last executing test programs: 1m37.352720304s ago: executing program 2 (id=364): r0 = socket(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xffe0, 0xf}, {0xb, 0x1}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xfc, 0x200, 0xa}}, {0x4}}, {{0x1c, 0x1, {0xb5, 0x4, 0x18, 0xd, 0x2, 0xa, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) 1m37.185894096s ago: executing program 2 (id=368): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r0, 0xee01, 0x0) 1m36.227369881s ago: executing program 2 (id=373): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m35.59103428s ago: executing program 2 (id=378): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x55d, &(0x7f0000001180)="$eJzs3d9rU1ccAPDvTRt/1c0KItseRsGHOZypbffDwR7c49hkwvbuQnst0tRIk4rthOnDfNnLkMEYE2R/wN73KPsH9lcImyBDyvawl46b3tTYNP0ZbTSfD1w9596bnHNy7vf03JyEBNC3RrJ/ChGvR8T3ScSRlmODkR8cWTlv6fGNyWxLYnn5i7+TSPJ9zfOT/P+hPPNaRPz+bcSpQnu5tYXFmXKlks7l+dH67NXR2sLi6cuz5el0Or0yPjFx9r2J8Q8/eL9rbX37wr8/fX7/k7PfnVj68deHR+8kcS4O58da27ELN1szIzGSvybFOLfmxLEuFNZLkr2uADsykMd5MbIx4EgM5FEPvPy+iYhloE8l4h/6VHMe0Ly379J98Avj0ccrN0Dt7R9ceW8kDjTujQ4tJU/dGWX3u8NdKD8r47e/7t7Jtuje+xAAm7p5KyLODA62j39JPv7t3JktnLO2jG2Of8vbrBLQ4n42/3lnvflPYXX+E+vMf4bWid2d2Dz+Cw+7UExH2fzvo3Xnv6uLVsMDee6VxpyvmFy6XEmzse3ViDgZxf1ZfqP1nLNLDzqOU63zv2zLym/OBfN6PBzc//Rjpsr18m7a3OrRrYg31p3/Jqv9n7T1f7HxelzYYhnH07tvdjq2efufreVfIt5at/+frGglG69Pjjauh9HmVdHun9vH/+hU/l63P+v/Qxu3fzhpXa+tbb+Mewf+Szsd2+n1vy/5spHel++7Xq7X58Yi9iWfte8ff/LYZr55ftb+kyc2Hv/ar/+IgxHx1Rbbf/vY7Y6n9kL/T22r/7efePDp1z93Kn9r/f9uI3Uy37OV8W+rFdzNawcAAAAAAAC9phARhyMplFbThUKptPL5jmNxqFCp1uqnLlXnr0xF47uyw1EsNFe6h1o+DzGWfx62mR9fk5+IiKMR8cPAwUa+NFmtTO114wEAAAAAAAAAAAAAAAAAAKBHDHX4/n/mz4G9rh3wzPnJb+hfm8Z/N37pCehJ/v5D/xL/0L/EP/Qv8Q/9S/xD/xL/0L/EP/SvTvF/7znXAwAAAAAAAAAAAAAAAAAAAAAAAAAAAF4SF86fz7blpcc3JrP81LWF+ZnqtdNTaW2mNDs/WZqszl0tTVer05W0NFmd3ez5KtXq1bHxmL8+Wk9r9dHawuLF2er8lfrFy7Pl6fRiWnwurQIAAAAAAAAAAAAAAAAAAIAXS21hcaZcqaRzEhI7Sgz2RjUkVhLNwN71E+7tuAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArf4PAAD//98qNtY=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m35.046787529s ago: executing program 2 (id=384): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94) 1m33.443240094s ago: executing program 2 (id=405): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "5e26511b"}]}}, 0x0}, 0x0) 1m32.952842651s ago: executing program 32 (id=405): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "5e26511b"}]}}, 0x0}, 0x0) 1m30.527712268s ago: executing program 3 (id=421): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="000002000a0002"], 0x48}}, 0x44800) 1m30.236487383s ago: executing program 3 (id=422): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd91b, 0x0, "8b00000000000000faffffff55d72b4200"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) 1m29.941326898s ago: executing program 3 (id=423): setuid(0xee00) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xf, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x3, 0x6, 0x5, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0x4, 0xa}}) 1m29.693348281s ago: executing program 3 (id=426): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x55d, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m29.13543378s ago: executing program 3 (id=431): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x83}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1m26.345579593s ago: executing program 3 (id=439): capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000003c0)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) 1m25.649036493s ago: executing program 33 (id=439): capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000003c0)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) 2.726712569s ago: executing program 0 (id=938): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x80740, 0x40) fchown(r0, 0xee01, 0xffffffffffffffff) 2.333736534s ago: executing program 5 (id=941): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffff06"}]}, 0x1c}}, 0x0) 2.178563357s ago: executing program 5 (id=943): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) sendto(r0, 0x0, 0x0, 0x80, &(0x7f0000001080)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80) 1.93291351s ago: executing program 5 (id=946): creat(&(0x7f00000002c0)='./file0\x00', 0x0) unshare(0x2040400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 1.813304612s ago: executing program 5 (id=948): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.467005518s ago: executing program 1 (id=950): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x40) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0xfb, 0x1, &(0x7f0000000100)={0x8, "6a6ea751434fd7f4a4331cbdbff893a5ba0300"}}) 1.423502998s ago: executing program 0 (id=951): write$bt_hci(0xffffffffffffffff, &(0x7f00000005c0)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@none, 0x6}}}, 0xb) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="18000000000000008400000005"], 0x48}], 0x1, 0x40) 1.376525079s ago: executing program 4 (id=952): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x80040e, "030023000000debd12ffe0dcfbc1a1000000002000dbefeb254b7c74c100", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.250263821s ago: executing program 1 (id=953): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) 1.181662822s ago: executing program 4 (id=954): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) rt_sigpending(0x0, 0x1000000) 1.082664083s ago: executing program 1 (id=955): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x7e1a40, 0x0) inotify_rm_watch(r0, 0x0) 962.486765ms ago: executing program 0 (id=956): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x4, 0xb}, 0x10) 953.025306ms ago: executing program 1 (id=957): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa1c406, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESDEC], 0x1, 0x2a2, &(0x7f0000001140)="$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") truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0) 931.241596ms ago: executing program 4 (id=958): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 739.561059ms ago: executing program 5 (id=959): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048810}, 0x40000) 688.20789ms ago: executing program 0 (id=960): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000001c0)={0x28, 0x10000, 0x0, r1, 0x7d0e8}) 632.58707ms ago: executing program 4 (id=961): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x800003) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x2) 520.656032ms ago: executing program 0 (id=962): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x3c, r0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 501.091442ms ago: executing program 5 (id=963): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x800, &(0x7f00000001c0)={[{@allow_utime={'allow_utime', 0x3d, 0x80000001}}, {@umask={'umask', 0x3d, 0x2}}, {@namecase}, {}, {@errors_continue}, {@discard}, {@namecase}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1536, &(0x7f0000001980)="$eJzs3AucjkX7OPDrmpl7rU08bXJYZua6eZLD2CTJIUkOSZIkSU4JSZJXEhJLSNKShOSwJLGE5LAhrfP5fEhok7RJEhLSYf6fjf15e+s99+b9v3t9P5/nY65n7mvuue9r1zP3eD6+7D68dtM6NRoTEfxb8PwfSQAQCwCDASAfAAQAUCG+QnxWf26JSf/eSdjv697USz0Ddilx/XM2rn/OxvXP2bj+ORvXP2fj+udsXP+cjevPWE62dUbhK/iVc1+/z/6/+L8W7////4Q///+HZJYd/+n6slf1AIj5R1O4/jkb1/9/VvCPHMT1z9m4/jlV7KWeAPsvwL//OUGuv9rD9c/ZuP6M5WSXev/5Ur8g8l92D47lPl+Y/3sv+M9eP2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wx9gc46y9SAJDdvtTzYowxxhhjjDHG2O/H57rUM2CMMcYYY4wxxth/HoIACQoCiIFcEAu5IQ4EAFwOeSEfROAKiIcrIT9cBQWgIBSCwpAARaAoaDBggSCEYlAconA1lIBroCSUgtJQBhyUhUS4FsrBdVAerocKcANUhBuhElSGKlAVboJqcDNUh1ugBtwKNaEW1IY6cBvUhduhHtwB9eFOaAB3QUO4GxrBPdAY7oUmcB80hfuhGTwAzaEFtIRW0Ppfyn8aesMz0Af6QhL0g/7wLAyAgTAInoPB8DwMgRdgKLwIyTAMhsNLMAJehpHwCoyC0TAGXoWx8BqMg/EwASZCCkyCyfA6TIE3YCq8CdNgOqTCDJgJb8EsmA1z4G2YC+/APJgPC2AhpMG7sAgWwxJ4D5bC+5AOy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDvsgJ2wC3bDB7AHPoS9sA/2w0eQAR//7fzc2TXOzj/zF/k9EBBQoECFCmMwBmMxFuMwDvNgHsyLeTGCEYzHeMyP+bEAFsBCWAgTMAGLYlE0aJCQsBgWwyhGsQSWwJJYEktjaXToMBETsRxeh+WxPFbAClgRK2IlrIyVsSpWxWpYDatjdayBNbAm1sTaWBtvw9uwH9bDelgf62MDbJC9PYWNsTE2wSbYFJtiM2yGzbE5tsSW2BpbYxtsg22xLbbH9tgBO2BH7IidsBN2xs7YBbtgV+yK3bAbdsfu2AN7Ys/Mp3MBPoPPYF+sKfphf+yPAzA51yB8Dp/D53EIvoAv4IuYjMNwOL6EL+HLOBJP4ygcjWNwDFYTr+E4HI8kJmIKpuBknIxTcApmTfRNnI6pOANn4kychbNxNr6Nc/EdfAfn43xciGmYhotwMS7BJbgUz2A6LsPluAJX4ipciWtwLa7B9bgB1+Mm3IRbcAtuw224A3fgLtyFH6ACwA9xH+7DZMzADDyAB/AgHsRDeAgzMRMP42E8gkfwKB7FY3gMj+MJPIkn8BSewtN4Br08f0N/wCcTPm/yQal1ySCyKKFEjIgRsSJWxIk4kUfkEXlFXhEREREv4kV+kV8UEAVEIVFIJIgEUVQUFUYYQSKMAQARFVFRQpQQJUVJUVqUFk44kSgSRTlRTpQX5UUFcYOoKG4UlURl0c5VFVVFNdHeVRe3iBqihqgpaonaoo6oI+qKuqKeqBdbX9QXDUQD0VDcLRqJfjgI7xVZlWkqhmEzMRybixbiwqVAGzES24p2or14WIzGUdhRtHGdxGOisxiHXcSfxHh8QnQTE7G7eEr0ED1FL/G06C3auj6ir5iK/UR/MR0HiIFikHhOzMJa4m2cm7u2eFEki2FiuHhJLMSXxUjxihglRosx4lUxVrwmxonxYoKYKFLEJDFZvC6miDfEVPGmmCami1QxQ8wUb4lZYraYI94Wc8U7Yp6YLxaIhSJNvCsWicViiXhPLBXvi3SxTCwXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU1sFzvETrFL7BYfiD3iQ7FX7BP7xUciQ3wsDohPxEHxqTgkPhOZ4nNxWHwhjogvxVHxlTgmvhbHxQlxUnwjTolvxWlxRpwV34lz4nvxg/hR/CS8AIlSSCmVDGSMzCVjZW4ZJy+TeWRw4e5eIePllTK/vEoWkAVlIVlYJsgisqjU0kgrSYaymCwuo/JqWUJeI0vKUrK0LCOdLCsT5bWynLxOlpfXywryBllR3igrycqyiqwqb5LV5M0SIufPUVPWkrVlHXmbTILbZT15h6wv75QN5F2yobxbNpL3yMbyXtlE3iebyvtlM/mAbC5byJaylWwtH5Rt5EOyrWwn28uHZQf5iOwoH5Wd5GOys8z+aX9CdpNPyu7yKdlD9pS95I/yJ+llH9lXQj+Q/eWzcoAcKAfFAoB8Xg6RL8ih8kWZLIfJ4fIlOUK+LEfKV+QoOVqOka/KsfI1OU6OlxPkRJkiJ8nJ8nU5Rb4hp8o35TQ5XabKGXKQHPzzSHOk/Lv5r/9G/tCfz75FbpXb5Ha5Q+6Uu+Ru+YHcI/fIvXKv3C/3ywyZIQ/IA/KgPCgPyUMyU2bKw/KwPCKPyKPyqDwmj8nj8oT8Tn4jT8lv5Wl5Rp6R38lz8pz84cI9AIVKKKmUClSMyqViVW4Vpy5TedTlKq/KpyLqChWvrlT51VWqgCqoCqnCKkEVUUWVVkZZRSpUxVRxFVVX44UfGFValVFOlVWJ6tp/Jl+VUNeokqrUL/Kz55f0V+bXWrVWbVQb1Va1Ve1Ve9VBdVAdVUfVSXVSnVVn1UV1UV1VV9VNdVPdVXfVQ/VQvVQv1Vv1Vn1UH5WkklR/9awaoAaqQeo5NVg9r4aoIWqoGqqSVbIaroarEWqEGqlGqlFqlBqjxqixaqwap8apCWqCSlEparKarKaoKWqqmqqmqWkqVaWqmWqmmqVmqTlqjpqr5qp5ap5aoBaoNJWmFqlFask5771aqtLVMrVMrVAr1Cq1Sq1Ra9Q6tU5tUBvUJrVJpautaqvarrarnWqn2q12qz1qj9qr9qr9ar/KUBnqgDqgDqqD6pA6pDJVpjqsDqsj6og6qo6qY+qYOq6Oq5PqpDqlTqnT6rQ6q86qc+qc+kH9oH5SP2Ut+wIRiEAFKogJYoLYIDaIC+KCPEGeIG+QN4gEkSA+iA/yB1cFBYKCQaGgcJAQFAmKBjowgQ3EhaJHg6uDEsE1QcmgVFA6KBO4oGyQGFwblAuuC8oH1wcVghuCisGNQaWgclAlqBrcFFQLbg6qB7cENYJbg5pBraB2UCe4Lagb3B7UC+4I6gd3Bg2Cu4KGwd1Bo+CeoHFwb9AkuC9oGtwfNAseCJoHLYKWQaug9e86vvenCz7k+ui+Okn30/31s3qAHqgH6ef0YP28HqJf0EP1izpZD9PD9Ut6hH5Zj9Sv6FF6tB6jX9Vj9Wt6nB6vJ+iJOkVP0pP163qKfkNP1W/qaXq6TtUz9Ez9lp6lZ+s5+m09V7+j5+n5eoFeqNP0u3qRXqyX6Pf0Uv2+TtfL9HK9Qq/Uq/RqvUav1ev0er1Bb9Sb9Ga9RW/V2/R2vUPv1Lv0bv2B3qM/1Hv1Pr1ff6Qz9Mf6gP5EH9Sf6kP6M52pP9eH9Rf6iP5SH9Vf6WP6a31cn9An9Tf6lP5Wn9Zn9Fn9nT6nYy9U02ct7rM+3o0yysSYGBNrYk2ciTN5TB6T1+Q1ERMx8Sbe5Df5TQFTwBQyhUyCSTBFTVGThQyZYqaYiZqoKWFKmJKmpCltShtnnEk0iaacKWfKm/KmgqlgKpqKppKpZKqYKuYmc5O52dxsbjG3mFvNraaWqWXqmDqmrqlr6pl6pr6pbxqYBqahaWgamUamsWlsmpgmpqlpapqZZqa5aW5ampamtWlt2pg2pq1pa9qb9qaD6WA6Gu9/+vnbzZ1NF9PFdDVdTTfTzXQ33U0P08P0Mr1Mb9Pb9DF9TJJJMv1NfzPADDCDzCAz2Aw2Q8wQM9QMNckm2Qw3w80IM8KMNCPNKDPajMlaqJrXzDgz3kwwE02KSTGTzWQzxUwxU81UM81MM6km1cw0M80sM8vMMXPMXDPXzDPzzAKzwKSZNLPILDJLzBKz1Cw16SbdLDfLzUqz0qw2q81as9asN+vNRthoNpvNZqvZarab7Wan2Wl2m91mj9lj9pq9Zr/ZbzJMhjlgDpiD5qA5ZA6ZTJNpDpvD5og5Yo6ao+aYOWaOm+PmpDlpTplT5rQ5bc6as+acKXjh89KbWJvbxtnLbB57uc1r89m/jAvZwjbBFrFFrbYFbMFfxMZaW9KWsqVtGetsWZtor/1VXMlWtlVsVXuTrWZvttV/Fde1t9t69g5b395p69jbfhE3sHfZhvZ+2wgRwLawTWwr29Teb5vZB2xz28K2tK1sB/uI7WgftZ3sY7azffxX8SK72K616+x6u8HutfvsWfudPWK/tOfs97aP7WsH2+ftEPuCHWpftMl22K/iMfZVO9a+ZsfZ8XaCnfireJqdblPtDDvTvmVn2dm/itPsu3auXWLn2fl2gV34c5w1pyX2PbvUvm/TbQDL7Qq70q6yq+2a7Ln6fHaT3Wy32D32Q7vd7rA77S67O3shbPfZ/fYjm2E/toftF/ag/dQeskdtpv385zjr+o7ar+wx+7U9bk/Yk/Ybe8p+q7Kzs679G/uj/cl6C4QEJElRQDGUi2IpN8XRZZSHLqe8lI8idAXF05WUn66iAlSQClFhSqAiVJQ0GbJEFFIxKk5Rupqyp1eaypCjspRI11I5uo7K0/VUgW6ginQjVaLKVIWq0k1UjW6m6nQL1aBbqSbVotpUh26junQ71aM7qD7dSQ3oLmpId1Mjuoca073UhO6jpnQ/NaMHqDm1oJbUilrTg9SGHqK21I7a08PUgR6hjvQodaLHqDM9Tl3oT9SVnqBu9CR1p6eoB/WkXvQ09aZnqA/1pSTqR/3pWRpAA2kQPUeD6XkaQi/QUHqRkmkYDaeXaAS9TCPpFRpFo2kMvUpj6TUaR+NpAk2kFJpEk+l1mkJv0FR6k6bRdEqlGTST3qJZNJvm0Ns0l96heTSfFtBCSqN3aREtpiX0Hi2l9ymdltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQTtpF+2mD2gPfUh7aR/tp48ogz6mA/QJHaRP6RB9Rpn0OR2mL+gIfUlH6Svfl76m43SCTtI3dIq+pdOUcfn5Cn1PP9CP9BN5ghBDEcpQhUEYE+YKY8PcYVx4WZgnvDzMG+YLI+EVYXx4ZZg/vCosEBYMC4WFw4SwSFg01KEJbUhhGBYLi4fR8OqwRHhNWDIsFZYOy4QuLBsmhteG5cLrwvLh9WGF8IawYnhjWCmsHN5/Z9XwprBaeHNYPbwlrBHeGtYMa4W1wzrhbWHd8PawXnhHWD+8Mywf3hU2DO8OG4X3hI3De8Mm4X1h0/D+sFn4QNg8bBG2DFuFrcMHwzbhQ2HbsF3YPnw47BA+EnYMHw07hY+FncPHf+6/a/Ff708K+4X9w2fDZ0Pv75ALogujadF3o4uii6NLou9Fl0bfj6ZHl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0U3R7dEva+TCxw64aRTLnAxLpeLdbldnLvM5XGXu7wun4u4K1y8u9Lld1e5Aq6gK+QKuwRXxBV12hlnHbnQFXPFXdRd7Uq4a1xJV8qVdmWcc2VdomvlWrvWro17yLV17Vx797B72D3iHnGPukfdY66ze9x1cX9yXd0Trpt70j3pnnI9XE/Xyz3tertJec9XPMn1d/3dADfADXKD3GA32A1xQ9xQN9Qlu2Q33A13I9wIN9KNdKPcKDfGjXFj3Vg3zo1zE9wEl+JS3GQ32U1xU9xUN9VNc9Ncqkt1M91MN8vNctVmnz/LPDfPLXALXJpLc4tc1ppxiVvqlrp0l+6Wu+VupVvpVrvVbq1b69a79W6j2+g2u81uq9vqtrvtbqfb6Xa73W6P2+P2+nznB3UZ7oA74A66g+6Q+8xlus/dYfeFO+K+dEfdV+6Y+9oddyfcSfeNO+W+dafdGXfWfefOue/dD+5H95PzLiUyKTI58npkSuSNyNTIm5FpkemR1MiMyMzIW5FZkdmROZG3I3Mj70TmReZHFkQWRtIi70YWRRZHlkTeiyyNvB9JjyyLLI+siKyMrIp4X2R76Iv54j7qr/Yl/DW+pC/lS/sy3vmyPtFf68v563x5f72v4G/wFf2NvpKv7Kv4B3xz38K39K18a/+gb+Mf8m19O9/eP+w7+Ed8R/+o7+Qf8539476L/5Pv6p/w3fyTvrt/yvfwPX0v/7Tv7Z/xfXxfn+T7+f7+WT/AD/SD/HN+sH/eD/Ev+KH+RZ/sh/nh/iU/wr/sR/pX/Cg/2o+JedWPzX5Ehok+xU/yk/3rfop/w0/1b/ppfrpP9TP8TP+Wn+Vn+zn+bT/Xv+Pn+fl+gV/o0/y7fpFf7Jf49/xS/75P98uyNxz9ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/D7/S7/G7/gd/jP/R7/T6/33/kM/zH/oD/xB/0n/pD/jOf6T/3h/0X/oj/0h/1X/lj/mt/3J/wJ/03/pT/1p/2Z/xZ/50/57/3P/gff17X/ctb4IwxxhhjOciki03xy57z2/n9fiNH/NnB/QHg8h2FMy/25oKsFeXGAuejgSKhQwQAHuvb/d7sV82aSUlJF45OlxAUnw+Q/S9BWWLgYrwM2sMj0AnaQbnfnP9A0fMc/Z3xozcAxP1ZTixcjC+O/wkAJv3G+A8+PGZRxfBs/N8Yfz5AyeIXc3LDxXgZtP95f6UdlP8r8y/Y5u/MP/enKQBt/ywnD1yML84/ER6Cx6HTL478DV9l/u1+xhhjjDHGGGP/kwaKKl2znz+zv/H5W8/nCepiTi64GP+953PGGGOMMcYYY4xdek/07PXog506tev6zzeq/0tZ/3CjGfynRubGbza8B8h+RwHAvzkgQFZD/pFXse0POVfyhV+dv+xa+Z0P4L+jlL9H4xL/xcQYY4wxxhj73V1c9P/yfXWpJsQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVAf8R/J3apr5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi71P5fAAAA//9Rl/rE") creat(&(0x7f00000000c0)='./bus\x00', 0x182) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 442.793413ms ago: executing program 1 (id=964): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000003c0)='./file0\x00', 0x8680, &(0x7f0000020b00)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES8], 0xfd, 0x2a1, &(0x7f0000000100)="$eJzs3b9u01wYx/HfcdI270tV3D8ICTEVKjGhtgwglkqod8DChChNkKpaRYIi0U6BGXEB7NwCF8DIVDEjsTExMBaWoHN8Quw0jpMoqZP0+5ESJfZ57OfYxz1+UrURgAvrwfb3j3d+2IeRSipJui8FkipSWdIVXa28OjjcO4xq1W4bKrkI+zClrDa7B7VOi22c25cX2ndlzSeXYTQq31QvOgcUz139HQTSnL863frKuWc2Ghd90JtTneq1ForOAwBQLD//B36en48XKQikNT/tp+f/yZ5Aza+GU3QeI/M5Z31i/ndVVsPY83vZrWrVe3YI6K4PcVWi9KfvgzareGSlbjBNXlXpcgn+e7YX1W7vPo+qgd5qy5tpNVtxz9V46DY1a1r7+s3ZTa/GHfOZ5UpurT+XXB9mbB82g5NW/okmy8PdYz7zxZyYxybUB1X/3f+VG8YeDHc8wrYzFee/nr1F18tZuVbJs5Rosuh2ci19xLv2sqSMikTN87ao9AcEYV6eLmqpLSru3UZO1HLHqM2cqJX2qNZozo4cNfPePDKr+qlP2k7c/wf2aK+plyvTtnEt/cjo2p+yaxm6+cRfdfXrHVsGg/YIA3inp7qnhZdHx/s7UVR7MbUv7JU4BmkcHe//boxFGjtR1BwE45LP1L6wB7mQvTfnncG3U9hPJpyj1knvM5DfzUwLe99l4vovUa+su5s1+xSm79PnkrG5tWBiixsZtcGSe/4/u4JLMVJdjczKoK3m6rxHV3PduCXd7GWPsdDnOX62Bgky2/qqJ3z+DwAAAAAAAAAAAAAAAAAAMGmG9ycHFWWtKrqPAAAAAAAAAAAAAAAAAAAAAABMulF8/6//7/DmTJtevv/3oeJ3Zc1rZhg9BJDlbwAAAP//e1SAFg==") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) 400.962184ms ago: executing program 4 (id=965): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x5, 0x114, 0x0, 0x1, [@generic="85"]}]}, 0x1c}}, 0x0) 256.902636ms ago: executing program 0 (id=966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 114.846258ms ago: executing program 4 (id=967): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000080)={[{@quota}]}, 0x1, 0x9771, &(0x7f00000014c0)="$eJzs3Qf8rnPhuPHvcRzj2CNJSCijbBnZe++99yorK2RvsiUjGaFsskKZLSUSkaYWpTLSIMX5v45zjjgu0u/3L36u63p1vvcz7uf5fp7P+/nc53l64V5/2bWWHBiYeGBEo7b/7JypL19ykptXnfSE8Z7ae68bpjlz5M3jjNhMcdDI7cEjt4cMDAwMGvk8g0bcNuSoa68bY2DMgeH/+2fjjzt0jPEHBoaOvLr4yO38IzZDNx6137DR4oEOH8agY0b8ebEJBgYGxht+YccVb7lg+Hhf9vjh47rtVS9U2vpLLLfsP61echtj5N2D/nnfi9sxR/wZuv7AwNDVB177/TF83yEve+x/s+G/c/FHLl/6mDfhd/+fa/0lllthNP/ha3HwyNvmH77GR1+DxkZ/nz95x3R3jZzCQSPnbMyXrZc3433/P2r9JZZdeeC11/HARkcuv+KwF4+bQ04cGBhy0sDAkJMHBoac8mZ71P+f3tQ3X1VVVb0pLbHkPEsO/7w/2ueBcUZ9rqXPhbsdvcu+AwMDY434njjkzBGXh1w16jvhG2rs/9QrqqqqqqqqqqrRW2LJeZaC7/8Tv973/zPv+dEJ/+vv/1VVVVVVVVX1X2uFJZacZ/h3/dG+/0/5et//rzr21NlG/LP/i88/4lEvvLkvoqqqqqqqqqpet2VXwO//073e9/9j7pty2Tf0/X/c/+ILqaqqqqqqqqrXbM15ll1q4GX/nb2RN8886n76/j/vuPuv+WaNt6qqqqqqqqqqqqqqqqqqqqqqqqqqqqrK2AuP33TLP8/5fsDAaOd7f7GR/17AoKtuu/feN22gb40GvfrfhzjozR7T/7bhzuNcMt3AwM7rvNlDqTeh/zPnqq//SPm7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7jXOP//4qO2ex6w7tYjd53pzvtPP/ufj5zioOE77L3FHnu8SUN/M3q7nv9/YIdBAwMjfSfeYWBgYNUl1lx75oGBgbNPv//OGQdeum+B4fctNOnggcEvPnTmF38ePsVrPPNsIzbD30wDk7/0HFe9+PwrDDtv8KDRBvGyppxko/O2X/+ZeUffzvTar2OMUReWXnb+Z4YNGzbsFTeObJzXePCo5x/1WkZ3Hjn2mYePfY49dtp1jt332Xe2HXbaYrtttttm57nmWmD+ueebf7655p1j2x123GbOET9fY86me/HnoW9kzsYffc4eX+Llczb6a3ti7GlxzqZ7/Tl78RmvmOb6K0fN2ZhvcM5G/b5DX3/Optth5C+a4qAhA5u/ODWDBgamOGzIwN7Dr8w19sDAFIeP3HfK4fsuPOkYAwMn/vOFDr809kvvwUEHDd9n/WXXWnJgYOKRe0z8qrG9ep2+/KVMMXLRTnHwyO0hI37NxAP/fCsOOera68YYPhevmI7xxx06xvgDA0NHXl185HbBEZtxdx+137DR4oEOH8agY0b8ebEJBgYGxht+4flZVjpt+HhHe/x/ov/R3/+v8lpg0Evvx0Ej/4zcZ4TXEsut8M/f9eI0DJ+7wSNvm3+4yehz9v+zV413unEGpnud8S67wpLzDL95tPl/aSnR+2v68x8cc8R7a/H5Rzzqhf8xCo13ytcZ7wpL4HinfL3xTvn8RruMeKr/b+Md7Vi38os/D3ojx7qB1z/WDV7j2Fc/fpu7pxn9WLfSaw/xFYfLUXM09mg7vdax7qFrHz1o+PMf9PrHupWHj33IK451YwwMTHHoqGPd8APfEUMGThx+Ze7hV44cMnDR8CvzvHhl3IHbhl+Zfatddtx6+A1HvWpeh7z420ccRg57I/M68avm9eDBr/yL4xXrf9QxffTtVGO+eudBo83rDovsdseoeR3yBud11PMf9vrz+uJnkpd39UEDg145N2MOLDMwMDDjyLk54o3MzZSvPzdv9DPJUNh/xOVtXrrpsXk2H2/U3Iw+F//qM8kR/+7cnPvS3Mz44n3TjzEw1lgvflTfba4RP0ddnXv4UIf/fNXxZuZBL72e1zieLzva8XzQy94Lg142HYNGfqQYc2Bg6PoDA0NXp9fysn2HvJG/k+j4OPHrjHeJJedZavhh5LX+PqbxXHbjHrMODAyMNeJ1DTlzxOUhV416Df9ONN5xXn+8S8J4x3m98S79wu0P/w/Gi3P9esedI9/I2pr69dfW6J9dX2ttzTzDiPsHv2rAU770FC/Me8umo+ZorNGe91+trSP/3bV128Dg15ubo97I3Ez3/+e4szXsP/rcXHjZGqf+i2Pyq/xHPf9R/+bcXDPdS8edgR1GB663av3/f+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3uN8/8fNOr8/xdvfOkZI09bOGT6E8bb7s0e75vc2/r8/yN9X3H+/+3GO2H6MQZeuu91z88+Yp+35PnZ5x+xGbrxqP1GPz84D/S1z89+3YbnHv9fOj/7/6hRa/UNnIez47+7/N3l7y5/cRPlby9/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3Gvcf7/20ZuD9pm4+fOGnki9CFHrLvfom/2eN/k3tbn/x/p+4rz/y+637pHjDHw0n2ve/7/Efs4zv9/5K1bT/dWPv//qLXa+f/rX5S/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yvj8/8PGrkduG2zeac6bvh2+PUHjt5rvjd7vG9yb9fz/49zyXQDAzuv82YPpd6EOv67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xY08///AiPP/j2rQ4r0vsBfP/3/AyJkZcf7//9u9hv8S+WMv+k9y86qTnjDeU3u/jf2XzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4riP1f73Vb/FcU+79eFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/9H8scs/h/NH7P475g/ZvHfKX/M4r9z/pjFf5f8MYv/rvljFv+P5Y9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/x/PHLP57549Z/PfJH7P475s/ZvH/RP6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zi/8n8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+n8scs/qfmj1n8P50/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv/P5I9Z/M/KH7P4fzZ/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP6fyx+z+J+fP2bxvyB/zOJ/Yf6Yxf/z+WMW/y/kj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+H8xf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfy/lD9m8b8hf8zif2P+mMX/pvwxi/+X88cs/l/JH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/l/NH7P4fy1/zOL/9fwxi/838scs/t/MH3v7+68/4fCXeWf+2Nvf/8UGfSt/zOL/7fwxi/9d+WMW/+/kj1n8784fs/jfkz9m8f9u/pjF/978MYv/9/LHLP735Y9Z/O/PH7P4fz9/zOL/QP6Yxf/B/DGL/w/yxyz+D+WPWfx/mD9m8f9R/pjF/8ej+w/+L4/rLZrF/yetf8zi/9P8MYv/z/LHLP4P549Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/H+dP2bxfyR/zOL/aP6Yxf83+WMW/9/mj1n8H8sfs/j/Ln/M4v/7/DGL/x/yxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/x/wxi//T+WMW/z/lj1n8/5w/ZvH/S/6Yxf+v+WMW/2fyxyz+z+aPWfz/lj9m8X8uf8zi//f8MYv/P/LHLP7P549Z/F/IH7P4D8sfk/i/eDH/V2fxH5Q/ZvEfI3/M4j84f8ziP2b+mMV/SP6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/Ifmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+E+eP2bxf0f+mMV/ivwxi/8788cs/lPmj1n835U/ZvGfKn/M4v/u/DGL/9T5Yxb/afLHLP7T5o9Z/N+TP2bxny5/zOL/3vwxi//0+WMW/xnyxyz+M+aPWfzflz9m8X9//pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8P5A/ZvH/YP6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjF/0P5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/cP6YxX+h/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/0vljFv9l8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXM/pPOda/3MXiv7rR/w1k8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/5H8MYv/R/PHLP475o9Z/HfKH7P475w/ZvHfJX/M4r9r/pjF/2P5/7PB/7xo8d8tf8ziv3v+mMV/j/yxt7H/oJd5j7Fn/tjb2P8V63+v/DGL/8fzxyz+e+ePWfz3yR+z+O+bP2bx/0T+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4v/J/DGL/7H5Yxb/4/LHLP7H549Z/E/IH3u7+68y4k0wxon5Y293/1EXT8ofs/ifnD9m8T8lf8zi/6n8MYv/qfljFv9P549Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/zP5Yxb/s/LHLP6fzR+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL/+fyxyz+5+ePWfwvyB+z+F+YP2bx/3z+mMX/C/ljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+X8wfs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/y/lj1n8b8gfs/jfmD9m8b8pf8zi/+X8MYv/V/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP535o9Z/L+VP2bx/3b+mMX/rvwxi/938scs/nfnj1n878kfs/h/N3/M4n9v/pjF/3v5Yxb/+/LHLP73549Z/L+fP2bxfyB/zOL/YP6Yxf8H+WMW/4fyxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+P80fs/j/LH/M4v9w/pjF/+f5Yxb/X+SPWfx/mT9m8f9V/pjF/9f5Yxb/R/LHLP6P5o9Z/H+TP2bx/23+mMX/sfwxi//v8scs/r/PH7P4/yF/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5/zB+z+D+dP2bx/1P+mMX/z/ljFv+/5I9Z/P+aP2bxfyZ/zOL/bP6Yxf9v+WMW/+fyxyz+f88fs/j/I3/M4v98/pjF/4X8MYv/sPwxif/ggfwxi/+g/DGL/xj5Yxb/wfljFv8x88cs/kPyxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/NH/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8ziP1n+mMV/8vxf0dMzjtha/N+RP2bxnyJ/zOL/zvwxi/+U+WMW/3flj1n8p8ofs/i/+434T/wfHNdbNIv/1K1/zOI/Tf6YxX/a/DGL/3vyxyz+0+WPWfzfmz9m8Z8+f8ziP0P+mMV/xvwxi//78scs/u9/uf/ib8K43qJZ/Gdq/WMW/5nzxyz+s+SPWfxnzR+z+H8gf8zi/8H8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/+H8scs/vPlj1n8588fs/gvkD9m8V8wf8zi/+H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/thL/mMODAy8jf3XzB+zrP+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/R/LHLP4fzR+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/j+WPWfx3yx+z+O+eP2bx3yN/zOK/Z/6YxX+v/DGL/8fzxyz+e+ePWfz3yR+z+O+bP2bx/0T+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4v/J/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/p/LHLP6n5o9Z/D+dP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/z+SPWfzPyh+z+H82f8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+n8sfs/ifnz9m8b8gf8zif2H+mMX/8/ljFv8v5I9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/h/MX/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8v5Q/ZvG/IX/M4n9j/pjF/6b8MYv/l/PHLP5fyR+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP7fzB+z+N+ZP2bx/1b+mMX/2/ljFv+78scs/t/JH7P4350/ZvG/J3/M4v/d/DGL/735Yxb/7+WPWfzvyx+z+N+fP2bx/37+mMX/gfwxi/+D+WMW/x/kj1n8H8ofs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4v+z/DGL/8P5Yxb/n+ePWfx/kT9m8f9l/pjF/1f5Yxb/X+ePWfwfyR+z+D+aP2bx/03+mMX/t0L/yd/APhb/x4T+bySL/+/yxyz+v88fs/j/IX/M4v94/pjF/4n8MYv/k/ljFv+n8scs/n/MH7P4P50/ZvH/U/6Yxf/P+WMW/7/kj1n8/5o/ZvF/Jn/M4v9s/pjF/2/5Yxb/5/LHLP5/zx+z+P8jf8zi/3z+mMX/hfwxi/+w/DGJ/5gD+WMW/0H5Yxb/MfLHLP6D88cs/mPmj1n8h+SPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX9o/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi//k+WMW/3fkj1n8p8gfs/i/M3/M4j9l/pjF/135Yxb/qfLHLP7vzh+z+E+dP2bxnyZ/zOI/bf6Yxf89+WMW/+nyxyz+780fs/hPnz9m8Z8hf8ziP2P+mMX/ffljFv/3549Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjF/wP5Yxb/D+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/D+UP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/D+ePWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+H8kfs/h/NH/M4r9j/pjFf6f8MYv/zvljFv9d8scs/rvmj1n8P5Y/ZvHfLX/M4r97/pjFf4/8MYv/nvljFv+98scs/h/PH7P4750/ZvHfJ3/M4r9v/pjF/xP5Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/8n88cs/sfmj1n8j8t/ZOO+4prF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8f9U/pjF/9T8MYv/p/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4v+Z/DGL/1n5Yxb/z+aPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf9z+WMW//Pzxyz+F+SPWfwvzB+z+H8+f8zi/4X8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/y/mj1n8r84fs/hfkz9m8b/2Ff5XjzNs2H9/aG/FLP7Xtf4xi//1+WMW/y/lj1n8b8gfs/jfmD9m8b8pf8zi/+X8MYv/V/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP535o9Z/L+VP2bx/3b+mMX/rvwxi/938scs/nfnj1n878kfs/h/N3/M4n9v/pjF/3v5Yxb/+/LHLP73v1H/cf5D43qLZvH/fusfs/g/kD9m8X8wf8zi/4P8MYv/Q/ljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv+f5o9Z/H+WP2bxfzh/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOL/6/wxi/8j+WMW/0fzxyz+v8kfs/j/Nn/M4v9Y/pjF/3f5Yxb/3+ePWfz/kD9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/z/mj1n8n84fs/j/KX/M4v/n/DGL/1/yxyz+f80fs/g/kz9m8X82f8zi/7f8MYv/c/ljFv+/549Z/P+RP2bxfz5/zOL/Qv6YxX9Y/pjEf8hA/pjFf1D+mMV/jPwxi//g/DGL/5j5Yxb/IfljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R+aP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvGfLH/M4j95/pjF/x1vzH/M/9i43qJZ/Kdo/WMW/3fmj1n8p8wfs/i/K3/M4j9V/pjF/935Yxb/qfPHLP7T5I9Z/KfNH7P4vyd/zOI/Xf6Yxf+9+WMW/+nzxyz+M+SPWfxnzB+z+L8vf8zi//78MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/IH/M4v/B/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/h/LHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v/h/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/61H+E/8Zg3rrZrFf5vWP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/j+SPWfw/mj9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+H8sfs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/4/nj1n8984fs/jvkz9m8d83f8zi/4n8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf+T+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/T+WPWfxPzR+z+H86f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+n8kfs/iflT9m8f9s/pjF/+z8MYv/OfljFv9z88cs/uflj1n8P5c/ZvE/P3/M4n+B1X+M17/b4n+h1f9fZPH/fP6Yxf8L+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5fzB+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/L+WPWfxvyB+z+N+YP2bxvyl/zOL/5fwxi/9X8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi/8388cs/nfmj1n8v5U/ZvH/dv6Yxf+u/DGL/3fyxyz+d+ePWfzvyR+z+H83f8zif2/+mMX/e/ljFv/78scs/vfnj1n8v58/ZvF/IH/M4v9g/pjF/wf5Yxb/h/LHLP4/zB+z+P8of8zi/+P8MYv/T/LHLP4/zR+z+P8sf8zi/3D+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMX/1/ljFv9H8scs/o/mj1n8f5M/ZvH/bf6Yxf+x/DGL/+/yxyz+v88fs/j/IX/M4v94/pjF/4n8MYv/k/ljFv+n8scs/n/MH7P4P50/ZvH/U/6Yxf/P+WMW/7/kj1n8/5o/ZvF/Jn/M4v9s/pjF/2/5Yxb/5/LHLP5/zx+z+P8jf8zi/3z+mMX/hfwxi/+w/DGJ/1gD+WMW/0H5Yxb/MfLHLP6D88cs/mPmj1n8h+SPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX9o/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi//k+WMW/3fkj1n8p8gfs/i/M3/M4j9l/pjF/135Yxb/qfLHLP7vzh+z+E+dP2bxnyZ/zOI/bf6Yxf89+WMW/+nyxyz+780fs/hPnz9m8Z8hf8ziP2P+mMX/ffljFv/3549Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjF/wP5Yxb/D+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/D+UP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/D+ePWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvHfZODA/CGL/6atf8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/j+SPWfw/mj9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+H8sfs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/4/nj1n8984fs/jvkz9m8d83f8zi/4n8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf+T+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/T+WPWfxPzR+z+H86f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+n8kfs/iflT9m8f9s/pjF/+z8MYv/OfljFv9z88cs/uflj1n8P5c/ZvE/X+2/2GveY/G/QO3/2ln8L8wfs/h/Pn/M4v+F/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv8v5o9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/l/LHLP435I9Z/G/MH7P435Q/ZvH/cv6Yxf8r+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxv93iP2zYsGH/xu4W/zss/v9mFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv9v5o9Z/O/MH7P4fyt/zOL/7fwxi/9d+WMW/+/kj1n8784fs/jfkz9m8f9u/pjF/978MYv/9/LHLP735Y9Z/O/PH7P4fz9/zOL/QP6Yxf/B/DGL/w/yxyz+D+WPWfx/mD9m8f9R/pjF/8f5Y6P8B4+8/nb1/0n+mGX9/zR/zOL/s/wxi//D+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/1/nj1n8H8kfs/g/mj9m8f9N/pjF/7f5Yxb/x/LHLP6/yx+z+P8+f8zi/4f8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/j/MX/M4v90/pjF/0/5Yxb/P+ePWfz/kj9m8f9r/pjF/5n8MYv/s/ljFv+/5Y9Z/J/LH7P4/z1/zOL/j/wxi//z+WMW/xfyxyz+w/LHJP5jD+SPWfwH5Y9Z/MfIH7P4D84fs/iPmT9m8R+SP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/ofljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+k+ePWfzfkT9m8Z8if8zi/878MYv/lPljFv935Y9Z/KfKH7P4vzt/zOI/df6YxX+a/DGL/7T5Yxb/9+SPWfynyx+z+L83f8ziP/2r/cf9r47rLZrFf4bWP2bxnzF/zOL/vvwxi//788cs/jPlj1n8Z84fs/jPkj9m8Z81f8zi/4H8MYv/B/PHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/thI/4GBt7n/3PljlvU/T/6YxX/e/DGL/4fyxyz+8+WPWfznzx+z+C+QP2bxXzB/zOL/4fwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8d8+f8ziv0P+mMX/I/ljFv+P5o9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/x/LHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjF/+P5Yxb/vfPHLP775I9Z/PfNH7P4fyJ/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//DX9T/wPz+ut2gW/yNa/5jF/8j8MYv/UfljFv+j88cs/sfkj1n8P5k/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8f9U/pjF/9T8MYv/p/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4v+Z/DGL/1n5Yxb/z+aPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf9z+WMW//Pzxyz+F+SPWfwvzB+z+H8+f8zi/4X8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/y/mj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/+X8scs/jfkj1n8b8wfs/jflD9m8f9y/pjF/yv5Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/5v5Yxb/O/PHLP7fyh+z+H87f8zif1f+mMX/O/ljFv+788cs/vfkj1n8v5s/ZvG/N3/M4v+9/DGL/335Yxb/+/PHLP7fzx+z+D+QP2bxfzB/zOL/g/wxi/9D+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/5/mj1n8f5Y/NObI7dvf/+H8Mcv6/3n+2Mv9x30b+/8if8yy/n+ZP2bx/1X+mMX/1/ljFv9H8scs/o/mj1n8f5M/ZvH/bf6Yxf+x/DGL/+/yxyz+v88fs/j/IX/M4v94/pjF/4n8MYv/k/ljFv+n8scs/n/MH7P4P50/ZvH/U/6Yxf/P+WMW/7/kj1n8/5o/ZvF/Jn/M4v9s/pjF/2/5Yxb/5/LHLP5/zx+z+P8jf8zi/3z+mMX/hfwxi/+w/DGJ/zgD+WMW/0H5Yxb/MfLHLP6D88cs/mPmj1n8h+SPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX9o/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi//k+WMW/3fkj1n8p8gfs/i/M3/M4j9l/pjF/135Yxb/qfLHLP7vzh+z+E+dP2bxnyZ/zOI/bf6Yxf89+WMW/+nyxyz+780fs/hPnz9m8Z8hf8ziP2P+mMX/ffljFv/3549Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjF/wP5Yxb/D+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/D+UP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/D+ePWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+H8kfs/h/NH/M4r9j/pjFf6f8MYv/zvljFv9d8scs/rvmj1n8P5Y/ZvHfLX/M4r97/pjFf4/8MYv/nvljFv+98scs/h/PH7P4750/ZvHfJ3/M4r9v/pjF/xP5Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/DXP5jv9EdLf6Hu/zfcBb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4v/J/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/9jb2X/xlt45zUv7Y29j/Fev/5Pwxi/8p+WMW/0/lj1n8T80fs/h/On/M4n9a/pjF//T8MYv/GfljFv8z88cs/p/JH7P4n5U/ZvH/bP6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/D+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/+fzxyz+X8gfs/hflD9m8b84f8zif0n+mMX/0vyxt53/YPa/LH/sbef/Guv/8vwxi/8V+WMW/yvzxyz+V+WPWfy/mD9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+X8ofs/jfkD9m8b8xf8zif1P+mMX/y/ljFv+v5I9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv9v5o9Z/O/MH7P4fyt/zOL/7fwxi/9d+WMW/+/kj1n8784fs/jfkz9m8f9u/pjF/978MYv/9/LHLP735Y9Z/O/PH7P4fz9/zOL/wMDAmG/WkN7KWfwfbP1jFv8f5I9Z/B/KH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4/zR/zOL/s/wxi//D+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/1/nj1n8H8kfs/g/mj9m8f9N/pjF/7f5Yxb/x/LHLP6/yx+z+P8+f8zi/4f8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/j/MX/M4v90/pjF/0/5Yxb/P+ePWfz/kj9m8f9r/pjF/5n8MYv/s/ljFv+/5Y9Z/J/LH7P4/z1/zOL/j/wxi//z+WMW/xfyxyz+w/LHJP7jDuSPWfwH5Y9Z/MfIH7P4D84fs/iPmT9m8R+SP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/ofljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+k+ePWfzfkT9m8Z8if8zi/878MYv/lPljFv935Y9Z/KfKH7P4vzt/zOI/df6YxX+a/DGL/7T5Yxb/9+SPWfynyx+z+L83f8ziP33+mMV/hvwxi/+M+WMW//flj1n8358/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv8P5I9Z/D+YP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvH/UP6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/D+cP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/tgr/fda980ez/+61/BfJn/Msv6XzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkP7yxR7/B4r9u/pjFf738MYv/+vljFv8N8scs/hvmj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh8z+A933zp/zOA/fP1vkz9m8d82f8ziv13+mMV/+/wxi/8O+WMW/4/kj1n8P5o/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/h/LH7P475Y/ZvHfPX/M4r9H/pjFf8/8MYv/XvljFv+P549Z/PfOH7P475M/ZvHfN3/M4v+J/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/k/ljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/0/lj1n8T80fs/h/On/M4n9a/pjF//T8MYv/GfljFv8z88cs/p/JH7P4n+X1H+P17rT4f9br/7pZ/M/OH7P4n5M/ZvE/N3/M4n9e/pjF/3P5Yxb/8/PHLP4X5I9Z/C/MH7P4fz5/zOL/hfwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/L+aPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/5fyxyz+N+SPWfxvzB+z+N+UP2bx/3L+mMX/K/ljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv8788cs/t/KH7P4fzt/zOJ/V/6Yxf87+WMW/7vzxyz+9+SPWfy/mz9m8b83f8zi/738MYv/ffljFv/788cs/t/PH7P4P5A/ZvF/MH/M4v+D/DGL/0P5Yxb/H+aPWfxf/yzY3iz+P279Yxb/n+SPWfx/mj9m8f9Z/pjF/+H8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/r/PHLP6P5I9Z/B/NH7P4/yZ/zOL/2/wxi/9j+WMW/9/lj1n8f58/ZvH/Q/6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/P+YP2bxfzp/zOL/p/wxi/+f88cs/n/JH3uF/8Bib1v/v+aPWdb/M/ljFv9n88cs/n/LH7P4P5c/ZvH/e/6Yxf8f+WMW/+fzxyz+L+SPWfyH5Y9J/IcO5I9Z/Aflj1n8x8gfs/gPzh+z+I+p9h/7Ne+x+A9R+792Fv+x8scs/mPnj1n8x8kfs/iPmz9m8R+aP2bxHy//l7X3S5cs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+k+ePWfzfkT9m8Z8if8zi/878MYv/lPljFv935Y9Z/KfKH7P4vzt/zOI/df6YxX+a/DGL/7T5Yxb/9+SPWfynyx+z+L83f8ziP33+mMV/hvwxi/+M+WMW//flj1n8358/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv8P5I9Z/D+YP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvH/UP6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/D+cP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+H8kf8zi/9H8MYv/jvljFv+d8scs/jvnj1n8d8kfs/jvmj9m8f9Y/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/h/PH/M4r93/pjFf5/8MYv/vvljFv9P5I9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wflTgwck/ofkj1nW/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/J/PHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/p/KH7P4n5o/ZvH/dP6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/D+TP2bxPyt/zOL/2fwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+H8uf8zif37+mMX/gvwxi/+F+WMW/8/nj1n8v5A/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zi/8X8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8f9S/pjF/4b8MYv/jfljFv+b8scs/l/OH7P4fyV/zOJ/c/6Yxf+W/DGB/25DBwaG3po/JvAf3tDb8scs/rfnj1n878gfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/h/M3/M4n9n/tho/g8e+mYP6H/ba/h/K3/Msv6/nT9m8b8rf8zi/538MYv/3fljFv978scs/t/NH7P435s/ZvH/Xv6Yxf++/DGL//35Yxb/7+ePWfwfyB+z+D+YP2bx/0H+mMX/ofwxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/j/LH7P4P5w/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvH/df6Yxf+R/DGL/6P5Yxb/3+SPWfx/mz9m8X8sf8zi/7v8MYv/7/PHLP5/yB+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/x/zxyz+T+ePWfz/lD9m8f9z/pjF/y/5Yxb/v+aPWfyfyR+z+D+bP2bx/1v+mMX/ufwxi//f88cs/v/IH7P4P58/ZvF/IX/M4j8sf0ziP95A/pjFf1D+2Oj+b/Z4/te9hv8Y+WOW9T84f8ziP2b+mMV/SP6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/Ifmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+E+eP2bxf0f+mMV/ivwxi/8788cs/lPmj1n835U/ZvGfKn/M4v/u/DGL/9T5Yxb/afLHLP7T5o9Z/N+TP2bxny7/gYGBYa+6xeL/3vwxi//0+WMW/xnyxyz+M+aPWfzf9wb9x/lPjestmsX//a1/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP4fyB+z+H8wf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOL/ofwxi/98+WMW//nzxyz+C+SPWfwXzB+z+H84f8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9I/pjF/6P5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvHfNX/M4v+x/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvH/eP6YxX/v/DGL/z75Yxb/ffPHLP6fyB+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A91+o/zr3aw+B/m9P+XWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/T+aPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/D+VP2bxP1XmP+4b3M/i/2mZ/xvN4n9a/pjF//T8MYv/GfljFv8z88cs/p/JH7P4n5U/ZvH/bP6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/D+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/+fzxyz+X8gfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bx/2L+mMX/6vwxi/81+WMW/2vzxyz+173o/y9Ph6HL4n996x+z+H8pf8zif0P+mMX/xvwxi/9N+WMW/y/nj1n8v5I/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8v5k/ZvG/M3/M4v+t/DGL/7fzxyz+d+WPWfy/kz9m8b87f8zif0/+mMX/u/ljFv9788cs/t/LH7P435c/ZvG/P3/M4v/9/DGL/wP5Yxb/B/PHLP4/yB+z+D+UP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bx/2n+mMX/Z/ljFv+H88cs/j/PH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4P5I/ZvF/NH/M4v+b/DGL/2/zxyz+j+WPWfx/lz9m8f99/pjF/w/5Yxb/x/PHLP5P5I9Z/J/MH7P4P2X3H8w3W/z/aPd/jSz+T+ePWfz/lD9m8f9z/pjF/y/5Yxb/v+aPWfyfyR+z+D+bP2bx/1v+mMX/ufwxi//f88cs/v/IH7P4P58/ZvF/IX/M4j8sf0ziP/5A/pjFf1D+mMV/jPwxi//g/DGL/5j5Yxb/IfljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R+aP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvGfLH/M4j95/pjF/x35Yxb/KfLHLP7vzB+z+E+ZP2bxf1f+mMV/qvwxi/+788cs/lPnj1n8p8kfs/hPmz9m8X9P/pjFf7r8MYv/e/PHLP7T549Z/GfIH7P4z5g/ZvF/X/6Yxf/9+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/0D+mMX/g/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW/w/lj1n858sfs/jPnz9m8V8gf8ziv2D+mMX/w/ljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/muL/F8Y9mJvaF+L/zoi/38ni/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/h/JH/M4v/R/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvH/WP6YxX+3/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4fzx/zOK/d/6YxX+f/DGL/775Yxb/T+SPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/p/MH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/Kn/M4n9q/pjF/9P5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvH/TP6Yxf+s/DGL/2fzxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOL/ufwxi//5+WMW/wvyxyz+F+aPWfw/nz9m8f9C/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi/8X88cs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/S/ljFv8b8scs/jfmj1n8b8ofs/h/OX/M4v+V/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4v/N/DGL/535Yxb/b+WPWfy/nT9m8b8rf8zi/538MYv/3fljFv978scs/t/NH7P435s/ZvH/nsV/nH9vd4v/fRb/fzOL//35Yxb/7+ePWfwfyB+z+D+YP2bx/0H+mMX/ofwxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/j/LH7P4P5w/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvH/df6Yxf+R/DGL/6P5Yxb/3+SPWfx/mz9m8X8sf8zi/7v8MYv/7/PHLP5/yB+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/x/zxyz+T+ePWfz/lD9m8f9z/pjF/y/5Yxb/v+aPWfyfyR+z+D+bP2bx/1v+mMX/ufwxi//f88cs/v/IH7P4P58/ZvF/IX/M4j8sf0ziP8FA/pjFf1D+mMV/jPwxi//g/DGL/5j5Yxb/IfljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R+aP2bxHy9/bHT///Nz9Br+4+ePWdb/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8ziP1n+mMV/8vwxi/878scs/lPkj1n835k/ZvGfMn/M4v+u/DGL/1T5Yxb/d+ePWfynzh+z+E+TP2bxnzZ/zOL/nvwxi/90+WMW//fmj1n8p88fs/jPkD9m8Z8xf8zi/778MYv/+/PHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4v+B/DGL/wfzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP4fyh+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