2xPPp+vcAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASGnT1ltuWLVuXftGDzzwwIO+B6f6dyYgtePRn+ofCQAAAAAAAAAAAAAAMJQc3050qn+OAAAAAABwumlte09Xbc2Ap2r7H8z4ZXvP5+ZXr7x+9/OPL6t8Ln/58kFOOab/QXd3d/dLLZ1Ty4dji6Iovdrk8vG46nHp/B2dl2/rPQrF759tadu6reXAjq998+GZEybPqO95tr5Yed3ade0LxhRFqK0vtpQOFtYURWioL7aVDppKB2Pri/tLB4t6DsYX+0sHF167ft3q0hMnvDScdlrbPl/UDii2GPC7Qf/+Ozo37qx8HuaUlbPVFeX+J7X8eE/V1yqG6L9y/lBT3f+If4LAkEbW/+1zK5+HOeUJ1/9H105aPtjXhu6/cv4wRv+QziD3/wMa7bnf371vyhD3/zMHOWXf/ud/W9ZZ6v+mX7/QWH6qrvz+onL/31A9rrxe71Gore5/zID7/9J9fF3l/n9sUYT6Uf5ywGmlte0LXcNd/6u7H9h/3VlVm5r+/R9Zvru21P+hux74YPmp+pN5/3/8/KFumOt/zef2D/yxAiPT2raru+r6P4L+izmDnLKv/9m7jl5V6v+MHYf39vvaSPqvr+5//uYbPzV/09ZbGtfeuGpN+5r2m5qaFjYvWtzcdNGS+T23BL0fR/mrAqeH0V3/iwlVm5qiaO/bz/vo4pdK/R8491//KD81boT9Nwx7/X/O9R8Gdf6YoqGh2LJq8+aNC3s/Vg6bej/2/meD9H/i+/8h+59V+f+AlffdpTfkffvfvfvrHyv1f+/Y5Q+Un2oYYf9jh+u/4/jrAhFGef1fXbUZ0P/aV7+3utT/X145drD81Ejf/48btv+drv8wGq1tVX/h5zVW6n/Ffw4N9ucEJyGM9+d/kE6O/rdM/NW349Zhgv4hnRz9L9rUHvmXbcPr9A/p5Oj/N9trDsetwxn6h3Ry9P+Nrgc3xK3DRP1DOjn63zf9kafi1uH1+od0cvR/bM3kq+LWYZL+IZ0c/V/2lT0r4tZhsv4hnRz917wy8Ym4dZiif0gnR/+NNWd/Jm4d3qB/SCdH/9d1PPxi3DpM1T+kk6P/L+74beT36YQ36h/SydH/U3/esj1uHabpH9LJ0f8L09Y2xq3DmfqHdHL0f/8NTzwStw5v0j+kk6P/p7/z4aNx6xD0D+nk6P9bzx5eGbcO0/UP6eTof+/co3+KW4ez9A/p5Oj/vx+/+kNx6/Bm/UM6OfoP+5Z8P24dztY/pJOj/yuevGth3DrM0D+kk6P/jqW33Rm3DufoH9LJ0X9zy9zpcetwrv4hnRz9T/nrP++OW4eZ+od0cvT/ifveX/3vfp+kcJ7+IZ0c/d+8fsWjcetwvv4hnRz9L5vSfUHcOszSP6STo/9DR+77Sdw6zNY/pJOj/7vvXHBF3Dq8Rf+QTo7+f3TreV1x6/BW/UM6Ofp/uf6OW+PWYY7+IZ0c/X/1F3WL49Zhrv4hnRz9//ShH+6MW4e36R/SydH/ix947Jy4dbhA/5BOjv53XTzty3Hr8Hb9Qzo5+n/vMxvWxK3DPP1DOjn6H7fnj0fi1qFR/5BOjv5nLz/wkbh1uFD/kE6O/tfPW/mHuHWYr39IJ0f/z+x/+mDcOizQP6STo//tj322JW4dFuof0snR/+OXrftf3Do06R/SydH/v5t/9sm4dVikf0gnR/9nHvzul+LWoVn/kE6O/q9+cNzUuHW4SP+QTo7+N1wz/Qdx67BY/5BOjv4vmfnQpXHr8A79Qzo5+n/f35feHLcOF+sf0snR/6R77nkubh2W6B/SydH/rGtvvyZuHS7RP6STo//rZzQ+GbcOl+of0snR/x3HWufErcNS/UM6OfrvvO35vXHrsEz/kE6O/rs+/fKkuHV4p/4hnRz97xl/5b1x6/Au/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8FAAD///lj0LI=") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2.110455496s ago: executing program 3 (id=14577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2.105182036s ago: executing program 5 (id=14579): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000580)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000800)={0x13, 0x10, 0xfa00, {&(0x7f0000000600), r1, 0x2}}, 0x18) 1.951707569s ago: executing program 5 (id=14581): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x1a0c446, &(0x7f0000000200)=ANY=[], 0x8, 0x1e6, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.951156469s ago: executing program 3 (id=14582): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000000)="dd4e2f1099", 0x5) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c) 1.821457323s ago: executing program 3 (id=14586): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002700)=[@fadd={0x58, 0x114, 0x6, {{0xfffffffc, 0x101}, 0x0, 0x0, 0x80, 0x100, 0x5, 0x0, 0x6c, 0xf}}, @rdma_args={0x48, 0x114, 0x1, {{0x6, 0xfd0}, {0x0}, 0x0, 0x0, 0x0, 0x2}}], 0xa0}, 0x0) 1.710621516s ago: executing program 0 (id=14587): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x3, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000380)='./bus\x00', &(0x7f0000000340)='./file0\x00') 1.663212517s ago: executing program 5 (id=14590): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000500)='./file0\x00', 0x10800, &(0x7f00000004c0)=ANY=[], 0x1, 0x18f, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) 1.589667289s ago: executing program 3 (id=14591): syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 1.209118289s ago: executing program 2 (id=14593): timer_create(0x5, &(0x7f0000000240)={0x0, 0x40, 0x4, @thr={&(0x7f00000000c0), 0x0}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x1b}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x4}, {&(0x7f0000000340)="527302587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0) 1.153568041s ago: executing program 5 (id=14594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}}}, {0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 1.15325881s ago: executing program 0 (id=14595): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="33330000000100000000000086dd60000000000c1140fe800000000000000000000000000001ff020000000000000000000000000001"], 0x0) 1.006611574s ago: executing program 2 (id=14596): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003500)={0x34, r0, 0x101, 0x70bd2b, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40d0) 930.455626ms ago: executing program 2 (id=14597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 824.946898ms ago: executing program 5 (id=14598): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x485, &(0x7f0000000780)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x1, 0xb, 0x64, 0x6, 0x400}) 767.58194ms ago: executing program 2 (id=14599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x7c}}, 0x0) 716.054862ms ago: executing program 0 (id=14600): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x7}) 653.724083ms ago: executing program 4 (id=14601): unshare(0x2000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x10, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001280)={r0, 0x0, 0x0, 0x4}, 0x20) 597.787724ms ago: executing program 0 (id=14602): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x80000000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, 0xa, 0xcb57}, &(0x7f00000003c0)=0x90) 495.741057ms ago: executing program 2 (id=14603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001640)={0x44, r1, 0x1, 0x70bd28, 0x2, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6, 0x5, 'Nq'}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x44}}, 0xc800) 265.948573ms ago: executing program 0 (id=14604): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2e3, &(0x7f0000000800)="$eJzs3UFPE00cx/Hf7Ja2PPDw7CMYE+PBoERPRvBivDQxxNfgRSPSmhAaiIiJcrHxbHwB3rn4AnwRxoMx8YwnT74AbmtmO2Wn7W5LQbog309S2t2d2fnP7rY7/6XNCsC5dX95b/fOT/swUqhQ0j0psIuuqiTpoi5VX25sr203G/VBKwqlqpKHkZKapq/M6kYjq6qtl9RwIjtV0rQ/DycjjuP4R9FBoEhV9xxmLQykint3hn7h06zSMz3RM90KpdYY4zmNzL729UozRccBACiWaZ/fA3een3bj9yCQFtxp3z//f/+34HiP54b2iw6hYN75P8myYmP373/JojTfM5p05TtZ4qjt2LFYWe0jq2uAabqzyv5kMYklmHy21mzcWt1s1gO9VS1h/LxwTlJNdZezZkXbv+r5jHndyv7E3rDSuaaSPkzYPiyl8ddqXpHZrEaPurUPw3w2X81jE+mD6gfjv1Js/D67PfVgIo3/dt7qNp8/ss9Ru1ROL/+3u6F0uXvDDuxlmJeRyG2pOFT3BYKoO85yZq2yemq1e7eY15Jbz2xmraUhteZsrY9erfRozq950sx789DM65c+adkb/wd2ay+o/52ZvZKkpDsyBvanlJSM/FmtK5klg9H7ghGl2/idnuquZl683llfaTYbW+N+YWMYe6Pn80Wk3jmdg+C0RHi0F/Yz1p+jqLFVGk/r5WNvuqrbKXYw01+msrO+UvELt3vaOSH2rrDztj5E650LeEMjHOOnEgqT7vT8Mm/Ef2L+YvbDw7TzP5evTNlRXZL02D/RgHF6PGzY5mVAixm5QXqp/h9vTcZdn8/PgKYyM7iWDpdzJXWv3ZSuezP3diuDcq5IF3SQDZ99Zlnf9ITr/wAAAAAAAAAAAAAAAAAAAGdN37f/v0y3F/zB30t4zfE9cgAAAAAAAAAAAAAAAAAAAAAAjiD//r9VneD9f9PfAUyOcP/f3ht7AjiW3wEAAP//zmlk6Q==") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file2\x00') 227.457464ms ago: executing program 2 (id=14605): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x2, 0x2, 0x1}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x11, r0, 0x4198000) 43.435999ms ago: executing program 0 (id=14606): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000200)='./bus\x00', 0x2010805, &(0x7f0000000000)={[{@order_strict}, {@errors_continue}, {@discard}, {@nobarrier}, {@norecovery}, {@norecovery}, {@order_strict}, {}, {@nobarrier}]}, 0xff, 0xd97, &(0x7f0000000e80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r0, 0xfff, 0x0) 0s ago: executing program 5 (id=14607): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp6=r0}, 0x20) kernel console output (not intermixed with test programs): : syz [ 706.313165][ T5104] usb 3-1: Manufacturer: syz [ 706.360055][ T5104] hub 3-1:4.0: USB hub found [ 706.376231][T22437] XFS (loop5): Unmounting Filesystem [ 706.378527][ T9955] usb 4-1: unable to get BOS descriptor or descriptor too short [ 706.488094][T16686] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 706.518733][ T9955] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.545707][ T9955] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 706.568675][ T5104] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 706.577903][ T9955] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 191 [ 706.810900][ T9955] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 706.838372][ T9955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.866662][ T9955] usb 4-1: Product: syz [ 706.876712][ T9955] usb 4-1: Manufacturer: syz [ 706.878999][T16686] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 706.896970][ T9955] usb 4-1: SerialNumber: syz [ 706.910971][T16686] usb 1-1: config 0 has no interface number 0 [ 706.917186][T16686] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 4 [ 706.921753][ T9955] usb 4-1: config 0 descriptor?? [ 706.948195][ T777] bridge0: port 4(bond0) entered blocking state [ 706.955022][ T777] bridge0: port 4(bond0) entered disabled state [ 706.968440][T16686] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid maxpacket 246, setting to 64 [ 706.989089][ T699] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 706.994367][ T21] usb 3-1: USB disconnect, device number 46 [ 706.996652][ T699] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 707.088405][ C0] usb 4-1: NFC: Urb failure (status -71) [ 707.110902][ C0] usb 4-1: NFC: Urb failure (status -71) [ 707.139504][T16686] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 707.163358][T16686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.178425][ T9955] usb 4-1: NFC: Unable to get FW version [ 707.182985][T16686] usb 1-1: Product: syz [ 707.187455][ T9955] pn533_usb: probe of 4-1:0.0 failed with error -71 [ 707.188553][T16686] usb 1-1: Manufacturer: syz [ 707.200011][T16686] usb 1-1: SerialNumber: syz [ 707.215029][T16686] usb 1-1: config 0 descriptor?? [ 707.238961][ T751] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 707.268701][T16686] redrat3 1-1:0.83: Couldn't find all endpoints [ 707.361273][T24525] usb 4-1: USB disconnect, device number 65 [ 707.375967][ T797] Timeout policy `syz1' can only be used by L3 protocol number 37120 [ 707.454773][ T807] loop2: detected capacity change from 0 to 256 [ 707.508510][T16686] usb 1-1: USB disconnect, device number 64 [ 707.672567][ T822] loop5: detected capacity change from 0 to 256 [ 707.774114][ T829] tmpfs: Bad value for 'mpol' [ 707.846967][ T822] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 708.019223][ T839] tmpfs: Bad value for 'mpol' [ 708.298761][ T864] netlink: 'syz.2.12811': attribute type 3 has an invalid length. [ 708.495203][ T876] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12815'. [ 709.039076][ T936] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12836'. [ 709.241546][ T4410] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 709.370981][ T961] tmpfs: Bad value for 'mpol' [ 709.705366][ T998] loop2: detected capacity change from 0 to 64 [ 710.258572][ T21] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 710.297204][ T1056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12875'. [ 710.320732][ T1058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12876'. [ 710.350966][ T1056] netlink: 252 bytes leftover after parsing attributes in process `syz.4.12875'. [ 710.361424][ T1058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12876'. [ 710.439393][ T1056] netlink: 'syz.4.12875': attribute type 1 has an invalid length. [ 710.479749][ T1056] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12875'. [ 710.508652][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 710.594696][ T1086] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12880'. [ 710.628892][ T21] usb 4-1: config 0 has an invalid interface number: 6 but max is 2 [ 710.665642][ T21] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 710.694342][ T21] usb 4-1: config 0 has no interface number 1 [ 710.747115][ T21] usb 4-1: config 0 has no interface number 2 [ 710.780531][ T21] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 710.844043][ T21] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 710.907001][ T21] usb 4-1: config 0 interface 0 has no altsetting 0 [ 710.907161][ T1110] binder: 1102:1110 ioctl 400c620e 200000000340 returned -22 [ 710.957126][ T21] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 710.981844][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.059782][ T21] usb 4-1: config 0 descriptor?? [ 711.164576][ T1125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12892'. [ 711.338723][ T21] usb 4-1: Could not set interface, error -71 [ 711.371561][ T21] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 711.417295][ T1142] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 711.442094][ T21] usb 4-1: USB disconnect, device number 66 [ 711.849409][ T1182] MTD: Couldn't look up './bus': -15 [ 712.354711][ T1214] loop5: detected capacity change from 0 to 4096 [ 712.559345][ T1214] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 712.619396][ T1253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12929'. [ 713.059966][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 713.313704][ T1298] loop5: detected capacity change from 0 to 1024 [ 713.343494][ T1292] loop2: detected capacity change from 0 to 4096 [ 713.554245][ T1309] loop0: detected capacity change from 0 to 4096 [ 713.779504][ T1292] ntfs3: loop2: ino=3, Correct links count -> 2. [ 713.786145][ T1309] ntfs3: loop0: ino=3, Correct links count -> 2. [ 713.814492][ T1298] hfsplus: catalog record size mismatch (type 2, got 88, expected 248) [ 714.238203][ T1343] xt_ecn: cannot match TCP bits for non-tcp packets [ 714.508861][ T1368] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12966'. [ 714.569866][ T1373] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 714.608400][ T1373] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 714.799178][ T9955] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 714.979427][T22670] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 715.044055][ T1413] netlink: 180 bytes leftover after parsing attributes in process `syz.5.12979'. [ 715.068611][ T1413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12979'. [ 715.250328][ T1431] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12984'. [ 715.318597][ T9955] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.349116][ T9955] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 715.358134][ T9955] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 715.675238][ T1454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12992'. [ 715.679217][ T9955] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 715.723848][ T9955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.781135][ T9955] usb 3-1: Product: syz [ 715.785355][ T9955] usb 3-1: Manufacturer: syz [ 715.816298][ T9955] usb 3-1: SerialNumber: syz [ 716.061025][ T1483] ieee802154 phy1 wpan1: encryption failed: -90 [ 716.261743][ T1500] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13004'. [ 