last executing test programs: 2m22.307103658s ago: executing program 0 (id=550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000220000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2m22.132665627s ago: executing program 0 (id=552): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES16], 0x3, 0xa73, &(0x7f0000003cc0)="$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") ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000880)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00']}, @subvolid}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0186e86, &(0x7f0000000800)={@id={0x20000000, 0x0, @auto="060000001a04b9435da0352cc7411e9e"}}) 2m21.749530756s ago: executing program 0 (id=556): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x20, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 2m21.554289135s ago: executing program 0 (id=558): mkdir(&(0x7f0000000100)='./file0\x00', 0x100) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2m21.338146344s ago: executing program 0 (id=560): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r0}, 0x10) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 2m20.679833892s ago: executing program 0 (id=564): r0 = timerfd_create(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 2m20.521022462s ago: executing program 32 (id=564): r0 = timerfd_create(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 2m19.508972838s ago: executing program 2 (id=572): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x431a, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2m19.066513346s ago: executing program 2 (id=575): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x371e, &(0x7f0000000100)={0x0, 0x28be, 0x10, 0x2, 0x75}) r1 = eventfd(0x1ff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000180)=r1, 0x1) 2m18.830973616s ago: executing program 2 (id=577): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x14) 2m18.551931865s ago: executing program 2 (id=578): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x8, 0x4eb, &(0x7f0000000540)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') rmdir(&(0x7f0000000040)='./bus\x00') 2m18.015238093s ago: executing program 2 (id=580): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x48, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x48}}, 0x0) 2m16.478072817s ago: executing program 2 (id=585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000900000002000040"]) 2m16.372767127s ago: executing program 33 (id=585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000900000002000040"]) 2m10.591279517s ago: executing program 3 (id=605): mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000008000/0x3000)=nil) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 2m10.312786657s ago: executing program 3 (id=607): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) listen(r0, 0x0) close(r0) 2m10.130836756s ago: executing program 3 (id=609): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000540)='./file0\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x800000) 2m7.879106388s ago: executing program 3 (id=618): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=cp737,umask=0\x00\x00\x00\x00\x00\x00\x00@0800d=', @ANYRESHEX=0x0, @ANYBLOB=',integrity,errors=continue,discard,noquota\x00iocharset=cp850,grpquota,usrquota,uid=', @ANYRESHEX=0x0, @ANYBLOB=',quota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',noquota,usrquota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,subj_type=+-]{.&Q.,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',measure,\x00'], 0x5, 0x610f, &(0x7f0000002a00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 2m5.823125031s ago: executing program 3 (id=624): pipe2(&(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000040)) 2m4.627574717s ago: executing program 3 (id=636): r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x3be}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x120, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m4.461402406s ago: executing program 34 (id=636): r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x3be}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x120, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.92712031s ago: executing program 6 (id=1857): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) 2.552886178s ago: executing program 7 (id=1861): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x58) 2.444107718s ago: executing program 7 (id=1864): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000008c0)="0073c3b820d95ec0", 0x8, 0x800, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) 2.384356778s ago: executing program 6 (id=1865): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 2.301256257s ago: executing program 1 (id=1866): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4000009a, 0x0, 0xb869}]}) 2.215641397s ago: executing program 1 (id=1867): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x47}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40004143, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 2.147866126s ago: executing program 1 (id=1868): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001980)="5fb3450effde69bf04e3e44a973930a0b6f397ee7af6a9b00bee1bf4eb688386", 0x20}, {&(0x7f00000019c0)="48c2c8557113f61ff1aafba9c7e66173164c8ca0c15cbff5683fb4ddb6394595afbcbaaa377a4a5f830744e047edf851d62a66716dd1b4267d5ed18eb9f5c4f88793e82590b71922e22ef06265309b871cba49e7299e2c090c02bd10630588bdc3466f4f5bb8578a26c37021bbb564f50e373543dbd71abbcbe8e6e7bb3b26a9dd2f5ed56323a0055e2e30ed595dea33087b6392a8cabc9e5a07b064e79c7528a81ab8d7ee7aa5ff27ab7c51", 0xac}, {&(0x7f0000000380)='Tq', 0x2}, {&(0x7f0000001b00)="696c6a7b5ea3afd7819ee415dbdde5557921387803db572c10968b2e1fcb5d68baa44bba", 0x24}, {&(0x7f0000001c00)="5ca5b1dabcc26ad25d615b05179a9fd11e6653791ad22b90c11d51d82c5339db07573325f2a50b1f39be84a4ded40063e6538f23fbbb6e35546898cd11f3aed21d065dae1ca8fe6f98feeab1efe708ae36e99ef9540324c582f7f497944e4d88c571328536fa3082092fe0866359247a8cc4fa868e328224411de12869db981383d403e97e958db40152d168b100a3220ec4a243377a0dc1be323e588ac346ed86498d1878e5c8dcc063", 0xaa}, {&(0x7f0000001d00)="40a39684f731a649fe952deb2eff7fae7af9f2e92ddb69833700fafb1c2de6f1", 0x20}], 0x6}}], 0x1, 0x0) 2.116956816s ago: executing program 6 (id=1869): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1010000, &(0x7f0000000e40)=ANY=[@ANYBLOB='nobarrier,decompose,nls=cp936,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c626172726965722c756d61736b3d30303030303030303030303030303030303030343030342c0000a7b04339467661b236f69117d062071c62ba59c021917032b4bc3681eac13867d5802a6898aef3"], 0x0, 0x6e6, &(0x7f00000017c0)="$eJzs3U1sHGf9B/DvrNcbbyq52/77kj9CitWICBpI7CwlQUIiIIRyqCASl15N4jRWnDSyXZREiLhA4QgnlEMPRSgcekIckIo4IMoZCYl77pE4cIs4YDSzs/au353Edho+H2l2ntl5Xn7z22dmd8eJNsD/rPNvZXQpRc6fePNmuX3/Xnfu/r3utX45yaEkjaTZW6W4nhSfJOfSW/L/5ZN1d8Vm47zx4OMPjt/9qNvbatZLVb+xVbtVy1uMsFQvmUgyUq93qblZfxc36O/OrrouVuIuE3asnzg4aMvrLO2m+Q7OW+BpdycZGd3g+U5yOMlY/Tkg9dWhsc/hPXG7usoBAADA02lkuwrPP8zD3Mz4/oQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4ai95uBRb00+uWJFPXv/3+3rlZptQ423G18cZv971/ep0AAAAAAAAAA4MkbXS0efZiHuZnx/vZyUf3N/7Vq46Xq8bm8m4XMZD4nczPTWcxi5jOVjI4P9Nm6Ob24OD+1vuWvUrZcXl6+U7c8naRTNRlseXofjhsAAAAAAAAAnl0/zvmMH3QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwqEhGeqtqealf7qTRTDKWpFXWW0r+1C9/mv35oAMAAACAvdeu1+PFf3qF5aL6zv9K9b1/LO/mehYzm8XMZSaXqnsBvW/9jb8vdefu3+teK5f1HX/jn7uKo+oxyUje22TkyarGyystzufb+V5OZCIXMp/Z/CDTWcxMJtIuDyLTKdJp9+5edPpxDsc7Und1biiUC2tjO7pm+0gVSTuXM1vFdjIXW/3eGlWNIkfup5P0RvtDK1mToffK7BRfr+0wR5cGXq9f1vdlasvP77CPvdGpjnx0JSOTZe7rbLywce77djlP1o40lcbKPaiXVkcpN9eO1M/593eT88P1usz1z4Zz/qTt8lba2kycTqOefckrwzm/8bm7Lw43/sI//nLhSuP61SuXF07s4SHtqdF+YW0mugOZeHXr2VdnYq7MxNLOMzG69omxxziOJ6hVZ6N3YdvZ1fJbVWk6rw1MwXdyKTM5k8lM5Wwm89WcTndohr08lNdm99pwTqpzrbH++tbeIvhjnx+o9PNtKu+vMi8vDOR18ErXqfbVz5z7RSYHsvTi1rPvUd4Fmp+pC+UYP1l5x3kaDGWivjb3o+u/QW2SiV8vl48Lc9evzl+ZvrHD8Y7X6/K0fX/42vybxz6Yx1LOl/KK26y2qpy0+/Ol3Pd/K9EO56tV/8Wl166xbt/LK/s6Gc9svrPpmdqqP8Ot76m379UN93WrfUcG9g19ysk7mas+hawxsT9ZBWDHDr9+uNV+0P5b+8P2T9tX2m+OffPQ2UOfbWX0r80/jvyu8dvG14rX82F+lPGDjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4FC7duX52em5uZ38NC6xHHSmPbOvee21mH6SRbj1XUhdZeZ+MpKPxrbMtstLNHo/8+yRZ1Wo89RLH387mcyE+kw/4Pp1XPLI/sonmz32rjOs0sjA29gkdX6xxafd3TuTo99+/loebtDJwywDPu1OK1G6cWbt3+0uy16bdn3p65fvrsmbNnul+Z+vKpy7NzM5O9x4OOEtgLC7dujxx0DAAAAAAAAAAAAMDu1P/6f/GR/zNDc5s6rfmFjUc+ut+HCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHxKnX8ro0spMjV5crLcvn+vO1cu/fJqzWaSRpLih0nxSXIuvSWdge6KzcZ548HHHxy/+1F3ta9mv35jq3Y7s1QvmUgyUq+3d2iDbtb3d3Ggv6VHCq9YOcIyYcf6iYOD9t8AAAD//zrG8zg=") connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.&-]:'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2.102859367s ago: executing program 7 (id=1870): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x468, &(0x7f00000004c0)="$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") write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x1, 0x3, 0x1}) 2.035592326s ago: executing program 1 (id=1871): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000280)=ANY=[], 0x9, 0xc21, &(0x7f0000001e80)="$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") sync() mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2014c7f, 0x0) 1.975584256s ago: executing program 4 (id=1872): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0000083, 0x0, 0x100000000000000}]}) 1.904403006s ago: executing program 5 (id=1873): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1290}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x28, 0x6, 0x0, @empty, @local, {[], {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}]}}}}}}}}, 0x0) 1.729977725s ago: executing program 6 (id=1874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'pimreg1\x00'}) 1.718097365s ago: executing program 5 (id=1875): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x30, r2, 0x1, 0xffffffff, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4020000) 1.614325485s ago: executing program 5 (id=1876): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000440)=0x40, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0xffffff80, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000034780)=""/102391, &(0x7f0000000180)=0x18ff7) 1.418001614s ago: executing program 7 (id=1877): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640)=ANY=[], 0x45, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1.391715044s ago: executing program 5 (id=1878): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x28, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 1.371264414s ago: executing program 6 (id=1879): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3000005, 0x12, r0, 0x4c054000) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000180), 0x4) 1.224001294s ago: executing program 4 (id=1880): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000040, &(0x7f00000004c0)=ANY=[@ANYBLOB='gid=forget,uid=forget,gid=', @ANYRESDEC=0x0, @ANYBLOB=',lastblock=00000000000000000001,shortad,iocharset=iso8859-4,dmode=00000000000017777777777,noadinicb,novrs,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c00a98d67cf50cc6a2b47d753b4fbb5148c63f191586fe4eb6bc067a2ad9ace7d03000000ff6cbd4a1ea6e62d69233dc3a06ba913dd53bd7aff3b89a1cc7e917f37c3c3f317984e22f81efe4fe013092ffcf8a7e6f227f56e17a312b2ebacf9ff2ddde6e5d8bcb43b8003adacc50be5268ac2501ab6c14060be3d3b264f92a84a2391365abe690de2db9b51d2f4e93794a66d114c7d8cbce73ebeaa029faabb18b90a8daa101ec81467570fb15760f00dc3660a15ca878f389063b69432631f6008a8c2b70ab88d4feb0b06c24b57960e59d9b7cdf3463903b4465eed42"], 0xfa, 0xc2d, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) getdents64(r0, &(0x7f0000000000)=""/41, 0x29) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.222492524s ago: executing program 5 (id=1881): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000008c0)="0073c3b820d95ec0", 0x8, 0x800, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) 1.218806473s ago: executing program 7 (id=1890): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="edae00000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000038005080110001004abee339084eeef16f162471f40000000d0004005b073a8a2d20202e0a00000005000200000000000800030005ac0f"], 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.147059413s ago: executing program 6 (id=1882): syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x8008c4, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRES32], 0x1, 0x4436, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000140)={0x18, 0xfffffffffffffff5, 0x0, {0x2}}, 0x7a) lseek(r0, 0x0, 0x3) 1.122099213s ago: executing program 1 (id=1883): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) 1.098317273s ago: executing program 7 (id=1884): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000200)={[{@pqnoenforce}, {@pqnoenforce}, {@grpid}]}, 0x1, 0x9718, &(0x7f0000009800)="$eJzs/QeYJHWhcP/PAkvOoCKgIqAgKlmigSSIBCUKCpKTkgRUQKKgCCigGBDJOeecc84555xzDv9n2V3F9YDe93ffP/e+55zn2Z3p6qqa6u+nu2pmqqd7uQWXmm9gYPSBoU0xMGJPz37u+ps8sfigY89Y6ZlpFhlvrmGThy0wybCLkwwa9nGkgYGBkYatZ9i0sR476eSRBkZ5b/o/GmuMMQeNMzAw87CL8wz7OPvQDxM9Pny+d0doxA0d9PeLg3Ya+u+9xhvyJYZ8Muser807MDAw/vuWH7LIjP9yQ6UtN+9CC/7D6u9uQ6wGD/v8/f9GHfpvogcHBia6b4DvH++fd9BHcJOGfM3xb7958+k/gq/9v67l5l1o4RH8hzwWRx42bfYhj/ERH4PGRryfn3r4Mc8NG8L37m8DA0N2cf/0WPlf0XLzLrjowAfv5weumOONZ999b7851nMDA2M9PzAw1gsDA2O9ODAw1ksDA2O9/FG71P+35p1vlvmGPN6HXx7GPvy+PD7dL16Z+3MnDwwMjDZ0nrHeGXq8GHuK4ceEqqqq+p/dvPPNMj8c/0f/sOP/Ezfv9mLH/6qqqv+9LTzvfLMMOY6PcPwf+8OO/1NtP3ihob/7n2f2oUu989HeiKqqqvovteDCePwf/8OO/2vePfKOHf+rqqr+97bkYu8d/8ce4fg/8Ycd/wdPNs4Dw+Yb/n3D2+9b5XvPHxs2/c33TR/5fdPfeN/0we9bz/vnH/V901973/TRBwbGemzY9Lf+MXms54Ys86/rGeuVfzwfZ5JR3jf91fdNH/V9018btk1Dpo/2vulvv2/+0f8xfewh/00x7Ou+/iFDXVVV9T+mJWdZcP6B9z3Pftjk4U/sx+eFXvLu0q98VNtbVVVVVVVVVf/13nn6jHP+8Tffnx5439+u/v1vWIf9XmDQceddd91HtqH/Mxr0r78P2eaj3qb/rw1xHv2IKQYG1l/mo96U+gj6X/O36vV/pfzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHnP//+9//73D5ct8cNuucFxw90iL/WHKSgXWGffb07Oeuv85HsO0fQf+vnv8fWGfQwMAw3/GHWC4+75JLTzswMLDISEdfMNvA36+bY8h1c0848nt/zDkwMO17/w+e5APWPOxdFt57c4eJ/76O495b/8Lv7j/yoBE24n1NcMrBB6+93Kuzjvhxmg++HX9/f4lXJzp4iuF/yzLSCDON/gELD1//8NsyovOwbZ92yLbPsMl6G86w8Wabf3md9VZZa4211lh/lplnn3mO2Wecc85ZZlhznXXXmHHo/x8wZkPfumLk/2TMxh5xzJ6e9/1jNuJt+6Ax+9d39finVby3xkNnn/Ky4WM2yn9xzEb+8DGbYp1hX2iSgcEDK783NIMGBiYZZfDApkMuzDTawMAkg4fNO8mQeb864UgDA7v944YOGvZio0PnGbTNkHn+h71vyZzDRmTL4fON+DrrI27ov3vfkjvnO2zKEd635P9W/0fH/3/xmmPQ3wdq+BsgDJtnqNdH/D4T/7K9U4zy3kHug7b3Q14X573o/jXKHHNs9d/1uji0vWN/yPZ+yOv4feD2zrvK148buqr/tu0dYV+36NAr/5N93cCH7+tGpuXXuPpTI+7rFvngTfynx/HwMRpthJk+aF932xKnbTNk/QMfvq9bdJ1hLx7wj33dSAMDk4w8fF83ZMc36uCB3YZcmHnIhdEGDxw25MIs710YY+C8IRemX22DdVcf9N7LDAxb74xD1jvPhIPec99muul2f3f3d98dZdi2vDLWP2/rsPvHFO8/ns874dDBHL7s8PUOmXX4emfcfOh1ow5b76v/hfUOX5a297UVhl432rD1vjbCegd/yHqHL/svj4dpB/3TE1Vhf/ORvq8RPX5H/5Dt/ZDX4cb725Bp+26y69X/Da/DPeiDtneUD9/eD3rfkA/c3u32nGvn/67XDaf72W3TDL2vjD7sfvb2f+H+O3zZEfdjQ18IZOhuf/T/ZD82xb/sx7YdeaQRBvt9fdD3bKvD/EM/n+Tva7t7++u+MHzsB4+w3n/3Pdv7bssg2I+NP8LPc4O23m9gEI35bnsOWvWdfzPmgwf++WeL4WM+fNkPG/PR/pMxn/zDx/w//T552qmGXj94hO1//5gfPDDbmcPHfNQR1vvvxny0Dz92/OuYDwwMpjF/7qGh4/Zh+9MPGvPhyw4f8yFfZ+4JRxkY8kP+1MPGfNT/ZMwn+e+5n48J8w/9fI2/T5r7sfvPGT7mI47xvxvzUf+LY77VfX+/n0/93nVTjjQw6qgDm66yySYbzTT0/+EXZx76P++LTrt06Dh/2LH0g4yGL/thj4tR/hOj8f8jo0H/zmjSUT7I6B8PrYv3XOTs/9N90Sj/VaPzeF+06QlDx+3Dvi/6oDEfviwdByd+3/Ij/hz6Ia+fhbdpyLR1J1t+/+GrHLbYR/n6WcN/3v1f+fpZw38nuc6IO/n6T+v3/+7yd5e/u/zd5S/uA87/TzH8/P9Duyy14rAfOgc/tux493/U2/sR9//0+f9hvv90/v/+8ZZ9bMiPVsOu+9Dzs0Pn+R95fnb2oR8menz4fCOeHxxxQ//d+dlX7/zWLP9/Oj/7f9Twx+p/8HNx+393+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uA84/z/j8OcBTLXYOYsMOxE6eIEtltn9o97ej7j/p8//D/P9p/P/uy+zxQIjDfz9ug89/z90Hsf5/51Gnv/A/8nn/4c/Vjv/X/+m/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Aec/59n+PMAbpxh/0OGPx/gkMemX/qj3t6PuP9Xz//3/v/e2v+7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xQ07/z8wwtskfrf7BQbn//939wH+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL//fyxyz+y+WPWfyXzx+z+H8/f8zi/4P8MYv/CvljFv8V88cs/j/MH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/R/ljFv8f549Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/T/LHLP4b5Y9Z/DfOH7P4b5I/ZvH/af6Yxf9n+WMW/5/nj1n8N80fs/hvlj9m8d88f8zi/4v8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8zi/8v8MYv/dvljFv/t88cs/r/KH7P4/zp/zOK/Q/6Yxf83+WMW/x3zxyz+O+WPWfx3zh+z+P82f8zi/7v8MYv/LvljFv9d88cs/rvlj1n8f58/ZvH/Q/6YxX/3/DGL/x/zxyz+f8ofs/j/OX/M4v+X/DGL/x75Yxb/v+aPWfz3zB+z+P8tf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMX/7fwxi/87+WMW/3fzxyT+gwbyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyx/zOL/8fwxi/8n8scs/pPkj1n8P5k/ZvGfNH/M4j9Z/pjFf/L8MYv/p/LHLP6fzh+z+H8mf8ziP0X+mMX/s/ljFv8p88cs/lPlj1n8p84fs/h/Ln/M4v/5/DGL/zT5Yxb/afPHLP5fyB+z+E+XP2bx/2L+mMX/S/ljFv8v549Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/l/JH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/l/NH7P4fy1/zOL/9fwxi/838scs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMX/m/ljFv8F88cs/gvlj1n8v5U/ZvFfOH/M4v/t/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4fyd/zOL/3fwxi/8S+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/vfwxi/9y+WMW/+Xzxyz+388fs/j/IH/M4r9C/pjFf8X8MYv/D/PHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8f9R/pjF/8f5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4v+T/DGL/0b5Yxb/jfPHLP6b5I9Z/H+aP2bx/1n+mMX/5/ljFv9N88cs/pvlj1n8N88fs/j/In/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/j/Mn/M4r9d/pjFf/v8MYv/r/LHLP6/zh+z+O+QP2bx/03+mMV/x/wxi/9O+WMW/53zxyz+v80fs/j/Ln/M4r9L/pjFf9f8MYv/bvljFv/f549Z/P+QP2bx3z1/zOL/x/wxi/+f8scs/n/OH7P4/yV/zOK/R/6Yxf+v+WMW/z3zxyz+f8sfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxif97n+b/r1n8B+WPWfxHyh+z+I+cP2bxHyV/zOI/OH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bx/1j+mMX/4/ljFv9P5I9Z/CfJH7P4fzJ/zOI/af6YxX+y/DGL/+T5Yxb/T+WPWfw/nT9m8f9M/pjFf4r8MYv/Z/PHLP5T5o9Z/KfKH7P4T50/ZvH/XP6Yxf/z+WMW/2nyxyz+0+aPWfy/kD9m8Z8uf8zi/8X8MYv/l/LHLP5fzh+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+SP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/L+aP2bx/1r+mMX/6/ljFv9v5I9Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/N/PHLP4L5o9Z/BfKH7P4fyt/zOK/cP6Yxf/b+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bx/07+mMX/u/ljFv8l8scs/kvmj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMX/e/ljFv/l8scs/svnj1n8v58/ZvH/Qf6YxX+F/DGL/4r5Yxb/H+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4v+j/DGL/4/zxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6Yxf8n+WMW/43yxyz+G+ePWfw3yR+z+P80f8zi/7P8MYv/z/PHLP6b5o9Z/DfLH7P4b54/ZvH/Rf6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvH/Zf6YxX+7/DGL//b5Yxb/X+WPWfx/nT9m8d8hf8zi/5v8MYv/jvljFv+d8scs/jvnj1n8f5s/ZvH/Xf6YxX+X/DGL/675Yxb/3fLHLP6/zx+z+P8hf8ziv3v+mMX/j/ljFv8/5Y9Z/P+cP2bx/0v+mMV/j/wxi/9f88cs/nvmj1n8/5Y/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjF/538MYv/u/ljEv+RB/LHLP6D8scs/iPlj1n8R84fs/iPkj9m8R+cP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/h/LH/M4v/x/DGL/yfyxyz+k+SPWfw/mT9m8Z80f8ziP1n+mMV/8vwxi/+n8scs/p/OH7P4fyZ/zOI/Rf6Yxf+z+WMW/ynzxyz+U+WPWfynzh+z+H8uf8zi//n8MYv/NPljFv9p88cs/l/IH7P4T5c/ZvH/Yv6Yxf9L+WMW/y/nj1n8p88fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+X8kfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+C+WPWfy/lT9m8V84f8zi/+38MYv/IvljFv9F88cs/ovlj1n8F88fs/h/J3/M4v/d/DGL/xL5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4v+9/DGL/3L5Yxb/5fPHLP7fzx+z+P8gf8ziv0L+mMV/xfwxi/8P88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bx/1H+mMX/x/ljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8zi/5P8MYv/RvljFv+N88cs/pvkj1n8f5o/ZvH/Wf6Yxf/n+WMW/03zxyz+m+WPWfw3zx+z+P8if8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+P8yf8ziv13+mMV/+/wxi/+v8scs/r/OH7P475A/ZvH/Tf6YxX/H/DGL/075Yxb/nfPHLP6/zR+z+P8uf8ziv0v+mMV/1/wxi/9u+WMW/9/nj1n8/5A/ZvHfPX/M4v/H/DGL/5/yxyz+f84fs/j/JX/M4r9H/pjF/6/5Yxb/PfPHLP5/yx+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGJ/ygD+WMW/0H5Yxb/kfLHLP4j549Z/EfJH7P4D84fs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/D+WP2bx/3j+mMX/E/ljFv9J8scs/p/MH7P4T5o/ZvGfLH/M4j95/pjF/1P5Yxb/T+ePWfw/kz9m8Z8if8zi/9n8MYv/lPljFv+p8scs/lPnj1n8P5c/ZvH/fP6YxX+a/DGL/7T5Yxb/L+SPWfynyx+z+H8xf8zi/6X8MYv/l/PHLP7T549Z/GfIH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv+v5I9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/838MYv/gvljFv+F8scs/t/KH7P4L5w/ZvH/dv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/L+TP2bx/27+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bx/17+mMV/ufwxi//y+WMW/+/nj1n8f5A/ZvFfIX/M4r9i/pjF/4f5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/j/KH/M4v/j/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvH/Sf6YxX+j/DGL/8b5Yxb/TfLHLP4/zR+z+P8sf8zi//P8MYv/pvljFv/N8scs/pvnj1n8f5E/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8f5k/ZvHfLn/M4r99/pjF/1f5Yxb/X+ePWfx3yB+z+P8mf8ziv2P+mMV/p/wxi//O+WMW/9/mj1n8f5c/ZvHfJX/M4r9r/pjFf7f8MYv/7/PHLP5/yB+z+O+eP2bx/2P+mMX/T/ljFv8/549Z/P+SP2bx3yN/zOL/1/wxi/+e+WMW/7/lj