last executing test programs: 2m38.182541003s ago: executing program 2 (id=6765): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x9, @pix_mp={0x9, 0x3, 0x32315659, 0x4, 0x1, [{0x400, 0x10}, {0x5, 0xc}, {0x2}, {0x2, 0x3532}, {0x7fff, 0x7}, {0x8, 0xa}, {0x2, 0x1000}, {0x7, 0x401}], 0x0, 0x63, 0x1, 0x0, 0x7}}) 2m37.958140536s ago: executing program 2 (id=6768): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x0, 0x8}, {0x0, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6}) 2m37.871370371s ago: executing program 2 (id=6769): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x2020, 0x4}, 0x20) 2m37.72753949s ago: executing program 2 (id=6771): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x4d, 0x0, &(0x7f0000001840)=0x1c) 2m37.56452629s ago: executing program 2 (id=6773): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$eJzskr9OAkEQxr+9O/5oFDWxooGC+KdQjkONnZbY29lI4ETiocKRKITijDEUFsbSJ+A1THwBLYwPQE1BrM2ZvZ3bLL6C+yvu2/l2ZnZ2c+d+208B+JkOajhEhIkMPhiDBSDHhDcxhD6TfpI+CcE75R2Rf0+a9Xv9JAC+nceKMC6qnud28gC+I09a/sGdgUnU6ms6qPHFKYAwDEPu1QGejgUlxwTQVnKyFrAaXSKUORYNsA6g2G1dF/1ef6vZqjbchnvpmOU9e8e2d53iWdNzbfFlyhF0FXDdBJBKQ8L3EwAeKJ7HLEwZjfbZHE5kbTJ+www9IExZayi1sTK8yrlSSsUx1sDHugmWFLcQdbEQXakCBpOCkqXMJ85KRxvbtSuvPgQDi8tGsGSP0hgJGThqUN4PsChaDallgbRCOiIdk+b+/DJWwL+PFG0EQBK31W63U+KPJFYsXjnSc5YD9cH4qS/G7OXeDGg0Go1Go9FoNBrNf+c3AAD//8PfdhM=") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m36.413123677s ago: executing program 2 (id=6783): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}, 0x0, 0xeffc}, &(0x7f0000000280)=0x90) 2m20.249894123s ago: executing program 32 (id=6783): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}, 0x0, 0xeffc}, &(0x7f0000000280)=0x90) 6.618987902s ago: executing program 1 (id=8489): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000007c0)=0x6, 0x4) 6.303653711s ago: executing program 1 (id=8491): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@flushoncommit}, {@datasum}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@barrier}, {@nodiscard}, {@space_cache}, {@notreelog}, {@user_subvol_rm}, {@ssd}, {@noenospc_debug}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@rescan_uuid_tree}, {@nodiscard}, {@nodatacow}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 5.375393335s ago: executing program 4 (id=8496): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a65b310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25510952b43a773f9cd35d70e03d69b2af2ead1c39ef1c55be4e5afc92674e57e227951a9706cec7b734dec89e0ed0de44f23a3de29cee4de42e117c71af53f785eb2feb89"], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) 4.187656965s ago: executing program 4 (id=8501): munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40010040, &(0x7f0000004480)={0x0, 0x3938700}) 3.979599807s ago: executing program 1 (id=8503): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3) 3.534598443s ago: executing program 4 (id=8504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 3.098536318s ago: executing program 1 (id=8505): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x70, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x59, 0x1, 0x0, 0x0, @str='/dev/rnlb0\x00\xe1\xb6y\xe7\xa3\xd3o\x8a\x84\xb7@~Z\xb4t\x87\x19\x87\xa6u\x80\xe4\x81\xad\xe7\xb4 \xc9\xcd\xd5o\xb6V\xc3\xebs\x8f\xba\xd5\xc4wm6\xb5\x85\xa2\x89<\fY\xc6K\xef[\xd0\x9a($R[C\x1d\x13/\x93\xea\x9f\xd1\xf8r\xca:\x88\x8d'}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) 3.098329918s ago: executing program 4 (id=8506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000040000000050a11020000000000000000010020000c00024000000000000000010900010073797a310000000014000480080002"], 0xdc}}, 0x9840) 2.790421477s ago: executing program 4 (id=8507): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000004c0)={[{@grpquota}, {@bsdgroups}]}, 0xfe, 0x9882, &(0x7f000001c800)="$eJzs3QW8pGXBuP+zyy4sKaAIFiAlJilhIB2KKClKCNKSAiKgdCihgiKggAIKIop0d4d0d3d3x/+zsCCsF4j/3/sKL9d1fdwzZ2aeM+ee+zv345nzHGaWnHfROQcGxh14pVdP/9kZu9687GJjL7jukTsPuWqvHRa6b8TFo75yMt7sI07nGHE658DAwKARtzPolcuGzHbEkYMHhgwM/98/G2v0MQaPNTAwxoizI25nYOZXTsbc/9XtXhopHuikw7/d9q/8e7mxh9/I8E+WXu6FtQYGBoa97uuHj2vaf7mj0pacY755/2n1mtvgEVcP+ud1L58OeeXfmPsODIy598CbPz6Gbzv0dV/732z49xx38oHFb34Hvvf/uZacY74FRvIfvhZHGXHZzMPX+Mhr0NjIj/MdFl39nhFTOGjExA153Xp5Jx73/79aco55Fxx483U8sNA8m9z90sv7zSFzDwwMmWdgYMi8AwND5nunPep/pnf0wVdVVVXvSHPMOcPw5+yDR/p5YNirP9fSz4XnPD/d7QMDQxZ65XnikOVefS5YVVVVVVVVVe/O5phzhrng+f+4b/X8f9Ljtx6v5/9VVVVVVVVV/3daYI45Zxj+XH+k5/8TvdXz/4fvPWi/V/72f/aZX/mqF9/ZO1FVVVVVVVVVb9m8C+Dz/0nf6vn/eUdMemHP/6uqqqqqqqr+77TISy+9tNnrXmdvxMVTv3o9Pf8/8a4bl3nHBlxVVVVVVVVV/3EvPnDcSf98zfeJB0Z6vfeXG/F7gUGHnHLxxe/YQN8dDfrX34ds/k6P6f+14c7DDpx0YGCtxd/podQ70P+Z16qv/5Xyd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xb3L8/7XX/z/xsBVefS/4T0w5w9XH/fMrX37v/yELLfDAFu/Q0N+J3qvH/wdWGzQwMMJ33NUGBgYWmmORxaYeGBg47uoZppxi4LXrZhl+3RfHH+XlN4h/9T8TmWc8vuHNJ3vldPgDZeADr93GIS/f/gIv7TPKoJEG8brGO2q//VZd8qkZRz6d6s3vx+DXPhv7yHtf/W9ZBo+00bA3+eJXb//V+zKy84ixTz187NOsv+Y606y30cafXW3N5VdZaZWV1pp1+pmmm3HWWWeaaZqVV1tjpWlf+fhmczbpyx/nejtzNtbIc/bAHK+fs5Hv25vN2aRvPWcv3+Iu5w77yqtzNuQ/nLO53nrOJl1txDcab/ahA8u9PDeDBgbGm3vowIbDz0w32sDAePOM2Hai4dt+afzBAwM7/fOODv9stNceg4M2H77NkvMuOucru6mBgX+e/rM3eT/7UUeMfPYRp3OMOJ3zlW8z7sA/H4pDZjviyMHD5+IN0zHW6GMMHmtgYIwRZ0fczsCsr5yMcfyr273J+6yPNNCXX2Zl+1f+vdzYAwMDYw7/ZOLlT9xm+NT/F96n/f/X////i9csg157PA4a8W/ENq94zTHfAv/8Xi9Pw/C5G2XEZTMPN/kffmv7N/Qv45102MCkbzHet3hdnJejx9cax02w5f/U6+LQeCd6i/G+xev4vul4l7h993teuan/sfGOtK9b8OWPs7+dfd3AW+/rRqEbWOmCj428r/vamw/xDbvLV+dotJE2erN93UR7TrL58Nuf/a33dQsOH/vQN+zrBg8MjDfXq/u64Tu+eYcO7DT8zPTDz8w3dOCA4WdmePnM6AOnDD/zuRXWXmPF4RfM/6+Pg6kHveEPNGGdzTvSOhv0uvs+aKS/7xzyyumY+776Hk5vst8cNOJu/dt9BT1ux32L8b7F+0/hPA+/bMVDh03wP/X+UzTeYW893jd7v+w3He+OT5548//weF9bZ0NfN13zv511Nukb19nwuzjK61bG2/05bEXY/pXPJ3rt1jbY9N7XfqYYOtLt/rufKeZ/63U27mojfd12ew8Mequ5me/tzM1H/2UftMXr5+bt/rw19eSvXD/KW8zNaLMuO9WrczPqfzg38/2nczP7wChvnJshA/MMDAxMMWL/MO/bmZuJ3npu3u7jZgzY/pXPV3rtorl3OPCsV+dm5Ln4d3Mz7386N5O+9riZ4uXrJhs8MOqoAxsuv/766073ysdXz07/yse3XoNzv525HPd/Zi4/POTN5vKfD9Wxbr9w33+zBv9ln/7q7c/9n87lwGtzObDayIul3q31+z93+bvL313+7vJ3l7+7/MW9yfH/117/f7dxv7jziF9uDL1wkgm3fafH+w73nj7+P8L3Dcf/t51wkgsHD7x23Vsen31lm3fl8dmZXzkZc/9Xtxv5+CAP9M2Pz+4968xb/5eOz/7/6tW1+jZ+D9f+313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uTY7/T/vq3wHcNd3Cj444EDr0vq2WWvidHu873Hv6+P8I3zcc/194qa3uGzzw2nVvefz/lW0cx/9vfW7eHd/Nx/9fXasd/69/U/7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+5Njv/P/urfARx00O4bv/r3AJePt/1x7/R43+Heq8f/e/9/b+3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uJGHP8fGOntLb/Z4wKD4///t3sT/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf9b+WMW/yXzxyz+384fs/h/J3/M4r9U/pjFf+n8MYv/MvljFv9l88cs/t/NH7P4L5c/ZvFfPn/M4v+9/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF//v5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/wf5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zB/zOK/Qf6Yxf9H+WMW/w3zxyz+G+WPWfw3zh+z+P84f8zi/5P8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+P80fs/j/LH/M4r9d/pjFf/v8MYv/DvljFv8d88cs/j/PH7P4/yJ/zOL/y/wxi/9O+WMW/53zxyz+v8ofs/j/On/M4r9L/pjF/zf5Yxb/XfPHLP675Y9Z/HfPH7P4/zZ/zOL/u/wxi/8e+WMW/z3zxyz+e+WPWfx/nz9m8f9D/pjFf+/8MYv/PvljFv9988cs/n/MH7P4/yl/7DX/QYPe0/775Y9Z1v/++WMW/z/nj1n8D8gfs/j/JX/M4n9g/pjF/6/5Yxb/v+WPWfwPyh+z+P89f8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+/8gfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxif+ggfwxi/+g/DGL/+D8MYv/KPljFv8h+WMW/6H5Yxb/UfPHLP6j5Y9Z/Iflj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW//flj1n8x80fs/iPlz9m8R8/f8zi//78MYv/B/LHLP4T5I9Z/D+YP2bxnzB/zOI/Uf6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/4nzxyz+k+SPWfwnzR+z+H88f8ziP9mr/sPeoXG9S7P4T976xyz+U+SPWfynzB+z+E+VP2bx/0T+mMV/6vwxi/8n88cs/p/KH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/p/PH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/bPljFv+v5I9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9q/pjF/2v5Yxb/BfPHLP5fzx+z+C+UP2bx/0b+mMX/m/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/W/ljFv8l88cs/t/OH7P4fyd/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7fzR+z+C+XP2bxXz5/zOL/vfwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/7+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf8H+WMW/3Xzxyz+6+WPWfzXzx+z+P8wf8ziv0H+mMX/R/ljFv8N88cs/hvlj1n8N84fs/j/OH/M4v+T/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/j/NH7P4/yx/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP4/zx+z+P8if8zi/8v8MYv/TvljFv+d88cs/r/KH7P4/zp/zOK/S/6Yxf83+WMW/13zxyz+u+WPWfx3zx+z+P82f8zi/7v8MYv/HvljFv8988cs/nvlj73Rf5R3ejj/772J/+/zxyzr/w/5Yxb/vfPHLP775I9Z/PfNH7P4/zF/zOL/p/wxi/9++WMW//3zxyz+f36j/53/9XG9S7P4H9D6xyz+f8kfs/gfmD9m8f9r/pjF/2/5Yxb/g/7pv94178jA3p1Z/P/e+scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf0zi/3L5/2sS/0Hn549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj713/Qe9wf+K/LH3rv8b1/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/Jf1S60OL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH5P4v/xp/v+axX9Q/pjFf3D+mMV/lPwxi/+Q/DGL/9D8MYv/qPljFv/R8scs/sPyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL//vyxyz+4+aPWfzHyx+z+I+fP2bxf3/+mMX/A/ljFv8J8scs/h/MH7P4T5g/ZvGfKH/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/8Rv7T/0f31c79Is/pO0/jGL/6T5Yxb/j+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/yfyxyz+U+ePWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8f9c/pjFf5r8MYv/tPljg87YdejAwMB73n+6/DHL+p8+f8ziP0P+mMV/xvwxi//n88cs/jPlj1n8Z84fs/jPkj9m8Z81f8zi/4X8MYv/F/PHLP5fyh+z+H85f8ziP1v+mMX/K/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mj9m8f9a/pjFf8H8MYv/1/PHLP4L5Y9Z/L+RP2bx/2b+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1b+mMV/yfwxi/+388cs/t/JH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/d/PHLP7L5Y9Z/JfPH7P4fy9/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/fv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvH/Qf6YxX/d/DGL/3r5Yxb/9fPHLP4/zB+z+G+QP2bx/1H+mMV/w/wxi/9G+WMW/43zxyz+P84fs/j/JH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/9P88cs/j/LH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/z/PHLP6/yB+z+P8yf8ziv1P+mMV/5/wxi/+v8scs/r/OH7P475I/ZvH/Tf6YxX/X/DGL/275Yxb/3fPHLP6/zR+z+P8uf8ziv0f+mMV/z/wxi/9e+WMW/9/nj1n8/5A/ZvHfO3/M4r9P/pjFf9/8MYv/H/PHLP5/yh+z+O+XP2bx3z9/zOL/5/wxi/8B+WMW/7/kj1n8D8wfs/j/NX/M4v+3/DGL/0H5Yxb/v+ePWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf8f+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UPybxH2Ugf8ziPyh/zOI/OH/M4j9K/pjFf0j+mMV/aP6YxX/U/DGL/2j5Yxb/YfljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMX/ffljFv9x88cs/uPlj1n8x88fs/i/P3/M4v+B/DGL/wT5Yxb/D+aPWfwnzB+z+E+UP2bx/1D+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMV/4vwxi/8k+WMW/0nzxyz+H88fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/9U+WMW/0/kj1n8p84fs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4v/5/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4z5Y/ZvH/Sv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv+v5o9Z/L+WP2bxXzB/zOL/9fwxi/9C+WMW/2/kj1n8v5k/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8v5U/ZvFfMn/M4v/t/DGL/3fyxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/3fwxi/9y+WMW/+Xzxyz+38sfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfy/nz9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfx/kD9m8V83f8ziv17+mMV//fwxi/8P88cs/hvkj1n8f5Q/ZvHfMH/M4r9R/pjFf+P8MYv/j/PHLP4/yR+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/T/DGL/8/yxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOL/8/wxi/8v8scs/r/MH7P475Q/ZvHfOX/M4v+r/DGL/6/zxyz+u+SPWfx/kz9m8d81f8ziv1v+mMV/9/wxi/9v88cs/r/LH7P475E/ZvHfM3/M4r9X/pjF//f5Yxb/P+SPWfz3zh+z+O+TP2bx3zd/zOL/x/wxi/+f8scs/vvlj1n8988fs/j/OX/M4n9A/pjF/y/5Yxb/A/PHLP5/zR+z+P8tf8zif1D+mMX/7/ljFv+DPf6j/ycbW/wP8fj/R1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8f9H/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj0n8hwzkj1n8B709/1H/18b1Ls3iP7j1j1n8R8kfs/gPyR+z+A/NH7P4j5o/ZvEfLX/M4j8sf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+L8vf8ziP27+mMV/vPwxi//4+WMW//fnj1n8P5A/ZvGfIH/M4v/B/DGL/4T5Yxb/ifLHLP4fyh+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+E+cP2bxnyR/zOI/af6Yxf/j+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOL/ifwxi//U+WMW/0/mj1n8P5U/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8P58/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv/Z8scs/l/JH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/9X8MYv/1/LHLP4L5o9Z/L+eP2bxXyh/zOL/jfwxi/8388cs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+38scs/kvmj1n8v50/ZvH/Tv6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/L+bP2bxXy5/zOK/fP6Yxf97+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL//fzxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/w+M/sP+/SYW/3WN/m8ji/96+WMW//Xzxyz+P8wfs/hvkD9m8f9R/pjFf8P8MYv/RvljFv+N88cs/j/OH7P4/yR/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/T/PHLP4/yx+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/8/zxyz+v8gfs/j/Mn/M4r9T/pjFf+f8MYv/r/LHLP6/zh+z+O+SP2bx/03+mMV/1/wxi/9u+WMW/93zxyz+v80fs/j/Ln/M4r9H/pjFf8/8MYv/XvljFv/f549Z/P+QP2bx3zt/zOK/T/6YxX/f/DGL/x/zxyz+f8ofs/jvlz9m8d8/f8zi/+f8MYv/AfljFv+/5I9Z/A/MH7P4/zV/zOL/t/wxi/9B+WMW/7/nj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX/H/ljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+Vyj9B//bLSz+Vyr9/30W/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8sck/kMH8scs/oPyxyz+g/PHLP6j5I9Z/Ifkj1n8h+aPWfxHzR+z+I+WP2bxH5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n835c/ZvEfN3/M4j9e/pjFf/z8MYv/+/PHLP4fyB+z+E+QP2bx/2D+mMV/wvwxi/9E+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n8J84fs/hPkj9m8Z80f8zi//H8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f9E/pjFf+r8MYv/J/PHLP6fyh+z+H86f8zi/5n8MYv/Z/PHLP6fyx+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP6fzx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/xfyxyz+X8wfs/h/KX/M4v/l/DGL/2z5Yxb/r+SPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvH/av6Yxf9r+WMW/wXzxyz+X88fs/gvlD9m8f9G/pjF/5su/yFvd0OL/8Iu/7edxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4fyt/zOK/ZP6Yxf/b+WMW/+/kj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMX/u/ljFv/l8scs/svnj1n8v5c/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/h/P3/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/j/IH/M4r9u/pjFf738MYv/+vljFv8f5o9Z/DfIH7P4/yh/zOK/Yf6YxX+j/DGL/8b5Yxb/H+ePWfx/kj9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6Yxf+n+WMW/5/lj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMX/5/ljFv9f5I9Z/H+ZP2bx3yl/zOK/c/6Yxf9X+WMW/1/nj1n8d8kfs/j/Jn/M4r9r/pjFf7f8MYv/7vljFv/f5o9Z/H+XP2bx3yN/zOK/Z/6YxX+v/DGL/+/zxyz+f8gfs/jvnT9m8d8nf8ziv2/+mMX/j/ljFv8/5Y9Z/PfLH7P4758/ZvH/c/6Yxf+A/DGL/1/yxyz+B+aPWfz/mj9m8f9b/pjF/6D8MYv/3/PHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4v+P/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH5P4jzqQP2bxH5Q/ZvEfnD9m8R8lf8ziPyR/zOI/NH/M4j9q/pjFf7T8MYv/sPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOL/vvwxi/+4+WMW//Hyxyz+4+ePWfzfnz9m8f9A/pjFf4L8MYv/B/PHLP4T5o9Z/CfKH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOI/cf6YxX+S/DGL/6T5Yxb/j+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/yfyxyz+U+ePWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8f9c/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f98/pjFf6b8MYv/zPljFv9Z8sdG9h/6Tg/o/7U38Z81f8yy/r+QP2bx/2L+mMX/S/ljFv8v549Z/GfLH7P4fyV/zOI/+7/3H+1/dVzv0iz+c7T+MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/9X88cs/l/LH7P4L5g/ZvH/ev6YxX+h/DGL/zfyxyz+38wfs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+38ofs/gvmT9m8f92/pjF/zv5Yxb/pfLH3qP+g0ayHnXp/LH3qP/LvX79L5M/ZvFfNn/M4v/d/DGL/3L5Yxb/5fPHLP7fyx+z+K+QPzbojEEjZua97b9i/phl/a+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/7+ePWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/H+SPWfzXzR+z+K+XP2bxXz9/zOL/w/wxi/8G+WMW/x/lj1n8N8wfs/hvlD9m8d84f8zi/+P8MYv/T/LHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/j/NH/M4v+z/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P4/zx/zOL/i/wxi/8v88cs/jvlj1n8d84fs/j/Kn/M4v/r/DGL/y75Yxb/3+SPWfx3zR+z+O+WP2bx3z1/zOL/2/wxi//v8scs/nvkj1n898wfs/jvlT9m8f99/pjF/w/5Yxb/vfPHLP775I9Z/PfNH7P4/zF/zOL/p/wxi/9++WMW//3zxyz+f84fs/gfkD9m8f9L/pjF/8D8MYv/X/PHLP5/yx+z+B+UP2bx/3v+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfz/kT9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F/2Nv2H/G+N612axf/y1j9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+e/8DocJnF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyT+ow3kj1n8B+WPWfwH549Z/EfJH7P4D8kfs/gPzR+z+I+aP2bxHy1/zOI/LH/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/i/L3/M4j9u/pjFf7z8RzTsDecs/uPnj1n8358/ZvH/QP6YxX+C/DGL/wfzxyz+E+aPWfwnyh+z+H8of8zi/+H8sfem/yuvdPZ6/4/kj703/V/p9f4fzR+z+H8sf8ziP3H+mMV/kvwxi/+k+WMW/4/nj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/8n8scs/lPnj1n8P5k/ZvH/VP6Yxf/T+WMW/8/kj1n8P5s/ZvH/XP6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/fP6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/GfLH7P4fyV/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/V/PHLP5fyx+z+C+YP2bx/3r+mMV/ofwxi/838scs/t/MH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/t/KH7P4L5k/ZvH/dv6Yxf87+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bx/27+mMV/ufwxi//y+WMW/+/lj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+388fs/ivnj9m8V8jf8ziv6bKf4y3vaXFfy2V/9vP4r92/pjFf538MYv/D/LHLP7r5o9Z/NfLH7P4r58/ZvH/Yf6YxX+D/DGL/4/yxyz+G+aPWfw3yh+z+G+cP2bx/3H+mMX/J/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23Qv0eExX/btDGL/0/zxyz+P8sfs/hvlz9m8d8+f8ziv8Mr/i+89E6N612axX/H1j9m8f95/pjF/xf5Yxb/X+aPWfx3yh+z+O+cP2bx/1X+mMX/1/ljFv9d8scs/r/JH7P475o/ZvHfLX/M4r97/pjF/7f5Yxb/3+WPWfz3yB+z+O+ZP2bx3yt/zOL/+7flP/R/b1zv0iz+f2j9Yxb/vfPHLP775I9Z/PfNH7P4/zF/zOL/p/wxi/9++WMW//3zxyz+f84fs/gfkD9m8f9L/pjF/8D8MYv/X/PHLP5/yx+z+B+UP2bx/3v+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfz/kT9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMS/2ED+WMW/0H5Yxb/wfljFv9R8scs/kPyxyz+Q/PHLP6j5o9Z/EfLH7P4D8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+78sfs/iPmz9m8R8vf8ziP37+mMX//fljFv8P5I9Z/CfIH7P4fzB/zOI/Yf6YxX+i/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+H8if8ziP3X+mMX/k/ljFv9P5Y9Z/D+dP2bx/0z+mMX/s/ljFv/P5Y9Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv/P549Z/GfKH7P4z5w/9rL/q2few/6z5I9Z1v+s+WMW/y/kj1n8v/iW/rv/74/rXZrF/0utf8zi/+X8MYv/bPljFv+v5I9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9q/pjF/2v5Yxb/BfPHLP5fzx+z+C+UP2bx/0b+mMX/m/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/W/ljFv8l88cs/t/OH7P4fyd/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7fzR+z+C+XP2bxXz5/zOL/vfwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/7+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf8H+WMW/3Xzxyz+6+WPWfzXfwv/of+Ncb1Ls/j/sPWPWfw3yB+z+P8of8ziv2H+mMV/o/wxi//G+WMW/x/nj1n8f5I/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/p/ljFv+f5Y9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjF/+f5Yxb/X+SPWfx/mT9m8d8pf8ziv3P+mMX/V/ljFv9f549Z/HfJH7P4/yZ/zOK/a/6YxX+3/DGL/+75Yxb/3+aPWfx/lz9m8d8jf8ziv2f+mMV/r/wxi//v88cs/n/IH7P4750/ZvHfJ3/M4r9v/pjF/4/5Yxb/P+WPWfz3yx+z+O+fP2bx/3P+mMX/gPwxi/9f8scs/gfmj1n8/5o/ZvH/W/6Yxf+g/DGL/9/zxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOL/j/wxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxv+et/Mf5L4zrXZrF/97WP2bxvy9/zOJ/f/6Yxf+B/DGD/6AhA8MezB8z+A9f/w/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9J/EcfyB+z+A/KH7P4D84fs/iPkj9m8R+SP2bxH5o/ZvEfNX/M4j9a/pjFf1j+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxf1/+mMV/3Pwxi/94+WMW//Hzxyz+788fs/h/IH/M4j9B/pjF/4P5Yxb/CfPHLP4T5Y9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bxnzh/zOI/Sf6YxX/S/DGL/8fzxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOI/Vf6Yxf8T+WMW/6nzxyz+n8wfs/h/Kn/M4v/p/DGL/2dk/tO9ze0s/p+V+b/dLP6fyx+z+E+TP2bxn3ZgYLN3akjv5iz+07X+MYv/9PljFv8Z8scs/jPmj1n8P58/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv/Z8scs/l/JH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/9X8MYv/1/LHLP4L5o9Z/L+eP2bxXyh/zOL/jfwxi/8388cs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+38scs/kvmj1n8v50/ZvH/Tv6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/L+bP2bxXy5/zOK/fP6Yxf97+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL//fzxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/w/yxyz+6+aPWfzXyx+z+K+fP2bx/2H+mMV/g/wxi/+P8scs/hvmj1n8N8ofs/hvnD9m8f9x/pjF/yf5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8f5o/ZvH/Wf6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/H+eP2bx/0X+mMX/l/ljFv+d8scs/jvnj1n8f5U/ZvH/df6YxX+X/DGL/2/yxyz+u+aPWfx3yx+z+O+eP2bx/23+mMX/d/ljFv898scs/nvmj1n898ofs/j/Pn/M4v+H/DGL/975Yxb/ffLHLP775o9Z/P+YP2bx/1P+mMV/v/wxi//++WMW/z/nj1n8D8gfs/j/JX/M4n9g/pjF/6/5Yxb/v+WPWfwPyh+z+P89f8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H54+9d/33OPd1l45+Qv7Ye9f/jev/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvH/R/6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fyxN/gPe+/6P5E/Zln/T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH5P4jzGQP2bxH5Q/ZvEfnD9m8R8lf8ziPyR/zOI/NH/M4j9q/pjFfzSV/+hve0uL/zCV/9vP4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/i/L3/M4j9u/pjFf7z8MYv/+PljFv/3549Z/D+QP2bxnyB/zOL/wfwxi/+E+WMW/4nyxyz+H8ofs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv/J8scs/pPnj1n8p8gfey/7v64xpswfey/7v379T5U/ZvH/RP6YxX/q/DGL/yfzxyz+n8ofs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+n88fs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/9s+WMW/6/kj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2r+mMX/a/ljFv8F88cs/l/PH7P4L5Q/ZvH/Rv6Yxf+b+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf9b+WMW/yXzxyz+384fs/h/J3/M4r9U/pjFf+n8MYv/MvljFv9l88cs/t/NH7P4L5c/ZvFfPn/M4v+9/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF//v5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/wf5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zB/zOK/Qf6Yxf9H+WMW/w3zxyz+G+WPWfw3zh+z+P84f8zi/5P8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+P80fs/j/LH/M4r9d/pjFf/v8MYv/DvljFv8d88cs/j/PH7P4/yJ/zOL/y/wxi/9O+WMW/53zxyz+v8ofs/j/On/M4r9L/pjF/zf5Yxb/XfPHLP675Y9Z/HfPH7P4/zZ/zOL/u/wxi/8e+WMW/z3zxyz+e+WPWfx/nz9m8f9D/pjFf+/8MYv/PvljFv9988cs/n/MH7P4/yl/zOK/X/6YxX///DGL/5/zxyz+B+SPWfz/kj9m8T8wf8zi/9f8MYv/3/LHLP4H5Y9Z/P+eP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/jX+c/+J0Y17s0i/8JrX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+P8jf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/K/Qf/W1sY/F/Tuj/drL4P58/ZvF/IX/M4v9i/pjF/6X8MYn/mAP5Yxb/QfljFv/B+WMW/1Hyxyz+Q/LHLP5D88cs/qPmj1n8R8sfs/gPyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7vyx+z+I+bP2bxHy9/zOI/fv6Yxf/9+WMW/w/kj1n8J8gfs/h/MH/M4j9h/pjFf6L8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/x/LHLP4T549Z/CfJH7P4T5o/ZvH/eP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fyJ/zOI/df6Yxf+T+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/8/lj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/8/nj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/C/ljFv+5h+VPWfy/1PrHLP5fzh+z+M+WP2bx/0r+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/r+aPWfy/lj9m8V8wf8zi//X8MYv/QvljFv9v5I9Z/L+ZP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/L+VP2bxXzJ/zOL/7fwxi/938scs/kvlj1n8l84fs/gvkz9m8V82f8zi/938MYv/cvljFv/l88cs/t/LH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8v58/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8f5A/ZvFfN3/M4r9e/pjFf/38MYv/D/PHLP4b5I9Z/H+UP2bx3zB/zOK/Uf6YxX/j/DGL/4/zxyz+P8kfs/hvkj9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOL/0/wxi//P8scs/tvlj1n8t88fs/jvkD9m8d8xf8zi//P8MYv/L/LHLP6/zB97z/m/Dvn1/jvlj73n/N9k/e+cP2bx/1X+mMX/1/ljFv9d8scs/r/JH7P475o/ZvHfLX/M4r97/pjF/7f5Yxb/3+WPWfz3yB+z+O+ZP2bx3yt/zOL/+/wxi/8f8scs/nvnj1n898kfs/jvmz9m8f9j/pjF/0/5Yxb//fLHLP77549Z/P+cP2bxPyB/zOL/l/wxi/+B+WMW/7/mj1n8/5Y/ZvE/KH/M4v/3/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz/2qv/AsIGB97L/CfljlvV/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/j/I3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfc/gn/2Y5/AfGvK9HAWbxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMS/7EG8scs/oPyxyz+g63+K7z11Rb/Uaz+/yaL/5D8MYv/0Pwxi/+o+WMW/9Hyxyz+w/LHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/+/LHLP7j5o9Z/MfLH7P4j58/ZvF/f/6Yxf8D+WMW/wnyxyz+H8wfs/hPmD9m8Z8of8zi/6H8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/xPljFv9J8scs/pPmj1n8P54/ZvGfLH/M4j95/tgI/9EHv8f9p8gfs6z/KfPHLP5T5Y9Z/D+RP2bxnzp/zOL/yfwxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi//n8scs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi//n88cs/jPlj1n8Z84fs/jPkj9m8Z81f8zi/4X8MYv/F/PHLP5fyh+z+H85f8ziP1v+mMX/K/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mj9m8f9a/pjFf8H8MYv/1/PHLP4L5Y9Z/L+RP2bx/2b+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1b+mMV/yfwxi/+388cs/t/JH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/d/PHLP7L5Y9Z/JfPH7P4fy9/zOK/Qv6YxX9Fo//buMMW/5WM/m8ji//K+WMW/1Xyxyz+q+aPWfxXyx+z+H8/f8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+P8gf8ziv27+mMV/vfwxi//6+WMW/x/mj1n8N8gfs/j/KH/M4r9h/pjFf6P8MYv/xvljFv8f549Z/H+SP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjF/6f5Yxb/n+WPWfy3yx+z+G+fP2bx3yF/zOK/Y/6Yxf/n+WMW/1/kj1n8f5k/ZvHfKX/M4r9z/pjF/1f5Yxb/X+ePWfx3yR+z+P8mf8ziv2v+mMV/t/wxi//u+WMW/9/mj1n8f5c/ZvHfI3/M4r9n/pjFf6/8MYv/7/PHLP5/yB+z+O+dP2bx3yd/zOK/b/6Yxf+P+WMW/z/lj1n898sfs/jvnz9m8f9z/pjF/4D8MYv/X/LHLP4H5o9Z/P+aP2bx/1v+mMX/oPwxi//f88cs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zi/4/8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G8B/3P/muN6lvbf9b3710rFubP1j723/1xrrpvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/7Ye9R/ypEuHeuu/LH3qP/LvX79350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH5P4jz2QP2bxH5Q/ZvEfnD9m8R8lf8ziPyR/zOI/NH/M4j9q/pjFf7T8MYv/sPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOL/vvwxi/+4+WMW//Hyxyz+4+ePWfzfnz9m8f9A/pjFf4L8MYv/B/PHLP4T5o9Z/CfKH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOI/cf6YxX+S/DGL/6T5Yxb/j+ePWfwnyx+z+E+eP2bxnyL/gTvgMov/lPljFv+p8scs/p/IH7P4T50/ZvH/ZP6Yxf9T+WMW/0/nj1n8P5M/ZvH/bP6Yxf9z+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf/z+WMW/5nyxyz+M+ePWfxnyR97g/+Iy8Z9h8f0/9Sb+M+aP2ZZ/1/IH7P4fzF/zOL/pfwxi/+X88cs/rPlj1n8v5I/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMX/q/ljFv+v5Y9Z/BfMH7P4fz1/zOK/UP6Yxf8b+WMW/2/mj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/2/lj1n8l8wfs/h/O3/M4v+d/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4fzd/zOK/XP6YxX/5/DGL//fyxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/7+ePWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/H+SPWfzXzR+z+K+XP2bxXz9/zOL/w/wxi/8G+WMW/x/lj1n8N8wfs/hvlD9m8d84f8zi/+P8MYv/T/LHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/j/NH/M4v+z/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P4/zx/zOL/i/wxi/8v88cs/jvlj1n8d84fe6/6DxvJ/1f5Y+9V/4GR/H+dP2bx3yV/zOL/m/wxi/+u+WMW/93yxyz+u+ePWfx/mz9m8f9d/pjFf4/8MYv/nvljFv+98scs/r/PH7P4/yF/zOK/d/6YxX+f/DGL/775Yxb/P+aPWfz/lD9m8d8vf8ziv3/+mMX/z/ljFv8D8scs/n/JH7P4H5g/ZvH/a/6Yxf9v+WMW/4Pyxyz+f88fs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi/8/8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b9rZP/N/8vjepdm8b+79Y9Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHJP7jDOSPWfwH5Y9Z/Afnj1n8R8kfs/gPyR+z+A/NH7P4j5o/ZvEfLX/M4j8sf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+L8vf8ziP27+mMV/vPwxi//4+WMW//fnj1n8P5A/ZvGfIH/M4v/B/DGL/4T5Yxb/ifLHLP4fyh+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+E+cP2bxnyR/zOI/af6Yxf/j+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOL/ifwxi//U+WMW/0/mj1n8P5U/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8P58/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv/Z8scs/l9R+y835ptdY/GfXe3/5ln858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H81f8zi/7X8MYv/gvljFv+v549Z/BfKH7P4fyN/zOL/zfwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/rfwxi/+S+WMW/2/nj1n8v5M/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/v5o9Z/JfLH7P4L58/ZvH/Xv6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v/9/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4v+D/DGL/7r5Yxb/9fLHLP7r549Z/H+YP2bx3yB/zOL/o/wxi/+G+WMW/43yxyz+G+ePWfx/nP/AwMDo/3KJxf8n+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/H+aP2bx/1n+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx/nj9m8f9F/pjF/5f5Yxb/nfLHLP47549Z/H+VP2bx/3X+mMV/l/wxi/9v8scs/rvmj1n8d8sfs/jvnj9m8f9t/pjF/3f5Yxb/PfLHLP575o9Z/PfKH7P4/z5/zOL/h/wxi//e+WMW/33yxyz+++aPWfz/mD9m8f9T/pjFf7/8MYv//vljFv8/549Z/A/IH7P4/yV/zOJ/YP6Yxf+v+WMW/7/lj1n8D8ofs/j/PX/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/v/IH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYn/+wbyxyz+g/LHLP6D88cs/qPkj1n8h+SPWfyH5o9Z/EfNH7P4j5Y/ZvEflj9m8R89f8ziP0b+mMV/zPyx/4+d+w/Xuq7vOH7z4wCZpB/b1KUNh8Zcm5HIaNRCVBSPP06ZaOZv1COQIPJDEkzFjVbq2HSpmyWbWjjmbNUSh5vr14qGZc3WiK1VTnEtjDEHi8wZuw6cg3D29lw7X/b9uvl+PP7gnPs+vu+U5/Xyvr24rrL031v/UJb+w/UPZen/Kv1DWfrvo38oS/999Q9l6V/0D2Xpv5/+oSz9X61/KEv/n9I/lKX/T+sfytJ/f/1DWfofoH8oS/8D9Q9l6f8z+oey9H+N/qEs/Q/SP5Sl/8H6h7L0f63+oSz9f1b/UJb+I/QPZel/iP6hLP1/Tv9Qlv4j9Q9l6X+o/qEs/Q/TP5Sl/+v0D2XpP0r/UJb+P69/KEv/w/UPZen/C/qHsvR/vf6hLP1/Uf9Qlv6/pH8oS/8j9A9l6f8G/UNZ+o/WP5Sl/xv1D2Xpf6T+oSz9x+gfytL/KP1DWfqP1T+Upf8v6x/K0n+c/qEs/d+kfyhL/1/RP5Sl/3j9Q1n6v1n/UJb+b9E/lKX/r+ofytL/rfqHsvSfoH8oS/+j9Q9l6T9R/1CW/sfoH8rS/1j9Q1n6H6d/KEv/SfqHsvQ/Xv9Qlv4n6B/K0n+y/qEs/U/UP5Slf7v+oSz9T9I/lKX/yfqHsvQ/Rf9Qlv6n6h/K0r9D/1CW/m/TP5Sl/9v1D2Xpf5r+oSz936F/KEv/0/UPZek/Rf9Qlv5n6B/K0v9M/UNZ+r9T/1CW/mfpH8rS/136h7L0P1v/UJb+5+gfytL/XP1DWfqfp38oS//z9Q9l6X+B/qEs/S/UP5Sl/1T9Q1n6X6R/KEv/i/UPZel/if6hLP079Q9l6X+p/qEs/afpH8rSf7r+oSz9Z+gfytL/3fqHsvS/TP9Qlv4z9Q9l6T9L/1CW/pfrH8rSf7b+oSz9r9A/lKX/HP1DWfrP1T+Upf88/UNZ+s/XP5Sl/5X6h7L0X6B/KEv/9+gfytL/Kv1DWfov1D+Upf8i/UNZ+l+tfyhL//fqH8rS/xr9Q1n6X6t/KEv/6/QPZem/WP9Qlv7X6x/K0v/X9A9l6f/r+oey9F+ifyhL//fpH8rS/zf0D7R1f33593+//qEs+/+A/qEs/W/QP5Sl/436h7L0v0n/UJb+v6l/KEv/pfqHsvT/Lf1DWfr/tv6hLP1v1j+Upf8t+oey9P8d/UNZ+n9Q/1CW/rfqH8rS/zb9Q1n6365/KEv/39U/lKX/7+kfytL/Dv1DWfp/SP9Qlv4f1j+Upf+d+oey9F+mfyhL/9/XP5Sl/x/oH8rS/y79Q1n6361/KEv/e/QPZen/Ef1DWfp/VP9Qlv7L9Q9l6X+v/qEs/f9Q/1CW/iv0D2Xp/0f6h7L0v0//UJb+f6x/KEv/+/UPZen/Mf1DWfr/if6hLP0/rn8oS/9P6B/K0v+T+oey9P9T/UNZ+n9K/1CW/g/oH8rSf6X+oSz9H9Q/lKX/n+kfytJ/lf6hLP0f0j+Upf+f6x/K0v8v9A9l6f+w/qEs/f9S/1CW/p/WP5Sl/2f0D2Xp/1n9Q1n6f07/UJb+n9c/lKX/X+kfytL/C/qHsvT/ov6hLP1X6x/K0v9L+oey9P9r/UNZ+q/RP5Sl/yP6h7L0/7L+oSz9v6J/KEv/R/UPZen/Vf1DWfp/Tf9Qlv5/o38oS//H9A9l6f91/UNZ+v+t/qEs/b+hfyhL/7/TP5Sl/1r9Q1n6f1P/UJb+6/QPZen/9/qHsvT/B/1DWfp/S/9Qlv7/qH8oS/9v6x/K0v87+oey9P+u/qEs/R/XP5Sl/z/pH8rS/wn9Q1n6P6l/KEv/9fqHsvR/Sv9Qlv7/rH8oS//v6R/K0v9f9A9l6f99/UNZ+m/QP5Sl/9P6h7L0/4H+oSz9N+ofytL/X/UPZem/Sf9Qlv7/pn8oS/9n9A9l6f/v+oey9N+sfyhL/y36h7L0/w/9Q1n6/1D/UJb+W/UPZen/I/1DWfo/q38oS/8f6x/K0v85/UNZ+v+n/qEs/Z/XP5Sl/0/0D2Xpv03/UJL++7b0D2XpP0D/UJb+A/UPZek/SP9Qlv6D9Q9l6d+mfyhL/yH6h7L0H6p/KEv/YfqHsvR/hf6hLP330j+Upf8r9Q9l6b+3/qEs/YfrH8rS/1X6h7L030f/0MuuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP818xYuumzqzJmdc33jG9/4Zuc3L/W/mQAAgP9tL3zof6n/TgAAAAAAAAAAAAAAAAAAACCvJv7vxF7qf0YAAAAAAAAAAAAAAPj/rr3jmI2DBuz21KBdH7z20c7tX8duPWv68uUPlp6v3T8+OXjJgbs+2LZt27Zlz0yY1P1waKvV6vpf27f78bDex12vv3jEnQfueFQmfuH2x8+fMvyUuStvGfzNZTd1PN22/dm21oWXzpjZ+caBrVY5rq11VdeDIwe0WuWEttbNXQ/GdD2Y3NZa0fXgqO0PXtH6bNeDN1w8e+YlXU+cWPn3DF4u2jsWtwbtttjWbv822HX/i0c8Mb3nax8v2fNqg1vd+x+58ssH9PpZjxfZf8/rl2N677/f/4DAi+rf/p9d1/O1j5f8b+//H1mzdVH0sxfff8/rl2PtH+oTfP7fbaO9P/f3+vx/SPCSO++PHrbm1q79t59x38HdTw3+n3z+f+H1y3G99z9wt8//XZ/jJ/V8/h/aapXj9/C3A1Jp77h+Y1/v/33vf/Bret0M2HX/93x1/d5d+7/3udaS7qfa+rn/SX29/9/Q6+8V6J/2jru39Xr/78f+W6OCl9y5/w0rh2///L/+/ov33+Vn/dn/8b33P3r+rCtGz1u46IgZs6ZO65zWefn4MeOOHDt+/Lhxo7d/Itjx6x7+pkASe/b+39qr182AVqtz5/3q+26a1LX/TQ8t+Wj3U8P6uf8T+nz/P8T7P4RGDmwNGdK6aur8+XOP3PFrz8MxO37d8ZcF++/Hf/8fenj3X9bzZ4YDWq0Dd96POn/80K79Xz2nrOp+akg/9z+5z/1P3P3PKoH+2cP3/0t63ey2/6M3XLuga/+H/XC/9d1P9fe//0/sc/93ef+HPdHe0ar1TbRr/0cNvf6katel3Z//QX2a2P+IzTdvqXZdTrJ/qE8T+5+y9C0XVbsuJ9s/1KeJ/T8464Kl1a7LKfYP9Wli/8+/estB1a7LqfYP9Wli/49976nl1a5Lh/1DfZrY/4fu6Diq2nV5m/1DfZrY/xFX/mhCtevydvuH+jSx/0tfefqKatflNPuH+jSx/5O2Hbt/tevyDvuH+jSx/wHXf39xtetyuv1DfZrY/5NTl86udl2m2D/Up4n9rxgx6tlq1+UM+4f6NLH/JU+/aXK163Km/UN9mtj/126787Fq1+Wd9g/1aWL/nzx3vzurXZez7B/q08T+fzzyob2qXZd32T/Up4n9r1274oFq1+Vs+4f6NLH/ZSsGjax2Xc6xf6hPE/u/7sRpj1a7LufaP9Snif2PHfeVc6pdl/PsH+rTxP4P/Py3n6p2Xc63f6hPE/s//eEF86pdlwvsH+rTxP4XHPSJn1S7LhfaP9Snif2/tfOg6dWuy1T7h/o0sf9yy15rq12Xi+wf6tPE/s/edPfEatflYvuH+jSx/1X7fPHj1a7LJfYP9Wli/5vnXD6+2nXptH+oTxP7/+77rnt/tetyqf1DfZrY/63PfaNUuy7T7B/q08T+N4w5+9xq12W6/UN9mtj/3ac880i16zLD/qE+Tex/6arH51e7Lu+2f6hPE/tfvfrkJ6pdl8vsH+rTxP4PGzV6eLXrMtP+oT5N7H/2WUs+XO26zLJ/qE8T+z/u/tteV+26XG7/UJ8m9j/s6xM+Ve26zLZ/qE8T+//MhA98utp1ucL+oT5N7H/LxEMPr3Zd5tg/1KeJ/a97YMzt1a7LXPuH+jSx/w8+ckfF6zLP/qE+Tex/zuuf31Ttusy3f6hPE/t/85QzF1a7LlfaP9Snif3vf9fkL1W7LgvsH+rTxP7P+84PTqt2Xd5j/1CfJvZ/6AEXHVztulxl/1CfJvY/fcaaG6tdl4X2D/VpYv+Tlq0bW+26LLJ/qE8T+9/nyXn3VLsuV9s/1KeJ/W8cdMCp1a7Le+0f6tPE/u+95uFvVbsu19g/1KeJ/d94w8c6q12Xa+0f6tPE/j+3dcjmatflOvsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRC9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBRAAAA//8xA+DQ") quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.654751025s ago: executing program 1 (id=8510): r0 = fsopen(&(0x7f0000000500)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) 2.2275208s ago: executing program 1 (id=8512): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@flushoncommit}, {@datasum}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@barrier}, {@nodiscard}, {@space_cache}, {@notreelog}, {@user_subvol_rm}, {@ssd}, {@noenospc_debug}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@rescan_uuid_tree}, {@nodiscard}, {@nodatacow}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1.800871685s ago: executing program 0 (id=8515): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)=0x4) 1.455681594s ago: executing program 3 (id=8516): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000010560100300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac14142a0500090029000000080004000005"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 1.443442995s ago: executing program 0 (id=8517): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x14821}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c014}, 0x0) 1.266713366s ago: executing program 3 (id=8518): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r0) 1.107527405s ago: executing program 0 (id=8519): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x7}, &(0x7f00000000c0)=0x8) 1.063746068s ago: executing program 3 (id=8520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) 841.095021ms ago: executing program 3 (id=8521): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 671.730951ms ago: executing program 0 (id=8522): r0 = gettid() setpgid(r0, 0x0) 507.46141ms ago: executing program 0 (id=8523): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3) 275.234494ms ago: executing program 4 (id=8524): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdnZZ6W5LYcuQ8vkks/vePJb3nSbffW86bzoBPLHGs5c0Ym9EfJ5EjBX704gYzksjEcutf3dn5cp0tiWxuvrOv0kkEXF75cp0+/9Kivdd2Us1/2T89UvEM5W1/S4sXT7XaDZnLxX1icXzH04sLF0+OH++cXb27OyFQ69OHp567cixV44M7FiXjqaf/fnmG99dO/P1Hz8ee+HTJE7E7qKt+zgGZTzGOz+TbtWIeG/QnZWkUhxPr+MEAODxk3bN4fbGWFTyUstY1OdLDQ4AAAAYiE8iYhUAAADY5hLn/wAAALDNtdcB3F65Mt3eyl2RADwqt05GRK2V/+37+1st1VjO30diKCJG7yRddwa17veuDaD/8Yj44auj+7Ittug+fKC35asR8Vyv8T/J87+W/xWPtfmfRsTkAPofv6cu/+HReZj8PzGA/uU/AAAAAAAADM71k60L+Wuv/6Wd9T/R4/pfpce1uwex8fW/9OYAugF6uHUy4vWuZ/vc6cr/Qq1S1J7K1wMMJXPzzdnJiHg6Ig7E0I6sPrVOH9/+dPzvfm3d6/+yLeu/vRawiONmdcf/PzPTWGw8zDEDLbeuRjxf7ZX/SWf8T/qs/337Pvv47fTPc/3aNs5/YKusfhOxv+f4f/eJbsn6z+ebyOcDE+1ZwVqnX/z1+379y38oTzb+j66f/7Wk+3mdC5vvY3L04Nl+bQ86/x9OTuVPFR0u9n3cWFy8NBUxnLy1dv+hzccM21E7H9r5kuX/gZd6n/+vN//Pkuz94lsijYhG8Z7VP7inzx1nfv+iXzzGfyhPlv8zmxr/N1/48t2VU/36v7/x/0g+ph8o9vj9H6zvfhO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgcZJGxO5I0nqnnKb1esSuiHg2RtPmxYXFl+cufnRhJmuLqMVQOjffnJ2MiLFWPcnqU3n5bv3QPfXDEbEnIq6N7czr9emLzZmyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICOXRGxO5K0HhFpXk7Ter3V9s9Y2dEBAAAAA1MrOwAAAABgyzn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAh7dl3/UYSEcvHd+ZbZrhoGyo1MmCrpWUHAJSmUnYAQGmqZQcAlMY5PpBs0D7St8UMAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBJsn/v9RtJRCwf35lvmeGibajUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftI3xYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnycLS5XONZnP2koKCgkKnUPY3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvZfwEAAP//vlL7zw==") openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000140)={0x474882, 0xa0, 0x8}, 0x18) 274.739204ms ago: executing program 3 (id=8525): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0xff, 0x4) 30.189388ms ago: executing program 3 (id=8526): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1, 0x402, 0xffffffff) 0s ago: executing program 0 (id=8527): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2200006, &(0x7f0000000000)={[{@volume={'volume', 0x3d, 0x3e}}, {@uid_ignore}, {@anchor={'anchor', 0x3d, 0xffff}}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {}, {}, {@lastblock}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) kernel console output (not intermixed with test programs): [ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 957.074545][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 957.087450][T22005] loop0: detected capacity change from 0 to 8192 [ 957.090171][ T5775] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 957.105203][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 957.114571][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 957.127112][ T5775] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 957.138838][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 957.152827][T22005] loop0: p1 < > p2 p4 < p5 > [ 957.157603][T22005] loop0: partition table partially beyond EOD, truncated [ 957.193547][T22005] loop0: p1 start 524299 is beyond EOD, truncated [ 957.200081][T22005] loop0: p2 size 16128 extends beyond EOD, truncated [ 957.231081][T22010] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 957.290575][T22005] loop0: p5 size 16128 extends beyond EOD, truncated [ 957.464763][T22016] loop1: detected capacity change from 0 to 1024 [ 957.503620][ T1192] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 957.539263][T22016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.624921][T22016] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 957.717140][ T1192] usb 1-1: Using ep0 maxpacket: 16 [ 957.724785][ T1192] usb 1-1: config 1 has an invalid interface descriptor of length 8, skipping [ 957.740421][ T1192] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.780426][ T1192] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 957.819544][ T1192] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 957.834770][ T1192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.838116][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.852041][ T1192] usb 1-1: Product: syz [ 957.870618][ T1192] usb 1-1: Manufacturer: syz [ 957.892370][ T1192] usb 1-1: SerialNumber: syz [ 958.198660][ T1192] usb 1-1: USB disconnect, device number 41 [ 958.549045][T22039] netlink: 'syz.3.7003': attribute type 1 has an invalid length. [ 958.559755][T19309] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 958.573552][T19309] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 