/4fzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/xV/tPdvJ/dWBvzSz+S7T+MYv/kvljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/0fyxyz+H80fs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/4/lj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//H88cs/nvnj1n898kfs/jvmz9m8f9E/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOL/yfwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6fyxyz+p+aPWfw/nT9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/8/kj1n8z8ofs/h/Nn/M4n92/pjF/5z8MYv/ufljFv/z8scs/p/LH7P4n58/ZvG/IH/M4n9h/pjF//P5Yxb/L+SPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4fzF/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/L+UP2bxvyF/zOJ/Y/6Yxf+m/DGL/5fzxyz+X8kfs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+38wfs/jfmT9m8f9W/pjF/9v5Yxb/u/LHLP7fyR+z+N+dP2bxvyd/zOL/3fwxi/+9+WMW/+/lj1n878sfs/jfnz9m8f9+/pjF/4H8MYv/g/ljFv8f5I9Z/B/KH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4/zR/zOL/s/wxi//D+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/1/nj1n8H8kfs/g/mj9m8f9N/pjF/7f5Yxb/x/LHLP6/yx+z+P8+f8zi/4f8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/j/MX/M4v90/pjF/0/5Yxb/P+ePWfz/kj9m8f9r/pjF/5n8MYv/s/ljFv+/5Y9Z/J/LH7P4/z1/zOL/j/wxi//z+WMW/xfyxyz+w/LHJP4TDuSPWfwH5Y9Z/MfIH7P4D84fs/iPmT9m8R+SP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/ofljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+k+ePWfzfkT9m8Z8if8zi/878MYv/lPljFv935Y9Z/KfKH7P4vzt/zOI/df6YxX+a/DGL/7T5Yxb/9+SPWfynyx+z+L83f8ziP33+mMV/hvwxi/+M+WMW//flj1n8358/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv8P5I9Z/D+YP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/Od5hf/B//1xvUWz+M/b+scs/h/KH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/h/PHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8NVf5D3vCeFv+NVP5vPIv/xvljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3y394Y49+g8V/+/wxi/8O+WMW/4/kj1n8P5o/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/h/LH7P475Y/ZvHfPX/M4r9H/pjFf8/8R/TsK69a/PfKH7P4fzx/zOK/d/6YxX+f/DGL/775Yxb/T+SPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/p/MH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/Kn/M4n9q/pjF/9P5Yxb/0170f9V//l6fxf/01j9m8T8jf8zif2b+mMX/M/ljFv+z8scs/p/NH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/5/LHLP7n549Z/C/IH7P4X5g/ZvH/fP6Yxf8L+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5fzB+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/L+WPWfxvyB+z+N+YP2bxvyl/zOL/5fwxi/9X8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi/8388cs/nfmj1n8v5U/ZvH/dv6Yxf+u/DGL/3fyxyz+d+ePWfzvyR+z+H83f8zif2/+mMX/e/ljFv/78scs/vfnj1n8v58/ZvF/IH/M4v9g/pjF/wf5Yxb/h/LHLP4/zB+z+P8of8zi/+P8MYv/T/LHLP4/zR+z+P8sf8zi/3D+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMX/1/ljFv9H8scs/o/mj1n8f5M/ZvH/bf6Yxf+x/DGL/+/yxyz+v88fs/j/IX/M4v94/pjF/4n8MYv/k/ljFv+n8scs/n/MH7P4P50/ZvH/U/6Yxf/P+WMW/7/kj1n8/5o/ZvF/Jn/M4v9s/pjF/2/5Yxb/5/LHLP5/zx+z+P8jf8zi/3z+mMX/hfwxi/+w/DGJ/0QD+WMW/0H5Yxb/MfLHLP6D88cs/mPmj1n8h+SPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX9o/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8JxrlP/abNK63aBb/iVv/mMV/kvwxi/+k+WMW/8nyxyz+k+ePWfzfkT9m8Z8if8zi/878MYv/lPljFv935Y9Z/KfKH7P4vzt/zOI/df6YxX+a/DGL/7T5Yxb/9+SPWfynyx+z+L83f8ziP33+mMV/hvwxi/+M+WMW//flj1n8358/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv8P5I9Z/D+YP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvH/UP6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/D+cP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+/4+dew+ysjDvOH64LJdQKyTNW0iDoWqjsSXIJZBabFMn7YR2QuuEdjJ26sAkG6SBEIEialJREIiXYIKGSKKCRjSIEMAgiQkSGittGi/VWrVWrdeixWq9Va3SObCL7PJA5SXvq8Pz+fzB7tn1OSLf+XEOw4yhLP1b9Q9l6f85/UNZ+k/UP5Sl/yn6h7L0n6R/KEv/v9I/lKX/5/UPZek/Wf9Qlv5T9A9l6f8F/UNZ+k/VP5Sl/xf1D2Xpf6r+oSz9p+kfytJ/uv6hLP1n6B/K0v+v9Q9l6T9T/1CW/qfpH8rSf5b+oSz9T9c/lKX/GfqHsvQ/U/9Qlv5f0j+Upf+X9Q9l6f83+oey9D9L/1CW/rP1D2Xpf/Ze+vep6+f1DpWl/zn2H8rSf47+oSz95+ofytL/XP1DWfrP0z+Upf98/UNZ+i/QP5Sl/1f0D2Xpf57+oSz9z9c/lKX/BfqHsvS/UP9Qlv5f1T+Upf9C/UNZ+l+kfyhL/6/pH8rS/+v6h7L0X6R/KEv/i/UPZel/if6hLP2/oX8oS//F+oey9P+m/qEs/S/VP5Sl/xL9Q1n6f0v/UJb+39Y/lKX/ZfqHsvS/XP9Qlv5X6B/K0n+p/qEs/ZfpH8rS/0r9Q1n6X6V/KEv/7+gfytL/av1DWfov1z+Upf81+oey9L9W/1CW/t/VP5Sl/wr9Q1n6X6d/KEv/lfqHsvS/Xv9Qlv6r9A9l6b9a/1CW/t/TP5Sl/xr9Q1n6r9U/lKX/Ov1DWfrfoH8oS//v6x/K0n+9/qEs/W/UP5Sl/wb9Q1n6/0D/UJb+P9Q/lKX/TfqHsvT/kf6hLP1/rH8oS/+Ne/TvVu/P6x0qS/+b7T+Upf8m/UNZ+v9E/1CW/pv1D2Xp/7f6h7L0/6n+oSz9b9E/lKX/3+kfytL/Vv1DWfpv0T+Upf/f6x/K0v8f9A9l6f8z/UNZ+v+j/qEs/X+ufyhL/9v0D2Xpf7v+oSz979A/lKX/nfqHsvT/J/1DWfrfpX8oS/+79Q9l6f/P+oey9L9H/1CW/v+ifyhL/3v1D2Xpf5/+oSz979c/lKX/v+ofytL/Af1DWfr/m/6hLP0f1D+Upf9D+oey9H9Y/1CW/v+ufyhL/0f0D2Xp/6j+oSz9H9M/lKX/4/qHsvR/Qv9Qlv5P6h/K0v8/9A9l6b9V/1CW/k/pH8rS/2n9Q1n6/6f+oSz9t+kfytL/Gf1DWfr/l/6hLP2f1T+Upf9z+oey9P9v/UNZ+j+vfyhL/xf0D2Xp/6L+oSz9X9I/lKX/y/qHsvT/H/1DWfq/on8oS/9X9Q9l6f+a/qEs/f9X/1CW/q/rH8rS/w39Q1n6b9c/lKR/34b+oYO8f++2T/t20T90kPdv17er/qEs/bvpH8rSv7v+oSz9W/QPZenfQ/9Qlv499Q9l6d9L/1CW/r31D2Xp/y79Q1n699E/lKX/L+kfytL/EP1DWfr/sv6hLP0P1T+UpX9f/UNZ+vfTP5Sl/7v1D2Xp/x79Q1n6/4r+oSz936t/KEv/Qv9Qlv6/qn8oS//++oey9B+gfyhL//fpH8rS/9f0D2Xp/379Q1n6D9Q/lKX/YfqHsvT/gP6hLP0H6R/K0v/X9Q9l6X+4/qEs/Y/QP5Sl/5H6h7L0/w39Q1n6f1D/UJb+R+kfytL/aP1DWfp/SP9Qlv7H6B/K0v839Q9l6f9b+oey9B+sfyhL/w/rH8rSf4j+oSz9j9U/lKX/UP1DWfoP0z+Upf9w/UNZ+o/QP5Sl/0f0D2XpP1L/UJb+o/QPZen/Uf1DWfr/tv6hLP2P0z+Upf/v6B/K0n+0/qEs/Y/XP5Sl/+/qH8rS//f0Dx10/QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqjb99DM+P2Hy5NZpPvGJT3yy65O3+3cmAADgF+3NN/1v988EAAAAAAAAAAAAAAAAAAAA8qrjfyf2dv83AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIEaM/b3t3Xr0uFL3XZ/MPDnrTs+jnj506cs+4t+/ds/tn37j4On7Lr7g+3bt2+/cOCfntj2sGej0Wj+2z7W9rhX5+Pm889+4oZ7dz4qZl/x/utP6Pfjse9e2OfZWTM3DFzSsuOrLY3xn5s0ufXYro1GMaelMav5YGiXRqOY19K4qPlgWPPB/JbGtc0Hw3c86N3Y1Hzw4c9MnfzZ5hcWlP41g4PFmLGzG906LLbR4XeD3fc/+4lHN7R/3MdTtj9b90bb/g9f+YmTOn2v3V723/78xdmd97/f/4HAXu3X/p/84KD2j/t4yj1e/y/Y+KGzou/tdf+7nr84x/6hOsH7/w4b3fF+/7Cez+zl/X/0+8Cu+9XrB65q7v+4GTO2tn2p+1t5/9/89+18VMzpvP+uHd7/N9/Hz21//9+z0SjOPcBfDkhlzNizt+3r9b/D/nf7uPO73d/X6abL7vvfPO34Sc393z573XVtX2rZz/3P3dfr/9rZHX+uwP4ZM3bZ9k6v/3vuf7fX/U6v/0cFT7lr/y+P+sOPN/f/wNRbPrnb9/7//e96/uLczvsfMmPKF4dMP/2MwZOmTJjYOrH1C0OHfnTUsJGjRg4dMWTHW4KdPx7grwrk8JZe//e+/3d1uunSaLTuuu8zfvjW5v7HPb3iz9q+1Gs/9z9vn6//S73+Q+jwro0ePRqzJsyYMW3ozh/bHw7b+ePOfyzY/55//t/r/o84uu0fa/87wy6NRv9d9ydvHPFGc/+Tbj3tPW1f6rGf+5+/z/1v6vh3lcD+OcDX/892uumw/0tOXHl1c/+9Ft98R9uX3tqf/9/c/4J97X/dIK//cCDGjG1U+iLa3P9Dj994Trnr4iv+/g+qU8f+n++3fHS56+I8+4fq1LH/DVMPWVHuujjf/qE6dez/pIWT/qDcdXGB/UN16th/v+c231XuurjQ/qE6dez/+Ja7ppS7Lr5q/1CdOvY/88xZr5W7LhbaP1Snjv3/ZPFtL5W7Li6yf6hOHfs/b2vr+HLXxdfsH6pTx/6XD5zxYLnr4uv2D9WpY//bPvPQJ8pdF4vsH6pTx/4PnXPTNeWui4vtH6pTx/4//nrfoeWui0vsH6pTx/5P6d1lYbnr4hv2D9WpY/9HnLZiQLnrYrH9Q3Xq2P9fbjxyXLnr4pv2D9WpY//FpoWby10Xl9o/VKeO/R834vIvlbsultg/VKeO/Z/6Rx95qtx18S37h+rUsf9FK05sKXddfNv+oTp17P/eu19dVO66uMz+oTp17P+FQU8PLnddXG7/UJ069n/zyR+7qdx1cYX9Q3Xq2P+SV+aNLHddLLV/qE4d+79z/uCl5a6LZfYP1alj/69PH31YueviSvuH6tSx//WHLF5Q7rq4yv6hOnXsf9y25yeWuy6+Y/9QnTr2/4FFn36u3HVxtf1DderY//CJY/6k3HWx3P6hOnXsf9aAR+4rd11cY/9QnTr23+OOyReXuy6utX+oTh37/+SqW7uWuy6+a/9QnTr2P+Gke35U7rpYYf9QnTr2f8yRXz6m3HVxnf1DderY/5afDril3HWx0v6hOnXsf84P136q3HVxvf1DderY/+qxV20rd12ssn+oTh37f+zYXmeWuy5W2z9Up479f+qBjTPLXRffs3+oTh3773/lex8ud12ssX+oTh37H/Hn3U8ud12stX+oTh37P+vo1VvKXRfr7B+qU8f+L9vys6PKXRc32D9Up47937N+/Jpy18X37R+qU8f+Xz3h1EPLXRfr7R+qU8f+14y+/9Jy18WN9g/VqWP/t7847u5y18UG+4fq1LH/uedvP6HcdfED++f/2KdXG4QCGICieTMQ6hmABI/GMAgChkBhWAGBxbAA31kIngkQb4cmrTrHX3mp0/H/Zf/75+q4+R/qdPz/HVbbXB13/0Odjv+Hz+yQq+Phf6jT8f/6fJzk6nj6H+p0/L/Zna65Ol7+hzod/8+ni2Wujrf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAI8rce5AIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCjAAAA//9X3j6t") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 0s ago: executing program 1 (id=968): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x441f, &(0x7f0000008940)="$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") setuid(0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) kernel console output (not intermixed with test programs): 28.007897][ T5630] nti 0003:0757:0A00.0005: item fetching failed at offset 3/5 [ 128.024664][ T5630] nti: probe of 0003:0757:0A00.0005 failed with error -22 [ 128.068288][ T6611] loop3: detected capacity change from 0 to 512 [ 128.137024][ T6611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.173494][ T6611] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.247132][ T966] usb 2-1: USB disconnect, device number 4 [ 128.348517][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.380153][ T6607] loop0: detected capacity change from 0 to 32768 [ 128.433246][ T6617] loop2: detected capacity change from 0 to 64 [ 130.545203][ T6645] loop0: detected capacity change from 0 to 131072 [ 130.560982][ T6645] F2FS-fs (loop0): build fault injection attr: rate: 7, type: 0x7ffff [ 130.569323][ T6645] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x40004 [ 130.577614][ T6645] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name [ 130.588269][ T6645] F2FS-fs (loop0): invalid crc value [ 130.637011][ T6645] f2fs_printk: 1 callbacks suppressed [ 130.637029][ T6645] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 130.655594][ T6645] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 130.690106][ T6645] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 130.705173][ T6645] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.741877][ T6645] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 130.753510][ T6645] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 130.793611][ T6645] F2FS-fs (loop0): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 130.819545][ T6645] F2FS-fs (loop0): Failed to read root inode [ 131.257226][ T28] audit: type=1326 audit(1752516231.512:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb0698e929 code=0x0 [ 131.365542][ T6687] loop0: detected capacity change from 0 to 256 [ 131.495802][ T6687] FAT-fs (loop0): Directory bread(block 64) failed [ 131.523958][ T6687] FAT-fs (loop0): Directory bread(block 65) failed [ 131.547571][ T6687] FAT-fs (loop0): Directory bread(block 66) failed [ 131.570445][ T6687] FAT-fs (loop0): Directory bread(block 67) failed [ 131.577153][ T6687] FAT-fs (loop0): Directory bread(block 68) failed [ 131.611011][ T6687] FAT-fs (loop0): Directory bread(block 69) failed [ 131.640504][ T6687] FAT-fs (loop0): Directory bread(block 70) failed [ 131.658541][ T6687] FAT-fs (loop0): Directory bread(block 71) failed [ 131.677728][ T6687] FAT-fs (loop0): Directory bread(block 72) failed [ 131.705512][ T6687] FAT-fs (loop0): Directory bread(block 73) failed [ 131.837027][ T6697] loop3: detected capacity change from 0 to 512 [ 131.838033][ T6667] loop1: detected capacity change from 0 to 32768 [ 131.862243][ T6697] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.897803][ T6667] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.303 (6667) [ 131.938187][ T6667] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 131.964889][ T6697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.992519][ T6667] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 132.050781][ T6667] BTRFS info (device loop1): using free space tree [ 132.095134][ T6697] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 132.151278][ T6697] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.311: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 132.328345][ T6667] BTRFS info (device loop1): enabling ssd optimizations [ 132.336518][ T6667] BTRFS info (device loop1): auto enabling async discard [ 132.430543][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.642233][ T6667] BTRFS info (device loop1): balance: start -f -sprofiles=data|raid0 [ 132.702316][ T6667] BTRFS info (device loop1): balance: ended with status: 0 [ 132.901125][ T5786] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 133.183218][ T6738] loop0: detected capacity change from 0 to 2048 [ 133.221444][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.228733][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.229037][ T6734] loop3: detected capacity change from 0 to 4096 [ 133.435494][ T6734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.747193][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.414559][ T6765] loop1: detected capacity change from 0 to 2048 [ 134.448206][ T6765] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 134.493544][ T6765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.510444][ T6768] loop2: detected capacity change from 0 to 512 [ 134.543342][ T6768] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.606233][ T6768] EXT4-fs (loop2): 1 truncate cleaned up [ 134.665592][ T6768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.773285][ T6768] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.332: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 134.828822][ T6773] loop3: detected capacity change from 0 to 4096 [ 134.858673][ T6768] EXT4-fs (loop2): Remounting filesystem read-only [ 134.866355][ T6768] EXT4-fs warning (device loop2): ext4_rename_delete:3778: inode #2: comm syz.2.332: Deleting old file: nlink 4, error=-117 [ 134.914179][ T6780] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.915725][ T6773] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 134.951524][ T6773] Remounting filesystem read-only [ 135.018306][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.209655][ T6782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.337'. [ 135.431102][ T6788] loop2: detected capacity change from 0 to 512 [ 135.492559][ T6788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 135.530583][ T6788] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.826621][ T6798] process 'syz.3.343' launched '/dev/fd/3' with NULL argv: empty string added [ 135.843078][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 136.276993][ T6809] loop1: detected capacity change from 0 to 1024 [ 136.345677][ T6809] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.463436][ T6809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.626957][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.872762][ T6827] loop3: detected capacity change from 0 to 1024 [ 136.961225][ T6828] loop2: detected capacity change from 0 to 2048 [ 136.977409][ T6828] EXT4-fs: Ignoring removed bh option [ 137.074480][ T6828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.242096][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.570655][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.598508][ T6848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.363'. [ 137.785223][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.800142][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.828428][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.851826][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 137.867834][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.878110][ T8] usb 2-1: Product: syz [ 137.894080][ T8] usb 2-1: Manufacturer: syz [ 137.908992][ T8] usb 2-1: SerialNumber: syz [ 137.918986][ T8] hub 2-1:1.0: bad descriptor, ignoring hub [ 137.938904][ T8] hub: probe of 2-1:1.0 failed with error -5 [ 137.959416][ T6855] loop2: detected capacity change from 0 to 8192 [ 137.994545][ T6855] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 138.100848][ T6855] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 138.159356][ T6855] REISERFS (device loop2): using ordered data mode [ 138.188359][ T8] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 138.201073][ T6855] reiserfs: using flush barriers [ 138.260327][ T6855] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.321366][ T6855] REISERFS (device loop2): checking transaction log (loop2) [ 138.360089][ T6855] REISERFS (device loop2): Using r5 hash to sort names [ 138.384161][ T6855] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 138.407690][ T6855] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 138.509701][ T6855] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 138.541315][ T6855] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 138.572536][ T966] usb 2-1: USB disconnect, device number 5 [ 138.593374][ T966] usblp0: removed [ 138.679988][ T6861] loop3: detected capacity change from 0 to 32768 [ 138.760150][ T6861] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 138.830833][ T6861] XFS (loop3): Ending clean mount [ 139.076487][ T5784] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 139.495051][ T6889] loop2: detected capacity change from 0 to 1024 [ 139.574340][ T6889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.865370][ T5783] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 139.900097][ T5783] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 139.934309][ T5783] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 139.967771][ T5783] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 139.998888][ T5783] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 140.023402][ T5783] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 140.068515][ T5783] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 140.131372][ T5783] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 140.158109][ T5783] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 140.206679][ T5783] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 140.307553][ T6914] loop0: detected capacity change from 0 to 512 [ 140.331882][ T6914] EXT4-fs: Ignoring removed orlov option [ 140.371952][ T6914] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.460069][ T6914] EXT4-fs (loop0): 1 orphan inode deleted [ 140.480609][ T6914] EXT4-fs (loop0): 1 truncate cleaned up [ 140.490067][ T6914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.622632][ T6914] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.0.388: path /85/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 140.665136][ T6914] EXT4-fs (loop0): Remounting filesystem read-only [ 140.766842][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.929827][ T6933] mmap: syz.0.396 (6933) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.947652][ T6934] tmpfs: Cannot change global quota limit on remount [ 141.368225][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.581833][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.782244][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.908653][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.074833][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.131586][ T6945] loop1: detected capacity change from 0 to 40427 [ 142.147651][ T6945] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 142.167278][ T6945] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 142.218837][ T6945] F2FS-fs (loop1): invalid crc value [ 142.298851][ T6945] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.563450][ T6945] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 142.596359][ T48] tipc: Disabling bearer [ 142.603266][ T6945] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 142.625109][ T48] tipc: Left network mode [ 142.670305][ T5630] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.796856][ T6970] loop3: detected capacity change from 0 to 2048 [ 142.880374][ T5630] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 142.900379][ T5630] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 142.921249][ T5630] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 142.945338][ T5630] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 142.958764][ T5630] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 142.971884][ T5630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.981079][ T5630] usb 1-1: Product: syz [ 142.986215][ T5630] usb 1-1: Manufacturer: syz [ 142.991365][ T5630] usb 1-1: SerialNumber: syz [ 142.998658][ T5630] usb 1-1: config 0 descriptor?? [ 143.012020][ T6970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.034811][ T6970] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.041980][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.055867][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.064892][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.073356][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.081318][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.098259][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.301819][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.313053][ T5630] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 143.580107][ T5630] usb 1-1: USB disconnect, device number 5 [ 143.921114][ T6988] loop1: detected capacity change from 0 to 8192 [ 144.290873][ T7003] loop0: detected capacity change from 0 to 1024 [ 144.298653][ T7003] EXT4-fs: inline encryption not supported [ 144.304962][ T7003] EXT4-fs: Ignoring removed i_version option [ 144.377530][ T7003] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.420450][ T7003] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.420: lblock 2 mapped to illegal pblock 2 (length 1) [ 144.445166][ T7003] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 144.453773][ T7003] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.420: lblock 0 mapped to illegal pblock 48 (length 1) [ 144.468749][ T7003] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 144.515206][ T7003] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.420: Failed to acquire dquot type 0 [ 144.548207][ T7003] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 144.568366][ T7008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.421'. [ 144.578242][ T7008] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 144.584799][ T7003] EXT4-fs error (device loop0): ext4_evict_inode:252: inode #11: comm syz.0.420: mark_inode_dirty error [ 144.604798][ T7003] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 144.618589][ T7003] EXT4-fs (loop0): 1 orphan inode deleted [ 144.635875][ T12] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 144.665317][ T7003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.699481][ T12] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 144.737798][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:1: Failed to release dquot type 0 [ 144.842618][ T7003] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm syz.0.420: Invalid inode table block 1 in block_group 0 [ 144.859875][ T7003] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 144.866202][ T7003] EXT4-fs error (device loop0): ext4_setattr:5488: inode #2: comm syz.0.420: mark_inode_dirty error [ 144.959165][ T6976] chnl_net:caif_netlink_parms(): no params data found [ 145.065112][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.080428][ T3428] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 145.136477][ T3428] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 145.165983][ T3428] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:7: Failed to release dquot type 0 [ 145.179042][ T5785] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 145.201067][ T5796] Bluetooth: hci0: command tx timeout [ 145.230964][ T5785] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 145.242766][ T5785] EXT4-fs error (device loop0): ext4_quota_off:7222: inode #3: comm syz-executor: mark_inode_dirty error [ 145.431020][ T7025] loop3: detected capacity change from 0 to 1024 [ 145.507131][ T7025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.534712][ T48] hsr_slave_0: left promiscuous mode [ 145.563119][ T7032] netlink: 'syz.1.427': attribute type 1 has an invalid length. [ 145.611021][ T48] hsr_slave_1: left promiscuous mode [ 145.623611][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.656204][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.702150][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.709632][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.766672][ T48] bridge_slave_1: left allmulticast mode [ 145.790241][ T48] bridge_slave_1: left promiscuous mode [ 145.804741][ T5784] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 145.817944][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.854112][ T5784] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 145.871322][ T48] bridge_slave_0: left allmulticast mode [ 145.878206][ T48] bridge_slave_0: left promiscuous mode [ 145.884944][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.893641][ T5784] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 145.917786][ T5784] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 145.969113][ T5784] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 145.991955][ T48] veth1_macvtap: left promiscuous mode [ 145.998244][ T48] veth0_macvtap: left promiscuous mode [ 146.001690][ T5784] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 146.016605][ T5784] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 146.028511][ T5784] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 146.051024][ T48] veth1_vlan: left promiscuous mode [ 146.051944][ T5784] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 146.057219][ T48] veth0_vlan: left promiscuous mode [ 146.080463][ T5630] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 146.088903][ T5784] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 146.294779][ T5630] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 146.320773][ T5630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.348719][ T5630] usb 1-1: Product: syz [ 146.354844][ T5630] usb 1-1: Manufacturer: syz [ 146.359508][ T5630] usb 1-1: SerialNumber: syz [ 146.368247][ T5630] usb 1-1: config 0 descriptor?? [ 146.676954][ T5835] usb 1-1: USB disconnect, device number 6 [ 146.910344][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.112595][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 147.129231][ T9] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 147.138960][ T9] usb 2-1: config 0 has no interface number 0 [ 147.146495][ T9] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 147.149788][ T48] team0 (unregistering): Port device team_slave_1 removed [ 147.157210][ T9] usb 2-1: config 0 interface 196 has no altsetting 0 [ 147.178928][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 147.188771][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.200648][ T9] usb 2-1: Product: syz [ 147.204877][ T9] usb 2-1: Manufacturer: syz [ 147.209516][ T9] usb 2-1: SerialNumber: syz [ 147.226768][ T9] usb 2-1: config 0 descriptor?? [ 147.234031][ T48] team0 (unregistering): Port device team_slave_0 removed [ 147.240548][ T7054] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 147.284153][ T5796] Bluetooth: hci0: command tx timeout [ 147.340128][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.415820][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.907015][ T9] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 148.046863][ T48] bond0 (unregistering): Released all slaves [ 148.244641][ T9] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 148.254059][ T6976] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.288558][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.300628][ T9] usb 2-1: USB disconnect, device number 6 [ 148.320440][ T6976] bridge_slave_0: entered allmulticast mode [ 148.327868][ T6976] bridge_slave_0: entered promiscuous mode [ 148.339232][ T6976] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.348229][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.355934][ T6976] bridge_slave_1: entered allmulticast mode [ 148.363901][ T6976] bridge_slave_1: entered promiscuous mode [ 148.439180][ T6689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.439929][ T6976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.486398][ T9] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 148.503850][ T6976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.570400][ T5630] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 148.770308][ T5630] usb 1-1: Using ep0 maxpacket: 32 [ 148.797262][ T5630] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.831966][ T5630] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.838724][ T5630] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 148.865782][ T6976] team0: Port device team_slave_0 added [ 148.894905][ T6976] team0: Port device team_slave_1 added [ 148.920315][ T5630] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.963189][ T5630] usb 1-1: config 0 descriptor?? [ 149.142488][ T6976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.171658][ T6976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.245521][ T6976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.323702][ T6976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.350725][ T6976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.380374][ T5796] Bluetooth: hci0: command tx timeout [ 149.449401][ T6976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.449701][ T5630] corsair-psu 0003:1B1C:1C09.0006: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 149.590330][ T5630] corsair-psu 0003:1B1C:1C09.0006: unable to initialize device (-38) [ 149.626827][ T5630] corsair-psu: probe of 0003:1B1C:1C09.0006 failed with error -38 [ 149.659623][ T7074] netlink: 'syz.1.442': attribute type 29 has an invalid length. [ 149.675773][ T5630] usb 1-1: USB disconnect, device number 7 [ 149.763132][ T6976] hsr_slave_0: entered promiscuous mode [ 149.778003][ T7071] fido_id[7071]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 149.794142][ T6976] hsr_slave_1: entered promiscuous mode [ 149.819841][ T6976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.844427][ T6976] Cannot create hsr debugfs directory [ 150.023858][ T7074] netlink: 'syz.1.442': attribute type 29 has an invalid length. [ 150.108477][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.120105][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.132093][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.157425][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.166673][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.174436][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.236479][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.274834][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.354537][ T7075] netlink: 'syz.1.442': attribute type 29 has an invalid length. [ 150.472997][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.477678][ T7091] overlayfs: conflicting options: nfs_export=on,index=off [ 150.486888][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.606370][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.616943][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.784743][ T7097] loop1: detected capacity change from 0 to 512 [ 150.802011][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.820312][ T7097] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.825657][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.878930][ T7097] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.447: bad orphan inode 67108875 [ 150.921803][ T7097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.084387][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.440527][ T5790] Bluetooth: hci0: command tx timeout [ 151.709401][ T6976] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.751118][ T5835] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 151.800412][ T6976] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.816145][ T6976] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.910698][ T6976] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.945200][ T5835] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 151.954033][ T5835] usb 2-1: config 0 has no interface number 0 [ 151.977334][ T5835] usb 2-1: config 0 interface 29 has no altsetting 0 [ 151.997301][ T5835] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 152.007645][ T7081] chnl_net:caif_netlink_parms(): no params data found [ 152.016790][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.038517][ T5835] usb 2-1: Product: syz [ 152.057300][ T5835] usb 2-1: Manufacturer: syz [ 152.070876][ T5835] usb 2-1: SerialNumber: syz [ 152.091699][ T5835] usb 2-1: config 0 descriptor?? [ 152.241083][ T5790] Bluetooth: hci1: command tx timeout [ 152.331070][ T5835] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 152.482718][ T7148] loop0: detected capacity change from 0 to 1024 [ 152.530996][ T5835] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 152.537926][ T5835] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 152.555564][ T5835] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 152.651933][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.660420][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.668546][ T7081] bridge_slave_0: entered allmulticast mode [ 152.677359][ T7081] bridge_slave_0: entered promiscuous mode [ 152.771399][ T5835] peak_usb: probe of 2-1:0.29 failed with error -8 [ 152.787327][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.799298][ T5835] usb 2-1: USB disconnect, device number 7 [ 152.811730][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.813684][ T48] IPVS: stopping master sync thread 6097 ... [ 152.826715][ T7081] bridge_slave_1: entered allmulticast mode [ 152.845754][ T7081] bridge_slave_1: entered promiscuous mode [ 153.003555][ T7081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.016475][ T7081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.197430][ T7081] team0: Port device team_slave_0 added [ 153.226434][ T7081] team0: Port device team_slave_1 added [ 153.349792][ T6976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.409667][ T48] hsr_slave_0: left promiscuous mode [ 153.458885][ T48] hsr_slave_1: left promiscuous mode [ 153.502880][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.521634][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.551184][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.558683][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.565081][ T7163] loop1: detected capacity change from 0 to 1764 [ 153.581830][ T48] bridge_slave_1: left allmulticast mode [ 153.587640][ T48] bridge_slave_1: left promiscuous mode [ 153.620515][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.660081][ T48] bridge_slave_0: left allmulticast mode [ 153.684669][ T48] bridge_slave_0: left promiscuous mode [ 153.693010][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.876119][ T48] veth1_macvtap: left promiscuous mode [ 153.883915][ T48] veth0_macvtap: left promiscuous mode [ 153.889638][ T48] veth1_vlan: left promiscuous mode [ 153.910527][ T48] veth0_vlan: left promiscuous mode [ 153.922617][ T7170] loop1: detected capacity change from 0 to 1024 [ 154.063137][ T7170] hfsplus: can't free extent [ 154.321167][ T5790] Bluetooth: hci1: command tx timeout [ 154.494555][ T7156] loop0: detected capacity change from 0 to 40427 [ 154.541877][ T7156] F2FS-fs (loop0): invalid crc value [ 154.582819][ T7156] F2FS-fs (loop0): Found nat_bits in checkpoint [ 154.723985][ T7156] F2FS-fs (loop0): Start checkpoint disabled! [ 154.765418][ T7156] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 155.075237][ T11] bio_check_eod: 57 callbacks suppressed [ 155.075844][ T11] kworker/u4:0: attempt to access beyond end of device [ 155.075844][ T11] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 155.126101][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 155.155315][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 156.082529][ T7196] loop0: detected capacity change from 0 to 64 [ 156.137486][ T48] team0 (unregistering): Port device team_slave_1 removed [ 156.187104][ T28] audit: type=1804 audit(1752516256.442:9): pid=7196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.475" name="/newroot/114/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 156.228274][ T48] team0 (unregistering): Port device team_slave_0 removed [ 156.400852][ T5790] Bluetooth: hci1: command tx timeout [ 156.458335][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.555984][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.815547][ T7201] loop0: detected capacity change from 0 to 16 [ 156.864962][ T7201] erofs: (device loop0): mounted with root inode @ nid 36. [ 157.386639][ T7203] loop0: detected capacity change from 0 to 32768 [ 157.429701][ T7203] (syz.0.478,7203,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 157.448168][ T48] bond0 (unregistering): Released all slaves [ 157.454855][ T7203] (syz.0.478,7203,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 157.495759][ T7203] JBD2: Ignoring recovery information on journal [ 157.555589][ T7203] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 157.699451][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.708133][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.735484][ T7081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.750735][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.757731][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.786347][ T7081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.984412][ T7081] hsr_slave_0: entered promiscuous mode [ 158.017225][ T7081] hsr_slave_1: entered promiscuous mode [ 158.088639][ T5785] ocfs2: Unmounting device (7,0) on (node local) [ 158.229649][ T6976] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.337733][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.346224][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.363436][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.370944][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.480470][ T5790] Bluetooth: hci1: command tx timeout [ 158.839525][ T7081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.879829][ T7081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.918661][ T7081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.943318][ T7081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.161968][ T7237] netlink: 'syz.0.486': attribute type 1 has an invalid length. [ 159.313958][ T7240] loop1: detected capacity change from 0 to 256 [ 159.314628][ T6976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.352090][ T7081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.361055][ T7240] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.383234][ T7242] loop0: detected capacity change from 0 to 512 [ 159.423663][ T7240] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 159.436894][ T7081] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.446250][ T7242] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.498598][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.505837][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.542187][ T7240] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 159.598556][ T7242] EXT4-fs (loop0): 1 truncate cleaned up [ 159.647963][ T7242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.678020][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.685456][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.973324][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.521640][ T6976] veth0_vlan: entered promiscuous mode [ 160.558367][ T6976] veth1_vlan: entered promiscuous mode [ 160.622079][ T7081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.717144][ T6976] veth0_macvtap: entered promiscuous mode [ 160.767103][ T6976] veth1_macvtap: entered promiscuous mode [ 160.840418][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.881946][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.907752][ T7278] loop0: detected capacity change from 0 to 512 [ 