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf8zi/27+mMR/8ED+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/j+WPWfw/nj9m8f9E/pjFf5L8MYv/J/PHLP6T5o9Z/CfLH7P4T54/ZvH/VP6Yxf/T+WMW/8/kj1n8p8gfs/h/Nn/M4j9l/pjFf6r8MYv/1PljFv/P5Y9Z/D+fP2bxnyZ/zOI/bf6Yxf8L+WMW/+nyxyz+X8wfs/h/KX/M4v/l/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjF/yv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjFf6H8MYv/t/LHLP4L549Z/L+dP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/7+SPWfy/mz9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfy/lz9m8V8uf8ziv3z+mMX/+/ljFv8f5I9Z/FfIH7P4r5g/ZvH/Yf6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/j/KH7P4/zh/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/H+SP2bx3yh/zOK/cf6YxX+T/DGL/0/zxyz+P8sfs/j/PH/M4r9p/pjFf7P8MYv/5vljFv9f5I9Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv9f5o9Z/LfLH7P4b58/ZvH/Vf6Yxf/X+WMW/x3yxyz+v8kfs/jvmD9m8d8pf8ziv3P+mMX/t/ljFv/f5Y9Z/HfJH7P475o/ZvHfLX/M4v/7/DGL/x/yxyz+u+ePWfz/mD9m8f9T/pjF/8/5Yxb/v+SPWfz3yB+z+P81f8ziv2f+mMX/b/ljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj1n838kfs/i/mz8m8R91IH/M4j8of8ziP1L+mMV/5Pwxi/8o+WMW/8H5Yxb/UfPHLP6j5Y9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi//H8scs/h/PH7P4fyJ/zOI/Sf6Yxf+T+WMW/0nzxyz+k+WPWfwnzx+z+H8qf8zi/+n8MYv/Z/LHLP5T5I9Z/D+bP2bxnzJ/zOI/Vf6YxX/q/DGL/+fyxyz+n88fs/hPkz9m8Z82f8zi/4X8MYv/dPljFv8v5o9Z/L+UP2bx/3L+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/lfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOL/1fwxi//X8scs/l/PH7P4fyN/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOK/UP6Yxf9b+WMW/4Xzxyz+384fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/938scs/t/NH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/t/LH7P4L5c/ZvFfPn/M4v/9/DGL/w/yxyz+K+SPWfxXzB+z+P8wf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/H+WPWfx/nD9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+P8kfs/hvlD9m8d84f8ziv0n+mMX/p/ljFv+f5Y9Z/H+eP2bx3zR/zOK/Wf6YxX/z/DGL/y/yxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/y/zxyz+2+WPWfy3zx+z+P8qf8zi/+v8MYv/DvljFv/f5I9Z/HfMH7P475Q/ZvHfOX/M4v/b/DGL/+/yxyz+u+SPWfx3zR+z+O+WP2bx/33+mMX/D/ljFv/d88cs/n/MH7P4/yl/zOL/5/wxi/9f8scs/nvkj1n8/5o/ZvHfM3/M4v+3/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9Z/N/NH5P4jzaQP2bxH5Q/ZvEfKX/M4j9y/pjFf5T8MYv/4Pwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjF/2P5Yxb/j+ePWfw/kT9m8Z8kf8zi/8n8MYv/pPljFv/J8scs/pPnj1n8P5U/ZvH/dP6Yxf8z+WMW/ynyxyz+n80fs/hPmT9m8Z8qf8ziP3X+mMX/c/ljFv/P549Z/KfJH7P4T5s/ZvH/Qv6YxX+6/DGL/xfzxyz+X8ofs/h/OX/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f9K/pjFf7b8MYv/7PljFv858scs/nPmj1n858ofs/jPnT9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+38wfs/gvmD9m8V8of8zi/638MYv/wvljFv9v549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjF/zv5Yxb/7+aPWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/7+WPWfyXyx+z+C+fP2bx/37+mMX/B/ljFv8V8scs/ivmj1n8f5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+P8scs/j/OH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv+f5I9Z/DfKH7P4b5w/ZvHfJH/M4v/T/DGL/8/yxyz+P88fs/hvmj9m8d8sf8ziv3n+mMX/F/ljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/l/ljFv/t8scs/tvnj1n8f5U/ZvH/df6YxX+H/DGL/2/yxyz+O+aPWfx3yh+z+O+cP2bx/23+mMX/d/ljFv9d8scs/rvmj1n8d8sfs/j/Pn/M4v+H/DGL/+75Yxb/P+aPWfz/lD9m8f9z/pjF/y/5Yxb/PfLHLP5/zR+z+O+ZP2bx/1v+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyz+7+aPSfxHH8gfs/gPyh+z+I+UP2bxHzl/zOI/Sv6YxX9w/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOL/sfwxi//H88cs/p/IH7P4T5I/ZvH/ZP6YxX/S/DGL/2T5Yxb/yfPHLP6fyh+z+H86f8zi/5n8MYv/FPljFv/P5o9Z/KfMH7P4T5U/ZvGfOn/M4v+5/DGL/+fzxyz+0+SPWfynzR+z+H8hf8ziP13+mMX/i/ljFv8v5Y9Z/L+cP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fyV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv9v5o9Z/BfMH7P4L5Q/ZvH/Vv6YxX/h/DGL/7fzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOL/nfwxi/9388cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMV/2fwxi//38scs/svlj1n8l88fs/h/P3/M4v+D/DGL/wr5Yxb/FfPHLP4/zB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/0f5Yxb/H+ePWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0/yxyz+G+WPWfw3zh+z+G+SP2bx/2n+mMX/Z/ljFv+f549Z/DfNH7P4b5Y/ZvHfPH/M4v+L/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/L/DGL/3b5Yxb/7fPHLP6/yh+z+P86f8ziv0P+mMX/N/ljFv8d88cs/jvlj1n8d84fs/j/Nn/M4v+7/DGL/y75Yxb/XfPHLP675Y9Z/H+fP2bx/0P+mMV/9/wxi/8f88cs/n/KH7P4/zl/zOL/l/wxi/8e+WMW/7/mj1n898wfs/j/LX/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYv/O/ljFv9388ck/mMM5I9Z/Aflj1n8R8ofs/iPnD9m8R8lf8ziPzh/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8f9Y/pjF/+P5Yxb/T+SPWfwnyR+z+H8yf8ziP2n+mMV/svwxi//k+WMW/0/lj1n8P50/ZvH/TP6YxX+K/DGL/2fzxyz+U+aPWfynyh+z+E+dP2bx/1z+mMX/8/ljFv9p8scs/tPmj1n8v5A/ZvGfLn/M4v/F/DGL/5fyxyz+X84fs/hPnz9m8Z8hf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/kj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfy/mj9m8f9a/pjF/+v5Yxb/b+SPWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/zfzxyz+C+aPWfwXyh+z+H8rf8ziv3D+mMX/2/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8f9O/pjF/7v5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjF/3v5Yxb/5fLHLP7L549Z/L+fP2bx/0H+mMV/hfwxi/+K+WMW/x/mj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOL/o/wxi/+P88cs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMX/J/ljFv+N8scs/hvnj1n8N8kfs/j/NH/M4v+z/DGL/8/zxyz+m+aPWfw3yx+z+G+eP2bx/0X+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/2X+mMV/u/wxi//2+WMW/1/lj1n8f50/ZvHfIX/M4v+b/DGL/475Yxb/nfLHLP47549Z/H+bP2bx/13+mMV/l/wxi/+u+WMW/93yxyz+v88fs/j/IX/M4r97/pjF/4/5Yxb/P+WPWfz/nD9m8f9L/pjFf4/8MYv/X/PHLP575o9Z/P+WP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGL/7v5YxL/MQfyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyx/zOL/8fwxi/8n8scs/pPkj1n8P5k/ZvGfNH/M4j9Z/pjFf/L8MYv/p/LHLP6fzh+z+H8mf8ziP0X+mMX/s/ljFv8p88cs/lPlj1n8p84fs/h/Ln/M4v/5/DGL/zT5Yxb/afPHLP5fyB+z+E+XP2bx/2L+mMX/S/ljFv8v549Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/l/JH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/l/NH7P4fy1/zOL/9fwxi/838scs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMX/m/ljFv8F88cs/gvlj1n8v5U/ZvFfOH/M4v/t/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4fyd/zOL/3fwxi/8S+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/vfwxi/9y+WMW/+Xzxyz+388fs/j/IH/M4r9C/pjFf8X8MYv/D/PHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8f9R/pjF/8f5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4v+T/DGL/0b5Yxb/jfPHLP6b5I9Z/H+aP2bx/1n+mMX/5/ljFv9N88cs/pvlj1n8N88fs/j/In/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/j/Mn/M4r9d/pjFf/v8MYv/r/LHLP6/zh+z+O+QP2bx/03+mMV/x/wxi/9O+WMW/53zxyz+v80fs/j/Ln/M4r9L/pjFf9f8MYv/bvljFv/f549Z/P+QP2bx3z1/zOL/x/wxi/+f8scs/n/OH7P4/yV/zOK/R/6Yxf+v+WMW/z3zxyz+f8sfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxif9YA/ljFv9B+WMW/5Hyxyz+I+ePWfxHyR+z+A/OH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfw/lj9m8f94/pjF/xP5Yxb/SfLHLP6fzB+z+E+aP2bxnyx/zOI/ef6Yxf9T+WMW/0/nj1n8P5M/ZvGfIn/M4v/Z/DGL/5T5Yxb/qfLHLP5T549Z/D+XP2bx/3z+mMV/mvwxi/+0+WMW/y/kj1n8p8sfs/h/MX/M4v+l/DGL/5fzxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/r+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/hfLHLP7fyh+z+C+cP2bx/3b+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfy/kz9m8f9u/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/gvmz9m8f9e/pjFf7n8MYv/8vljFv/v549Z/H+QP2bxXyF/zOK/Yv6Yxf+H+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4/yh/zOL/4/wxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx/0n+mMV/o/wxi//G+WMW/03yxyz+P80fs/j/LH/M4v/z/DGL/6b5Yxb/zfLHLP6b549Z/H+RP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/H+ZP2bx3y5/zOK/ff6Yxf9X+WMW/1/nj1n8d8gfs/j/Jn/M4r9j/pjFf6f8MYv/zvljFv/f5o9Z/H+XP2bx3yV/zOK/a/6YxX+3/DGL/+/zxyz+f8gfs/jvnj9m8f9j/pjF/0/5Yxb/P+ePWfz/kj9m8d8jf8zi/9f8MYv/nvljFv+/5Y9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J3/M4v9u/pjEf+yB/DGL/6D8MYv/SPljFv+R88cs/qPkj1n8B+ePWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/h/LH7P4fzx/zOL/ifwxi/8k+WMW/0/mj1n8J80fs/hPlj9m8Z88f8zi/6n8MYv/p/PHLP6fyR+z+E+RP2bx/2z+mMV/yvwxi/9U+WMW/6nzxyz+n8sfs/h/Pn/M4j9N/pjFf9r8MYv/F/LHLP7T5Y9Z/L+YP2bx/1L+mMX/y/ljFv/p88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9X8scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/9C+WMW/2/lj1n8F84fs/h/O3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/t/JH7P4fzd/zOK/RP6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4fy9/zOK/XP6YxX/5/DGL//fzxyz+P8gfs/ivkD9m8V8xf8zi/8P8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfx/lD9m8f9x/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/j/JH/M4r9R/pjFf+P8MYv/JvljFv+f5o9Z/H+WP2bx/3n+mMV/0/wxi/9m+WMW/83zxyz+v8gfs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+v8wfs/hvlz9m8d8+f8zi/6v8MYv/r/PHLP475I9Z/H+TP2bx3zF/zOK/U/6YxX/n/DGL/2/zxyz+v8sfs/jvkj9m8d81f8ziv1v+mMX/9/ljFv8/5I9Z/HfPH7P4/zF/zOL/p/wxi/+f88cs/n/JH7P475E/ZvH/a/6YxX/P/DGL/9/yxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TP2bxfzd/TOI/zkD+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/j+WPWfw/nj9m8f9E/pjFf5L8MYv/J/PHLP6T5o9Z/CfLH7P4T54/ZvH/VP6Yxf/T+WMW/8/kj1n8p8gfs/h/Nn/M4j9l/pjFf6r8MYv/1PljFv/P5Y9Z/D+fP2bxnyZ/zOI/bf6Yxf8L+WMW/+nyxyz+X8wfs/h/KX/M4v/l/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjF/yv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjFf6H8MYv/t/LHLP4L549Z/L+dP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/7+SPWfy/mz9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfy/lz9m8V8uf8ziv3z+mMX/+/ljFv8f5I9Z/FfIH7P4r5g/ZvH/Yf6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/j/KH7P4/zh/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/H+SP2bx3yh/zOK/cf6YxX+T/DGL/0/zxyz+P8sfs/j/PH/M4r9p/pjFf7P8MYv/5vljFv9f5I9Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv9f5o9Z/LfLH7P4b58/ZvH/Vf6Yxf/X+WMW/x3yxyz+v8kfs/jvmD9m8d8pf8ziv3P+mMX/t/ljFv/f5Y9Z/HfJH7P475o/ZvHfLX/M4v/7/DGL/x/yxyz+u+ePWfz/mD9m8f9T/pjF/8/5Yxb/v+SPWfz3yB+z+P81f8ziv2f+mMX/b/ljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj1n838kfs/i/mz8m8R93IH/M4j8of8ziP1L+mMV/5Pwxi/8o+WMW/8H5Yxb/UfPHLP6j5Y9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi//H8scs/h/PH7P4fyJ/zOI/Sf6Yxf+T+WMW/0nzxyz+k+WPWfwnzx+z+H8qf8zi/+n8MYv/Z/LHLP5T5I9Z/D+bP2bxnzJ/zOI/Vf6YxX/q/DGL/+fyxyz+n88fs/hPkz9m8Z82f8zi/4X8MYv/dPljFv8v5o9Z/L+UP2bx/3L+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/lfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOL/1fwxi//X8scs/l/PH7P4fyN/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOK/UP6Yxf9b+WMW/4Xzxyz+384fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/938scs/t/NH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/t/LH7P4L5c/ZvFfPn/M4v/9/DGL/w/yxyz+K+SPWfxXzB+z+P8wf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/H+WPWfx/nD9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+P8kfs/hvlD9m8d84f8ziv0n+mMX/p/ljFv+f5Y9Z/H+eP2bx3zR/zOK/Wf6YxX/z/DGL/y/yxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/y/zxyz+2+WPWfy3zx+z+P8qf8zi/+v8MYv/DvljFv/f5I9Z/HfMH7P475Q/ZvHfOX/M4v/b/DGL/+/yxyz+u+SPWfx3zR+z+O+WP2bx/33+mMX/D/ljFv/d88cs/n/MH7P4/yl/zOL/5/wxi/9f8scs/nvkj1n8/5o/ZvHfM3/M4v+3/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9Z/N/NH5P4jzeQP2bxH5Q/ZvEfKX/M4j9y/pjFf5T8MYv/4Pwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjF/2P5Yxb/j+ePWfw/kT9m8Z8kf8zi/8n8MYv/pPljFv/J8scs/pPn//9jjx4MwDAAIADW1gK1bdu2bdu2bdu2bdu27TZOFvgJ8ncrXNTyP6n/qOV/Mv9Ry//k/qOW/yn8Ry3/U/qPWv6n8h+1/E/tP2r5n8Z/1PI/rf+o5X86/1HL//T+o5b/GfxHLf8z+o9a/mfyH7X8z+w/avmfxX/U8j+r/6jlfzb/Ucv/7P6jlv85/Ect/3P6j1r+5/IftfzP7T9q+Z/Hf9TyP6//qOV/Pv9Ry//8/qOW/wX8Ry3/C/qPWv4X8h+1/C/sP2r5X8R/1PK/qP+o5X8x/1HL/+L+o5b/JfxHLf9L+o9a/pfyH7X8L+0/avlfxn/U8r+s/6jlfzn/Ucv/8v6jlv8V/Ect/yv6j1r+V/Iftfyv7D9q+V/Ff9Tyv6r/qOV/Nf9Ry//q/qOW/zX8Ry3/a/qPWv7X8h+1/K/tP2r5X8d/1PK/rv+o5X89/1HL//r+o5b/DfxHLf8b+o9a/jfyH7X8b+w/avnfxH/U8r+p/6jlfzP/Ucv/5v6jlv8t/Ect/1v6j1r+t/Iftfxv7T9q+d/Gf9Tyv63/qOV/O/9Ry//2/qOW/x38Ry3/O/qPWv538h+1/O/sP2r538V/1PK/q/+o5X83/1HL/+7+o5b/PfxHLf97+o9a/vfyH7X87+0/avnfx3/U8r+v/6jlfz//Ucv//v6jlv8D/Ect/wf6j1r+D/Iftfwf7D9q+T/Ef9Tyf6j/qOX/MP9Ry//h/qOW/yP8Ry3/R/qPWv6P8h+1/B/tP2r5P8Z/1PJ/rP+o5f84/1HL//H+o5b/E/xHLf8n+o9a/k/yH7X8n+w/avk/xX/U8n+q/6jl/zT/Ucv/6f6jlv8z/Ect/2f6j1r+z/Iftfyf7T9q+T/Hf9Tyf67/qOX/PP9Ry//5/qOW/wv8Ry3/F/qPWv4v8h+1/F/sP2r5v8R/1PJ/qf+o5f8y/1HL/+X+o5b/K/xHLf9X+o9a/q/yH7X8X+0/avm/xn/U8n+t/6jl/zr/Ucv/9f6jlv8b/Ect/zf6j1r+b/Iftfzf7D9q+b/Ff9Tyf6v/qOX/Nv9Ry//t/qOW/zv8Ry3/d/qPWv7v8h+1/N/tP2r5v8d/1PJ/r/+o5f8+/1HL//3+o5b/B/xHLf8P+o9a/h/yH7X8P+w/avl/xH/U8v+o/6jl/zH/Ucv/4/6jlv8n/Ect/0/6j1r+n/Iftfw/7T9q+X/Gf9Ty/6z/qOX/Of9Ry//z/qOW/xf8Ry3/L/qPWv5f8h+1/L/sP2r5f8V/1PL/qv+o5f81/1HL/+v+o5b/N/xHLf9v+o9a/t/yH7X8v+0/avl/x3/U8v+u/6jl/z3/Ucv/+/6jlv8P/Ect/x/6j1r+P/Iftfx/7D9q+f/Ef9Ty/6n/qOX/M/9Ry//n/qOW/y/8Ry3/X/qPWv6/8h+1/H/tP2r5/8Z/1PL/rf+o5f87/1HL//f+o5b/H/xHLf8/+o9a/n/yH7X8/+w/avn/xX/U8v+r/6jl/zf/Ucv/7/6jlv8//Ect/3/6j1r+//Iftfz/7T9q+f/Hf9Ty/6//qOX/P/9Ry////qOW/wH+o5b/gf6jlv9B/qOW/8H+o5b/If6jlv+h/qOW/2H+o5b/4f6jkv9JRvEftfyP6j9q+R/Nf9TyP7r/qOV/DP9Ry/+Y/qOW/7H8Ry3/Y/uPWv7H8R+1/I/rP2r5H89/1PI/vv+o5X8C/1HL/4T+o5b/ifxHLf8T+49Gun8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGsG//MV7XBRzHP/cTxQIU0rcUP4LyUIPjh3H8KJm1GifrGOmarqUwOFE71OBW/DA6Nm39wSYu1qzppLWb2WKN6RxJlJYu5sZ0k1ZaNilnDIfTttB+rGtf7vs97r4eN7/v6/3mDx6PP+6+n8/x+hywPfl8btwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQ0qYtW7+6pqurc6MXXnjhxcCLs/0vE5Da6ejP9u8EAAAAAAAAAAAAAAA4kxw/TnS2/4wAAAAAAHCuae+45kRD3ZBTDYMPphzuPPX+qnduuLW394kLK+/LH14xzCXrBx/09fX17TjwxvLy4ZiiKEqfbUL5+Lzqcen6PftX/aH/KBQn2n51R/fxjrqfPXnzmy0rxi9pOnW2qVh9y21dnXPriyI0NBWbSwfz6ooiNDcVu0oH80sHY5qKH5cOFpw6OL94qnQwZ+2dXetKJ97zqeGc097RUzQMKbYY8q/B4P579j/8buX9CJesXK2xKPd/yeef3lX1sYoz9F+5fqir7r/mPyBwRrX1/1hP5f0Il3zP/X/SX7dfO9zHztx/5fqhXv+QzjDP/0MarX7ur3r+nz7MJQf2h2a0PVLqf9tDzz1YPtX4fp7/T18/NFT3Xz/k+b/0HN9Yef4fUxShaZR/HXBOae/YcWKk+//I/TdOrtrUDe7/4IofPFvqf1rHpMbyqaYa+28c4f5ft/2pob9XoDbtHT/sq7r/19B/0TLMJQf6n9478Z1S/1dP+Pdrgz5WS/9N1f23dm+4q3XTlq2zb9uwZn3n+s47Fsxvm7+obe7ixQtaTz0S9L8d5d8KnBtGd/8vxlZt6oqic2D/y6PHlpb633Tk2ObyqfNq7L95xPv/q+7/MKwZ9UVzc7F5TXf3xnn9byuH8/vf9v+yYfqv4ev/mbPKv6zydXfpC/KB/YGFRW+p/50vX7+lfKq5xv7HjNT/t05/XiDCKO//66o2Q/q//IV7Xin1v++tN64rn6r16//zRux/j/s/jEZ7R9U3/Pyflfo/efJg5DfbhPP9/x+kk6P/l+t/+kTcOozVP6STo//77x4z3PcJvA/hAv1DOjn63/Tg2ufj1uED+od0cvS/6C+Hboxbhw/qH9LJ0f+ki1/6W9w6jNM/pJOj/5tv3fi1uHUYr39IJ0f/x+555u64dZigf0gnR/8/+tedx+PW4UL9Qzo5+r9v3Pbr49bhIv1DOjn6f+au3/06bh0m6h/SydH/Zbv2zY5bh0n6h3Ry9L/hzckH4tbhQ/qHdHL0f83kCyJ/TjdcrH9IJ0f/Y9ft+W7cOlyif0gnR//de+f8OW4dgv4hnRz9L3vx3uVx63Cp/iGdHP1PbNl9Mm4dJusf0snR/w03Llsdtw4f1j+kk6P/J3/+5fvi1uEj+od0cvT/9m/fujRuHaboH9LJ0f8rC44+ErcOU/UP6eTo/3tfuHZe3DpM0z+kk6P/x47v/EXcOkzXP6STo/93d7dcEbcOH9U/pJOj/yOrF+6OW4cZ+od0cvT/8NSH6uPWYab+IZ0c/X/zv/88EbcOH9M/pJOj/4U9X9wWtw4f1z+kk6P/yd2ffTZuHS7TP6STo/9VY49dF7cOLfqHdHL03/qbW6bGrcMs/UM6Ofpfd/Dwd+LW4XL9Qzo5+l/e/qeFcetwhf4hnRz9N7R9Y0/cOlypf0gnR/9Hfz9xZdw6fEL/kE6O/n/y6P6X4tZhtv4hnRz9f/srj66PW4c5+od0cvR/eGb923Hr0Kp/SCdH/1uff/w/ceswV/+QTo7+5+2bdnvcOszTP6STo/8pnxt3JG4d5usf0snR/5eW9n4mbh0W6B/SydH/4398em/cOlylf0gnR/99vbcvjVuHT+of0snR/4urtt0btw4L9Q/p5Oj/gdYXJsatQ5v+IZ0c/b/++k03xa3DIv1DOjn63/vAPw7FrcNi/UM6Ofrf0fXa1+PWYYn+IZ0c/T930cpX49Zhqf4hnRz9z/r7lePj1uFT+od0cvS/dmfP9+PW4dP6h3Ry9L9y8/0tcetwtf4hnRz9NzYv2Re3Dsv0DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/BQAAP//YzhgOg==") sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x1004c000) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) ioctl$FITRIM(r0, 0xc080583d, &(0x7f0000000000)={0x3, 0x1}) 1.085707093s ago: executing program 5 (id=1885): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x5546, &(0x7f0000010140)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"]) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 874.256802ms ago: executing program 4 (id=1886): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800030004000080"], 0x44}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 534.789491ms ago: executing program 4 (id=1887): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x34}}, 0x0) 454.089331ms ago: executing program 1 (id=1888): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000840)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwritev(r0, &(0x7f0000002240)=[{&(0x7f0000000080)='E', 0x1}], 0x1, 0x0, 0x0) fadvise64(r0, 0x0, 0x1, 0x4) 264.00686ms ago: executing program 35 (id=1888): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000840)="$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") r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwritev(r0, &(0x7f0000002240)=[{&(0x7f0000000080)='E', 0x1}], 0x1, 0x0, 0x0) fadvise64(r0, 0x0, 0x1, 0x4) 238.12395ms ago: executing program 4 (id=1891): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xf8, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x58, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x59}, @TCA_ROUTE4_ACT={0x3c, 0x6, [@m_nat={0x38, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xd, 0x6, "3eaed48f5023f5c36b"}, {0xc}, {0xc}}}]}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 4 (id=1892): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x3000000, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYRES64, @ANYRES64], 0x11, 0x2eb, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.853 (6882) [ 157.137957][ T6882] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 157.176681][ T6882] BTRFS info (device loop6): using free space tree [ 157.210687][ T6882] BTRFS info (device loop6): has skinny extents [ 157.364811][ T6871] loop4: detected capacity change from 0 to 32768 [ 157.547132][ T6871] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.849 (6871) [ 157.697656][ T6871] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 157.727891][ T6871] BTRFS info (device loop4): using free space tree [ 157.745038][ T6882] BTRFS info (device loop6): enabling ssd optimizations [ 157.755192][ T6871] BTRFS info (device loop4): has skinny extents [ 158.345668][ T6871] BTRFS info (device loop4): enabling ssd optimizations [ 158.408793][ T6899] loop7: detected capacity change from 0 to 40427 [ 158.503635][ T6899] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 158.533058][ T6899] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 158.583041][ T6899] F2FS-fs (loop7): invalid crc value [ 158.633832][ T6899] F2FS-fs (loop7): Found nat_bits in checkpoint [ 158.852523][ T6931] loop5: detected capacity change from 0 to 32768 [ 158.938273][ T6899] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 158.945464][ T6899] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 159.057650][ T6931] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.863 (6931) [ 159.243659][ T6931] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 159.278050][ T6931] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 159.377606][ T6931] BTRFS info (device loop5): force zstd compression, level 3 [ 159.405765][ T6931] BTRFS info (device loop5): using free space tree [ 159.423857][ T300] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 159.464101][ T300] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 159.464404][ T6931] BTRFS info (device loop5): has skinny extents [ 159.877466][ T7025] loop6: detected capacity change from 0 to 128 [ 160.012859][ T7025] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 160.065926][ T6931] BTRFS info (device loop5): enabling ssd optimizations [ 160.116987][ T7025] sysv_free_block: trying to free block not in datazone [ 160.148436][ T7039] sysv_count_free_blocks: free block count was -2041545935, correcting to 0 [ 160.202108][ T7025] sysv_free_block: trying to free block not in datazone [ 160.268142][ T7025] sysv_free_block: trying to free block not in datazone [ 160.384496][ T7025] sysv_free_block: trying to free block not in datazone [ 160.427819][ T7025] sysv_free_block: trying to free block not in datazone [ 160.434859][ T7025] sysv_free_block: trying to free block not in datazone [ 160.461196][ T26] audit: type=1800 audit(1734738696.550:74): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.863" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 160.505101][ T7025] sysv_free_block: trying to free block not in datazone [ 160.689675][ T7050] PKCS7: Unknown OID: [5] 0.0 [ 160.709348][ T7039] sysv_count_free_inodes: unable to read inode table [ 160.728274][ T7050] PKCS7: Only support pkcs7_signedData type [ 161.228343][ T7070] netlink: 260 bytes leftover after parsing attributes in process `syz.7.888'. [ 161.427823][ T5792] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 161.692377][ T7084] loop6: detected capacity change from 0 to 2048 [ 161.852696][ T7082] loop7: detected capacity change from 0 to 8192 [ 161.880591][ T7084] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.017641][ T7082] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 162.133717][ T7082] REISERFS (device loop7): using ordered data mode [ 162.182289][ T7082] reiserfs: using flush barriers [ 162.257299][ T7082] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.344161][ T7082] REISERFS (device loop7): checking transaction log (loop7) [ 