958.583711][T19309] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 958.596980][T19309] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 958.606243][T19309] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 958.617559][T19309] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 958.884717][T22049] loop3: detected capacity change from 0 to 1024 [ 959.105425][T22056] loop0: detected capacity change from 0 to 128 [ 959.196538][T22056] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 959.277909][T22056] FAT-fs (loop0): Filesystem has been set read-only [ 959.423511][T22040] chnl_net:caif_netlink_parms(): no params data found [ 959.442270][T22063] loop1: detected capacity change from 0 to 4096 [ 959.482091][T22063] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 959.582976][T22063] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 959.659536][T22063] ntfs3: loop1: failed to convert "c46c" to macinuit [ 959.785806][T22040] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.807118][T22040] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.834912][T22040] bridge_slave_0: entered allmulticast mode [ 959.850382][T22040] bridge_slave_0: entered promiscuous mode [ 959.888872][T22040] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.896093][T22040] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.935800][T22040] bridge_slave_1: entered allmulticast mode [ 959.975635][T22040] bridge_slave_1: entered promiscuous mode [ 960.063588][T22040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.115808][T22040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.254638][T22040] team0: Port device team_slave_0 added [ 960.286779][T22040] team0: Port device team_slave_1 added [ 960.388374][T22087] loop0: detected capacity change from 0 to 4096 [ 960.396247][T22087] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 960.465449][T22040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.472769][T22040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.524997][T22087] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 960.539148][T22087] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 960.553875][T22040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.568458][T22087] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 960.588517][T22040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.602449][T22087] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 960.621902][T22040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.640289][T22093] loop3: detected capacity change from 0 to 4096 [ 960.676395][T22087] ntfs: volume version 3.1. [ 960.685140][T22087] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 960.710506][T22093] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 960.720635][T22040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.780625][T22087] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 960.807005][T22087] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 960.844738][T22040] hsr_slave_0: entered promiscuous mode [ 960.855066][ T5781] Bluetooth: hci4: command tx timeout [ 960.871592][T22040] hsr_slave_1: entered promiscuous mode [ 960.886159][T22087] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 960.909991][T22087] ntfs: (device loop0): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 960.920259][T22040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 960.929085][T22040] Cannot create hsr debugfs directory [ 961.009537][T22093] ntfs3: loop3: failed to convert "c46c" to cp862 [ 961.250955][T22102] loop1: detected capacity change from 0 to 256 [ 961.356942][T22104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7031'. [ 961.392735][T22104] openvswitch: netlink: Missing key (keys=40, expected=100) [ 961.414692][T22102] FAT-fs (loop1): Directory bread(block 64) failed [ 961.427984][T22102] FAT-fs (loop1): Directory bread(block 65) failed [ 961.434712][T22102] FAT-fs (loop1): Directory bread(block 66) failed [ 961.451335][T22102] FAT-fs (loop1): Directory bread(block 67) failed [ 961.458220][T22102] FAT-fs (loop1): Directory bread(block 68) failed [ 961.465710][T22102] FAT-fs (loop1): Directory bread(block 69) failed [ 961.479565][T22102] FAT-fs (loop1): Directory bread(block 70) failed [ 961.512452][T22102] FAT-fs (loop1): Directory bread(block 71) failed [ 961.519186][T22102] FAT-fs (loop1): Directory bread(block 72) failed [ 961.556043][T22102] FAT-fs (loop1): Directory bread(block 73) failed [ 961.665852][T22108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7032'. [ 961.693424][T22108] ip6tnl1: entered allmulticast mode [ 961.712310][T22040] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 961.744339][T22040] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 961.783357][T22040] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 961.869985][T22040] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 961.935664][T22117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7036'. [ 962.193992][T22040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.245803][T22040] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.302350][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.309656][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.352847][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.360109][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.476001][T22132] loop3: detected capacity change from 0 to 1764 [ 962.502813][T22040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 962.842435][T22141] loop1: detected capacity change from 0 to 4096 [ 962.881977][T22141] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 962.932986][T22141] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 962.943277][T22141] ntfs3: loop1: mft corrupted [ 962.952364][T22141] ntfs3: loop1: Failed to load $Extend (-22). [ 962.962419][T22141] ntfs3: loop1: Failed to initialize $Extend. [ 963.020837][T22141] ntfs3: loop1: ino=1b, "file0" failed to parse mft record [ 963.039822][T22141] ntfs3: loop1: ino=1b, "file0" attr_set_size [ 963.073290][ T5781] Bluetooth: hci4: command tx timeout [ 963.201553][T22040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.484054][T22138] loop0: detected capacity change from 0 to 32768 [ 963.524189][T22138] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.7045 (22138) [ 963.584139][T22138] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 963.618476][T22138] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 963.627367][T22138] BTRFS info (device loop0): turning on flush-on-commit [ 963.704071][T22138] BTRFS info (device loop0): enabling disk space caching [ 963.711273][T22138] BTRFS info (device loop0): disabling tree log [ 963.744737][T22138] BTRFS info (device loop0): enabling ssd optimizations [ 963.758385][T22138] BTRFS info (device loop0): force clearing of disk cache [ 963.781244][T22138] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 963.800461][T22138] BTRFS info (device loop0): use zstd compression, level 3 [ 963.832842][T22138] BTRFS info (device loop0): setting nodatacow, compression disabled [ 963.880148][T22138] BTRFS info (device loop0): disk space caching is enabled [ 964.073930][T22138] BTRFS info (device loop0): rebuilding free space tree [ 964.146067][T22040] veth0_vlan: entered promiscuous mode [ 964.161416][T22040] veth1_vlan: entered promiscuous mode [ 964.225932][T22138] BTRFS info (device loop0): disabling free space tree [ 964.255000][T22138] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 964.279409][T22138] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 964.325914][T22138] BTRFS info (device loop0): checking UUID tree [ 964.344084][T22040] veth0_macvtap: entered promiscuous mode [ 964.393684][T22040] veth1_macvtap: entered promiscuous mode [ 964.408017][T22138] BTRFS info (device loop0: state M): setting datasum, datacow enabled [ 964.427975][T22138] BTRFS info (device loop0: state M): force clearing of disk cache [ 964.438757][T22138] BTRFS info (device loop0: state M): use zstd compression, level 3 [ 964.462894][T22138] BTRFS info (device loop0: state M): setting nodatacow, compression disabled [ 964.499328][T22040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.524722][T22190] loop1: detected capacity change from 0 to 4096 [ 964.527550][T22040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.550501][T22193] xt_ecn: cannot match TCP bits for non-tcp packets [ 964.558546][T22040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.582888][T22040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.593601][T22040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.608775][T22190] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 964.621844][T22040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.638342][T22040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.664891][T22190] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 964.672463][T22040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.688186][T22040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.727190][ T5777] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 964.769294][T22040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.805539][T22040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.816407][T22040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.828080][T22040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.850454][T22040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.872886][T22040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.887461][T22040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.918366][T22040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.949486][T22040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.983886][T22040] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.051563][T22040] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.060333][T22040] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.101181][T22040] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.307686][ T5781] Bluetooth: hci4: command tx timeout [ 965.511954][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.542758][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.623041][T22202] loop3: detected capacity change from 0 to 4096 [ 965.676547][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.709685][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.774363][T22202] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 965.917512][T22211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7067'. [ 965.940089][T22211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7067'. [ 966.351587][T22224] overlayfs: missing 'lowerdir' [ 966.491275][T22228] loop0: detected capacity change from 0 to 512 [ 966.599128][T22228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 966.786097][T22228] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.7075: invalid size [ 966.916879][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.081620][T22248] program syz.4.7085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 967.099350][T22248] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 967.335683][T22260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7090'. [ 967.520993][ T5781] Bluetooth: hci4: command tx timeout [ 967.715085][T22274] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7097'. [ 968.384680][T22300] loop4: detected capacity change from 0 to 4096 [ 968.570228][T22307] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 968.643133][T22309] netlink: 'syz.3.7114': attribute type 15 has an invalid length. [ 968.662207][T22300] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 968.735928][T22300] Remounting filesystem read-only [ 968.848941][T22315] loop1: detected capacity change from 0 to 8 [ 968.856153][T22315] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 968.920496][ T6023] udevd[6023]: incorrect cramfs checksum on /dev/loop1 [ 968.935422][T22315] cramfs: Error -3 while decompressing! [ 968.941643][T22315] cramfs: ffffffff973f42f8(16)->ffff88805adaf000(4096) [ 968.954434][T22315] cramfs: Error -3 while decompressing! [ 968.985033][T22315] cramfs: ffffffff973f42f8(16)->ffff88805adaf000(4096) [ 968.992414][ T28] audit: type=1800 audit(973079771.524:148): pid=22315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7116" name="file0" dev="loop1" ino=244 res=0 errno=0 [ 969.022810][ T6023] udevd[6023]: incorrect cramfs checksum on /dev/loop1 [ 969.066311][ T6023] udevd[6023]: incorrect cramfs checksum on /dev/loop1 [ 969.135521][ T5844] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 969.188152][ T1192] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 969.327218][ T5844] usb 1-1: Using ep0 maxpacket: 8 [ 969.338814][ T5844] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 969.351811][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.370145][ T5844] usb 1-1: Product: syz [ 969.380809][ T5844] usb 1-1: Manufacturer: syz [ 969.391261][ T5844] usb 1-1: SerialNumber: syz [ 969.404074][ T1192] usb 4-1: Using ep0 maxpacket: 16 [ 969.422565][ T1192] usb 4-1: config 0 has an invalid interface number: 223 but max is 0 [ 969.431939][ T1192] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.443120][ T1192] usb 4-1: config 0 has no interface number 0 [ 969.450483][ T1192] usb 4-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 969.464398][ T1192] usb 4-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 969.496313][ T1192] usb 4-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 969.522678][ T1192] usb 4-1: config 0 interface 223 has no altsetting 0 [ 969.540679][ T1192] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 969.561613][ T1192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.585898][ T1192] usb 4-1: Product: syz [ 969.590216][ T1192] usb 4-1: Manufacturer: syz [ 969.629274][ T1192] usb 4-1: SerialNumber: syz [ 969.659615][ T1192] usb 4-1: config 0 descriptor?? [ 969.845267][ T5844] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 969.877035][ T5844] mxuport: probe of 1-1:254.0 failed with error -5 [ 969.927807][ T5844] usb 1-1: USB disconnect, device number 42 [ 970.102393][T22345] loop1: detected capacity change from 0 to 764 [ 970.128048][T18372] usb 4-1: USB disconnect, device number 49 [ 970.154495][T22345] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 970.579105][T22359] C: renamed from team_slave_0 (while UP) [ 970.591920][T22359] netlink: 'syz.4.7139': attribute type 3 has an invalid length. [ 970.622699][T22359] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7139'. [ 970.654627][T22359] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 971.436215][T22381] loop1: detected capacity change from 0 to 4096 [ 971.473733][T22381] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 971.508337][T22381] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 971.558512][T22391] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7155'. [ 971.588596][T22381] ntfs: (device loop1): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 971.685329][T22381] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 971.724742][T22381] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 971.770941][T22381] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 971.861106][T22381] ntfs: volume version 3.1. [ 971.865763][T22381] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 971.904035][T22381] ntfs: (device loop1): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 971.935981][T22381] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 972.791626][T22419] loop4: detected capacity change from 0 to 256 [ 972.834383][T22389] loop0: detected capacity change from 0 to 32768 [ 972.921876][T22426] loop3: detected capacity change from 0 to 128 [ 972.942884][T22419] FAT-fs (loop4): Directory bread(block 64) failed [ 972.949729][T22419] FAT-fs (loop4): Directory bread(block 65) failed [ 972.957106][T22419] FAT-fs (loop4): Directory bread(block 66) failed [ 972.964202][T22419] FAT-fs (loop4): Directory bread(block 67) failed [ 972.971620][T22419] FAT-fs (loop4): Directory bread(block 68) failed [ 972.978996][T22419] FAT-fs (loop4): Directory bread(block 69) failed [ 972.986066][T22419] FAT-fs (loop4): Directory bread(block 70) failed [ 972.992745][T22419] FAT-fs (loop4): Directory bread(block 71) failed [ 972.999929][T22419] FAT-fs (loop4): Directory bread(block 72) failed [ 973.007033][T22419] FAT-fs (loop4): Directory bread(block 73) failed [ 973.031583][T22426] FAT-fs (loop3): Directory bread(block 414) failed [ 973.063332][T22389] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 973.091586][T22426] FAT-fs (loop3): Directory bread(block 415) failed [ 973.162275][T22426] FAT-fs (loop3): Directory bread(block 416) failed [ 973.204440][T22426] FAT-fs (loop3): Directory bread(block 417) failed [ 973.227016][T22389] XFS (loop0): Ending clean mount [ 973.261382][T22426] FAT-fs (loop3): Directory bread(block 418) failed [ 973.268088][T22426] FAT-fs (loop3): Directory bread(block 419) failed [ 973.316216][T22426] FAT-fs (loop3): Directory bread(block 420) failed [ 973.322942][T22426] FAT-fs (loop3): Directory bread(block 421) failed [ 973.347521][T22389] XFS (loop0): Quotacheck needed: Please wait. [ 973.409049][T22426] FAT-fs (loop3): Directory bread(block 414) failed [ 973.432568][T22426] FAT-fs (loop3): Directory bread(block 415) failed [ 973.466626][T22426] syz.3.7170: attempt to access beyond end of device [ 973.466626][T22426] loop3: rw=3, sector=478, nr_sectors = 2 limit=128 [ 973.513665][T22426] syz.3.7170: attempt to access beyond end of device [ 973.513665][T22426] loop3: rw=2051, sector=480, nr_sectors = 6 limit=128 [ 973.554422][T22389] XFS (loop0): Quotacheck: Done. [ 973.744231][ T5777] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 975.452933][T22501] netlink: 'syz.4.7204': attribute type 1 has an invalid length. [ 976.355288][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 976.355306][ T28] audit: type=1326 audit(973079778.418:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22538 comm="syz.3.7222" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa1819aeb9 code=0x0 [ 976.477917][T22541] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7224'. [ 976.885944][T18372] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 977.135579][T18372] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 977.144343][T18372] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 977.173787][T18372] usb 5-1: config 220 has no interface number 2 [ 977.184016][T18372] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 977.199493][T18372] usb 5-1: config 220 interface 0 has no altsetting 0 [ 977.206663][T18372] usb 5-1: config 220 interface 76 has no altsetting 0 [ 977.220061][T18372] usb 5-1: config 220 interface 1 has no altsetting 0 [ 977.268113][T18372] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 977.279151][T18372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.292917][T22570] loop0: detected capacity change from 0 to 256 [ 977.305943][T18372] usb 5-1: Product: syz [ 977.310190][T18372] usb 5-1: Manufacturer: syz [ 977.324215][T22570] exfat: Deprecated parameter 'utf8' [ 977.329688][T22570] exfat: Deprecated parameter 'namecase' [ 977.342992][T18372] usb 5-1: SerialNumber: syz [ 977.381891][T22570] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d) [ 977.602301][T18372] usb 5-1: selecting invalid altsetting 0 [ 977.634888][T18372] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 