160.908904][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.937238][ T7278] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.950784][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.974726][ T7278] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 160.994155][ T6976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.021092][ T7256] loop1: detected capacity change from 0 to 32768 [ 161.032444][ T7278] System zones: 1-12 [ 161.042289][ T7256] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.489 (7256) [ 161.070637][ T7256] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.087209][ T7278] EXT4-fs (loop0): 1 truncate cleaned up [ 161.094588][ T7278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.147748][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.158712][ T7256] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 161.196110][ T7256] BTRFS info (device loop1): using free space tree [ 161.206349][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.265073][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.306298][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.353328][ T6976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.357120][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.394694][ T6976] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.404677][ T6976] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.413720][ T6976] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.422956][ T6976] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.536586][ T7256] BTRFS info (device loop1): enabling ssd optimizations [ 161.554136][ T7256] BTRFS info (device loop1): auto enabling async discard [ 161.777406][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.809685][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.809767][ T5786] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.023272][ T7081] veth0_vlan: entered promiscuous mode [ 162.031219][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.055994][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.080630][ T7081] veth1_vlan: entered promiscuous mode [ 162.243568][ T7081] veth0_macvtap: entered promiscuous mode [ 162.304797][ T7081] veth1_macvtap: entered promiscuous mode [ 162.396538][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.451174][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.467602][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.501493][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.531046][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.558926][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.592889][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.649321][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.660559][ T5859] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 162.669203][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.679711][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.690537][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.701954][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.713486][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.749999][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.821990][ T7081] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.842456][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.860295][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.876138][ T7081] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.887397][ T5859] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 162.897149][ T7081] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.907502][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.918269][ T7081] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.965414][ T5859] usb 2-1: config 0 descriptor?? [ 163.282012][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.295959][ T7338] mkiss: ax0: crc mode is auto. [ 163.329841][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.416352][ T3428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.449863][ T5859] hkems 0003:2006:0118.0007: unbalanced delimiter at end of report description [ 163.453668][ T3428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.489000][ T5859] hkems 0003:2006:0118.0007: parse failed [ 163.521042][ T5859] hkems: probe of 0003:2006:0118.0007 failed with error -22 [ 163.717120][ T5859] usb 2-1: USB disconnect, device number 8 [ 163.796958][ T7347] loop5: detected capacity change from 0 to 512 [ 163.835399][ T7347] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 163.917140][ T7347] EXT4-fs (loop5): invalid journal inode [ 163.945658][ T7347] EXT4-fs (loop5): can't get journal size [ 163.990536][ T7347] EXT4-fs (loop5): 1 truncate cleaned up [ 164.004971][ T7347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.204941][ T7081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.438768][ T7336] loop4: detected capacity change from 0 to 32768 [ 164.553972][ T7364] loop0: detected capacity change from 0 to 64 [ 164.647738][ T7364] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 165.028823][ T7373] loop1: detected capacity change from 0 to 512 [ 165.155393][ T7373] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 165.197906][ T7373] EXT4-fs warning (device loop1): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 165.245608][ T7373] EXT4-fs (loop1): mount failed [ 165.666120][ T7393] loop0: detected capacity change from 0 to 64 [ 166.098798][ T7408] loop5: detected capacity change from 0 to 256 [ 166.123534][ T7408] exfat: Deprecated parameter 'utf8' [ 166.150601][ T7408] exfat: Deprecated parameter 'namecase' [ 166.186322][ T7408] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 166.441850][ T7413] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 166.740800][ T7418] loop0: detected capacity change from 0 to 256 [ 166.806885][ T7421] loop5: detected capacity change from 0 to 1024 [ 166.876124][ T7421] EXT4-fs: Ignoring removed oldalloc option [ 166.919164][ T7421] EXT4-fs: Ignoring removed bh option [ 166.970322][ T7421] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.141922][ T7421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.191466][ T7403] loop1: detected capacity change from 0 to 40427 [ 167.202259][ T7403] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 167.211814][ T7403] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 167.245116][ T7403] F2FS-fs (loop1): invalid crc value [ 167.268633][ T7403] F2FS-fs (loop1): Found nat_bits in checkpoint [ 167.450938][ T7403] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 167.479758][ T7403] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 167.492970][ T7081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.653208][ T7411] loop4: detected capacity change from 0 to 32768 [ 167.784301][ T7411] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 167.993604][ T7411] XFS (loop4): Ending clean mount [ 168.018899][ T7411] XFS (loop4): Quotacheck needed: Please wait. [ 168.133722][ T7411] XFS (loop4): Quotacheck: Done. [ 168.519902][ T6976] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 168.710306][ T5835] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 168.816305][ T7442] loop5: detected capacity change from 0 to 32768 [ 168.860630][ T7442] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop5 scanned by syz.5.529 (7442) [ 168.906364][ T7442] BTRFS info (device loop5): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 168.920488][ T7432] loop0: detected capacity change from 0 to 40427 [ 168.929857][ T7432] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 168.938473][ T7442] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 168.940467][ T5835] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 168.953511][ T7432] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 168.981748][ T7442] BTRFS info (device loop5): using free space tree [ 169.007051][ T7432] F2FS-fs (loop0): invalid crc value [ 169.051099][ T5835] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.119423][ T5835] usb 2-1: config 0 interface 0 has no altsetting 0 [ 169.138765][ T7476] loop4: detected capacity change from 0 to 1024 [ 169.198976][ T5835] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 169.220330][ T7442] BTRFS info (device loop5): enabling ssd optimizations [ 169.227353][ T7442] BTRFS info (device loop5): auto enabling async discard [ 169.261034][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.279189][ T5835] usb 2-1: config 0 descriptor?? [ 169.479113][ T7442] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 169.523854][ T7432] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 169.549466][ T7432] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 169.740006][ T7432] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 169.788747][ T5835] pantherlord 0003:0810:0002.0008: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.1-1/input0 [ 169.838845][ T7081] BTRFS info (device loop5): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 169.842929][ T5835] pantherlord 0003:0810:0002.0008: no output reports found [ 170.112418][ T27] usb 2-1: USB disconnect, device number 9 [ 170.930477][ T5835] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 171.140770][ T5835] usb 5-1: Using ep0 maxpacket: 16 [ 171.168179][ T5835] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 171.197546][ T5835] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 171.216353][ T5835] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 171.253521][ T5835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.268460][ T5835] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 171.306647][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.324346][ T5835] usb 5-1: Product: syz [ 171.334413][ T7518] loop0: detected capacity change from 0 to 2048 [ 171.336270][ T5835] usb 5-1: Manufacturer: syz [ 171.350259][ T5835] usb 5-1: SerialNumber: syz [ 171.371409][ T5835] usb 5-1: config 0 descriptor?? [ 171.395811][ T7518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.624211][ T5835] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 171.665330][ T5140] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 171.713861][ T7500] loop5: detected capacity change from 0 to 40427 [ 171.725231][ T5140] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 171.750676][ T5140] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 171.772905][ T7500] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 171.810677][ T7500] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 171.881967][ T7500] F2FS-fs (loop5): invalid crc value [ 171.910538][ T5140] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 171.998027][ T7503] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 172.042913][ T5140] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 172.073089][ T5835] usb 5-1: USB disconnect, device number 2 [ 172.128200][ T5798] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 172.333505][ T7540] tipc: Started in network mode [ 172.338451][ T7540] tipc: Node identity 2000007, cluster identity 4711 [ 172.363192][ T7500] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 172.366256][ T7540] tipc: Node number set to 33554439 [ 172.386359][ T7540] tipc: Cannot configure node identity twice [ 172.393391][ T7500] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 172.549973][ T28] audit: type=1800 audit(1752516272.802:10): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.534" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 172.738850][ T7081] syz-executor: attempt to access beyond end of device [ 172.738850][ T7081] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.779639][ T7081] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 173.280448][ T5859] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.474096][ T5859] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.490275][ T5859] usb 1-1: config 0 interface 0 has no altsetting 0 [ 173.510345][ T5859] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 173.540406][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.574982][ T5859] usb 1-1: config 0 descriptor?? [ 173.653690][ T7571] loop1: detected capacity change from 0 to 256 [ 173.692028][ T7571] exfat: Deprecated parameter 'namecase' [ 173.697822][ T7571] exfat: Deprecated parameter 'utf8' [ 173.741889][ T7571] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 173.804147][ T7571] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 173.831961][ T7554] loop4: detected capacity change from 0 to 32768 [ 173.924386][ T7554] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 174.035212][ T5859] acrux 0003:1A34:0802.0009: unknown main item tag 0x0 [ 174.068457][ T5859] acrux 0003:1A34:0802.0009: unknown main item tag 0x0 [ 174.146603][ T5859] acrux 0003:1A34:0802.0009: unknown main item tag 0x0 [ 174.164141][ T7554] XFS (loop4): Ending clean mount [ 174.175177][ T5859] acrux 0003:1A34:0802.0009: unknown main item tag 0x0 [ 174.207677][ T5859] acrux 0003:1A34:0802.0009: unknown main item tag 0x0 [ 174.217352][ T7554] XFS (loop4): Quotacheck needed: Please wait. [ 174.236316][ T5859] acrux 0003:1A34:0802.0009: unknown main item tag 0x0 [ 174.269181][ T5859] acrux 0003:1A34:0802.0009: unknown main item tag 0x0 [ 174.323787][ T5859] acrux 0003:1A34:0802.0009: hidraw0: USB HID v10.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 174.379263][ T7554] XFS (loop4): Quotacheck: Done. [ 174.399740][ T5859] acrux 0003:1A34:0802.0009: no inputs found [ 174.447656][ T5859] acrux 0003:1A34:0802.0009: Failed to enable force feedback support, error: -19 [ 174.528040][ T5859] usb 1-1: USB disconnect, device number 8 [ 174.622518][ T6976] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 174.942535][ T7609] loop1: detected capacity change from 0 to 64 [ 175.431904][ T7624] loop4: detected capacity change from 0 to 512 [ 175.475417][ T7627] pim6reg: entered allmulticast mode [ 175.482828][ T7624] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 175.543635][ T7627] pim6reg: left allmulticast mode [ 175.561670][ T7624] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.564: invalid indirect mapped block 83886080 (level 1) [ 175.577636][ T7632] overlayfs: lower data-only dirs require metacopy support. [ 175.628971][ T7624] EXT4-fs (loop4): Remounting filesystem read-only [ 175.651106][ T7624] EXT4-fs (loop4): 1 orphan inode deleted [ 175.656918][ T7624] EXT4-fs (loop4): 1 truncate cleaned up [ 175.673084][ T7624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.881483][ T6976] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.246441][ T7622] loop1: detected capacity change from 0 to 32768 [ 176.282351][ T7622] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.570 (7622) [ 176.348943][ T7622] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.375005][ T7622] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 176.406552][ T7622] BTRFS info (device loop1): using free space tree [ 176.527378][ T5837] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 176.571553][ T7622] BTRFS info (device loop1): enabling ssd optimizations [ 176.584252][ T7622] BTRFS info (device loop1): auto enabling async discard [ 176.741500][ T5837] usb 5-1: Using ep0 maxpacket: 32 [ 176.763616][ T5837] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 176.777840][ T7675] loop0: detected capacity change from 0 to 64 [ 176.793468][ T5837] usb 5-1: New USB device strings: Mfr=249, Product=255, SerialNumber=3 [ 176.825756][ T5837] usb 5-1: Product: syz [ 176.843110][ T5837] usb 5-1: Manufacturer: syz [ 176.847787][ T5837] usb 5-1: SerialNumber: syz [ 176.882800][ T5837] usb 5-1: config 0 descriptor?? [ 177.145541][ T5837] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 177.341277][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.691213][ T5837] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 177.908345][ T7697] capability: warning: `syz.1.589' uses 32-bit capabilities (legacy support in use) [ 178.181528][ T5837] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 178.187699][ T5837] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 178.260360][ T5837] usb 5-1: USB disconnect, device number 3 [ 178.296801][ T7703] loop5: detected capacity change from 0 to 4096 [ 178.340894][ T7703] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 178.512216][ T7703] ntfs3: loop5: Failed to load $Extend (-22). [ 178.539512][ T7713] warning: `syz.1.594' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 178.544142][ T7703] ntfs3: loop5: Failed to initialize $Extend. [ 178.811008][ T7722] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 179.150653][ T7735] tipc: Started in network mode [ 179.161785][ T7735] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711 [ 179.189715][ T7735] tipc: Enabling of bearer rejected, failed to enable media [ 179.905030][ T7758] netlink: 'syz.5.607': attribute type 21 has an invalid length. [ 179.930373][ T7758] netlink: 164 bytes leftover after parsing attributes in process `syz.5.607'. [ 180.167635][ T7738] loop1: detected capacity change from 0 to 32768 [ 180.274108][ T7738] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 180.507069][ T7738] XFS (loop1): Ending clean mount [ 180.722185][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.593986][ T7805] loop0: detected capacity change from 0 to 4096 [ 181.661536][ T7805] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 181.744775][ T7805] ntfs3: loop0: Failed to load $Extend (-22). [ 181.744802][ T7805] ntfs3: loop0: Failed to initialize $Extend. [ 182.110871][ T5859] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 182.323888][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.350468][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.382982][ T5859] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 182.416838][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.439667][ T5859] usb 2-1: config 0 descriptor?? [ 182.560332][ T5837] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 182.736116][ T7844] loop4: detected capacity change from 0 to 256 [ 182.763400][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.786056][ T5837] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 182.806309][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.823415][ T5837] usb 6-1: config 0 descriptor?? [ 182.906866][ T5859] logitech 0003:046D:C623.000A: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.1-1/input0 [ 182.961230][ T7844] FAT-fs (loop4): Directory bread(block 64) failed [ 182.967890][ T7844] FAT-fs (loop4): Directory bread(block 65) failed [ 182.980851][ T7844] FAT-fs (loop4): Directory bread(block 66) failed [ 182.990677][ T7844] FAT-fs (loop4): Directory bread(block 67) failed [ 182.997392][ T7844] FAT-fs (loop4): Directory bread(block 68) failed [ 183.043589][ T7844] FAT-fs (loop4): Directory bread(block 69) failed [ 183.075826][ T7844] FAT-fs (loop4): Directory bread(block 70) failed [ 183.104216][ T7844] FAT-fs (loop4): Directory bread(block 71) failed [ 183.130478][ T7844] FAT-fs (loop4): Directory bread(block 72) failed [ 183.147392][ T7844] FAT-fs (loop4): Directory bread(block 73) failed [ 183.182056][ T5859] usb 2-1: USB disconnect, device number 10 [ 183.291726][ T5837] koneplus 0003:1E7D:2E22.000B: hidraw0: USB HID vff.fe Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 183.420328][ T28] audit: type=1800 audit(1752516283.672:11): pid=7844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.634" name="file1" dev="loop4" ino=1048648 res=0 errno=0 [ 183.462148][ T7844] syz.4.634: attempt to access beyond end of device [ 183.462148][ T7844] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 183.472598][ T5837] koneplus 