162.526618][ T7080] loop4: detected capacity change from 0 to 32768 [ 162.679840][ T7082] REISERFS (device loop7): Using tea hash to sort names [ 162.758612][ T7080] XFS (loop4): Mounting V5 Filesystem [ 162.777986][ T4158] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 162.797790][ T7082] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 162.930697][ T7075] loop5: detected capacity change from 0 to 32768 [ 163.042080][ T7075] XFS (loop5): Mounting V5 Filesystem [ 163.102768][ T7080] XFS (loop4): Ending clean mount [ 163.121556][ T7080] XFS (loop4): Quotacheck needed: Please wait. [ 163.147961][ T4158] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 163.170082][ T4158] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.221338][ T7124] loop1: detected capacity change from 0 to 32768 [ 163.233979][ T4158] usb 7-1: config 0 descriptor?? [ 163.269868][ T7124] XFS: noikeep mount option is deprecated. [ 163.296220][ T4158] cp210x 7-1:0.0: cp210x converter detected [ 163.367271][ T7075] XFS (loop5): Starting recovery (logdev: internal) [ 163.421756][ T7080] XFS (loop4): Quotacheck: Done. [ 163.446543][ T7124] XFS (loop1): Mounting V5 Filesystem [ 163.539832][ T7075] XFS (loop5): Ending recovery (logdev: internal) [ 163.540779][ T7080] XFS (loop4): User initiated shutdown received. [ 163.554010][ T7080] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 163.570303][ T7080] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 163.612856][ T7124] XFS (loop1): Ending clean mount [ 163.629584][ T7124] XFS (loop1): Quotacheck needed: Please wait. [ 163.677423][ T4175] XFS (loop4): Unmounting Filesystem [ 163.737663][ T4158] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 163.785532][ T5698] XFS (loop5): Unmounting Filesystem [ 163.796807][ T4158] usb 7-1: cp210x converter now attached to ttyUSB0 [ 163.812391][ T7124] XFS (loop1): Quotacheck: Done. [ 163.995767][ T4158] usb 7-1: USB disconnect, device number 5 [ 164.026052][ T4158] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 164.132591][ T4158] cp210x 7-1:0.0: device disconnected [ 164.170087][ T4167] XFS (loop1): Unmounting Filesystem [ 164.296074][ T7176] loop7: detected capacity change from 0 to 512 [ 164.546863][ T7176] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.906: casefold flag without casefold feature [ 164.616729][ T7176] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.906: couldn't read orphan inode 15 (err -117) [ 164.667995][ T7176] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 164.898887][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.197737][ T7205] tap0: tun_chr_ioctl cmd 1074025673 [ 165.248803][ T7212] loop5: detected capacity change from 0 to 64 [ 165.405534][ T5698] hfs: node 4:3 still has 2 user(s)! [ 165.427233][ T7214] loop4: detected capacity change from 0 to 4096 [ 165.573254][ T7214] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 165.746438][ T7214] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 165.786102][ T7214] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 165.890744][ T7233] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 165.993771][ T4175] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 166.018303][ T4175] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 166.198780][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.931'. [ 166.207380][ T7246] loop4: detected capacity change from 0 to 512 [ 166.226164][ T7210] loop7: detected capacity change from 0 to 32768 [ 166.269934][ T7210] XFS: noikeep mount option is deprecated. [ 166.317036][ T7246] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.929: casefold flag without casefold feature [ 166.348735][ T7246] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.929: couldn't read orphan inode 15 (err -117) [ 166.399732][ T7246] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.467806][ T7210] XFS (loop7): Mounting V5 Filesystem [ 166.586601][ T7265] loop5: detected capacity change from 0 to 256 [ 166.671427][ T7210] XFS (loop7): Ending clean mount [ 166.738365][ T7265] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 166.753144][ T7210] XFS (loop7): Quotacheck needed: Please wait. [ 166.854052][ T7210] XFS (loop7): Quotacheck: Done. [ 167.018678][ T6061] XFS (loop7): Unmounting Filesystem [ 167.420882][ T7289] netlink: 76 bytes leftover after parsing attributes in process `syz.4.947'. [ 167.451208][ T7289] netlink: 64 bytes leftover after parsing attributes in process `syz.4.947'. [ 167.789039][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.7.942'. [ 168.215403][ T7277] loop5: detected capacity change from 0 to 32768 [ 168.242478][ T7319] loop1: detected capacity change from 0 to 128 [ 168.297947][ T7319] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 168.300779][ T7323] netlink: 'syz.7.960': attribute type 3 has an invalid length. [ 168.341124][ T4167] sysv_free_block: trying to free block not in datazone [ 168.351912][ T4167] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 168.485908][ T7277] XFS (loop5): Mounting V5 Filesystem [ 168.532090][ T7332] input: syz0 as /devices/virtual/input/input6 [ 168.792701][ T7277] XFS (loop5): Ending clean mount [ 168.834589][ T7277] XFS (loop5): Quotacheck needed: Please wait. [ 168.886959][ T7353] Failed to get privilege flags for destination (handle=0x2:0x8) [ 168.969318][ T7277] XFS (loop5): Quotacheck: Done. [ 169.056628][ T7365] loop7: detected capacity change from 0 to 128 [ 169.166026][ T5698] XFS (loop5): Unmounting Filesystem [ 169.205843][ T7365] VFS: Found a Xenix FS (block size = 512) on device loop7 [ 169.260991][ T7365] sysv_free_block: trying to free block not in datazone [ 169.397724][ T6061] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 169.451307][ T7384] bridge0: port 3(syz_tun) entered blocking state [ 169.542793][ T7384] bridge0: port 3(syz_tun) entered disabled state [ 169.601747][ T7384] device syz_tun entered promiscuous mode [ 169.669716][ T7384] bridge0: port 3(syz_tun) entered blocking state [ 169.684520][ T7384] bridge0: port 3(syz_tun) entered forwarding state [ 169.807717][ T5981] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 170.067638][ T5981] usb 8-1: Using ep0 maxpacket: 32 [ 170.126362][ T7414] loop5: detected capacity change from 0 to 512 [ 170.188080][ T5981] usb 8-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 170.208290][ T5981] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.248817][ T5981] usb 8-1: config 0 descriptor?? [ 170.310005][ T7414] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 170.313101][ T5981] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 170.383443][ T7414] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.409562][ T7435] netlink: 296 bytes leftover after parsing attributes in process `syz.1.993'. [ 170.419670][ T7435] unsupported nlmsg_type 40 [ 170.548520][ T7414] Quota error (device loop5): find_block_dqentry: Quota for id 62708 referenced but not present [ 170.577845][ T7414] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 62708 [ 170.648313][ T7414] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.976: Failed to acquire dquot type 0 [ 170.704189][ T7387] loop4: detected capacity change from 0 to 32768 [ 171.197683][ T5981] gspca_sunplus: reg_w_riv err -71 [ 171.202938][ T5981] sunplus: probe of 8-1:0.0 failed with error -71 [ 171.226292][ T5981] usb 8-1: USB disconnect, device number 3 [ 171.448846][ T7445] loop1: detected capacity change from 0 to 40427 [ 171.525714][ T7445] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 171.554152][ T7445] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 171.555313][ T7457] loop6: detected capacity change from 0 to 32768 [ 171.598566][ T7445] F2FS-fs (loop1): invalid crc value [ 171.650350][ T7445] F2FS-fs (loop1): Found nat_bits in checkpoint [ 171.747294][ T7463] loop5: detected capacity change from 0 to 40427 [ 171.766949][ T7457] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 171.837953][ T7445] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 171.847377][ T7445] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 171.858223][ T5792] ocfs2: Unmounting device (7,6) on (node local) [ 171.968516][ T7482] overlayfs: conflicting options: nfs_export=on,index=off [ 172.002103][ T7463] F2FS-fs (loop5): Found nat_bits in checkpoint [ 172.009802][ T6982] kernel write not supported for file /423/net/fib_triestat (pid: 6982 comm: kworker/1:17) [ 172.111729][ T7463] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 172.130387][ T7489] loop7: detected capacity change from 0 to 512 [ 172.163975][ T4249] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 172.177277][ T4249] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 172.193733][ T7463] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 172.201570][ T7489] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 172.281567][ T26] audit: type=1804 audit(1734738708.370:75): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1001" name="/newroot/57/file2/bus" dev="loop5" ino=10 res=1 errno=0 [ 172.324655][ T7489] EXT4-fs (loop7): 1 truncate cleaned up [ 172.328951][ T5698] attempt to access beyond end of device [ 172.328951][ T5698] loop5: rw=2049, want=45104, limit=40427 [ 172.378306][ T7489] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.725365][ T7504] loop4: detected capacity change from 0 to 256 [ 172.976533][ T7504] Process accounting resumed [ 173.065899][ T7504] attempt to access beyond end of device [ 173.065899][ T7504] loop4: rw=2049, want=260, limit=256 [ 173.142787][ T7512] loop5: detected capacity change from 0 to 1024 [ 173.217866][ T7513] loop7: detected capacity change from 0 to 4096 [ 173.324711][ T7513] NILFS (loop7): invalid segment: Checksum error in segment payload [ 173.348998][ T7491] loop6: detected capacity change from 0 to 32768 [ 173.361642][ T7513] NILFS (loop7): trying rollback from an earlier position [ 173.429109][ T7513] NILFS (loop7): recovery complete [ 173.448949][ T7522] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.880335][ T7539] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1023'. [ 174.019613][ T7542] xt_NFQUEUE: number of total queues is 0 [ 174.060373][ T7545] loop4: detected capacity change from 0 to 164 [ 174.183028][ T7550] loop7: detected capacity change from 0 to 512 [ 174.274564][ T7545] rock: directory entry would overflow storage [ 174.304567][ T7545] rock: sig=0x4f50, size=4, remaining=3 [ 174.346613][ T7545] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 174.406866][ T7550] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 174.466745][ T7529] loop5: detected capacity change from 0 to 32768 [ 174.498754][ T7550] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.655794][ T26] audit: type=1800 audit(1734738710.740:76): pid=7550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1025" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 174.704122][ T7548] loop6: detected capacity change from 0 to 32768 [ 174.726949][ T26] audit: type=1800 audit(1734738710.740:77): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1025" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 174.739552][ T7529] XFS (loop5): Mounting V5 Filesystem [ 174.873953][ T7548] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 174.894566][ T7548] OCFS2: ERROR (device loop6): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 263 [ 174.922597][ T7548] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 174.933633][ T7548] OCFS2: File system is now read-only. [ 174.941488][ T7548] (syz.6.1021,7548,1):ocfs2_find_leaf:1933 ERROR: status = -30 [ 174.949811][ T7548] (syz.6.1021,7548,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 174.961002][ T7548] (syz.6.1021,7548,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 174.969871][ T7548] (syz.6.1021,7548,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 174.978984][ T7548] (syz.6.1021,7548,1):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 174.990410][ T7548] (syz.6.1021,7548,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 175.029595][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1027'. [ 175.087773][ T5792] ocfs2: Unmounting device (7,6) on (node local) [ 175.104716][ T7529] XFS (loop5): Ending clean mount [ 175.132598][ T7529] XFS (loop5): Quotacheck needed: Please wait. [ 175.355469][ T7529] XFS (loop5): Quotacheck: Done. [ 175.467290][ T7529] XFS (loop5): User initiated shutdown received. [ 175.477877][ T7529] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 175.520005][ T7529] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 175.540677][ T7595] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1029'. [ 175.647655][ T5698] XFS (loop5): Unmounting Filesystem [ 175.860616][ T7599] loop1: detected capacity change from 0 to 4096 [ 175.988005][ T7608] ALSA: mixer_oss: invalid OSS volume 'u' [ 175.993814][ T7608] ALSA: mixer_oss: invalid OSS volume '¯S}“B.Ò/¦YÎÚY9Ï9†2¢W«¿hÔ…NE,ë' [ 176.004151][ T7599] ntfs: volume version 3.1. [ 176.032988][ T7608] ALSA: mixer_oss: invalid OSS volume 'cOF8߀Ò!}þsdÜ"Ž§Ÿtæx³8S‘èÁàA' [ 176.081011][ T7608] ALSA: mixer_oss: invalid OSS volume 'H­}Ç!ïÙ¾äR¤Í©úZ' [ 176.110780][ T7608] ALSA: mixer_oss: invalid OSS volume ';½pšoƒ^´3Ž#±/YïÐþj}Žl@Ö;´69§' [ 176.150681][ T7580] loop4: detected capacity change from 0 to 32768 [ 176.159915][ T7608] ALSA: mixer_oss: invalid OSS volume '‡YÕ¥›\&—Äaá}„X±=ȉ5¸x÷—Ôi$¼„q' [ 176.194716][ T7608] ALSA: mixer_oss: invalid OSS volume '–Ò?Ù­ü«áqoêIyïMtúÜoÕ>lgÄë 9' [ 176.213842][ T7608] ALSA: mixer_oss: invalid OSS volume ')ùÖ­I;»M¥ýð®ôñoõ™°ÜB0ªø{žø•?Š' [ 176.231753][ T7580] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1028 (7580) [ 176.263020][ T7608] ALSA: mixer_oss: invalid OSS volume 'S7sŽŸÙW{·•ëZ‰¤îN++í_Æ[¡ï¹ˆž' [ 176.277365][ T7608] ALSA: mixer_oss: invalid OSS volume '' [ 176.324086][ T7580] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 176.335719][ T7608] ALSA: mixer_oss: invalid OSS volume 'c¢¼¤sÏ‘=ZOÒ‰Ñy/Æ“Ä¥øS&î¼R™J4áj' [ 176.366463][ T7580] BTRFS info (device loop4): setting nodatasum [ 176.367913][ T7608] ALSA: mixer_oss: invalid OSS volume 'cå :3Ù£ã/D@·aÑI¨×tÕ°á’fx„™¡' [ 176.376259][ T7580] BTRFS info (device loop4): using free space tree [ 176.402991][ T7584] loop7: detected capacity change from 0 to 32768 [ 176.405705][ T7580] BTRFS info (device loop4): has skinny extents [ 176.509428][ T7608] ALSA: mixer_oss: invalid OSS volume 'T{¡‘¼¢Ê’w4M{£ ‚j%€åítôä±' [ 176.529743][ T7608] ALSA: mixer_oss: invalid OSS volume 'ð™6oÅ?ŒtoðnÄ]iÓÄ' [ 176.537461][ T7608] ALSA: mixer_oss: invalid OSS volume 'ÙΦÝuLœ?ëÎ…v÷†4À+C' [ 176.545858][ T7608] ALSA: mixer_oss: invalid OSS volume 'yÐÅÊû3gÕ˜F8JñýK`˜ËV µe¯>ÀÓM' [ 176.552929][ T7620] loop5: detected capacity change from 0 to 2048 [ 176.554513][ T7608] ALSA: mixer_oss: invalid OSS volume '«¤–ž' [ 176.566848][ T7608] ALSA: mixer_oss: invalid OSS volume 'C4ò›3‘ïKðóJDÖž47Ë=Ë8qÄçÞPK^P' [ 176.583966][ T7584] XFS (loop7): Mounting V5 Filesystem [ 176.603056][ T7608] ALSA: mixer_oss: invalid OSS volume '}ß„µcÀ¿ÌLu©rbÝìzI{ÕŽª«%»' [ 176.611795][ T7608] ALSA: mixer_oss: invalid OSS volume 'Teë»À¬0¸R+Ù!€Ø˜s1Në2ð¾+Oq«' [ 176.618248][ T7620] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 176.621269][ T7608] ALSA: mixer_oss: invalid OSS volume 'x'ÒYbã’ÖÀe:x•^¾' [ 176.636321][ T7620] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.677653][ T7608] ALSA: mixer_oss: invalid OSS volume 'ª?2ÀÓÎo”ºÏZÝ“X„¾œáŠ^Æ–ã7' [ 176.709461][ T7584] XFS (loop7): Starting recovery (logdev: internal) [ 176.759068][ T7584] XFS (loop7): Ending recovery (logdev: internal) [ 176.768062][ T6987] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 176.787682][ T7608] ALSA: mixer_oss: invalid OSS volume 'œz€zvúavg­ê‹w4‚-©=“––A©*Ò¯cPÎîT' [ 176.796060][ T7608] ALSA: mixer_oss: invalid OSS volume 'Ž-ĉ¸ýÛùÔ±ÉïKUˆˆ$Fù²Z„Y˜"2' [ 176.805093][ T7608] ALSA: mixer_oss: invalid OSS volume '-«/ã9òM=+ih’ÜÔ£èòê­ÜxâÐ|¹ß/ç' [ 176.814161][ T7608] ALSA: mixer_oss: invalid OSS volume 'Ã…’£¾~³SAd–ègاL~¹EV±bA“]qÔ4bþ' [ 176.823173][ T7608] ALSA: mixer_oss: invalid OSS volume 'Ç´ñTrçz3")?„žç\‘]ódÉiTbà”' [ 176.831687][ T7608] ALSA: mixer_oss: invalid OSS volume 'hJøüÝKÍõu+?ªsˆ†nè¦d…' [ 176.839448][ T7608] ALSA: mixer_oss: invalid OSS volume 'ü>Ü(v[.zPýïW[élÑÙªHÁþñ²v9I˜*' [ 176.850861][ T7608] ALSA: mixer_oss: invalid OSS volume 'IâMŒ}' [ 176.856966][ T7608] ALSA: mixer_oss: invalid OSS volume '„‘Þš‹½]í¸ßëZX€ÚWÇK¸áý‹ÓÂ' [ 176.864952][ T7608] ALSA: mixer_oss: invalid OSS volume '›gl »f' [ 176.871461][ T7608] ALSA: mixer_oss: invalid OSS volume 'põÇ­-áÿ–gl>ÊÍ•?Ò5…b(Um²•¸ÕH·' [ 176.879981][ T7608] ALSA: mixer_oss: invalid OSS volume ' HD-É5«„Gëì¹:øy¦»‚«_$RtØsµ¾C…o' [ 176.918302][ T7608] ALSA: mixer_oss: invalid OSS volume 'O±øS®ãl¬¥R›­‘$‚X`ÀDòEÍÿâä' [ 176.918330][ T7580] BTRFS info (device loop4): enabling ssd optimizations [ 176.926663][ T7608] ALSA: mixer_oss: invalid OSS volume 'j©bhœOS¼{eå}棕íYªyA!"L' [ 176.926702][ T7608] ALSA: mixer_oss: invalid OSS volume 'œªÛï'Ööc²+øÓ™bènRÙ«ÕbŽ2pBMŠ§‘' [ 176.926722][ T7608] ALSA: mixer_oss: invalid OSS volume '])Ù@:Tµ1U2c‡ên§&C·Ì[÷g7xD' [ 176.926755][ T7608] ALSA: mixer_oss: invalid OSS volume 'w¥¯ì—Uoàî‡Ãs›ÙÿL!ÝNζWæKôÖË' [ 176.926805][ T7608] ALSA: mixer_oss: invalid OSS volume '¯Þ­1Ðؽ‹F„&‡¶' [ 177.053504][ T6987] usb 2-1: Using ep0 maxpacket: 16 [ 177.070338][ T26] audit: type=1800 audit(1734738713.160:78): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1028" name="file0" dev="loop4" ino=258 res=0 errno=0 [ 177.151779][ T6061] XFS (loop7): Unmounting Filesystem [ 177.180660][ T7657] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 177.407978][ T6987] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 177.417070][ T6987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.460734][ T6987] usb 2-1: Product: syz [ 177.465002][ T6987] usb 2-1: Manufacturer: syz [ 177.510378][ T6987] usb 2-1: SerialNumber: syz [ 177.547061][ T6987] usb 2-1: config 0 descriptor?? [ 177.634851][ T6987] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 177.768429][ T7678] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1046'. [ 177.809553][ T7678] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1046'. [ 177.867863][ T6987] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 177.876006][ T6987] visor: probe of 2-1:0.0 failed with error -5 [ 178.089112][ T6987] usb 2-1: USB disconnect, device number 9 [ 178.273357][ T7698] loop6: detected capacity change from 0 to 64 [ 178.338142][ T7701] loop4: detected capacity change from 0 to 256 [ 178.474824][ T7708] device wlan0 entered promiscuous mode [ 178.538321][ T7713] netlink: 'syz.4.1055': attribute type 25 has an invalid length. [ 178.557833][ T7713] netlink: 'syz.4.1055': attribute type 8 has an invalid length. [ 178.647466][ T7698] overlayfs: './file0' not a directory [ 178.733443][ T7722] loop7: detected capacity change from 0 to 512 [ 178.843073][ T7722] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 178.926873][ T7722] EXT4-fs (loop7): 1 truncate cleaned up [ 178.944659][ T7722] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 178.970695][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.047230][ T7733] netlink: 'syz.6.1061': attribute type 13 has an invalid length. [ 179.057223][ T7733] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1061'. [ 179.070530][ T7733] syz_tun: refused to change device tx_queue_len [ 179.076405][ T7725] loop5: detected capacity change from 0 to 4096 [ 179.078127][ T7733] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 179.230692][ T7725] ntfs: volume version 3.1. [ 179.349851][ T7725] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 179.450844][ T7725] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 179.771164][ T7727] loop1: detected capacity change from 0 to 32768 [ 179.908402][ T7727] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1058 (7727) [ 180.003118][ T7727] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 180.022748][ T7727] BTRFS info (device loop1): setting nodatacow, compression disabled [ 180.062335][ T7727] BTRFS info (device loop1): enabling auto defrag [ 180.089492][ T7727] BTRFS info (device loop1): max_inline at 0 [ 180.095526][ T7727] BTRFS info (device loop1): using free space tree [ 180.107610][ T4158] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 180.135759][ T7727] BTRFS info (device loop1): has skinny extents [ 180.384479][ T7750] loop4: detected capacity change from 0 to 32768 [ 180.477948][ T4158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.492684][ T4158] usb 6-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 180.509403][ T4158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.523438][ T4158] usb 6-1: config 0 descriptor?? [ 180.650147][ T7810] loop7: detected capacity change from 0 to 128 [ 181.013066][ T4158] thrustmaster 0003:044F:B300.0004: unbalanced delimiter