716.264481][ T9955] usb 3-1: 0:2 : does not exist [ 716.322976][ T1506] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.392080][ T9955] usb 3-1: USB disconnect, device number 47 [ 716.497073][ T1532] netlink: 'syz.4.13008': attribute type 4 has an invalid length. [ 716.752016][ T1551] loop2: detected capacity change from 0 to 8 [ 716.812044][ T1554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13015'. [ 716.859217][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 716.908780][ T1551] SQUASHFS error: zlib decompression failed, data probably corrupt [ 716.944463][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 716.944492][ T26] audit: type=1326 audit(1786481617.291:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.0.13018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351cdf70d9 code=0x7ffc0000 [ 716.985311][ T1551] SQUASHFS error: Failed to read block 0x4de: -5 [ 717.015549][ T1551] SQUASHFS error: zlib decompression failed, data probably corrupt [ 717.040262][ T1551] SQUASHFS error: Failed to read block 0x4df: -5 [ 717.088447][ T26] audit: type=1326 audit(1786481617.341:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.0.13018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351cdf70d9 code=0x7ffc0000 [ 717.113039][ T1551] SQUASHFS error: zlib decompression failed, data probably corrupt [ 717.143134][ T1551] SQUASHFS error: Failed to read block 0x4e0: -5 [ 717.177880][ T1551] SQUASHFS error: Failed to read block 0x4e4: -5 [ 717.218489][ T26] audit: type=1326 audit(1786481617.341:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.0.13018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351cdf70d9 code=0x7ffc0000 [ 717.229155][ T1551] SQUASHFS error: Failed to read block 0x9cc: -5 [ 717.307187][ T1551] SQUASHFS error: Failed to read block 0x2cf4: -5 [ 717.350120][ T26] audit: type=1326 audit(1786481617.341:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.0.13018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f351cdf70d9 code=0x7ffc0000 [ 717.359140][ T1551] SQUASHFS error: Failed to read block 0x52cf4: -5 [ 717.498093][ T26] audit: type=1326 audit(1786481617.341:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.0.13018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351cdf70d9 code=0x7ffc0000 [ 717.534498][ T1551] SQUASHFS error: Failed to read block 0x535f4: -5 [ 717.573591][ T1551] SQUASHFS error: zlib decompression failed, data probably corrupt [ 717.648440][ T1551] SQUASHFS error: Failed to read block 0x4de: -5 [ 717.654918][ T26] audit: type=1326 audit(1786481617.341:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.0.13018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f351cdf70d9 code=0x7ffc0000 [ 717.746373][ T1604] loop3: detected capacity change from 0 to 512 [ 717.843309][ T26] audit: type=1326 audit(1786481617.341:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.0.13018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f351cdf70d9 code=0x7ffc0000 [ 717.881501][ T1604] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 717.982641][ T1604] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,grpid,discard,,errors=continue. Quota mode: writeback. [ 718.024359][ T1604] ext4 filesystem being mounted at /2544/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 718.038494][ T26] audit: type=1326 audit(1786481617.341:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1562 comm="syz.0.13018" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351cdf70d9 code=0x7ffc0000 [ 718.068995][ T26] audit: type=1800 audit(1786481618.001:59): pid=1551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13014" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 718.088569][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.458498][ T1641] netlink: 'syz.2.13037': attribute type 2 has an invalid length. [ 718.625706][ T1657] netlink: 'syz.2.13043': attribute type 15 has an invalid length. [ 718.688696][ T1657] netlink: 25 bytes leftover after parsing attributes in process `syz.2.13043'. [ 718.831405][T22670] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 718.966423][ T1690] netlink: 372 bytes leftover after parsing attributes in process `syz.0.13053'. [ 719.016528][ T1690] netlink: 'syz.0.13053': attribute type 3 has an invalid length. [ 719.048803][ T1690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13053'. [ 719.458586][ T1729] netlink: 'syz.5.13065': attribute type 19 has an invalid length. [ 719.526692][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13067'. [ 719.690465][ T1747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13073'. [ 719.738915][ T1750] bridge0: port 3(bond0) entered blocking state [ 719.745271][ T1750] bridge0: port 3(bond0) entered disabled state [ 719.816980][ T1750] device bond0 entered promiscuous mode [ 719.838433][ T1750] device bond_slave_0 entered promiscuous mode [ 719.868198][ T1750] bridge0: port 3(bond0) entered blocking state [ 719.874660][ T1750] bridge0: port 3(bond0) entered forwarding state [ 720.032810][ T1775] loop0: detected capacity change from 0 to 256 [ 720.048622][ T21] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 720.125489][ T1775] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 720.138817][ T155] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 720.237035][ T1792] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13086'. [ 720.288526][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 720.339457][ T1792] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13086'. [ 720.372204][ T1792] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13086'. [ 720.412105][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.473574][ T1792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13086'. [ 720.588758][ T21] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 720.597890][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.618748][ T1806] (unnamed net_device) (uninitialized): up delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 720.665593][ T21] usb 5-1: Product: syz [ 720.676466][ T1806] (unnamed net_device) (uninitialized): peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms [ 720.690498][ T21] usb 5-1: Manufacturer: syz [ 720.708782][ T21] usb 5-1: SerialNumber: syz [ 720.731697][ T21] usb 5-1: config 0 descriptor?? [ 720.746958][ T1806] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 720.819641][ T21] usb 5-1: bad CDC descriptors [ 720.843387][ T21] usb 5-1: unsupported MDLM descriptors [ 720.885952][ T1817] netlink: 'syz.0.13094': attribute type 3 has an invalid length. [ 721.037879][ T9955] usb 5-1: USB disconnect, device number 53 [ 721.067302][ T1837] overlayfs: conflicting options: nfs_export=on,index=off [ 721.174882][ T1844] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 721.385729][ T1858] netlink: 'syz.0.13106': attribute type 3 has an invalid length. [ 721.413867][ T1858] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13106'. [ 721.504890][ T1861] 0xfffffffffffffffd-0x000000020000 : "" [ 721.539309][ T1861] mtd: partition "" is out of reach -- disabled [ 721.604924][ T1108] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 721.699359][ T1861] ftl_cs: FTL header not found. [ 721.705570][ T1873] tmpfs: Bad value for 'mpol' [ 721.878512][ T1108] usb 6-1: Using ep0 maxpacket: 32 [ 722.038891][ T1108] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 722.048038][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.109353][ T1108] usb 6-1: config 0 descriptor?? [ 722.139590][ T1897] netlink: 'syz.4.13117': attribute type 9 has an invalid length. [ 722.161095][ T1108] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 722.162411][ T1835] loop3: detected capacity change from 0 to 32768 [ 722.194046][ T1108] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input49 [ 722.320575][ T1835] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 722.395840][ T5104] usb 6-1: USB disconnect, device number 14 [ 722.602767][ T4197] XFS (loop3): Unmounting Filesystem [ 722.633828][ T1944] netlink: 'syz.4.13124': attribute type 4 has an invalid length. [ 722.642154][ T1944] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13124'. [ 722.662801][ T1944] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 723.177686][ T1970] loop0: detected capacity change from 0 to 1024 [ 723.390868][T24525] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 723.824045][T24525] usb 5-1: config index 0 descriptor too short (expected 65152, got 36) [ 723.835181][ T2019] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13145'. [ 723.848623][ T2019] openvswitch: netlink: Flow key attribute not present in set flow. [ 723.855293][T24525] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 724.033283][ T2031] netlink: 'syz.3.13150': attribute type 2 has an invalid length. [ 724.092432][T24525] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 724.112653][ T2031] netlink: 'syz.3.13150': attribute type 1 has an invalid length. [ 724.121131][T24525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.158986][T24525] usb 5-1: Product: syz [ 724.171025][T24525] usb 5-1: Manufacturer: syz [ 724.199353][T24525] usb 5-1: SerialNumber: syz [ 724.260858][T24525] rtl8150 5-1:1.0: couldn't find required endpoints [ 724.261008][T24525] rtl8150: probe of 5-1:1.0 failed with error -5 [ 724.262688][ T2050] netlink: 'syz.3.13156': attribute type 10 has an invalid length. [ 724.271698][ T2050] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.271741][ T2050] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.271776][ T2050] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.271810][ T2050] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.502058][T24525] usb 5-1: USB disconnect, device number 54 [ 724.603691][T22670] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.830052][ T2093] device bond5 entered promiscuous mode [ 724.836427][ T2093] 8021q: adding VLAN 0 to HW filter on device bond5 [ 725.114580][T24525] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 725.211429][ T2162] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13176'. [ 725.294778][ T2165] device ipip0 entered promiscuous mode [ 725.568699][T24525] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.598378][T24525] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 725.605346][ T2197] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 725.658395][T24525] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 725.693199][T24525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.746083][T24525] usb 4-1: config 0 descriptor?? [ 725.859011][ T3072] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 725.908765][ T2215] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 726.032035][T24525] Bluetooth: Can't get state to change to load ram patch err [ 726.049262][T24525] Bluetooth: Loading patch file failed [ 726.073853][T24525] ath3k: probe of 4-1:0.0 failed with error -121 [ 726.214053][ T2243] netlink: 'syz.5.13203': attribute type 21 has an invalid length. [ 726.257168][ T2243] IPv6: NLM_F_CREATE should be specified when creating new route [ 726.266157][T24525] usb 4-1: USB disconnect, device number 67 [ 726.293365][ T2243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 726.300751][ T2243] IPv6: NLM_F_CREATE should be set when creating new route [ 726.308057][ T2243] IPv6: NLM_F_CREATE should be set when creating new route [ 726.315340][ T2243] IPv6: NLM_F_CREATE should be set when creating new route [ 726.363865][ T2256] loop2: detected capacity change from 0 to 256 [ 726.889076][ T2291] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.13217'. [ 727.186067][ T2317] loop3: detected capacity change from 0 to 128 [ 727.264102][ T2317] FAT-fs (loop3): FAT read failed (blocknr 2080) [ 727.346548][T24525] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 727.356788][ T2326] 8021q: adding VLAN 0 to HW filter on device bond6 [ 727.875837][T24525] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 727.891942][ T2408] loop0: detected capacity change from 0 to 1024 [ 727.908101][T24525] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.015999][ T2408] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 728.048859][T24525] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 728.076054][T24525] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 728.108600][T24525] usb 3-1: Manufacturer: syz [ 728.139480][T24525] usb 3-1: config 0 descriptor?? [ 728.236314][T24525] igorplugusb 3-1:0.0: incorrect number of endpoints [ 728.358461][T16686] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 728.473888][ T5104] usb 3-1: USB disconnect, device number 48 [ 728.664416][ T2442] loop3: detected capacity change from 0 to 4096 [ 728.758601][T16686] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 728.767555][T16686] usb 1-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 728.800889][ T2442] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 728.815711][T16686] usb 1-1: config 0 has no interface number 0 [ 728.854771][ T2442] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 728.947945][ T2442] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 728.988565][ T2442] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 729.008741][T16686] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 729.038491][ T21] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 729.046195][T16686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.057627][ T2442] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 729.070394][T16686] usb 1-1: Product: syz [ 729.074620][T16686] usb 1-1: Manufacturer: syz [ 729.098608][T16686] usb 1-1: SerialNumber: syz [ 729.110157][ T2442] ntfs: volume version 3.1. [ 729.130730][T16686] usb 1-1: config 0 descriptor?? [ 729.150100][ T2442] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 729.167891][ T2442] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 729.184599][ T2442] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 729.196563][ T2442] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 729.208285][ T2442] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 729.304480][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 729.389707][ T1108] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 729.418784][T16686] qmi_wwan: probe of 1-1:0.207 failed with error -22 [ 729.429201][ T21] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 729.449611][ T21] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.470448][T16686] usb 1-1: USB disconnect, device number 65 [ 729.520890][ T21] usb 6-1: config 0 has no interface number 0 [ 729.714887][ T21] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 729.746552][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.771108][ T21] usb 6-1: Product: syz [ 729.786674][ T21] usb 6-1: Manufacturer: syz [ 729.794617][ T21] usb 6-1: SerialNumber: syz [ 729.820265][ T21] usb 6-1: config 0 descriptor?? [ 729.838731][ T1108] usb 3-1: config index 0 descriptor too short (expected 2075, got 27) [ 