0003:1E7D:2E22.000B: couldn't init struct koneplus_device [ 183.539893][ T5837] koneplus 0003:1E7D:2E22.000B: couldn't install mouse [ 183.566420][ T5837] koneplus: probe of 0003:1E7D:2E22.000B failed with error -71 [ 183.601715][ T5837] usb 6-1: USB disconnect, device number 2 [ 183.871092][ T7865] bridge0: entered promiscuous mode [ 183.884274][ T7865] macsec1: entered promiscuous mode [ 183.901933][ T7865] bridge0: port 3(macsec1) entered blocking state [ 183.917522][ T7865] bridge0: port 3(macsec1) entered disabled state [ 183.935051][ T7865] macsec1: entered allmulticast mode [ 183.957085][ T7865] bridge0: entered allmulticast mode [ 183.977069][ T7865] macsec1: left allmulticast mode [ 184.000640][ T7865] bridge0: left allmulticast mode [ 184.013196][ T7865] bridge0: left promiscuous mode [ 184.116931][ T7868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.639'. [ 184.715976][ T7889] loop0: detected capacity change from 0 to 2048 [ 184.795854][ T7889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.613416][ T7885] loop5: detected capacity change from 0 to 32768 [ 185.719466][ T7885] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 185.807808][ T7885] XFS (loop5): Ending clean mount [ 185.911549][ T5859] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.050695][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 186.089689][ T7081] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 186.117200][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.141136][ T5859] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 186.162841][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.194189][ T5859] usb 2-1: config 0 descriptor?? [ 186.260444][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 186.273200][ T27] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 186.282873][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.291901][ T27] usb 1-1: Product: syz [ 186.296210][ T27] usb 1-1: Manufacturer: syz [ 186.307579][ T27] usb 1-1: SerialNumber: syz [ 186.323224][ T27] usb 1-1: config 0 descriptor?? [ 186.343055][ T27] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 186.351646][ T27] usb 1-1: setting power ON [ 186.356946][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 186.378843][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.393907][ T27] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 186.405492][ T27] usb 1-1: media controller created [ 186.436366][ T5859] usbhid 2-1:0.0: can't add hid device: -71 [ 186.439961][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.456687][ T5859] usbhid: probe of 2-1:0.0 failed with error -71 [ 186.470372][ T5630] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 186.497798][ T5859] usb 2-1: USB disconnect, device number 11 [ 186.528015][ T27] usb 1-1: selecting invalid altsetting 6 [ 186.540598][ T27] usb 1-1: digital interface selection failed (-22) [ 186.547272][ T27] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 186.568351][ T7928] dvb-usb: bulk message failed: -22 (3/0) [ 186.581232][ T27] usb 1-1: setting power OFF [ 186.586607][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 186.594150][ T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 186.604063][ T27] (NULL device *): no alternate interface [ 186.673169][ T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 186.698802][ T5630] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.710906][ T5630] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.726731][ T5630] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.741325][ T27] usb 1-1: USB disconnect, device number 9 [ 186.763473][ T5630] usb 5-1: config 0 interface 0 has no altsetting 0 [ 186.774277][ T5630] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 186.787378][ T5630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.807542][ T5630] usb 5-1: config 0 descriptor?? [ 187.030734][ T5859] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 187.235071][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.264513][ T5630] kye 0003:0458:5015.000C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 187.275257][ T5859] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 187.275289][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.312421][ T5859] usb 2-1: config 0 descriptor?? [ 187.337528][ T5630] kye 0003:0458:5015.000C: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.4-1/input0 [ 187.410418][ T5630] kye 0003:0458:5015.000C: tablet-enabling feature report not found [ 187.449451][ T5630] kye 0003:0458:5015.000C: tablet enabling failed [ 187.511842][ T5630] usb 5-1: USB disconnect, device number 4 [ 187.540600][ T5859] usbhid 2-1:0.0: can't add hid device: -71 [ 187.546687][ T5859] usbhid: probe of 2-1:0.0 failed with error -71 [ 187.634150][ T7960] fido_id[7960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 187.744496][ T5859] usb 2-1: USB disconnect, device number 12 [ 188.066102][ T7971] loop5: detected capacity change from 0 to 512 [ 188.101454][ T7971] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.126727][ T7971] EXT4-fs (loop5): orphan cleanup on readonly fs [ 188.139867][ T7971] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 188.151719][ T7971] EXT4-fs warning (device loop5): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 188.180754][ T7971] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 188.193121][ T7971] EXT4-fs (loop5): 1 truncate cleaned up [ 188.204631][ T7971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.307370][ T7081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.727280][ T5963] udevd[5963]: symlink '../../loop5' '/dev/disk/by-diskseq/308.tmp-b7:5' failed: Read-only file system [ 188.903913][ T5963] udevd[5963]: symlink '../../loop5' '/dev/disk/by-diskseq/308.tmp-b7:5' failed: Read-only file system [ 188.920821][ T7986] loop1: detected capacity change from 0 to 8192 [ 188.954398][ T7986] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.205125][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-diskseq/309.tmp-b7:1' failed: Read-only file system [ 189.236172][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-label/SYZKALLER.tmp-b7:1' failed: Read-only file system [ 189.407548][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-diskseq/309.tmp-b7:1' failed: Read-only file system [ 189.477720][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-diskseq/309.tmp-b7:1' failed: Read-only file system [ 189.528881][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-diskseq/309.tmp-b7:1' failed: Read-only file system [ 189.586187][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-diskseq/310.tmp-b7:1' failed: Read-only file system [ 189.686906][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-diskseq/310.tmp-b7:1' failed: Read-only file system [ 189.896147][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-diskseq/310.tmp-b7:1' failed: Read-only file system [ 189.931307][ T7978] loop4: detected capacity change from 0 to 40427 [ 189.939915][ T7978] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x7 [ 189.987962][ T7978] F2FS-fs (loop4): invalid crc value [ 190.030034][ T7978] F2FS-fs (loop4): Found nat_bits in checkpoint [ 190.225119][ T7994] loop5: detected capacity change from 0 to 32768 [ 190.273539][ T7994] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.666 (7994) [ 190.308038][ T7978] F2FS-fs (loop4): Start checkpoint disabled! [ 190.349337][ T7978] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 190.359668][ T7994] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.387479][ T7994] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 190.408119][ T7994] BTRFS info (device loop5): setting nodatacow, compression disabled [ 190.430381][ T7994] BTRFS info (device loop5): max_inline at 0 [ 190.480362][ T7994] BTRFS info (device loop5): enabling disk space caching [ 190.487490][ T7994] BTRFS info (device loop5): setting datasum, datacow enabled [ 190.497337][ T7994] BTRFS info (device loop5): turning off barriers [ 190.506628][ T7994] BTRFS info (device loop5): turning on flush-on-commit [ 190.514111][ T7994] BTRFS info (device loop5): doing ref verification [ 190.521195][ T7994] BTRFS info (device loop5): force clearing of disk cache [ 190.528480][ T7994] BTRFS info (device loop5): enabling ssd optimizations [ 190.536787][ T7994] BTRFS info (device loop5): max_inline at 4096 [ 190.540711][ T5859] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 190.543859][ T7994] BTRFS info (device loop5): disk space caching is enabled [ 190.749346][ T7994] BTRFS info (device loop5): auto enabling async discard [ 190.790264][ T5859] usb 2-1: Using ep0 maxpacket: 32 [ 190.812281][ T5859] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 190.840759][ T5859] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 190.870427][ T5859] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 190.932477][ T5859] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 190.951120][ T8055] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 190.963162][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.981765][ T5859] usb 2-1: Product: syz [ 190.991413][ T11] kworker/u4:0: attempt to access beyond end of device [ 190.991413][ T11] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 191.000215][ T5859] usb 2-1: Manufacturer: syz [ 191.034867][ T5859] usb 2-1: SerialNumber: syz [ 191.039511][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 191.065677][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 191.119892][ T5859] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 191.151569][ T5859] imon 2-1:155.0: unable to initialize intf0, err -19 [ 191.181998][ T5859] imon:imon_probe: failed to initialize context! [ 191.188417][ T5859] imon 2-1:155.0: unable to register, err -19 [ 191.323877][ T7081] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.423108][ T8] usb 2-1: USB disconnect, device number 13 [ 192.875184][ T8068] loop5: detected capacity change from 0 to 32768 [ 192.887978][ T8092] loop4: detected capacity change from 0 to 512 [ 192.916921][ T8068] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.684 (8068) [ 193.002601][ T8092] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.007203][ T8068] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.062400][ T8068] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 193.068279][ T8092] EXT4-fs (loop4): orphan cleanup on readonly fs [ 193.096691][ T8092] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 193.152587][ T8068] BTRFS info (device loop5): use no compression [ 193.167222][ T8092] EXT4-fs warning (device loop4): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 193.212388][ T8068] BTRFS info (device loop5): force zlib compression, level 3 [ 193.244785][ T8068] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 193.256999][ T8092] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 193.300379][ T8068] BTRFS info (device loop5): use lzo compression, level 0 [ 193.307904][ T8068] BTRFS info (device loop5): turning on flush-on-commit [ 193.314947][ T8092] EXT4-fs (loop4): 1 truncate cleaned up [ 193.327228][ T8068] BTRFS info (device loop5): enabling auto defrag [ 193.335199][ T8092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.350232][ T8068] BTRFS info (device loop5): using free space tree [ 193.376449][ T8085] loop0: detected capacity change from 0 to 32768 [ 193.471678][ T8085] (syz.0.689,8085,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 193.542564][ T8085] (syz.0.689,8085,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 193.558517][ T6976] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.614105][ T8068] BTRFS info (device loop5): enabling ssd optimizations [ 193.736664][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-diskseq/318.tmp-b7:4' failed: Read-only file system [ 193.769095][ T5798] udevd[5798]: symlink '../../loop0' '/dev/disk/by-diskseq/317.tmp-b7:0' failed: Read-only file system [ 193.793552][ T8085] JBD2: Ignoring recovery information on journal [ 193.837107][ T5798] udevd[5798]: symlink '../../loop0' '/dev/disk/by-uuid/9357e9d7-5182-4c22-8242-b9b0d0fb6750.tmp-b7:0' failed: Read-only file system [ 193.928041][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-diskseq/318.tmp-b7:4' failed: Read-only file system [ 193.971917][ T8085] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 193.976299][ T7081] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.087794][ T8077] loop1: detected capacity change from 0 to 40427 [ 194.168161][ T5798] udevd[5798]: symlink '../../loop0' '/dev/disk/by-diskseq/317.tmp-b7:0' failed: Read-only file system [ 194.194283][ T8077] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 194.229362][ T5963] udevd[5963]: symlink '../../loop5' '/dev/disk/by-diskseq/315.tmp-b7:5' failed: Read-only file system [ 194.242532][ T5963] udevd[5963]: symlink '../../loop5' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:5' failed: Read-only file system [ 194.284049][ T5798] udevd[5798]: symlink '../../loop0' '/dev/disk/by-uuid/9357e9d7-5182-4c22-8242-b9b0d0fb6750.tmp-b7:0' failed: Read-only file system [ 194.303817][ T8077] F2FS-fs (loop1): Found nat_bits in checkpoint [ 194.475266][ T5798] udevd[5798]: symlink '../../loop4' '/dev/disk/by-diskseq/318.tmp-b7:4' failed: Read-only file system [ 194.497831][ T5785] ocfs2: Unmounting device (7,0) on (node local) [ 194.510890][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-diskseq/319.tmp-b7:1' failed: Read-only file system [ 194.583284][ T8077] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 194.646780][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.660436][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.251936][ T8144] random: crng reseeded on system resumption [ 195.749375][ T8157] loop4: detected capacity change from 0 to 512 [ 195.789467][ T8157] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 195.845836][ T8157] EXT4-fs (loop4): 1 orphan inode deleted [ 195.856504][ T8157] EXT4-fs (loop4): 1 truncate cleaned up [ 195.865332][ T8157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.944339][ T8157] EXT4-fs (loop4): Online resizing not supported with sparse_super2 [ 196.010085][ T6976] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.788843][ T8190] loop1: detected capacity change from 0 to 64 [ 197.099179][ T8165] loop5: detected capacity change from 0 to 32768 [ 197.117422][ T8165] XFS: attr2 mount option is deprecated. [ 197.149083][ T8165] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 197.185685][ T8165] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.307584][ T8165] XFS (loop5): Ending clean mount [ 197.323957][ T8165] XFS (loop5): Quotacheck needed: Please wait. [ 197.371779][ T8165] XFS (loop5): Quotacheck: Done. [ 197.740725][ T7081] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.817525][ T8212] netlink: 'syz.0.717': attribute type 25 has an invalid length. [ 197.925795][ T8213] loop4: detected capacity change from 0 to 8192 [ 197.948217][ T8213] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 198.006132][ T8213] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 198.024926][ T8218] loop1: detected capacity change from 0 to 64 [ 198.040500][ T8213] REISERFS (device loop4): using ordered data mode [ 198.047183][ T8213] reiserfs: using flush barriers [ 198.057287][ T8213] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 198.081700][ T8213] REISERFS (device loop4): checking transaction log (loop4) [ 198.118069][ T8213] REISERFS (device loop4): Using r5 hash to sort names [ 198.125384][ T8213] REISERFS (device loop4): using 3.5.x disk format [ 198.132955][ T8213] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 198.194845][ T8222] loop0: detected capacity change from 0 to 128 [ 198.247916][ T8222] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 198.409005][ T5785] sysv_free_block: flc_count > flc_size [ 198.438697][ T5785] sysv_free_block: flc_count > flc_size [ 198.449001][ T5785] sysv_free_block: flc_count > flc_size [ 198.471053][ T5785] sysv_free_block: flc_count > flc_size [ 198.476685][ T5785] sysv_free_block: flc_count > flc_size [ 198.490300][ T5785] sysv_free_block: flc_count > flc_size [ 198.507666][ T5785] sysv_free_block: flc_count > flc_size [ 198.517540][ T5785] sysv_free_block: flc_count > flc_size [ 198.530405][ T5785] sysv_free_block: flc_count > flc_size [ 198.541271][ T5785] sysv_free_block: flc_count > flc_size [ 198.560906][ T5785] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 198.805376][ T5963] udevd[5963]: symlink '../../loop0' '/dev/disk/by-diskseq/333.tmp-b7:0' failed: Read-only file system [ 198.869214][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-diskseq/331.tmp-b7:1' failed: Read-only file system [ 198.883188][ T5798] udevd[5798]: symlink '../../loop4' '/dev/disk/by-diskseq/332.tmp-b7:4' failed: Read-only file system [ 198.936766][ T5963] udevd[5963]: symlink '../../loop5' '/dev/disk/by-diskseq/326.tmp-b7:5' failed: Read-only file system [ 199.007940][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/333.tmp-b7:0' failed: Read-only file system [ 199.034707][ T5963] udevd[5963]: symlink '../../loop5' '/dev/disk/by-diskseq/326.tmp-b7:5' failed: Read-only file system [ 199.079195][ T5798] udevd[5798]: symlink '../../loop1' '/dev/disk/by-diskseq/331.tmp-b7:1' failed: Read-only file system [ 199.138011][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 199.145892][ T8243] loop1: detected capacity change from 0 to 64 [ 199.217504][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-diskseq/335.tmp-b7:1' failed: Read-only file system [ 199.255921][ T5795] udevd[5795]: symlink '../../loop5' '/dev/disk/by-diskseq/334.tmp-b7:5' failed: Read-only file system [ 199.283484][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system [ 199.320370][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 199.327927][ T8] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 199.344397][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.718'. [ 199.347061][ T8] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 199.379109][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 199.429003][ T8] usb 5-1: config 1 has no interface number 0 [ 199.449363][ T8] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.480462][ T8] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 199.518146][ T8] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 199.539126][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.579372][ T8] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 199.771789][ T5837] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 199.798263][ T8] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 199.992706][ T5837] usb 2-1: config 7 has an invalid interface number: 209 but max is 1 [ 200.017052][ T5837] usb 2-1: config 7 has an invalid interface number: 61 but max is 1 [ 200.041190][ T5837] usb 2-1: config 7 has no interface number 0 [ 200.047395][ T5837] usb 2-1: config 7 has no interface number 1 [ 200.066771][ T5837] usb 2-1: config 7 interface 61 altsetting 1 endpoint 0x9 has invalid maxpacket 1983, setting to 1024 [ 200.088639][ T5837] usb 2-1: config 7 interface 61 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024 [ 200.109948][ T5837] usb 2-1: config 7 interface 61 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 200.137653][ T5837] usb 2-1: config 7 interface 209 has no altsetting 0 [ 200.144938][ T5837] usb 2-1: config 7 interface 61 has no altsetting 0 [ 200.156056][ T5837] usb 2-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice=7f.6e [ 200.176004][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.185725][ T5837] usb 2-1: Product: syz [ 200.190079][ T5837] usb 2-1: Manufacturer: syz [ 200.200904][ T5837] usb 2-1: SerialNumber: syz [ 200.254963][ T8251] loop0: detected capacity change from 0 to 40427 [ 200.270681][ T8251] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 200.288698][ T8251] F2FS-fs (loop0): invalid crc value [ 200.299472][ T8251] F2FS-fs (loop0): Found nat_bits in checkpoint [ 200.356113][ T8] usb 5-1: USB disconnect, device number 5 [ 200.374881][ T8251] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 200.378809][ T8] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 200.413649][ T5630] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.462144][ T5837] hub 2-1:7.209: Invalid hub with more than one config or interface [ 200.475138][ T5837] hub: probe of 2-1:7.209 failed with error -22 [ 200.489473][ T5837] hub 2-1:7.61: Invalid hub with more than one config or interface [ 200.524287][ T5837] hub: probe of 2-1:7.61 failed with error -22 [ 200.551185][ T5837] usb 2-1: USB disconnect, device number 14 [ 200.614235][ T5785] syz-executor: attempt to access beyond end of device [ 200.614235][ T5785] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 200.620362][ T5630] usb 6-1: Using ep0 maxpacket: 16 [ 200.644360][ T5785] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 200.656395][ T5630] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 200.681348][ T5630] usb 6-1: config 0 interface 0 has no altsetting 0 [ 200.688058][ T5630] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 200.697516][ T5630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.711402][ T5630] usb 6-1: config 0 descriptor?? [ 201.170718][ T5630] elecom 0003:056E:010D.000D: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.5-1/input0 [ 201.457140][ T5878] usb 6-1: USB disconnect, device number 3 [ 201.482826][ T8273] fido_id[8273]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 201.521224][ T8283] loop1: detected capacity change from 0 to 2048 [ 201.610066][ T8290] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.757026][ T8283] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 201.855079][ T8283] Remounting filesystem read-only [ 201.886351][ T8296] syz.0.746 uses obsolete (PF_INET,SOCK_PACKET) [ 202.133320][ T8279] loop4: detected capacity change from 0 to 32768 [ 202.253327][ T8279] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 202.410514][ T5878] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 202.602485][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.620413][ T5878] usb 2-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 202.636717][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.636781][ T6976] ocfs2: Unmounting device (7,4) on (node local) [ 202.705677][ T5878] usb 2-1: config 0 descriptor?? [ 202.932675][ T8328] loop4: detected capacity change from 0 to 64 [ 202.945039][ T8325] loop0: detected capacity change from 0 to 1024 [ 203.027773][ T8328] syz.4.753: attempt to access beyond end of device [ 203.027773][ T8328] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 203.089994][ T8328] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 203.174669][ T5878] wacom 0003:056A:0031.000E: unbalanced collection at end of report description [ 203.185155][ T48] hfsplus: b-tree write err: -5, ino 4 [ 203.257288][ T5878] wacom 0003:056A:0031.000E: parse failed [ 203.273307][ T5878] wacom: probe of 0003:056A:0031.000E failed with error -22 [ 203.353407][ T8328] Trying to free block not in datazone [ 203.444869][ T966] usb 2-1: USB disconnect, device number 15 [ 203.521026][ T5859] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 203.742516][ T5859] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 203.751191][ T5859] usb 6-1: config 0 has no interface number 0 [ 203.757365][ T5859] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 203.838825][ T5859] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 203.860188][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.889581][ T5963] udevd[5963]: symlink '../../loop4' '/dev/disk/by-diskseq/346.tmp-b7:4' failed: Read-only file system [ 203.900241][ T5859] usb 6-1: Product: syz [ 203.910982][ T5859] usb 6-1: Manufacturer: syz [ 203.936042][ T5859] usb 6-1: SerialNumber: syz [ 203.963873][ T5859] usb 6-1: config 0 descriptor?? [ 204.137257][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-diskseq/340.tmp-b7:1' failed: Read-only file system [ 204.179873][ T5798] udevd[5798]: symlink '../../loop4' '/dev/disk/by-diskseq/346.tmp-b7:4' failed: Read-only file system [ 204.372989][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-diskseq/346.tmp-b7:4' failed: Read-only file system [ 204.438124][ T8357] loop4: detected capacity change from 0 to 256 [ 204.465412][ T8357] FAT-fs (loop4): Directory bread(block 64) failed [ 204.490714][ T8357] FAT-fs (loop4): Directory bread(block 65) failed [ 204.497550][ T8357] FAT-fs (loop4): Directory bread(block 66) failed [ 204.506689][ T8357] FAT-fs (loop4): Directory bread(block 67) failed [ 204.515974][ T5798] udevd[5798]: symlink '../../loop1' '/dev/disk/by-diskseq/340.tmp-b7:1' failed: Read-only file system [ 204.517790][ T8357] FAT-fs (loop4): Directory bread(block 68) failed [ 204.559587][ T8357] FAT-fs (loop4): Directory bread(block 69) failed [ 204.569597][ T8357] FAT-fs (loop4): Directory bread(block 70) failed [ 204.575582][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-diskseq/347.tmp-b7:4' failed: Read-only file system [ 204.582088][ T8357] FAT-fs (loop4): Directory bread(block 71) failed [ 204.608912][ T5859] usbtouchscreen: probe of 6-1:0.214 failed with error -71 [ 204.632204][ T5859] usb 6-1: USB disconnect, device number 4 [ 204.640036][ T8357] FAT-fs (loop4): Directory bread(block 72) failed [ 204.657984][ T8357] FAT-fs (loop4): Directory bread(block 73) failed [ 204.748921][ T5798] udevd[5798]: symlink '../../loop1' '/dev/disk/by-diskseq/340.tmp-b7:1' failed: Read-only file system [ 204.766214][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-diskseq/347.tmp-b7:4' failed: Read-only file system [ 204.819736][ T8361] pim6reg: entered allmulticast mode [ 204.927131][ T5963] udevd[5963]: symlink '../../loop4' '/dev/disk/by-diskseq/347.tmp-b7:4' failed: Read-only file system [ 204.967141][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-diskseq/340.tmp-b7:1' failed: Read-only file system [ 205.202417][ T8370] QAT: Invalid ioctl 21531 [ 205.470894][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 205.499317][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 205.524302][ T8376] macvlan2: entered promiscuous mode [ 205.529850][ T8376] macvlan2: entered allmulticast mode [ 205.535612][ T8376] bridge0: entered allmulticast mode [ 205.785901][ T8365] loop1: detected capacity change from 0 to 32768 [ 205.803703][ T8365] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.769 (8365) [ 205.890460][ T8365] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.946443][ T8365] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 205.980740][ T8365] BTRFS info (device loop1): setting nodatacow, compression disabled [ 205.988957][ T8365] BTRFS info (device loop1): max_inline at 0 [ 205.999758][ T8365] BTRFS info (device loop1): enabling disk space caching [ 206.019541][ T8365] BTRFS info (device loop1): setting datasum, datacow enabled [ 206.039335][ T8365] BTRFS info (device loop1): turning off barriers [ 206.071354][ T8365] BTRFS info (device loop1): turning on flush-on-commit [ 206.087145][ T8365] BTRFS info (device loop1): doing ref verification [ 206.105648][ T8365] BTRFS info (device loop1): force clearing of disk cache [ 206.137262][ T8365] BTRFS info (device loop1): enabling ssd optimizations [ 206.177331][ T8365] BTRFS info (device loop1): max_inline at 4096 [ 206.210317][ T8365] BTRFS info (device loop1): disk space caching is enabled [ 206.444251][ T8365] BTRFS info (device loop1): auto enabling async discard [ 206.847655][ T8386] loop5: detected capacity change from 0 to 32768 [ 206.944609][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 206.970649][ T8386] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 207.003899][ T8425] sp0: Synchronizing with TNC [ 207.020442][ T8386] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 207.310020][ T7081] ocfs2: Unmounting device (7,5) on (node local) [ 208.101280][ T8448] loop1: detected capacity change from 0 to 256 [ 208.102350][ T8448] exfat: Deprecated parameter 'utf8' [ 208.102396][ T8448] exfat: Deprecated parameter 'utf8' [ 208.134100][ T8450] netlink: 88 bytes leftover after parsing attributes in process `syz.4.793'. [ 208.153963][ T8448] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011fde, chksum : 0x26f39415, utbl_chksum : 0xe619d30d) [ 208.785863][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 208.942877][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-diskseq/354.tmp-b7:1' failed: Read-only file system [ 209.005217][ T5795] udevd[5795]: symlink '../../loop5' '/dev/disk/by-diskseq/352.tmp-b7:5' failed: Read-only file system [ 209.144213][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-diskseq/354.tmp-b7:1' failed: Read-only file system [ 209.257599][ T5963] udevd[5963]: symlink '../../loop5' '/dev/disk/by-diskseq/352.tmp-b7:5' failed: Read-only file system [ 209.371984][ T8455] loop4: detected capacity change from 0 to 32768 [ 209.435919][ T8455] JBD2: Ignoring recovery information on journal [ 209.483052][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-diskseq/354.tmp-b7:1' failed: Read-only file system [ 209.503121][ T5798] udevd[5798]: symlink '../../loop5' '/dev/disk/by-diskseq/352.tmp-b7:5' failed: Read-only file system [ 209.546523][ T8452] loop0: detected capacity change from 0 to 32768 [ 209.548639][ T8482] loop1: detected capacity change from 0 to 8 [ 209.605372][ T8455] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 209.629807][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-diskseq/357.tmp-b7:1' failed: Read-only file system [ 209.757899][ T8452] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.862231][ T5963] udevd[5963]: symlink '../../loop4' '/dev/disk/by-diskseq/355.tmp-b7:4' failed: Read-only file system [ 209.876598][ T5795] udevd[5795]: symlink '../../loop1' '/dev/disk/by-diskseq/357.tmp-b7:1' failed: Read-only file system [ 209.904236][ T5798] udevd[5798]: symlink '../../loop0' '/dev/disk/by-diskseq/356.tmp-b7:0' failed: Read-only file system [ 210.161525][ T8452] XFS (loop0): Ending clean mount [ 210.306279][ T6976] ocfs2: Unmounting device (7,4) on (node local) [ 210.484744][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 210.879861][ T8485] loop5: detected capacity change from 0 to 32768 [ 210.930337][ T5859] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 210.939767][ T8485] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 211.170268][ T5859] usb 2-1: Using ep0 maxpacket: 16 [ 211.177851][ T5859] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 211.205061][ T5859] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.244897][ T5859] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 211.269624][ T5963] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 211.305913][ T5859] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 211.325294][ T5859] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 211.350071][ T5859] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.361031][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 211.369274][ T5859] usb 2-1: SerialNumber: syz [ 211.386495][ T8506] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.416241][ T5859] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 211.457629][ T5859] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 211.496111][ T8522] tipc: Enabled bearer , priority 0 [ 211.730421][ T966] usb 2-1: USB disconnect, device number 16 [ 212.080299][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 212.087577][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 212.295676][ T8539] netlink: 'syz.4.816': attribute type 1 has an invalid length. [ 212.610343][ T27] tipc: Node number set to 20905985 [ 212.827329][ T8536] loop5: detected capacity change from 0 to 32768 [ 212.940201][ T8536] JBD2: Ignoring recovery information on journal [ 213.093229][ T8564] loop0: detected capacity change from 0 to 1024 [ 213.136741][ T8536] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 213.300684][ T2911] hfsplus: b-tree write err: -5, ino 4 [ 213.723587][ T7081] ocfs2: Unmounting device (7,5) on (node local) [ 214.018934][ T5963] udevd[5963]: symlink '../../loop0' '/dev/disk/by-diskseq/365.tmp-b7:0' failed: Read-only file system [ 214.085291][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-diskseq/359.tmp-b7:4' failed: Read-only file system [ 214.145723][ T5963] udevd[5963]: symlink '../../loop5' '/dev/disk/by-diskseq/366.tmp-b7:5' failed: Read-only file system [ 214.310993][ T5963] udevd[5963]: symlink '../../loop0' '/dev/disk/by-diskseq/365.tmp-b7:0' failed: Read-only file system [ 214.369550][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-diskseq/359.tmp-b7:4' failed: Read-only file system [ 214.395407][ T5963] udevd[5963]: symlink '../../loop5' '/dev/disk/by-diskseq/366.tmp-b7:5' failed: Read-only file system [ 214.656900][ T8573] loop1: detected capacity change from 0 to 32768 [ 214.887303][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-diskseq/367.tmp-b7:1' failed: Read-only file system [ 214.923103][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system [ 215.142040][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-diskseq/367.tmp-b7:1' failed: Read-only file system [ 215.185535][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system [ 215.598310][ T8602] loop5: detected capacity change from 0 to 32768 [ 215.725925][ T8602] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 215.750658][ T8619] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 215.816323][ T8598] loop0: detected capacity change from 0 to 40427 [ 215.829014][ T8598] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 215.842574][ T8598] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 215.888147][ T8598] F2FS-fs (loop0): invalid crc value [ 215.914577][ T8600] loop4: detected capacity change from 0 to 40427 [ 215.943535][ T8598] F2FS-fs (loop0): Found nat_bits in checkpoint [ 215.992273][ T8600] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 216.036248][ T8600] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 216.051470][ T7081] (syz-executor,7081,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 216.102458][ T8600] F2FS-fs (loop4): invalid crc value [ 216.113476][ T7081] ocfs2: Unmounting device (7,5) on (node local) [ 216.132420][ T8600] F2FS-fs (loop4): Found nat_bits in checkpoint [ 216.250530][ T8598] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 216.287296][ T8598] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 216.369692][ T8600] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 216.407249][ T8600] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 216.917339][ T8642] loop1: detected capacity change from 0 to 1024 [ 217.372951][ T8647] loop1: detected capacity change from 0 to 128 [ 217.449812][ T8647] FAT-fs (loop1): Directory bread(block 11554) failed [ 217.499372][ T8647] FAT-fs (loop1): Directory bread(block 11555) failed [ 217.519680][ T8647] FAT-fs (loop1): Directory bread(block 11556) failed [ 217.540355][ T8647] FAT-fs (loop1): Directory bread(block 11557) failed [ 217.557722][ T8647] FAT-fs (loop1): Directory bread(block 11558) failed [ 217.572337][ T8647] FAT-fs (loop1): Directory bread(block 11559) failed [ 217.586532][ T8647] FAT-fs (loop1): Directory bread(block 11560) failed [ 217.600125][ T8647] FAT-fs (loop1): Directory bread(block 11561) failed [ 217.619585][ T8647] FAT-fs (loop1): Directory bread(block 11562) failed [ 217.643324][ T8647] FAT-fs (loop1): Directory bread(block 11563) failed [ 217.762415][ T8635] loop5: detected capacity change from 0 to 32768 [ 217.996532][ T8663] loop4: detected capacity change from 0 to 256 [ 218.031863][ T8663] exfat: Deprecated parameter 'namecase' [ 218.075321][ T8663] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 219.082411][ T5963] udevd[5963]: symlink '../../loop0' '/dev/disk/by-diskseq/374.tmp-b7:0' failed: Read-only file system [ 219.130249][ T8691] loop0: detected capacity change from 0 to 16 [ 219.189056][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-diskseq/382.tmp-b7:1' failed: Read-only file system [ 219.207929][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/383.tmp-b7:0' failed: Read-only file system [ 219.226718][ T8691] erofs: (device loop0): mounted with root inode @ nid 36. [ 219.236860][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:0' failed: Read-only file system [ 219.260893][ T966] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 219.295400][ T5963] udevd[5963]: symlink '../../loop0' '/dev/disk/by-diskseq/383.tmp-b7:0' failed: Read-only file system [ 219.308247][ T28] audit: type=1800 audit(1752516319.552:12): pid=8691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.857" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 219.390882][ T5963] udevd[5963]: symlink '../../loop0' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:0' failed: Read-only file system [ 219.395522][ T5795] udevd[5795]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system [ 219.489265][ T966] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.497984][ T5963] udevd[5963]: symlink '../../loop0' '/dev/disk/by-diskseq/383.tmp-b7:0' failed: Read-only file system [ 219.511580][ T966] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 219.518180][ T5798] udevd[5798]: symlink '../../loop1' '/dev/disk/by-diskseq/382.tmp-b7:1' failed: Read-only file system [ 219.531996][ T966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 219.549430][ T966] usb 5-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 219.569659][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.594053][ T8703] loop1: detected capacity change from 0 to 512 [ 219.601816][ T5963] udevd[5963]: symlink '../../loop0' '/dev/disk/by-diskseq/383.tmp-b7:0' failed: Read-only file system [ 219.633087][ T966] usb 5-1: config 0 descriptor?? [ 219.658873][ T8685] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 219.681675][ T8703] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.825134][ T8703] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.861: invalid indirect mapped block 10 (level 1) [ 219.943688][ T8703] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.861: invalid indirect mapped block 8 (level 1) [ 219.985361][ T8703] EXT4-fs (loop1): 1 truncate cleaned up [ 219.999770][ T8703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.157366][ T966] uclogic 0003:28BD:0074.000F: interface is invalid, ignoring [ 220.306068][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.415390][ T5859] usb 5-1: USB disconnect, device number 6 [ 220.531108][ T5835] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 220.757329][ T5835] usb 6-1: Using ep0 maxpacket: 32 [ 220.772499][ T5835] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 220.788675][ T5835] usb 6-1: config 0 has no interface number 0 [ 220.808600][ T5835] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 220.828124][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=9 [ 220.840264][ T5835] usb 6-1: Product: syz [ 220.844503][ T5835] usb 6-1: Manufacturer: syz [ 220.867663][ T5835] usb 6-1: SerialNumber: syz [ 220.895536][ T5835] usb 6-1: config 0 descriptor?? [ 220.916955][ T5835] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 220.959262][ T8742] futex_wake_op: syz.0.871 tries to shift op by 32; fix this program [ 221.175160][ T5835] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 221.233488][ T5835] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 221.269638][ T8748] loop4: detected capacity change from 0 to 1024 [ 221.603816][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.874'. [ 221.634229][ T8753] block nbd0: not configured, cannot reconfigure [ 221.669949][ T8734] loop1: detected capacity change from 0 to 40427 [ 221.703877][ T8734] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 221.750991][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 221.752407][ T27] usb 6-1: USB disconnect, device number 5 [ 221.762084][ T8734] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 221.815127][ T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 221.816503][ T8734] F2FS-fs (loop1): invalid crc value [ 221.900995][ T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 221.936222][ T8734] F2FS-fs (loop1): Found nat_bits in checkpoint [ 221.944072][ T27] quatech2 6-1:0.51: device disconnected [ 221.965785][ T8759] loop0: detected capacity change from 0 to 256 [ 222.014588][ T8759] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.014608][ T8759] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 222.084186][ T8759] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 222.106265][ T8759] overlay: ./file0 is not a directory [ 222.170896][ T8734] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 222.170928][ T8734] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 222.299077][ T28] audit: type=1800 audit(1752516322.552:13): pid=8734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.869" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 222.381601][ T8771] ptrace attach of "./syz-executor exec"[5785] was attempted by " [ 222.603266][ T8775] netlink: 28 bytes leftover after parsing attributes in process `syz.5.880'. [ 223.978086][ T8779] loop4: detected capacity change from 0 to 40427 [ 224.031204][ T8779] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 224.059236][ T8779] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 224.105236][ T8779] F2FS-fs (loop4): invalid crc value [ 224.129066][ T8779] F2FS-fs (loop4): Found nat_bits in checkpoint [ 224.241736][ T5630] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 224.302256][ T5963] udevd[5963]: symlink '../../loop4' '/dev/disk/by-diskseq/393.tmp-b7:4' failed: Read-only file system [ 224.324416][ T8779] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 224.337704][ T8779] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 224.373259][ T8795] loop0: detected capacity change from 0 to 32768 [ 224.449271][ T5630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.491730][ T5630] usb 2-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 224.532554][ T28] audit: type=1800 audit(1752516324.792:14): pid=8779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.882" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 224.541060][ T8795] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 224.541060][ T8795] [ 224.564087][ T5630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.582823][ T5630] usb 2-1: config 0 descriptor?? [ 224.617731][ T5963] udevd[5963]: symlink '../../loop4' '/dev/disk/by-diskseq/393.tmp-b7:4' failed: Read-only file system [ 224.675646][ T8795] ERROR: (device loop0): remounting filesystem as read-only [ 224.684787][ T5963] udevd[5963]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 224.719900][ T8795] ERROR: (device loop0): jfs_unlink: [ 224.719900][ T8795] [ 224.739060][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/394.tmp-b7:0' failed: Read-only file system [ 224.760076][ T8822] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 224.760076][ T8822] [ 224.770777][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:0' failed: Read-only file system [ 225.043717][ T5630] wacom 0003:056A:0059.0010: hidraw0: USB HID v10.00 Device [HID 056a:0059] on usb-dummy_hcd.1-1/input0 [ 225.049153][ T5963] udevd[5963]: symlink '../../loop0' '/dev/disk/by-diskseq/394.tmp-b7:0' failed: Read-only file system [ 225.131873][ T5963] udevd[5963]: symlink '../../loop0' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:0' failed: Read-only file system [ 225.256019][ T5963] udevd[5963]: symlink '../../loop0' '/dev/disk/by-diskseq/394.tmp-b7:0' failed: Read-only file system [ 225.304037][ T5835] usb 2-1: USB disconnect, device number 17 [ 225.326594][ T8807] loop5: detected capacity change from 0 to 40427 [ 225.353458][ T8807] F2FS-fs (loop5): Invalid segment/section count (31 != 24 * 1) [ 225.390753][ T5795] udevd[5795]: symlink '../../loop0' '/dev/disk/by-diskseq/394.tmp-b7:0' failed: Read-only file system [ 225.401463][ T8807] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 225.445916][ T5798] udevd[5798]: symlink '../../loop4' '/dev/disk/by-diskseq/393.tmp-b7:4' failed: Read-only file system [ 225.480042][ T8807] F2FS-fs (loop5): heap/no_heap options were deprecated [ 225.546677][ T8807] F2FS-fs (loop5): invalid crc value [ 225.597351][ T8807] F2FS-fs (loop5): Found nat_bits in checkpoint [ 225.876598][ T8807] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 225.892357][ T8807] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 226.119126][ T8844] loop1: detected capacity change from 0 to 1024 [ 226.224588][ T7081] syz-executor: attempt to access beyond end of device [ 226.224588][ T7081] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.260361][ T7081] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 226.403346][ T48] hfsplus: b-tree write err: -5, ino 4 [ 226.664219][ T8859] loop0: detected capacity change from 0 to 512 [ 226.681732][ T8859] EXT4-fs: Ignoring removed nobh option [ 226.725268][ T8859] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 226.779394][ T8859] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 226.788924][ T8859] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #13: comm syz.0.898: casefold flag without casefold feature [ 226.810446][ T8859] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.898: couldn't read orphan inode 13 (err -117) [ 226.840599][ T8859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.075137][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.245455][ T8848] loop4: detected capacity change from 0 to 32768 [ 227.313696][ T8848] JBD2: Ignoring recovery information on journal [ 227.451389][ T8848] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 227.663996][ T8878] loop0: detected capacity change from 0 to 64 [ 227.766724][ T6976] ocfs2: Unmounting device (7,4) on (node local) [ 228.576216][ T8874] loop1: detected capacity change from 0 to 32768 [ 228.917824][ T8911] loop5: detected capacity change from 0 to 256 [ 229.019737][ T8914] loop0: detected capacity change from 0 to 512 [ 229.033615][ T8911] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 229.042937][ T8914] EXT4-fs: Ignoring removed nobh option [ 229.170368][ T8914] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.234115][ T8914] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.914: iget: bad i_size value: 38620345925642 [ 229.270806][ T8914] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.914: couldn't read orphan inode 15 (err -117) [ 229.344215][ T5963] udevd[5963]: symlink '../../loop5' '/dev/disk/by-diskseq/408.tmp-b7:5' failed: Read-only file system [ 229.350303][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-diskseq/405.tmp-b7:4' failed: Read-only file system [ 229.379976][ T8914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.443496][ T5963] udevd[5963]: symlink '../../loop5' '/dev/disk/by-diskseq/408.tmp-b7:5' failed: Read-only file system [ 229.532456][ T8926] loop4: detected capacity change from 0 to 64 [ 229.589637][ T5963] udevd[5963]: symlink '../../loop0' '/dev/disk/by-diskseq/409.tmp-b7:0' failed: Read-only file system [ 229.631113][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.675155][ T5798] udevd[5798]: symlink '../../loop5' '/dev/disk/by-diskseq/411.tmp-b7:5' failed: Read-only file system [ 229.705690][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-diskseq/412.tmp-b7:4' failed: Read-only file system [ 229.732785][ T5963] udevd[5963]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 229.749925][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 229.763978][ T6965] udevd[6965]: symlink '../../loop1' '/dev/disk/by-diskseq/410.tmp-b7:1' failed: Read-only file system [ 229.835649][ T8929] loop5: detected capacity change from 0 to 2048 [ 229.847441][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-diskseq/412.tmp-b7:4' failed: Read-only file system [ 229.952078][ T8929] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.442883][ T8949] Bluetooth: MGMT ver 1.22 [ 230.560418][ T5790] Bluetooth: hci1: command tx timeout [ 230.593317][ T8953] loop4: detected capacity change from 0 to 2048 [ 230.620284][ T5859] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 230.653055][ T8953] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 230.738491][ T8959] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.740558][ T8953] syz.4.925: attempt to access beyond end of device [ 230.740558][ T8953] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 230.848435][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.894996][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.930217][ T5859] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.951846][ T8953] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 230.975348][ T5859] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.991041][ T8953] Remounting filesystem read-only [ 230.996392][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.999614][ T8953] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 231.013702][ T5859] usb 6-1: config 0 descriptor?? [ 231.030978][ T8953] NILFS (loop4): error -5 truncating bmap (ino=16) [ 231.070437][ T5837] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 231.146458][ T6976] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 231.157330][ T6976] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 231.180112][ T6976] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 231.189317][ T6976] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 231.214422][ T6976] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 231.225665][ T6976] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 231.280707][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 231.293073][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.320241][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.340270][ T5837] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 231.349428][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.361980][ T8967] loop0: detected capacity change from 0 to 4096 [ 231.391619][ T5837] usb 2-1: config 0 descriptor?? [ 231.396791][ T8967] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 231.492987][ T5859] plantronics 0003:047F:FFFF.0011: unbalanced collection at end of report description [ 231.532899][ T5859] plantronics 0003:047F:FFFF.0011: parse failed [ 231.541919][ T5859] plantronics: probe of 0003:047F:FFFF.0011 failed with error -22 [ 231.597318][ T8967] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 231.661812][ T8967] ntfs3: loop0: ino=1e, "file1" failed to parse mft record [ 231.669785][ T8967] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 231.758384][ T8] usb 6-1: USB disconnect, device number 6 [ 231.870502][ T5837] aquacomputer_d5next 0003:0C70:F00A.0012: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.1-1/input0 [ 231.948548][ T8977] loop4: detected capacity change from 0 to 512 [ 231.998684][ T8977] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.936: casefold flag without casefold feature [ 232.037271][ T8977] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.936: couldn't read orphan inode 15 (err -117) [ 232.066381][ T8977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.118961][ T8983] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 11 [ 232.206979][ T8] usb 2-1: USB disconnect, device number 18 [ 232.301026][ T6976] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.842219][ T8985] loop0: detected capacity change from 0 to 32768 [ 232.864973][ T8985] (syz.0.938,8985,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.900011][ T8985] (syz.0.938,8985,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.980833][ T8985] JBD2: Ignoring recovery information on journal [ 233.137266][ T8985] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 233.164766][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 233.172926][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 233.191827][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 233.200365][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 233.264280][ T9010] sp0: Synchronizing with TNC [ 233.463579][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 233.469979][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 233.527474][ T5785] ocfs2: Unmounting device (7,0) on (node local) [ 233.953028][ T9005] ceph: No mds server is up or the cluster is laggy [ 234.000993][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 234.007112][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 234.057049][ T9026] loop1: detected capacity change from 0 to 128 [ 234.110963][ T9030] ucma_write: process 226 (syz.4.958) changed security contexts after opening file descriptor, this is not allowed. [ 234.388587][ T5963] udevd[5963]: symlink '../../loop0' '/dev/disk/by-diskseq/424.tmp-b7:0' failed: Read-only file system [ 234.456378][ T5795] udevd[5795]: symlink '../../loop5' '/dev/disk/by-diskseq/416.tmp-b7:5' failed: Read-only file system [ 234.495823][ T9039] loop5: detected capacity change from 0 to 256 [ 234.506759][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-diskseq/425.tmp-b7:1' failed: Read-only file system [ 234.533388][ T9039] exfat: Deprecated parameter 'namecase' [ 234.556181][ T9039] exfat: Deprecated parameter 'namecase' [ 234.567566][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.965'. [ 234.591155][ T9039] exfat: Deprecated parameter 'utf8' [ 234.593193][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-diskseq/425.tmp-b7:1' failed: Read-only file system [ 234.612871][ T5798] udevd[5798]: symlink '../../loop4' '/dev/disk/by-diskseq/422.tmp-b7:4' failed: Read-only file system [ 234.663557][ T9044] loop1: detected capacity change from 0 to 64 [ 234.681371][ T9039] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d) [ 234.693215][ T5795] udevd[5795]: symlink '../../loop5' '/dev/disk/by-diskseq/427.tmp-b7:5' failed: Read-only file system [ 234.713431][ T5798] udevd[5798]: symlink '../../loop0' '/dev/disk/by-diskseq/424.tmp-b7:0' failed: Read-only file system [ 234.729545][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-diskseq/428.tmp-b7:1' failed: Read-only file system [ 234.747039][ T5795] udevd[5795]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 234.799661][ T5963] udevd[5963]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system [ 234.848602][ T28] audit: type=1800 audit(1752516335.102:15): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.963" name="bus" dev="loop5" ino=1048674 res=0 errno=0 [ 234.899138][ T34] ------------[ cut here ]------------ [ 234.905160][ T34] kernel BUG at fs/hfs/inode.c:449! [ 234.933032][ T34] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 234.939181][ T34] CPU: 0 PID: 34 Comm: kworker/u4:2 Not tainted 6.6.98-syzkaller #0 [ 234.947195][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.957292][ T34] Workqueue: writeback wb_workfn (flush-7:1) [ 234.963535][ T34] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 234.969136][ T34] Code: c7 c1 00 03 ef 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 03 ef 96 e8 36 08 86 ff e9 6c fe ff ff e8 6c 59 2d ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 234.989394][ T34] RSP: 0018:ffffc90000aaf360 EFLAGS: 00010293 [ 234.995587][ T34] RAX: ffffffff82584d04 RBX: ffff88805b585628 RCX: ffff8880182f1e00 [ 235.003590][ T34] RDX: 0000000000000000 RSI: ffffffff8cf3a260 RDI: 0000000000000000 [ 235.011585][ T34] RBP: ffffc90000aaf4f0 R08: ffff8880182f1e00 R09: 0000000000000003 [ 235.019657][ T34] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 235.027738][ T34] R13: 1ffff92000155e70 R14: ffff88805b5855d8 R15: 0000000000000000 [ 235.035759][ T34] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 235.045137][ T34] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.051789][ T34] CR2: 00007f3c1e295000 CR3: 000000002f3cc000 CR4: 00000000003506f0 [ 235.059805][ T34] Call Trace: [ 235.063110][ T34] [ 235.066057][ T34] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 235.071473][ T34] ? __rwlock_init+0x150/0x150 [ 235.076265][ T34] __writeback_single_inode+0x705/0xee0 [ 235.081930][ T34] writeback_sb_inodes+0x77c/0xef0 [ 235.087077][ T34] ? queue_io+0x560/0x560 [ 235.091435][ T34] ? rcu_is_watching+0x15/0xb0 [ 235.096222][ T34] wb_writeback+0x450/0xba0 [ 235.100740][ T34] ? queue_io+0x2f1/0x560 [ 235.105108][ T34] ? percpu_ref_tryget+0x250/0x250 [ 235.110231][ T34] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 235.116403][ T34] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.121643][ T34] wb_workfn+0x3ff/0xe20 [ 235.125945][ T34] ? inode_wait_for_writeback+0x200/0x200 [ 235.131731][ T34] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 235.137749][ T34] ? read_lock_is_recursive+0x20/0x20 [ 235.143163][ T34] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.148405][ T34] ? process_scheduled_works+0x957/0x15b0 [ 235.154171][ T34] ? process_scheduled_works+0x957/0x15b0 [ 235.159937][ T34] process_scheduled_works+0xa45/0x15b0 [ 235.165537][ T34] ? assign_work+0x400/0x400 [ 235.170165][ T34] ? assign_work+0x39e/0x400 [ 235.174790][ T34] worker_thread+0xa55/0xfc0 [ 235.179407][ T34] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 235.185326][ T34] ? _raw_spin_unlock+0x40/0x40 [ 235.190197][ T34] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 235.196114][ T34] kthread+0x2fa/0x390 [ 235.200288][ T34] ? pr_cont_work+0x560/0x560 [ 235.204986][ T34] ? kthread_blkcg+0xd0/0xd0 [ 235.209598][ T34] ret_from_fork+0x48/0x80 [ 235.214216][ T34] ? kthread_blkcg+0xd0/0xd0 [ 235.218844][ T34] ret_from_fork_asm+0x11/0x20 [ 235.223657][ T34] [ 235.226710][ T34] Modules linked in: [ 235.260505][ T34] ---[ end trace 0000000000000000 ]--- [ 235.266144][ T34] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 235.271862][ T34] Code: c7 c1 00 03 ef 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 03 ef 96 e8 36 08 86 ff e9 6c fe ff ff e8 6c 59 2d ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 235.291690][ T34] RSP: 0018:ffffc90000aaf360 EFLAGS: 00010293 [ 235.297809][ T34] RAX: ffffffff82584d04 RBX: ffff88805b585628 RCX: ffff8880182f1e00 [ 235.307185][ T34] RDX: 0000000000000000 RSI: ffffffff8cf3a260 RDI: 0000000000000000 [ 235.315496][ T34] RBP: ffffc90000aaf4f0 R08: ffff8880182f1e00 R09: 0000000000000003 [ 235.323658][ T34] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 235.331826][ T34] R13: 1ffff92000155e70 R14: ffff88805b5855d8 R15: 0000000000000000 [ 235.340274][ T34] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 235.349486][ T34] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.356334][ T34] CR2: 00007f3c1efd0000 CR3: 0000000057ac2000 CR4: 00000000003506f0 [ 235.364431][ T34] Kernel panic - not syncing: Fatal exception [ 235.371283][ T34] Kernel Offset: disabled [ 235.375689][ T34] Rebooting in 86400 seconds..