at end of report description [ 181.074226][ T4158] thrustmaster 0003:044F:B300.0004: parse failed [ 181.094085][ T4158] thrustmaster: probe of 0003:044F:B300.0004 failed with error -22 [ 181.225046][ T5984] usb 6-1: USB disconnect, device number 4 [ 181.610794][ T7801] loop6: detected capacity change from 0 to 40427 [ 181.710619][ T7801] F2FS-fs (loop6): invalid crc value [ 181.786184][ T7801] F2FS-fs (loop6): Found nat_bits in checkpoint [ 181.953491][ T7850] loop4: detected capacity change from 0 to 164 [ 182.027295][ T7801] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 182.050075][ T7850] isofs: isofs_export_get_parent(): child directory not normalized! [ 182.311461][ T5792] attempt to access beyond end of device [ 182.311461][ T5792] loop6: rw=2049, want=45112, limit=40427 [ 182.615940][ T7833] loop7: detected capacity change from 0 to 32768 [ 182.811280][ T7833] XFS (loop7): Mounting V5 Filesystem [ 183.091826][ T7833] XFS (loop7): Ending clean mount [ 183.144757][ T7833] XFS (loop7): Quotacheck needed: Please wait. [ 183.206959][ T7912] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1095'. [ 183.261289][ T7833] XFS (loop7): Quotacheck: Done. [ 183.444010][ T26] audit: type=1804 audit(1734738719.530:79): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1081" name="/newroot/74/file0/file1" dev="loop7" ino=9286 res=1 errno=0 [ 183.465680][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.762817][ T6061] XFS (loop7): Unmounting Filesystem [ 184.172993][ T7954] loop5: detected capacity change from 0 to 4096 [ 184.196471][ T7962] netlink: 468 bytes leftover after parsing attributes in process `syz.6.1108'. [ 184.223818][ T7962] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1108'. [ 184.344560][ T7971] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1111'. [ 184.356079][ T7954] ntfs: volume version 3.1. [ 184.560828][ T7980] netlink: 'syz.6.1113': attribute type 3 has an invalid length. [ 184.636730][ T7980] netlink: 114680 bytes leftover after parsing attributes in process `syz.6.1113'. [ 184.726191][ T7988] device hsr0 entered promiscuous mode [ 184.763545][ T7987] device hsr0 left promiscuous mode [ 184.996904][ T8001] loop6: detected capacity change from 0 to 256 [ 185.037261][ T7997] loop7: detected capacity change from 0 to 4096 [ 185.106579][ T7997] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 186.016701][ T8004] loop5: detected capacity change from 0 to 32768 [ 186.047797][ T6982] Bluetooth: hci0: command 0x0406 tx timeout [ 186.053874][ T6982] Bluetooth: hci3: command 0x0406 tx timeout [ 186.135296][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 186.299714][ T8004] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 186.318830][ T8046] loop4: detected capacity change from 0 to 512 [ 186.349529][ T8004] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 263 [ 186.471518][ T8004] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 186.487953][ T8004] OCFS2: File system is now read-only. [ 186.515326][ T8004] (syz.5.1121,8004,1):ocfs2_find_leaf:1933 ERROR: status = -30 [ 186.537465][ T8020] loop1: detected capacity change from 0 to 32768 [ 186.548101][ T8004] (syz.5.1121,8004,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 186.561092][ T8004] (syz.5.1121,8004,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 186.569099][ T8004] (syz.5.1121,8004,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 186.578769][ T8004] (syz.5.1121,8004,0):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 186.588587][ T8004] (syz.5.1121,8004,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 186.590555][ T8046] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.652347][ T8046] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.663200][ T8020] ERROR: (device loop1): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 186.663200][ T8020] [ 186.690770][ T8020] ERROR: (device loop1): remounting filesystem as read-only [ 186.703032][ T8020] jfs_readdir: unexpected rc = -5 from dtReadNext [ 186.753560][ T8065] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt [ 186.753560][ T8065] [ 186.808059][ T5698] ocfs2: Unmounting device (7,5) on (node local) [ 186.854979][ T8065] jfs_lookup: dtSearch returned -5 [ 187.147939][ T8076] loop7: detected capacity change from 0 to 128 [ 187.839498][ T8105] loop4: detected capacity change from 0 to 256 [ 187.931977][ T8105] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 187.934758][ T8062] loop6: detected capacity change from 0 to 32768 [ 188.280313][ T8122] loop5: detected capacity change from 0 to 512 [ 188.306298][ T8124] netlink: 'syz.4.1152': attribute type 9 has an invalid length. [ 188.318267][ T8062] XFS (loop6): Mounting V5 Filesystem [ 188.369631][ T8124] netlink: 134672 bytes leftover after parsing attributes in process `syz.4.1152'. [ 188.381857][ T8122] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.386112][ T8124] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 188.396086][ T8122] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.477932][ T8133] loop4: detected capacity change from 0 to 164 [ 188.612825][ T8133] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 188.650951][ T8062] XFS (loop6): Ending clean mount [ 188.663894][ T8133] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 188.843810][ T8094] loop7: detected capacity change from 0 to 32768 [ 188.946718][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1158'. [ 189.010313][ T8094] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1145 (8094) [ 189.028860][ T8155] loop5: detected capacity change from 0 to 16 [ 189.043331][ T5792] XFS (loop6): Unmounting Filesystem [ 189.062660][ T8094] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 189.097763][ T8094] BTRFS info (device loop7): setting nodatacow, compression disabled [ 189.121068][ T8094] BTRFS info (device loop7): enabling auto defrag [ 189.157110][ T8094] BTRFS info (device loop7): max_inline at 0 [ 189.192539][ T8155] erofs: (device loop5): mounted with root inode @ nid 36. [ 189.200579][ T8094] BTRFS info (device loop7): using free space tree [ 189.209760][ T8094] BTRFS info (device loop7): has skinny extents [ 189.777140][ T8197] loop5: detected capacity change from 0 to 4096 [ 189.916331][ T8202] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.083634][ T8209] loop6: detected capacity change from 0 to 64 [ 190.697802][ T5977] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 190.857841][ T5976] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 190.981547][ T8208] loop1: detected capacity change from 0 to 40427 [ 191.057915][ T8208] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 191.071447][ T8243] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1176'. [ 191.077889][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.122669][ T8208] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 191.124682][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.140910][ T5976] usb 6-1: Using ep0 maxpacket: 16 [ 191.161159][ T5977] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 191.177945][ T8208] F2FS-fs (loop1): invalid crc_offset: 5705724 [ 191.178040][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.222844][ T8208] F2FS-fs (loop1): Found nat_bits in checkpoint [ 191.224858][ T5977] usb 5-1: config 0 descriptor?? [ 191.345579][ T8208] F2FS-fs (loop1): recover fsync data on readonly fs [ 191.388187][ T8208] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 191.411145][ T8208] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 191.419361][ T5976] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 191.421092][ T8258] loop6: detected capacity change from 0 to 256 [ 191.438384][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.457727][ T5976] usb 6-1: Product: syz [ 191.462114][ T5976] usb 6-1: Manufacturer: syz [ 191.466784][ T5976] usb 6-1: SerialNumber: syz [ 191.481555][ T5976] r8152-cfgselector 6-1: config 0 descriptor?? [ 191.516424][ T8258] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000006) [ 191.531736][ T8258] FAT-fs (loop6): Filesystem has been set read-only [ 191.556537][ T8256] loop7: detected capacity change from 0 to 4096 [ 191.673895][ T8256] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 191.719860][ T5977] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 191.724814][ T8256] ntfs3: loop7: Failed to load $Extend. [ 191.727038][ T5977] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 191.742670][ T5976] r8152-cfgselector 6-1: Unknown version 0x0000 [ 191.767817][ T5977] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 191.775004][ T5977] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 191.795264][ T5977] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 191.817624][ T5977] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 191.837691][ T5977] logitech 0003:046D:C626.0005: unknown main item tag 0x1 [ 191.860096][ T5977] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 191.883828][ T5977] logitech 0003:046D:C626.0005: unknown global tag 0xc [ 191.889960][ T8256] Process accounting resumed [ 191.899107][ T5977] logitech 0003:046D:C626.0005: item 0 4 1 12 parsing failed [ 191.913916][ T5977] logitech 0003:046D:C626.0005: parse failed [ 191.925026][ T8263] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 191.932606][ T5977] logitech: probe of 0003:046D:C626.0005 failed with error -22 [ 191.952160][ T5977] usb 5-1: USB disconnect, device number 7 [ 192.009990][ T5976] r8152-cfgselector 6-1: Unknown version 0x0000 [ 192.041692][ T5976] r8152-cfgselector 6-1: USB disconnect, device number 5 [ 192.139810][ T8266] loop6: detected capacity change from 0 to 1024 [ 192.219133][ T8271] loop1: detected capacity change from 0 to 16 [ 192.239499][ T8271] erofs: (device loop1): mounted with root inode @ nid 36. [ 192.909772][ T8282] loop5: detected capacity change from 0 to 8192 [ 192.985737][ T8282] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 192.997410][ T8282] REISERFS (device loop5): using ordered data mode [ 193.007825][ T8282] reiserfs: using flush barriers [ 193.032865][ T8282] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.101305][ T8301] 9p: Unknown uid 18446744073709551615 [ 193.110064][ T8280] loop1: detected capacity change from 0 to 32768 [ 193.128321][ T8282] REISERFS (device loop5): checking transaction log (loop5) [ 193.168004][ T8280] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1192 (8280) [ 193.231822][ T8280] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 193.286367][ T8280] BTRFS info (device loop1): using free space tree [ 193.327905][ T8280] BTRFS info (device loop1): has skinny extents [ 193.414766][ T8308] loop6: detected capacity change from 0 to 512 [ 193.432864][ T8282] REISERFS (device loop5): Using tea hash to sort names [ 193.455798][ T8282] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 193.502802][ T8308] EXT4-fs (loop6): Ignoring removed oldalloc option [ 193.548801][ T8308] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 193.612781][ T8308] EXT4-fs (loop6): 1 truncate cleaned up [ 193.628052][ T8308] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 193.668150][ T8280] BTRFS info (device loop1): enabling ssd optimizations [ 193.734583][ T8294] loop4: detected capacity change from 0 to 32768 [ 193.794384][ T8294] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1198 (8294) [ 193.817623][ T5976] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 193.956737][ T8294] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 194.008076][ T8294] BTRFS info (device loop4): using free space tree [ 194.014807][ T8294] BTRFS info (device loop4): has skinny extents [ 194.187929][ T5976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.203593][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.249355][ T8351] loop5: detected capacity change from 0 to 8 [ 194.277131][ T5976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.345016][ T5976] usb 8-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 194.390512][ T5976] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.403187][ T8294] BTRFS info (device loop4): enabling ssd optimizations [ 194.455119][ T5976] usb 8-1: config 0 descriptor?? [ 194.797703][ T8368] loop1: detected capacity change from 0 to 4096 [ 194.986845][ T8374] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.022252][ T5976] wacom 0003:056A:00DA.0006: Unknown device_type for 'HID 056a:00da'. Assuming pen. [ 195.188074][ T5976] wacom 0003:056A:00DA.0006: hidraw0: USB HID v0.00 Device [HID 056a:00da] on usb-dummy_hcd.7-1/input0 [ 195.234136][ T5976] input: Wacom Bamboo 2FG 4x5 SE Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:00DA.0006/input/input7 [ 195.364466][ T5976] usb 8-1: USB disconnect, device number 4 [ 195.563258][ T8379] loop4: detected capacity change from 0 to 512 [ 195.603334][ T8379] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 195.660563][ T8379] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.1217: invalid indirect mapped block 4294967295 (level 0) [ 195.700034][ T8379] EXT4-fs (loop4): Remounting filesystem read-only [ 195.706594][ T8379] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.1217: invalid indirect mapped block 4294967295 (level 1) [ 195.773839][ T8377] loop6: detected capacity change from 0 to 32768 [ 195.789485][ T8379] EXT4-fs (loop4): Remounting filesystem read-only [ 195.810234][ T8379] EXT4-fs (loop4): 1 orphan inode deleted [ 195.826679][ T8379] EXT4-fs (loop4): 1 truncate cleaned up [ 195.846360][ T8379] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,block_validity,quota,. Quota mode: writeback. [ 195.864432][ T8389] program syz.5.1221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.942157][ T8377] XFS (loop6): Mounting V5 Filesystem [ 195.989900][ T8379] EXT4-fs warning (device loop4): __ext4fs_dirhash:283: invalid/unsupported hash tree version 15 [ 196.217304][ T8409] loop7: detected capacity change from 0 to 256 [ 196.274217][ T8409] exfat: Deprecated parameter 'namecase' [ 196.293921][ T8409] exfat: Deprecated parameter 'namecase' [ 196.339629][ T8377] XFS (loop6): Ending clean mount [ 196.348948][ T8377] XFS (loop6): Quotacheck needed: Please wait. [ 196.379583][ T8409] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 196.521263][ T8377] XFS (loop6): Quotacheck: Done. [ 196.822180][ T5792] XFS (loop6): Unmounting Filesystem [ 196.828466][ T8429] loop1: detected capacity change from 0 to 256 [ 197.043124][ T8433] loop7: detected capacity change from 0 to 256 [ 197.136870][ T8433] exfat: Bad value for 'time_offset' [ 197.327675][ T4845] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 197.379375][ T8448] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 197.549857][ T8451] loop7: detected capacity change from 0 to 1024 [ 197.617621][ T4845] usb 5-1: Using ep0 maxpacket: 32 [ 197.722977][ T8451] attempt to access beyond end of device [ 197.722977][ T8451] loop7: rw=0, want=5780, limit=1024 [ 197.741153][ T8459] loop5: detected capacity change from 0 to 256 [ 197.757714][ T4845] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 197.799566][ T8461] loop6: detected capacity change from 0 to 64 [ 197.812587][ T8451] attempt to access beyond end of device [ 197.812587][ T8451] loop7: rw=0, want=5780, limit=1024 [ 197.932324][ T8459] FAT-fs (loop5): Directory bread(block 64) failed [ 197.968746][ T4845] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 197.974188][ T8459] FAT-fs (loop5): Directory bread(block 65) failed [ 197.993268][ T8463] loop7: detected capacity change from 0 to 256 [ 197.993962][ T4845] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 198.008826][ T8459] FAT-fs (loop5): Directory bread(block 66) failed [ 198.015438][ T8459] FAT-fs (loop5): Directory bread(block 67) failed [ 198.023201][ T8459] FAT-fs (loop5): Directory bread(block 68) failed [ 198.030509][ T8459] FAT-fs (loop5): Directory bread(block 69) failed [ 198.035409][ T4845] usb 5-1: Product: syz [ 198.037347][ T8459] FAT-fs (loop5): Directory bread(block 70) failed [ 198.057975][ T8459] FAT-fs (loop5): Directory bread(block 71) failed [ 198.061332][ T4845] usb 5-1: Manufacturer: syz [ 198.064646][ T8459] FAT-fs (loop5): Directory bread(block 72) failed [ 198.069499][ T8449] loop1: detected capacity change from 0 to 32768 [ 198.083721][ T4845] usb 5-1: SerialNumber: syz [ 198.105714][ T4845] usb 5-1: config 0 descriptor?? [ 198.113633][ T8459] FAT-fs (loop5): Directory bread(block 73) failed [ 198.191466][ T8437] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 198.315394][ T8465] loop6: detected capacity change from 0 to 4096 [ 198.365289][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.542001][ T4845] usb 5-1: USB disconnect, device number 8 [ 198.796031][ T8483] loop5: detected capacity change from 0 to 1024 [ 198.865949][ T8483] EXT4-fs (loop5): Ignoring removed bh option [ 198.958660][ T8483] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,nodelalloc,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x0000000000000003,journal_dev=0x0000000000000007,nombcache,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_lock,,errors=continue. Quota mode: none. [ 198.987943][ T8493] loop7: detected capacity change from 0 to 2048 [ 199.099759][ T8499] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.610335][ T8518] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 199.763274][ T8521] loop1: detected capacity change from 0 to 2048 [ 199.794478][ T8491] loop6: detected capacity change from 0 to 32768 [ 199.827360][ T8523] loop5: detected capacity change from 0 to 1024 [ 199.892551][ T8523] EXT4-fs (loop5): error: journal path ./file0 is not a block device [ 199.902315][ T8521] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 199.925911][ T8521] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.961953][ T8491] XFS (loop6): Mounting V5 Filesystem [ 200.127225][ T8491] XFS (loop6): Ending clean mount [ 200.252228][ T8550] loop4: detected capacity change from 0 to 512 [ 200.276094][ T8545] option changes via remount are deprecated (pid=8544 comm=syz.7.1287) [ 200.310199][ T5792] XFS (loop6): Unmounting Filesystem [ 200.347772][ T8550] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 200.399085][ T8550] EXT4-fs (loop4): error: could not find journal device path: error -2 [ 201.014230][ T8578] netlink: 'syz.5.1301': attribute type 5 has an invalid length. [ 201.151604][ T8586] loop6: detected capacity change from 0 to 1024 [ 201.275863][ T8586] hfsplus: request for non-existent node 3 in B*Tree [ 201.314300][ T8586] hfsplus: request for non-existent node 3 in B*Tree [ 201.414466][ T8603] loop4: detected capacity change from 0 to 256 [ 201.507840][ T8603] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 201.848921][ T8609] loop1: detected capacity change from 0 to 8192 [ 201.859768][ T8616] cifs: Unknown parameter 'mode' [ 201.957399][ T8609] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 201.999173][ T8609] REISERFS (device loop1): using ordered data mode [ 202.040956][ T8609] reiserfs: using flush barriers [ 202.057304][ T8609] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.078022][ T8609] REISERFS (device loop1): checking transaction log (loop1) [ 202.080505][ T8607] loop5: detected capacity change from 0 to 32768 [ 202.096118][ T8609] REISERFS (device loop1): Using r5 hash to sort names [ 202.118357][ T8607] XFS: ikeep mount option is deprecated. [ 202.157784][ T5976] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 202.179259][ T8626] loop4: detected capacity change from 0 to 128 [ 202.185687][ T26] audit: type=1326 audit(1734738738.270:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.7.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7613b03d29 code=0x7fc00000 [ 202.213953][ T8609] reiserfs: enabling write barrier flush mode [ 202.243953][ T8607] XFS (loop5): Mounting V5 Filesystem [ 202.250064][ T8609] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 202.265139][ T8626] EXT4-fs (loop4): Test dummy encryption mode enabled [ 202.349249][ T8626] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 202.364396][ T8626] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.396092][ T8607] XFS (loop5): Ending clean mount [ 202.446522][ T8607] XFS (loop5): Quotacheck needed: Please wait. [ 202.527957][ T5976] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 202.581187][ T5976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.605516][ T8607] XFS (loop5): Quotacheck: Done. [ 202.662861][ T5976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.703572][ T5976] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 202.758464][ T5976] usb 7-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 202.787592][ T5976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.822979][ T5698] XFS (loop5): Unmounting Filesystem [ 202.839239][ T5976] usb 7-1: config 0 descriptor?? [ 203.195162][ T8631] loop7: detected capacity change from 0 to 40427 [ 203.289934][ T8631] F2FS-fs (loop7): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 203.307662][ T8631] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 203.340229][ T5976] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x2 [ 203.348000][ T8631] F2FS-fs (loop7): invalid crc value [ 203.378597][ T5976] hid-rmi 0003:17EF:6085.