729.857431][ T1108] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 729.878437][ T1108] usb 3-1: config 0 has no interface number 0 [ 729.884567][ T1108] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 12408, setting to 64 [ 729.945956][ T1108] usb 3-1: config 0 interface 200 has no altsetting 0 [ 730.084802][ T21] usb 6-1: USB disconnect, device number 15 [ 730.182297][ T1108] usb 3-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 730.198374][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.246983][ T1108] usb 3-1: Product: syz [ 730.259544][ T1108] usb 3-1: Manufacturer: syz [ 730.264190][ T1108] usb 3-1: SerialNumber: syz [ 730.309314][ T1108] usb 3-1: config 0 descriptor?? [ 730.340156][ T4410] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.422150][ T2492] loop4: detected capacity change from 0 to 32768 [ 730.700072][ T1108] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input50 [ 730.744221][ T2575] netlink: 'syz.5.13278': attribute type 8 has an invalid length. [ 730.788602][ T1108] usb 3-1: USB disconnect, device number 49 [ 731.013494][ T2606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13282'. [ 731.364369][ T2639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 731.650448][ T2129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 732.558550][ T21] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 732.808801][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 732.865733][ T2793] user_cmd nlpid 5240 [ 732.928602][ T21] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 732.945845][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.998067][ T21] usb 5-1: config 0 descriptor?? [ 733.080528][ T21] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 733.166168][ T2808] overlayfs: unrecognized mount option "\{\" or missing value [ 733.296806][ T21] usb 5-1: Detected FT8U232AM [ 733.299718][ T2711] loop5: detected capacity change from 0 to 32768 [ 733.305353][ T21] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 733.500523][ T9955] usb 5-1: USB disconnect, device number 55 [ 733.530191][ T9955] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 733.599445][ T9955] ftdi_sio 5-1:0.0: device disconnected [ 733.634314][ T2711] XFS (loop5): Mounting V5 Filesystem [ 733.847913][ T2711] XFS (loop5): Ending clean mount [ 733.994151][T22437] XFS (loop5): Unmounting Filesystem [ 734.352237][ T2798] loop2: detected capacity change from 0 to 40427 [ 734.417799][ T2798] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 734.478044][ T2798] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 734.557054][ T2798] F2FS-fs (loop2): invalid crc value [ 734.641222][ T2798] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 734.947069][ T2798] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 734.964538][ T2798] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 735.116637][ T2946] loop3: detected capacity change from 0 to 164 [ 735.141163][ T2798] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 735.245381][ T2946] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 735.460032][ T4240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 735.476474][ T2977] loop3: detected capacity change from 0 to 1024 [ 735.546042][ T2982] netlink: 168 bytes leftover after parsing attributes in process `syz.5.13367'. [ 735.622526][ T2977] hfsplus: keylen 2050 too large [ 735.701315][ T2991] netlink: 'syz.4.13369': attribute type 2 has an invalid length. [ 735.735678][ T2991] netlink: 119 bytes leftover after parsing attributes in process `syz.4.13369'. [ 736.058622][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 736.058636][ T26] audit: type=1400 audit(1786481636.411:60): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=3007 comm="syz.4.13374" [ 736.462909][ T3035] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13382'. [ 736.508193][ T3042] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13384'. [ 736.644453][ T2963] loop0: detected capacity change from 0 to 32768 [ 736.692272][ T3055] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 736.748555][ T21] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 736.981241][ T2963] [ 736.981241][ T2963] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 736.981241][ T2963] [ 736.999722][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 737.033856][ T2963] ialloc: diAlloc returned -5! [ 737.110740][ T4186] [ 737.110740][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 737.110740][ T4186] [ 737.124423][ T21] usb 5-1: config 2 has an invalid interface number: 111 but max is 0 [ 737.145748][ T21] usb 5-1: config 2 has no interface number 0 [ 737.161389][ T21] usb 5-1: too many endpoints for config 2 interface 111 altsetting 55: 172, using maximum allowed: 30 [ 737.188293][ T4186] [ 737.188293][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 737.188293][ T4186] [ 737.207538][ T3122] loop2: detected capacity change from 0 to 1764 [ 737.226895][ T21] usb 5-1: config 2 interface 111 altsetting 55 has 0 endpoint descriptors, different from the interface descriptor's value: 172 [ 737.288540][ T21] usb 5-1: config 2 interface 111 has no altsetting 0 [ 737.325942][ T21] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 737.366456][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.387718][ T4410] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 737.513789][ T3138] loop0: detected capacity change from 0 to 256 [ 737.690584][ T26] audit: type=1800 audit(1786481638.041:61): pid=3138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13403" name="bus" dev="loop0" ino=1048670 res=0 errno=0 [ 737.712261][ T21] usb 5-1: string descriptor 0 read error: -71 [ 737.763114][ T21] usb 5-1: USB disconnect, device number 56 [ 738.082778][ T3191] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 738.269527][ T3205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13422'. [ 738.306981][ T3205] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13422'. [ 738.337007][ T3209] usb usb8: usbfs: process 3209 (syz.2.13424) did not claim interface 0 before use [ 738.595922][ T3237] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13431'. [ 738.745096][ T3251] xt_TPROXY: Can be used only with -p tcp or -p udp [ 738.831343][ T3259] loop4: detected capacity change from 0 to 1024 [ 739.033403][ T4240] hfsplus: b-tree write err: -5, ino 25 [ 739.047012][ T4240] hfsplus: b-tree write err: -5, ino 4 [ 739.054223][ T3280] netlink: 'syz.5.13446': attribute type 1 has an invalid length. [ 739.079440][ T4240] hfsplus: b-tree write err: -5, ino 2 [ 739.103428][ T3280] netlink: 128 bytes leftover after parsing attributes in process `syz.5.13446'. [ 739.188804][ T3280] NCSI netlink: No device for ifindex 0 [ 739.544902][ T3320] siw: device registration error -23 [ 739.730386][T24525] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 739.811968][ T3335] loop5: detected capacity change from 0 to 256 [ 739.855272][ T3269] loop3: detected capacity change from 0 to 32768 [ 739.972987][ T3269] JBD2: Ignoring recovery information on journal [ 740.061383][T24525] usb 3-1: Using ep0 maxpacket: 32 [ 740.079657][ T3269] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 740.218871][T24525] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 740.228165][T24525] usb 3-1: config 0 has no interface number 0 [ 740.273145][T24525] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 740.340128][T24525] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xD3, skipping [ 740.471995][T24525] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 740.514839][ T3386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13478'. [ 740.530645][ T4197] ocfs2: Unmounting device (7,3) on (node local) [ 740.644235][ T3391] netlink: 'syz.4.13481': attribute type 9 has an invalid length. [ 740.722230][ T3391] netlink: 'syz.4.13481': attribute type 6 has an invalid length. [ 740.805380][T24525] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 740.834784][T24525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.877242][T24525] usb 3-1: Product: syz [ 740.903652][T24525] usb 3-1: Manufacturer: syz [ 740.928112][T24525] usb 3-1: SerialNumber: syz [ 740.993609][T24525] usb 3-1: config 0 descriptor?? [ 741.018734][ T3406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13486'. [ 741.075576][T24525] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input51 [ 741.219584][ T5683] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 741.340834][ T21] usb 3-1: USB disconnect, device number 50 [ 741.710601][ T3475] netlink: 7 bytes leftover after parsing attributes in process `syz.0.13503'. [ 741.784483][ T3475] netlink: 7 bytes leftover after parsing attributes in process `syz.0.13503'. [ 741.984252][ T3499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13508'. [ 742.515647][ T3072] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 742.538591][ T21] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 742.664389][ T3550] loop4: detected capacity change from 0 to 64 [ 742.718716][ T4232] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 742.898719][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.919284][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 742.928238][ T21] usb 1-1: config 1 has no interface number 0 [ 743.055642][ T3567] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13525'. [ 743.128681][ T21] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 743.155477][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.165885][ T1108] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 743.174002][ T21] usb 1-1: Product: syz [ 743.178192][ T21] usb 1-1: Manufacturer: syz [ 743.203559][ T21] usb 1-1: SerialNumber: syz [ 743.278638][ T4232] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 743.312207][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.337706][ T4232] usb 4-1: Product: syz [ 743.358048][ T4232] usb 4-1: Manufacturer: syz [ 743.385583][ T4232] usb 4-1: SerialNumber: syz [ 743.403516][ T4232] usb 4-1: config 0 descriptor?? [ 743.422353][ T3574] loop5: detected capacity change from 0 to 4096 [ 743.438508][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 743.470005][ T4232] ch341 4-1:0.0: ch341-uart converter detected [ 743.588676][ T21] usb 1-1: 1:0 : does not exist [ 743.593740][ T21] usb 1-1: 1:2 : does not exist [ 743.609286][ T21] usb 1-1: 1:3 : does not exist [ 743.617266][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.623335][ T21] usb 1-1: BAAD HEADPHONE p_chmask mismatch [ 743.640843][ T3592] overlayfs: missing 'lowerdir' [ 743.641385][ T1108] usb 3-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 743.662387][ T21] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 743.716531][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.722494][ T4232] usb 4-1: failed to receive control message: -71 [ 743.741636][ T21] usb 1-1: USB disconnect, device number 66 [ 743.748740][ T4232] ch341-uart: probe of ttyUSB0 failed with error -71 [ 743.791229][ T4232] usb 4-1: USB disconnect, device number 68 [ 743.812732][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.815925][ T4232] ch341 4-1:0.0: device disconnected [ 743.840393][ T1108] usb 3-1: config 0 descriptor?? [ 743.878715][T16686] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 743.900490][ T1108] usb 3-1: Found UVC 0.00 device (05a9:2630) [ 743.918402][ T1108] usb 3-1: No valid video chain found. [ 744.134066][ T1108] usb 3-1: USB disconnect, device number 51 [ 744.169828][ T3629] loop0: detected capacity change from 0 to 16 [ 744.281998][ T3629] erofs: (device loop0): mounted with root inode @ nid 36. [ 744.408742][T16686] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 744.428124][T16686] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 744.440214][T16686] usb 5-1: Product: syz [ 744.444473][T16686] usb 5-1: Manufacturer: syz [ 744.449278][T16686] usb 5-1: SerialNumber: syz [ 744.465054][T16686] usb 5-1: config 0 descriptor?? [ 744.492515][ T4232] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 744.578114][ T3659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13542'. [ 744.728507][T16686] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 744.739172][T16686] peak_usb 5-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 744.788550][ T4232] usb 6-1: Using ep0 maxpacket: 8 [ 744.810829][ T3672] xt_limit: Overflow, try lower: 2/2147483648 [ 744.846791][ T3666] loop0: detected capacity change from 0 to 8192 [ 744.858879][T16686] peak_usb: probe of 5-1:0.0 failed with error -71 [ 744.902428][ T3666] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 744.912228][ T4232] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.925684][T16686] usb 5-1: USB disconnect, device number 57 [ 744.929510][ T3666] REISERFS (device loop0): using ordered data mode [ 744.932096][ T4232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 744.938247][ T3666] reiserfs: using flush barriers [ 744.955695][ T4232] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 744.968721][ T4232] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 744.978199][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.988249][ T4232] usb 6-1: config 0 descriptor?? [ 744.999050][ T3666] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 745.047889][ T3666] REISERFS (device loop0): checking transaction log (loop0) [ 745.158210][ T3666] REISERFS (device loop0): Using r5 hash to sort names [ 745.167494][ T3697] xt_hashlimit: size too large, truncated to 1048576 [ 745.174786][ T3666] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 745.295686][T16686] usb 6-1: USB disconnect, device number 16 [ 745.336482][ T3705] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13552'. [ 745.685302][ T3727] loop2: detected capacity change from 0 to 256 [ 745.782368][ T3727] FAT-fs (loop2): Directory bread(block 64) failed [ 745.832484][ T3727] FAT-fs (loop2): Directory bread(block 65) failed [ 745.849387][ T3727] FAT-fs (loop2): Directory bread(block 66) failed [ 745.859019][T16686] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 745.868669][ T3727] FAT-fs (loop2): Directory bread(block 67) failed [ 745.875281][ T3727] FAT-fs (loop2): Directory bread(block 68) failed [ 745.948477][ T3727] FAT-fs (loop2): Directory bread(block 69) failed [ 745.955130][ T3727] FAT-fs (loop2): Directory bread(block 70) failed [ 745.971607][ T3743] netlink: 'syz.5.13562': attribute type 29 has an invalid length. [ 746.011140][ T3737] loop3: detected capacity change from 0 to 4096 [ 746.050806][ T3727] FAT-fs (loop2): Directory bread(block 71) failed [ 746.057461][ T3727] FAT-fs (loop2): Directory bread(block 72) failed [ 746.098489][T16686] usb 1-1: Using ep0 maxpacket: 8 [ 746.100409][ T3727] FAT-fs (loop2): Directory bread(block 73) failed [ 746.218616][T16686] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.252449][ T3737] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 746.340245][ T5683] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 746.350167][ T3759] netlink: 220 