977.641326][T18372] usb 5-1: No valid video chain found. [ 977.702578][T18372] usb 5-1: selecting invalid altsetting 0 [ 977.725775][T18372] usbtest: probe of 5-1:220.1 failed with error -22 [ 977.745987][T18372] usb 5-1: USB disconnect, device number 2 [ 978.553420][ T5844] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 978.794915][ T5844] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 978.817456][ T5844] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 978.866448][ T5844] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 978.884504][ T5844] usb 4-1: config 220 has no interface number 2 [ 978.898759][ T5844] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 978.927782][ T5844] usb 4-1: config 220 interface 0 has no altsetting 0 [ 978.945836][ T5844] usb 4-1: config 220 interface 76 has no altsetting 0 [ 978.967190][ T5844] usb 4-1: config 220 interface 1 has no altsetting 0 [ 978.992820][ T5844] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 979.026475][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.043193][ T5844] usb 4-1: Product: syz [ 979.053577][ T5844] usb 4-1: Manufacturer: syz [ 979.065682][ T5844] usb 4-1: SerialNumber: syz [ 979.281483][T22633] loop0: detected capacity change from 0 to 22 [ 979.313344][T22633] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 979.355683][ T5844] usb 4-1: selecting invalid altsetting 0 [ 979.366205][T22633] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 979.380584][ T5844] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 979.396757][ T5844] usb 4-1: No valid video chain found. [ 979.439368][ T5844] usb 4-1: selecting invalid altsetting 0 [ 979.455855][ T5844] usbtest: probe of 4-1:220.1 failed with error -22 [ 979.483722][ T5844] usb 4-1: USB disconnect, device number 50 [ 979.517499][T22635] loop1: detected capacity change from 0 to 1024 [ 979.603608][T22635] hfsplus: can't free extent [ 979.825381][T22644] loop1: detected capacity change from 0 to 256 [ 979.843512][T22644] exfat: Deprecated parameter 'utf8' [ 979.853619][T22644] exfat: Deprecated parameter 'namecase' [ 979.868292][T22644] exfat: Deprecated parameter 'namecase' [ 979.874015][T22644] exfat: Deprecated parameter 'utf8' [ 979.912796][T22644] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 980.007119][ T1192] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 980.244716][ T1192] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 980.268111][ T1192] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 980.289688][ T1192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.338460][ T1192] usb 1-1: Product: syz [ 980.349117][ T1192] usb 1-1: Manufacturer: syz [ 980.368335][ T1192] usb 1-1: SerialNumber: syz [ 980.411545][ T1192] usb 1-1: config 0 descriptor?? [ 980.439233][ T1192] usbtouchscreen: probe of 1-1:0.0 failed with error -12 [ 980.657058][ T1192] usb 1-1: USB disconnect, device number 43 [ 981.243979][T22664] loop1: detected capacity change from 0 to 32768 [ 981.332401][T22664] ea_get: invalid extended attribute [ 981.370162][T22664] ffff888076eb0330: 04 00 00 00 .... [ 981.719658][T22692] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 (while UP) [ 981.934993][T22696] loop1: detected capacity change from 0 to 256 [ 982.020628][T22696] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 982.041743][T22696] FAT-fs (loop1): Filesystem has been set read-only [ 982.229111][T22682] loop3: detected capacity change from 0 to 32768 [ 982.374357][T22682] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 982.416878][T22710] loop1: detected capacity change from 0 to 256 [ 982.435641][T22682] (syz.3.7293,22682,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 982.460791][T22682] (syz.3.7293,22682,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 982.470948][T22682] (syz.3.7293,22682,0):ocfs2_mknod:298 ERROR: status = -2 [ 982.479037][T22682] (syz.3.7293,22682,0):ocfs2_mknod:502 ERROR: status = -2 [ 982.486854][T22682] (syz.3.7293,22682,0):ocfs2_mkdir:659 ERROR: status = -2 [ 982.536550][T22710] FAT-fs (loop1): Directory bread(block 64) failed [ 982.562152][T22710] FAT-fs (loop1): Directory bread(block 65) failed [ 982.583054][T22710] FAT-fs (loop1): Directory bread(block 66) failed [ 982.624791][T22710] FAT-fs (loop1): Directory bread(block 67) failed [ 982.643141][T22710] FAT-fs (loop1): Directory bread(block 68) failed [ 982.659662][T22710] FAT-fs (loop1): Directory bread(block 69) failed [ 982.678431][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 982.696001][T22710] FAT-fs (loop1): Directory bread(block 70) failed [ 982.721479][T22710] FAT-fs (loop1): Directory bread(block 71) failed [ 982.732659][T22714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7308'. [ 982.762208][T22710] FAT-fs (loop1): Directory bread(block 72) failed [ 982.786663][T22710] FAT-fs (loop1): Directory bread(block 73) failed [ 983.694440][T22738] loop0: detected capacity change from 0 to 512 [ 983.772281][T22738] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.7319: EA inode hash validation failed [ 983.864899][T22738] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 983.931192][T22738] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #15: comm syz.0.7319: corrupted inode contents [ 983.951870][ T5844] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 983.961178][T22738] EXT4-fs error (device loop0): ext4_dirty_inode:6124: inode #15: comm syz.0.7319: mark_inode_dirty error [ 983.989848][T22738] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #15: comm syz.0.7319: corrupted inode contents [ 984.026480][T22738] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2998: inode #15: comm syz.0.7319: mark_inode_dirty error [ 984.071468][T22738] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.7319: mark inode dirty (error -117) [ 984.086452][T22738] EXT4-fs warning (device loop0): ext4_evict_inode:272: xattr delete (err -117) [ 984.099485][T22738] EXT4-fs (loop0): 1 orphan inode deleted [ 984.107357][T22738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.178791][ T5844] usb 5-1: Using ep0 maxpacket: 8 [ 984.193993][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 984.251032][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 984.261730][ T5844] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 984.278538][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 984.301272][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.323162][ T5844] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 984.337269][ T5844] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 984.347891][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.383693][ T5844] usb 5-1: config 0 descriptor?? [ 984.401875][T22736] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 985.003021][ T5781] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 985.017657][ T1200] usb 5-1: USB disconnect, device number 3 [ 985.230677][T22774] loop1: detected capacity change from 0 to 2048 [ 985.265372][T22774] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 985.757199][T22788] loop3: detected capacity change from 0 to 4096 [ 985.790249][T22793] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 985.810212][T22788] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 985.834517][T22793] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 985.851288][T22788] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 985.877416][T22793] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 985.925261][T22797] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 986.058281][T22788] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 986.082666][T22788] Remounting filesystem read-only [ 986.172851][ T5772] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 986.190140][ T5772] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 986.229235][ T5772] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 986.237868][ T5772] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 986.273699][ T5772] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 986.280759][ T5772] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 986.305337][ T5772] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 986.332091][ T5772] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 986.367972][ T5772] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 986.375559][ T5772] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 986.407238][ T5772] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 986.427378][ T5772] NILFS (loop3): discard dirty page: offset=270336, ino=3 [ 986.461603][ T5772] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 987.105156][T22830] loop3: detected capacity change from 0 to 22 [ 987.121489][T22830] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 987.136251][T22832] netlink: 'syz.4.7357': attribute type 3 has an invalid length. [ 987.169187][T22830] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 987.177932][T22832] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7357'. [ 987.446241][T22838] cgroup: Invalid name [ 987.503576][T22812] loop1: detected capacity change from 0 to 32768 [ 987.534786][T22812] (syz.1.7359,22812,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 987.583533][T22812] (syz.1.7359,22812,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 987.664996][T22812] JBD2: Ignoring recovery information on journal [ 987.673502][T22845] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 987.873988][T22812] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 988.197980][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 988.445286][T22863] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7375'. [ 988.502208][T22866] program syz.4.7377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 988.519113][T22866] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 988.886871][T22875] loop1: detected capacity change from 0 to 4096 [ 988.922990][T22875] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 988.971322][T22875] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 989.388319][T22890] netlink: 'syz.0.7386': attribute type 7 has an invalid length. [ 990.164393][ T27] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 990.403396][ T27] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 990.424313][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.467214][ T27] usb 5-1: config 0 descriptor?? [ 990.916818][ T27] [drm:udl_init] *ERROR* Selecting channel failed [ 990.987057][ T27] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 990.994837][ T27] [drm] Initialized udl on minor 2 [ 991.036445][ T27] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 991.057115][ T27] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 991.069799][ T1192] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 991.111409][ T1192] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 991.143478][ T27] usb 5-1: USB disconnect, device number 4 [ 991.155846][ T1192] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 991.335683][T22953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7419'. [ 991.348556][T22953] netlink: 'syz.0.7419': attribute type 1 has an invalid length. [ 991.366452][T22953] netlink: 'syz.0.7419': attribute type 2 has an invalid length. [ 991.377250][T22953] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7419'. [ 991.972923][T22967] loop4: detected capacity change from 0 to 4096 [ 992.001328][T22967] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 992.075294][T22977] loop1: detected capacity change from 0 to 256 [ 992.102079][T22975] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7438'. [ 992.205489][T22977] FAT-fs (loop1): Directory bread(block 64) failed [ 992.239750][T22967] ntfs3: loop4: failed to convert "c46c" to macromanian [ 992.269215][T22977] FAT-fs (loop1): Directory bread(block 65) failed [ 992.276163][T22977] FAT-fs (loop1): Directory bread(block 66) failed [ 992.327186][T22977] FAT-fs (loop1): Directory bread(block 67) failed [ 992.351742][T22977] FAT-fs (loop1): Directory bread(block 68) failed [ 992.397634][T22977] FAT-fs (loop1): Directory bread(block 69) failed [ 992.404420][T22977] FAT-fs (loop1): Directory bread(block 70) failed [ 992.435018][T22977] FAT-fs (loop1): Directory bread(block 71) failed [ 992.465392][T22977] FAT-fs (loop1): Directory bread(block 72) failed [ 992.472117][T22977] FAT-fs (loop1): Directory bread(block 73) failed [ 992.829549][T22993] netlink: 292 bytes leftover after parsing attributes in process `syz.0.7445'. [ 993.004735][ T28] audit: type=1326 audit(973079793.984:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22996 comm="syz.3.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1819aeb9 code=0x7ffc0000 [ 993.082635][ T28] audit: type=1326 audit(973079794.012:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22996 comm="syz.3.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1819aeb9 code=0x7ffc0000 [ 993.183149][ T28] audit: type=1326 audit(973079794.050:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22996 comm="syz.3.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1819aeb9 code=0x7ffc0000 [ 993.240657][T23004] loop1: detected capacity change from 0 to 64 [ 993.306127][ T28] audit: type=1326 audit(973079794.050:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22996 comm="syz.3.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7faa1819aeb9 code=0x7ffc0000 [ 993.395101][ T28] audit: type=1326 audit(973079794.050:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22996 comm="syz.3.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1819aeb9 code=0x7ffc0000 [ 993.487637][ T28] audit: type=1326 audit(973079794.050:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22996 comm="syz.3.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1819aeb9 code=0x7ffc0000 [ 993.555300][T23009] loop3: detected capacity change from 0 to 2048 [ 993.601445][T23009] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 993.616236][ T28] audit: type=1326 audit(973079794.050:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22996 comm="syz.3.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1819aeb9 code=0x7ffc0000 [ 993.688335][T23009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 993.744521][ T28] audit: type=1326 audit(973079794.050:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22996 comm="syz.3.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faa1819aeb9 code=0x7ffc0000 [ 993.820779][T23015] loop4: detected capacity change from 0 to 512 [ 993.841273][ T28] audit: type=1326 audit(973079794.050:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22996 comm="syz.3.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faa1819aeb9 code=0x7ffc0000 [ 993.915534][T23015] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.7450: inode has both inline data and extents flags [ 993.962055][T23015] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.7450: couldn't read orphan inode 15 (err -117) [ 994.017981][T23017] loop1: detected capacity change from 0 to 4096 [ 994.088575][T23015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 994.153105][T23017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.201742][T23023] loop0: detected capacity change from 0 to 512 [ 994.256719][T23023] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 994.351893][T22040] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.401979][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.796485][T23034] netlink: 'syz.3.7457': attribute type 30 has an invalid length. [ 994.983485][T23038] netlink: 'syz.3.7459': attribute type 49 has an invalid length. [ 995.004061][T23038] netlink: 'syz.3.7459': attribute type 49 has an invalid length. [ 995.038084][ T5894] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 995.241313][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 995.263427][ T5894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.292508][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 995.327317][ T5894] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 995.358417][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.385447][ T5894] usb 2-1: Product: syz [ 995.385475][ T5894] usb 2-1: Manufacturer: syz [ 995.385493][ T5894] usb 2-1: SerialNumber: syz [ 995.609851][ T5894] usb 2-1: 0:2 : does not exist [ 995.643117][ T5894] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 995.754772][ T5894] usb 2-1: USB disconnect, device number 36 [ 995.842983][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 996.077644][T23064] loop3: detected capacity change from 0 to 1024 [ 996.714413][T23079] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 997.013032][T23087] loop1: detected capacity change from 0 to 1024 [ 997.102693][T23087] EXT4-fs: Ignoring removed oldalloc option [ 997.110291][T23087] EXT4-fs: Ignoring removed orlov option [ 997.143198][T23087] EXT4-fs: Ignoring removed oldalloc option [ 997.165776][T23087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 997.252855][T23087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 997.372992][T23087] EXT4-fs error (device loop1): ext4_xattr_set_entry:1670: inode #13: comm syz.1.7482: corrupted xattr entries [ 997.421709][T23087] EXT4-fs (loop1): Remounting filesystem read-only [ 997.454214][T23087] EXT4-fs warning (device loop1): ext4_xattr_ibody_set:2277: inode #18: comm syz.1.7482: dec ref error=-5 [ 997.670667][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.681374][T23104] Cannot find add_set index 0 as target [ 998.159253][T23118] IPVS: set_ctl: invalid protocol: 233 172.30.1.1:20001 [ 998.694764][T23130] loop0: detected capacity change from 0 to 2048 [ 998.750245][T23131] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 998.870842][T23130] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 998.921088][T23130] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 998.986707][T23130] Remounting filesystem read-only [ 998.992711][T23130] NILFS (loop0): error -5 truncating bmap (ino=16) [ 999.059241][T23122] loop4: detected capacity change from 0 to 32768 [ 999.073570][T23122] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 999.140561][ T5777] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 999.151989][ T5777] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 999.167039][ T5774] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 999.209015][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.245294][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.291113][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.324600][ T5777] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 999.346628][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=16 [ 999.354774][ T5777] NILFS (loop0): discard dirty block: blocknr=23, size=1024 [ 999.404960][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.431894][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.441165][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.501993][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 999.517777][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.537658][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 999.550583][ T5777] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 999.559752][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1000.985636][T23158] loop1: detected capacity change from 0 to 32768 [ 1001.316182][T23167] loop4: detected capacity change from 0 to 32768 [ 