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.6-1/input0 [ 203.417437][ T8631] F2FS-fs (loop7): Found nat_bits in checkpoint [ 203.565266][ T5976] usb 7-1: USB disconnect, device number 6 [ 203.589330][ T8631] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 203.601172][ T8631] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 203.660083][ T8667] loop5: detected capacity change from 0 to 1024 [ 203.717076][ T8669] loop4: detected capacity change from 0 to 512 [ 203.765965][ T8655] loop1: detected capacity change from 0 to 32768 [ 203.792490][ T8669] EXT4-fs (loop4): Ignoring removed bh option [ 203.827669][ T8669] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 203.841619][ T6061] attempt to access beyond end of device [ 203.841619][ T6061] loop7: rw=2049, want=45104, limit=40427 [ 203.877052][ T8670] hfsplus: catalog searching failed [ 203.924564][ T8669] EXT4-fs (loop4): 1 truncate cleaned up [ 203.943731][ T8655] XFS (loop1): Mounting V5 Filesystem [ 203.949752][ T4234] hfsplus: b-tree write err: -5, ino 4 [ 203.951600][ T8669] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 204.098865][ T8669] EXT4-fs (loop4): shut down requested (2) [ 204.163309][ T8655] XFS (loop1): Ending clean mount [ 204.191036][ T8655] XFS (loop1): Quotacheck needed: Please wait. [ 204.278943][ T8687] program syz.5.1342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.312203][ T8655] XFS (loop1): Quotacheck: Done. [ 204.496371][ T4167] XFS (loop1): Unmounting Filesystem [ 204.630472][ T8698] loop5: detected capacity change from 0 to 512 [ 204.726434][ T8698] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 204.743889][ T8700] loop4: detected capacity change from 0 to 512 [ 204.766124][ T8698] EXT4-fs (loop5): 1 truncate cleaned up [ 204.813354][ T8698] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.860542][ T8700] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.1349: invalid block [ 204.904157][ T8700] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1349: Invalid block bitmap block 0 in block_group 0 [ 205.010990][ T8700] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 205.095635][ T8700] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1349: attempt to clear invalid blocks 983261 len 1 [ 205.177406][ T8694] loop6: detected capacity change from 0 to 32768 [ 205.195109][ T8700] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1349: invalid indirect mapped block 2683928664 (level 0) [ 205.257655][ T8700] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm syz.4.1349: Invalid inode table block 0 in block_group 0 [ 205.314036][ T8694] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1344 (8694) [ 205.330274][ T8700] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 205.368084][ T8700] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 205.458619][ T8694] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 205.463841][ T8700] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm syz.4.1349: Invalid inode table block 0 in block_group 0 [ 205.502533][ T8694] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 205.543047][ T8694] BTRFS info (device loop6): use zstd compression, level 3 [ 205.547210][ T8700] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 205.575504][ T8700] EXT4-fs error (device loop4): ext4_truncate:4272: inode #13: comm syz.4.1349: mark_inode_dirty error [ 205.586949][ T8694] BTRFS info (device loop6): using free space tree [ 205.608426][ T8700] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 205.620362][ T8694] BTRFS info (device loop6): has skinny extents [ 205.660683][ T8700] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm syz.4.1349: Invalid inode table block 0 in block_group 0 [ 205.744691][ T8700] EXT4-fs (loop4): 1 truncate cleaned up [ 205.773291][ T8700] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 205.788865][ T8725] loop7: detected capacity change from 0 to 128 [ 205.859904][ T8700] EXT4-fs (loop4): shut down requested (2) [ 205.867450][ T8700] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #2: comm syz.4.1349: directory missing '..' [ 205.963502][ T8725] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.997690][ T8725] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 206.157086][ T8725] fscrypt (loop7, inode 12): Mutually exclusive encryption flags (0x18) [ 206.241169][ T8694] BTRFS info (device loop6): enabling ssd optimizations [ 206.377638][ T4845] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 206.530761][ T8763] loop1: detected capacity change from 0 to 128 [ 206.709472][ T8716] loop5: detected capacity change from 0 to 32768 [ 206.814103][ T4845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.844150][ T26] audit: type=1326 audit(1734738742.940:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.7.1368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7613b03d29 code=0x0 [ 206.844470][ T4845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 206.865818][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.942245][ T4845] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 206.951999][ T4845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.964392][ T4845] usb 5-1: config 0 descriptor?? [ 207.224262][ T8740] udc-core: couldn't find an available UDC or it's busy [ 207.232644][ T8740] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 207.509845][ T4845] monterey 0003:0566:3004.0008: fixing up button/consumer in HID report descriptor [ 207.548754][ T4845] monterey 0003:0566:3004.0008: unknown main item tag 0x6 [ 207.588076][ T4845] monterey 0003:0566:3004.0008: report_id 29495 is invalid [ 207.595334][ T4845] monterey 0003:0566:3004.0008: item 0 2 1 8 parsing failed [ 207.613491][ T4845] monterey: probe of 0003:0566:3004.0008 failed with error -22 [ 207.648961][ T8781] loop6: detected capacity change from 0 to 512 [ 207.721058][ T8781] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 207.774566][ T8781] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 207.906138][ T8781] EXT4-fs (loop6): 1 truncate cleaned up [ 207.923604][ T4845] usb 5-1: USB disconnect, device number 9 [ 207.941694][ T8775] loop1: detected capacity change from 0 to 32768 [ 207.951511][ T8781] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,jqfmt=vfsv0,grpid,mblk_io_submit,,errors=continue. Quota mode: none. [ 208.028412][ T8775] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1369 (8775) [ 208.052373][ T8793] loop5: detected capacity change from 0 to 1024 [ 208.098954][ T8793] EXT4-fs (loop5): Test dummy encryption mode enabled [ 208.111376][ T8775] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 208.119016][ T8793] EXT4-fs (loop5): Ignoring removed orlov option [ 208.151906][ T8775] BTRFS info (device loop1): using free space tree [ 208.164930][ T8793] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 208.175281][ T8775] BTRFS info (device loop1): has skinny extents [ 208.217390][ T8793] EXT4-fs (loop5): shut down requested (2) [ 208.364434][ T8807] loop6: detected capacity change from 0 to 512 [ 208.528062][ T8807] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ee018, mo2=0000] [ 208.575143][ T8807] System zones: 0-2, 18-18, 34-34 [ 208.592563][ T8775] BTRFS info (device loop1): enabling ssd optimizations [ 208.653996][ T8807] EXT4-fs (loop6): 1 orphan inode deleted [ 208.667396][ T8823] loop5: detected capacity change from 0 to 2048 [ 208.694713][ T8807] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,usrjquota=,nouid32,data_err=ignore,quota,,errors=continue. Quota mode: writeback. [ 208.730211][ T8807] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.787632][ T8823] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.153582][ T26] audit: type=1326 audit(1734738745.240:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e7d44d29 code=0x7ffc0000 [ 209.205022][ T26] audit: type=1326 audit(1734738745.260:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e7d44d29 code=0x7ffc0000 [ 209.365532][ T8825] loop4: detected capacity change from 0 to 32768 [ 209.410252][ T5694] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 209.422757][ T26] audit: type=1326 audit(1734738745.290:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1e7d44d29 code=0x7ffc0000 [ 209.468606][ T8839] loop7: detected capacity change from 0 to 4096 [ 209.515857][ T26] audit: type=1326 audit(1734738745.290:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e7d44d29 code=0x7ffc0000 [ 209.536128][ T8825] [ 209.536128][ T8825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.536128][ T8825] [ 209.613402][ T26] audit: type=1326 audit(1734738745.290:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e7d44d29 code=0x7ffc0000 [ 209.646922][ T8839] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.688928][ T26] audit: type=1326 audit(1734738745.290:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1e7d44d29 code=0x7ffc0000 [ 209.691915][ T8848] netlink: 'syz.5.1394': attribute type 6 has an invalid length. [ 209.711349][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.711715][ T26] audit: type=1326 audit(1734738745.290:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e7d44d29 code=0x7ffc0000 [ 209.711758][ T26] audit: type=1326 audit(1734738745.290:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e7d44d29 code=0x7ffc0000 [ 209.711802][ T26] audit: type=1326 audit(1734738745.290:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fd1e7d44d29 code=0x7ffc0000 [ 209.728382][ T8839] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: writeback. [ 209.796368][ T8825] non-latin1 character 0x3ff found in JFS file name [ 209.853210][ T8825] mount with iocharset=utf8 to access [ 209.862526][ T26] audit: type=1326 audit(1734738745.290:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e7d44d29 code=0x7ffc0000 [ 209.878245][ T8825] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 209.878245][ T8825] [ 210.021748][ T8825] ERROR: (device loop4): remounting filesystem as read-only [ 210.268992][ T8849] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: writeback. [ 210.322917][ T8853] loop6: detected capacity change from 0 to 512 [ 210.427756][ T8853] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 210.510605][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1399'. [ 210.526872][ T8857] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 210.544891][ T8853] EXT4-fs (loop6): 1 truncate cleaned up [ 210.557781][ T8853] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,inode_readahead_blks=0x0000000000004000,grpquota,quota,,errors=continue. Quota mode: writeback. [ 210.713314][ T8853] EXT4-fs error (device loop6): mb_free_blocks:1865: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 210.830273][ T8873] netem: change failed [ 210.890154][ T8862] loop1: detected capacity change from 0 to 8192 [ 210.912968][ T8875] loop5: detected capacity change from 0 to 2048 [ 210.923097][ T8877] loop7: detected capacity change from 0 to 16 [ 210.959208][ T8877] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 210.976497][ T8875] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.989184][ T8862] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 211.044912][ T8862] REISERFS (device loop1): using journaled data mode [ 211.077681][ T8862] reiserfs: using flush barriers [ 211.077702][ T5973] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 211.118008][ T8862] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 211.135020][ T8862] REISERFS (device loop1): checking transaction log (loop1) [ 211.144716][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.163986][ T8862] REISERFS (device loop1): Using r5 hash to sort names [ 211.194333][ T8862] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 211.253700][ T8862] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 211.307146][ T8887] loop5: detected capacity change from 0 to 256 [ 211.377763][ T5973] usb 5-1: Using ep0 maxpacket: 8 [ 211.431757][ T8887] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 211.497911][ T5973] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 211.529021][ T5973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 211.552731][ T5973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.573527][ T5973] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.691704][ T5973] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.742376][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.957303][ T8902] loop1: detected capacity change from 0 to 1024 [ 212.037803][ T5973] usb 5-1: GET_CAPABILITIES returned 0 [ 212.043626][ T5973] usbtmc 5-1:16.0: can't read capabilities [ 212.123432][ T5695] hfsplus: b-tree write err: -5, ino 4 [ 212.287709][ T8872] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 212.320748][ T5973] usb 5-1: USB disconnect, device number 10 [ 212.359403][ T8893] loop6: detected capacity change from 0 to 32768 [ 212.599989][ T8919] loop1: detected capacity change from 0 to 164 [ 212.958251][ T8904] loop7: detected capacity change from 0 to 40427 [ 213.067382][ T8904] F2FS-fs (loop7): invalid crc value [ 213.136307][ T8904] F2FS-fs (loop7): Found nat_bits in checkpoint [ 213.247576][ T5977] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 213.292133][ T8913] loop5: detected capacity change from 0 to 40427 [ 213.303539][ T8904] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 213.315958][ T8904] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 213.376146][ T8913] F2FS-fs (loop5): invalid crc value [ 213.407331][ T8913] F2FS-fs (loop5): Found nat_bits in checkpoint [ 213.491814][ T6061] attempt to access beyond end of device [ 213.491814][ T6061] loop7: rw=2049, want=45104, limit=40427 [ 213.505711][ T5977] usb 5-1: Using ep0 maxpacket: 8 [ 213.566179][ T8913] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 213.628047][ T5977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.646044][ T5977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.665666][ T8938] attempt to access beyond end of device [ 213.665666][ T8938] loop5: rw=2049, want=45104, limit=40427 [ 213.693179][ T5977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.717781][ T5977] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.783253][ T8946] loop6: detected capacity change from 0 to 4096 [ 213.804852][ T8946] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 213.817825][ T5977] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.826903][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 213.853861][ T5977] usb 5-1: Product: syz [ 213.859800][ T8946] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 213.880200][ T8946] ntfs3: loop6: Failed to load $LogFile. [ 214.131516][ T5977] usb 5-1: GET_CAPABILITIES returned 0 [ 214.137067][ T5977] usbtmc 5-1:16.0: can't read capabilities [ 214.192906][ T8950] loop1: detected capacity change from 0 to 16 [ 214.268374][ T8950] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 214.365534][ T5979] usb 5-1: USB disconnect, device number 11 [ 214.643603][ T8958] loop5: detected capacity change from 0 to 512 [ 214.778256][ T8958] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,minixdf,noquota,,errors=continue. Quota mode: none. [ 214.785034][ T8960] loop1: detected capacity change from 0 to 8192 [ 214.853291][ T8948] loop6: detected capacity change from 0 to 32768 [ 214.861068][ T8958] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1439: bg 0: block 425: padding at end of block bitmap is not set [ 214.904217][ T8948] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1437 (8948) [ 214.907453][ T8964] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1439: bg 0: block 425: padding at end of block bitmap is not set [ 214.930915][ T8958] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 214.970777][ T8952] loop7: detected capacity change from 0 to 32768 [ 214.989811][ T8960] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 215.016639][ T8960] REISERFS (device loop1): using ordered data mode [ 215.016671][ T8948] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 215.032813][ T8960] reiserfs: using flush barriers [ 215.047658][ T8948] BTRFS info (device loop6): using free space tree [ 215.059359][ T8948] BTRFS info (device loop6): has skinny extents [ 215.097849][ T8960] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 215.126908][ T8964] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 215.136213][ T8960] REISERFS (device loop1): checking transaction log (loop1) [ 215.145733][ T8960] REISERFS (device loop1): Using r5 hash to sort names [ 215.169123][ T8952] XFS (loop7): Mounting V5 Filesystem [ 215.200036][ T8960] reiserfs: enabling write barrier flush mode [ 215.210898][ T8960] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 215.259071][ T8948] BTRFS info (device loop6): enabling ssd optimizations [ 215.335219][ T8952] XFS (loop7): Ending clean mount [ 215.431216][ T9000] loop5: detected capacity change from 0 to 256 [ 215.559408][ T6061] XFS (loop7): Unmounting Filesystem [ 215.976979][ T9006] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1449'. [ 216.007644][ T9006] tc_dump_action: action bad kind [ 216.109920][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 216.143237][ T8998] loop4: detected capacity change from 0 to 32768 [ 216.183424][ T9009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1450'. [ 216.271206][ T8998] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1444 (8998) [ 216.469733][ T8998] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 216.487796][ T8998] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 216.497260][ T8998] BTRFS info (device loop4): use zstd compression, level 3 [ 216.547553][ T8998] BTRFS info (device loop4): using free space tree [ 216.554120][ T8998] BTRFS info (device loop4): has skinny extents [ 216.623842][ T9015] loop6: detected capacity change from 0 to 64 [ 216.826768][ T9022] loop1: detected capacity change from 0 to 4096 [ 216.858159][ T9022] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 216.997722][ T8998] BTRFS info (device loop4): enabling ssd optimizations [ 217.032881][ T9022] ntfs3: loop1: Failed to load $BadClus. [ 217.832875][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.859688][ T9071] loop7: detected capacity change from 0 to 256 [ 217.945997][ T9071] FAT-fs (loop7): Directory bread(block 1285) failed [ 217.968950][ T9073] loop4: detected capacity change from 0 to 164 [ 217.975779][ T9071] FAT-fs (loop7): Directory bread(block 1286) failed [ 217.997719][ T9071] FAT-fs (loop7): Directory bread(block 1287) failed [ 218.013031][ T9071] FAT-fs (loop7): Directory bread(block 1288) failed [ 218.034083][ T9073] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 218.042465][ T9071] FAT-fs (loop7): Directory bread(block 1289) failed [ 218.064780][ T9073] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 218.077831][ T9071] FAT-fs (loop7): Directory bread(block 1290) failed [ 218.084577][ T9071] FAT-fs (loop7): Directory bread(block 1291) failed [ 218.109222][ T9071] FAT-fs (loop7): Directory bread(block 1292) failed [ 218.117837][ T5982] Bluetooth: hci5: command 0x1003 tx timeout [ 218.123966][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 218.147856][ T9071] FAT-fs (loop7): Directory bread(block 1293) failed [ 218.160351][ T9071] FAT-fs (loop7): Directory bread(block 1294) failed [ 218.229255][ T9081] loop6: detected capacity change from 0 to 512 [ 218.343570][ T9081] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.6.1473: corrupted xattr block 95 [ 218.387809][ T9081] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1473: bg 0: block 7: invalid block bitmap [ 218.417185][ T9081] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 218.445943][ T9081] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2932: inode #11: comm syz.6.1473: corrupted xattr block 95 [ 218.530719][ T9081] EXT4-fs warning (device loop6): ext4_evict_inode:302: xattr delete (err -117) [ 218.597103][ T9081] EXT4-fs (loop6): 1 orphan inode deleted [ 218.603856][ T9081] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.770286][ T9094] loop7: detected capacity change from 0 to 512 [ 218.836867][ T9079] loop1: detected capacity change from 0 to 32768 [ 218.853949][ T9094] EXT4-fs (loop7): Ignoring removed bh option [ 218.867678][ T9094] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 218.904606][ T9094] EXT4-fs (loop7): 1 truncate