bytes leftover after parsing attributes in process `syz.4.13566'. [ 746.388740][T16686] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 746.406630][T16686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.435918][T16686] usb 1-1: Product: syz [ 746.441993][T16686] usb 1-1: Manufacturer: syz [ 746.448795][T16686] usb 1-1: SerialNumber: syz [ 746.489351][T16686] usb 1-1: config 0 descriptor?? [ 746.550958][T16686] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 746.577147][T16686] usb 1-1: selecting invalid altsetting 1 [ 746.583282][ T26] audit: type=1400 audit(1786481646.921:62): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=3768 comm="syz.2.13568" [ 746.768814][T16686] gspca_stk014: init reg: 0x00 [ 746.773703][T16686] stk014: probe of 1-1:0.0 failed with error -5 [ 746.955474][ T3793] nvme_rdma: malformed address passed: malformed:4420 [ 747.013362][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 747.022151][ T21] usb 1-1: USB disconnect, device number 67 [ 747.046374][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 747.084926][ T3804] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 747.105753][ T3811] loop2: detected capacity change from 0 to 512 [ 747.144505][ T3788] loop5: detected capacity change from 0 to 8192 [ 747.266196][ T3811] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.13580: Invalid inode bitmap blk 4 in block_group 0 [ 747.304559][ T3811] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 747.320966][ T3788] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 747.388627][ T3788] FAT-fs (loop5): Filesystem has been set read-only [ 747.414169][ T3833] netlink: 140 bytes leftover after parsing attributes in process `syz.3.13585'. [ 747.423656][ T3833] netlink: 10 bytes leftover after parsing attributes in process `syz.3.13585'. [ 747.444786][ T3833] bond0: (slave bond_slave_0): Releasing backup interface [ 747.478147][ T3833] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 747.506451][ T3811] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 747.585711][ T3811] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.13580: Invalid inode bitmap blk 4 in block_group 0 [ 747.622133][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.639068][ T3811] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 747.817401][ T3854] netlink: 'syz.3.13589': attribute type 25 has an invalid length. [ 747.868404][ T3854] netlink: 'syz.3.13589': attribute type 6 has an invalid length. [ 748.134396][ T3880] usb usb8: usbfs: process 3880 (syz.2.13598) did not claim interface 0 before use [ 748.207576][ T3883] netlink: 140 bytes leftover after parsing attributes in process `syz.5.13600'. [ 748.238637][ T3883] netlink: 10 bytes leftover after parsing attributes in process `syz.5.13600'. [ 748.258936][ T5683] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 748.299196][ T3883] bond0: (slave bond_slave_0): Releasing backup interface [ 748.363048][ T3883] device bond_slave_0 left promiscuous mode [ 748.394747][ T3883] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 748.454116][ T3895] netlink: 'syz.2.13604': attribute type 10 has an invalid length. [ 748.498273][ T3904] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 748.514804][ T3895] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 748.537981][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 748.558454][ T3905] netlink: 'syz.3.13609': attribute type 1 has an invalid length. [ 748.579560][ T3895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.606916][ T3905] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13609'. [ 748.620889][ T4240] bridge0: port 3(bond0) entered disabled state [ 748.738378][ T3905] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13609'. [ 748.776595][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13612'. [ 749.085436][ T3948] netlink: 'syz.5.13621': attribute type 1 has an invalid length. [ 749.094624][ T3948] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13621'. [ 749.530163][ T3991] netlink: 'syz.0.13636': attribute type 1 has an invalid length. [ 749.568815][ T3993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13637'. [ 749.707958][ T4001] openvswitch: netlink: Actions may not be safe on all matching packets [ 749.849130][ T4010] loop3: detected capacity change from 0 to 512 [ 750.004468][ T4010] EXT4-fs (loop3): 1 truncate cleaned up [ 750.033504][ T4010] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 750.456460][ T4050] netlink: 'syz.5.13653': attribute type 25 has an invalid length. [ 750.498648][ T4050] netlink: 'syz.5.13653': attribute type 6 has an invalid length. [ 751.394637][ T9955] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 751.592305][ T1108] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 751.895792][ T9955] usb 5-1: unable to get BOS descriptor or descriptor too short [ 751.968828][ T9955] usb 5-1: not running at top speed; connect to a high speed hub [ 752.053723][ T1108] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 752.073030][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.081762][ T9955] usb 5-1: config 1 has an invalid interface number: 122 but max is 0 [ 752.098370][ T9955] usb 5-1: config 1 has no interface number 0 [ 752.109118][ T155] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 752.119855][ T9955] usb 5-1: config 1 interface 122 altsetting 15 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 752.132340][ T1108] usb 3-1: config 0 descriptor?? [ 752.138627][T16686] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 752.168397][ T9955] usb 5-1: config 1 interface 122 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 752.189858][ T1108] cp210x 3-1:0.0: cp210x converter detected [ 752.209804][ T9955] usb 5-1: config 1 interface 122 has no altsetting 0 [ 752.354384][ T4239] netlink: 'syz.5.13691': attribute type 2 has an invalid length. [ 752.386184][ T4239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13691'. [ 752.405658][T16686] usb 4-1: Using ep0 maxpacket: 8 [ 752.418842][ T9955] usb 5-1: New USB device found, idVendor=0451, idProduct=5052, bcdDevice=f0.86 [ 752.439285][ T9955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.447338][ T9955] usb 5-1: Product: syz [ 752.476916][ T9955] usb 5-1: Manufacturer: syz [ 752.500066][ T9955] usb 5-1: SerialNumber: syz [ 752.528759][T16686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 752.548804][ T4114] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 752.550675][T16686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 752.596463][T16686] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 752.629307][ T1108] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 752.638436][T16686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 752.649498][ T1108] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 752.688930][T16686] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 752.699670][ T1108] usb 3-1: cp210x converter now attached to ttyUSB0 [ 752.729147][ T1108] usb 3-1: USB disconnect, device number 52 [ 752.753076][T16686] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 752.783669][ T1108] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 752.791654][T16686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.823085][ T1108] cp210x 3-1:0.0: device disconnected [ 752.830184][ T4269] binfmt_misc: register: failed to install interpreter file ./file0 [ 752.847687][T16686] usb 4-1: config 0 descriptor?? [ 752.859956][ T9955] ti_usb_3410_5052 5-1:1.122: TI USB 5052 2 port adapter converter detected [ 752.878997][ T4185] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 752.946148][ T9955] usb 5-1: USB disconnect, device number 58 [ 753.023651][ T4296] netlink: 'syz.0.13700': attribute type 2 has an invalid length. [ 753.053353][ T4296] netlink: 'syz.0.13700': attribute type 1 has an invalid length. [ 753.083717][ T4296] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13700'. [ 753.208674][ T4194] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 753.291041][ T4309] loop0: detected capacity change from 0 to 164 [ 753.370151][ T21] usb 4-1: USB disconnect, device number 69 [ 753.462579][ T4309] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 754.018769][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.277065][ T4396] netlink: 'syz.3.13726': attribute type 1 has an invalid length. [ 754.306103][ T26] audit: type=1400 audit(1786481654.651:63): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4389 comm="syz.2.13727" [ 754.420160][ T4402] libceph: resolve ' [ 754.420160][ T4402] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 754.420160][ T4402] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 754.799153][ T9955] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 754.838521][ T5104] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 755.040090][ T4458] loop3: detected capacity change from 0 to 8 [ 755.107613][ T4464] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13746'. [ 755.159084][ T4458] SQUASHFS error: zlib decompression failed, data probably corrupt [ 755.168509][ T4458] SQUASHFS error: Failed to read block 0x4de: -5 [ 755.214220][ T4458] SQUASHFS error: Failed to read block 0x4e2: -5 [ 755.292595][ T4458] SQUASHFS error: Failed to read block 0x9ca: -5 [ 755.322654][ T4475] tmpfs: Bad value for 'mpol' [ 755.338973][ T4458] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 755.376222][ T4458] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 755.384339][ T5104] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 755.410519][ T5104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.427186][ T5104] usb 1-1: Product: syz [ 755.431978][ T4458] SQUASHFS error: Failed to read block 0x535f2: -5 [ 755.444488][ T5104] usb 1-1: Manufacturer: syz [ 755.450269][ T9955] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 755.452312][ T5104] usb 1-1: SerialNumber: syz [ 755.472906][ T9955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.496926][ T26] audit: type=1800 audit(1786481655.841:64): pid=4458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13745" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 755.530720][ T9955] usb 3-1: Product: syz [ 755.549024][ T9955] usb 3-1: Manufacturer: syz [ 755.565641][ T9955] usb 3-1: SerialNumber: syz [ 755.589580][ T5104] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 755.650634][ T9955] usb 3-1: USB2VGA dongle found at address 53 [ 755.707209][ T9955] usb 3-1: Allocated 8 output buffers [ 756.219712][ T4530] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13760'. [ 756.238544][ T5104] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 756.565479][ T9955] usb 3-1: Failed to early initialize device [ 756.604731][ T9955] usb 3-1: USB disconnect, device number 53 [ 756.648196][ T1108] usb 1-1: USB disconnect, device number 68 [ 757.003298][ T4514] loop5: detected capacity change from 0 to 32768 [ 757.093485][ T4594] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 757.109831][ T4514] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.13756 (4514) [ 757.205326][ T4514] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 757.265341][ T4514] BTRFS info (device loop5): turning off barriers [ 757.328444][ T4514] BTRFS info (device loop5): force zlib compression, level 3 [ 757.335929][ T4514] BTRFS info (device loop5): enabling ssd optimizations [ 757.418390][ T4514] BTRFS info (device loop5): using spread ssd allocation scheme [ 757.426120][ T4514] BTRFS info (device loop5): using free space tree [ 757.495719][ T4514] BTRFS info (device loop5): has skinny extents [ 757.538487][ T5104] usb 1-1: Service connection timeout for: 256 [ 757.544703][ T5104] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 757.607357][ T5104] ath9k_htc: Failed to initialize the device [ 757.644700][ T1108] usb 1-1: ath9k_htc: USB layer deinitialized [ 757.867292][ T4240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 758.193337][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 758.285823][ T4514] BTRFS info (device loop5): not using ssd optimizations [ 758.358559][ T4514] BTRFS info (device loop5): not using spread ssd allocation scheme [ 758.366698][ T4514] BTRFS info (device loop5): enabling ssd optimizations [ 758.374535][ T4707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13807'. [ 758.398570][ T4514] BTRFS info (device loop5): using spread ssd allocation scheme [ 758.417561][ T4710] loop0: detected capacity change from 0 to 1024 [ 758.561386][ T4710] EXT4-fs (loop0): barriers disabled [ 758.577049][ T4710] JBD2: no valid journal superblock found [ 758.620133][ T4710] EXT4-fs (loop0): error loading journal [ 758.712476][ T4730] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 759.598502][ T4786] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13830'. [ 759.790385][ T3072] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 760.006784][ T4803] loop5: detected capacity change from 0 to 4096 [ 760.079404][ T4821] loop2: detected capacity change from 0 to 64 [ 760.082261][ T4803] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 760.167206][ T4828] device sit0 entered promiscuous mode [ 760.239174][ T4828] netlink: 'syz.3.13843': attribute type 1 has an invalid length. [ 760.247035][ T4828] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13843'. [ 760.391548][ T4834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13846'. [ 760.620796][ T4850] set match dimension is over the limit! [ 761.056117][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13859'. [ 761.166626][T16010] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 761.219358][ T4885] loop0: detected capacity change from 0 to 4096 [ 761.247998][ T4885] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 761.290721][ T4885] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 761.372741][ T4885] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 761.402365][ T4885] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 761.428552][T16010] usb 6-1: Using ep0 maxpacket: 16 [ 761.507795][ T4885] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 761.548833][T16010] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 761.562677][ T4885] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 761.582790][ C1] vkms_vblank_simulate: vblank timer overrun [ 761.590671][T16010] usb 6-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config [ 761.601237][T16010] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 761.610536][T16010] usb 6-1: config 1 has no interface number 1 [ 761.616793][ T4885] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 761.626207][T16010] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 761.648498][ T4885] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 761.683532][T16010] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x89 has an invalid bInterval 201, changing to 7 [ 761.696130][ T4900] loop4: detected capacity change from 0 to 2048 [ 761.703820][ T4885] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 