1001.356828][T23167] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 1001.356828][T23167] [ 1001.371087][T23167] ialloc: diAlloc returned -5! [ 1001.604714][T23189] loop3: detected capacity change from 0 to 128 [ 1001.677778][T23189] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 1001.686219][T23189] FAT-fs (loop3): Filesystem has been set read-only [ 1002.137090][T23201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7538'. [ 1002.159289][T23201] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1002.184668][T23198] loop0: detected capacity change from 0 to 4096 [ 1002.247621][T23198] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1002.371390][T23207] netlink: 'syz.4.7539': attribute type 1 has an invalid length. [ 1002.478652][T23198] ntfs3: loop0: failed to convert "c46c" to cp862 [ 1002.601639][T23210] loop3: detected capacity change from 0 to 1024 [ 1002.624930][T23213] loop4: detected capacity change from 0 to 256 [ 1002.685819][T23210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.790541][T23213] FAT-fs (loop4): Directory bread(block 64) failed [ 1002.797220][T23213] FAT-fs (loop4): Directory bread(block 65) failed [ 1002.848883][T23213] FAT-fs (loop4): Directory bread(block 66) failed [ 1002.871420][T23213] FAT-fs (loop4): Directory bread(block 67) failed [ 1002.900168][T23213] FAT-fs (loop4): Directory bread(block 68) failed [ 1002.919586][T23210] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 1002.937806][T23213] FAT-fs (loop4): Directory bread(block 69) failed [ 1002.977502][T23213] FAT-fs (loop4): Directory bread(block 70) failed [ 1003.017134][T23213] FAT-fs (loop4): Directory bread(block 71) failed [ 1003.091184][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.120695][T23213] FAT-fs (loop4): Directory bread(block 72) failed [ 1003.125545][T23221] loop0: detected capacity change from 0 to 4096 [ 1003.127632][T23213] FAT-fs (loop4): Directory bread(block 73) failed [ 1003.205635][T23221] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1003.343233][T23226] loop3: detected capacity change from 0 to 256 [ 1003.388605][T23221] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1003.560511][T23221] ntfs3: loop0: failed to convert "c46c" to macinuit [ 1004.089111][T23232] loop1: detected capacity change from 0 to 8192 [ 1004.170967][T23232] loop1: p1 < > p2 p4 < p5 > [ 1004.176026][T23232] loop1: partition table partially beyond EOD, truncated [ 1004.221557][T23232] loop1: p1 start 524299 is beyond EOD, truncated [ 1004.228169][T23232] loop1: p2 size 16128 extends beyond EOD, truncated [ 1004.271223][T23232] loop1: p5 size 16128 extends beyond EOD, truncated [ 1004.328259][ T5862] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1004.552883][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 1004.571735][ T5862] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 1004.600743][T23254] netlink: 'syz.0.7562': attribute type 21 has an invalid length. [ 1004.616865][ T5862] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.646282][ T5862] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1004.670131][ T5862] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1004.685274][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.715437][ T5862] usb 2-1: Product: syz [ 1004.732481][ T5862] usb 2-1: Manufacturer: syz [ 1004.748178][ T5862] usb 2-1: SerialNumber: syz [ 1004.968372][T23262] loop4: detected capacity change from 0 to 1764 [ 1005.111339][ T5862] usb 2-1: USB disconnect, device number 37 [ 1005.180128][T23260] loop3: detected capacity change from 0 to 4096 [ 1005.216736][T23260] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1005.342929][T23260] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1005.387744][T23260] ntfs3: loop3: mft corrupted [ 1005.392967][T23260] ntfs3: loop3: Failed to load $Extend (-22). [ 1005.413595][T23260] ntfs3: loop3: Failed to initialize $Extend. [ 1005.496057][T23260] ntfs3: loop3: ino=1b, "file0" failed to parse mft record [ 1005.512916][T23260] ntfs3: loop3: ino=1b, "file0" attr_set_size [ 1006.019851][T23278] loop0: detected capacity change from 0 to 1024 [ 1006.427044][T23292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7577'. [ 1006.497157][T23292] ip6tnl2: entered allmulticast mode [ 1006.740074][T23300] xt_ecn: cannot match TCP bits for non-tcp packets [ 1006.806587][T23304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7585'. [ 1006.827430][T23304] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7585'. [ 1006.853223][T23305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7586'. [ 1006.886315][T23305] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7586'. [ 1006.939443][T23305] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1007.131122][T23312] program syz.1.7591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1007.162319][T23312] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1007.687956][T23326] loop3: detected capacity change from 0 to 4096 [ 1007.706245][T23326] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1007.799271][T23326] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1008.897997][T23365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7625'. [ 1009.376269][T23381] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7633'. [ 1009.549190][T23386] loop3: detected capacity change from 0 to 8 [ 1009.588606][T23386] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1009.631864][ T5774] udevd[5774]: incorrect cramfs checksum on /dev/loop3 [ 1009.644036][T23386] cramfs: Error -3 while decompressing! [ 1009.651403][T23386] cramfs: ffffffff973f82f8(16)->ffff888053633000(4096) [ 1009.673558][T23386] cramfs: Error -3 while decompressing! [ 1009.679822][T23386] cramfs: ffffffff973f82f8(16)->ffff888053633000(4096) [ 1009.697263][ T5774] udevd[5774]: incorrect cramfs checksum on /dev/loop3 [ 1009.719263][ T28] audit: type=1800 audit(973079809.615:159): pid=23386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7627" name="file0" dev="loop3" ino=244 res=0 errno=0 [ 1009.962561][T23394] loop1: detected capacity change from 0 to 512 [ 1010.018084][T23394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.154175][T23394] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.7631: invalid size [ 1010.317753][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.603211][T23417] overlayfs: missing 'lowerdir' [ 1011.276102][T23436] netlink: 'syz.1.7651': attribute type 15 has an invalid length. [ 1011.496627][T23419] loop3: detected capacity change from 0 to 32768 [ 1011.533160][T23419] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.7642 (23419) [ 1011.594078][T23419] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1011.627964][T23419] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1011.647766][T23419] BTRFS info (device loop3): turning on flush-on-commit [ 1011.673017][T23419] BTRFS info (device loop3): enabling disk space caching [ 1011.709907][T23419] BTRFS info (device loop3): disabling tree log [ 1011.741396][T23419] BTRFS info (device loop3): enabling ssd optimizations [ 1011.755182][T23419] BTRFS info (device loop3): force clearing of disk cache [ 1011.766867][T23419] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1011.823741][T23419] BTRFS info (device loop3): use zstd compression, level 3 [ 1011.840857][T23419] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1011.853464][T23419] BTRFS info (device loop3): disk space caching is enabled [ 1012.060335][T23419] BTRFS info (device loop3): rebuilding free space tree [ 1012.117912][T23419] BTRFS info (device loop3): disabling free space tree [ 1012.153877][T23419] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1012.203283][T23419] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1012.273683][T23419] BTRFS info (device loop3): checking UUID tree [ 1012.474745][T23471] loop0: detected capacity change from 0 to 4096 [ 1012.510038][T23419] BTRFS info (device loop3: state M): setting datasum, datacow enabled [ 1012.543000][T23419] BTRFS info (device loop3: state M): force clearing of disk cache [ 1012.575774][T23477] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1012.583988][T23419] BTRFS info (device loop3: state M): use zstd compression, level 3 [ 1012.643595][T23419] BTRFS info (device loop3: state M): setting nodatacow, compression disabled [ 1012.671191][T23471] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1012.717598][T23471] Remounting filesystem read-only [ 1012.884088][ T5772] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1013.403252][T23486] loop1: detected capacity change from 0 to 4096 [ 1013.589613][T23486] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 1014.809838][T23521] loop0: detected capacity change from 0 to 764 [ 1014.829233][T23521] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1014.879940][ T5894] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1015.076624][T23509] loop1: detected capacity change from 0 to 32768 [ 1015.093605][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 1015.120966][ T5894] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1015.173911][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.209109][T23509] XFS (loop1): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 1015.227434][ T5894] usb 4-1: Product: syz [ 1015.242976][ T5894] usb 4-1: Manufacturer: syz [ 1015.253011][ T5894] usb 4-1: SerialNumber: syz [ 1015.290932][T23509] XFS (loop1): null uuid in log - IRIX style log [ 1015.325276][T23509] XFS (loop1): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x41. [ 1015.381503][T23509] XFS (loop1): failed to locate log tail [ 1015.435850][T23509] XFS (loop1): log mount/recovery failed: error -5 [ 1015.510780][T23509] XFS (loop1): log mount failed [ 1015.772192][ T5894] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1015.810956][ T5894] mxuport: probe of 4-1:254.0 failed with error -5 [ 1015.893458][ T5894] usb 4-1: USB disconnect, device number 51 [ 1016.143184][T23552] C: renamed from team_slave_0 (while UP) [ 1016.172326][T23552] netlink: 'syz.1.7696': attribute type 3 has an invalid length. [ 1016.192580][T23552] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7696'. [ 1016.239135][T23552] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1017.279897][T23576] loop4: detected capacity change from 0 to 4096 [ 1017.326987][T23576] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 1017.370149][T23584] loop3: detected capacity change from 0 to 16 [ 1017.382075][T23576] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1017.418253][T23584] erofs: (device loop3): mounted with root inode @ nid 36. [ 1017.456220][T23576] ntfs: (device loop4): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 1017.502656][T23584] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1017.521184][T23576] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1017.530345][T23576] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1017.563533][T23584] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1017.584571][T23576] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1017.640059][T23576] ntfs: volume version 3.1. [ 1017.652959][T23561] loop1: detected capacity change from 0 to 32768 [ 1017.655428][T23584] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1017.685876][T23576] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1017.725376][T23576] ntfs: (device loop4): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 1017.765654][T23584] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 1017.789179][T23576] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 1017.816491][T23561] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 1017.816491][T23561] [ 1017.840750][T23576] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1017.846598][T23584] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1017.970414][T23584] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 1018.006388][T23584] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1018.048587][T23584] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1018.076318][T23584] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1018.091411][T23588] loop0: detected capacity change from 0 to 164 [ 1018.148103][T23588] Unsupported NM flag settings (240) [ 1018.817203][T23603] loop3: detected capacity change from 0 to 256 [ 1018.969213][T23603] FAT-fs (loop3): Directory bread(block 64) failed [ 1019.002566][T23603] FAT-fs (loop3): Directory bread(block 65) failed [ 1019.028228][T23603] FAT-fs (loop3): Directory bread(block 66) failed [ 1019.053990][T23603] FAT-fs (loop3): Directory bread(block 67) failed [ 1019.081527][T23603] FAT-fs (loop3): Directory bread(block 68) failed [ 1019.088153][T23603] FAT-fs (loop3): Directory bread(block 69) failed [ 1019.141446][T23603] FAT-fs (loop3): Directory bread(block 70) failed [ 1019.163413][T23603] FAT-fs (loop3): Directory bread(block 71) failed [ 1019.198208][T23603] FAT-fs (loop3): Directory bread(block 72) failed [ 1019.221565][T23603] FAT-fs (loop3): Directory bread(block 73) failed [ 1019.341471][T23614] loop0: detected capacity change from 0 to 1024 [ 1019.445715][ T1192] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1019.504163][T23614] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1019.550629][T23614] syz.0.7725: attempt to access beyond end of device [ 1019.550629][T23614] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1019.612461][T23614] Buffer I/O error on dev loop0, logical block 458752, async page read [ 1019.626671][T23614] syz.0.7725: attempt to access beyond end of device [ 1019.626671][T23614] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1019.665477][T23614] Buffer I/O error on dev loop0, logical block 458752, async page read [ 1019.680187][ T1192] usb 5-1: Using ep0 maxpacket: 32 [ 1019.694320][ T1192] usb 5-1: config 1 has an invalid interface number: 251 but max is 0 [ 1019.729894][ T1192] usb 5-1: config 1 has no interface number 0 [ 1019.747863][ T1192] usb 5-1: config 1 interface 251 has no altsetting 0 [ 1019.770399][ T1192] usb 5-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=1b.55 [ 1019.807766][ T1192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.829607][ T1192] usb 5-1: Product: syz [ 1019.834409][ T1192] usb 5-1: Manufacturer: syz [ 1019.856278][ T1192] usb 5-1: SerialNumber: syz [ 1020.692215][ T1192] aqc111: probe of 5-1:1.251 failed with error -22 [ 1020.704453][ T1192] usb 5-1: USB disconnect, device number 5 [ 1020.862566][T23646] loop1: detected capacity change from 0 to 2048 [ 1020.900860][T23646] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27485, location=27485 [ 1020.949119][T23646] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1021.128095][T23654] loop4: detected capacity change from 0 to 2048 [ 1021.252860][T23654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.287507][T23654] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.7745: bg 0: block 345: padding at end of block bitmap is not set [ 1021.307696][T23654] EXT4-fs (loop4): Remounting filesystem read-only [ 1021.323923][T23654] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.4.7745: cleanup dec ref error -117 [ 1021.340614][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1021.349466][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1021.434928][T22040] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.603485][T23658] loop0: detected capacity change from 0 to 4096 [ 1021.645264][T23658] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1021.695217][T23658] ntfs3: loop0: It is recommened to use chkdsk. [ 1021.851300][T23658] ntfs3: loop0: Failed to initialize $Secure::$SII (-22). [ 1021.859908][T23658] ntfs3: loop0: Failed to initialize $Secure (-22). [ 1022.820250][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 1022.820271][ T28] audit: type=1326 audit(973079821.878:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23700 comm="syz.4.7767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd47799aeb9 code=0x0 [ 1023.638665][T23723] loop1: detected capacity change from 0 to 512 [ 1023.665652][T23723] EXT4-fs: Ignoring removed orlov option [ 1023.672451][T23693] loop3: detected capacity change from 0 to 32768 [ 1023.736208][T23723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1023.778938][T23723] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1023.832262][T23723] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.7778: bg 0: block 248: padding at end of block bitmap is not set [ 1023.849734][T23726] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7779'. [ 1023.894218][T23723] Quota error (device loop1): write_blk: dquota write failed [ 1023.911026][T23726] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 1023.919951][T23723] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1023.950520][T23723] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.7778: Failed to acquire dquot type 1 [ 1023.990723][T23726] 0ªX¹¦D: entered allmulticast mode [ 1023.996332][T23726] veth0_macvtap: entered allmulticast mode [ 1024.008720][T23723] EXT4-fs (loop1): 1 truncate cleaned up [ 1024.049883][T23723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1024.102506][T23726] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1024.144875][T23723] EXT4-fs: Ignoring removed orlov option [ 1024.168667][T23723] EXT4-fs: can't change dax mount option while remounting [ 1024.329570][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.651087][ T1192] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1024.903430][ T1192] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1024.933328][ T5781] Bluetooth: Unexpected continuation frame (len 52) [ 1024.944608][ T1192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.991383][ T1192] usb 5-1: Product: syz [ 1025.024860][T23730] loop0: detected capacity change from 0 to 32768 [ 1025.045006][ T1192] usb 5-1: Manufacturer: syz [ 1025.078660][ T1192] usb 5-1: SerialNumber: syz [ 1025.111044][ T1192] usb 5-1: config 0 descriptor?? [ 1025.125040][ T1192] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1025.145959][T23730] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1025.286466][T23730] XFS (loop0): Ending clean mount [ 1025.338027][T23730] XFS (loop0): Quotacheck needed: Please wait. [ 1025.498916][T23730] XFS (loop0): Quotacheck: Done. [ 1025.623588][ T1192] sonixb 5-1:0.0: Error writing register 01: -71 [ 1025.632260][ T1192] sonixb: probe of 5-1:0.0 failed with error -71 [ 1025.656342][ T1192] usb 5-1: USB disconnect, device number 6 [ 1025.786726][ T5777] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1025.918079][T23768] netlink: 'syz.3.7795': attribute type 2 has an invalid length. [ 1026.003308][T23770] netlink: 124 bytes leftover after parsing attributes in process `syz.3.7797'. [ 1026.016526][T23770] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7797'. [ 1026.149407][T23774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7798'. [ 1026.383469][T23780] netlink: 'syz.3.7802': attribute type 26 has an invalid length. [ 1026.405722][T23782] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 1026.475219][T23782] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 1026.677955][T23790] ieee802154 phy0 wpan0: encryption failed: -22 [ 1027.355257][T23804] loop1: detected capacity change from 0 to 64 [ 1027.461789][T23804] Trying to free block not in datazone [ 1027.678212][T23812] loop3: detected capacity change from 0 to 22 [ 