cleaned up [ 218.908602][ T9079] XFS: ikeep mount option is deprecated. [ 218.916027][ T9079] XFS: attr2 mount option is deprecated. [ 218.918327][ T9094] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 218.974102][ T9094] EXT4-fs (loop7): shut down requested (2) [ 219.066304][ T9101] loop6: detected capacity change from 0 to 4096 [ 219.073636][ T9079] XFS (loop1): Mounting V5 Filesystem [ 219.124277][ T9110] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.243399][ T9079] XFS (loop1): Ending clean mount [ 219.250947][ T9079] XFS (loop1): Quotacheck needed: Please wait. [ 219.409232][ T9079] XFS (loop1): Quotacheck: Done. [ 219.478558][ T9079] XFS (loop1): User initiated shutdown received. [ 219.508964][ T9079] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:487). Shutting down filesystem. [ 219.548942][ T9120] loop7: detected capacity change from 0 to 8192 [ 219.555759][ T9079] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 219.588675][ T4167] XFS (loop1): Unmounting Filesystem [ 219.622615][ T5982] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 219.668193][ T9120] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 219.691594][ T9120] REISERFS (device loop7): using ordered data mode [ 219.697279][ T9128] program syz.4.1490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.737844][ T9120] reiserfs: using flush barriers [ 219.744605][ T9120] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.783637][ T9120] REISERFS (device loop7): checking transaction log (loop7) [ 219.891980][ T5982] usb 7-1: Using ep0 maxpacket: 16 [ 220.008431][ T5982] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 220.020671][ T5982] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 220.033434][ T9120] REISERFS (device loop7): Using tea hash to sort names [ 220.048197][ T9120] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 220.066461][ T5982] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 220.109821][ T5982] usb 7-1: config 0 interface 0 has no altsetting 0 [ 220.197685][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 220.204724][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 220.267827][ T5982] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 220.276943][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.302556][ T5982] usb 7-1: Product: syz [ 220.307186][ T5982] usb 7-1: Manufacturer: syz [ 220.313150][ T5982] usb 7-1: SerialNumber: syz [ 220.334380][ T5982] usb 7-1: config 0 descriptor?? [ 220.600065][ T5982] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input10 [ 220.646870][ T3531] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 220.668996][ T3531] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 220.692715][ T3531] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 220.711248][ T9157] loop4: detected capacity change from 0 to 256 [ 220.758463][ T9157] exfat: Bad value for 'time_offset' [ 220.767031][ T3531] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 220.842933][ T5047] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 220.882744][ T9116] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 220.935320][ T3531] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 220.969804][ T3531] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 220.979493][ T5982] usb 7-1: USB disconnect, device number 7 [ 221.146669][ T9175] loop1: detected capacity change from 0 to 4096 [ 221.188969][ T9179] loop4: detected capacity change from 0 to 256 [ 221.723868][ T9197] loop6: detected capacity change from 0 to 256 [ 221.824602][ T9197] FAT-fs (loop6): Directory bread(block 1285) failed [ 221.858101][ T9197] FAT-fs (loop6): FAT read failed (blocknr 1281) [ 221.871519][ T9203] loop7: detected capacity change from 0 to 1024 [ 221.974468][ T9207] loop6: detected capacity change from 0 to 128 [ 221.983238][ T9203] hfsplus: bad catalog entry type [ 222.025763][ T4249] hfsplus: b-tree write err: -5, ino 4 [ 222.061121][ T9207] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 222.141879][ T9207] UDF-fs: error (device loop6): udf_read_inode: (ino 86) failed unknown file type=13 [ 222.197697][ T5982] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 222.272661][ T9195] loop1: detected capacity change from 0 to 32768 [ 222.286327][ T13] Bluetooth: hci5: command 0x1009 tx timeout [ 222.581283][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.594860][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.605983][ T5982] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 222.692065][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.739063][ T5982] usb 5-1: config 0 descriptor?? [ 222.783640][ T13] hid-generic 0005:15C2:0001.0009: item fetching failed at offset 0/1 [ 222.805676][ T13] hid-generic: probe of 0005:15C2:0001.0009 failed with error -22 [ 223.157316][ T9245] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 223.249711][ T5982] sony 0003:054C:0268.000A: unknown main item tag 0x0 [ 223.277905][ T5982] sony 0003:054C:0268.000A: unknown main item tag 0x0 [ 223.284744][ T5982] sony 0003:054C:0268.000A: collection stack underflow [ 223.302044][ T5982] sony 0003:054C:0268.000A: item 0 0 0 12 parsing failed [ 223.320227][ T5982] sony 0003:054C:0268.000A: parse failed [ 223.348343][ T5982] sony: probe of 0003:054C:0268.000A failed with error -22 [ 223.411629][ T9254] loop1: detected capacity change from 0 to 256 [ 223.461919][ T9252] loop7: detected capacity change from 0 to 4096 [ 223.473384][ T13] usb 5-1: USB disconnect, device number 12 [ 223.499491][ T9237] loop6: detected capacity change from 0 to 32768 [ 223.548468][ T9237] XFS: ikeep mount option is deprecated. [ 223.554155][ T9237] XFS: attr2 mount option is deprecated. [ 223.637346][ T9237] XFS (loop6): Mounting V5 Filesystem [ 223.773844][ T9237] XFS (loop6): Ending clean mount [ 223.791484][ T9237] XFS (loop6): Quotacheck needed: Please wait. [ 223.882594][ T9237] XFS (loop6): Quotacheck: Done. [ 223.939165][ T9269] loop1: detected capacity change from 0 to 128 [ 223.969729][ T9237] XFS (loop6): User initiated shutdown received. [ 223.977262][ T9237] XFS (loop6): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:487). Shutting down filesystem. [ 223.997846][ T9237] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 224.067723][ T4849] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 224.079285][ T5792] XFS (loop6): Unmounting Filesystem [ 224.290671][ T9277] loop4: detected capacity change from 0 to 512 [ 224.347835][ T4849] usb 8-1: Using ep0 maxpacket: 8 [ 224.461659][ T9277] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz.4.1555: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 224.507782][ T4849] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 224.518358][ T4849] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.544755][ T4849] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.561889][ T4849] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.564509][ T9277] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1555: couldn't read orphan inode 15 (err -117) [ 224.572125][ T4849] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.598911][ T4849] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.608935][ T4849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.668395][ T9277] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.692033][ T9290] netlink: 'syz.6.1559': attribute type 1 has an invalid length. [ 224.706734][ T9277] ext4 filesystem being mounted at /298/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.877940][ T4849] usb 8-1: GET_CAPABILITIES returned 0 [ 224.884122][ T4849] usbtmc 8-1:16.0: can't read capabilities [ 225.085635][ T6987] usb 8-1: USB disconnect, device number 5 [ 225.140765][ T9281] loop1: detected capacity change from 0 to 32768 [ 225.145737][ T9304] tap0: tun_chr_ioctl cmd 1074025680 [ 225.227660][ T9281] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1557 (9281) [ 225.279579][ T9281] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 225.306980][ T9281] BTRFS info (device loop1): using free space tree [ 225.315082][ T9281] BTRFS info (device loop1): has skinny extents [ 225.582689][ T9281] BTRFS info (device loop1): enabling ssd optimizations [ 226.057657][ T9357] device team0 entered promiscuous mode [ 226.063289][ T9357] device team_slave_0 entered promiscuous mode [ 226.113934][ T9357] device team_slave_1 entered promiscuous mode [ 226.166956][ T9356] device team0 left promiscuous mode [ 226.190900][ T9356] device team_slave_0 left promiscuous mode [ 226.221955][ T9356] device team_slave_1 left promiscuous mode [ 226.887967][ T9385] loop5: detected capacity change from 0 to 32768 [ 226.983880][ T9385] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1593 (9385) [ 227.047412][ T9393] loop7: detected capacity change from 0 to 64 [ 227.294388][ T9385] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 227.295586][ T9376] loop6: detected capacity change from 0 to 32768 [ 227.303303][ T9385] BTRFS info (device loop5): using free space tree [ 227.316173][ T9385] BTRFS info (device loop5): has skinny extents [ 227.487242][ T9376] non-latin1 character 0x172 found in JFS file name [ 227.507800][ T9376] mount with iocharset=utf8 to access [ 227.534184][ T9376] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 227.534184][ T9376] [ 227.582183][ T9376] ERROR: (device loop6): remounting filesystem as read-only [ 227.600617][ T9376] read_mapping_page failed! [ 227.605158][ T9376] bread failed! [ 227.628211][ T9409] loop7: detected capacity change from 0 to 2048 [ 227.652108][ T9409] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 227.705027][ T9409] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 227.728672][ T9409] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 227.736351][ T9409] UDF-fs: Scanning with blocksize 512 failed [ 227.755734][ T9409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.847851][ T9385] BTRFS info (device loop5): enabling ssd optimizations [ 227.859086][ T300] BTRFS warning (device loop5): checksum verify failed on 5308416 wanted 0xe1d58233 found 0x1d9379c2 level 0 [ 228.168303][ T9433] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1605'. [ 228.412631][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1600'. [ 228.520203][ T9447] loop6: detected capacity change from 0 to 24 [ 228.538639][ T9447] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 228.587166][ T9447] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 228.817599][ T6987] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 228.949508][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1616'. [ 229.072234][ T9465] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1618'. [ 229.073095][ T9461] loop7: detected capacity change from 0 to 1024 [ 229.107681][ T6987] usb 2-1: Using ep0 maxpacket: 8 [ 229.201279][ T9471] loop4: detected capacity change from 0 to 128 [ 229.227779][ T6987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 229.260374][ T6987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 229.281275][ T6987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.295223][ T6987] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.314079][ T9471] EXT4-fs (loop4): Test dummy encryption mode enabled [ 229.332866][ T6987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 229.347584][ T4849] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 229.368187][ T9471] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 229.382954][ T9471] ext4 filesystem being mounted at /319/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.397013][ T6987] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 229.409921][ T9450] hfsplus: request for non-existent node 211 in B*Tree [ 229.439784][ T6987] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 229.445612][ T9450] hfsplus: request for non-existent node 211 in B*Tree [ 229.480324][ T6987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.534886][ T6987] usb 2-1: config 0 descriptor?? [ 229.588135][ T9430] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 229.623506][ T4174] Bluetooth: hci5: urb ffff888024c7ff00 submission failed (90) [ 229.674712][ T4249] hfsplus: b-tree write err: -5, ino 8 [ 229.680909][ T9479] loop5: detected capacity change from 0 to 164 [ 229.765030][ T9479] Unable to read rock-ridge attributes [ 229.777615][ T4849] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x92, skipping [ 229.816467][ T4849] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.833975][ T9448] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 229.848179][ T9479] Unable to read rock-ridge attributes [ 229.872836][ T6987] usb 2-1: USB disconnect, device number 10 [ 230.048403][ T4849] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 230.068171][ T4849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.076210][ T4849] usb 7-1: Product: syz [ 230.104657][ T4849] usb 7-1: Manufacturer: syz [ 230.118203][ T4849] usb 7-1: SerialNumber: syz [ 230.143188][ T4849] usb 7-1: config 0 descriptor?? [ 230.209572][ T4849] redrat3 7-1:0.0: Couldn't find all endpoints [ 230.247994][ T9448] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.266228][ T9448] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.377802][ T9448] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 230.397379][ T9448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 230.406214][ T9448] usb 5-1: SerialNumber: syz [ 230.449715][ T4849] usb 7-1: USB disconnect, device number 8 [ 230.579143][ T9502] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 230.625135][ T9502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.652539][ T9490] loop7: detected capacity change from 0 to 40427 [ 230.660014][ T9502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.670526][ T9502] device bridge_slave_0 left promiscuous mode [ 230.692942][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.724015][ T9502] device bridge_slave_1 left promiscuous mode [ 230.751351][ T9448] usb 5-1: 0:2 : does not exist [ 230.758305][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.793590][ T9502] bond0: (slave bond_slave_0): Releasing backup interface [ 230.803632][ T9490] F2FS-fs (loop7): Found nat_bits in checkpoint [ 230.811173][ T9448] usb 5-1: USB disconnect, device number 13 [ 230.890042][ T9502] bond0: (slave bond_slave_1): Releasing backup interface [ 230.931487][ T9490] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 230.994942][ T9502] team0: Port device team_slave_0 removed [ 231.040775][ T9502] team0: Port device team_slave_1 removed [ 231.049271][ T9502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.051972][ T6061] attempt to access beyond end of device [ 231.051972][ T6061] loop7: rw=2049, want=45104, limit=40427 [ 231.060092][ T9502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.077312][ T4849] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 231.086276][ T4392] udevd[4392]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.113327][ T9502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.136054][ T9502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.226857][ T9503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.249822][ T9503] bond0: (slave caif0): The slave device specified does not support setting the MAC address [ 231.299203][ T9503] bond0: (slave caif0): Error -95 calling set_mac_address [ 231.339960][ T4849] usb 7-1: Using ep0 maxpacket: 16 [ 231.422976][ T9513] loop4: detected capacity change from 0 to 256 [ 231.481297][ T4849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.497837][ T4849] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.518401][ T9513] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xbbc8ae69, utbl_chksum : 0x7319d30d) [ 231.527548][ T4849] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x92, skipping [ 231.680984][ T9521] loop5: detected capacity change from 0 to 1024 [ 231.747981][ T4849] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 231.767340][ T4849] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 231.794409][ T4849] usb 7-1: Product: syz [ 231.799487][ T4849] usb 7-1: Manufacturer: syz [ 231.804215][ T4849] usb 7-1: SerialNumber: syz [ 231.816683][ T9521] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x000000000000007d,nolazytime,noload,nombcache,acl,,errors=continue. Quota mode: none. [ 231.817211][ T4849] usb 7-1: config 0 descriptor?? [ 231.888830][ T4849] usb 7-1: NFC: intf ffff88802b5f6000 id ffffffff8d358c40 [ 232.067071][ T9448] usb 7-1: USB disconnect, device number 9 [ 232.133235][ T9538] loop1: detected capacity change from 0 to 4096 [ 232.235477][ T9538] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 232.277955][ T4849] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 232.537673][ T4849] usb 8-1: Using ep0 maxpacket: 8 [ 232.843531][ T4849] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 232.867034][ T4849] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.877880][ T4849] usb 8-1: Product: syz [ 232.882087][ T4849] usb 8-1: Manufacturer: syz [ 232.910844][ T4849] usb 8-1: SerialNumber: syz [ 232.925307][ T4849] usb 8-1: config 0 descriptor?? [ 232.980034][ T4849] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 233.207928][ T4849] gspca_sonixj: reg_w1 err -71 [ 233.212797][ T4849] sonixj: probe of 8-1:0.0 failed with error -71 [ 233.246176][ T4849] usb 8-1: USB disconnect, device number 6 [ 233.262952][ T5982] kernel read not supported for file /adsp1 (pid: 5982 comm: kworker/0:18) [ 233.277668][ T9585] loop4: detected capacity change from 0 to 256 [ 233.328410][ T9585] exfat: Deprecated parameter 'namecase' [ 233.399143][ T9585] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 233.434247][ T9585] exFAT-fs (loop4): failed to load alloc-bitmap [ 233.467752][ T9585] exFAT-fs (loop4): failed to recognize exfat type [ 233.545386][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1675'. [ 233.647576][ T5982] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 233.705795][ T9601] loop4: detected capacity change from 0 to 128 [ 233.761923][ T9603] loop5: detected capacity change from 0 to 1024 [ 233.799157][ T9603] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 233.887959][ T5982] usb 2-1: Using ep0 maxpacket: 32 [ 233.905633][ T9603] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000efe,abort,jqfmt=vfsold,barrier=0x0000000000000648,noblock_validity,,errors=continue. Quota mode: writeback. [ 233.931092][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.027845][ T5982] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 234.046331][ T5982] usb 2-1: config 0 has no interface number 0 [ 234.077204][ T5982] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 234.128465][ T5982] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 234.147946][ T5982] usb 2-1: config 0 interface 126 has no altsetting 0 [ 234.158887][ T9603] EXT4-fs error (device loop5): ext4_read_inline_dir:1600: inode #12: block 16: comm syz.5.1679: path /174/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=301989902, rec_len=0, size=80 fake=0 [ 234.181182][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.248683][ T300] attempt to access beyond end of device [ 234.248683][ T300] loop4: rw=1, want=1041, limit=128 [ 234.272855][ T9607] loop6: detected capacity change from 0 to 40427 [ 234.313532][ T9607] F2FS-fs (loop6): Invalid log blocks per segment (4278190089) [ 234.348019][ T9607] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 234.367771][ T5982] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 234.405996][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.427654][ T9607] F2FS-fs (loop6): invalid crc value [ 234.464603][ T9607] F2FS-fs (loop6): Found nat_bits in checkpoint [ 234.475686][ T5982] usb 2-1: Product: syz [ 234.499993][ T5982] usb 2-1: Manufacturer: syz [ 234.504675][ T5982] usb 2-1: SerialNumber: syz [ 234.558592][ T5982] usb 2-1: config 0 descriptor?? [ 234.577938][ T9590] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 234.585060][ T9590] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 234.615284][ T9630] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.660300][ T9607] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 234.669379][ T9607] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 234.685524][ T9630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.706610][ T9630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.729704][ T9630] device bridge_slave_0 left promiscuous mode [ 234.735999][ T9630] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.772950][ T9630] device bridge_slave_1 left promiscuous mode [ 234.785243][ T9630] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.799314][ T9630] bond0: (slave bond_slave_0): Releasing backup interface [ 234.822461][ T9630] bond0: (slave bond_slave_1): Releasing backup interface [ 234.885344][ T9641] loop4: detected capacity change from 0 to 256 [ 234.964618][ T9630] team0: Port device team_slave_0 removed [ 234.985508][ T9641] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 235.035124][ T9630] team0: Port device team_slave_1 removed [ 235.046996][ T9630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.065760][ T9630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.086269][ T9630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.095566][ T9630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.111107][ T5982] ir_usb 2-1:0.126: IR Dongle converter detected [ 235.156234][ T9636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.269485][ T9636] bond0: (slave caif0): The slave device specified does not support setting the MAC address [ 235.309912][ T9636] bond0: (slave caif0): Error -95 calling set_mac_address [ 235.327662][ T5982] usb 2-1: IRDA class descriptor not found, device not bound [ 235.437899][ T9643] loop5: detected capacity change from 0 to 4096 [ 235.517220][ T9646] loop7: detected capacity change from 0 to 256 [ 235.552912][ T9643] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 235.578300][ T9646] exfat: Deprecated parameter 'namecase' [ 235.609156][ T4197] usb 2-1: USB disconnect, device number 11 [ 235.624894][ T9643] ntfs3: loop5: Failed to load $Extend. [ 235.656692][ T9646] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 235.689549][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 235.689566][ T26] audit: type=1800 audit(1734738771.780:93): pid=9643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1694" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 235.720278][ T9648] loop6: detected capacity change from 0 to 4096 [ 235.800635][ T9648] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 235.925077][ T9648] ntfs3: loop6: Failed to load $Extend. [ 235.987834][ T9641] attempt to access beyond end of device [ 235.987834][ T9641] loop4: rw=2049, want=6024, limit=256 [ 236.005477][ T9641] attempt to access beyond end of device [ 236.005477][ T9641] loop4: rw=2049, want=6376, limit=256 [ 236.099277][ T9653] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1697'. [ 236.551440][ T9671] loop1: detected capacity change from 0 to 1024 [ 236.773749][ T4234] hfsplus: b-tree write err: -5, ino 4 [ 237.036036][ T9677] sp0: Synchronizing with TNC [ 237.244834][ T9448] Bluetooth: hci2: command 0x0406 tx timeout [ 237.524653][ T9699] loop4: detected capacity change from 0 to 512 [ 237.587644][ T9699] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 237.607766][ T9699] UDF-fs: Scanning with blocksize 512 failed [ 237.636660][ T9699] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 237.667322][ T9704] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1719'. [ 237.677650][ T9699] UDF-fs: Scanning with blocksize 1024 failed [ 237.716278][ T9699] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 237.753108][ T9699] UDF-fs: Scanning with blocksize 2048 failed [ 237.798481][ T9699] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 237.853547][ T9699] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.880313][ T9689] loop7: detected capacity change from 0 to 32768 [ 238.055687][ T9691] loop6: detected capacity change from 0 to 32768 [ 238.094096][ T9691] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1713 (9691) [ 238.134951][ T9720] netlink: 368 bytes leftover after parsing attributes in process `syz.1.1726'. [ 238.201548][ T9691] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 238.207460][ T9689] XFS (loop7): Mounting V5 Filesystem [ 238.233698][ T9691] BTRFS info (device loop6): using free space tree [ 238.256195][ T9691] BTRFS info (device loop6): has skinny extents [ 238.442356][ T9689] XFS (loop7): Ending clean mount [ 238.453255][ T9448] XFS (loop7): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x10 [ 238.468609][ T9448] XFS (loop7): Unmount and run xfs_repair [ 238.477626][ T9448] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 238.485306][ T9448] 00000000: 46 49 42 33 00 80 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 238.505665][ T9448] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 80 ................ [ 238.536079][ T9691] BTRFS info (device loop6): enabling ssd optimizations [ 238.555209][ T9448] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 238.564694][ T9448] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 238.579668][ T9448] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 238.592309][ T9448] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 238.601420][ T9448] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 238.614049][ T9448] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 238.627920][ T9689] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x10 len 4 error 74 [ 238.645694][ T9689] XFS (loop7): Failed to initialize disk quotas. [ 238.690242][ T6061] XFS (loop7): Unmounting Filesystem [ 238.727593][ T4158] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 238.971526][ T4158] usb 5-1: Using ep0 maxpacket: 8 [ 239.098000][ T4158] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 239.114336][ T4158] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 239.132431][ T4158] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.146209][ T4158] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.165926][ T4158] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.176784][ T4158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.284932][ T9768] loop5: detected capacity change from 0 to 128 [ 239.368660][ T9766] loop7: detected capacity change from 0 to 40427 [ 239.454189][ T4158] usb 5-1: GET_CAPABILITIES returned 0 [ 239.460167][ T4158] usbtmc 5-1:16.0: can't read capabilities [ 239.509179][ T9766] F2FS-fs (loop7): Found nat_bits in checkpoint [ 239.746620][ T9766] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 239.801024][ T9777] loop1: detected capacity change from 0 to 512 [ 239.865018][ T9777] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 239.890116][ T9777] UDF-fs: Scanning with blocksize 512 failed [ 239.922224][ T9777] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 239.930982][ T9777] UDF-fs: Scanning with blocksize 1024 failed [ 239.938991][ T9777] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 239.954956][ T9777] UDF-fs: Scanning with blocksize 2048 failed [ 239.971413][ T9777] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 239.984532][ T9777] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.061044][ T5972] usb 5-1: USB disconnect, device number 14 [ 240.076650][ T6061] attempt to access beyond end of device [ 240.076650][ T6061] loop7: rw=2049, want=45104, limit=40427 [ 240.486447][ T9787] loop4: detected capacity change from 0 to 4096 [ 241.036876][ T4175] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 241.066276][ T4175] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 241.210643][ T9791] loop1: detected capacity change from 0 to 32768 [ 241.322297][ T9791] JBD2: Ignoring recovery information on journal [ 241.466864][ T9801] loop6: detected capacity change from 0 to 40427 [ 241.522079][ T9791] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 241.628342][ T9801] F2FS-fs (loop6): Found nat_bits in checkpoint [ 241.709866][ T4167] ocfs2: Unmounting device (7,1) on (node local) [ 241.811860][ T9801] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 241.892466][ T9807] loop5: detected capacity change from 0 to 32768 [ 241.965206][ T9807] Dev loop5 Sun disklabel: Csum bad, label corrupted [ 241.974083][ T5792] attempt to access beyond end of device [ 241.974083][ T5792] loop6: rw=2049, want=45104, limit=40427 [ 242.065562][ T3546] Dev loop5 Sun disklabel: Csum bad, label corrupted [ 242.347022][ T9841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1767'. [ 242.357790][ T4851] Bluetooth: hci1: command 0x0406 tx timeout [ 242.395980][ T9843] loop4: detected capacity change from 0 to 512 [ 242.537719][ T9822] loop7: detected capacity change from 0 to 32768 [ 242.551835][ T9843] EXT4-fs (loop4): 1 orphan inode deleted [ 242.565610][ T9843] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 242.657888][ T9843] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.669776][ T9822] XFS (loop7): Mounting V5 Filesystem [ 242.802452][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1773'. [ 242.815513][ T9865] device macsec0 entered promiscuous mode [ 242.828273][ T9843] EXT4-fs (loop4): shut down requested (2) [ 242.889348][ T9822] XFS (loop7): Ending clean mount [ 242.908587][ T9822] XFS (loop7): Quotacheck needed: Please wait. [ 243.013101][ T9822] XFS (loop7): Quotacheck: Done. [ 243.151542][ T9879] loop4: detected capacity change from 0 to 64 [ 243.290021][ T6061] XFS (loop7): Unmounting Filesystem [ 243.307807][ T6987] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 243.337616][ T9885] tap0: tun_chr_ioctl cmd 37730 [ 243.489790][ T9887] loop4: detected capacity change from 0 to 8192 [ 243.578965][ T9887] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 243.607023][ T9887] REISERFS (device loop4): using ordered data mode [ 243.614512][ T9887] reiserfs: using flush barriers [ 243.634227][ T9887] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 243.652015][ T9887] REISERFS (device loop4): checking transaction log (loop4) [ 243.661969][ T9887] REISERFS (device loop4): Using r5 hash to sort names [ 243.746766][ T6987] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 243.777737][ T6987] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 243.796244][ T6987] usb 7-1: config 0 has no interface number 0 [ 243.815335][ T6987] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 243.846119][ T6987] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 243.897400][ T6987] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 243.937564][ T6987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.965155][ T6987] usb 7-1: config 0 descriptor?? [ 243.996273][ T9892] loop1: detected capacity change from 0 to 4096 [ 244.131420][ T9892] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 244.285973][ T9892] ntfs3: loop1: failed to convert "c46c" to cp874 [ 244.331812][ T9902] loop4: detected capacity change from 0 to 4096 [ 244.471135][ T6987] usb 7-1: USB disconnect, device number 10 [ 244.612908][ T9890] loop5: detected capacity change from 0 to 40427 [ 244.696003][ T9913] loop7: detected capacity change from 0 to 4096 [ 244.736698][ T9890] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 244.777768][ T9890] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 244.816751][ T9890] F2FS-fs (loop5): invalid crc value [ 244.839721][ T9890] F2FS-fs (loop5): Found nat_bits in checkpoint [ 244.891818][ T6061] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 244.926657][ T6061] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 244.944706][ T9890] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 244.952040][ T9890] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 245.164985][ T9932] loop7: detected capacity change from 0 to 128 [ 245.215864][ T154] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 245.245485][ T154] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 245.263456][ T9935] loop6: detected capacity change from 0 to 8 [ 245.379149][ T5695] tipc: Subscription rejected, illegal request [ 245.574084][ T144] attempt to access beyond end of device [ 245.574084][ T144] loop7: rw=1, want=1041, limit=128 [ 245.604329][ T9946] loop6: detected capacity change from 0 to 512 [ 245.738128][ T9948] loop1: detected capacity change from 0 to 4096 [ 245.747386][ T9950] loop7: detected capacity change from 0 to 128 [ 245.815764][ T9946] EXT4-fs (loop6): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 245.871392][ T9946] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.063457][ T9946] EXT4-fs error (device loop6): ext4_get_first_dir_block:3597: inode #12: comm syz.6.1806: Attempting to read directory block (0) that is past i_size (3) [ 246.220276][ T4167] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 246.226867][ T4167] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 246.408634][ T9963] loop6: detected capacity change from 0 to 524287999 [ 246.457918][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.468900][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.483641][ T9961] loop7: detected capacity change from 0 to 4096 [ 246.507726][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.518763][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.554130][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.565125][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.597741][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.608813][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.637284][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.648422][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.657232][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.668225][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.684331][ T9955] loop5: detected capacity change from 0 to 40427 [ 246.708067][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.719223][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.739179][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.750440][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.772544][ T9963] ldm_validate_partition_table(): Disk read failed. [ 246.806294][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.817358][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.827118][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.838144][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.863230][ T9963] Dev loop6: unable to read RDB block 0 [ 246.864410][ T9955] F2FS-fs (loop5): Found nat_bits in checkpoint [ 246.886597][ T9963] loop6: unable to read partition table [ 246.911908][ T9963] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 246.955902][ T9961] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 247.081473][ T9955] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 247.295263][ T9968] loop6: detected capacity change from 0 to 40427 [ 247.343247][ T9968] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 247.359938][ T9968] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 247.411951][ T9968] F2FS-fs (loop6): invalid crc value [ 247.497165][ T9968] F2FS-fs (loop6): Found nat_bits in checkpoint [ 247.518056][ T9988] loop1: detected capacity change from 0 to 1024 [ 247.634957][ T9968] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 247.662909][ T9968] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 247.775950][ T300] hfsplus: b-tree write err: -5, ino 4 [ 247.922175][ T154] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 247.946270][T10002] loop4: detected capacity change from 0 to 1024 [ 247.953704][ T154] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 248.095307][T10002] hfsplus: xattr searching failed [ 248.143465][T10004] loop7: detected capacity change from 0 to 4096 [ 248.167801][ T6987] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 248.226276][T10002] hfsplus: b-tree write err: -5, ino 3 [ 248.239846][T10008] loop5: detected capacity change from 0 to 8 [ 248.352251][ T26] audit: type=1800 audit(1734738784.440:94): pid=10004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1828" name="file0" dev="loop7" ino=0 res=0 errno=0 [ 248.807835][ T6987] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 248.816920][ T6987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.837701][ T4849] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 248.847660][ T6987] usb 2-1: Product: syz [ 248.854132][ T6987] usb 2-1: Manufacturer: syz [ 248.862473][ T6987] usb 2-1: SerialNumber: syz [ 248.912756][ T6987] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 249.147889][ T4849] usb 5-1: Using ep0 maxpacket: 8 [ 249.182591][T10029] netlink: 'syz.6.1837': attribute type 1 has an invalid length. [ 249.218860][T10015] loop7: detected capacity change from 0 to 32768 [ 249.285385][T10015] JBD2: Ignoring recovery information on journal [ 249.324463][T10015] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 249.413930][ T6061] ocfs2: Unmounting device (7,7) on (node local) [ 249.498070][ T4849] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 249.510553][ T4849] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 249.519030][ T4849] usb 5-1: Product: syz [ 249.526976][ T4849] usb 5-1: Manufacturer: syz [ 249.534236][ T4849] usb 5-1: SerialNumber: syz [ 249.543931][ T4849] usb 5-1: config 0 descriptor?? [ 249.630038][ T4849] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 249.698066][ T6987] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 249.866089][T10048] loop5: detected capacity change from 0 to 512 [ 249.962426][T10048] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1844: inode #1: comm syz.5.1844: iget: illegal inode # [ 250.012204][T10048] EXT4-fs (loop5): Remounting filesystem read-only [ 250.036854][T10048] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1844: error while reading EA inode 1 err=-117 [ 250.074309][T10048] EXT4-fs (loop5): Remounting filesystem read-only [ 250.094042][T10048] EXT4-fs (loop5): 1 orphan inode deleted [ 250.122689][T10048] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,block_validity,debug_want_extra_isize=0x0000000000000006,grpid,resgid=0x0000000000000000,dioread_lock,usrjquota=,errors=remount-ro,. Quota mode: none. [ 250.144161][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.197913][T10044] loop7: detected capacity change from 0 to 40427 [ 250.253241][T10048] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5826: inode #15: comm syz.5.1844: bad extra_isize 6 (inode size 256) [ 250.269980][ T4849] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 250.290560][T10044] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 250.311063][T10044] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 250.337381][T10044] F2FS-fs (loop7): invalid crc value [ 250.367699][T10048] EXT4-fs (loop5): Remounting filesystem read-only [ 250.413587][T10044] F2FS-fs (loop7): Found nat_bits in checkpoint [ 250.484126][ T4851] usb 5-1: USB disconnect, device number 15 [ 250.559342][ T5974] usb 2-1: USB disconnect, device number 12 [ 250.573745][T10046] loop6: detected capacity change from 0 to 32768 [ 250.603720][T10044] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 250.622963][T10044] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 250.763272][T10046] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 250.770004][ T6987] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 250.789105][ T154] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 250.799698][ T154] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 250.855328][ T6987] ath9k_htc: Failed to initialize the device [ 250.889095][ T5974] usb 2-1: ath9k_htc: USB layer deinitialized [ 250.975177][ T5792] ocfs2: Unmounting device (7,6) on (node local) [ 251.367255][T10067] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1852'. [ 251.400285][T10057] loop5: detected capacity change from 0 to 40427 [ 251.478540][T10071] loop7: detected capacity change from 0 to 1024 [ 251.500003][T10057] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 251.506389][T10057] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 251.666194][T10057] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 251.771451][T10080] netlink: 'syz.1.1856': attribute type 46 has an invalid length. [ 251.801947][T10080] netlink: 212868 bytes leftover after parsing attributes in process `syz.1.1856'. [ 251.894632][T10084] loop6: detected capacity change from 0 to 512 [ 251.910720][T10057] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 251.923481][T10057] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 251.979416][T10087] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 252.001619][ T26] audit: type=1800 audit(1734738788.090:95): pid=10057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1845" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 252.064495][T10057] attempt to access beyond end of device [ 252.064495][T10057] loop5: rw=2049, want=54016, limit=40427 [ 252.082520][T10084] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 252.114038][T10084] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.118421][T10065] loop4: detected capacity change from 0 to 32768 [ 252.156673][ T5698] attempt to access beyond end of device [ 252.156673][ T5698] loop5: rw=2049, want=45104, limit=40427 [ 252.281352][T10065] JBD2: Ignoring recovery information on journal [ 252.490061][T10107] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 252.529745][T10065] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 252.636299][T10115] loop6: detected capacity change from 0 to 1024 [ 252.656889][T10116] loop7: detected capacity change from 0 to 512 [ 252.704257][T10118] loop1: detected capacity change from 0 to 2048 [ 252.733524][T10116] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 252.745622][ T4175] ocfs2: Unmounting device (7,4) on (node local) [ 252.783545][T10116] EXT4-fs (loop7): invalid journal inode [ 252.794911][T10116] EXT4-fs (loop7): can't get journal size [ 252.815675][T10118] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 252.842970][T10116] EXT4-fs (loop7): 1 truncate cleaned up [ 252.859552][T10118] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.920208][T10116] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 253.002932][ T154] hfsplus: b-tree write err: -5, ino 4 [ 253.555206][T10141] loop4: detected capacity change from 0 to 2048 [ 253.590342][ T4167] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 253.608795][ T4167] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 253.686283][T10141] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.036819][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1886'. [ 254.063723][T10153] bond0: option miimon: invalid value (18446744071562067972) [ 254.089041][T10153] bond0: option miimon: allowed values 0 - 2147483647 [ 254.249183][ T300] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.364967][ T300] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.430795][T10147] loop6: detected capacity change from 0 to 32768 [ 254.510382][ T300] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.546259][T10151] loop5: detected capacity change from 0 to 40427 [ 254.573805][T10150] loop7: detected capacity change from 0 to 32768 [ 254.583821][T10147] JBD2: Ignoring recovery information on journal [ 254.633525][ T300] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.666140][T10150] XFS (loop7): Mounting V5 Filesystem [ 254.666339][T10151] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 254.719118][T10151] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 254.748843][T10147] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 254.770018][T10171] loop4: detected capacity change from 0 to 64 [ 254.784025][T10150] XFS (loop7): Ending clean mount [ 254.794459][T10150] XFS (loop7): Quotacheck needed: Please wait. [ 254.819910][T10151] F2FS-fs (loop5): Found nat_bits in checkpoint [ 254.900162][T10147] [ 254.902531][T10147] ====================================================== [ 254.909564][T10147] WARNING: possible circular locking dependency detected [ 254.916623][T10147] 5.15.175-syzkaller #0 Not tainted [ 254.921822][T10147] ------------------------------------------------------ [ 254.928859][T10147] syz.6.1882/10147 is trying to acquire lock: [ 254.934949][T10147] ffff888066f60650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_write_begin_nolock+0x2242/0x4d20 [ 254.945025][T10147] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 254.945025][T10147] but task is already holding lock: [ 254.952416][T10147] ffff888061935be0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x1cb/0x390 [ 254.963205][T10147] [ 254.963205][T10147] which lock already depends on the new lock. [ 254.963205][T10147] [ 254.973802][T10147] [ 254.973802][T10147] the existing dependency chain (in reverse order) is: [ 254.982893][T10147] [ 254.982893][T10147] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 254.991792][T10147] lock_acquire+0x1db/0x4f0 [ 254.996847][T10147] down_write+0x38/0x60 [ 255.001554][T10147] ocfs2_lock_global_qf+0x221/0x2a0 [ 255.007318][T10147] ocfs2_acquire_dquot+0x299/0xb40 [ 255.012990][T10147] dqget+0x762/0xe90 [ 255.017522][T10147] __dquot_initialize+0x2d9/0xea0 [ 255.023087][T10147] ocfs2_get_init_inode+0x154/0x1c0 [ 255.028826][T10147] ocfs2_mknod+0xdcb/0x2cd0 [ 255.033877][T10147] ocfs2_create+0x194/0x430 [ 255.038935][T10147] path_openat+0x130a/0x2f20 [ 255.044072][T10147] do_filp_open+0x21c/0x460 [ 255.049120][T10147] do_sys_openat2+0x13b/0x4f0 [ 255.054357][T10147] __x64_sys_openat+0x243/0x290 [ 255.059761][T10147] do_syscall_64+0x3b/0xb0 [ 255.064727][T10147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.071174][T10147] [ 255.071174][T10147] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 255.081726][T10147] lock_acquire+0x1db/0x4f0 [ 255.086785][T10147] down_write+0x38/0x60 [ 255.091489][T10147] ocfs2_lock_global_qf+0x202/0x2a0 [ 255.097241][T10147] ocfs2_acquire_dquot+0x299/0xb40 [ 255.102898][T10147] dqget+0x762/0xe90 [ 255.107311][T10147] __dquot_initialize+0x2d9/0xea0 [ 255.112857][T10147] ocfs2_get_init_inode+0x154/0x1c0 [ 255.118609][T10147] ocfs2_mknod+0xdcb/0x2cd0 [ 255.123660][T10147] ocfs2_create+0x194/0x430 [ 255.128746][T10147] path_openat+0x130a/0x2f20 [ 255.133875][T10147] do_filp_open+0x21c/0x460 [ 255.138920][T10147] do_sys_openat2+0x13b/0x4f0 [ 255.144111][T10147] __x64_sys_openat+0x243/0x290 [ 255.149475][T10147] do_syscall_64+0x3b/0xb0 [ 255.154406][T10147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.160907][T10147] [ 255.160907][T10147] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 255.168590][T10147] lock_acquire+0x1db/0x4f0 [ 255.173642][T10147] __mutex_lock_common+0x1da/0x25a0 [ 255.179422][T10147] mutex_lock_nested+0x17/0x20 [ 255.184702][T10147] dquot_commit+0x57/0x510 [ 255.189646][T10147] ext4_write_dquot+0x1fd/0x360 [ 255.195036][T10147] mark_all_dquot_dirty+0xf7/0x400 [ 255.200692][T10147] __dquot_free_space+0x932/0xe40 [ 255.206237][T10147] ext4_free_blocks+0x1f5c/0x2e90 [ 255.211799][T10147] ext4_ext_remove_space+0x24da/0x4db0 [ 255.217802][T10147] ext4_ext_truncate+0x191/0x250 [ 255.223285][T10147] ext4_truncate+0x9fd/0x1130 [ 255.228523][T10147] ext4_setattr+0xf96/0x1990 [ 255.233663][T10147] notify_change+0xc6d/0xf50 [ 255.238805][T10147] do_truncate+0x21c/0x300 [ 255.243772][T10147] path_openat+0x28a3/0x2f20 [ 255.248911][T10147] do_filp_open+0x21c/0x460 [ 255.253959][T10147] do_sys_openat2+0x13b/0x4f0 [ 255.259179][T10147] __x64_sys_openat+0x243/0x290 [ 255.264576][T10147] do_syscall_64+0x3b/0xb0 [ 255.269534][T10147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.275990][T10147] [ 255.275990][T10147] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 255.283666][T10147] lock_acquire+0x1db/0x4f0 [ 255.289059][T10147] down_write+0x38/0x60 [ 255.293749][T10147] ext4_map_blocks+0x9a2/0x1c70 [ 255.299124][T10147] ext4_writepages+0x160e/0x3d10 [ 255.304582][T10147] do_writepages+0x481/0x730 [ 255.309690][T10147] __writeback_single_inode+0x15b/0xe30 [ 255.315757][T10147] writeback_sb_inodes+0xbce/0x1a40 [ 255.321476][T10147] __writeback_inodes_wb+0x114/0x400 [ 255.327369][T10147] wb_writeback+0x465/0xc50 [ 255.332399][T10147] wb_workfn+0xd07/0x1130 [ 255.337248][T10147] process_one_work+0x8a1/0x10c0 [ 255.342706][T10147] worker_thread+0xaca/0x1280 [ 255.347898][T10147] kthread+0x3f6/0x4f0 [ 255.352492][T10147] ret_from_fork+0x1f/0x30 [ 255.357429][T10147] [ 255.357429][T10147] -> #2 (jbd2_handle){++++}-{0:0}: [ 255.364741][T10147] lock_acquire+0x1db/0x4f0 [ 255.369785][T10147] start_this_handle+0x12e1/0x1570 [ 255.375434][T10147] jbd2__journal_start+0x2d1/0x5c0 [ 255.381166][T10147] jbd2_journal_start+0x25/0x30 [ 255.386562][T10147] ocfs2_start_trans+0x3c2/0x6f0 [ 255.392025][T10147] ocfs2_mknod+0x15bb/0x2cd0 [ 255.397136][T10147] ocfs2_mkdir+0x194/0x430 [ 255.402073][T10147] vfs_mkdir+0x3b6/0x590 [ 255.406838][T10147] do_mkdirat+0x260/0x520 [ 255.411687][T10147] __x64_sys_mkdirat+0x85/0x90 [ 255.416981][T10147] do_syscall_64+0x3b/0xb0 [ 255.422005][T10147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.428420][T10147] [ 255.428420][T10147] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 255.436940][T10147] lock_acquire+0x1db/0x4f0 [ 255.441962][T10147] down_read+0x45/0x2e0 [ 255.446690][T10147] ocfs2_start_trans+0x3b7/0x6f0 [ 255.452391][T10147] ocfs2_mknod+0x15bb/0x2cd0 [ 255.457599][T10147] ocfs2_mkdir+0x194/0x430 [ 255.462572][T10147] vfs_mkdir+0x3b6/0x590 [ 255.467333][T10147] do_mkdirat+0x260/0x520 [ 255.472181][T10147] __x64_sys_mkdirat+0x85/0x90 [ 255.477464][T10147] do_syscall_64+0x3b/0xb0 [ 255.482400][T10147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.488815][T10147] [ 255.488815][T10147] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 255.496375][T10147] validate_chain+0x1649/0x5930 [ 255.501743][T10147] __lock_acquire+0x1295/0x1ff0 [ 255.507111][T10147] lock_acquire+0x1db/0x4f0 [ 255.512129][T10147] ocfs2_start_trans+0x2b2/0x6f0 [ 255.517684][T10147] ocfs2_write_begin_nolock+0x2242/0x4d20 [ 255.523927][T10147] ocfs2_write_begin+0x1fd/0x390 [ 255.529387][T10147] generic_perform_write+0x2bf/0x5b0 [ 255.535195][T10147] __generic_file_write_iter+0x243/0x4f0 [ 255.541366][T10147] ocfs2_file_write_iter+0x1980/0x2120 [ 255.547343][T10147] vfs_write+0xacd/0xe50 [ 255.552106][T10147] ksys_write+0x1a2/0x2c0 [ 255.556952][T10147] do_syscall_64+0x3b/0xb0 [ 255.561882][T10147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.568403][T10147] [ 255.568403][T10147] other info that might help us debug this: [ 255.568403][T10147] [ 255.578622][T10147] Chain exists of: [ 255.578622][T10147] sb_internal#2 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 255.578622][T10147] [ 255.595605][T10147] Possible unsafe locking scenario: [ 255.595605][T10147] [ 255.603246][T10147] CPU0 CPU1 [ 255.608603][T10147] ---- ---- [ 255.613993][T10147] lock(&ocfs2_quota_ip_alloc_sem_key); [ 255.619622][T10147] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 255.629439][T10147] lock(&ocfs2_quota_ip_alloc_sem_key); [ 255.637584][T10147] lock(sb_internal#2); [ 255.641826][T10147] [ 255.641826][T10147] *** DEADLOCK *** [ 255.641826][T10147] [ 255.649958][T10147] 4 locks held by syz.6.1882/10147: [ 255.655236][T10147] #0: ffff888022612ff0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2cb/0x380 [ 255.664475][T10147] #1: ffff888066f60460 (sb_writers#21){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 255.673452][T10147] #2: ffff888061935f48 (&sb->s_type->i_mutex_key#34){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x41c/0x2120 [ 255.684772][T10147] #3: ffff888061935be0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x1cb/0x390 [ 255.695826][T10147] [ 255.695826][T10147] stack backtrace: [ 255.701707][T10147] CPU: 0 PID: 10147 Comm: syz.6.1882 Not tainted 5.15.175-syzkaller #0 [ 255.710238][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 255.720317][T10147] Call Trace: [ 255.723600][T10147] [ 255.726532][T10147] dump_stack_lvl+0x1e3/0x2d0 [ 255.731214][T10147] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 255.736849][T10147] ? print_circular_bug+0x12b/0x1a0 [ 255.742061][T10147] check_noncircular+0x2f8/0x3b0 [ 255.746999][T10147] ? add_chain_block+0x850/0x850 [ 255.751935][T10147] ? queued_spin_lock_slowpath+0x42/0x50 [ 255.757573][T10147] ? lockdep_lock+0x1a7/0x2a0 [ 255.762259][T10147] ? _find_first_zero_bit+0xcf/0xf0 [ 255.767470][T10147] validate_chain+0x1649/0x5930 [ 255.772335][T10147] ? reacquire_held_locks+0x660/0x660 [ 255.777714][T10147] ? reacquire_held_locks+0x660/0x660 [ 255.783090][T10147] ? is_bpf_text_address+0x24f/0x260 [ 255.788383][T10147] ? stack_trace_save+0x1c0/0x1c0 [ 255.793408][T10147] ? unwind_get_return_address+0x49/0x80 [ 255.799044][T10147] ? arch_stack_walk+0xf3/0x140 [ 255.803916][T10147] ? mark_lock+0x98/0x340 [ 255.808244][T10147] __lock_acquire+0x1295/0x1ff0 [ 255.813099][T10147] lock_acquire+0x1db/0x4f0 [ 255.817598][T10147] ? ocfs2_write_begin_nolock+0x2242/0x4d20 [ 255.823497][T10147] ? read_lock_is_recursive+0x10/0x10 [ 255.828955][T10147] ? __might_sleep+0xc0/0xc0 [ 255.833547][T10147] ? do_raw_spin_unlock+0x137/0x8b0 [ 255.838837][T10147] ocfs2_start_trans+0x2b2/0x6f0 [ 255.843777][T10147] ? ocfs2_write_begin_nolock+0x2242/0x4d20 [ 255.849677][T10147] ? ocfs2_recovery_exit+0x280/0x280 [ 255.854964][T10147] ? ocfs2_write_begin_nolock+0x423/0x4d20 [ 255.860776][T10147] ocfs2_write_begin_nolock+0x2242/0x4d20 [ 255.866500][T10147] ? lockdep_lock+0x2a0/0x2a0 [ 255.871177][T10147] ? mutex_unlock+0x10/0x10 [ 255.875697][T10147] ? ocfs2_read_blocks_sync+0xbc0/0xbc0 [ 255.881258][T10147] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 255.887067][T10147] ? ocfs2_inode_lock_full_nested+0x177/0x1bf0 [ 255.893219][T10147] ? ocfs2_read_inode_block+0x148/0x1d0 [ 255.898788][T10147] ? read_lock_is_recursive+0x10/0x10 [ 255.904166][T10147] ? rwsem_write_trylock+0x166/0x210 [ 255.909451][T10147] ? clear_nonspinnable+0x60/0x60 [ 255.914566][T10147] ? mod_timer_pending+0x20/0x20 [ 255.919505][T10147] ocfs2_write_begin+0x1fd/0x390 [ 255.924445][T10147] ? ocfs2_readahead+0x1a0/0x1a0 [ 255.929388][T10147] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 255.935372][T10147] generic_perform_write+0x2bf/0x5b0 [ 255.940665][T10147] ? grab_cache_page_write_begin+0x90/0x90 [ 255.946567][T10147] ? file_remove_privs+0x610/0x610 [ 255.951681][T10147] ? do_raw_spin_unlock+0x137/0x8b0 [ 255.956892][T10147] __generic_file_write_iter+0x243/0x4f0 [ 255.962527][T10147] ? ocfs2_inode_unlock+0x122/0x150 [ 255.967728][T10147] ocfs2_file_write_iter+0x1980/0x2120 [ 255.973197][T10147] ? ocfs2_file_read_iter+0xb10/0xb10 [ 255.978574][T10147] ? read_lock_is_recursive+0x10/0x10 [ 255.983950][T10147] ? rcu_read_lock_any_held+0xb3/0x160 [ 255.989411][T10147] ? rcu_read_lock_bh_held+0x110/0x110 [ 255.994883][T10147] ? end_current_label_crit_section+0x147/0x170 [ 256.001128][T10147] ? iov_iter_init+0x4a/0x170 [ 256.005805][T10147] vfs_write+0xacd/0xe50 [ 256.010050][T10147] ? file_end_write+0x250/0x250 [ 256.014905][T10147] ? __fget_files+0x413/0x480 [ 256.019592][T10147] ? mutex_lock_nested+0x17/0x20 [ 256.024616][T10147] ? __fdget_pos+0x2cb/0x380 [ 256.029297][T10147] ? ksys_write+0x77/0x2c0 [ 256.033714][T10147] ksys_write+0x1a2/0x2c0 [ 256.038137][T10147] ? print_irqtrace_events+0x210/0x210 [ 256.043665][T10147] ? __ia32_sys_read+0x80/0x80 [ 256.048428][T10147] ? syscall_enter_from_user_mode+0x2e/0x240 [ 256.054496][T10147] ? lockdep_hardirqs_on+0x94/0x130 [ 256.059693][T10147] ? syscall_enter_from_user_mode+0x2e/0x240 [ 256.065768][T10147] do_syscall_64+0x3b/0xb0 [ 256.070180][T10147] ? clear_bhb_loop+0x15/0x70 [ 256.074852][T10147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.080751][T10147] RIP: 0033:0x7fd1e7d44d29 [ 256.085182][T10147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.104787][T10147] RSP: 002b:00007fd1e5bb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.113209][T10147] RAX: ffffffffffffffda RBX: 00007fd1e7f34fa0 RCX: 00007fd1e7d44d29 [ 256.121178][T10147] RDX: 000000000000007a RSI: 0000000020000140 RDI: 0000000000000004 [ 256.129233][T10147] RBP: 00007fd1e7dc0aa8 R08: 0000000000000000 R09: 0000000000000000 [ 256.137203][T10147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.145260][T10147] R13: 0000000000000000 R14: 00007fd1e7f34fa0 R15: 00007fff75363148 [ 256.153235][T10147] [ 256.156348][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.169314][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.195847][T10150] XFS (loop7): Quotacheck: Done. [ 256.214893][T10147] ocfs2: Unmounting device (7,6) on (node local) [ 256.224562][T10150] XFS (loop7): Unmounting Filesystem [ 256.747566][ T9158] bond0: (slave syz_tun): Releasing backup interface [ 256.789619][T10147] bridge0: port 3(syz_tun) entered disabled state [ 256.817270][T10147] device syz_tun left promiscuous mode [ 256.824325][T10147] bridge0: port 3(syz_tun) entered disabled state [ 257.450578][ T300] device hsr_slave_0 left promiscuous mode [ 257.457033][ T300] device hsr_slave_1 left promiscuous mode [ 257.463970][ T300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.474612][ T300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.485659][ T300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.495898][ T300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.503988][ T300] device bridge_slave_1 left promiscuous mode [ 257.510316][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.518529][ T300] device bridge_slave_0 left promiscuous mode [ 257.524799][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.535191][ T300] device veth1_macvtap left promiscuous mode [ 257.543254][ T300] device veth0_macvtap left promiscuous mode [ 257.628108][ T300] team0 (unregistering): Port device team_slave_1 removed [ 257.641640][ T300] team0 (unregistering): Port device team_slave_0 removed [ 257.653332][ T300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.665784][ T300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.722880][ T300] bond0 (unregistering): Released all slaves [ 258.569294][ T300] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.613729][ T300] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.661603][ T300] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.711732][ T300] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.807392][ T300] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.862863][ T300] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.912982][ T300] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.972013][ T300] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.081266][ T300] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.132321][ T300] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.182611][ T300] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.243087][ T300] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.334758][ T300] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.402223][ T300] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.465772][ T300] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.502891][ T300] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.454300][ T300] device wlan0 left promiscuous mode [ 260.919864][ T300] device hsr_slave_0 left promiscuous mode [ 260.926165][ T300] device hsr_slave_1 left promiscuous mode [ 260.935458][ T300] device hsr_slave_0 left promiscuous mode [ 260.941984][ T300] device hsr_slave_1 left promiscuous mode [ 260.949472][ T300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.956891][ T300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.965541][ T300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.973727][ T300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.981404][ T300] device bridge_slave_1 left promiscuous mode [ 260.988025][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.996060][ T300] device bridge_slave_0 left promiscuous mode [ 261.003446][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.014089][ T300] device hsr_slave_0 left promiscuous mode [ 261.020364][ T300] device hsr_slave_1 left promiscuous mode [ 261.028005][ T300] device hsr_slave_0 left promiscuous mode [ 261.034135][ T300] device hsr_slave_1 left promiscuous mode [ 261.040406][ T300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.048379][ T300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.056244][ T300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.063811][ T300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.071778][ T300] device bridge_slave_1 left promiscuous mode [ 261.078420][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.086222][ T300] device bridge_slave_0 left promiscuous mode [ 261.092445][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.113703][ T300] device veth1_macvtap left promiscuous mode [ 261.120313][ T300] device veth0_macvtap left promiscuous mode [ 261.126353][ T300] device veth1_vlan left promiscuous mode [ 261.132283][ T300] device veth0_vlan left promiscuous mode [ 261.139224][ T300] device veth1_macvtap left promiscuous mode [ 261.145260][ T300] device veth0_macvtap left promiscuous mode [ 261.152117][ T300] device veth1_macvtap left promiscuous mode [ 261.158269][ T300] device veth0_macvtap left promiscuous mode [ 261.164332][ T300] device veth1_vlan left promiscuous mode [ 261.170776][ T300] device veth0_vlan left promiscuous mode [ 261.176978][ T300] device veth1_macvtap left promiscuous mode [ 261.183299][ T300] device veth0_macvtap left promiscuous mode [ 261.482357][ T300] bond0 (unregistering): Released all slaves [ 261.560244][ T300] team0 (unregistering): Port device team_slave_1 removed [ 261.571033][ T300] team0 (unregistering): Port device team_slave_0 removed [ 261.581350][ T300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.597081][ T300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.649763][ T300] bond0 (unregistering): Released all slaves [ 261.702609][ T300] bond1 (unregistering): Released all slaves [ 261.806189][ T300] bond0 (unregistering): Released all slaves [ 261.889649][ T300] team0 (unregistering): Port device team_slave_1 removed [ 261.901218][ T300] team0 (unregistering): Port device team_slave_0 removed [ 261.914991][ T300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.927088][ T300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.977900][ T300] bond0 (unregistering): Released all slaves