761.713018][ T4885] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 761.733109][ C1] vkms_vblank_simulate: vblank timer overrun [ 761.744195][ T4885] ntfs: volume version 3.1. [ 761.848958][ T4900] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 761.859455][T16010] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 761.887671][T16010] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.918752][T16010] usb 6-1: Product: syz [ 761.922953][T16010] usb 6-1: Manufacturer: syz [ 761.958554][T16010] usb 6-1: SerialNumber: syz [ 762.152943][ T4927] loop4: detected capacity change from 0 to 1024 [ 762.222002][ T4927] EXT4-fs (loop4): unsupported inode size: 143 [ 762.238613][ T4927] EXT4-fs (loop4): blocksize: 1024 [ 762.278629][T16010] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 762.303719][T16010] usb 6-1: found format II with max.bitrate = 0, frame size=0 [ 762.331184][T16010] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 762.379918][T16010] usb 6-1: USB disconnect, device number 17 [ 762.621567][ T4963] loop2: detected capacity change from 0 to 4096 [ 762.670712][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 762.725773][ T4963] ntfs: volume version 3.1. [ 762.883786][ T4976] netlink: 'syz.5.13881': attribute type 21 has an invalid length. [ 762.945765][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13881'. [ 763.078851][ T3072] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 763.162716][ T4998] qrtr: Invalid version 0 [ 763.270474][ T4927] loop4: detected capacity change from 0 to 32768 [ 763.311332][ T4927] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop4 scanned by syz.4.13872 (4927) [ 763.358546][ T21] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 763.446215][ T4927] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 763.467386][ T5008] nvme_fabrics: no handler found for transport hoop. [ 763.538223][ T4927] BTRFS info (device loop4): max_inline at 160 [ 763.550582][ T5022] device netdevsim0 entered promiscuous mode [ 763.556765][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 763.564876][ T4927] BTRFS info (device loop4): unrecognized rescue option 'isuperflags' [ 763.602584][ T4927] BTRFS error (device loop4): unrecognized rescue value isuperflags [ 763.677766][ T4927] BTRFS error (device loop4): open_ctree failed: -22 [ 763.788479][ T5034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13895'. [ 763.797566][ T5034] netlink: 'syz.3.13895': attribute type 1 has an invalid length. [ 763.811950][T24531] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 763.848730][ T5034] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13895'. [ 763.910291][ T5041] IPv6: Can't replace route, no match found [ 764.224694][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13904'. [ 764.310698][ T5065] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13906'. [ 764.336437][ T5063] loop3: detected capacity change from 0 to 64 [ 764.399276][ T5063] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 764.613435][T24531] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 764.632780][T24531] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.673077][T24531] usb 1-1: Product: syz [ 764.677290][T24531] usb 1-1: Manufacturer: syz [ 764.718536][ T5088] sp0: Synchronizing with TNC [ 764.724638][T24531] usb 1-1: SerialNumber: syz [ 764.775211][T24531] usb 1-1: config 0 descriptor?? [ 764.883867][T24531] usb 1-1: selecting invalid altsetting 3 [ 764.930143][T24531] comedi comedi5: could not set alternate setting 3 in high speed [ 764.938013][T24531] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 765.000333][T24531] usbdux: probe of 1-1:0.0 failed with error -22 [ 765.096932][ T5128] netlink: 'syz.4.13918': attribute type 41 has an invalid length. [ 765.100981][ T5014] udc-core: couldn't find an available UDC or it's busy [ 765.218374][ T5014] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 765.311156][ T5147] netlink: 'syz.4.13923': attribute type 3 has an invalid length. [ 765.319149][T24525] usb 1-1: USB disconnect, device number 69 [ 765.575013][ T5169] binder: 5167:5169 ioctl 40046210 0 returned -14 [ 766.041843][ T5211] netlink: 'syz.2.13946': attribute type 3 has an invalid length. [ 766.128369][ T5211] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13946'. [ 766.414687][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:bb) already exists on: batadv_slave_0 [ 766.430917][T24525] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 766.558500][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.593658][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:bb) already exists on: batadv_slave_0 [ 766.625321][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.659955][ T5235] device ip6gretap2 entered promiscuous mode [ 766.914573][ T5192] loop4: detected capacity change from 0 to 32768 [ 766.921433][T24525] usb 4-1: unable to get BOS descriptor or descriptor too short [ 767.059350][T24525] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.076927][ T5192] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 767.104770][T24525] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 767.333873][ T5288] loop0: detected capacity change from 0 to 512 [ 767.468990][T24525] usb 4-1: string descriptor 0 read error: -22 [ 767.475280][T24525] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 767.510549][ T5288] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.13970: bg 0: block 313: padding at end of block bitmap is not set [ 767.572500][ T5288] EXT4-fs (loop0): Remounting filesystem read-only [ 767.608384][T24525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.637267][ T5288] EXT4-fs (loop0): 1 truncate cleaned up [ 767.658505][ T5288] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 767.679953][ C1] vkms_vblank_simulate: vblank timer overrun [ 767.821134][ T5264] loop2: detected capacity change from 0 to 32768 [ 767.914140][ T5264] (syz.2.13963,5264,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 767.968062][ T5264] (syz.2.13963,5264,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 768.178853][ T3072] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 768.226097][ T5264] JBD2: Ignoring recovery information on journal [ 768.243573][ T21] usb 4-1: USB disconnect, device number 71 [ 768.364252][ T5264] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 768.743557][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 768.743573][ T26] audit: type=1800 audit(1786481669.091:65): pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13963" name="file1" dev="loop2" ino=16978 res=0 errno=0 [ 768.880594][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 768.899786][ T5304] loop4: detected capacity change from 0 to 32768 [ 769.227388][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13996'. [ 770.598635][T24531] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 770.640980][ T5525] PKCS8: Unsupported PKCS#8 version [ 771.000754][T24531] usb 1-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 771.075360][ T5558] SET target dimension over the limit! [ 771.150935][T24531] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 771.172429][T24531] usb 1-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 771.210237][T24531] usb 1-1: Product: syz [ 771.228391][ T5569] loop3: detected capacity change from 0 to 256 [ 771.300306][ T5499] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 771.312549][ T5569] exfat: Deprecated parameter 'utf8' [ 771.317879][ T5569] exfat: Deprecated parameter 'utf8' [ 771.326622][T24531] usbhid 1-1:15.0: fixing wrong optional hid class descriptors count [ 771.332484][ T5578] loop2: detected capacity change from 0 to 64 [ 771.358417][T24531] usbhid 1-1:15.0: can't add hid device: -22 [ 771.364501][T24531] usbhid: probe of 1-1:15.0 failed with error -22 [ 771.381444][ T5569] exfat: Deprecated parameter 'utf8' [ 771.445539][ T5569] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 771.470743][ T5585] loop4: detected capacity change from 0 to 64 [ 771.608906][T24531] usb 1-1: USB disconnect, device number 70 [ 771.791916][ T5612] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 771.806719][ T5615] loop4: detected capacity change from 0 to 1764 [ 771.937749][ T5615] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 772.253022][ T5642] loop0: detected capacity change from 0 to 64 [ 772.382023][ T5655] loop3: detected capacity change from 0 to 64 [ 772.429233][ T5645] loop4: detected capacity change from 0 to 4096 [ 772.530308][ T5645] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 772.734627][ T5645] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 458752 out of range 0-8 [ 772.804802][ T5645] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 772.841630][ T5687] comedi comedi2: pcl812: I/O port conflict (0x140,16) [ 772.856820][ T5688] loop5: detected capacity change from 0 to 512 [ 772.869558][ T5645] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.14064: Failed to acquire dquot type 0 [ 772.948851][ T5688] EXT4-fs (loop5): Ignoring removed nobh option [ 772.985504][ T5688] EXT4-fs (loop5): Test dummy encryption mode enabled [ 773.088570][ T5688] EXT4-fs (loop5): orphan cleanup on readonly fs [ 773.138534][ T5688] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.14078: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 773.320166][ T5688] EXT4-fs (loop5): Remounting filesystem read-only [ 773.326759][ T5688] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.5.14078: ea_inode dec ref err=-117 [ 773.438549][ T5688] EXT4-fs (loop5): 1 orphan inode deleted [ 773.444331][ T5688] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,jqfmt=vfsold,nobh,resgid=0x0000000000000000,test_dummy_encryption,stripe=0x0000000000000009,. Quota mode: none. [ 773.535143][ T5726] loop0: detected capacity change from 0 to 512 [ 773.697915][ T5726] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 773.724898][ T5726] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 773.743368][ T5726] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #13: comm syz.0.14089: iget: bad i_size value: 12154757448730 [ 773.828427][ T5726] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.14089: couldn't read orphan inode 13 (err -117) [ 773.860399][ T5683] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 773.915826][ T5726] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 774.172749][ T5776] loop2: detected capacity change from 0 to 16 [ 774.248026][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14102'. [ 774.259600][ T5776] erofs: (device loop2): mounted with root inode @ nid 36. [ 774.278803][ T5773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14102'. [ 774.429941][ T5787] loop4: detected capacity change from 0 to 256 [ 774.565304][ T5797] loop2: detected capacity change from 0 to 512 [ 774.633824][ T5797] EXT4-fs (loop2): Ignoring removed nobh option [ 774.660051][ T5797] EXT4-fs (loop2): Test dummy encryption mode enabled [ 774.710714][ T5797] EXT4-fs (loop2): orphan cleanup on readonly fs [ 774.746108][ T5797] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.14107: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 774.837497][ T5797] EXT4-fs (loop2): Remounting filesystem read-only [ 774.845407][ T5797] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.2.14107: ea_inode dec ref err=-117 [ 774.858900][ T5797] EXT4-fs (loop2): 1 orphan inode deleted [ 774.873120][ T5797] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,jqfmt=vfsold,nobh,resgid=0x0000000000000000,test_dummy_encryption,stripe=0x0000000000000009,. Quota mode: none. [ 775.229103][ T5846] loop2: detected capacity change from 0 to 64 [ 775.402079][ T5839] loop3: detected capacity change from 0 to 8192 [ 775.565144][ T5839] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 775.689324][ T5839] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 775.698313][ T5839] FAT-fs (loop3): Filesystem has been set read-only [ 776.009561][ T5911] netlink: 31 bytes leftover after parsing attributes in process `syz.4.14137'. [ 776.213103][ T5923] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 776.468387][ T5950] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 776.698382][ T1108] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 776.991621][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 777.148810][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 777.171694][ T1108] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 777.408764][ T1108] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 777.417864][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 777.459210][ T1108] usb 4-1: Product: syz [ 777.463421][ T1108] usb 4-1: Manufacturer: syz [ 777.488229][ T1108] usb 4-1: SerialNumber: syz [ 777.513560][ T1108] usb 4-1: config 0 descriptor?? [ 777.559256][ T1108] hub 4-1:0.0: bad descriptor, ignoring hub [ 777.568019][ T1108] hub: probe of 4-1:0.0 failed with error -5 [ 777.652364][T24531] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 777.683802][ T5953] set_capacity_and_notify: 4 callbacks suppressed [ 777.683817][ T5953] loop5: detected capacity change from 0 to 32768 [ 777.748515][ T5104] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 777.888758][ T1108] usb 4-1: USB disconnect, device number 72 [ 777.988580][ T5104] usb 5-1: Using ep0 maxpacket: 16 [ 778.009609][ T6035] loop5: detected capacity change from 0 to 16 [ 778.117637][T24531] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 778.130790][ T6035] erofs: (device loop5): mounted with root inode @ nid 36. [ 778.143058][T24531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.176434][ T6035] erofs: (device loop5): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 1740 of nid 36 [ 778.197187][T24531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.232588][T24531] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 778.268749][ T5104] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 778.300474][T24531] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 778.309024][ T5104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.319108][ T5104] usb 5-1: Product: syz [ 778.323304][ T5104] usb 5-1: Manufacturer: syz [ 778.348579][T24531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.368109][ T5104] usb 5-1: SerialNumber: syz [ 778.392175][T24531] usb 3-1: config 0 descriptor?? [ 778.393899][ T5104] r8152-cfgselector 5-1: config 0 descriptor?? [ 778.570777][ T6023] loop0: detected capacity change from 0 to 32768 [ 778.650482][ T6023] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.14167 (6023) [ 778.704375][ T6023] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 778.743941][ T6023] BTRFS info (device loop0): using free space tree [ 778.778544][ T6023] BTRFS info (device loop0): has skinny extents [ 778.890220][T24531] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 778.898734][ T5104] r8152-cfgselector 5-1: Unknown version 0x0000 [ 778.914679][ T5104] r8152-cfgselector 5-1: USB disconnect, device