1027.688628][T23812] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1027.728849][T23812] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1027.791689][ T28] audit: type=1326 audit(973079826.527:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23814 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcd9aeb9 code=0x7ffc0000 [ 1027.846369][ T28] audit: type=1326 audit(973079826.527:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23814 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcd9aeb9 code=0x7ffc0000 [ 1027.885107][ T28] audit: type=1326 audit(973079826.545:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23814 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fc1dcd9aeb9 code=0x7ffc0000 [ 1027.927754][ T5862] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1027.967936][ T28] audit: type=1326 audit(973079826.545:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23814 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcd9aeb9 code=0x7ffc0000 [ 1028.083657][ T28] audit: type=1326 audit(973079826.555:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23814 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcd9aeb9 code=0x7ffc0000 [ 1028.171977][ T5862] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1028.218380][ T5862] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.276789][ T5862] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1028.296549][ T5862] usb 5-1: config 1 has no interface number 1 [ 1028.304841][ T5862] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1028.329156][ T5862] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1028.348053][ T5862] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1028.365012][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.378583][ T5862] usb 5-1: Product: syz [ 1028.385647][ T5862] usb 5-1: Manufacturer: syz [ 1028.391931][ T5862] usb 5-1: SerialNumber: syz [ 1028.640548][ T5862] usb 5-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1028.667090][ T5862] usb 5-1: MIDIStreaming interface descriptor not found [ 1028.778826][ T5862] usb 5-1: USB disconnect, device number 7 [ 1029.002921][T23836] loop0: detected capacity change from 0 to 256 [ 1029.413861][ T28] audit: type=1400 audit(973079828.042:167): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=23841 comm="syz.3.7833" [ 1029.871434][T23860] libceph: resolve '0.' (ret=-3): failed [ 1030.358640][T23872] loop0: detected capacity change from 0 to 128 [ 1030.369153][T23878] loop4: detected capacity change from 0 to 256 [ 1031.764624][T23917] loop4: detected capacity change from 0 to 256 [ 1031.854795][T23917] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1031.888636][T23917] FAT-fs (loop4): Filesystem has been set read-only [ 1032.962603][T23952] loop0: detected capacity change from 0 to 256 [ 1032.991060][T23952] exfat: Deprecated parameter 'utf8' [ 1032.996823][T23952] exfat: Deprecated parameter 'namecase' [ 1033.112362][T23952] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1033.490917][T23965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7895'. [ 1033.837797][T23976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7899'. [ 1033.862414][T23976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7899'. [ 1033.875470][T23976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7899'. [ 1033.888423][T23976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7899'. [ 1033.899731][ T5844] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1033.912642][T23976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7899'. [ 1033.966348][T23976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7899'. [ 1033.988120][T23976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7899'. [ 1034.013703][T23976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7899'. [ 1034.033279][T23976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7899'. [ 1034.110635][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1034.157183][ T5844] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1034.187243][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.197511][ T5844] usb 4-1: Product: syz [ 1034.220921][ T5844] usb 4-1: Manufacturer: syz [ 1034.226670][ T5844] usb 4-1: SerialNumber: syz [ 1034.263058][ T5844] usb 4-1: config 0 descriptor?? [ 1034.302767][ T5844] usbtouchscreen: probe of 4-1:0.0 failed with error -12 [ 1034.566372][ T5844] usb 4-1: USB disconnect, device number 52 [ 1035.085861][ T1200] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1035.174499][T23986] loop1: detected capacity change from 0 to 32768 [ 1035.230033][T23986] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1035.333465][ T1200] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1035.363027][ T1200] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1035.400712][ T1200] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.451051][ T1200] usb 5-1: config 220 has no interface number 2 [ 1035.468929][ T1200] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1035.512695][ T1200] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1035.531282][ T1200] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1035.577464][ T1200] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1035.605263][ T1200] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1035.629328][ T1200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.650911][ T1200] usb 5-1: Product: syz [ 1035.661719][ T1200] usb 5-1: Manufacturer: syz [ 1035.674259][T23986] XFS (loop1): Ending clean mount [ 1035.683318][ T1200] usb 5-1: SerialNumber: syz [ 1035.706877][T23986] XFS (loop1): Quotacheck needed: Please wait. [ 1035.858423][T23986] XFS (loop1): Quotacheck: Done. [ 1035.952611][ T5775] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1035.995405][ T1200] usb 5-1: selecting invalid altsetting 0 [ 1036.053096][T24018] loop3: detected capacity change from 0 to 4096 [ 1036.090920][ T1200] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1036.120544][ T1200] usb 5-1: No valid video chain found. [ 1036.173190][T24018] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1036.193982][ T1200] usb 5-1: selecting invalid altsetting 0 [ 1036.220070][ T1200] usbtest: probe of 5-1:220.1 failed with error -22 [ 1036.265333][ T1200] usb 5-1: USB disconnect, device number 8 [ 1036.484211][T24018] ntfs3: loop3: ino=1e, "file1" ntfs_sync_inode failed, -22. [ 1036.544416][T24018] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1036.739811][ T2946] ntfs3: loop3: ino=1e, ntfs3_write_inode failed, -22. [ 1036.764571][T18372] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1036.982036][T18372] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1037.004214][T18372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.065058][T18372] usb 2-1: config 0 descriptor?? [ 1037.080038][T24016] loop0: detected capacity change from 0 to 32768 [ 1037.156635][T24016] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1037.326440][T24016] XFS (loop0): Ending clean mount [ 1037.503735][ T5777] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1037.546586][T18372] [drm:udl_init] *ERROR* Selecting channel failed [ 1037.667682][T24044] loop3: detected capacity change from 0 to 1024 [ 1037.748057][T18372] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 1037.765564][T18372] [drm] Initialized udl on minor 2 [ 1037.787391][T24044] hfsplus: can't free extent [ 1037.827364][T18372] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1037.914032][T18372] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1037.950713][ T5894] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1037.994400][ T5894] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1038.026908][T18372] usb 2-1: USB disconnect, device number 38 [ 1038.089346][ T5894] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1038.584625][T24059] loop3: detected capacity change from 0 to 256 [ 1038.698590][ T28] audit: type=1400 audit(973079836.722:168): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24060 comm="syz.4.7933" [ 1039.309294][T24075] loop4: detected capacity change from 0 to 1024 [ 1039.493890][T24075] hfsplus: can't free extent [ 1039.799966][ T5894] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1039.995179][ T5894] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1040.005109][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.017948][ T5894] usb 1-1: config 0 descriptor?? [ 1040.471844][ T5894] [drm:udl_init] *ERROR* Selecting channel failed [ 1040.541397][ T5894] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 1040.558707][ T5894] [drm] Initialized udl on minor 2 [ 1040.577398][ T5894] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1040.611253][ T28] audit: type=1400 audit(973079838.509:169): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24087 comm="syz.1.7944" [ 1040.644769][ T5894] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1040.655642][ T5819] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1040.676706][ T5894] usb 1-1: USB disconnect, device number 44 [ 1040.685583][ T5819] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1042.148342][T24104] loop3: detected capacity change from 0 to 32768 [ 1042.238256][T24104] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1042.342510][T24104] XFS (loop3): Ending clean mount [ 1042.364386][T24104] XFS (loop3): Quotacheck needed: Please wait. [ 1042.561033][T24104] XFS (loop3): Quotacheck: Done. [ 1042.898600][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1043.231502][ T5862] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1043.436640][ T5862] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1043.448137][ T5862] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.462064][ T5862] usb 2-1: config 220 has no interface number 2 [ 1043.476390][ T5862] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1043.499488][ T5862] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1043.528582][ T5862] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1043.552491][ T5862] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1043.577633][ T5862] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1043.589053][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.598403][ T5862] usb 2-1: Product: syz [ 1043.602892][ T5862] usb 2-1: Manufacturer: syz [ 1043.616525][ T5862] usb 2-1: SerialNumber: syz [ 1043.874090][ T5862] usb 2-1: selecting invalid altsetting 0 [ 1043.907692][ T5862] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1043.914602][ T5862] usb 2-1: No valid video chain found. [ 1043.939996][ T5862] usb 2-1: selecting invalid altsetting 0 [ 1043.946395][ T5862] usbtest: probe of 2-1:220.1 failed with error -22 [ 1043.972227][T24184] program syz.0.7990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1043.990867][ T5862] usb 2-1: USB disconnect, device number 39 [ 1043.997210][T24184] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1044.704633][T24199] loop1: detected capacity change from 0 to 1024 [ 1044.948917][T24207] netlink: 'syz.4.7996': attribute type 30 has an invalid length. [ 1044.967962][T24209] loop3: detected capacity change from 0 to 64 [ 1045.214468][T24213] loop0: detected capacity change from 0 to 512 [ 1045.314842][T24213] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.7998: inode has both inline data and extents flags [ 1045.404934][T24213] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.7998: couldn't read orphan inode 15 (err -117) [ 1045.443256][T24213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.507726][T24223] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1045.549105][T24225] loop4: detected capacity change from 0 to 1024 [ 1045.553528][T24223] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1045.588259][T24225] EXT4-fs: Ignoring removed oldalloc option [ 1045.615551][T24225] EXT4-fs: Ignoring removed orlov option [ 1045.622118][T24225] EXT4-fs: Ignoring removed oldalloc option [ 1045.659860][T24225] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1045.695081][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.840638][T24225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.019393][T24225] EXT4-fs error (device loop4): ext4_xattr_set_entry:1670: inode #13: comm syz.4.8004: corrupted xattr entries [ 1046.096974][T24225] EXT4-fs (loop4): Remounting filesystem read-only [ 1046.099046][T24237] loop3: detected capacity change from 0 to 2048 [ 1046.126630][T24225] EXT4-fs warning (device loop4): ext4_xattr_ibody_set:2277: inode #18: comm syz.4.8004: dec ref error=-5 [ 1046.176318][T24237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.292199][T24237] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.8011: bg 0: block 345: padding at end of block bitmap is not set [ 1046.325518][T22040] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.344030][T24237] EXT4-fs (loop3): Remounting filesystem read-only [ 1046.383459][T24237] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.3.8011: cleanup dec ref error -117 [ 1046.577707][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.986713][T24257] loop4: detected capacity change from 0 to 512 [ 1047.061486][T24257] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.8021: EA inode hash validation failed [ 1047.157727][T24257] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.8021: corrupted inode contents [ 1047.191866][T24244] loop1: detected capacity change from 0 to 32768 [ 1047.207464][T24257] EXT4-fs error (device loop4): ext4_dirty_inode:6124: inode #15: comm syz.4.8021: mark_inode_dirty error [ 1047.262305][T24257] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.8021: corrupted inode contents [ 1047.279468][T24244] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1047.308045][T24257] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2998: inode #15: comm syz.4.8021: mark_inode_dirty error [ 1047.422471][T24257] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.8021: mark inode dirty (error -117) [ 1047.453377][T24244] (syz.1.8016,24244,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 1047.457800][T24257] EXT4-fs warning (device loop4): ext4_evict_inode:272: xattr delete (err -117) [ 1047.507534][T24244] (syz.1.8016,24244,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1047.549159][T24244] (syz.1.8016,24244,1):ocfs2_mknod:298 ERROR: status = -2 [ 1047.566057][T24257] EXT4-fs (loop4): 1 orphan inode deleted [ 1047.572955][T24244] (syz.1.8016,24244,1):ocfs2_mknod:502 ERROR: status = -2 [ 1047.581751][T24257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.599291][T24244] (syz.1.8016,24244,1):ocfs2_mkdir:659 ERROR: status = -2 [ 1047.866454][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 1047.874646][T22040] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.110470][T24284] loop1: detected capacity change from 0 to 32768 [ 1049.338895][T24301] loop0: detected capacity change from 0 to 2048 [ 1049.420218][T24301] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1049.506982][T24301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1049.769655][T24294] loop4: detected capacity change from 0 to 32768 [ 1049.931161][T24294] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1050.185658][T24294] XFS (loop4): Ending clean mount [ 1050.245624][T24294] XFS (loop4): Quotacheck needed: Please wait. [ 1050.398517][T24294] XFS (loop4): Quotacheck: Done. [ 1050.680749][T22040] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1050.744011][T24341] loop1: detected capacity change from 0 to 128 [ 1050.874918][T24343] loop0: detected capacity change from 0 to 2048 [ 1050.880705][T24341] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 1050.926480][T24341] FAT-fs (loop1): Filesystem has been set read-only [ 1050.934969][T24343] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1050.987535][T24345] loop3: detected capacity change from 0 to 2048 [ 1051.090848][T24346] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1051.292785][T24345] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1051.344246][T24345] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1051.434021][T24345] Remounting filesystem read-only [ 1051.440253][T24345] NILFS (loop3): error -5 truncating bmap (ino=16) [ 1051.517820][ T5772] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 1051.525224][ T5772] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 1051.541678][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1051.554142][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1051.584872][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1051.596020][ T5772] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1051.608957][ T5772] NILFS (loop3): discard dirty page: offset=0, ino=16 [ 1051.617141][ T5772] NILFS (loop3): discard dirty block: blocknr=23, size=1024 [ 1051.628276][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1051.648199][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1051.660631][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1051.679575][ T5772] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 1051.688224][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1051.700112][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1051.710835][ T5772] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 1051.722900][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1051.903997][T24358] loop3: detected capacity change from 0 to 512 [ 1051.978721][T24358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.096941][T24358] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.8071: invalid size [ 1052.274163][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.885035][T24363] loop4: detected capacity change from 0 to 32768 [ 1054.295200][T24417] loop3: detected capacity change from 0 to 2048 [ 1054.393214][T24422] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1054.525338][T24417] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1054.545323][T24417] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1054.559269][T24417] Remounting filesystem read-only [ 1054.585255][T24417] NILFS (loop3): error -5 truncating bmap (ino=16) [ 1054.733225][ T5772] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 1054.754934][ T5772] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 1054.777329][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1054.816643][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1054.834601][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1054.856726][ T5772] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1054.867624][ T5772] NILFS (loop3): discard dirty page: offset=0, ino=16 [ 1054.875010][ T5772] NILFS (loop3): discard dirty block: blocknr=23, size=1024 [ 1054.887589][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1054.898228][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1054.908557][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1054.921156][ T5772] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 1054.930433][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1054.943386][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1054.956293][ T5772] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 1054.967275][ T5772] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1055.056552][T24435] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1055.079659][T24435] overlayfs: missing 'lowerdir' [ 1055.171094][T24439] loop3: detected capacity change from 0 to 256 [ 1055.570627][T24447] loop1: detected capacity change from 0 to 8 [ 1055.685419][T24447] SQUASHFS error: xz decompression failed, data probably corrupt [ 1055.714794][T24453] loop0: detected capacity change from 0 to 2048 [ 1055.739444][T24447] SQUASHFS error: Failed to read block 0x108: -5 [ 1055.747827][T24447] SQUASHFS error: Unable to read metadata cache entry [106] [ 1055.778138][T24447] SQUASHFS error: Unable to read inode 0x11f [ 1055.834456][T24454] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1055.980241][T24453] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1056.027616][T24453] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1056.068500][T24453] Remounting filesystem read-only [ 1056.080528][T24453] NILFS (loop0): error -5 truncating bmap (ino=16) [ 1056.261284][ T5777] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 1056.293169][ T5777] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 1056.322919][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1056.371227][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1056.398901][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1056.423871][ T5777] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 1056.461417][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=16 [ 1056.500717][ T5777] NILFS (loop0): discard dirty block: blocknr=23, size=1024 [ 1056.524325][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1056.534464][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1056.552712][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1056.579400][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 1056.598148][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1056.626664][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1056.674391][ T5777] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 1056.695975][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1057.229652][T24493] IPVS: set_ctl: invalid protocol: 233 172.30.1.4:20001 [ 1057.709440][T24501] loop4: detected capacity change from 0 to 4096 [ 1057.752120][T24501] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1057.805233][T24501] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1057.823724][T24501] ntfs3: loop4: mft corrupted [ 1057.830977][T24501] ntfs3: loop4: Failed to load $Extend (-22). [ 1057.838127][T24501] ntfs3: loop4: Failed to initialize $Extend. [ 1057.936924][T24501] ntfs3: loop4: ino=1b, "file0" failed to parse mft record [ 1057.952246][T24501] ntfs3: loop4: ino=1b, "file0" attr_set_size [ 1059.038894][T24545] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1060.326180][T24588] __nla_validate_parse: 66 callbacks suppressed [ 1060.326200][T24588] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8175'. [ 1060.641691][T24600] loop4: detected capacity change from 0 to 256 [ 1061.683354][T18372] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1061.938811][T18372] usb 5-1: config 0 has an invalid interface number: 3 but max is 2 [ 1061.970429][T24632] loop1: detected capacity change from 0 to 64 [ 1061.977448][T18372] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 1061.998995][T18372] usb 5-1: config 0 has no interface number 1 [ 1062.020772][T18372] usb 5-1: config 0 has no interface number 2 [ 1062.028933][T18372] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1062.100354][T18372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.176469][T18372] usb 5-1: config 0 descriptor?? [ 1062.421271][T18372] qcserial 5-1:0.3: Qualcomm USB modem converter detected [ 1062.445444][T24642] syz.3.8198 uses old SIOCAX25GETINFO [ 1062.648441][T18372] usb 5-1: USB disconnect, device number 9 [ 1062.661123][T18372] qcserial 5-1:0.3: device disconnected [ 1062.906039][T24654] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8204'. [ 1063.102590][T24660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8207'. [ 1063.115269][T24662] netlink: 'syz.0.8208': attribute type 7 has an invalid length. [ 1063.123856][T24662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8208'. [ 1063.135190][T24662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8208'. [ 1063.136111][T24660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8207'. [ 1063.260060][T24664] loop1: detected capacity change from 0 to 256 [ 1063.349998][T24664] exfat: Deprecated parameter 'namecase' [ 1063.412030][T24664] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1063.792590][T24678] netlink: 508 bytes leftover after parsing attributes in process `syz.3.8214'. [ 1063.925797][T24681] cgroup: name respecified [ 1064.357335][T24696] ptrace attach of "./syz-executor exec"[5772] was attempted by ""[24696] [ 1064.673436][T24707] cgroup: release_agent respecified [ 1064.720910][T24710] netlink: 460 bytes leftover after parsing attributes in process `syz.0.8232'. [ 1064.880264][T24715] loop4: detected capacity change from 0 to 64 [ 1065.107587][T24720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8237'. [ 1066.378748][T24754] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8254'. [ 1066.631069][T24735] loop1: detected capacity change from 0 to 32768 [ 1066.698861][T24735] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 1066.698861][T24735] [ 1066.722543][T24735] xtLookup: xtSearch returned -5 [ 1066.729020][T24735] free_index: error reading directory table [ 1066.743625][T24735] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 1066.743625][T24735] [ 1066.775345][T24735] xtLookup: xtSearch returned -5 [ 1066.794278][T24735] free_index: error reading directory table [ 1066.808360][T24735] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 1066.808360][T24735] [ 1066.843141][T24735] xtLookup: xtSearch returned -5 [ 1066.876279][T24735] free_index: error reading directory table [ 1067.668454][T24783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8268'. [ 1067.691722][T24783] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8268'. [ 1067.730917][T24783] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1068.039524][T24791] loop3: detected capacity change from 0 to 256 [ 1068.080838][T24791] exfat: Deprecated parameter 'utf8' [ 1068.107724][T24793] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8273'. [ 1068.125361][T24791] exfat: Deprecated parameter 'namecase' [ 1068.146286][T24791] exfat: Deprecated parameter 'namecase' [ 1068.162223][T24791] exfat: Deprecated parameter 'utf8' [ 1068.237456][T24791] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1069.462048][T24828] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8289'. [ 1069.652528][T24831] netlink: 'syz.4.8290': attribute type 15 has an invalid length. [ 1069.705739][T24811] loop0: detected capacity change from 0 to 32768 [ 1070.140416][T24841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8297'. [ 1071.010728][T24861] loop1: detected capacity change from 0 to 128 [ 1071.041661][T24861] FAT-fs (loop1): Directory bread(block 414) failed [ 1071.088326][T24861] FAT-fs (loop1): Directory bread(block 415) failed [ 1071.120281][T24861] FAT-fs (loop1): Directory bread(block 416) failed [ 1071.155245][T24861] FAT-fs (loop1): Directory bread(block 417) failed [ 1071.165140][T24861] FAT-fs (loop1): Directory bread(block 418) failed [ 1071.219455][T24861] FAT-fs (loop1): Directory bread(block 419) failed [ 1071.227404][T24861] FAT-fs (loop1): Directory bread(block 420) failed [ 1071.310702][T24861] FAT-fs (loop1): Directory bread(block 421) failed [ 1071.382979][T24861] FAT-fs (loop1): Directory bread(block 414) failed [ 1071.408608][T24861] FAT-fs (loop1): Directory bread(block 415) failed [ 1071.444636][T24861] syz.1.8307: attempt to access beyond end of device [ 1071.444636][T24861] loop1: rw=3, sector=478, nr_sectors = 2 limit=128 [ 1071.488668][T24861] syz.1.8307: attempt to access beyond end of device [ 1071.488668][T24861] loop1: rw=2051, sector=480, nr_sectors = 6 limit=128 [ 1072.023357][T24889] loop1: detected capacity change from 0 to 256 [ 1072.085501][T18372] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1072.293935][T24892] loop4: detected capacity change from 0 to 4096 [ 1072.310048][T18372] usb 1-1: Using ep0 maxpacket: 16 [ 1072.324244][T24892] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1072.337500][T18372] usb 1-1: config 0 has an invalid interface number: 223 but max is 0 [ 1072.433425][T18372] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.456559][T24892] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1072.491539][T18372] usb 1-1: config 0 has no interface number 0 [ 1072.502516][T24892] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1072.510132][T18372] usb 1-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1072.546088][T18372] usb 1-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1072.565170][T24892] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1072.565330][T18372] usb 1-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1072.606947][T24892] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1072.661482][T18372] usb 1-1: config 0 interface 223 has no altsetting 0 [ 1072.683727][T18372] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1072.701037][T18372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.752001][T24892] ntfs: volume version 3.1. [ 1072.754181][T18372] usb 1-1: Product: syz [ 1072.775797][T18372] usb 1-1: Manufacturer: syz [ 1072.786627][T18372] usb 1-1: SerialNumber: syz [ 1072.810373][T18372] usb 1-1: config 0 descriptor?? [ 1072.834599][T24892] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 1072.868704][T24901] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8326'. [ 1072.890989][T24892] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1072.949651][T24892] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1073.118291][T24892] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 1073.180018][T24892] ntfs: (device loop4): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 1073.402618][ T1192] usb 1-1: USB disconnect, device number 45 [ 1073.471398][T24907] loop1: detected capacity change from 0 to 4096 [ 1073.495028][T24907] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1073.546965][T24909] loop3: detected capacity change from 0 to 4096 [ 1073.578120][T24909] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1073.681643][T24909] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1073.741818][T24907] ntfs3: loop1: failed to convert "c46c" to cp862 [ 1073.859021][T24909] ntfs3: loop3: failed to convert "c46c" to macinuit [ 1074.469397][T24926] xt_ecn: cannot match TCP bits for non-tcp packets [ 1074.626508][T24931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8341'. [ 1074.648076][T24931] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8341'. [ 1074.779571][T24936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8345'. [ 1074.791783][T24936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8345'. [ 1075.528654][ T1192] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1075.559759][ T5862] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1075.731112][ T1192] usb 5-1: Using ep0 maxpacket: 16 [ 1075.741137][ T1192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 1075.753706][ T1192] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 1075.767162][ T1192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.779315][ T5862] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1075.791538][ T5862] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1075.804017][ T1192] usb 5-1: config 0 descriptor?? [ 1075.825256][ T5862] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.837207][ T5862] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1075.853302][ T5862] usb 4-1: config 1 has no interface number 0 [ 1075.860989][ T5862] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1075.873125][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.903551][ T5862] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1076.032314][ T1192] usb 5-1: string descriptor 0 read error: -71 [ 1076.057630][ T1192] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input47 [ 1076.086984][ T5127] bcm5974 5-1:0.0: could not read from device [ 1076.120873][ T5862] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 1076.137046][ T5127] bcm5974 5-1:0.0: could not read from device [ 1076.147059][ T1192] usb 5-1: USB disconnect, device number 10 [ 1076.165174][ T5862] snd_usb_pod 4-1:1.1: invalid control EP [ 1076.177085][ T5127] bcm5974 5-1:0.0: could not read from device [ 1076.186941][ T5862] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 1076.199715][ T5862] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1076.218046][ T5862] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 1076.336084][ T5819] usb 4-1: USB disconnect, device number 53 [ 1076.676088][T24961] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8354'. [ 1076.973099][T24971] loop0: detected capacity change from 0 to 256 [ 1077.992903][T24970] loop4: detected capacity change from 0 to 32768 [ 1078.179642][T24999] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8375'. [ 1079.411131][T25029] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8378'. [ 1079.515285][ T1192] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1079.729984][ T1192] usb 1-1: Using ep0 maxpacket: 16 [ 1079.767735][ T1192] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1079.804030][ T1192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.860354][ T1192] usb 1-1: Product: syz [ 1079.860691][T25038] netlink: 'syz.1.8395': attribute type 21 has an invalid length. [ 1079.866715][ T1192] usb 1-1: Manufacturer: syz [ 1079.866734][ T1192] usb 1-1: SerialNumber: syz [ 1079.904591][ T1192] usb 1-1: config 0 descriptor?? [ 1079.947960][T25021] loop3: detected capacity change from 0 to 32768 [ 1080.191561][ T1192] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 1080.216803][ T1192] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1080.412060][ T1200] usb 1-1: USB disconnect, device number 46 [ 1081.055231][T25058] netlink: 666 bytes leftover after parsing attributes in process `syz.3.8404'. [ 1081.273949][T25064] netlink: 'syz.3.8408': attribute type 21 has an invalid length. [ 1081.295334][T25047] loop1: detected capacity change from 0 to 32768 [ 1081.985469][ T28] audit: type=1326 audit(973079877.214:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25077 comm="syz.0.8415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe000b9aeb9 code=0x7ffc0000 [ 1082.074265][ T28] audit: type=1326 audit(973079877.214:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25077 comm="syz.0.8415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe000b9aeb9 code=0x7ffc0000 [ 1082.210028][ T28] audit: type=1326 audit(973079877.252:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25077 comm="syz.0.8415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe000b9aeb9 code=0x7ffc0000 [ 1082.242757][ T28] audit: type=1326 audit(973079877.252:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25077 comm="syz.0.8415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe000b9aeb9 code=0x7ffc0000 [ 1082.276713][ T28] audit: type=1326 audit(973079877.252:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25077 comm="syz.0.8415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe000b9aeb9 code=0x7ffc0000 [ 1082.700227][T25095] loop4: detected capacity change from 0 to 2048 [ 1082.775478][T25095] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1082.840737][ T28] audit: type=1800 audit(973079878.028:175): pid=25095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8423" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 1083.608978][T25092] loop3: detected capacity change from 0 to 32768 [ 1084.992429][T25116] loop1: detected capacity change from 0 to 32768 [ 1085.019365][T25116] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.8432 (25116) [ 1085.049335][T25116] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1085.122522][T25116] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1085.138567][T25116] BTRFS info (device loop1): turning on flush-on-commit [ 1085.160367][T25116] BTRFS info (device loop1): enabling disk space caching [ 1085.171546][T25116] BTRFS info (device loop1): disabling tree log [ 1085.215417][T25116] BTRFS info (device loop1): enabling ssd optimizations [ 1085.231933][T25116] BTRFS info (device loop1): force clearing of disk cache [ 1085.288439][T25116] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1085.320312][T25116] BTRFS info (device loop1): use zstd compression, level 3 [ 1085.344080][T25116] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1085.381359][T25116] BTRFS info (device loop1): disk space caching is enabled [ 1085.572731][T25116] BTRFS info (device loop1): rebuilding free space tree [ 1085.652723][T25116] BTRFS info (device loop1): disabling free space tree [ 1085.661025][T25116] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1085.716835][T25116] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1085.760823][T25116] BTRFS info (device loop1): checking UUID tree [ 1085.912572][T25116] BTRFS info (device loop1: state M): setting datasum, datacow enabled [ 1085.943003][T25116] BTRFS info (device loop1: state M): force clearing of disk cache [ 1085.983143][T25116] BTRFS info (device loop1: state M): use zstd compression, level 3 [ 1085.993288][T25116] BTRFS info (device loop1: state M): setting nodatacow, compression disabled [ 1086.244746][T25178] loop3: detected capacity change from 0 to 164 [ 1086.294801][T25178] Unsupported NM flag settings (240) [ 1086.386422][ T5775] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1087.020952][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1087.040841][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1088.091682][T25198] loop1: detected capacity change from 0 to 32768 [ 1088.103109][T25210] loop3: detected capacity change from 0 to 256 [ 1088.122378][T25210] exfat: Deprecated parameter 'utf8' [ 1088.146028][T25210] exfat: Deprecated parameter 'namecase' [ 1088.206143][T25198] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1088.251108][T25217] loop0: detected capacity change from 0 to 16 [ 1088.269808][T25217] erofs: (device loop0): mounted with root inode @ nid 36. [ 1088.278383][T25210] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d) [ 1088.344631][T25217] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1088.404521][T25198] XFS (loop1): Ending clean mount [ 1088.430928][T25217] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1088.453219][T25198] XFS (loop1): Quotacheck needed: Please wait. [ 1088.486074][T25217] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1088.525307][T25217] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 1088.591586][T25217] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1088.661170][T25217] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 1088.741667][T25217] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1088.764097][T25222] syz.3.8470 uses obsolete (PF_INET,SOCK_PACKET) [ 1088.773564][T25217] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1088.784489][T25217] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1088.798620][T25198] XFS (loop1): Quotacheck: Done. [ 1088.816882][ T28] audit: type=1800 audit(973079883.594:176): pid=25217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8468" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1088.992088][T25208] loop4: detected capacity change from 0 to 32768 [ 