number 59 [ 778.981587][ T155] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 779.064620][ T6087] loop5: detected capacity change from 0 to 4096 [ 779.071270][T24531] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 779.107927][ T6023] BTRFS info (device loop0): enabling ssd optimizations [ 779.215441][ T6111] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 779.218524][T24531] usb 3-1: USB disconnect, device number 54 [ 779.357198][ T6087] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 779.424925][ T6115] fido_id[6115]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 779.635129][ T3072] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 779.888718][ T6140] loop4: detected capacity change from 0 to 512 [ 780.026306][ T6140] EXT4-fs (loop4): Ignoring removed nobh option [ 780.038768][ T6140] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 780.141542][ T6140] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 780.208531][ T6140] System zones: 1-12 [ 780.262411][ T6140] EXT4-fs (loop4): orphan cleanup on readonly fs [ 780.338648][ T6140] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.14185: corrupted in-inode xattr [ 780.369180][ T6140] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.14185: couldn't read orphan inode 15 (err -117) [ 780.435004][ T6140] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,debug,init_itable=0x0000000000000004,journal_dev=0x0000000000000007,,errors=continue. Quota mode: none. [ 780.498622][ T5113] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 780.863418][ T5113] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 780.885634][ T5113] usb 3-1: config 0 has no interface number 0 [ 780.909395][ T5113] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.917448][ T6194] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by " [ 780.947677][ T5113] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.107764][ T6154] loop5: detected capacity change from 0 to 32768 [ 781.116651][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14199'. [ 781.142387][ T6200] netlink: 3 bytes leftover after parsing attributes in process `syz.4.14199'. [ 781.217679][ T6154] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.14182 (6154) [ 781.278874][ T5113] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 781.348415][ T5113] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 781.418685][ T5113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.456141][ T5113] usb 3-1: config 0 descriptor?? [ 781.489567][ T6232] loop3: detected capacity change from 0 to 128 [ 781.527963][ T6154] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 781.543241][ T6154] BTRFS info (device loop5): enabling disk space caching [ 781.575790][ T6154] BTRFS info (device loop5): force clearing of disk cache [ 781.607753][ T6154] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 781.618141][ T6154] BTRFS info (device loop5): use zstd compression, level 3 [ 781.626512][ T6232] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 781.629170][ T6154] BTRFS info (device loop5): disk space caching is enabled [ 781.655116][ T6232] ext4 filesystem being mounted at /2772/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 781.690660][ T6232] EXT4-fs (loop3): resizing filesystem from 64 to 2 blocks [ 781.718879][ T6154] BTRFS info (device loop5): has skinny extents [ 781.741507][ T6232] EXT4-fs warning (device loop3): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 781.880948][ T6253] vxcan1 speed is unknown, defaulting to 1000 [ 781.913184][ T6253] vxcan1 speed is unknown, defaulting to 1000 [ 781.945536][ T5113] hid (null): global environment stack underflow [ 781.997381][ T6253] vxcan1 speed is unknown, defaulting to 1000 [ 782.068542][ T6154] BTRFS info (device loop5): enabling ssd optimizations [ 782.076662][ T6154] BTRFS info (device loop5): clearing free space tree [ 782.088564][ T6154] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 782.128606][ T6154] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 782.168724][ T5113] uclogic 0003:28BD:0042.0003: failed retrieving string descriptor #100: -71 [ 782.177572][ T5113] uclogic 0003:28BD:0042.0003: failed retrieving pen parameters: -71 [ 782.295796][ T5113] uclogic 0003:28BD:0042.0003: pen probing failed: -71 [ 782.330386][ T5113] uclogic 0003:28BD:0042.0003: failed probing parameters: -71 [ 782.363493][ T5113] uclogic: probe of 0003:28BD:0042.0003 failed with error -71 [ 782.437822][ T5113] usb 3-1: USB disconnect, device number 55 [ 782.584492][ T26] audit: type=1800 audit(1786481682.931:66): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14182" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 782.744334][ T5113] vxcan1 speed is unknown, defaulting to 1000 [ 782.744305][ T6253] infiniband syz2: set active [ 782.755279][ T6253] infiniband syz2: added vxcan1 [ 782.760474][ T6296] netlink: 64 bytes leftover after parsing attributes in process `syz.4.14215'. [ 783.141160][ T6253] RDS/IB: syz2: added [ 783.145294][ T6253] smc: adding ib device syz2 with port count 1 [ 783.225803][ T6253] smc: ib device syz2 port 1 has pnetid [ 783.279936][ T5110] vxcan1 speed is unknown, defaulting to 1000 [ 783.289925][ T6253] vxcan1 speed is unknown, defaulting to 1000 [ 783.827096][ T6253] vxcan1 speed is unknown, defaulting to 1000 [ 783.913182][ T6365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14236'. [ 784.137791][ T6378] netlink: 'syz.4.14240': attribute type 3 has an invalid length. [ 784.148547][ T6378] netlink: 'syz.4.14240': attribute type 1 has an invalid length. [ 784.166303][ T6378] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.14240'. [ 784.230227][ T6253] vxcan1 speed is unknown, defaulting to 1000 [ 784.247520][ T5104] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 784.443779][ T6381] loop2: detected capacity change from 0 to 4096 [ 784.528698][ T5104] usb 4-1: Using ep0 maxpacket: 16 [ 784.537876][ T6381] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 784.643966][ T6253] vxcan1 speed is unknown, defaulting to 1000 [ 784.650493][ T5104] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.669485][ T5104] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 784.738734][ T3072] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 784.800813][ T6381] ntfs: volume version 3.1. [ 784.848651][ T5104] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 784.857753][ T5104] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.910283][ T6381] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1250. You might want to try to use the mount option nls=utf8. [ 784.928519][ T5104] usb 4-1: Product: syz [ 784.932834][ T5104] usb 4-1: Manufacturer: syz [ 784.984533][ T5104] usb 4-1: SerialNumber: syz [ 785.018373][ T6381] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 785.144123][ T6425] loop5: detected capacity change from 0 to 1024 [ 785.201599][ T6253] vxcan1 speed is unknown, defaulting to 1000 [ 785.311778][ T6425] hfsplus: failed to load root directory [ 785.318749][ T5104] usb 4-1: 0:2 : does not exist [ 785.344100][ T5104] usb 4-1: USB disconnect, device number 73 [ 785.379169][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 785.568864][ T6456] loop2: detected capacity change from 0 to 1024 [ 785.644708][ T4408] udevd[4408]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.721036][ T6456] hfsplus: keylen 65060 too large [ 785.757065][ T6456] hfsplus: xattr search failed [ 786.064628][ T6488] loop5: detected capacity change from 0 to 2048 [ 786.158053][ T6499] loop4: detected capacity change from 0 to 512 [ 786.168593][T24531] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 786.231260][ T6488] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 786.274140][ T6499] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 786.384520][ T6499] EXT4-fs (loop4): 1 truncate cleaned up [ 786.398377][ T6499] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,barrier,,errors=continue. Quota mode: none. [ 786.678597][T24531] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.723960][T24531] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 786.773623][T24531] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 787.020141][T24531] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 787.055124][T24531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.055153][T24531] usb 4-1: Product: syz [ 787.055170][T24531] usb 4-1: Manufacturer: syz [ 787.055186][T24531] usb 4-1: SerialNumber: syz [ 787.102288][T24531] cdc_ncm 4-1:1.0: skipping garbage [ 787.171492][T24531] usb 4-1: selecting invalid altsetting 1 [ 787.531045][T24531] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 787.537958][T24531] cdc_ncm 4-1:1.0: bind() failure [ 787.574745][T24531] usb 4-1: USB disconnect, device number 74 [ 788.017739][T24526] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 788.134746][ T6622] loop4: detected capacity change from 0 to 64 [ 788.193522][ T6622] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 788.322625][ T6632] loop3: detected capacity change from 0 to 1024 [ 788.481625][T24526] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 788.498637][T24526] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 788.507527][T24526] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 788.600975][T24526] usb 3-1: config 220 has no interface number 2 [ 788.607307][T24526] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 788.678755][T24526] usb 3-1: config 220 interface 0 has no altsetting 0 [ 788.685572][T24526] usb 3-1: config 220 interface 76 has no altsetting 0 [ 788.720404][ T6657] loop3: detected capacity change from 0 to 512 [ 788.756555][ T6619] loop5: detected capacity change from 0 to 40427 [ 788.763074][T24526] usb 3-1: config 220 interface 1 has no altsetting 0 [ 788.825179][ T6619] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 788.891881][ T6657] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 788.906755][ T6619] F2FS-fs (loop5): invalid crc value [ 788.948554][ T6657] ext4 filesystem being mounted at /2787/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.968776][T24526] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 788.978789][T24526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.986827][T24526] usb 3-1: Product: syz [ 789.033595][ T6676] loop4: detected capacity change from 0 to 64 [ 789.058511][ T6619] F2FS-fs (loop5): Found nat_bits in checkpoint [ 789.076439][T24526] usb 3-1: Manufacturer: syz [ 789.097085][T24526] usb 3-1: SerialNumber: syz [ 789.150002][ T6619] F2FS-fs (loop5): recover fsync data on readonly fs [ 789.192461][ T6619] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 789.240082][ T6619] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 789.279156][ T6619] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 789.537141][T24526] usb 3-1: selecting invalid altsetting 0 [ 789.547314][T24526] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 789.574643][T24526] usb 3-1: No valid video chain found. [ 789.719850][T24526] usb 3-1: selecting invalid altsetting 0 [ 789.725669][T24526] usbtest: probe of 3-1:220.1 failed with error -22 [ 789.761629][T24526] usb 3-1: USB disconnect, device number 56 [ 789.928484][ T1108] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 789.952844][ T6727] loop2: detected capacity change from 0 to 164 [ 790.042002][ T6727] Unsupported NM flag settings (240) [ 790.060013][ T6727] Unsupported NM flag settings (240) [ 790.149285][ T6737] ALSA: mixer_oss: invalid OSS volume '' [ 790.334295][ T6689] loop3: detected capacity change from 0 to 32768 [ 790.509971][ T3072] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 790.648592][ T1108] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 790.657781][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.688354][ T1108] usb 5-1: Product: syz [ 790.692584][ T1108] usb 5-1: Manufacturer: syz [ 790.697202][ T1108] usb 5-1: SerialNumber: syz [ 790.806551][ T1108] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 791.028415][ T6780] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 791.034988][ T6780] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 791.118789][ T6780] vhci_hcd vhci_hcd.0: Device attached [ 791.156052][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 791.318619][ T5104] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 791.415981][ T6787] sp0: Synchronizing with TNC [ 791.424443][ T1108] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 791.568522][ T5104] usb 6-1: Using ep0 maxpacket: 8 [ 791.578662][T24526] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 791.633899][ T6781] vhci_hcd: unknown pdu 2 [ 791.639144][ T155] vhci_hcd: stop threads [ 791.643414][ T155] vhci_hcd: release socket [ 791.674935][ T155] vhci_hcd: disconnect device [ 791.708449][ T5104] usb 6-1: unable to get BOS descriptor or descriptor too short [ 791.768604][ T5104] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 791.776393][ T5104] usb 6-1: can't read configurations, error -71 [ 791.828382][ T6807] device sit2 entered promiscuous mode [ 791.881814][ T6807] team0: Device sit2 is of different type [ 791.988404][ T6817] netlink: 'syz.2.14350': attribute type 21 has an invalid length. [ 792.008646][ T6817] IPv6: NLM_F_CREATE should be specified when creating new route [ 792.022196][ T6817] IPv6: Can't replace route, no match found [ 792.029816][T24531] usb 5-1: USB disconnect, device number 60 [ 792.245302][ T6834] loop5: detected capacity change from 0 to 256 [ 792.277458][T24525] petalynx 0003:18B1:0037.0004: fixing up Petalynx Maxter Remote report descriptor [ 792.294854][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.318938][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.348849][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.358652][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 792.365850][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.396800][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.406521][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 792.416557][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.447174][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 792.456887][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.475141][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 792.492722][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.502783][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.510626][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 792.527851][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.548657][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 792.560642][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 792.566954][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.581791][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 792.592110][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.608254][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 792.620429][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.632653][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 