1089.032754][ T5775] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1089.055227][T25208] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.8466 (25208) [ 1089.185948][T25208] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1089.212584][T25208] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1089.224752][T19309] Bluetooth: hci4: command 0x0406 tx timeout [ 1089.241415][T25208] BTRFS info (device loop4): turning on flush-on-commit [ 1089.251308][T25228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.271583][T25228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.282004][T25208] BTRFS info (device loop4): enabling disk space caching [ 1089.289689][T25208] BTRFS info (device loop4): disabling tree log [ 1089.296009][T25208] BTRFS info (device loop4): enabling ssd optimizations [ 1089.303188][T25208] BTRFS info (device loop4): force clearing of disk cache [ 1089.354485][T25208] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1089.378396][T25228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.420762][T25208] BTRFS info (device loop4): use zstd compression, level 3 [ 1089.448873][T25228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.489756][T25208] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1089.498287][T25208] BTRFS info (device loop4): disk space caching is enabled [ 1089.611757][T25230] loop1: detected capacity change from 0 to 1024 [ 1089.687661][T25230] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1089.859722][T25208] BTRFS info (device loop4): rebuilding free space tree [ 1089.971589][T25208] BTRFS info (device loop4): disabling free space tree [ 1089.979245][T25208] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1090.026863][T25208] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1090.086007][T25251] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8477'. [ 1090.139156][T25208] BTRFS info (device loop4): checking UUID tree [ 1090.307263][T25208] BTRFS info (device loop4: state M): setting datasum, datacow enabled [ 1090.327343][T25208] BTRFS info (device loop4: state M): force clearing of disk cache [ 1090.342935][T25208] BTRFS info (device loop4: state M): use zstd compression, level 3 [ 1090.362634][T25208] BTRFS info (device loop4: state M): setting nodatacow, compression disabled [ 1090.529094][T22040] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1090.607145][T25260] loop1: detected capacity change from 0 to 16 [ 1090.642955][T25260] erofs: (device loop1): mounted with root inode @ nid 36. [ 1090.681966][T25260] syz.1.8480: attempt to access beyond end of device [ 1090.681966][T25260] loop1: rw=0, sector=34359736320, nr_sectors = 8 limit=16 [ 1090.935170][T25264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8482'. [ 1090.965094][T25264] netlink: 'syz.4.8482': attribute type 1 has an invalid length. [ 1091.158007][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8486'. [ 1091.232416][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8486'. [ 1091.284202][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8486'. [ 1091.311624][T25274] loop4: detected capacity change from 0 to 256 [ 1091.350983][T25274] exfat: Deprecated parameter 'utf8' [ 1091.373410][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8486'. [ 1091.380351][T25274] exfat: Deprecated parameter 'utf8' [ 1091.405411][T25274] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 1091.436911][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8486'. [ 1091.510842][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8486'. [ 1091.585694][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8486'. [ 1091.669726][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8486'. [ 1091.769768][T25270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1092.153187][T25268] loop3: detected capacity change from 0 to 32768 [ 1092.311073][T25268] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1092.460002][T25268] XFS (loop3): Ending clean mount [ 1092.504706][T25268] XFS (loop3): Quotacheck needed: Please wait. [ 1092.664483][T25268] XFS (loop3): Quotacheck: Done. [ 1092.871856][ T5772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1092.900403][T25278] loop1: detected capacity change from 0 to 32768 [ 1092.918694][T25278] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.8491 (25278) [ 1092.993893][T25278] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1093.037658][T25278] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1093.081640][T25278] BTRFS info (device loop1): turning on flush-on-commit [ 1093.089801][T25278] BTRFS info (device loop1): enabling disk space caching [ 1093.118269][T25278] BTRFS info (device loop1): disabling tree log [ 1093.146374][T25278] BTRFS info (device loop1): enabling ssd optimizations [ 1093.154219][T25278] BTRFS info (device loop1): force clearing of disk cache [ 1093.167148][T25278] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1093.177297][T25278] BTRFS info (device loop1): use zstd compression, level 3 [ 1093.216834][T25304] loop0: detected capacity change from 0 to 256 [ 1093.231456][T25278] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1093.252767][T25278] BTRFS info (device loop1): disk space caching is enabled [ 1093.305571][T25304] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 1093.425345][T25278] BTRFS info (device loop1): rebuilding free space tree [ 1093.453652][T25299] loop4: detected capacity change from 0 to 32768 [ 1093.536314][T25278] BTRFS info (device loop1): disabling free space tree [ 1093.563982][T25299] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 1093.563982][T25299] [ 1093.581610][T25278] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1093.618036][T25278] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1093.662132][T25278] BTRFS info (device loop1): checking UUID tree [ 1093.795383][T25278] BTRFS info (device loop1: state M): setting datasum, datacow enabled [ 1093.851911][T25278] BTRFS info (device loop1: state M): force clearing of disk cache [ 1093.860821][T25278] BTRFS info (device loop1: state M): use zstd compression, level 3 [ 1093.904258][T25278] BTRFS info (device loop1: state M): setting nodatacow, compression disabled [ 1094.041551][ T5775] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1094.179837][T25324] loop0: detected capacity change from 0 to 4096 [ 1094.316467][T25324] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 1094.397637][T25324] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1094.494671][T25324] ntfs: (device loop0): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 1094.600678][T25324] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1094.646705][T25324] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1094.768564][T25324] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1094.886276][T25324] ntfs: volume version 3.1. [ 1094.912884][T25324] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1094.978265][T25324] ntfs: (device loop0): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 1095.031742][T25324] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 1095.104527][T25324] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1095.169132][T25337] netlink: 'syz.1.8505': attribute type 1 has an invalid length. [ 1095.686680][T25344] loop3: detected capacity change from 0 to 4096 [ 1095.759930][T25344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.894031][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 1096.186162][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.933590][T25341] loop4: detected capacity change from 0 to 32768 [ 1097.029569][T25351] loop1: detected capacity change from 0 to 32768 [ 1097.045867][T25351] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.8512 (25351) [ 1097.067735][T25341] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1097.129155][T25351] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1097.152856][T25351] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1097.186239][T25351] BTRFS info (device loop1): turning on flush-on-commit [ 1097.197129][T25351] BTRFS info (device loop1): enabling disk space caching [ 1097.205524][T25351] BTRFS info (device loop1): disabling tree log [ 1097.213680][T25351] BTRFS info (device loop1): enabling ssd optimizations [ 1097.226714][T25351] BTRFS info (device loop1): force clearing of disk cache [ 1097.236120][T25351] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1097.246472][T25351] BTRFS info (device loop1): use zstd compression, level 3 [ 1097.257472][T25351] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1097.279149][T25351] BTRFS info (device loop1): disk space caching is enabled [ 1097.330873][T25341] XFS (loop4): Ending clean mount [ 1097.340604][T25341] XFS (loop4): Quotacheck needed: Please wait. [ 1097.496016][T25341] XFS (loop4): Quotacheck: Done. [ 1097.590062][T25351] BTRFS info (device loop1): rebuilding free space tree [ 1097.694401][T25351] BTRFS info (device loop1): disabling free space tree [ 1097.706531][T25351] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1097.741690][T22040] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1097.774773][T25351] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1097.905400][T25351] BTRFS info (device loop1): checking UUID tree [ 1097.948550][ T29] INFO: task syz-executor:5773 blocked for more than 143 seconds. [ 1097.986835][ T29] Not tainted syzkaller #0 [ 1098.011871][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1098.031542][ T29] task:syz-executor state:D stack:21584 pid:5773 ppid:1 flags:0x00004004 [ 1098.071921][ T29] Call Trace: [ 1098.079424][ T29] [ 1098.083880][ T29] __schedule+0x1553/0x45a0 [ 1098.115239][ T29] ? asan.module_dtor+0x20/0x20 [ 1098.149048][ T29] ? mark_lock+0x94/0x320 [ 1098.165508][ T29] ? lock_chain_count+0x20/0x20 [ 1098.189677][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1098.207612][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1098.237531][ T29] schedule+0xbd/0x170 [ 1098.255303][ T29] io_schedule+0x80/0xd0 [ 1098.273585][ T29] folio_wait_bit_common+0x714/0xfa0 [ 1098.296982][ T29] ? folio_wait_bit+0x30/0x30 [ 1098.317022][ T29] ? filemap_get_entry+0x379/0x3f0 [ 1098.334473][ T29] ? _compound_head+0x120/0x120 [ 1098.349336][T25405] loop0: detected capacity change from 0 to 2048 [ 1098.362844][ T29] ? find_lock_entries+0xc3e/0xfe0 [ 1098.378771][ T29] __filemap_get_folio+0xbc/0xbb0 [ 1098.387169][ T29] truncate_inode_pages_range+0x46b/0xfb0 [ 1098.400510][ T29] ? mapping_evict_folio+0x510/0x510 [ 1098.412518][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1098.421264][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1098.431225][T25405] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27485, location=27485 [ 1098.455379][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1098.471341][ T29] evict+0x4dd/0x8d0 [ 1098.486084][ T29] ? proc_nr_inodes+0x230/0x230 [ 1098.495705][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1098.502067][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1098.510255][ T29] evict_inodes+0x606/0x6a0 [ 1098.533011][T25405] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1098.556443][ T29] ? clear_inode+0x150/0x150 [ 1098.569924][ T29] generic_shutdown_super+0x97/0x2b0 [ 1098.597386][ T29] kill_block_super+0x44/0x90 [ 1098.631412][ T29] deactivate_locked_super+0x97/0x100 [ 1098.671643][ T29] cleanup_mnt+0x43b/0x4d0 [ 1098.700414][ T29] task_work_run+0x1d4/0x260 [ 1098.723810][ T29] ? task_work_cancel+0x220/0x220 [ 1098.740559][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 1098.750610][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 1098.757801][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 1098.776983][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 1098.786977][ T29] do_syscall_64+0x61/0xa0 [ 1098.803851][ T29] ? clear_bhb_loop+0x40/0x90 [ 1098.809190][ T29] ? clear_bhb_loop+0x40/0x90 [ 1098.828398][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1098.840443][ T29] RIP: 0033:0x7f1d2d19c117 [ 1098.848464][T25407] loop4: detected capacity change from 0 to 4096 [ 1098.860680][ T29] RSP: 002b:00007fffece25948 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1098.881030][ T29] RAX: 0000000000000000 RBX: 00007f1d2d20471f RCX: 00007f1d2d19c117 [ 1098.896451][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffece25a00 [ 1098.900145][T25407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.909969][ T29] RBP: 00007fffece25a00 R08: 00007fffece26a00 R09: 00000000ffffffff [ 1098.941992][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffece26a90 [ 1098.952465][ T29] R13: 00007f1d2d20471f R14: 00000000000e0446 R15: 00007fffece26ad0 [ 1098.964979][ T29] [ 1098.994841][ T29] [ 1098.994841][ T29] Showing all locks held in the system: [ 1099.004355][ T29] 1 lock held by pool_workqueue_/3: [ 1099.013775][ T29] #0: ffffffff8d1379b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 1099.067700][ T29] 2 locks held by kworker/u4:0/11: [ 1099.087195][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1099.117782][ T29] #1: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 1099.198760][ T29] 1 lock held by khungtaskd/29: [ 1099.206244][ T29] #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1099.270898][ T29] 2 locks held by kworker/u4:10/1124: [ 1099.277969][ T29] #0: ffff8880b8f3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1099.314975][ T29] #1: ffffc9000484fd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1099.343177][ T29] 2 locks held by kworker/0:2/1200: [ 1099.356960][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1099.388993][ T29] #1: ffffc9000492fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1099.421173][ T29] 2 locks held by getty/5534: [ 1099.426657][ T29] #0: ffff88802d4ae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1099.439223][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1099.451672][ T29] 1 lock held by syz-executor/5775: [ 1099.458736][ T29] #0: ffffffff8d1379b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 1099.474328][ T29] 1 lock held by syz-executor/5773: [ 1099.481623][ T29] #0: ffff88805e1fc0e0 (&type->s_umount_key#88){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 1099.494465][ T29] 2 locks held by udevadm/25409: [ 1099.521620][ T29] [ 1099.524915][ T29] ============================================= [ 1099.524915][ T29] [ 1099.538256][T22040] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1099.563059][ T29] NMI backtrace for cpu 1 [ 1099.569749][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1099.579221][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1099.590231][ T29] Call Trace: [ 1099.593946][ T29] [ 1099.598545][ T29] dump_stack_lvl+0x18c/0x250 [ 1099.604529][ T29] ? show_regs_print_info+0x20/0x20 [ 1099.612702][ T29] ? load_image+0x400/0x400 [ 1099.617823][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1099.624202][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1099.633682][ T29] ? _printk+0xde/0x130 [ 1099.638189][ T29] ? load_image+0x400/0x400 [ 1099.646517][ T29] ? load_image+0x400/0x400 [ 1099.655110][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1099.665273][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1099.671756][ T29] watchdog+0xf3d/0xf80 [ 1099.677425][ T29] ? watchdog+0x1e1/0xf80 [ 1099.682511][ T29] kthread+0x2fa/0x390 [ 1099.688745][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1099.694413][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1099.699855][ T29] ret_from_fork+0x48/0x80 [ 1099.706095][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1099.712358][ T29] ret_from_fork_asm+0x11/0x20 [ 1099.718570][ T29] [ 1099.725405][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1099.731698][ C0] NMI backtrace for cpu 0 [ 1099.731712][ C0] CPU: 0 PID: 25409 Comm: udevadm Not tainted syzkaller #0 [ 1099.731728][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1099.731738][ C0] RIP: 0010:vfs_readlink+0x14f/0x350 [ 1099.731765][ C0] Code: 65 30 4c 89 e0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 e7 e8 04 03 ed ff 4d 8b 24 24 49 83 c4 08 4c 89 e0 48 c1 e8 03 80 3c 18 00 <74> 08 4c 89 e7 e8 e7 02 ed ff 4c 89 ff 4c 89 ee 48 8d 54 24 40 41 [ 1099.731779][ C0] RSP: 0018:ffffc9000bcc7d60 EFLAGS: 00000246 [ 1099.731794][ C0] RAX: 1ffffffff15b5581 RBX: dffffc0000000000 RCX: ffff88807dfc5a00 [ 1099.731807][ C0] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 1099.731817][ C0] RBP: ffffc9000bcc7e10 R08: ffffc9000bcc7daf R09: 0000000000000000 [ 1099.731829][ C0] R10: ffffc9000bcc7da0 R11: fffff52001798fb6 R12: ffffffff8adaac08 [ 1099.731842][ C0] R13: ffff88805dd65950 R14: 1ffff92001798fb0 R15: ffff8880793268d0 [ 1099.731863][ C0] FS: 00007fcfe6fb9880(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1099.731879][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1099.731896][ C0] CR2: 00007fcfe712ba90 CR3: 0000000055fef000 CR4: 00000000003506f0 [ 1099.731912][ C0] Call Trace: [ 1099.731918][ C0] [ 1099.731927][ C0] ? readlink_copy+0xb0/0xb0 [ 1099.731944][ C0] ? kmem_cache_free+0xf8/0x270 [ 1099.731970][ C0] ? touch_atime+0xee/0x570 [ 1099.731988][ C0] ? do_readlinkat+0x235/0x490 [ 1099.732010][ C0] do_readlinkat+0x255/0x490 [ 1099.732032][ C0] ? cp_new_stat+0x540/0x540 [ 1099.732052][ C0] ? lock_chain_count+0x20/0x20 [ 1099.732304][ C0] __x64_sys_readlink+0x7f/0x90 [ 1099.732333][ C0] do_syscall_64+0x55/0xa0 [ 1099.732357][ C0] ? clear_bhb_loop+0x40/0x90 [ 1099.732376][ C0] ? clear_bhb_loop+0x40/0x90 [ 1099.732396][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1099.732414][ C0] RIP: 0033:0x7fcfe71153a7 [ 1099.732429][ C0] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 1099.732444][ C0] RSP: 002b:00007ffd52ba9c58 EFLAGS: 00000206 ORIG_RAX: 0000000000000059 [ 1099.732462][ C0] RAX: ffffffffffffffda RBX: 00007ffd52baa4a0 RCX: 00007fcfe71153a7 [ 1099.732475][ C0] RDX: 0000000000000400 RSI: 00007ffd52baa060 RDI: 00007ffd52ba9c60 [ 1099.732486][ C0] RBP: 0000000000000200 R08: 0000559697461ae2 R09: 0000000000000000 [ 1099.732496][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd52ba9c60 [ 1099.732507][ C0] R13: 00007ffd52baa060 R14: 00005596b91bdd60 R15: 00005596b91cde60 [ 1099.732528][ C0] [ 1099.861346][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1099.861401][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1099.861457][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1099.861498][ T29] Call Trace: [ 1099.861522][ T29] [ 1099.861545][ T29] dump_stack_lvl+0x18c/0x250 [ 1099.861654][ T29] ? show_regs_print_info+0x20/0x20 [ 1099.861754][ T29] ? load_image+0x400/0x400 [ 1099.861865][ T29] panic+0x2dc/0x730 [ 1099.861927][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1099.862012][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1099.862089][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1099.862180][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1099.862300][ T29] watchdog+0xf7c/0xf80 [ 1099.862391][ T29] ? watchdog+0x1e1/0xf80 [ 1099.862495][ T29] kthread+0x2fa/0x390 [ 1099.862565][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1099.862665][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1099.862718][ T29] ret_from_fork+0x48/0x80 [ 1099.862797][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1099.862857][ T29] ret_from_fork_asm+0x11/0x20 [ 1099.862978][ T29] [ 1099.867830][ T29] Kernel Offset: disabled [ 1100.258721][ T29] Rebooting in 86400 seconds..