792.646663][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.665472][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.676284][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 792.683706][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.683736][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.720220][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.729374][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 792.748896][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 792.756177][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.774742][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 792.782047][T24525] petalynx 0003:18B1:0037.0004: unknown main item tag 0x0 [ 792.800275][T24525] petalynx 0003:18B1:0037.0004: unexpected long global item [ 792.807915][T24525] petalynx 0003:18B1:0037.0004: parse failed [ 792.814132][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 792.844344][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 792.851654][T24525] petalynx: probe of 0003:18B1:0037.0004 failed with error -22 [ 792.868811][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 792.918884][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 792.934100][T24526] usb 5-1: Service connection timeout for: 256 [ 792.948353][T24526] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 792.956477][T24526] ath9k_htc: Failed to initialize the device [ 792.984082][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 792.997400][ T6865] loop4: detected capacity change from 0 to 128 [ 793.014017][T24531] usb 5-1: ath9k_htc: USB layer deinitialized [ 793.031272][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 793.159012][ T6865] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 793.201112][ T6865] hpfs: filesystem error: improperly stopped [ 793.207154][ T6865] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 793.278804][ T6865] hpfs: You really don't want any checks? You are crazy... [ 793.286335][ T6865] hpfs: hpfs_map_sector(): read error [ 793.338468][ T6865] hpfs: code page support is disabled [ 793.361313][ T6865] hpfs: hpfs_map_4sectors(): unaligned read [ 793.398796][ T6865] hpfs: hpfs_map_4sectors(): unaligned read [ 793.424951][ T6865] hpfs: filesystem error: unable to find root dir [ 793.457487][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14374'. [ 793.563918][ T6865] hpfs: hpfs_map_4sectors(): unaligned read [ 793.638453][T24531] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 793.728843][ T6909] comedi comedi2: pcmmio: I/O port conflict (0x140,32) [ 793.937203][ T6912] loop0: detected capacity change from 0 to 4096 [ 794.090774][ T6912] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 794.109289][ T6912] NILFS (loop0): mounting unchecked fs [ 794.133970][ T6912] NILFS (loop0): recovery required for readonly filesystem [ 794.158587][ T6912] NILFS (loop0): write access will be enabled during recovery [ 794.213678][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop0 [ 794.279155][ T6912] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 794.333163][ T6892] loop5: detected capacity change from 0 to 32768 [ 794.372014][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop0 [ 794.381634][T24531] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 794.398362][T24531] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.406389][T24531] usb 3-1: Product: syz [ 794.444433][T24531] usb 3-1: Manufacturer: syz [ 794.498358][T24531] usb 3-1: SerialNumber: syz [ 794.531337][ T6892] (syz.5.14371,6892,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 794.576771][ T6892] (syz.5.14371,6892,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 794.582262][T24531] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 794.864689][ T6964] loop0: detected capacity change from 0 to 8 [ 794.907264][ T6892] JBD2: Ignoring recovery information on journal [ 795.020008][ T6961] loop4: detected capacity change from 0 to 4096 [ 795.091913][ T6939] loop3: detected capacity change from 0 to 32768 [ 795.110431][ T6892] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 795.158059][ T6961] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 795.293199][ T6961] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 795.393543][ T26] audit: type=1800 audit(1786481695.741:67): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14371" name="file1" dev="loop5" ino=16978 res=0 errno=0 [ 795.410822][ T6961] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 795.458388][ T6961] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 795.508725][T24526] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 795.548455][ T6961] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 795.591306][T22437] ocfs2: Unmounting device (7,5) on (node local) [ 795.627941][ T6961] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 795.648598][ T4410] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 795.728403][ T6961] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 795.768521][ T6961] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 795.868403][ T6961] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 795.901954][ T6999] loop0: detected capacity change from 0 to 256 [ 795.951925][ T6999] exfat: Deprecated parameter 'namecase' [ 795.957642][ T6999] exfat: Deprecated parameter 'namecase' [ 795.962172][ T6961] ntfs: volume version 3.1. [ 795.973051][T24531] usb 3-1: USB disconnect, device number 57 [ 796.069667][ T6999] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 796.629615][ T1108] vhci_hcd: vhci_device speed not set [ 796.642879][ T7041] loop4: detected capacity change from 0 to 2048 [ 796.650576][ T7039] binder: 7038:7039 ioctl c0306201 200000000480 returned -14 [ 796.765254][ T7041] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 796.828547][T24526] usb 3-1: Service connection timeout for: 256 [ 796.834753][T24526] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 796.848484][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14413'. [ 796.876021][T24526] ath9k_htc: Failed to initialize the device [ 796.898912][ T5683] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 796.909856][T24531] usb 3-1: ath9k_htc: USB layer deinitialized [ 797.110160][T24525] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 797.248249][ T7064] loop2: detected capacity change from 0 to 32768 [ 797.307625][ T7064] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 797.316869][ T7064] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 797.356084][ T7064] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 797.356084][ T7064] inode = 1 18 [ 797.356084][ T7064] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 453 [ 797.366888][ T7088] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14420'. [ 797.375367][ T7064] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 797.399532][ T7064] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 797.408400][ T7064] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 797.409951][T24525] usb 6-1: Using ep0 maxpacket: 8 [ 797.415158][ T7064] gfs2: fsid=syz:syz.0: File system withdrawn [ 797.426150][ T7064] CPU: 1 PID: 7064 Comm: syz.2.14416 Not tainted syzkaller #0 [ 797.433646][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 797.443726][ T7064] Call Trace: [ 797.447039][ T7064] [ 797.450004][ T7064] dump_stack_lvl+0x188/0x250 [ 797.454752][ T7064] ? rcu_is_watching+0x11/0xa0 [ 797.459618][ T7064] ? kobject_uevent_env+0x36c/0x890 [ 797.464905][ T7064] ? show_regs_print_info+0x20/0x20 [ 797.470159][ T7064] ? load_image+0x410/0x410 [ 797.474837][ T7064] ? lockref_put_or_lock+0x6e/0xb0 [ 797.480035][ T7064] gfs2_withdraw+0xb9a/0x14e0 [ 797.484767][ T7064] ? gfs2_meta_new+0x160/0x160 [ 797.489654][ T7064] ? gfs2_lm+0x240/0x240 [ 797.493928][ T7064] ? make_kgid+0x1c4/0x650 [ 797.498430][ T7064] ? gfs2_consist_inode_i+0xc0/0xe0 [ 797.503662][ T7064] gfs2_inode_refresh+0xc80/0x11a0 [ 797.508819][ T7064] ? gfs2_inode_metasync+0xf0/0xf0 [ 797.513968][ T7064] inode_go_lock+0x127/0x450 [ 797.518588][ T7064] do_promote+0x75b/0xb20 [ 797.522957][ T7064] finish_xmote+0x4c2/0xaf0 [ 797.527513][ T7064] do_xmote+0x752/0x10a0 [ 797.531817][ T7064] gfs2_glock_nq+0xc6b/0x1510 [ 797.536561][ T7064] init_journal+0xcc2/0x22d0 [ 797.541216][ T7064] ? end_bio_io_page+0x100/0x100 [ 797.546185][ T7064] ? vsnprintf+0x1b22/0x1c20 [ 797.550819][ T7064] ? snprintf+0xe5/0x140 [ 797.555097][ T7064] ? init_journal+0x749/0x22d0 [ 797.559894][ T7064] ? vscnprintf+0x80/0x80 [ 797.564260][ T7064] ? gfs2_glock_nq_num+0x170/0x1b0 [ 797.569410][ T7064] init_inodes+0xdb/0x320 [ 797.573781][ T7064] gfs2_fill_super+0x1671/0x1ea0 [ 797.578775][ T7064] ? gfs2_reconfigure+0xd80/0xd80 [ 797.583850][ T7064] ? gfs2_glock_nq_num+0x7e/0x1b0 [ 797.588921][ T7064] ? sb_set_blocksize+0xa5/0xe0 [ 797.593896][ T7064] get_tree_bdev+0x3e6/0x610 [ 797.598574][ T7064] ? gfs2_reconfigure+0xd80/0xd80 [ 797.603630][ T7064] gfs2_get_tree+0x4d/0x1e0 [ 797.608172][ T7064] vfs_get_tree+0x88/0x270 [ 797.612627][ T7064] do_new_mount+0x247/0xa40 [ 797.617249][ T7064] __se_sys_mount+0x2e3/0x3d0 [ 797.621965][ T7064] ? __x64_sys_mount+0xc0/0xc0 [ 797.626773][ T7064] ? lockdep_hardirqs_on+0x94/0x140 [ 797.632012][ T7064] ? __x64_sys_mount+0x1c/0xc0 [ 797.636826][ T7064] do_syscall_64+0x4c/0xa0 [ 797.641270][ T7064] ? clear_bhb_loop+0x30/0x80 [ 797.646042][ T7064] ? clear_bhb_loop+0x30/0x80 [ 797.650748][ T7064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 797.656677][ T7064] RIP: 0033:0x7f1c4bdab34a [ 797.661154][ T7064] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.680970][ T7064] RSP: 002b:00007f1c4a001e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 797.689420][ T7064] RAX: ffffffffffffffda RBX: 00007f1c4a001ee0 RCX: 00007f1c4bdab34a [ 797.697426][ T7064] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f1c4a001ea0 [ 797.705436][ T7064] RBP: 00002000000124c0 R08: 00007f1c4a001ee0 R09: 0000000000000000 [ 797.713531][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 797.720093][T24525] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 797.721555][ T7064] R13: 00007f1c4a001ea0 R14: 0000000000012620 R15: 0000200000000180 [ 797.721595][ T7064] [ 797.741344][ T7064] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 797.953272][T24525] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 798.033338][T24525] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.084029][T24525] usb 6-1: Product: syz [ 798.088252][T24525] usb 6-1: Manufacturer: syz [ 798.137048][T24525] usb 6-1: SerialNumber: syz [ 798.175850][T24525] usb 6-1: config 0 descriptor?? [ 798.267928][T24525] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 798.318423][T24525] usb 6-1: setting power ON [ 798.333832][T24525] dvb-usb: bulk message failed: -22 (2/0) [ 798.405222][T24525] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 798.485320][T24525] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 798.534592][T24525] usb 6-1: media controller created [ 798.597806][T24525] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 798.709858][T24525] usb 6-1: selecting invalid altsetting 6 [ 798.748784][T24525] usb 6-1: digital interface selection failed (-22) [ 798.755501][T24525] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 798.797456][ T4256] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 798.879237][T24525] usb 6-1: setting power OFF [ 798.891053][T24525] dvb-usb: bulk message failed: -22 (2/0) [ 798.920038][ T7175] netlink: 47 bytes leftover after parsing attributes in process `syz.0.14444'. [ 798.939155][T24525] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 798.958350][ T7175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14444'. [ 798.967526][T24525] (NULL device *): no alternate interface [ 798.973510][ T7179] loop2: detected capacity change from 0 to 2048 [ 799.047865][ T7179] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 799.108698][T24525] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 799.173957][T24525] usb 6-1: USB disconnect, device number 20 [ 799.181777][ T4256] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 799.204154][ T4256] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 799.265730][ T4256] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 799.294317][ T4256] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 799.347300][ T4256] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 799.379344][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.391464][ T7208] device vlan0 entered promiscuous mode [ 799.397172][ T7208] device wlan1 entered promiscuous mode [ 799.544544][ T7224] loop2: detected capacity change from 0 to 64 [ 799.957896][ T7247] loop2: detected capacity change from 0 to 4096 [ 800.108536][ T4256] gud 4-1:1.0: Failed to get properties (error=-71) [ 800.115229][ T4256] gud: probe of 4-1:1.0 failed with error -71 [ 800.144931][ T7270] netlink: 228 bytes leftover after parsing attributes in process `syz.5.14467'. [ 800.162467][ T7271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14468'. [ 800.185406][ T4256] usb 4-1: USB disconnect, device number 75 [ 800.320509][ T4192] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 800.327347][ T4192] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 800.559243][ T7299] loop2: detected capacity change from 0 to 128 [ 800.670121][ T7299] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 800.768709][ T7299] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 800.850796][ T7320] bridge_slave_1: default FDB implementation only supports local addresses [ 800.963626][ T7328] ip_tables: iptables: counters copy to user failed while replacing table [ 800.969082][ T7329] comedi comedi3: 8255: I/O port conflict (0x4004f27,4) [ 801.028526][ T5110] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 801.038525][ T7329] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 801.108640][ T7329] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 801.115834][ T7329] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 801.132982][ T7329] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 801.189834][ T7329] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 801.205850][ T7343] 9pnet_rdma: rdma_create_trans (7343): problem binding to privport: 13 [ 801.221986][ T7329] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 801.278725][ T5110] usb 6-1: Using ep0 maxpacket: 32 [ 801.386432][ T155] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 801.399205][ T5110] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.416780][ T7352] loop3: detected capacity change from 0 to 2048 [ 801.440829][ T5110] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.478802][ T5110] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 801.496101][ T5110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.513174][ T5110] usb 6-1: config 0 descriptor?? [ 801.545277][ T7359] loop2: detected capacity change from 0 to 2048 [ 801.566352][ T5110] hub 6-1:0.0: USB hub found [ 801.599031][ T7352] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 801.669527][ T7359] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 801.680399][ T7378] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 801.708951][ T7359] ext4 filesystem being mounted at /2899/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 801.788578][ T5110] hub 6-1:0.0: config failed, hub has too many ports! (err -19) [ 801.952287][T24526] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 802.007556][ T7392] loop4: detected capacity change from 0 to 128 [ 802.100834][ T5110] usbhid 6-1:0.0: can't add hid device: -71 [ 802.118069][ T5110] usbhid: probe of 6-1:0.0 failed with error -71 [ 802.128962][ T7392] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 802.198618][ T7392] ext4 filesystem being mounted at /2995/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 802.210123][ T5110] usb 6-1: USB disconnect, device number 21 [ 802.248971][T24526] usb 1-1: Using ep0 maxpacket: 8 [ 802.328479][ T5102] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 802.388669][T24526] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 802.407864][T24526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.429865][T24526] usb 1-1: config 0 descriptor?? [ 802.599266][ T7428] netlink: 'syz.5.14505': attribute type 1 has an invalid length. [ 802.607258][ T7428] netlink: 'syz.5.14505': attribute type 1 has an invalid length. [ 802.695310][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 802.699399][ T5102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.751780][ T5102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.788538][T24525] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 802.802676][ T5102] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 802.839982][ T5102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.878003][ T5102] usb 3-1: config 0 descriptor?? [ 802.929056][T24526] hid (null): unknown global tag 0xd [ 802.946850][T24526] macally 0003:060B:0001.0005: unknown main item tag 0x0 [ 802.966441][ T7447] loop5: detected capacity change from 0 to 16 [ 802.973027][T24526] macally 0003:060B:0001.0005: unknown global tag 0xd [ 802.992325][T24526] macally 0003:060B:0001.0005: item 0 0 1 13 parsing failed [ 803.018718][T24526] macally: probe of 0003:060B:0001.0005 failed with error -22 [ 803.033226][ T7447] erofs: (device loop5): mounted with root inode @ nid 36. [ 803.088463][T24525] usb 4-1: Using ep0 maxpacket: 16 [ 803.107581][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 803.107594][ T26] audit: type=1800 audit(1786481703.451:71): pid=7447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14510" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 803.136205][T24526] usb 1-1: USB disconnect, device number 71 [ 803.268990][T24525] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 803.287367][T24525] usb 4-1: config 0 has no interface number 0 [ 803.297489][T24525] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 803.351673][ T7463] loop4: detected capacity change from 0 to 4096 [ 803.368553][T24525] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 803.380868][ T5102] hid-led 0003:27B8:01ED.0006: unbalanced collection at end of report description [ 803.405062][ T5102] hid-led: probe of 0003:27B8:01ED.0006 failed with error -22 [ 803.480945][ T7463] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 803.528533][T24525] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 803.547917][T24525] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 803.577961][T24525] usb 4-1: Product: syz [ 803.582701][T24525] usb 4-1: SerialNumber: syz [ 803.592824][ T5102] usb 3-1: USB disconnect, device number 58 [ 803.599746][T24525] usb 4-1: config 0 descriptor?? [ 803.660467][T24525] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 803.705782][T24525] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input53 [ 803.744785][ T7492] loop0: detected capacity change from 0 to 256 [ 803.848932][ T7492] exfat: Deprecated parameter 'utf8' [ 803.854271][ T7492] exfat: Deprecated parameter 'utf8' [ 803.875938][T24525] usb 4-1: USB disconnect, device number 76 [ 803.894065][ T7492] exfat: Deprecated parameter 'utf8' [ 803.899641][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 803.906963][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 803.934933][T24525] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 804.000383][ T7492] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 804.208782][ T7527] netlink: 358 bytes leftover after parsing attributes in process `syz.0.14521'. [ 804.568434][ T21] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 804.620323][ T7559] loop5: detected capacity change from 0 to 8 [ 804.648249][ T7567] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 804.767178][ T7574] loop0: detected capacity change from 0 to 64 [ 804.828585][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 804.858605][ T7580] loop5: detected capacity change from 0 to 64 [ 804.888688][ T4256] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 804.997567][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 805.088623][ T21] usb 5-1: config 14 has an invalid interface number: 207 but max is 0 [ 805.099038][ T21] usb 5-1: config 14 has no interface number 0 [ 805.105248][ T21] usb 5-1: config 14 interface 207 has no altsetting 0 [ 805.148799][ T4256] usb 3-1: Using ep0 maxpacket: 16 [ 805.288856][ T4256] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 805.308587][ T21] usb 5-1: New USB device found, idVendor=d07e, idProduct=f8b2, bcdDevice=9b.bc [ 805.321862][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.330355][ T4256] usb 3-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 805.344078][ T7613] ufs: ufstype=nextstep is supported read-only [ 805.377318][ T21] usb 5-1: Product: syz [ 805.383689][ T4256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.405057][ T21] usb 5-1: Manufacturer: syz [ 805.413916][ T21] usb 5-1: SerialNumber: syz [ 805.425623][ T4256] usb 3-1: config 0 descriptor?? [ 805.610502][ T7629] set_capacity_and_notify: 1 callbacks suppressed [ 805.610517][ T7629] loop5: detected capacity change from 0 to 64 [ 805.789830][ T21] usb-storage 5-1:14.207: USB Mass Storage device detected [ 805.909844][ T7657] loop0: detected capacity change from 0 to 64 [ 805.918081][ T4256] betop 0003:8380:1850.0007: unknown main item tag 0x3 [ 805.949332][ T21] usb 5-1: USB disconnect, device number 61 [ 805.965508][ T4256] betop 0003:8380:1850.0007: unknown main item tag 0xd [ 805.990091][ T4256] betop 0003:8380:1850.0007: unknown main item tag 0x1 [ 806.009459][ T4256] betop 0003:8380:1850.0007: unknown main item tag 0x1 [ 806.016395][ T4256] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 806.117171][ T4256] betop 0003:8380:1850.0007: hidraw0: USB HID v0.09 Device [HID 8380:1850] on usb-dummy_hcd.2-1/input0 [ 806.159291][ T7669] loop5: detected capacity change from 0 to 1764 [ 806.163486][ T4256] betop 0003:8380:1850.0007: no inputs found [ 806.181219][ T4256] usb 3-1: USB disconnect, device number 59 [ 806.262933][ T7669] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 806.351158][ T7694] comedi comedi2: pcl812: I/O port conflict (0x140,16) [ 806.604031][ T7711] loop3: detected capacity change from 0 to 16 [ 806.643367][ T7703] fido_id[7703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 806.678528][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14566'. [ 806.691936][ T7711] erofs: (device loop3): mounted with root inode @ nid 36. [ 806.731629][ T7720] loop2: detected capacity change from 0 to 64 [ 806.758042][ T7721] loop4: detected capacity change from 0 to 512 [ 806.772605][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14566'. [ 806.812873][ T7721] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 806.917275][ T7721] EXT4-fs (loop4): 1 truncate cleaned up [ 806.952239][ T7721] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 807.138882][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 807.567887][ T7781] loop5: detected capacity change from 0 to 16 [ 807.673801][ T7781] erofs: (device loop5): mounted with root inode @ nid 36. [ 807.817256][ T7800] loop0: detected capacity change from 0 to 512 [ 807.840820][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14588'. [ 807.899963][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14588'. [ 807.901372][ T7811] loop5: detected capacity change from 0 to 8 [ 807.983169][ T7800] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 808.158897][ T7800] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz.0.14587: Directory block failed checksum [ 808.178486][ T21] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 808.263662][ T7773] loop4: detected capacity change from 0 to 32768 [ 808.423419][ T2129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 808.497714][ T7773] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 808.546148][ T7841] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 808.574142][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 808.592399][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 808.609965][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 808.620288][ T21] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 808.648371][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.729604][ T21] usb 4-1: config 0 descriptor?? [ 808.803353][ T4195] XFS (loop4): Unmounting Filesystem [ 808.823989][ T21] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 808.832973][ T7854] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 808.880312][ T21] hdpvr: probe of 4-1:0.0 failed with error -12 [ 808.919465][ T7854] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 809.008720][ T7854] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #13: comm syz.5.14598: iget: bad i_size value: 12154757448730 [ 809.028163][T24526] usb 4-1: USB disconnect, device number 77 [ 809.060068][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.119100][ T7854] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.14598: couldn't read orphan inode 13 (err -117) [ 809.155068][ T7854] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 809.403057][ T5683] ------------[ cut here ]------------ [ 809.410218][ T5683] kernel BUG at fs/hfs/inode.c:447! [ 809.415492][ T5683] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 809.421596][ T5683] CPU: 1 PID: 5683 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 809.429161][ T5683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 809.439266][ T5683] Workqueue: writeback wb_workfn (flush-7:0) [ 809.445346][ T5683] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 809.451001][ T5683] Code: 8d ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 51 cc 8d ff e9 43 fe ff ff e8 97 a9 48 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 809.470755][ T5683] RSP: 0018:ffffc900032df3a0 EFLAGS: 00010293 [ 809.476862][ T5683] RAX: ffffffff82305319 RBX: ffff88805959c918 RCX: ffff88807b2a3b80 [ 809.484856][ T5683] RDX: 0000000000000000 RSI: ffffffff8c4e3080 RDI: 0000000000000000 [ 809.492848][ T5683] RBP: ffffc900032df530 R08: ffff88807b2a3b80 R09: 0000000000000003 [ 809.500851][ T5683] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 809.508839][ T5683] R13: 1ffff9200065be78 R14: 0000000000000000 R15: ffff88805959c8d8 [ 809.516826][ T5683] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 809.525771][ T5683] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 809.532481][ T5683] CR2: 00007f1c4bdf77c0 CR3: 000000007d408000 CR4: 00000000003506e0 [ 809.540590][ T5683] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 809.548592][ T5683] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 809.556584][ T5683] Call Trace: [ 809.559881][ T5683] [ 809.562830][ T5683] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 809.568225][ T5683] ? __writeback_single_inode+0x46d/0xda0 [ 809.573971][ T5683] ? __rwlock_init+0x140/0x140 [ 809.578839][ T5683] __writeback_single_inode+0x6c4/0xda0 [ 809.584407][ T5683] writeback_sb_inodes+0xaaa/0x1750 [ 809.589645][ T5683] ? queue_io+0x530/0x530 [ 809.593994][ T5683] ? move_expired_inodes+0x722/0x770 [ 809.599300][ T5683] ? rcu_is_watching+0x11/0xa0 [ 809.604082][ T5683] ? queue_io+0x3ba/0x530 [ 809.608428][ T5683] wb_writeback+0x44a/0xbc0 [ 809.612983][ T5683] ? rcu_lock_release+0x20/0x20 [ 809.617849][ T5683] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 809.623919][ T5683] ? __lock_acquire+0x7b50/0x7b50 [ 809.628967][ T5683] ? _raw_spin_unlock_irq+0x1f/0x40 [ 809.634172][ T5683] wb_workfn+0x43a/0xf20 [ 809.638452][ T5683] ? inode_wait_for_writeback+0x220/0x220 [ 809.644201][ T5683] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 809.650216][ T5683] ? __lock_acquire+0x7b50/0x7b50 [ 809.655280][ T5683] ? read_lock_is_recursive+0x10/0x10 [ 809.660687][ T5683] ? __schedule+0x11cb/0x4350 [ 809.665458][ T5683] ? _raw_spin_unlock_irq+0x1f/0x40 [ 809.670682][ T5683] process_one_work+0x867/0xff0 [ 809.675620][ T5683] ? worker_detach_from_pool+0x240/0x240 [ 809.681279][ T5683] ? lockdep_hardirqs_off+0x70/0x100 [ 809.686595][ T5683] ? _raw_spin_lock_irq+0xb7/0xf0 [ 809.691647][ T5683] ? _raw_spin_lock_irqsave+0x100/0x100 [ 809.697219][ T5683] ? wq_worker_running+0x97/0x170 [ 809.702267][ T5683] worker_thread+0xad7/0x12a0 [ 809.706971][ T5683] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 809.712886][ T5683] kthread+0x42e/0x520 [ 809.716979][ T5683] ? rcu_lock_release+0x20/0x20 [ 809.721860][ T5683] ? kthread_blkcg+0xd0/0xd0 [ 809.726476][ T5683] ret_from_fork+0x1f/0x30 [ 809.730971][ T5683] [ 809.734017][ T5683] Modules linked in: [ 809.775335][ T5683] ---[ end trace 79b7ebacaf2bc228 ]--- [ 809.796498][ T5683] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 809.808275][ T5683] Code: 8d ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 51 cc 8d ff e9 43 fe ff ff e8 97 a9 48 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 809.847695][ T5683] RSP: 0018:ffffc900032df3a0 EFLAGS: 00010293 [ 809.865454][ T5683] RAX: ffffffff82305319 RBX: ffff88805959c918 RCX: ffff88807b2a3b80 [ 809.934332][ T5683] RDX: 0000000000000000 RSI: ffffffff8c4e3080 RDI: 0000000000000000 [ 809.960626][ T5683] RBP: ffffc900032df530 R08: ffff88807b2a3b80 R09: 0000000000000003 [ 809.992132][ T5683] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 810.012005][ T5683] R13: 1ffff9200065be78 R14: 0000000000000000 R15: ffff88805959c8d8 [ 810.024352][ T5683] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 810.052248][ T5683] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 810.066731][ T5683] CR2: 00007f0942ae0c38 CR3: 0000000063d25000 CR4: 00000000003506e0 [ 810.077507][ T5683] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 810.088514][ T5683] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 810.118503][ T5683] Kernel panic - not syncing: Fatal exception [ 810.124885][ T5683] Kernel Offset: disabled [ 810.129217][ T5683] Rebooting in 86400 seconds..